last executing test programs: 1m5.037996162s ago: executing program 3 (id=453): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000480)={&(0x7f00000003c0)=[r1, r1], &(0x7f0000000400)=[0xffffffffffffa820], 0xea25, 0x2, 0x3}) r2 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x5, 0x1, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x12, 0x14, 0x63, 0x0, 0xf, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local}}}}}, 0x0) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10022, 0x0) r3 = socket(0x28, 0x5, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000400)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r5}}]}}) socket$kcm(0x29, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0x4, 0x4, 0x448, 0xffffffff, 0x2a8, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0xb, 0x3, 0x18}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x2, 'system_u:object_r:lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)={{0x10b, 0x1, 0xa, 0x228, 0x7f, 0x2, 0x3, 0x5fd}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1620) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000000)={'veth1_macvtap\x00', 0x44}) 1m4.963094746s ago: executing program 3 (id=455): openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) r0 = getpgid(0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[]) r2 = syz_pidfd_open(r0, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x20000) madvise(&(0x7f00002f9000/0x2000)=nil, 0x2000, 0xb) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x80002, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@allocspi={0x104, 0x16, 0x1, 0x70bd25, 0x0, {{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@private=0xa010102, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x2, 0x0, 0x1f}, {}, {}, 0x0, 0x0, 0x2}}, [@mark={0xc, 0x15, {0x35075b}}]}, 0x104}}, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x18, r7, 0x1, 0x81}, 0x14) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020}, 0x3f6) 1m3.013698119s ago: executing program 3 (id=462): get_robust_list(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)=0x4000000) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000540)="00214797357e0e", 0x7}], 0x1, 0x739, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x6) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = dup(r4) ioctl$KVM_HAS_DEVICE_ATTR_vm(r5, 0x4018aee3, &(0x7f0000000680)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) 1m2.580565746s ago: executing program 3 (id=466): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@upd={0xe8, 0x12, 0x201, 0x70bd2b, 0x25dfdbfc, {{'ctr-twofish-avx\x00'}, '\x00', '\x00', 0x400}, [{0x8, 0x1, 0x3}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) recvmmsg(r9, &(0x7f0000005640)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10022, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x5e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}]}, 0x54}}, 0x0) 1m2.230487434s ago: executing program 3 (id=473): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) (async) fstat(r1, &(0x7f0000000300)) (async) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x8}) (async) ioctl$sock_netdev_private(r0, 0x8948, &(0x7f0000000000)) 1m2.18362007s ago: executing program 3 (id=475): r0 = socket(0x11, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x13}, {&(0x7f0000001c00)="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", 0xfdd}], 0x2}}], 0x1, 0x24044015) r1 = syz_io_uring_setup(0xb83, &(0x7f0000000140)={0x0, 0x38ab, 0x10000, 0x0, 0x2a7}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000), 0x0, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000000307010300000000000000000500000d090001"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4044010) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x12, r4, 0x0, 0x0, 0x0, 0x40002262, 0x0, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="360a0000000000007910480000000000610410000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000540)={0x9, &(0x7f00000007c0)=[{@fixed}, {@none}, {@fixed}, {}, {@none}, {}, {@fixed}, {@none}, {}]}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) mount$overlay(0x0, 0x0, 0x0, 0x800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r8 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000200)={0x1, 0x5, [{0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000}, {0xffffffffffffffff, 0x0, 0x1000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0x8000}]}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000500)={0xd0, 0x0, &(0x7f0000000340)=[@enter_looper, @increfs_done={0x40106308, 0x1}, @acquire_done={0x40106309, 0x1}, @register_looper, @increfs={0x40046304, 0x1}, @increfs={0x40046304, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x3, 0x0, 0x29}, @fda={0x66646185, 0x5, 0x1}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000100)={0x0, 0x20, 0x40}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x1, 0x1}, @fd={0x66642a85, 0x0, r8}, @fda={0x66646185, 0x5, 0x1, 0x3e}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}, 0x40}], 0xaf, 0x0, &(0x7f0000000440)="e5d7b16f9ea90ac3435ab4d14583e2668952b74f28e068f350b33ea14878d855de3aea76d8c2fa65246ab830e91f3368e79ac74f42f67f188ca13890dc85067add96bd560242e89cea1ada5d1fd7fd700975621fa6eab918b05afbf05c4605e3d8e4b8f8954211f87f9dfda55ebc67ab8aad0bfa5dccb068afed21315f3bfc93359d25196ff97071b88e01574cba6ee24dd6c92ecacd76f7c286ded63b2e762118d13bf4ffb53faf3dfcefa79c165e"}) 48.937274124s ago: executing program 0 (id=636): sched_setaffinity(0x0, 0x2f, &(0x7f0000000080)=0x14f) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0xffffffff, 0x0) read$msr(r1, &(0x7f0000000100)=""/67, 0x43) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x437, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x24805}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 48.871493653s ago: executing program 0 (id=638): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x11000, 0x3, &(0x7f0000fec000/0x11000)=nil) 48.73215776s ago: executing program 0 (id=642): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "bc4a06", 0x46, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x2, 0x1, [], "bf3f"}, {0x1}, {}, {0x8, 0x88be, 0x4, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x102, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) getdents64(r1, &(0x7f0000000100)=""/72, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20000090, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0x2, 0x4, 0x3f8, 0xffffffff, 0x0, 0x0, 0x1a0, 0xfeffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@eui64={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback, @remote}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0x2, 0x4, 0x3f8, 0xffffffff, 0x0, 0x0, 0x1a0, 0xfeffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@eui64={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback, @remote}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x5, 0x4}, {0x0, 0x5}, {0x2, 0x4}]}]}, {0x0, [0x30, 0x30, 0x5f, 0x2e]}}, &(0x7f00000002c0)=""/145, 0x42, 0x91, 0x0, 0x7}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000005400010026bd7001ff03000000000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="01020400e000000200000000000000000000000008000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008011}, 0x4040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000002180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) pipe2(&(0x7f00000001c0), 0x5800) (async) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x5800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf22, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r6}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x700}}, [@generic={0x76, 0x7, 0x1, 0x4, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0xd4, &(0x7f0000000040)=""/212}, 0x94) 48.022195447s ago: executing program 0 (id=644): r0 = socket$kcm(0x10, 0x2, 0x0) gettimeofday(&(0x7f0000000040), &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) move_mount(r2, &(0x7f0000000140)='.\x00', r1, 0x0, 0x41) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}, {0x0, 0x8001}]}]}}, 0x0, 0x66}, 0x28) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)="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", 0x13e}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 48.021903358s ago: executing program 0 (id=645): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="01980000031300001c0012800900010069706970000083000c00028008000300e00000015c413394c2cd647ccea14a0fa72abaaded37e53e987e722424214f79ed6432be46dbbcbf8bc3039a06c208aa6c7b8658e45d6d0c"], 0x3c}}, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 47.862593572s ago: executing program 0 (id=647): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000ac0)={0x0, 0x0, "c08569351f2dc01a8a7dbc54910e61e9"}) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f00000002c0)={0x0, 0x23, 0x42, {0x42, 0x23, "46f3f70a7905af46a4d89a5a7d2b768dba2a688747454b38affb2a0efcf004391a4c284ba863ab3d8ff08da40767b3a2f779e7eca0e2e2412a5f55af5a197d50"}}, &(0x7f0000000600)={0x0, 0x3, 0xca, @string={0xca, 0x3, "78e3ad766cec824b9480b9685be509e189323ccc3d7138b175358df4ba0b793aee9dc4dd4a6f310a65cf47dd8e2e99e00aaa868d3f2fe3bd6991b0ca2166deca46498c9b3066e6da6d0f669ef976705f94ea99a927c019c99ac13021952870bf746ce514f23e508a1e693ed664e9e88cdbe6fe3ce7fbfbda173b58031156ec0e026cd42dbbecd453af8b3173570c8220b17e49b3a9ed009b8e45e97a6453e23fdc810cece765f7d6230f4b98f6686f75fe9a24313277dc5b375a9e531177cdbc2784c7bfb6deab89"}}, &(0x7f0000000040)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x1, 0xf00, 0x2, [0x0, 0xc000, 0x10100cf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4, 0x9e, 0x7f}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x7f, 0x40, "16f1cc01", "5cc7c4f3"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x5, 0x1, 0x9, 0x3a, 0xe}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000700)={0x0, 0x18, 0xeb, "db254ae01e494f71415e0cd202e9d8c4a79f4046de5a56fd7d7ef357f84888dcb33f2c9f8d77a110fba1e7c884afccbfaca2325fdde7ef80eb963a5d716cc5667fb00934e4a9e80379c0c44094ff07a35275be1976ee5870dd708d887824d18e88118838bf2f3cf6b8f6a084136c879a01c3239d55626cbfeadbef36b35bc6a73ee0d284217a83774ff47423e2d12add0a5eb5e688c449a665a787ac8b1f05400ea6d7c1d73df2bba871d27e1da40c356ebb147154e5c6040222c74284d7c729dd82d1f0e47dfa4a020301941d388bcef82774e696a6e159a5e917a4febf3ddabff7fa767824345a9e23a3"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xb9}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x80, 0x1, [0xf00f]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x9a}, &(0x7f0000000580)={0x40, 0xb, 0x2, "1df9"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0xfff9}, &(0x7f0000000840)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000880)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "5303"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0xb51a}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x8}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x3}}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x7ff}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x8}]}}}]}, 0x48}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, &(0x7f0000000b40)={0x0, [{0x2, 0x170, 0x9, &(0x7f00000001c0)="4b402ad7e0885d411b24e93a0c18c4eb398e847ed1476bf45e1e6d34de2cfa4f3ba69ca5290a040a0a9edd998c23"}, {0x2, 0x0, 0x10001, 0x0}, {0x1, 0x0, 0x7b0b, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x1, 0x0, 0xd, 0x0}, {0x1, 0x0, 0x7b8, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x200, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x8001, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x8, 0x0}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5, 0x400, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "8d416cfa6fc2313e"}}, 0x48}}, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x2, 0x7, {}, {}, {0x4, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "0680a685a169ba1b"}}, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@bridge_delneigh={0x30, 0x1d, 0x200, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x0, r4, 0x2, 0xed, 0x6}, [@NDA_PROBES={0x8, 0x4, 0x4}, @NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x30}, 0x1, 0x0, 0x0, 0x40840}, 0x800) 47.805178177s ago: executing program 32 (id=647): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000ac0)={0x0, 0x0, "c08569351f2dc01a8a7dbc54910e61e9"}) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f00000002c0)={0x0, 0x23, 0x42, {0x42, 0x23, "46f3f70a7905af46a4d89a5a7d2b768dba2a688747454b38affb2a0efcf004391a4c284ba863ab3d8ff08da40767b3a2f779e7eca0e2e2412a5f55af5a197d50"}}, &(0x7f0000000600)={0x0, 0x3, 0xca, @string={0xca, 0x3, "78e3ad766cec824b9480b9685be509e189323ccc3d7138b175358df4ba0b793aee9dc4dd4a6f310a65cf47dd8e2e99e00aaa868d3f2fe3bd6991b0ca2166deca46498c9b3066e6da6d0f669ef976705f94ea99a927c019c99ac13021952870bf746ce514f23e508a1e693ed664e9e88cdbe6fe3ce7fbfbda173b58031156ec0e026cd42dbbecd453af8b3173570c8220b17e49b3a9ed009b8e45e97a6453e23fdc810cece765f7d6230f4b98f6686f75fe9a24313277dc5b375a9e531177cdbc2784c7bfb6deab89"}}, &(0x7f0000000040)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x1, 0xf00, 0x2, [0x0, 0xc000, 0x10100cf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4, 0x9e, 0x7f}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x7f, 0x40, "16f1cc01", "5cc7c4f3"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x5, 0x1, 0x9, 0x3a, 0xe}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000700)={0x0, 0x18, 0xeb, "db254ae01e494f71415e0cd202e9d8c4a79f4046de5a56fd7d7ef357f84888dcb33f2c9f8d77a110fba1e7c884afccbfaca2325fdde7ef80eb963a5d716cc5667fb00934e4a9e80379c0c44094ff07a35275be1976ee5870dd708d887824d18e88118838bf2f3cf6b8f6a084136c879a01c3239d55626cbfeadbef36b35bc6a73ee0d284217a83774ff47423e2d12add0a5eb5e688c449a665a787ac8b1f05400ea6d7c1d73df2bba871d27e1da40c356ebb147154e5c6040222c74284d7c729dd82d1f0e47dfa4a020301941d388bcef82774e696a6e159a5e917a4febf3ddabff7fa767824345a9e23a3"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xb9}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x80, 0x1, [0xf00f]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x9a}, &(0x7f0000000580)={0x40, 0xb, 0x2, "1df9"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0xfff9}, &(0x7f0000000840)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000880)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "5303"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0xb51a}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x8}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x3}}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x7ff}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x8}]}}}]}, 0x48}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, &(0x7f0000000b40)={0x0, [{0x2, 0x170, 0x9, &(0x7f00000001c0)="4b402ad7e0885d411b24e93a0c18c4eb398e847ed1476bf45e1e6d34de2cfa4f3ba69ca5290a040a0a9edd998c23"}, {0x2, 0x0, 0x10001, 0x0}, {0x1, 0x0, 0x7b0b, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x1, 0x0, 0xd, 0x0}, {0x1, 0x0, 0x7b8, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x200, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x8001, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x8, 0x0}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5, 0x400, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "8d416cfa6fc2313e"}}, 0x48}}, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x2, 0x7, {}, {}, {0x4, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "0680a685a169ba1b"}}, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@bridge_delneigh={0x30, 0x1d, 0x200, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x0, r4, 0x2, 0xed, 0x6}, [@NDA_PROBES={0x8, 0x4, 0x4}, @NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x30}, 0x1, 0x0, 0x0, 0x40840}, 0x800) 47.167907114s ago: executing program 33 (id=475): r0 = socket(0x11, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x13}, {&(0x7f0000001c00)="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", 0xfdd}], 0x2}}], 0x1, 0x24044015) r1 = syz_io_uring_setup(0xb83, &(0x7f0000000140)={0x0, 0x38ab, 0x10000, 0x0, 0x2a7}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000), 0x0, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000000307010300000000000000000500000d090001"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4044010) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x12, r4, 0x0, 0x0, 0x0, 0x40002262, 0x0, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="360a0000000000007910480000000000610410000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000540)={0x9, &(0x7f00000007c0)=[{@fixed}, {@none}, {@fixed}, {}, {@none}, {}, {@fixed}, {@none}, {}]}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) mount$overlay(0x0, 0x0, 0x0, 0x800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r8 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000200)={0x1, 0x5, [{0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000}, {0xffffffffffffffff, 0x0, 0x1000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0x8000}]}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000500)={0xd0, 0x0, &(0x7f0000000340)=[@enter_looper, @increfs_done={0x40106308, 0x1}, @acquire_done={0x40106309, 0x1}, @register_looper, @increfs={0x40046304, 0x1}, @increfs={0x40046304, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x3, 0x0, 0x29}, @fda={0x66646185, 0x5, 0x1}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000100)={0x0, 0x20, 0x40}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x1, 0x1}, @fd={0x66642a85, 0x0, r8}, @fda={0x66646185, 0x5, 0x1, 0x3e}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}, 0x40}], 0xaf, 0x0, &(0x7f0000000440)="e5d7b16f9ea90ac3435ab4d14583e2668952b74f28e068f350b33ea14878d855de3aea76d8c2fa65246ab830e91f3368e79ac74f42f67f188ca13890dc85067add96bd560242e89cea1ada5d1fd7fd700975621fa6eab918b05afbf05c4605e3d8e4b8f8954211f87f9dfda55ebc67ab8aad0bfa5dccb068afed21315f3bfc93359d25196ff97071b88e01574cba6ee24dd6c92ecacd76f7c286ded63b2e762118d13bf4ffb53faf3dfcefa79c165e"}) 18.505614883s ago: executing program 1 (id=868): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xc18200, 0x19) 18.504140639s ago: executing program 1 (id=869): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) (async) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) (async) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x4, [0x5, 0xd], 0x9000}, 0x10) 18.403156807s ago: executing program 1 (id=870): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000023c0)={0x34c, 0x2e, 0x1, 0x70bd25, 0x0, "", [@nested={0x4, 0x119}, @nested={0x338, 0x11, 0x0, 0x1, [@nested={0x334, 0xcf, 0x0, 0x1, [@nested={0x32f, 0x146, 0x0, 0x1, [@generic="f5ef56146c91147563276660e594de86923b901b9c31b5127825f1868b4db9469c2df41906c1f5ee49", @typed={0x8, 0x124, 0x0, 0x0, @u32=0x7}, @nested={0x1f1, 0x6c, 0x0, 0x1, [@generic="8b82111c59", @nested={0x1d0, 0x10f, 0x0, 0x1, [@nested={0x1c9, 0x11b, 0x0, 0x1, [@generic="44e4ba7c0b0ff113b095b181686c69e6901606a6035b241060d1ba9b116c80da82d5b88cc6363112ecfcfe146d3396e45fbbf0a08b22fd28c11b96cceeebb143edb758f38e41e6198a4aac1b4f64403c0297fdc66d55feb17b3a47961e32432008a761d761630abd62e074f1aeda6ad0a673e1e2f1ef46c79d906ae0a1b56a1cb49371c5044e8535c676535532d332e91b4270db1184a76120ede03ed5473adf06033298dbeef6a61dc38f79dcbab66a59547791ab5c867c0e0244d06d7eeb09d3b84e9bad5626f647e62bd3f0", @typed={0x5, 0x6b, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x105, 0x0, 0x0, @u64=0xfffffffffffffffd}, @typed={0xc1, 0x82, 0x0, 0x0, @binary="9da6d2cfd0d56814fd84a9b4e09bfefb7e71aa6b1338a2f4b0bcf5b7da34e38272c0fb396e8da9fe6bafa86982b217883dc0a99d6f8cc8d02d65ac33bf40d09bc28a90cbe72d692943aa8ec74169b9f54f99da2135cef1a3b948b4bb65653d617abfa325b7ece7ef3a395ab715205e14add6497c4d4ccd9950c466a2121433263671d206265ab7a4afb86bcfc88d39c8da199e34acdfd9f19a20d74af1508d9ef7e25cbdbcb597005c8fd2c532208d87b50f917122d979574773357159"}, @generic="ea8e54f0deb6d4df4fed8cacb160ad53bc0360eeda91dd56", @typed={0x8, 0xb8, 0x0, 0x0, @pid}]}]}, @nested={0x4, 0xef}, @nested={0x4}, @typed={0x4, 0xfe}, @nested={0x4, 0x62}, @nested={0x4, 0x87}, @nested={0x4, 0x76}]}, @typed={0x8, 0x65, 0x0, 0x0, @pid}, @typed={0x8, 0x2b, 0x0, 0x0, @ipv4=@multicast2}, @generic="db89061eb9fbad2bf82b2a9418649da868c869b4397ab66e7f39863979f0bdf348067f0b5606ca8cdcb5b5080280648f010c688d62984d051b094fe343cb1fa22295cdcf66ca2b1cc8152ecb85f43f28d04aa546812ddb957608dc2f3b52e0e98745cc4aa9b20ab28754d0d7c05b9139d8ff8509fbe0d7d56d5710ea94b935782d99259af1a87cf89bcca8f33c9878df0b153753b7ccc2d3d65b5d8e92f7230c8b3b3d434ce7cd2f1e8dbf2cbfca3103a770996f13ed41af6f046964853f276bf8c18987b616eb8c1c752f52389cd54b7a7874ba1d9b4d2612518c8c3c9220ded49fd5ff56d71b5b5569f9421c6d", @typed={0x8, 0xb8, 0x0, 0x0, @u32=0xfffffff8}]}]}]}]}, 0x34c}], 0x1, 0x0, 0x0, 0x84}, 0x300) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc08c5332, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) (async) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, &(0x7f0000000340)={0x1, "30a1f7a9d0bf29085213658d7ccb3989272fba9d4d6e00d8b896058080b7041efd0a89fa6c1d9c7c5069ecc9967140a0270ec14693cb417b1f876b50a8b0b420", {0x1, 0x40}}) (async) sendto$rxrpc(r3, &(0x7f0000000440)="28baf14e41c77be24a148ee065136884bcafa6e3ed9cd63292e5d1dc16985d4223b8c88b4fc65a5a99367774f4f23199b255ef26aa89cf5c97714c4a4f17cda489ee8df887b0fbc5e487f476fb64e18a2d7209763640998dbd4790c5301dd7b4313de87aa6e97b85a75b4111b4c01a8e024c8a1a0a0fa5631b95f47c429dd1b901ee3073d8f181800e51d6cc7b8c97aa74542442c68fe5bb853d3176fefce1577aa176975a1c42ffd7752fe243bead49332424959106a665b129affa8a3187821c4dcf217cfb3b8ba89ffa07c3799cd4ad53e28b4916f130c36a8239d88193e9f67e6a7e193846b16e34de8bf67afed3f94acfa5", 0xf4, 0x40, &(0x7f0000000040)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x4, @mcast1, 0xffffffff}}, 0x24) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async, rerun: 32) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)={0x114, 0x23, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc358", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004844}, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffac7}, 0x94) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 18.201167874s ago: executing program 1 (id=871): r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 m'], 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x0, 0x6a98047402e98331}, 0x14}}, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x20) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mkdir(&(0x7f0000000480)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x28) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x28) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) r5 