last executing test programs: 2m26.708650369s ago: executing program 2 (id=499): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x30, 0x100, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @remote}, {0x0, 0x883e, 0x1c, 0x0, @gue={{0x1, 0x1, 0x0, 0x7f, 0x0, @void}, "440a3c37fa632f9d63d912d282967e32"}}}}}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x1000000000000, 0x1]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f00000000c0)={0x40000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0xfffffe40, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24000800}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800a00010071756f74610000001c0002800c0004400000000000050900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a6d021cba57ca"], 0x84}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2c, r8, 0x801, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8040) r9 = epoll_create1(0x0) epoll_pwait(r9, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) 2m26.527966149s ago: executing program 2 (id=503): r0 = socket$netlink(0x10, 0x3, 0x10) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000700)={0x1ff, 0x4, 0xffff1000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x13, 0x400, 0x0, 0x25dfdbfd, {0x11}}, 0x14}}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0x8000a56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r3}, 0x8) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000740)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffefd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x18, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000007000000000000000800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000a8cb000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000000183600000400000000000000000000001b99f4fffcffffff