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f00000001c0)={0x79c, r3, 0x32, {0xb, 0x100004000}, 0x2}, 0x1) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x20, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) 18.023178398s ago: executing program 1 (id=872): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = fsmount(r0, 0x0, 0x0) (rerun: 32) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r3, 0x0, 0x2000fb) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000340)=0x6) (async) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) 17.632255718s ago: executing program 1 (id=874): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) finit_module(r0, 0x0, 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020000000000000033740b9261532ec9bb565b2e80e1b19dcb0257a61bfa6728fb7886cfdbdf25230000"], 0xfffffffffffffd6f}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r5, &(0x7f0000004440)={0x2020}, 0x2020) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) socket$key(0xf, 0x3, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x3}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3c}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x28}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x84, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004084}, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="e058cdb9152344042338f53bd302e4274c7a5ff1e0b634762f11620b355db71a83fb9d0b13d000f627599d3d62a6116427398a80d84db13acdf6ba41c70b1a78df96e989e5ab639ee1c0b8b72b0a6534fa7e4258753c3233751f331c7a", @ANYRES16=r11, @ANYBLOB="01000000000000000000070000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$char_usb(r4, &(0x7f0000000180)='0', 0xfe64) r12 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r12, 0x7003) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r13, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0xc000, 0x100) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='jfs\x00', 0x8080, 0x0) 17.568322651s ago: executing program 34 (id=874): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) finit_module(r0, 0x0, 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020000000000000033740b9261532ec9bb565b2e80e1b19dcb0257a61bfa6728fb7886cfdbdf25230000"], 0xfffffffffffffd6f}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r5, &(0x7f0000004440)={0x2020}, 0x2020) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) socket$key(0xf, 0x3, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x3}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3c}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x28}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x84, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004084}, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="e058cdb9152344042338f53bd302e4274c7a5ff1e0b634762f11620b355db71a83fb9d0b13d000f627599d3d62a6116427398a80d84db13acdf6ba41c70b1a78df96e989e5ab639ee1c0b8b72b0a6534fa7e4258753c3233751f331c7a", @ANYRES16=r11, @ANYBLOB="01000000000000000000070000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$char_usb(r4, &(0x7f0000000180)='0', 0xfe64) r12 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r12, 0x7003) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r13, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0xc000, 0x100) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='jfs\x00', 0x8080, 0x0) 3.707826866s ago: executing program 4 (id=1004): timer_create(0x2, &(0x7f00000000c0)={0x0, 0x6, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$I2C(&(0x7f0000000080), 0x9, 0x115540) fcntl$lock(r1, 0x1, &(0x7f0000000040)={0x2, 0x3, 0x1, 0x3fb, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) fallocate(r2, 0x0, 0x800657, 0x200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x5452, &(0x7f0000000100)) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c0c0) recvmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104006d744916663219bec7970f", @ANYRES32=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c0002800800130008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) mlockall(0x2) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060008060000971b02"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3.420209767s ago: executing program 4 (id=1012): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001f80)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0x9, r2}, 0x20) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') 3.361932396s ago: executing program 2 (id=1015): socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@getstat={0xe0, 0x15, 0x1, 0x70bd25, 0x25dfdbff, {{'cbc(aes)\x00'}, '\x00', '\x00', 0x3000, 0x400}, ["", "", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) 3.313391149s ago: executing program 2 (id=1016): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x600}, 0x0) r0 = socket$inet6(0x10, 0x80009, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000040)=ANY=[], 0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0xf, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x31}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x8014) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb8}}, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000140)={0x6, 0x22, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r9 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000340)={0x9, 0x8166, 0xa}) r10 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000340)={0x18, 0x403, 0xe}) close_range(r7, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x5c}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 3.312820625s ago: executing program 5 (id=1017): ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x1, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb0000008000008276000000", 0x22}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 3.312347679s ago: executing program 4 (id=1018): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0xe8, 0x111, 0x4b4, 0x0, 0x700, 0x2b8, 0x278, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @private1, [], [0x0, 0x0, 0x0, 0xff], 'macvlan0\x00', 'team_slave_0\x00', {}, {0x1fe}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x10, "f0b35f334454456b5a1bc219fb6b2168a1daee9330995069d01067dcc709"}}}, {{@ipv6={@private1, @private1, [0x0, 0xffffffff, 0xff000000, 0xff000000], [0xff, 0x0, 0xffffffff, 0xffffffff], 'ipvlan1\x00', 'wlan0\x00', {0x80f0adaf0a7b4ff8}, {0xff}, 0x1d, 0x81, 0x2, 0x30}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:dhcpd_state_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="07279f", @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x805) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r5) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r6, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040010) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0xe8, 0x111, 0x4b4, 0x0, 0x700, 0x2b8, 0x278, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @private1, [], [0x0, 0x0, 0x0, 0xff], 'macvlan0\x00', 'team_slave_0\x00', {}, {0x1fe}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x10, "f0b35f334454456b5a1bc219fb6b2168a1daee9330995069d01067dcc709"}}}, {{@ipv6={@private1, @private1, [0x0, 0xffffffff, 0xff000000, 0xff000000], [0xff, 0x0, 0xffffffff, 0xffffffff], 'ipvlan1\x00', 'wlan0\x00', {0x80f0adaf0a7b4ff8}, {0xff}, 0x1d, 0x81, 0x2, 0x30}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:dhcpd_state_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="07279f", @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x805) (async) socket$netlink(0x10, 0x3, 0x14) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r5) (async) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r6, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040010) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) (async) 3.132969455s ago: executing program 5 (id=1019): syz_extract_tcp_res$synack(&(0x7f0000000280)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000007c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x80}, @private=0xa012100, {[@lsrr={0x83, 0x3}]}}, {{0x0, 0x2, r1, r0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x40}}}}}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$kcm(0xa, 0x922000000003, 0x11) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000180)={0x200, 0xff, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000240)={r7}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000240), &(0x7f00000001c0)}, 0x20) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b2c25fe80070000000000000000000009ffffffe000"/40, 0xfd1b}], 0x1}, 0x20040000) ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, &(0x7f0000000000)={0x9, 0xdb99, 0x7, 0x0, 0x8, 0x7d626ff7575f968c, 0xd}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x158, 0x18c, 0x203, 0x0, 0x19030000, 0x248, 0x2e0, 0x2e0, 0x248, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0x101000000, 0xff000000], 'bond_slave_1\x00', 'veth1_to_hsr\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0xf0, 0x158, 0x0, {0x1000000}, [@common=@dst={{0x48}, {0x7fff, 0x3, 0x7de91c6f22c9938, [0x9, 0x1ff, 0x87e, 0x2a, 0xafd4, 0x9, 0xa, 0x7, 0xffb, 0x1000, 0x2, 0x200, 0x9, 0x0, 0x7, 0x3], 0xa}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x4, 0x1, 0x3, '\x00', 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x1, 0x1, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x48) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000080)='./file0\x00') r9 = creat(&(0x7f0000000040)='./bus\x00', 0x20) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r10, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x6, r9, &(0x7f0000000240)="2692c3", 0x3, 0x6, 0x0, 0x0, r9}]) syz_emit_ethernet(0x66, &(0x7f0000001a40)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd601200b000303a0000000000000000000000000000000000ff020000000000000000000000000001a0009078000000006027738200000000fc01000000000000000000000000000020010000000000400000000000000001"], 0x0) 2.502608593s ago: executing program 6 (id=1020): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x8982) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000000c0)={"8858ed6b", 0xa8d2, 0x6, 0x2, 0x0, 0x1, "f700000000000000000500", '\x00', "0200", "72b59d61", ["50b7fdf0fffffffffdffffb6", '\x00', "0c436d743c97c443084000", "ff81000000008000"]}) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="020022a1d0b842a87bc402ba1108520e0fd384744c0d0e123b7b379025719a70b29d22c2be12a6162ff17cb3d6ac869ef28f65d0d64c327cd8deb0e5b08383a6f5a13cf7f4", @ANYRESDEC=r2, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000808000c00a60a0000", @ANYRES16=r3], 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) 269.02882ms ago: executing program 6 (id=1021): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x7, 0x100ba7) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r1, 0x36) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xffffffffffffffff) r4 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @buffer={0x0, 0x1000, &(0x7f0000001d80)=""/4096}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x0, 0x30, 0x0, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r5, 0x107, 0x14, 0x0, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x50, r7, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2f3}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8020) ioctl$IOC_PR_RESERVE(r0, 0xc01070ce, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60, 0x4000}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20010, 0x284a0}}}}}}]}, 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) syz_open_dev$loop(&(0x7f0000000200), 0x7, 0x100ba7) (async) pipe2$watch_queue(&(0x7f0000001180), 0x80) (async) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r1, 0x36) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xffffffffffffffff) (async) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) (async) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @buffer={0x0, 0x1000, &(0x7f0000001d80)=""/4096}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x0, 0x30, 0x0, 0x0}) (async) socket$packet(0x11, 0x3, 0x300) (async) getsockopt$packet_int(r5, 0x107, 0x14, 0x0, &(0x7f0000000040)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x50, r7, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2f3}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8020) (async) ioctl$IOC_PR_RESERVE(r0, 0xc01070ce, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60, 0x4000}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20010, 0x284a0}}}}}}]}, 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) (async) 267.934206ms ago: executing program 5 (id=1022): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) syz_clone(0x2a000011, 0x0, 0x60, 0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r2}}, 0xc) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000180)={0xc, 0x8, 0xfa00, {0x0}}, 0xfffffffffffffe82) ioctl$SNDCTL_DSP_GETISPACE(r0, 0xc0045002, &(0x7f0000000000)) 267.618256ms ago: executing program 2 (id=1023): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) (async, rerun: 32) r2 = io_uring_setup(0x48f0, &(0x7f0000000040)={0x0, 0xe45e, 0x8, 0x3, 0x2c7}) (rerun: 32) io_uring_enter(r2, 0x3872, 0x1e9d, 0x0, &(0x7f00000000c0)={[0xab1]}, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_crypto(0x10, 0x3, 0x15) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x8, 0x80000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async, rerun: 64) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (rerun: 64) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f00000001c0)={"568139cb5050a7a31ebfc4330c2bf68f86101d9a301cbe14b15f4f23031ceb319db01a783479d6b9a1201fb1cc7235f57f425131b1d59b14c7588e103ad23d61fc6b05b60536a1611da4d3a6a06d308650343e59d307e34d8c2ec3ef05629a47f994dd2e9f8b9ce05b338ae7db5267bc4082bd43ca93b78947a7c79e82df466d4fee2b222f1ebde976d2272a4f52329796330ee917cc4f5b3ec45ac1ecdaaf3dffe03c40b7c209e44cfeb08aad00e1b48da4289228d7d82d4f6a661942ace64f115d3cc6ac80f74420c390d89e7ab2133567aa41047d775e333184cc0b468ec5eb9bc3cb0fa00516e5452bf32a9e760f07efd5a5e5eb37eaff28ef92bb59498369808bdd310a4a95a5414a8ff450411ff67d3167eec8372455a19c0c5a608adfebded6974660fd85308a07860e16f62963da37448d6e1218f2092fb3d1662804623b63a07f3e5e881df9a5ac27ce3f1519003118aa6170ff423eb292dc70147bde37963f72d0642660e7107753167886fc10e108631a9ea4d6752145b8646187ba7e152b6bcbcedd6b83fb9435d5c8e8d5d25a3f173745eab94a4a296572d459a50d622c8769dc57a7cdf7efe9f259dc36f538d1836362f1bcb2c4ebceae7e3655d5e98ba481906f284bd03716c15894eca8cbf8302dc8e2c21736b697b5f868e8af96fa8bbb1ae56571616a70ce05970d1e4142f303f7586fd2fc6f0ee3dce1db6524dd6aa28faab046e074df38430a49e8a6dde71028f16539744b7867e19c856e670e8b799d52da435bb07beea6274bf512e7d6ebb8ff8f83a52e4d13602e7d4675a798a12c898ad5b00caa34313ff8fb6c3407cf815eca9795cffd9a24959653cc816851048ebf0772bebdd3ff9b8cfbd2c65c30e41586b00a14943e4815361789158139d440c4f627edb8ed59e1ca0bb0c60106e09635fa9335677337c554db885f75b899638e8df1ea9796f8258de36636346ab768856bbdfc51843a53701423d75c1f43be24469aa03d366bbfb81218b31e5c0ad716efea52175c2fa78317cafb16ee173eb5e9428509ca4c8f9bf798adc7da1758a9c0334e44200c0578495ff805fce84456205caa70f0976a8603f84cb542d0df1416602321c587556785af525ddf5548b4f51113c52a7a17042faf6c8c02d8d1835e0f67f60ab392c20fc12188db029e45bb77cfccc423671d52ec5a92d08c2bb27a676b66f3b89ac084d99e3f516426a015268a1f3fb91b13c8baba49a0765a305c13cd1f47b3ea7a6393182759b614a08d36192a8b68abef6e5c16849452c74af3a9f854e1f2bc1c2eac2f055f8ffd8fdaa6bb04a68850c585f433c0e6b8dba1401fce5aab11d75d2323d8079891175096e31013ca0a3763511c86f2fbc31a33458c52059ebe253dcd3e837fed39765a11842028df450479dd56e1325cd8d088ff12a8f7dd23f2"}) (async) ioctl$KVM_CAP_HYPERV_SYNIC2(r8, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000100)={0x2, 0x0, [{0x400000b0, 0x0, 0xffffffffffffffff}, {0x400000b1, 0x0, 0xfffffffffffffff7}]}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) fanotify_mark(r5, 0x105, 0x4800003a, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 32) read$FUSE(r5, 0x0, 0x6c) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000101}, 0x84) 267.245102ms ago: executing program 4 (id=1024): r0 = socket$kcm(0x10, 0x3, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000000)={@random="e7842a3e0090", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x4, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2f, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet(0xa, 0x1, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0xfd03, 0x0, 0x0, 0x5, 0x4}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)="1c", 0x1, 0x7fff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@delchain={0x494, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x458, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x60, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x388, 0x1, [@m_ctinfo={0x100, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x830}}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_skbmod={0x90, 0x4, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="7d04a5219f97"}]}, {0x5, 0x6, "cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x178, 0x1b, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x1, 0xffffffffffffffff, 0x0, 0xefb}, @loopback, @empty, 0xffffff00, 0x800}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x6, 0x8, 0x9}, @local, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x357a, 0x9, 0x7, 0x101, 0x5}, @broadcast, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5f2, 0x40, 0x5, 0x1, 0x1}, @broadcast, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x20000000, 0x7, 0x59c3}, @loopback, @loopback, 0xff}}]}, {0x85, 0x6, "eef24a41a52f4314740d880a9749ccbff0e34c74cfcac1e63977a597552daff459d49bffeac63ea994857207934fd2d00f52f25f0f3d8c80b3a218a170d8b1961a361663d049269537cb537e3789e52bb3db1eec99b6cdd8dd022491e57495f8bd3687340df10a1e43f1a2790d3910c094f2c7203385622c8498933c3e883b83b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x7c, 0xc, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x5, 0x5, 0x5, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc00}]}, {0x8, 0x6, "2ff4fb63"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x494}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 211.962134ms ago: executing program 4 (id=1025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x7, 0xff, 0x652, 0xd, 0x6, 0x3, 0x6, 0x3, 0xfffffffe, 0x8001, 0x10, 0x1d, 0x1e, 0x2, 0x7, 0x6}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000540)="bad330fbc9b5544972e7a5eae41b", 0xe, 0x40080c1, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0xd8, 0x6, @random="32b40c6fc44c"}, 0x14) sendto$packet(r8, &(0x7f0000000380)="c1858aec1d0a06756f6608f23687", 0xe, 0x24080000, &(0x7f0000000240)={0x11, 0x19, r7, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000e14080025bd7000fe47d0250800030000000800010001ff660e82003c0005000000080003000100000008000300010000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000008940)=ANY=[@ANYBLOB="140200002000010003000000fbdbdf25040217800c00030008ac0f00000000001400010000000000000000000000000000000000d401348004001d008501d380e1662689da22627e45865e073788ceb439fbeb265c5fc45bf94a93758a726e7f89afc133c0e715c7716d53211ff51877d54060166cdde1ec85737d0400ab80080004000800000008004b00", @ANYRES32, @ANYBLOB="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"], 0x214}], 0x1, 0x0, 0x0, 0x400c841}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000040)={'team_slave_0\x00', 0x8}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000030700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfbe4ffffff0001000001f9580dabdf5ddc91967c2008000240000000000c00010052415445455354000900020073797a3219d4b98b550589f6804cddf5303b69f9a3", @ANYRESDEC, @ANYBLOB, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES32=r0], 0xa4}, 0x1, 0x0, 0x0, 0x4000890}, 0x20008040) 211.634422ms ago: executing program 6 (id=1026): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x109000, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0xfffffffd, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, 0x0, 0x0, 0x0}) move_pages(0x0, 0x2f, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0), 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) r2 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2) fcntl$addseals(r2, 0x409, 0x8) mmap(&(0x7f00005a5000/0x12000)=nil, 0x12000, 0x8, 0x13, r2, 0xb44f2000) close(r1) 211.176699ms ago: executing program 5 (id=1027): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="060000000400000000000000080000cb000000005065f5601aa872f288f5338c309c699c74eb90dd3adaad2bbd3e9218cd9ee835562299f2d552d41a07a7b5e1b7024a2782ad18f50a2fb60ff0a07051b4b4a4ff2176d58c9b42e89376eaaedeade5b917307d71812744c730a53faceecfc4e151c7b895d22d30c4fe29e0122b4cfd168024791a0f08b1ec1577d668803244a3d3d98a7e89de979ed75f208020890ae06f63863adb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8935, &(0x7f0000000300)={'veth0_to_team\x00', @ifru_map={0xffffffff, 0x80000000, 0x0, 0x9, 0xd, 0x7c}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$sock(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001400)="12b5ca8883a72c61be64d1809e4e551c8fcc795bacbc79d1a786c09a1861dfb427e430bee5b00ac73434620f11a914ef7cf7658efc365a26b43990993f60d4ffeb9cc31d7d5fc06ba7c3a4d828f40fca355cff79686f12971618904dc7d09e85e7a5f9194c4cae7983ee20f6c522b89ecc73c43438aad7dd15ff4738f5e4e1b7713142e7ff6cfc1b6cf7baba9ebf3b471cd0a72011fef02b46e280ad7a8c42d24bfb2ffe1518bc0fea207ec37a9e388c9dea8124df3f50a75f03df8d30d7b3b73e274042a52c058e1d85ef3b420b4dfce815cff6265e625a61b6fca9699edaadd192a3ae60c765260d1cbfb21f0cc30d8128b3783867b85873de07b02635d5573f9e578094a3ce6efbf44818daef38e14005a360909d226d7e13a86f6c83b6aaf615b6a2642d17bc2c56b8b0f8209e20ec1e0f58b0486493e511ab0a45b44a87340a9052ef5fba93c83753f1b101a744407f54d052188087c1cf43de80fd7bd5f3ce8585b5499959e6c3f5e17ae837d7c5627abb604947ad9906d641658f01464f48244182de8d5a8d037403ad4a964e2124177771a84806cda0682d58743928d2d16d83fd8b706a9669ac7605e8d857ac586dc2eda90715951c21bd116ade52f03cd61f3874aaefa77da678450228eb476d84bf175564a215e1683ced4bb9adba5daed835c6b38b61b213834aca56b86259784addb8601d26a42ad637ee296cd4382aaa7c1eaa5cbfa3a7177390bc646916aeb885d2dd43fc5b2dbbd2d184ba6cc6a439b95b5d814a8582405635b5c6bdb41c24af7a10bbd264eb2308a800a09705ac7856a7ac993cb4d88fea4cd1d5cf9e82e10c4badb996f4c0d5fd5866baf90a07d8777f793feb9250e22dd5190aa26c2a31412f1b41e0a65d0e435a9c5ebbf5205f6c6a117ce1fb16e8eb797e7d3eb5d62178dc0441941e9cb464814982ebe54195d73113efc971799121683f6e85d24ad6f21023868327b67446a36ebffda572b90f9b228a03b612e7e0ca09aac6b5710fc90f51c0efefb69b5d26ba9a1d8954832b1370d099d09c07fb2893d57d617ec0d626f1f96ee1608e0f8d9ca1b491578d639ac74b3ea568a474707ac756555d0ae9cdc609609e30d7ef2648fb8baa5854e58b60fac9ec9670c620ce6dcf3bbcca971cb5bf37462febde30e3865960627ceb15a11dd891160a2fcbb682c94a7de4e00fff20774364ffc4bfa31173261f1684dbbaa9addf0d9bc43539a7c09c6b98769aecf8529402bc66e37f0f20580e8e5f59ec48979957552fe17b897dcb4ed1a8d0fdf68d8c065c9d3501b387cf08c681326fcd79e7104eb50bc58a0140b594ad57b8d4be0c50f98e9c3e323d0a57001f8c6a094a7908315c7d7b33227861d2035649bb91daf77776e11159f3ebf7f3ed576adfc364f363e6f474dbbe3500c62c74193e7102fdf57b345066a6ebe47b4b469187631b586676e8e449fa215444366baf5d675f637a0f52c36a042d74957e94bd6d87061675da18128f69106970a9492d76dc312884bb7fcd88ca7e13f2914ba817724bc97ab634e845dfd1ab40344c33c7c202674ef959378abaf3f4fa038a6bbec31f5bd88f81240d2722dfa5e8621eb604db9ae06d49f0a56d64d525f3d41b367ed4d459f21baa3dc43c7cbe096f15bead83bc5ffe2f82128f2943a479556a39ab661bf0a86e0ad0520ab015112eeb06c13abc0da61cc6bf9508182d142696a4670fef7dcfa7a7e09f673c992f3acd4bafa7874c8bf9dc362943d7cd3c14d32bb7a8c3e3f1f55f500eca0c6fd0f199fefe601857e5307660c000cbd8f83f64e2afeb931f5dbba2d538f1c1d78c6ecd14af198f9e0ae4a8e2ef6cda63e059f5b3137946434418fd8920753c3ea5d054ad5d3da2749c94b23018be9495831a1ac647783823ac4f554bea483ee919824516f8d3d9d90753d69dd6375f0edafc98716d2aa7dbbf73208ee017fddec8c994cb5df3f74bfed87db0b88076c430495ce8a39b4b61003bb6c0e12a2f6d41a994537dadc0b389d5a1049e26b968d4aa8ded4fc38dec2ab5b14b5d0d0e24b37875e17d1066e0b04c807ef6712034f0cbd899e5cfd68143e0c3865c00a18fc7001fe9386acb55614fb7c739aef69bf21b8364e407fdb62e068359017714809d3a0b61b8bd046119f2a8e71f17908da23fbe13e50eafce63abba77a07695782fb01423efffe421bc9bede0df8ff1e163f677178eb84aec1c8517ca5a503fddba2a15878d0bf1bd255671f17417692a950fb0181150a08868107071661984c0099d588cc9456eb457fcb5fc37cec48a30aa0aa83251394fc1ec9cd0be2b7b95798a59ffd1d0a4b62e82de24bc54ad7c7385371bd27469d2631167e6c021f01f0e5ebf3819cb1f07e1cec4813ef51cc0b8e9c1069e472876e8721b81d64967edb507724fefb6128745623f6c3e520812ae1f373901d9e8f662d45aa7a1d51709960f82dc7580af43ca338631eb32259564e3379dbe0dc3bd700c8c7b04b66cff0b07d930e7a166fce6b0191283451c8dd50774b6c8d3adadd024c3faf1cf2ca2bc8d45804da21b56eb296a4f80b9a3a99fc6557b32de7db3c9637c8d481b29211c304127bf1504d6e5f9bc410d321d7cf28d55cc2f51eee3", 0x74c}, {0x0}, {&(0x7f00000006c0)}], 0x4}, 0x800) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x1b) io_setup(0x251, &(0x7f0000000080)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f0000000140)={0x25, 0x0, 0x41, 0x8, 0x0, r4, 0x0, 0x0, 0x4000, 0x0, 0x0, r4}]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={'sha384\x00'}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x2}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x3}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xa320, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x8000000, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0xfffffffc, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x400, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x58000000}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000}, {0x0, 0xe3, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800, 0x7fff}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x801}, 0x0) r8 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 153.145176ms ago: executing program 6 (id=1028): shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) (async) r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/188) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000000c0)=""/251) (async) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000000c0)=""/251) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffa000/0x3000)=nil, 0x4000) (async) shmat(r1, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x1000) (async) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x1000) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}]}, 0x2c}}, 0x10) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffb000/0x2000)=nil) open$dir(&(0x7f0000000300)='./file0\x00', 0x210040, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x400000, 0x0) (async) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x400000, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000003c0), r3) (async) r5 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) getpeername$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) (async) getpeername$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) getpeername$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14) (async) getpeername$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000640)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000680)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000006c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001080)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001040)={&(0x7f0000000800)={0x810, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x158, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x6e, 0x2, 0x3, 0x6}, {0x1000, 0x7}, {0x292e, 0x6, 0x3, 0x4}, {0x0, 0x0, 0x5, 0x6f0}, {0x9, 0x3, 0xd, 0x2}, {0x4, 0x1, 0xf7, 0x7}]}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r10}, {0xfc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r12}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff81}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r17}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x810}}, 0x4000) 152.750244ms ago: executing program 2 (id=1029): r0 = fsopen(&(0x7f0000000000)='bdev\x00', 0x1) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, 0xee01, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x7}) (async) quotactl_fd$Q_SYNC(r0, 0xffffffff80000102, 0x0, 0x0) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) quotactl_fd$Q_SYNC(r1, 0x8000000040000183, 0x0, 0x0) (async) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x5) ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f00000000c0)) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000001140)={&(0x7f0000000140)=""/4096, 0x4000, 0x1000, 0x9, 0x3}, 0x20) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000001180)=0x7) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000011c0)={0x0, 0x0, '\x00', @raw_data=[0x1, 0x0, 0x8, 0x5, 0x1, 0x9, 0xfa0, 0x8d0, 0x6, 0x3, 0x0, 0x3, 0x5, 0x2, 0x7ff, 0x1, 0x9, 0x9, 0x1000, 0x4d02bf73, 0x6, 0x400, 0x10, 0xfffffff1, 0x8, 0x7ff, 0x0, 0x4, 0x81, 0x8, 0x9, 0x4]}) (async) setsockopt(r1, 0x6, 0x5, &(0x7f0000001280)="a3dbf4bc7afb2c7c9b2f506ea634f118e4b79dc78c4b1a32ce1d2589a602c9e5e604f7ef7998c83e2d9be66f135b54dd630af4b14ec584e7821e6b6cf0018df06a68a60f265d47181b9fa0ab6dd8d34a8e87f23251c9e8abb6353edbac34640b600a3f715231ab32632677f3d34d931cae0198895e0fdd7b4c5fa1490185b8d65b4bfeb146ef3ebc258aa7eb314c81a823e4a6a63e81588f571053a08243f0084f9615f1fdfbfd84c0601593451dfd799231c4281dfa79614f217d8cec280939d62f1969ba4aeff4816aed17c72b9fefcb0fbe21c6fbaaff86", 0xd9) r2 = syz_open_procfs(0x0, &(0x7f0000001380)='stat\x00') (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001400), r1) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x14, r3, 0x8, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, r4, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r6 = syz_open_dev$video(&(0x7f0000001680), 0x4, 0x208000) ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f00000016c0)={0x6, @output={0x0, 0x0, {0xe52f, 0xfffffffd}, 0xb8b1, 0x82c}}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000017c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000001bc0)={0x7, 0x2, {}, {0x0}, 0x80, 0x6}) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000400, r7, &(0x7f0000001c00)) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000001c40)={0x0, 0x7d, "d6f092c0c22dbe39e31723f97ef26456c2726c692255123c5ee562e695a422c052b177a767dcc7e3dfc77dddad8a18d3ad644a2b26764ebdc8c3eabc9bd38bcb9abb2e4914e3f169ea10e3fd1fcfbe8c525d7a28ef64414de68d944d8f1a90289698020fd6576ef313230edb2a51e5a5700e330dfc82484c79ecbea191"}, &(0x7f0000001d00)=0x85) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000001d40)={r8, 0x6000}, 0x8) read$qrtrtun(r2, &(0x7f0000001d80)=""/64, 0x40) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000001dc0)={0x8, 'dummy0\x00', {'ip6erspan0\x00'}, 0x3}) io_uring_enter(r1, 0x4c5d, 0xa1a3, 0x28, &(0x7f0000001e00)={[0x8001]}, 0x8) socket$qrtr(0x2a, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000001e40)) (async) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f0000001f00)={{0x3, @name="0c97c32366a0a44055ea426a5dc26d6f51375b4c63a1e00bf65b248682cbde1b"}, "ab1f8a2f29d3dfe96a224c59ef52128674a80a7a739107b6ffaf71becfd88267", 0x3}) 152.169512ms ago: executing program 5 (id=1030): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f00000000c0)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000004001500090002000000035c3b61c1d67f6f94007134cfce1e090000001fb791643a5ee4ce1b14d6d930ede1d9d322fe7c9f8775730d165ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3f09ad809d5e1cace81ed0bffece0b42a9ecbee5dd6e4edef3d93452a92954b4337000000008af26c8b7b55f4d2cb1df0966736a1dfe444c65ac5b348eac7c2ea475327557ba566236ceb0000000000", 0xd8}], 0x1}, 0x4000) 151.917932ms ago: executing program 6 (id=1031): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000040)='hfsplus\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2, 0x10, 0x80, 0x4, 0xfc, 0x2, 0xff, 0x3, 0x1e00}, [@RTA_PREFSRC={0x8, 0x7, @local}, @RTA_MARK={0x8, 0x10, 0x7}]}, 0x2c}}, 0x0) 64.867875ms ago: executing program 2 (id=1032): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cd21d3084d94d35486dd", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="70000000000905030000000000000000000000000900010073797a31000000000c00048004000140000000003c0002000c00028005000100000000002c000180140003040000000000000000000000000000000014000400fe8000000000000000000000000000bb08000540"], 0x70}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000580)="b3"}) 61.935737ms ago: executing program 5 (id=1033): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c060000a13f010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000004200400140014007465616d5f736c6176655f300000000008"], 0x3c}}, 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeaf, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeaf, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000640)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000640)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) r3 = socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x8) close(r4) (async) close(r4) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001, 0x0, 0xfffffff9, 0x4}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001, 0x0, 0xfffffff9, 0x4}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) 11.210624ms ago: executing program 6 (id=1034): fsopen(&(0x7f0000000280)='cifs\x00', 0x0) (async) r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r2) (async) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="944cf7", 0x3}], 0x1}, 0x20000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='vegas', 0x5) sendto$inet(r5, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r6, 0xc0186445, &(0x7f0000000040)={0x2, 0x2}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='\x80@\x00\x00\x00\x00\x1b\xea\x83_\xa0-\xd2\xf8}\xbb\x01\xfd\xcf\x02\xa0*\x89\xc3\xd8\xe4m$/\xd7z\xb5\x994\x00\x00n\x86\x83t\x19\xf4\xf546f\x8b)\x90\xc9\x01\xfb\x82-uG` 5\x85\xa1gh4^I\x06\xa6\x8c\xc2o\x82=\b\xd8\xa9\xc2kX\x0f\x8f\x80DKnA1\xbb3,\xd8\x7f\xee(\xdd\n\xd4\b\xc9r\xcb\xe4\x90\x9d\xaf\r\xab\xab\xa6\xf2_\xcc\x85];w\x01\xe2\x88\x9e\xcaUs\x91\xbcnp\xd1~\xb2ns\xc1\xc5\xceV\xb9!\xf9L\xb5?I', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\\\\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) (async) write$nci(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="51040101"], 0x4) connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x8001, @none, 0xfffe, 0x2}, 0xe) (async) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x1) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 0s ago: executing program 2 (id=1036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x20, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1404, 0x1, 0x70bd2c, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x20004018) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r2) 0s ago: executing program 4 (id=1037): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000040), 0x4) r1 = syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000000)={0x15, &(0x7f0000000280)=[{0x41, '\x00', @data=0xfff, 0x2}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="011600000000000000000100000008000100", @ANYRES32=r5, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000009000300060000000400040008000600", @ANYRES32=r3], 0x5c}, 0x1, 0xf000}, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f0000000040)) (async) socket$unix(0x1, 0x2, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0xc8, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x54, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x9}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x8}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x13}, @TCA_FQ_FLOW_REFILL_DELAY={0x0, 0x9, 0x3}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xba06}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x101}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xaced}]}}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1a, 0x1, {0x8, 0xc, 0xc89f, 0xfff75ef7, 0x0, 0x8001, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x1, 0x8, 0xfc000000, 0x0, 0x80000001, 0x4000, 0x2}}, {0x8, 0x2, [0x1, 0xba7]}}]}]}, 0xc8}}, 0x4048000) kernel console output (not intermixed with test programs): oute_socket pid=6725 comm=syz.3.207 [ 70.045190][ T29] usb 6-1: USB disconnect, device number 3 [ 70.155708][ T6747] syzkaller0: entered promiscuous mode [ 70.157644][ T6747] syzkaller0: entered allmulticast mode [ 70.281899][ T6758] netlink: 'syz.2.216': attribute type 5 has an invalid length. [ 70.307204][ T40] audit: type=1400 audit(2000000011.789:353): avc: denied { read } for pid=6757 comm="syz.2.216" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 70.437745][ T6776] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20002 [ 70.495685][ T6782] dummy0: left promiscuous mode [ 70.499282][ T6782] veth0_to_bond: entered allmulticast mode [ 70.507599][ T6788] netlink: 'syz.3.224': attribute type 2 has an invalid length. [ 70.687980][ T6812] input: syz1 as /devices/virtual/input/input6 [ 70.706682][ T6805] team0 (unregistering): Port device team_slave_0 removed [ 70.712356][ T71] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 70.712862][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 70.720668][ T6805] team0 (unregistering): Port device team_slave_1 removed [ 70.727353][ T6805] team0 (unregistering): Port device ip6erspan0 removed [ 70.864484][ T71] usb 6-1: config 0 has no interfaces? [ 70.867695][ T71] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.870637][ T71] usb 6-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 70.873394][ T71] usb 6-1: Manufacturer: syz [ 70.876880][ T71] usb 6-1: config 0 descriptor?? [ 71.082692][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.086966][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.097954][ T71] usb 6-1: USB disconnect, device number 4 [ 71.542396][ C2] net_ratelimit: 3 callbacks suppressed [ 71.542409][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 71.723804][ T6831] __nla_validate_parse: 8 callbacks suppressed [ 71.723822][ T6831] netlink: 40 bytes leftover after parsing attributes in process `syz.0.238'. [ 71.727384][ T6837] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 71.730890][ T6829] IPVS: stopping master sync thread 6837 ... [ 71.803100][ T6847] netlink: 32 bytes leftover after parsing attributes in process `syz.1.244'. [ 71.807560][ T6847] netlink: 32 bytes leftover after parsing attributes in process `syz.1.244'. [ 71.811330][ T6847] netlink: 32 bytes leftover after parsing attributes in process `syz.1.244'. [ 71.818144][ T6847] netlink: 32 bytes leftover after parsing attributes in process `syz.1.244'. [ 71.822045][ T6847] netlink: 32 bytes leftover after parsing attributes in process `syz.1.244'. [ 71.826236][ T5959] IPVS: starting estimator thread 0... [ 71.832558][ T6847] netlink: 32 bytes leftover after parsing attributes in process `syz.1.244'. [ 71.836331][ T6847] netlink: 32 bytes leftover after parsing attributes in process `syz.1.244'. [ 71.869403][ T6858] netlink: 'syz.2.248': attribute type 10 has an invalid length. [ 71.923948][ T6855] IPVS: using max 43 ests per chain, 103200 per kthread [ 72.045263][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'. [ 72.048136][ T6870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.251'. [ 72.050924][ T6870] netlink: 'syz.1.251': attribute type 20 has an invalid length. [ 72.059515][ T1142] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.059588][ T6870] netlink: 'syz.1.251': attribute type 20 has an invalid length. [ 72.062433][ T1142] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.068068][ T1142] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.075783][ T1142] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.125909][ T6876] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 72.411244][ T6900] netlink: 'syz.2.259': attribute type 21 has an invalid length. [ 72.592398][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 72.623415][ T6912] capability: warning: `syz.1.264' uses 32-bit capabilities (legacy support in use) [ 72.728139][ T6928] kAFS: unable to lookup cell 'syz1' [ 73.033259][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 73.033270][ T40] audit: type=1400 audit(2000000014.509:382): avc: denied { relabelfrom } for pid=6944 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 73.043154][ T40] audit: type=1400 audit(2000000014.519:383): avc: denied { relabelto } for pid=6944 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 73.050838][ T40] audit: type=1400 audit(2000000014.529:384): avc: denied { create } for pid=6944 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 73.057872][ T40] audit: type=1400 audit(2000000014.539:385): avc: denied { ioctl } for pid=6944 comm="syz.1.273" path="socket:[12194]" dev="sockfs" ino=12194 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 73.102244][ T40] audit: type=1400 audit(2000000014.579:386): avc: denied { write } for pid=6948 comm="syz.2.274" name="mouse1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 73.293810][ T6962] openvswitch: netlink: Message has 239 unknown bytes. [ 73.340058][ T40] audit: type=1400 audit(2000000014.819:387): avc: denied { write } for pid=6964 comm="syz.1.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.365043][ T40] audit: type=1400 audit(2000000014.849:388): avc: denied { setopt } for pid=6959 comm="syz.2.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.371625][ T40] audit: type=1400 audit(2000000014.849:389): avc: denied { read } for pid=6959 comm="syz.2.277" path="socket:[15998]" dev="sockfs" ino=15998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.632268][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 73.763097][ T40] audit: type=1400 audit(2000000015.249:390): avc: denied { connect } for pid=6981 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.771530][ T40] audit: type=1400 audit(2000000015.249:391): avc: denied { read } for pid=6981 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.825096][ T6982] xt_hashlimit: size too large, truncated to 1048576 [ 73.872597][ T29] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 74.023643][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 74.026718][ T29] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 74.029754][ T29] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.039264][ T29] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 74.042178][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.044871][ T29] usb 6-1: Product: syz [ 74.046205][ T29] usb 6-1: Manufacturer: syz [ 74.047695][ T29] usb 6-1: SerialNumber: syz [ 74.052174][ T29] hub 6-1:1.0: bad descriptor, ignoring hub [ 74.054498][ T29] hub 6-1:1.0: probe with driver hub failed with error -5 [ 74.273840][ T29] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 74.662403][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 74.712497][ T7017] securityfs: Unknown parameter 'nr_inodes' [ 74.753018][ T7020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7020 comm=syz.3.294 [ 74.759054][ T7021] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 75.031454][ T7024] netlink: 'syz.2.296': attribute type 23 has an invalid length. [ 75.065334][ T7029] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 75.069636][ T7031] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 75.163277][ T6977] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 75.167561][ T6977] usb 6-1: device reset changed ep0 maxpacket size! [ 75.171703][ T29] usb 6-1: USB disconnect, device number 5 [ 75.176897][ T29] usblp0: removed [ 75.312342][ T29] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 75.462519][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 75.472015][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 75.486073][ T29] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 75.492383][ T29] usb 6-1: can't read configurations, error -71 [ 75.593760][ T7045] bond3: option xmit_hash_policy: invalid value (6) [ 75.603361][ T7045] bond3 (unregistering): Released all slaves [ 75.660024][ T7053] mkiss: ax0: crc mode is auto. [ 75.703066][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 75.779103][ T7057] openvswitch: netlink: VXLAN extension 145 out of range max 1 [ 75.856210][ T7071] xt_hashlimit: overflow, rate too high: 0 [ 76.172849][ T7099] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 76.352852][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.354932][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.532289][ T29] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 76.664580][ T29] usb 6-1: device descriptor read/64, error -71 [ 76.742268][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 76.772599][ T29] usb usb6-port1: attempt power cycle [ 76.982707][ T71] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 77.122292][ T29] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 77.153002][ T29] usb 6-1: device descriptor read/8, error -71 [ 77.398627][ T29] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 77.412910][ T29] usb 6-1: device descriptor read/8, error -71 [ 77.487153][ T7170] __nla_validate_parse: 11 callbacks suppressed [ 77.487165][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.333'. [ 77.511011][ T7170] hsr_slave_1 (unregistering): left promiscuous mode [ 77.522552][ T29] usb usb6-port1: unable to enumerate USB device [ 77.538423][ T7171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.636901][ T6010] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 77.782289][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 78.397585][ T7207] overlayfs: missing 'lowerdir' [ 78.401863][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 78.401875][ T40] audit: type=1400 audit(2000000019.879:432): avc: denied { create } for pid=7205 comm="syz.2.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 78.410475][ T40] audit: type=1400 audit(2000000019.889:433): avc: denied { accept } for pid=7205 comm="syz.2.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 78.458082][ T40] audit: type=1400 audit(2000000019.939:434): avc: denied { rename } for pid=7217 comm="syz.2.346" name="file0" dev="tmpfs" ino=528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.463131][ T7218] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.346'. [ 78.478421][ T7220] netlink: 64 bytes leftover after parsing attributes in process `syz.0.347'. [ 78.486645][ T40] audit: type=1326 audit(2000000019.969:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7219 comm="syz.0.347" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f221659c799 code=0x0 [ 78.499024][ T7222] netlink: 16 bytes leftover after parsing attributes in process `syz.2.348'. [ 78.502554][ T7222] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 78.745748][ T7245] overlayfs: failed to resolve './file1': -2 [ 78.751716][ T7245] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 78.787152][ T7247] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 78.791056][ T7247] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 78.825197][ T40] audit: type=1400 audit(2000000020.309:436): avc: denied { bind } for pid=7251 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.832340][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 78.833291][ T40] audit: type=1400 audit(2000000020.309:437): avc: denied { getopt } for pid=7251 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.841714][ T40] audit: type=1400 audit(2000000020.309:438): avc: denied { setopt } for pid=7251 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 78.889952][ T7258] overlay: filesystem on ./bus not supported as upperdir [ 78.968334][ T40] audit: type=1400 audit(2000000020.449:439): avc: denied { create } for pid=7261 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 79.121029][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 79.315965][ T40] audit: type=1400 audit(2000000020.799:440): avc: denied { bind } for pid=7265 comm="syz.1.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.367879][ T40] audit: type=1326 audit(2000000020.849:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.3.364" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd7919c799 code=0x0 [ 79.405256][ T7266] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 79.477304][ T7288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.366'. [ 79.489723][ T39] cfg80211: failed to load regulatory.db [ 79.842874][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'. [ 79.846531][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.385'. [ 79.846578][ T7354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.386'. [ 79.849673][ T7351] netlink: 20 bytes leftover after parsing attributes in process `syz.1.385'. [ 79.862364][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 79.971037][ T7365] usb usb8: usbfs: process 7365 (syz.3.389) did not claim interface 0 before use [ 79.980252][ T7365] bond0: entered promiscuous mode [ 79.981929][ T7365] bond_slave_0: entered promiscuous mode [ 79.985195][ T7365] bond_slave_1: entered promiscuous mode [ 79.988509][ T7365] batadv_slave_0: entered promiscuous mode [ 79.990594][ T7365] batadv_slave_0: left promiscuous mode [ 79.993099][ T7365] bond0: left promiscuous mode [ 79.993600][ T7351] /dev/sr0: Can't open blockdev [ 79.994741][ T7365] bond_slave_0: left promiscuous mode [ 79.994865][ T7365] bond_slave_1: left promiscuous mode [ 80.073887][ T7369] program syz.0.391 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.113938][ T7360] /dev/sr0: Can't open blockdev [ 80.142667][ T7378] gfs2: error -5 reading superblock [ 80.176369][ T7378] openvswitch: netlink: Flow key attr not present in new flow. [ 80.178828][ T7382] macvlan2: entered promiscuous mode [ 80.633674][ T29] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 80.707085][ T7424] tipc: Started in network mode [ 80.709319][ T7424] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 80.713743][ T7424] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 80.717814][ T7424] tipc: Enabled bearer , priority 10 [ 80.798429][ T29] usb 6-1: config 1 interface 0 has no altsetting 0 [ 80.809811][ T29] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 80.813997][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.817373][ T29] usb 6-1: Product: syz [ 80.819160][ T29] usb 6-1: Manufacturer: syz [ 80.821107][ T29] usb 6-1: SerialNumber: syz [ 80.834784][ T5959] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 80.872425][ T6011] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 80.902363][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 81.024446][ T6011] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 81.027955][ T6011] usb 7-1: config 1 has no interface number 0 [ 81.030701][ T6011] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 16 [ 81.035268][ T6011] usb 7-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 81.041859][ T6011] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 81.045977][ T6011] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.049498][ T6011] usb 7-1: Product: syz [ 81.051054][ T6011] usb 7-1: Manufacturer: syz [ 81.052993][ T6011] usb 7-1: SerialNumber: syz [ 81.057893][ T7420] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 81.060818][ T7420] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 81.066916][ T6011] usb 7-1: Expected 3 endpoints, found: 2 [ 81.180795][ T7441] syz.0.414: attempt to access beyond end of device [ 81.180795][ T7441] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 81.185198][ T7441] gfs2: error -5 reading superblock [ 81.192652][ T5959] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 81.243400][ T29] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 81.292540][ T7451] 8021q: adding VLAN 0 to HW filter on device bond3 [ 81.305016][ T7452] 8021q: adding VLAN 0 to HW filter on device bond4 [ 81.353997][ T5959] usb 8-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 81.357837][ T5959] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.361813][ T5959] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 81.366024][ T5959] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 81.369404][ T5959] usb 8-1: Product: syz [ 81.371170][ T5959] usb 8-1: Manufacturer: syz [ 81.375425][ T5959] usb 8-1: SerialNumber: syz [ 81.380491][ T5959] usb 8-1: config 0 descriptor?? [ 81.438332][ T5959] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 81.462811][ T7436] udevd[7436]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.596697][ T5959] usb 8-1: USB disconnect, device number 2 [ 81.643969][ T50] usb 7-1: USB disconnect, device number 2 [ 81.712451][ T6010] tipc: Node number set to 1 [ 81.849396][ T7490] ip6t_srh: unknown srh match flags 4000 [ 81.903654][ T7475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.907072][ T7475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.911002][ T7475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.914178][ T7475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.919168][ T7475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.921987][ T7475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.942403][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 82.138008][ T7503] syzkaller0: entered promiscuous mode [ 82.140503][ T7503] syzkaller0: entered allmulticast mode [ 82.156999][ T7504] IPv6: Can't replace route, no match found [ 82.650047][ T7531] Attempt to restore checkpoint with obsolete wellknown handles [ 82.744453][ T1142] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 82.978177][ T7558] overlay: Unknown parameter 'func' [ 82.982371][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 83.143911][ C3] usblp0: nonzero write bulk status received: -71 [ 83.148974][ T60] usb 6-1: USB disconnect, device number 10 [ 83.157607][ T7397] usblp0: removed [ 83.217894][ T7570] syzkaller0: entered promiscuous mode [ 83.219687][ T7570] syzkaller0: entered allmulticast mode [ 83.331003][ T7572] openvswitch: netlink: Actions may not be safe on all matching packets [ 83.390676][ T5966] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 83.465440][ T7579] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 83.471037][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 83.471046][ T40] audit: type=1400 audit(2000000024.949:489): avc: denied { ioctl } for pid=7578 comm="syz.3.440" path="socket:[19699]" dev="sockfs" ino=19699 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 83.482891][ T7580] __nla_validate_parse: 8 callbacks suppressed [ 83.482907][ T7580] netlink: 40 bytes leftover after parsing attributes in process `syz.0.439'. [ 83.663161][ T40] audit: type=1400 audit(2000000025.139:490): avc: denied { setopt } for pid=7591 comm="syz.3.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 83.810028][ T7606] syzkaller0: entered promiscuous mode [ 83.811861][ T7606] syzkaller0: entered allmulticast mode [ 83.915245][ T40] audit: type=1400 audit(2000000025.399:491): avc: denied { shutdown } for pid=7585 comm="syz.2.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.032945][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 84.079506][ T7622] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 84.102450][ T40] audit: type=1400 audit(2000000025.589:492): avc: denied { read } for pid=7625 comm="syz.3.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.110160][ T40] audit: type=1400 audit(2000000025.589:493): avc: denied { getopt } for pid=7625 comm="syz.3.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 84.112489][ T7626] 9p: Unknown uid 00000000004294967295 [ 84.130725][ T7626] xt_SECMARK: invalid mode: 2 [ 84.196058][ T40] audit: type=1400 audit(2000000025.679:494): avc: denied { append } for pid=7628 comm="syz.1.454" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 84.202329][ T7632] program syz.1.454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.891476][ T40] audit: type=1400 audit(2000000026.369:495): avc: denied { accept } for pid=7633 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 85.072322][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 85.098438][ T7642] syzkaller0: entered promiscuous mode [ 85.100274][ T7642] syzkaller0: entered allmulticast mode [ 85.486023][ T7653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.461'. [ 85.973242][ T40] audit: type=1400 audit(2000000027.459:496): avc: denied { bind } for pid=7630 comm="syz.3.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.102349][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 86.403922][ T7574] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 86.448132][ T7661] futex_wake_op: syz.1.463 tries to shift op by -1; fix this program [ 86.530080][ T40] audit: type=1804 audit(2000000028.009:497): pid=7663 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.464" name="/newroot/122/file0/file0" dev="9p" ino=75497539 res=1 errno=0 [ 86.544669][ T40] audit: type=1400 audit(2000000028.009:498): avc: denied { ioctl } for pid=7662 comm="syz.2.464" path="/122/file0/file0" dev="9p" ino=75497539 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.576095][ T7671] qnx4: no qnx4 filesystem (no root dir). [ 86.646098][ T7672] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 86.914760][ T7698] PM: Enabling pm_trace changes system date and time during resume. [ 86.914760][ T7698] PM: Correct system time has to be restored manually after resume. [ 87.040154][ T7702] netlink: 16 bytes leftover after parsing attributes in process `syz.2.477'. [ 87.142323][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 87.238070][ T7704] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.478'. [ 87.420531][ T7715] smc: net device hsr0 applied user defined pnetid SYZ2 [ 87.623862][ T7723] netlink: 44 bytes leftover after parsing attributes in process `syz.0.485'. [ 87.630438][ T7723] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.853721][ T7736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.859013][ T7736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.908159][ T7743] (syz.2.488,7743,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 87.911107][ T7743] (syz.2.488,7743,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 87.916424][ T7743] (syz.2.488,7743,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 87.920130][ T7743] (syz.2.488,7743,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 87.938190][ T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.945799][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.949723][ T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.953695][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.957453][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.961877][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.965482][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.969185][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.025113][ T7745] netlink: 32 bytes leftover after parsing attributes in process `syz.0.490'. [ 88.182284][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 88.240874][ T7757] syzkaller0: entered promiscuous mode [ 88.245808][ T7757] syzkaller0: entered allmulticast mode [ 88.250581][ T7758] netlink: 'syz.1.492': attribute type 1 has an invalid length. [ 88.300022][ T7751] bond2: (slave geneve2): making interface the new active one [ 88.303922][ T7751] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 88.307040][ T59] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 88.310237][ T59] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 88.326290][ T59] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 88.332268][ T59] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 88.645293][ T7771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.499'. [ 88.800156][ T7775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.855709][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 88.855724][ T40] audit: type=1400 audit(2000000030.339:508): avc: denied { setopt } for pid=7780 comm="syz.2.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.875598][ T7783] netlink: 'syz.2.502': attribute type 10 has an invalid length. [ 88.943114][ T40] audit: type=1400 audit(2000000030.429:509): avc: denied { getopt } for pid=7787 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 88.945529][ T7788] overlayfs: statfs failed on './file0' [ 88.950939][ T40] audit: type=1400 audit(2000000030.429:510): avc: denied { getattr } for pid=7787 comm="syz.2.504" name="/" dev="9p" ino=75497487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 88.985820][ T7788] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 88.991841][ T7788] block device autoloading is deprecated and will be removed. [ 89.222793][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 89.338585][ T40] audit: type=1400 audit(2000000030.819:511): avc: denied { mount } for pid=7793 comm="syz.2.507" name="/" dev="ramfs" ino=20921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 89.403297][ T40] audit: type=1400 audit(2000000030.889:512): avc: denied { append } for pid=7800 comm="syz.0.509" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 89.429533][ T40] audit: type=1400 audit(2000000030.909:513): avc: denied { map } for pid=7800 comm="syz.0.509" path="pipe:[20930]" dev="pipefs" ino=20930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 89.438681][ T40] audit: type=1400 audit(2000000030.909:514): avc: denied { execute } for pid=7800 comm="syz.0.509" path="pipe:[20930]" dev="pipefs" ino=20930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 89.447707][ T40] audit: type=1400 audit(2000000030.919:515): avc: denied { bind } for pid=7800 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 89.538204][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 89.770720][ T7823] netlink: 16 bytes leftover after parsing attributes in process `syz.1.515'. [ 89.779308][ T7823] netlink: 'syz.1.515': attribute type 2 has an invalid length. [ 89.781857][ T7823] netlink: 244 bytes leftover after parsing attributes in process `syz.1.515'. [ 89.782356][ T71] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 89.944239][ T71] usb 7-1: Using ep0 maxpacket: 8 [ 89.948308][ T71] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 89.953253][ T71] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 89.957493][ T71] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.961649][ T71] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.967231][ T71] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.971202][ T71] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.184937][ T71] usb 7-1: GET_CAPABILITIES returned 0 [ 90.187354][ T71] usbtmc 7-1:16.0: can't read capabilities [ 90.242257][ T40] audit: type=1400 audit(2000000031.719:516): avc: denied { mounton } for pid=7826 comm="syz.1.516" path="/107/file0" dev="tmpfs" ino=580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 90.272377][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 90.349569][ T7830] syzkaller0: entered promiscuous mode [ 90.351380][ T7830] syzkaller0: entered allmulticast mode [ 90.524510][ T40] audit: type=1400 audit(2000000032.009:517): avc: denied { mount } for pid=7831 comm="syz.0.518" name="/" dev="autofs" ino=20104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 90.535536][ T7832] netlink: 300 bytes leftover after parsing attributes in process `syz.0.518'. [ 90.632091][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.519'. [ 91.121707][ T7844] netlink: 28 bytes leftover after parsing attributes in process `syz.1.521'. [ 91.201396][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.522'. [ 91.302281][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 91.476048][ T7859] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 91.572871][ T7867] netlink: 104 bytes leftover after parsing attributes in process `syz.1.527'. [ 91.591490][ T7870] netlink: 'syz.0.528': attribute type 1 has an invalid length. [ 91.595036][ T7870] netlink: 'syz.0.528': attribute type 2 has an invalid length. [ 91.634017][ T7875] syzkaller0: entered promiscuous mode [ 91.636335][ T7875] syzkaller0: entered allmulticast mode [ 91.773625][ T7880] netlink: 32 bytes leftover after parsing attributes in process `syz.1.531'. [ 92.033488][ T71] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 92.182302][ T71] usb 5-1: Using ep0 maxpacket: 16 [ 92.187197][ T71] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 92.194275][ T71] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 92.198414][ T71] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.201757][ T71] usb 5-1: Product: syz [ 92.203403][ T71] usb 5-1: Manufacturer: syz [ 92.204948][ T71] usb 5-1: SerialNumber: syz [ 92.209268][ T71] usb 5-1: config 0 descriptor?? [ 92.215729][ T71] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 92.218833][ T71] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 92.342435][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 92.533946][ T50] usb 7-1: USB disconnect, device number 3 [ 92.806428][ T7897] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 92.817217][ T71] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 92.820824][ T7901] fuse: Unknown parameter '' [ 93.278998][ T7937] tun0: tun_chr_ioctl cmd 1074025675 [ 93.281032][ T7937] tun0: persist enabled [ 93.282667][ T7937] tun0: tun_chr_ioctl cmd 1074025675 [ 93.284496][ T7937] tun0: persist enabled [ 93.382354][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 93.728072][ T7959] tmpfs: Bad value for 'mpol' [ 93.731752][ T7959] netlink: 'syz.2.554': attribute type 1 has an invalid length. [ 93.749707][ T7959] 8021q: adding VLAN 0 to HW filter on device bond3 [ 93.757867][ T7959] __nla_validate_parse: 2 callbacks suppressed [ 93.757878][ T7959] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.554'. [ 93.765745][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.554'. [ 93.775764][ T7959] bond3: (slave bridge2): making interface the new active one [ 93.779358][ T7959] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 93.910422][ T7965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.556'. [ 93.956619][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 93.956630][ T40] audit: type=1400 audit(2000000035.439:525): avc: denied { map } for pid=7972 comm="syz.1.557" path="socket:[21220]" dev="sockfs" ino=21220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 94.229330][ T7997] binder: 7996:7997 ioctl c0306201 0 returned -14 [ 94.236719][ T40] audit: type=1400 audit(2000000035.719:526): avc: denied { ioctl } for pid=7996 comm="syz.2.561" path="socket:[17350]" dev="sockfs" ino=17350 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 94.245517][ T7997] binder: 7996:7997 unknown command 609091586 [ 94.246739][ T40] audit: type=1400 audit(2000000035.729:527): avc: denied { connect } for pid=7996 comm="syz.2.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 94.248001][ T7997] binder: 7996:7997 ioctl c0306201 2000000004c0 returned -22 [ 94.272807][ T7884] em28xx 5-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 94.278619][ T71] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 94.291501][ T40] audit: type=1400 audit(2000000035.769:528): avc: denied { getopt } for pid=7998 comm="syz.2.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 94.292149][ T71] em28xx 5-1:0.0: board has no eeprom [ 94.355579][ T40] audit: type=1400 audit(2000000035.839:529): avc: denied { write } for pid=8005 comm="syz.2.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 94.362350][ T71] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 94.371327][ T71] em28xx 5-1:0.0: dvb set to bulk mode. [ 94.374373][ T5966] em28xx 5-1:0.0: Binding DVB extension [ 94.392410][ T71] usb 5-1: USB disconnect, device number 6 [ 94.395268][ T71] em28xx 5-1:0.0: Disconnecting em28xx [ 94.412099][ T5966] em28xx 5-1:0.0: Registering input extension [ 94.415304][ T71] em28xx 5-1:0.0: Closing input extension [ 94.422346][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 94.435747][ T71] em28xx 5-1:0.0: Freeing device [ 94.470796][ T8010] netlink: 64 bytes leftover after parsing attributes in process `syz.2.565'. [ 94.731448][ T40] audit: type=1400 audit(2000000036.209:530): avc: denied { bpf } for pid=8011 comm="syz.1.566" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.761426][ T8013] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 94.761446][ T8013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.801484][ T40] audit: type=1400 audit(2000000036.279:531): avc: denied { perfmon } for pid=8015 comm="syz.1.567" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.814360][ T8018] netlink: 52 bytes leftover after parsing attributes in process `syz.0.568'. [ 94.846363][ T8023] syzkaller0: entered promiscuous mode [ 94.848263][ T8023] syzkaller0: entered allmulticast mode [ 95.122269][ T5966] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 95.257662][ T8034] netlink: 'syz.2.573': attribute type 1 has an invalid length. [ 95.260109][ T8034] netlink: 'syz.2.573': attribute type 4 has an invalid length. [ 95.263003][ T8034] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.573'. [ 95.268498][ T40] audit: type=1400 audit(2000000036.749:532): avc: denied { module_request } for pid=8033 comm="syz.2.573" kmod="crypto-lrw(ecb-aes-aesni)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 95.272279][ T5966] usb 5-1: device descriptor read/64, error -71 [ 95.387986][ T8041] netlink: 'syz.2.574': attribute type 4 has an invalid length. [ 95.398119][ T8041] netlink: 'syz.2.574': attribute type 4 has an invalid length. [ 95.435605][ T8045] vcan0: tx address claim with dlc 0 [ 95.462414][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 95.610804][ T8056] netlink: 68 bytes leftover after parsing attributes in process `syz.2.578'. [ 95.619974][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.578'. [ 95.722311][ T5966] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 95.830659][ T8064] syzkaller0: entered promiscuous mode [ 95.832602][ T8064] syzkaller0: entered allmulticast mode [ 95.862288][ T5966] usb 5-1: device descriptor read/64, error -71 [ 95.968938][ T8069] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 95.972716][ T8069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.581'. [ 95.973287][ T5966] usb usb5-port1: attempt power cycle [ 96.099444][ T8082] netlink: 'syz.1.586': attribute type 1 has an invalid length. [ 96.117795][ T8082] syzkaller0: entered promiscuous mode [ 96.119970][ T8082] syzkaller0: entered allmulticast mode [ 96.322273][ T5966] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 96.325028][ T40] audit: type=1326 audit(2000000037.809:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.1.588" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06539c799 code=0x7ffc0000 [ 96.335252][ T40] audit: type=1326 audit(2000000037.809:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.1.588" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06539c799 code=0x7ffc0000 [ 96.354813][ T5966] usb 5-1: device descriptor read/8, error -71 [ 96.502427][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 96.581416][ T8111] netlink: 'syz.1.596': attribute type 8 has an invalid length. [ 96.602286][ T5966] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 96.622656][ T5966] usb 5-1: device descriptor read/8, error -71 [ 96.659817][ T8119] netlink: 32 bytes leftover after parsing attributes in process `syz.2.599'. [ 96.699476][ T8120] overlayfs: workdir and upperdir must reside under the same mount [ 96.710906][ T8120] overlayfs: overlapping lowerdir path [ 96.742446][ T5966] usb usb5-port1: unable to enumerate USB device [ 97.219856][ T7436] udevd[7436]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 97.391513][ T8152] syzkaller0: entered promiscuous mode [ 97.393984][ T8152] syzkaller0: entered allmulticast mode [ 97.542499][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 97.976871][ T8171] syzkaller0: entered promiscuous mode [ 97.978672][ T8171] syzkaller0: entered allmulticast mode [ 98.111376][ T8173] netlink: 'syz.2.612': attribute type 9 has an invalid length. [ 98.111381][ T8174] netlink: 'syz.2.612': attribute type 9 has an invalid length. [ 98.147982][ T8178] overlay: filesystem on ./bus not supported as upperdir [ 98.160199][ T8178] overlay: filesystem on ./bus not supported as upperdir [ 98.165178][ T8178] overlay: filesystem on ./bus not supported as upperdir [ 98.309359][ T8189] syzkaller0: entered promiscuous mode [ 98.311740][ T8189] syzkaller0: entered allmulticast mode [ 98.576508][ T8203] syzkaller0: entered promiscuous mode [ 98.578920][ T8203] syzkaller0: entered allmulticast mode [ 98.582398][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 98.862385][ T8214] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 98.939012][ T8218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.943383][ T8218] __nla_validate_parse: 3 callbacks suppressed [ 98.943397][ T8218] netlink: 40 bytes leftover after parsing attributes in process `syz.0.626'. [ 99.105701][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 99.105715][ T40] audit: type=1400 audit(2000000040.589:569): avc: denied { setattr } for pid=8219 comm="syz.0.627" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 99.400330][ T40] audit: type=1400 audit(2000000040.879:570): avc: denied { wake_alarm } for pid=8224 comm="syz.1.628" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.411031][ T40] audit: type=1400 audit(2000000040.889:571): avc: denied { getopt } for pid=8224 comm="syz.1.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 99.632288][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 99.934258][ T40] audit: type=1400 audit(2000000041.419:572): avc: denied { remount } for pid=8234 comm="syz.1.632" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 100.159808][ T8246] ip6gre1: entered allmulticast mode [ 100.163258][ T8246] team0: Device ip6gre1 is of different type [ 100.183160][ T5932] Bluetooth: hci4: command 0x1003 tx timeout [ 100.186162][ T5285] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 100.363405][ T40] audit: type=1400 audit(2000000041.849:573): avc: denied { watch } for pid=8261 comm="syz.2.641" path="/186/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 100.374086][ T8262] mac80211_hwsim hwsim5 : renamed from wlan1 (while UP) [ 100.390136][ T40] audit: type=1400 audit(2000000041.869:574): avc: denied { ioctl } for pid=8261 comm="syz.2.641" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 100.434072][ T8264] ip6t_REJECT: ECHOREPLY is not supported [ 100.662352][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 101.084666][ T8274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=8274 comm=syz.0.644 [ 101.332805][ T40] audit: type=1400 audit(2000000042.809:575): avc: denied { execute } for pid=8278 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 101.340529][ T40] audit: type=1400 audit(2000000042.819:576): avc: denied { execute_no_trans } for pid=8278 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 101.442963][ T5932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.447474][ T5932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.451362][ T5932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.463061][ T5932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.467612][ T5932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.478000][ T5285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.481553][ T5285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.485189][ T5285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.488285][ T5285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.490926][ T5285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.566200][ T8287] Bluetooth: MGMT ver 1.23 [ 101.617161][ T8290] overlayfs: empty lowerdir [ 101.626139][ T8290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.702280][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 101.706460][ T8280] chnl_net:caif_netlink_parms(): no params data found [ 101.786196][ T8280] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.788601][ T8280] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.790904][ T8280] bridge_slave_0: entered allmulticast mode [ 101.793764][ T8280] bridge_slave_0: entered promiscuous mode [ 101.796868][ T8280] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.799245][ T8280] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.801563][ T8280] bridge_slave_1: entered allmulticast mode [ 101.804415][ T8280] bridge_slave_1: entered promiscuous mode [ 101.819359][ T8280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.823719][ T8280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.839890][ T8280] team0: Port device team_slave_0 added [ 101.843490][ T8280] team0: Port device team_slave_1 added [ 101.856474][ T8280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.858836][ T8280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.869273][ T8280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.874944][ T8280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.877173][ T8280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.885646][ T8280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.917752][ T8280] hsr_slave_0: entered promiscuous mode [ 101.920961][ T8280] hsr_slave_1: entered promiscuous mode [ 101.924882][ T8280] debugfs: 'hsr0' already exists in 'hsr' [ 101.927323][ T8280] Cannot create hsr debugfs directory [ 102.014532][ T8302] xt_connbytes: Forcing CT accounting to be enabled [ 102.016763][ T8302] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.044510][ T5285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 102.050525][ T5285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 102.054482][ T5285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 102.058656][ T5285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 102.062361][ T5285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 102.087548][ T8280] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.095569][ T8280] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.103003][ T8280] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.118500][ T40] audit: type=1400 audit(2000000043.599:577): avc: denied { set_context_mgr } for pid=8307 comm="syz.1.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 102.127301][ T8308] binder: 8307:8308 ioctl c0286415 200000000040 returned -22 [ 102.135752][ T8280] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.277095][ T8312] syzkaller0: entered promiscuous mode [ 102.279325][ T8312] syzkaller0: entered allmulticast mode [ 102.507573][ T8303] chnl_net:caif_netlink_parms(): no params data found [ 102.539311][ T8322] input: syz1 as /devices/virtual/input/input10 [ 102.541381][ T8322] input: failed to attach handler leds to device input10, error: -6 [ 102.580617][ T8280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.584838][ T8303] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.588100][ T8303] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.592717][ T8303] bridge_slave_0: entered allmulticast mode [ 102.595864][ T8303] bridge_slave_0: entered promiscuous mode [ 102.599822][ T8303] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.602594][ T8303] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.603340][ T8327] netlink: 48 bytes leftover after parsing attributes in process `syz.1.658'. [ 102.605098][ T8303] bridge_slave_1: entered allmulticast mode [ 102.610742][ T8303] bridge_slave_1: entered promiscuous mode [ 102.664044][ T8303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.670241][ T8303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.694900][ T8280] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.698423][ T8303] team0: Port device team_slave_0 added [ 102.702182][ T8303] team0: Port device team_slave_1 added [ 102.727987][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.730971][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.735314][ T8330] netlink: 100 bytes leftover after parsing attributes in process `syz.1.659'. [ 102.735882][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.741102][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.742314][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 102.753635][ T8303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.755927][ T8303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.764376][ T8303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.770824][ T8303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.773338][ T8303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.781907][ T8303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.801387][ T8280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.829958][ T8303] hsr_slave_0: entered promiscuous mode [ 102.832450][ T8303] hsr_slave_1: entered promiscuous mode [ 102.834672][ T8303] debugfs: 'hsr0' already exists in 'hsr' [ 102.836530][ T8303] Cannot create hsr debugfs directory [ 102.935244][ T8280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.992856][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'. [ 102.999177][ T8349] netlink: 60 bytes leftover after parsing attributes in process `syz.2.662'. [ 103.005585][ T8349] netlink: 28 bytes leftover after parsing attributes in process `syz.2.662'. [ 103.067263][ T40] audit: type=1400 audit(2000000044.549:578): avc: denied { read } for pid=8357 comm="syz.2.663" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 103.101973][ T8280] veth0_vlan: entered promiscuous mode [ 103.110463][ T8280] veth1_vlan: entered promiscuous mode [ 103.126099][ T8280] veth0_macvtap: entered promiscuous mode [ 103.130237][ T8280] veth1_macvtap: entered promiscuous mode [ 103.149164][ T8280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.156441][ T8280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.169463][ T1142] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.174203][ T1142] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.178066][ T1142] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.185249][ T1142] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.193454][ T8361] syzkaller0: entered promiscuous mode [ 103.195331][ T8361] syzkaller0: entered allmulticast mode [ 103.267442][ T8364] netlink: 'syz.2.665': attribute type 1 has an invalid length. [ 103.368072][ T8368] loop4: detected capacity change from 0 to 7 [ 103.371220][ T7436] buffer_io_error: 43 callbacks suppressed [ 103.371234][ T7436] Buffer I/O error on dev loop4, logical block 0, async page read [ 103.377160][ T7436] Buffer I/O error on dev loop4, logical block 0, async page read [ 103.380433][ T7436] Buffer I/O error on dev loop4, logical block 0, async page read [ 103.384369][ T7436] Buffer I/O error on dev loop4, logical block 0, async page read [ 103.387765][ T7436] Buffer I/O error on dev loop4, logical block 0, async page read [ 103.391241][ T7436] Buffer I/O error on dev loop4, logical block 0, async page read [ 103.394943][ T7436] Buffer I/O error on dev loop4, logical block 0, async page read [ 103.398289][ T7436] ldm_validate_partition_table(): Disk read failed. [ 103.401127][ T7436] Buffer I/O error on dev loop4, logical block 0, async page read [ 103.404972][ T7436] Buffer I/O error on dev loop4, logical block 0, async page read [ 103.408358][ T7436] Buffer I/O error on dev loop4, logical block 0, async page read [ 103.411663][ T7436] Dev loop4: unable to read RDB block 0 [ 103.414364][ T7436] loop4: unable to read partition table [ 103.416984][ T7436] loop4: partition table beyond EOD, truncated [ 103.420458][ T8368] ldm_validate_partition_table(): Disk read failed. [ 103.423701][ T8368] Dev loop4: unable to read RDB block 0 [ 103.425732][ T8368] loop4: unable to read partition table [ 103.427950][ T8368] loop4: partition table beyond EOD, truncated [ 103.430060][ T8368] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 103.446315][ T5333] ldm_validate_partition_table(): Disk read failed. [ 103.448596][ T5333] Dev loop4: unable to read RDB block 0 [ 103.450489][ T5333] loop4: unable to read partition table [ 103.452463][ T5333] loop4: partition table beyond EOD, truncated [ 103.552564][ T5932] Bluetooth: hci0: command tx timeout [ 103.782512][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 104.103645][ T5932] Bluetooth: hci4: command tx timeout [ 104.822357][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 105.632424][ T5932] Bluetooth: hci0: command tx timeout [ 105.792360][ T8332] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 105.801535][ T8303] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.835485][ T8303] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.842780][ T8303] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.850064][ T8303] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.872331][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 105.879268][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 105.879282][ T40] audit: type=1400 audit(2000000047.359:581): avc: denied { read } for pid=8378 comm="syz.1.668" dev="nsfs" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 105.892276][ T40] audit: type=1400 audit(2000000047.359:582): avc: denied { open } for pid=8378 comm="syz.1.668" path="net:[4026532886]" dev="nsfs" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 105.909141][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.912787][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.938050][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.941308][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.962537][ T40] audit: type=1400 audit(2000000047.439:583): avc: denied { mounton } for pid=8280 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 105.971775][ T40] audit: type=1400 audit(2000000047.439:584): avc: denied { mounton } for pid=8280 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 106.000244][ T8303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.016549][ T8303] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.017335][ T8392] dlm: no locking on control device [ 106.021792][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.024343][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.031746][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.034906][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.057751][ T8303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.061088][ T8303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.087274][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.101120][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.673'. [ 106.120137][ T8401] bond4: entered promiscuous mode [ 106.124375][ T8401] 8021q: adding VLAN 0 to HW filter on device bond4 [ 106.128877][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.673'. [ 106.133965][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.673'. [ 106.137370][ T8401] netlink: 24 bytes leftover after parsing attributes in process `syz.1.673'. [ 106.149159][ T8401] bond4: (slave sit1): refused to change device type [ 106.179007][ T8303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.182424][ T5932] Bluetooth: hci4: command tx timeout [ 106.198022][ T8402] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 106.201452][ T8402] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 106.249452][ T8413] netlink: 200 bytes leftover after parsing attributes in process `syz.4.674'. [ 106.367987][ T8303] veth0_vlan: entered promiscuous mode [ 106.375954][ T8303] veth1_vlan: entered promiscuous mode [ 106.389079][ T8433] netlink: 72 bytes leftover after parsing attributes in process `syz.2.679'. [ 106.415808][ T8303] veth0_macvtap: entered promiscuous mode [ 106.430524][ T8303] veth1_macvtap: entered promiscuous mode [ 106.458633][ T8303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.467693][ T8303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.474433][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.501188][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.504533][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.507394][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.562653][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.565150][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.575496][ T8445] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.598178][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.600759][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.648693][ T40] audit: type=1400 audit(2000000048.129:585): avc: denied { setattr } for pid=8461 comm="syz.2.687" name="NETLINK" dev="sockfs" ino=25759 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.897735][ T40] audit: type=1400 audit(2000000048.379:586): avc: denied { map } for pid=8492 comm="syz.1.693" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 106.902378][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 106.908804][ T40] audit: type=1400 audit(2000000048.379:587): avc: denied { execute } for pid=8492 comm="syz.1.693" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 106.927513][ T40] audit: type=1400 audit(2000000048.409:588): avc: denied { bind } for pid=8490 comm="syz.2.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 106.935781][ T8501] can0: slcan on ttynull. [ 106.939017][ T40] audit: type=1400 audit(2000000048.409:589): avc: denied { listen } for pid=8490 comm="syz.2.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 106.946445][ T40] audit: type=1400 audit(2000000048.409:590): avc: denied { accept } for pid=8490 comm="syz.2.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.012961][ T8499] can0 (unregistered): slcan off ttynull. [ 107.056695][ T8505] netlink: 32 bytes leftover after parsing attributes in process `syz.1.696'. [ 107.112313][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 107.293110][ T9] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 107.296416][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.299228][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.302769][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 107.305613][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.308597][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.313425][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 107.316355][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.319289][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.323927][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 107.329082][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.333635][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.337923][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 107.341695][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.345968][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.350417][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 107.354886][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.358800][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.363626][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 107.367325][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.371094][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.376105][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 107.379896][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.384008][ T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.388489][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 107.393345][ T9] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 107.397222][ T9] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 107.400587][ T9] usb 10-1: Product: syz [ 107.402810][ T9] usb 10-1: Manufacturer: syz [ 107.404804][ T9] usb 10-1: SerialNumber: syz [ 107.410781][ T9] usb 10-1: config 0 descriptor?? [ 107.422028][ T9] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 107.530343][ T8525] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.533031][ T8525] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.576425][ T8527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.703'. [ 107.617841][ T8530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.620763][ T8530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.634317][ T5959] usb 10-1: USB disconnect, device number 2 [ 107.652364][ T5959] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 107.702630][ T5932] Bluetooth: hci0: command tx timeout [ 107.952429][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 108.262642][ T5932] Bluetooth: hci4: command tx timeout [ 108.982350][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 109.782491][ T5932] Bluetooth: hci0: command tx timeout [ 110.032314][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 110.342515][ T5932] Bluetooth: hci4: command tx timeout [ 111.062659][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 112.112336][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 113.142609][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 114.182475][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 115.222336][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 116.262327][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 117.304651][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 118.342479][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 119.382387][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 120.411351][ T8537] program syz.2.706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.416496][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 120.416506][ T40] audit: type=1400 audit(2000000061.899:592): avc: denied { read } for pid=8536 comm="syz.2.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.429051][ T40] audit: type=1400 audit(2000000061.899:593): avc: denied { load_policy } for pid=8538 comm="syz.5.707" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 120.432335][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 120.440671][ T40] audit: type=1400 audit(2000000061.909:594): avc: denied { cmd } for pid=8536 comm="syz.2.706" path="socket:[22392]" dev="sockfs" ino=22392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 120.461813][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'. [ 120.490872][ T8539] SELinux: failed to load policy [ 120.521104][ T40] audit: type=1326 audit(2000000061.999:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8556 comm="syz.4.710" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1add79c799 code=0x0 [ 120.552098][ T8540] SELinux: failed to load policy [ 120.574566][ T8559] loop7: detected capacity change from 0 to 128 [ 120.657731][ T8571] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 120.832680][ T8575] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.837289][ T8575] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.841619][ T8575] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 120.940486][ T8575] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.944742][ T8575] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.948061][ T8575] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 121.056521][ T8575] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.060293][ T8575] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.064115][ T8575] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 121.171386][ T8575] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.178120][ T8575] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.182579][ T8575] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 121.298040][ T59] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.301455][ T59] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 121.312460][ T59] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 121.329549][ T105] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.341793][ T105] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 121.346313][ T105] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 121.384362][ T59] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.387663][ T59] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 121.390782][ T59] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 121.394560][ T59] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.397948][ T59] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 121.401720][ T59] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 121.472315][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 121.478890][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'. [ 121.587705][ T8593] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 121.590396][ T8593] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 121.595685][ T40] audit: type=1400 audit(2000000063.069:596): avc: denied { read } for pid=8598 comm="syz.2.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 121.672128][ T40] audit: type=1400 audit(2000000063.149:597): avc: denied { bind } for pid=8601 comm="syz.1.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.674289][ T8603] QAT: Invalid ioctl -2114415556 [ 121.678165][ T40] audit: type=1400 audit(2000000063.159:598): avc: denied { name_bind } for pid=8601 comm="syz.1.722" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 121.681550][ T8603] QAT: Invalid ioctl 8 [ 121.691655][ T8603] QAT: Device 5 not found [ 121.693648][ T40] audit: type=1400 audit(2000000063.159:599): avc: denied { node_bind } for pid=8601 comm="syz.1.722" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 121.700520][ T40] audit: type=1400 audit(2000000063.159:600): avc: denied { listen } for pid=8601 comm="syz.1.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.708213][ T40] audit: type=1400 audit(2000000063.169:601): avc: denied { create } for pid=8601 comm="syz.1.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 121.923944][ T8613] netlink: 16 bytes leftover after parsing attributes in process `syz.5.725'. [ 122.009034][ T8615] geneve2: entered promiscuous mode [ 122.010998][ T8615] geneve2: entered allmulticast mode [ 122.056166][ T8615] geneve2: entered promiscuous mode [ 122.057965][ T8615] geneve2: entered allmulticast mode [ 122.269165][ T8627] netlink: 'syz.5.728': attribute type 5 has an invalid length. [ 122.275632][ T8627] Cannot find set identified by id 65534 to match [ 122.280312][ T8627] netlink: 24 bytes leftover after parsing attributes in process `syz.5.728'. [ 122.335623][ T8631] tipc: Started in network mode [ 122.337393][ T8631] tipc: Node identity ac14140f, cluster identity 4711 [ 122.340570][ T8631] tipc: New replicast peer: 255.255.255.255 [ 122.354237][ T8631] tipc: Enabled bearer , priority 10 [ 122.359110][ T8631] netlink: 12 bytes leftover after parsing attributes in process `syz.5.729'. [ 122.362022][ T8631] tipc: Disabling bearer [ 122.502297][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 122.858497][ T8660] syzkaller0: entered promiscuous mode [ 122.860262][ T8660] syzkaller0: entered allmulticast mode [ 122.977336][ T8672] netlink: 'syz.4.740': attribute type 8 has an invalid length. [ 122.982158][ T8672] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.740'. [ 122.985627][ T8672] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 123.018002][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 123.312123][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.745'. [ 123.315223][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.745'. [ 123.325921][ T8689] bridge2: entered promiscuous mode [ 123.409257][ T8693] kvm: emulating exchange as write [ 123.417969][ T8694] netlink: 156 bytes leftover after parsing attributes in process `syz.5.746'. [ 123.542360][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 124.037743][ T8722] tmpfs: Bad value for 'mpol' [ 124.582270][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 125.005793][ T8759] overlayfs: missing 'lowerdir' [ 125.330072][ T8783] netlink: 'syz.2.772': attribute type 1 has an invalid length. [ 125.347940][ T8783] 8021q: adding VLAN 0 to HW filter on device bond4 [ 125.357766][ T8783] vlan2: entered promiscuous mode [ 125.359384][ T8783] bond4: entered promiscuous mode [ 125.361109][ T8783] vlan2: entered allmulticast mode [ 125.363046][ T8783] bond4: entered allmulticast mode [ 125.392595][ T8790] program syz.2.774 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.397965][ T8790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=8790 comm=syz.2.774 [ 125.458471][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 125.458483][ T40] audit: type=1400 audit(2000000066.939:613): avc: denied { map } for pid=8793 comm="syz.4.775" path="socket:[26861]" dev="sockfs" ino=26861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 125.473173][ T40] audit: type=1400 audit(2000000066.939:614): avc: denied { read accept } for pid=8793 comm="syz.4.775" path="socket:[26861]" dev="sockfs" ino=26861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 125.571721][ T8800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8800 comm=syz.4.778 [ 125.575931][ T8800] __nla_validate_parse: 3 callbacks suppressed [ 125.575942][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.778'. [ 125.580996][ T8800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.778'. [ 125.622526][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 125.654485][ T50] hid_parser_main: 28 callbacks suppressed [ 125.654498][ T50] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 125.659112][ T50] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 125.661545][ T50] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 125.664043][ T50] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 125.666505][ T50] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 125.668891][ T50] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 125.671740][ T50] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 125.674239][ T50] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 125.676569][ T50] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 125.676768][ T8807] ubi31: attaching mtd0 [ 125.678918][ T50] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 125.681522][ T8807] ubi31 error: ubi_attach_mtd_dev: bad VID header (8) or data offsets (72) [ 125.688560][ T40] audit: type=1400 audit(2000000067.169:615): avc: denied { read } for pid=8808 comm="syz.5.780" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 125.702387][ T40] audit: type=1400 audit(2000000067.169:616): avc: denied { open } for pid=8808 comm="syz.5.780" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 125.715140][ T50] hid-generic 0005:00B6:0009.0003: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 125.781451][ T8815] netlink: 'syz.4.781': attribute type 21 has an invalid length. [ 125.787992][ T8815] netlink: 152 bytes leftover after parsing attributes in process `syz.4.781'. [ 125.795099][ T8813] fido_id[8813]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 125.930613][ T40] audit: type=1400 audit(2000000067.409:617): avc: denied { read } for pid=8824 comm="syz.5.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 125.953786][ T40] audit: type=1400 audit(2000000067.439:618): avc: denied { ioctl } for pid=8831 comm="syz.1.786" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26547 ioctlcmd=0xaa08 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 125.977986][ T40] audit: type=1400 audit(2000000067.459:619): avc: denied { bind } for pid=8843 comm="syz.4.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 126.115920][ T40] audit: type=1400 audit(2000000067.599:620): avc: denied { create } for pid=8846 comm="syz.4.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 126.122880][ T40] audit: type=1400 audit(2000000067.599:621): avc: denied { bind } for pid=8846 comm="syz.4.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 126.128800][ T40] audit: type=1400 audit(2000000067.599:622): avc: denied { setopt } for pid=8846 comm="syz.4.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 126.175104][ T8850] syzkaller0: entered promiscuous mode [ 126.175209][ T8852] tls_set_device_offload_rx: netdev not found [ 126.177434][ T8850] syzkaller0: entered allmulticast mode [ 126.210108][ T8856] netlink: 72 bytes leftover after parsing attributes in process `syz.4.793'. [ 126.219533][ T8856] netlink: 40 bytes leftover after parsing attributes in process `syz.4.793'. [ 126.268430][ T8861] netlink: 28 bytes leftover after parsing attributes in process `syz.5.794'. [ 126.271482][ T8861] netlink: 28 bytes leftover after parsing attributes in process `syz.5.794'. [ 126.421659][ T8873] netlink: 'syz.2.798': attribute type 1 has an invalid length. [ 126.443348][ T8873] bond5: (slave geneve2): making interface the new active one [ 126.446397][ T8873] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 126.449288][ T105] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 126.452363][ T105] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 126.455625][ T105] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 126.457889][ T8873] IPv6: addrconf: prefix option has invalid lifetime [ 126.546584][ T8876] random: crng reseeded on system resumption [ 126.557501][ T8876] Restarting kernel threads ... [ 126.560339][ T8876] Done restarting kernel threads. [ 126.662414][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 126.758523][ T8885] netlink: 'syz.2.802': attribute type 1 has an invalid length. [ 126.793389][ T8885] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 126.799422][ T8885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.802'. [ 126.804471][ T8885] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 126.811773][ T8885] bond6 (unregistering): Released all slaves [ 127.158827][ T8895] sctp: [Deprecated]: syz.1.807 (pid 8895) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.158827][ T8895] Use struct sctp_sack_info instead [ 127.168056][ T8898] xt_hashlimit: size too large, truncated to 1048576 [ 127.216197][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.806'. [ 127.267502][ T105] Bluetooth: (null): Invalid header checksum [ 127.340198][ T8920] netlink: 5 bytes leftover after parsing attributes in process `syz.1.812'. [ 127.344453][ T8920] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 127.401746][ T8929] syzkaller0: entered promiscuous mode [ 127.410517][ T8929] syzkaller0: entered allmulticast mode [ 127.576966][ T8955] comedi comedi1: dmm32at: I/O port conflict (0x10003c4,16) [ 127.702405][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 127.935377][ T8976] syzkaller0: entered promiscuous mode [ 127.937215][ T8976] syzkaller0: entered allmulticast mode [ 128.387039][ T8996] ptrace attach of "/syz-executor exec"[5924] was attempted by ""[8996] [ 128.490092][ T9002] macsec1: entered promiscuous mode [ 128.492609][ T9002] macsec1: entered allmulticast mode [ 128.626438][ T9010] syzkaller0: entered promiscuous mode [ 128.628210][ T9010] syzkaller0: entered allmulticast mode [ 128.752283][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 128.767094][ T8280] cgroup: fork rejected by pids controller in /syz4 [ 128.830991][ T9018] SET target dimension over the limit! [ 129.152053][ T5285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 129.157342][ T5285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 129.160271][ T5285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 129.164157][ T5285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 129.167750][ T5285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 129.298136][ T9054] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.384384][ T9054] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.402070][ T9048] chnl_net:caif_netlink_parms(): no params data found [ 129.452375][ T8362] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 129.462818][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.480912][ T9048] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.484081][ T9048] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.487217][ T9048] bridge_slave_0: entered allmulticast mode [ 129.491158][ T9048] bridge_slave_0: entered promiscuous mode [ 129.507450][ T9054] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.518555][ T9048] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.521392][ T9048] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.524505][ T9] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 129.529245][ T9048] bridge_slave_1: entered allmulticast mode [ 129.534676][ T9048] bridge_slave_1: entered promiscuous mode [ 129.561657][ T9048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.568161][ T9048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.596414][ T9048] team0: Port device team_slave_0 added [ 129.610023][ T9054] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.618356][ T9048] team0: Port device team_slave_1 added [ 129.623009][ T8362] usb 7-1: Using ep0 maxpacket: 8 [ 129.626966][ T8362] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 129.631660][ T8362] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 129.637753][ T9048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.637995][ T8362] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 129.640404][ T9048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.644733][ T8362] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.654337][ T9048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.659753][ T8362] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.667299][ T8362] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.668815][ T9048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.673486][ T9048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.683070][ T9048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.684426][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 129.690737][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 129.695448][ T9] usb 6-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.700593][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 129.705345][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.710741][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.714329][ T9] usb 6-1: Product: syz [ 129.716059][ T9] usb 6-1: Manufacturer: syz [ 129.718069][ T9] usb 6-1: SerialNumber: syz [ 129.726948][ T9048] hsr_slave_0: entered promiscuous mode [ 129.730119][ T9048] hsr_slave_1: entered promiscuous mode [ 129.733610][ T9048] debugfs: 'hsr0' already exists in 'hsr' [ 129.735970][ T9048] Cannot create hsr debugfs directory [ 129.764973][ T1144] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.782404][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 129.805412][ T1144] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.829120][ T1144] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.849121][ T13] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.876027][ T8362] usb 7-1: GET_CAPABILITIES returned 0 [ 129.878421][ T8362] usbtmc 7-1:16.0: can't read capabilities [ 129.912799][ T9048] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.934427][ T9] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 129.947415][ T9] usb 6-1: USB disconnect, device number 11 [ 130.000659][ T9069] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 130.037134][ T9048] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.108948][ T50] usb 7-1: USB disconnect, device number 4 [ 130.130901][ T9048] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.170752][ T9082] Bluetooth: hci2: Frame reassembly failed (-84) [ 130.179602][ T1144] Bluetooth: hci2: Frame reassembly failed (-84) [ 130.182119][ T1144] Bluetooth: hci2: Frame reassembly failed (-84) [ 130.186252][ T1144] Bluetooth: hci2: Frame reassembly failed (-84) [ 130.210248][ T9048] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.275611][ T9086] netlink: 'syz.2.863': attribute type 83 has an invalid length. [ 130.283031][ T9087] netlink: 'syz.2.863': attribute type 83 has an invalid length. [ 130.476965][ T9048] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 130.484434][ T9048] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 130.489894][ T9100] tipc: Started in network mode [ 130.491908][ T9100] tipc: Node identity ea923fa3c8bd, cluster identity 4711 [ 130.495678][ T9100] tipc: Enabled bearer , priority 0 [ 130.498560][ T9048] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 130.508737][ T9048] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 130.523454][ T9101] tipc: Disabling bearer [ 130.587690][ T9048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.603322][ T9048] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.609715][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.612460][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.623869][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.626933][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.651235][ T9116] loop2: detected capacity change from 0 to 7 [ 130.657845][ T9116] Dev loop2: unable to read RDB block 7 [ 130.660884][ T9116] loop2: unable to read partition table [ 130.663757][ T9116] loop2: partition table beyond EOD, truncated [ 130.667000][ T9116] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 130.715198][ T9123] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 4π!FVluc'f`ކ;1 [ 130.792320][ T9] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 130.798678][ T9048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.822376][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 130.922297][ T9] usb 7-1: device descriptor read/64, error -71 [ 131.002836][ T9048] veth0_vlan: entered promiscuous mode [ 131.008341][ T9048] veth1_vlan: entered promiscuous mode [ 131.027815][ T9048] veth0_macvtap: entered promiscuous mode [ 131.031667][ T9048] veth1_macvtap: entered promiscuous mode [ 131.041697][ T9048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.051532][ T9048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.058581][ T1144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.058768][ T5927] overlayfs: failed lookup in lower (newroot/216, name='bus', err=-40): overlapping layers [ 131.062078][ T1144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.075932][ T1144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.077749][ T5927] overlayfs: failed lookup in lower (newroot/216, name='bus', err=-40): overlapping layers [ 131.079587][ T1144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.175339][ T9] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 131.188406][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.190967][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.206415][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.208958][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.222424][ T5932] Bluetooth: hci0: command tx timeout [ 131.226982][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 131.226994][ T40] audit: type=1400 audit(2000000072.709:647): avc: denied { mounton } for pid=9048 comm="syz-executor" path="/syzkaller.uroVyJ/syz-tmp" dev="sda1" ino=2040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 131.270495][ T9153] syzkaller0: entered promiscuous mode [ 131.272355][ T9153] syzkaller0: entered allmulticast mode [ 131.302801][ T9] usb 7-1: device descriptor read/64, error -71 [ 131.412853][ T9] usb usb7-port1: attempt power cycle [ 131.421742][ T9155] __nla_validate_parse: 7 callbacks suppressed [ 131.421762][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'. [ 131.433047][ T9155] netlink: 68 bytes leftover after parsing attributes in process `syz.4.873'. [ 131.473688][ T9155] block nbd4: shutting down sockets [ 131.642737][ T5936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.653686][ T5936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.657022][ T5936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.660212][ T5936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.664652][ T5936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.693299][ T9165] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0 [ 131.736420][ T9168] program syz.4.878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.772424][ T9] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 131.787582][ T9163] chnl_net:caif_netlink_parms(): no params data found [ 131.788992][ T9173] Bluetooth: MGMT ver 1.23 [ 131.805709][ T9] usb 7-1: device descriptor read/8, error -71 [ 131.840470][ T40] audit: type=1400 audit(2000000073.319:648): avc: denied { append } for pid=9177 comm="syz.4.880" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 131.862303][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 131.868546][ T9163] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.871591][ T9163] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.875399][ T9163] bridge_slave_0: entered allmulticast mode [ 131.879370][ T9163] bridge_slave_0: entered promiscuous mode [ 131.885743][ T9163] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.888842][ T9163] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.891971][ T9163] bridge_slave_1: entered allmulticast mode [ 131.896421][ T9163] bridge_slave_1: entered promiscuous mode [ 131.922536][ T9163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.929854][ T9163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.957781][ T9163] team0: Port device team_slave_0 added [ 131.963679][ T9163] team0: Port device team_slave_1 added [ 132.007100][ T9163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.009969][ T9163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.025205][ T9163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.031225][ T9163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.033945][ T9163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.041953][ T9163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.048198][ T9184] syzkaller0: entered promiscuous mode [ 132.049993][ T9184] syzkaller0: entered allmulticast mode [ 132.062304][ T9] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 132.083060][ T9] usb 7-1: device descriptor read/8, error -71 [ 132.086773][ T9163] hsr_slave_0: entered promiscuous mode [ 132.089051][ T9163] hsr_slave_1: entered promiscuous mode [ 132.091181][ T9163] debugfs: 'hsr0' already exists in 'hsr' [ 132.093349][ T9163] Cannot create hsr debugfs directory [ 132.193279][ T5285] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 132.194713][ T5932] Bluetooth: hci2: command 0x1003 tx timeout [ 132.196783][ T9] usb usb7-port1: unable to enumerate USB device [ 132.199109][ T9163] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 132.206858][ T9163] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 132.217864][ T9163] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 132.227244][ T9163] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 132.246040][ T9163] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.248381][ T9163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.250782][ T9163] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.253155][ T9163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.288725][ T9163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.299117][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.301775][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.308076][ T9163] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.314280][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.316591][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.324043][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.326359][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.446754][ T9163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.572940][ T9163] veth0_vlan: entered promiscuous mode [ 132.578103][ T9163] veth1_vlan: entered promiscuous mode [ 132.592829][ T9163] veth0_macvtap: entered promiscuous mode [ 132.596997][ T9163] veth1_macvtap: entered promiscuous mode [ 132.606237][ T9163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.612370][ T9163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.618395][ T1144] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.620983][ T1144] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.624352][ T1144] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.626894][ T1144] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.658044][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.660553][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.677358][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.679827][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.902284][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 133.302637][ T5285] Bluetooth: hci0: command tx timeout [ 133.702824][ T5285] Bluetooth: hci3: command tx timeout [ 133.850821][ T40] audit: type=1400 audit(2000000075.329:649): avc: denied { ioctl } for pid=9239 comm="syz.2.892" path="/dev/usbmon8" dev="devtmpfs" ino=762 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 133.942611][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 133.975433][ T9250] syzkaller0: entered promiscuous mode [ 133.977330][ T9250] syzkaller0: entered allmulticast mode [ 134.177951][ T9255] netlink: 'syz.4.895': attribute type 1 has an invalid length. [ 134.177952][ T9253] netlink: 'syz.4.895': attribute type 1 has an invalid length. [ 134.982318][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 135.211962][ T40] audit: type=1400 audit(2000000076.689:650): avc: denied { setattr } for pid=9263 comm="syz.6.897" name="QIPCRTR" dev="sockfs" ino=28489 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 135.281954][ T9269] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 135.286706][ T9269] overlayfs: fs on './file1' does not support file handles, falling back to index=off,nfs_export=off. [ 135.327083][ T40] audit: type=1400 audit(2000000000.040:651): avc: denied { setopt } for pid=9263 comm="syz.6.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 135.334450][ T40] audit: type=1400 audit(2000000000.040:652): avc: denied { getopt } for pid=9276 comm="syz.5.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.382575][ T5285] Bluetooth: hci0: command tx timeout [ 135.464909][ T9275] kvm: kvm [9274]: vcpu1, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 135.479958][ T9281] ptrace attach of "/syz-executor exec"[9048] was attempted by ""[9281] [ 135.744177][ T9289] xt_policy: too many policy elements [ 135.785295][ T9292] syzkaller0: entered promiscuous mode [ 135.787173][ T9292] syzkaller0: entered allmulticast mode [ 135.792429][ T5285] Bluetooth: hci3: command tx timeout [ 135.982612][ T50] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 135.987825][ T9299] netlink: 16 bytes leftover after parsing attributes in process `syz.4.908'. [ 136.022346][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 136.043920][ T9301] netlink: 'syz.4.909': attribute type 21 has an invalid length. [ 136.046651][ T9301] netlink: 156 bytes leftover after parsing attributes in process `syz.4.909'. [ 136.131645][ T9303] syzkaller0: entered promiscuous mode [ 136.135265][ T9303] syzkaller0: entered allmulticast mode [ 136.139586][ T50] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 136.148011][ T50] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 136.151604][ T50] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 136.159374][ T50] usb 10-1: string descriptor 0 read error: -22 [ 136.161849][ T50] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.165954][ T50] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.173076][ T9289] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 136.321041][ T9311] syz.2.913: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 136.321350][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.913'. [ 136.334598][ T9311] CPU: 3 UID: 0 PID: 9311 Comm: syz.2.913 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.334616][ T9311] Tainted: [L]=SOFTLOCKUP [ 136.334620][ T9311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.334626][ T9311] Call Trace: [ 136.334630][ T9311] [ 136.334635][ T9311] dump_stack_lvl+0x100/0x190 [ 136.334656][ T9311] warn_alloc.cold+0x95/0x1c1 [ 136.334674][ T9311] ? __pfx_warn_alloc+0x10/0x10 [ 136.334700][ T9311] ? kasan_save_stack+0x3f/0x50 [ 136.334714][ T9311] ? kasan_save_stack+0x30/0x50 [ 136.334727][ T9311] ? kasan_save_track+0x14/0x30 [ 136.334742][ T9311] ? xskq_create+0xfb/0x1d0 [ 136.334757][ T9311] __vmalloc_node_range_noprof+0x1252/0x1530 [ 136.334774][ T9311] ? xskq_create+0xfb/0x1d0 [ 136.334792][ T9311] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 136.334809][ T9311] ? xskq_create+0xfb/0x1d0 [ 136.334823][ T9311] vmalloc_user_noprof+0x9e/0xe0 [ 136.334834][ T9311] ? xskq_create+0xfb/0x1d0 [ 136.334849][ T9311] xskq_create+0xfb/0x1d0 [ 136.334864][ T9311] xsk_setsockopt+0x743/0xab0 [ 136.334879][ T9311] ? __pfx_xsk_setsockopt+0x10/0x10 [ 136.334893][ T9311] ? find_held_lock+0x2b/0x80 [ 136.334906][ T9311] ? __fget_files+0x215/0x3d0 [ 136.334918][ T9311] ? selinux_socket_setsockopt+0x6a/0x80 [ 136.334936][ T9311] ? __pfx_xsk_setsockopt+0x10/0x10 [ 136.334951][ T9311] do_sock_setsockopt+0xf3/0x1d0 [ 136.334965][ T9311] __sys_setsockopt+0x195/0x220 [ 136.334984][ T9311] __x64_sys_setsockopt+0xbd/0x160 [ 136.335000][ T9311] ? do_syscall_64+0x95/0xf80 [ 136.335010][ T9311] ? lockdep_hardirqs_on+0x78/0x100 [ 136.335021][ T9311] do_syscall_64+0x106/0xf80 [ 136.335030][ T9311] ? clear_bhb_loop+0x40/0x90 [ 136.335043][ T9311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.335054][ T9311] RIP: 0033:0x7fef08d9c799 [ 136.335063][ T9311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.335074][ T9311] RSP: 002b:00007fef09b9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 136.335084][ T9311] RAX: ffffffffffffffda RBX: 00007fef09015fa0 RCX: 00007fef08d9c799 [ 136.335091][ T9311] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 136.335097][ T9311] RBP: 00007fef08e32bd9 R08: 0000000000000004 R09: 0000000000000000 [ 136.335103][ T9311] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.335109][ T9311] R13: 00007fef09016038 R14: 00007fef09015fa0 R15: 00007fff04371bb8 [ 136.335123][ T9311] [ 136.335127][ T9311] Mem-Info: [ 136.427832][ T9311] active_anon:6860 inactive_anon:337 isolated_anon:0 [ 136.427832][ T9311] active_file:11007 inactive_file:8653 isolated_file:0 [ 136.427832][ T9311] unevictable:1768 dirty:160 writeback:0 [ 136.427832][ T9311] slab_reclaimable:8420 slab_unreclaimable:85103 [ 136.427832][ T9311] mapped:23131 shmem:2213 pagetables:5839 [ 136.427832][ T9311] sec_pagetables:316 bounce:0 [ 136.427832][ T9311] kernel_misc_reclaimable:0 [ 136.427832][ T9311] free:464258 free_pcp:23218 free_cma:0 [ 136.433530][ T40] audit: type=1400 audit(2000000001.149:653): avc: denied { getopt } for pid=9288 comm="syz.5.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 136.435877][ T50] cdc_ncm 10-1:1.0: bind() failure [ 136.440925][ T50] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 136.440961][ T50] cdc_ncm 10-1:1.1: bind() failure [ 136.446579][ T9311] Node 0 active_anon:27440kB inactive_anon:1348kB active_file:41232kB inactive_file:34392kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:55624kB dirty:640kB writeback:0kB shmem:5316kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14656kB pagetables:13620kB sec_pagetables:1264kB all_unreclaimable? no Balloon:0kB [ 136.448831][ T50] usb 10-1: USB disconnect, device number 3 [ 136.477263][ T9311] Node 1 active_anon:0kB inactive_anon:0kB active_file:2796kB inactive_file:220kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36900kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:9736kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 136.488953][ T9311] Node 0 DMA free:15040kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:272kB local_pcp:112kB free_cma:0kB [ 136.503094][ T9311] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 136.505507][ T9311] Node 0 DMA32 free:331912kB boost:0kB min:27476kB low:34344kB high:41212kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27440kB inactive_anon:1348kB active_file:41232kB inactive_file:34392kB unevictable:3536kB writepending:640kB zspages:0kB present:2080628kB managed:1260980kB mlocked:0kB bounce:0kB free_pcp:62348kB local_pcp:12784kB free_cma:0kB [ 136.519409][ T9311] lowmem_reserve[]: 0 0 0 0 0 [ 136.521023][ T9311] Node 1 Normal free:1509824kB boost:0kB min:39760kB low:49700kB high:59640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:2796kB inactive_file:220kB unevictable:3536kB writepending:0kB zspages:2736kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:30132kB local_pcp:124kB free_cma:0kB [ 136.533884][ T9311] lowmem_reserve[]: 0 0 0 0 0 [ 136.535630][ T9311] Node 0 DMA: 9*4kB (UM) 9*8kB (UM) 12*16kB (UM) 11*32kB (UM) 7*64kB (U) 7*128kB (U) 9*256kB (UM) 3*512kB (UM) 5*1024kB (UM) 2*2048kB (U) 0*4096kB = 15052kB [ 136.541620][ T9311] Node 0 DMA32: 684*4kB (UE) 225*8kB (UE) 303*16kB (U) 6*32kB (ME) 273*64kB (UE) 366*128kB (UME) 266*256kB (UME) 171*512kB (UM) 82*1024kB (UM) 9*2048kB (UM) 0*4096kB = 331944kB [ 136.549198][ T9311] Node 1 Normal: 498*4kB (UME) 517*8kB (UME) 505*16kB (UME) 470*32kB (UE) 456*64kB (UME) 431*128kB (UME) 358*256kB (UME) 358*512kB (UM) 291*1024kB (UM) 28*2048kB (UME) 187*4096kB (UM) = 1509824kB [ 136.556189][ T9311] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.559238][ T9311] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 136.562391][ T9311] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.565412][ T9311] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 136.569260][ T9311] 22004 total pagecache pages [ 136.571235][ T9311] 129 pages in swap cache [ 136.573250][ T9311] Free swap = 119484kB [ 136.574986][ T9311] Total swap = 124996kB [ 136.576860][ T9311] 1048443 pages RAM [ 136.578479][ T9311] 0 pages HighMem/MovableOnly [ 136.580449][ T9311] 283887 pages reserved [ 136.582878][ T9311] 0 pages cma reserved [ 137.062306][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 137.472437][ T5285] Bluetooth: hci0: command tx timeout [ 137.562602][ T9322] syzkaller0: entered promiscuous mode [ 137.564939][ T9322] syzkaller0: entered allmulticast mode [ 137.652663][ T40] audit: type=1400 audit(2000000002.359:654): avc: denied { mount } for pid=9333 comm="syz.6.916" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 137.722630][ T9340] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.917'. [ 137.727201][ T9340] netlink: ct family unspecified [ 137.730305][ T9340] netlink: 'syz.2.917': attribute type 21 has an invalid length. [ 137.734673][ T9340] IPv6: NLM_F_CREATE should be specified when creating new route [ 137.796362][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.798389][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.873579][ T5285] Bluetooth: hci3: command tx timeout [ 138.103153][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 138.307981][ T9347] ubi31: attaching mtd0 [ 138.313229][ T9347] ubi31: scanning is finished [ 138.315300][ T9347] ubi31: empty MTD device detected [ 138.521624][ T9347] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 138.524563][ T9347] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 138.527429][ T9347] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 138.530199][ T9347] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 138.533873][ T9347] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 138.536964][ T9347] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 138.541561][ T9347] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 103869156 [ 138.544930][ T9347] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 138.552408][ T9349] ubi31: background thread "ubi_bgt31d" started, PID 9349 [ 138.628265][ T9352] 9pnet_virtio: no channels available for device syz [ 138.632552][ T9352] 9pnet_virtio: no channels available for device syz [ 138.635773][ T9352] 9pnet_virtio: no channels available for device syz [ 138.638957][ T9352] 9pnet_virtio: no channels available for device syz [ 138.641879][ T9352] 9pnet_virtio: no channels available for device syz [ 138.645231][ T9352] 9pnet_virtio: no channels available for device syz [ 138.648209][ T9352] 9pnet_virtio: no channels available for device syz [ 138.650954][ T9352] 9pnet_virtio: no channels available for device syz [ 138.656661][ T9352] 9pnet_virtio: no channels available for device syz [ 138.659922][ T9352] 9pnet_virtio: no channels available for device syz [ 138.663139][ T9352] 9pnet_virtio: no channels available for device syz [ 138.666490][ T9352] 9pnet_virtio: no channels available for device syz [ 138.669707][ T9352] 9pnet_virtio: no channels available for device syz [ 138.672963][ T9352] 9pnet_virtio: no channels available for device syz [ 138.732750][ T9356] ntfs3(loop2): try to read out of volume at offset 0x0 [ 138.898797][ T9371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.928'. [ 138.898840][ T9372] netlink: 24 bytes leftover after parsing attributes in process `syz.2.928'. [ 138.961357][ T9371] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9371 comm=syz.2.928 [ 138.966388][ T9371] tmpfs: Bad value for 'mpol' [ 138.968828][ T9372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5144 sclass=netlink_route_socket pid=9372 comm=syz.2.928 [ 138.968853][ T9381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5144 sclass=netlink_route_socket pid=9381 comm=syz.2.928 [ 138.974587][ T9380] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 139.015557][ T9383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.931'. [ 139.019682][ T9383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.931'. [ 139.072630][ T9386] afs: Unknown parameter 'dߎwCw‡fI Js-1[' [ 139.089714][ T40] audit: type=1400 audit(2000000003.799:655): avc: denied { unmount } for pid=5924 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 139.121801][ T40] audit: type=1400 audit(2000000003.829:656): avc: denied { unmount } for pid=9163 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 139.131776][ T9397] fuse: Bad value for 'user_id' [ 139.133756][ T9397] fuse: Bad value for 'user_id' [ 139.142293][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 139.156625][ T9395] syzkaller0: entered promiscuous mode [ 139.156640][ T9395] syzkaller0: entered allmulticast mode [ 139.175215][ T9399] syzkaller0: entered promiscuous mode [ 139.175237][ T9399] syzkaller0: entered allmulticast mode [ 139.265121][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 139.942851][ T5285] Bluetooth: hci3: command tx timeout [ 140.182316][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 140.450443][ T9429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48912 sclass=netlink_route_socket pid=9429 comm=syz.6.944 [ 140.486715][ T9432] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 140.549140][ T40] audit: type=1400 audit(2000000005.259:657): avc: denied { ioctl } for pid=9435 comm="syz.6.947" path="socket:[33073]" dev="sockfs" ino=33073 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 140.708924][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 140.809944][ T40] audit: type=1400 audit(2000000005.519:658): avc: denied { name_bind } for pid=9450 comm="syz.2.953" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 141.222444][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 142.272417][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 142.892121][ T9414] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.959757][ T9477] syzkaller0: entered promiscuous mode [ 142.963117][ T9477] syzkaller0: entered allmulticast mode [ 142.996061][ T9486] comedi comedi0: comedi_config --init_data is deprecated [ 143.032868][ T9489] xt_hashlimit: size too large, truncated to 1048576 [ 143.255156][ T9524] tipc: Enabled bearer , priority 0 [ 143.271167][ T9524] tipc: Resetting bearer [ 143.276574][ T9526] syzkaller0: entered promiscuous mode [ 143.278686][ T9526] syzkaller0: entered allmulticast mode [ 143.302334][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 143.442287][ T40] audit: type=1326 audit(2000000008.149:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.4.973" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc80059c799 code=0x0 [ 143.544215][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.973'. [ 143.682907][ T9543] lo speed is unknown, defaulting to 1000 [ 143.687433][ T9543] lo speed is unknown, defaulting to 1000 [ 143.691354][ T9543] lo speed is unknown, defaulting to 1000 [ 143.801292][ T9543] infiniband syz0: set active [ 143.804271][ T34] lo speed is unknown, defaulting to 1000 [ 143.806557][ T9543] infiniband syz0: added lo [ 143.843193][ T9543] RDS/IB: syz0: added [ 143.845528][ T9543] smc: adding ib device syz0 with port count 1 [ 143.848293][ T9543] smc: ib device syz0 port 1 has no pnetid [ 143.853540][ T34] lo speed is unknown, defaulting to 1000 [ 143.856783][ T9543] lo speed is unknown, defaulting to 1000 [ 143.968146][ T9543] lo speed is unknown, defaulting to 1000 [ 144.120356][ T9543] lo speed is unknown, defaulting to 1000 [ 144.164070][ T9560] fuse: Bad value for 'fd' [ 144.294477][ T9573] syzkaller0: entered promiscuous mode [ 144.296385][ T9573] syzkaller0: entered allmulticast mode [ 144.298418][ T40] audit: type=1400 audit(2000000009.009:660): avc: denied { map } for pid=9570 comm="syz.5.980" path="socket:[33286]" dev="sockfs" ino=33286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 144.299249][ T9543] lo speed is unknown, defaulting to 1000 [ 144.342509][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 144.407700][ T9543] lo speed is unknown, defaulting to 1000 [ 144.455294][ T9576] IPVS: set_ctl: invalid protocol: 2 2.0.0.0:1024 [ 144.497291][ T9543] lo speed is unknown, defaulting to 1000 [ 144.616895][ T9543] lo speed is unknown, defaulting to 1000 [ 144.681178][ T9591] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.987'. [ 144.718979][ T40] audit: type=1400 audit(2000000009.429:661): avc: denied { getopt } for pid=9590 comm="syz.4.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 144.781409][ T9543] lo speed is unknown, defaulting to 1000 [ 144.947271][ T9616] syzkaller0: entered promiscuous mode [ 144.950012][ T9616] syzkaller0: entered allmulticast mode [ 144.991928][ T9618] syzkaller1: entered promiscuous mode [ 144.994188][ T9618] syzkaller1: entered allmulticast mode [ 145.000567][ T40] audit: type=1400 audit(2000000009.709:662): avc: denied { create } for pid=9617 comm="syz.2.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.060889][ T40] audit: type=1400 audit(2000000009.769:663): avc: denied { create } for pid=9623 comm="syz.6.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 145.080328][ T40] audit: type=1400 audit(2000000009.779:664): avc: denied { connect } for pid=9623 comm="syz.6.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 145.100238][ T40] audit: type=1400 audit(2000000009.789:665): avc: denied { getopt } for pid=9623 comm="syz.6.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 145.129032][ T9630] lo speed is unknown, defaulting to 1000 [ 145.146421][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'. [ 145.150291][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'. [ 145.158352][ T9632] netlink: 'syz.4.995': attribute type 10 has an invalid length. [ 145.203742][ T9632] team0: Port device dummy0 added [ 145.349277][ T9651] netlink: 'syz.2.1002': attribute type 8 has an invalid length. [ 145.367207][ T9651] netlink: 'syz.2.1002': attribute type 1 has an invalid length. [ 145.369689][ T9651] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1002'. [ 145.381875][ T9653] netlink: 'syz.5.1003': attribute type 1 has an invalid length. [ 145.382388][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 145.387866][ T9653] netlink: 9188 bytes leftover after parsing attributes in process `syz.5.1003'. [ 145.501134][ T9665] netlink: 'syz.5.1006': attribute type 10 has an invalid length. [ 145.515364][ T9665] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1006'. [ 145.519838][ T9665] team0: entered promiscuous mode [ 145.522183][ T9665] team_slave_0: entered promiscuous mode [ 145.525950][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1004'. [ 145.530070][ T9668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1004'. [ 145.541841][ T9668] netlink: 'syz.4.1004': attribute type 19 has an invalid length. [ 145.544531][ T9665] team_slave_1: entered promiscuous mode [ 145.547214][ T9665] team0: entered allmulticast mode [ 145.548884][ T9665] team_slave_0: entered allmulticast mode [ 145.550709][ T9665] team_slave_1: entered allmulticast mode [ 145.553407][ T9665] bridge0: port 3(team0) entered blocking state [ 145.555493][ T9665] bridge0: port 3(team0) entered disabled state [ 145.584342][ T9675] QAT: Device 2 not found [ 145.586601][ T9675] gfs2: Unknown parameter 'nfs' [ 145.600008][ T9665] bridge0: port 3(team0) entered blocking state [ 145.602388][ T9665] bridge0: port 3(team0) entered forwarding state [ 145.603473][ T9676] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 145.656414][ T9679] syz_tun: entered allmulticast mode [ 145.693544][ T9677] syz_tun: left allmulticast mode [ 145.700148][ T9683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9683 comm=syz.2.1011 [ 145.723282][ T9683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9683 comm=syz.2.1011 [ 145.787297][ T40] audit: type=1400 audit(2000000010.499:666): avc: denied { mount } for pid=9693 comm="syz.4.1012" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 145.809025][ T40] audit: type=1400 audit(2000000010.519:667): avc: denied { unmount } for pid=9048 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 145.838540][ T9701] syzkaller0: entered promiscuous mode [ 145.840925][ T9701] syzkaller0: entered allmulticast mode [ 145.844200][ T9687] input: syz1 as /devices/virtual/input/input14 [ 145.871286][ T13] nci: nci_rx_work: unknown MT 0x7 [ 146.422309][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 147.462336][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 148.502286][ C2] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 148.793948][ T9696] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 148.849548][ T9723] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 148.856928][ T9723] netlink: 'syz.4.1024': attribute type 11 has an invalid length. [ 148.860205][ T9723] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.1024'. [ 148.914564][ T9732] syzkaller0: entered promiscuous mode [ 148.917037][ T9732] syzkaller0: entered allmulticast mode [ 148.936787][ T9732] netlink: 'syz.4.1025': attribute type 3 has an invalid length. [ 148.939511][ T9732] netlink: 'syz.4.1025': attribute type 1 has an invalid length. [ 148.941993][ T9732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1025'. [ 148.993742][ T40] audit: type=1400 audit(2000000013.709:668): avc: denied { getopt } for pid=9755 comm="syz.5.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.002474][ T9757] netlink: 'syz.5.1030': attribute type 11 has an invalid length. [ 149.079386][ T9768] netlink: 'syz.2.1032': attribute type 2 has an invalid length. [ 149.090944][ T9767] binder: 9766:9767 ioctl c0306201 200000000180 returned -14 [ 149.164098][ T9786] ================================================================== [ 149.167210][ T9786] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 149.170120][ T9786] Read of size 8 at addr ffff88802fec5418 by task syz.4.1037/9786 [ 149.173665][ T9786] [ 149.175626][ T9786] CPU: 3 UID: 0 PID: 9786 Comm: syz.4.1037 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.175644][ T9786] Tainted: [L]=SOFTLOCKUP [ 149.175647][ T9786] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.175654][ T9786] Call Trace: [ 149.175659][ T9786] [ 149.175664][ T9786] dump_stack_lvl+0x100/0x190 [ 149.175684][ T9786] print_report+0x156/0x4c9 [ 149.175699][ T9786] ? __virt_addr_valid+0x81/0x620 [ 149.175715][ T9786] ? __phys_addr+0xe8/0x180 [ 149.175730][ T9786] ? dvb_device_open+0x33f/0x3b0 [ 149.175741][ T9786] kasan_report+0xdf/0x1e0 [ 149.176002][ T9786] ? dvb_device_open+0x33f/0x3b0 [ 149.176015][ T9786] ? __pfx_dvb_device_open+0x10/0x10 [ 149.176026][ T9786] dvb_device_open+0x33f/0x3b0 [ 149.176044][ T9786] ? __pfx_dvb_device_open+0x10/0x10 [ 149.176055][ T9786] chrdev_open+0x234/0x6a0 [ 149.176065][ T9786] ? __pfx_chrdev_open+0x10/0x10 [ 149.176075][ T9786] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 149.176088][ T9786] do_dentry_open+0x6d8/0x1660 [ 149.176102][ T9786] ? __pfx_chrdev_open+0x10/0x10 [ 149.176113][ T9786] vfs_open+0x82/0x3f0 [ 149.176125][ T9786] path_openat+0x208c/0x31a0 [ 149.176137][ T9786] ? __pfx_path_openat+0x10/0x10 [ 149.176149][ T9786] do_file_open+0x20e/0x430 [ 149.176159][ T9786] ? __pfx_do_file_open+0x10/0x10 [ 149.176173][ T9786] ? alloc_fd+0x476/0x790 [ 149.176183][ T9786] ? do_getname+0x191/0x390 [ 149.176198][ T9786] do_sys_openat2+0x10d/0x1e0 [ 149.176212][ T9786] ? __pfx_do_sys_openat2+0x10/0x10 [ 149.176226][ T9786] __x64_sys_openat+0x12d/0x210 [ 149.176238][ T9786] ? __pfx___x64_sys_openat+0x10/0x10 [ 149.176250][ T9786] ? do_user_addr_fault+0x8d6/0x12f0 [ 149.176263][ T9786] do_syscall_64+0x106/0xf80 [ 149.176279][ T9786] ? clear_bhb_loop+0x40/0x90 [ 149.176291][ T9786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.176302][ T9786] RIP: 0033:0x7fc80055cfce [ 149.176311][ T9786] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 149.176322][ T9786] RSP: 002b:00007fc8014dab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 149.176332][ T9786] RAX: ffffffffffffffda RBX: 00007fc8014db6c0 RCX: 00007fc80055cfce [ 149.176339][ T9786] RDX: 0000000000000400 RSI: 00007fc8014dac00 RDI: ffffffffffffff9c [ 149.176346][ T9786] RBP: 00007fc8014dac00 R08: 0000000000000000 R09: 0000000000000000 [ 149.176352][ T9786] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 149.176358][ T9786] R13: 00007fc800816038 R14: 00007fc800815fa0 R15: 00007fffae918fd8 [ 149.176369][ T9786] [ 149.176372][ T9786] [ 149.277088][ T9786] Allocated by task 1: [ 149.278752][ T9786] kasan_save_stack+0x30/0x50 [ 149.280721][ T9786] kasan_save_track+0x14/0x30 [ 149.282635][ T9786] __kasan_kmalloc+0xaa/0xb0 [ 149.284514][ T9786] dvb_register_device+0x1d6/0x1e20 [ 149.286502][ T9786] dvb_register_frontend+0x5a8/0x8a0 [ 149.288381][ T9786] vidtv_bridge_probe+0x44b/0xa30 [ 149.290406][ T9786] platform_probe+0x106/0x1d0 [ 149.292325][ T9786] really_probe+0x241/0xa60 [ 149.294197][ T9786] __driver_probe_device+0x1de/0x400 [ 149.296357][ T9786] driver_probe_device+0x4c/0x1b0 [ 149.298095][ T9786] __driver_attach+0x2f4/0x6a0 [ 149.299940][ T9786] bus_for_each_dev+0x13e/0x1d0 [ 149.301843][ T9786] bus_add_driver+0x305/0x5b0 [ 149.303753][ T9786] driver_register+0x1e2/0x360 [ 149.305365][ T9786] vidtv_bridge_init+0x38/0x70 [ 149.307308][ T9786] do_one_initcall+0x11d/0x760 [ 149.309260][ T9786] kernel_init_freeable+0x6e5/0x7a0 [ 149.311303][ T9786] kernel_init+0x1f/0x1e0 [ 149.312725][ T9786] ret_from_fork+0x754/0xd80 [ 149.314609][ T9786] ret_from_fork_asm+0x1a/0x30 [ 149.316576][ T9786] [ 149.317596][ T9786] Freed by task 9485: [ 149.319082][ T9786] kasan_save_stack+0x30/0x50 [ 149.320844][ T9786] kasan_save_track+0x14/0x30 [ 149.322760][ T9786] kasan_save_free_info+0x3b/0x70 [ 149.324833][ T9786] __kasan_slab_free+0x5f/0x80 [ 149.326802][ T9786] kfree+0x1f6/0x6b0 [ 149.328405][ T9786] dvb_device_put.part.0+0x57/0x90 [ 149.330501][ T9786] dvb_device_open+0x2ba/0x3b0 [ 149.332449][ T9786] chrdev_open+0x234/0x6a0 [ 149.333898][ T9786] do_dentry_open+0x6d8/0x1660 [ 149.335856][ T9786] vfs_open+0x82/0x3f0 [ 149.337556][ T9786] path_openat+0x208c/0x31a0 [ 149.339437][ T9786] do_file_open+0x20e/0x430 [ 149.341247][ T9786] do_sys_openat2+0x10d/0x1e0 [ 149.342828][ T9786] __x64_sys_openat+0x12d/0x210 [ 149.344834][ T9786] do_syscall_64+0x106/0xf80 [ 149.346728][ T9786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.348920][ T9786] [ 149.349729][ T9786] The buggy address belongs to the object at ffff88802fec5400 [ 149.349729][ T9786] which belongs to the cache kmalloc-256 of size 256 [ 149.355173][ T9786] The buggy address is located 24 bytes inside of [ 149.355173][ T9786] freed 256-byte region [ffff88802fec5400, ffff88802fec5500) [ 149.360275][ T9786] [ 149.361287][ T9786] The buggy address belongs to the physical page: [ 149.363604][ T9786] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802fec5400 pfn:0x2fec4 [ 149.367467][ T9786] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 149.370624][ T9786] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 149.373804][ T9786] page_type: f5(slab) [ 149.375434][ T9786] raw: 00fff00000000240 ffff88801b842b40 ffffea000173f090 ffffea0001649c90 [ 149.378701][ T9786] raw: ffff88802fec5400 000000000010000f 00000000f5000000 0000000000000000 [ 149.382071][ T9786] head: 00fff00000000240 ffff88801b842b40 ffffea000173f090 ffffea0001649c90 [ 149.385552][ T9786] head: ffff88802fec5400 000000000010000f 00000000f5000000 0000000000000000 [ 149.389035][ T9786] head: 00fff00000000001 ffffea0000bfb101 00000000ffffffff 00000000ffffffff [ 149.392085][ T9786] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 149.395541][ T9786] page dumped because: kasan: bad access detected [ 149.398164][ T9786] page_owner tracks the page as allocated [ 149.400486][ T9786] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17872561124, free_ts 0 [ 149.408320][ T9786] post_alloc_hook+0x153/0x170 [ 149.410292][ T9786] get_page_from_freelist+0x111d/0x3140 [ 149.412532][ T9786] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 149.414930][ T9786] new_slab+0xa6/0x6d0 [ 149.416622][ T9786] refill_objects+0x26b/0x400 [ 149.418549][ T9786] __pcs_replace_empty_main+0x19f/0x600 [ 149.420797][ T9786] __kmalloc_cache_noprof+0x493/0x6f0 [ 149.422967][ T9786] bus_add_driver+0x92/0x5b0 [ 149.424851][ T9786] driver_register+0x1e2/0x360 [ 149.426459][ T9786] usb_register_driver+0x21c/0x3e0 [ 149.428544][ T9786] do_one_initcall+0x11d/0x760 [ 149.430519][ T9786] kernel_init_freeable+0x6e5/0x7a0 [ 149.432623][ T9786] kernel_init+0x1f/0x1e0 [ 149.434391][ T9786] ret_from_fork+0x754/0xd80 [ 149.436301][ T9786] ret_from_fork_asm+0x1a/0x30 [ 149.438259][ T9786] page_owner free stack trace missing [ 149.440455][ T9786] [ 149.441455][ T9786] Memory state around the buggy address: [ 149.444165][ T9786] ffff88802fec5300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 149.447254][ T9786] ffff88802fec5380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 149.450156][ T9786] >ffff88802fec5400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 149.453338][ T9786] ^ [ 149.455305][ T9786] ffff88802fec5480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 149.458578][ T9786] ffff88802fec5500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 149.461425][ T9786] ================================================================== [ 149.476260][ T40] audit: type=1400 audit(2000000014.189:669): avc: denied { read } for pid=5315 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 149.479752][ T9786] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 149.479769][ T9786] CPU: 3 UID: 0 PID: 9786 Comm: syz.4.1037 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.479791][ T9786] Tainted: [L]=SOFTLOCKUP [ 149.479798][ T9786] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.479814][ T9786] Call Trace: [ 149.479819][ T9786] [ 149.479826][ T9786] dump_stack_lvl+0x100/0x190 [ 149.479853][ T9786] vpanic+0x552/0x970 [ 149.479869][ T9786] ? __pfx_vpanic+0x10/0x10 [ 149.479887][ T9786] ? dvb_device_open+0x33f/0x3b0 [ 149.479903][ T9786] panic+0xd1/0xe0 [ 149.479917][ T9786] ? __pfx_panic+0x10/0x10 [ 149.479932][ T9786] ? dvb_device_open+0x33f/0x3b0 [ 149.479948][ T9786] ? preempt_schedule_common+0x42/0xc0 [ 149.479975][ T9786] ? check_panic_on_warn+0x1f/0x90 [ 149.479999][ T9786] check_panic_on_warn.cold+0x19/0x34 [ 149.480016][ T9786] end_report.part.0+0x3a/0x90 [ 149.480037][ T9786] kasan_report.cold+0xe/0x18 [ 149.480059][ T9786] ? dvb_device_open+0x33f/0x3b0 [ 149.480076][ T9786] ? __pfx_dvb_device_open+0x10/0x10 [ 149.480092][ T9786] dvb_device_open+0x33f/0x3b0 [ 149.480109][ T9786] ? __pfx_dvb_device_open+0x10/0x10 [ 149.480124][ T9786] chrdev_open+0x234/0x6a0 [ 149.480140][ T9786] ? __pfx_chrdev_open+0x10/0x10 [ 149.480155][ T9786] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 149.480175][ T9786] do_dentry_open+0x6d8/0x1660 [ 149.480197][ T9786] ? __pfx_chrdev_open+0x10/0x10 [ 149.480213][ T9786] vfs_open+0x82/0x3f0 [ 149.480231][ T9786] path_openat+0x208c/0x31a0 [ 149.480249][ T9786] ? __pfx_path_openat+0x10/0x10 [ 149.480268][ T9786] do_file_open+0x20e/0x430 [ 149.480284][ T9786] ? __pfx_do_file_open+0x10/0x10 [ 149.480306][ T9786] ? alloc_fd+0x476/0x790 [ 149.480322][ T9786] ? do_getname+0x191/0x390 [ 149.480355][ T9786] do_sys_openat2+0x10d/0x1e0 [ 149.480372][ T9786] ? __pfx_do_sys_openat2+0x10/0x10 [ 149.480393][ T9786] __x64_sys_openat+0x12d/0x210 [ 149.480411][ T9786] ? __pfx___x64_sys_openat+0x10/0x10 [ 149.480431][ T9786] ? do_user_addr_fault+0x8d6/0x12f0 [ 149.480450][ T9786] do_syscall_64+0x106/0xf80 [ 149.480465][ T9786] ? clear_bhb_loop+0x40/0x90 [ 149.480482][ T9786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.480499][ T9786] RIP: 0033:0x7fc80055cfce [ 149.480512][ T9786] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 149.480527][ T9786] RSP: 002b:00007fc8014dab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 149.480543][ T9786] RAX: ffffffffffffffda RBX: 00007fc8014db6c0 RCX: 00007fc80055cfce [ 149.480553][ T9786] RDX: 0000000000000400 RSI: 00007fc8014dac00 RDI: ffffffffffffff9c [ 149.480563][ T9786] RBP: 00007fc8014dac00 R08: 0000000000000000 R09: 0000000000000000 [ 149.480572][ T9786] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 149.480582][ T9786] R13: 00007fc800816038 R14: 00007fc800815fa0 R15: 00007fffae918fd8 [ 149.480598][ T9786] [ 149.483758][ T9786] Kernel Offset: disabled VM DIAGNOSIS: 10:46:10 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000058 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc900031af948 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b8f2280 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f0683a2b6c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d6347000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000ffff IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=00000000551f7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff043720a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff043720a6 00007fff043720ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef08e331bc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef08e331fc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef08e33360 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef08e331ee ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000001395bd RBX=ffff88801e6e2480 RCX=ffffffff8b8f8c75 RDX=0000000000000000 RSI=ffffffff8de72593 RDI=ffffffff8c1af120 RBP=0000000000000001 RSP=ffffc90000177df0 R8 =0000000000000001 R9 =ffffed100d4a6795 R10=ffff88806a533cab R11=0000000000000000 R12=ffffed1003cdc490 R13=0000000000000001 R14=ffffffff90d96f10 R15=0000000000000000 RIP=ffffffff8b8f75df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6447000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fef09b79d58 CR3=000000002c3e5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff043720a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff043720a6 00007fff043720ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef08e331bc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef08e331fc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef08e33360 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef08e331ee ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef08feb5f8 00007fef08feb5c8 00007fef08feb600 00007fef08feb5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff824e1ad0 RDX=ffff888058efc900 RSI=ffffffff824ef2d9 RDI=ffff888058efc900 RBP=ffffea000127dec0 RSP=ffffc90004586bc8 R8 =0000000000000003 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff82089fa0 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2cbc52c6c0 ffffffff 00c00000 GS =0000 ffff8880d6547000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fef09017dac CR3=000000002cbc0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc85da2796 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc85da2796 00007ffc85da279c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2cbb6331bc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2cbb6331fc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2cbb633360 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2cbb6331ee ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2cbb7eb5f8 00007f2cbb7eb5c8 00007f2cbb7eb600 00007f2cbb7eb5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080000001 RBX=ffffc9000390edef RCX=ffffffff8b8be3af RDX=ffff88802d032480 RSI=ffffffff8b8be31e RDI=ffff88802d032480 RBP=ffffffff9b1a3dc9 RSP=ffffc9000390ed70 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000078 R11=000000000000249b R12=0000000000000078 R13=000000000000000e R14=ffffc9000390ede0 R15=dffffc0000000000 RIP=ffffffff82089fd9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc8014db6c0 ffffffff 00c00000 GS =0000 ffff8880d6647000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc800585dc0 CR3=00000000551fb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffae9194c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffae9194c6 00007fffae9194cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8006331bc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8006331fc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc800633360 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8006331ee ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8007eb5f8 00007fc8007eb5c8 00007fc8007eb600 00007fc8007eb5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000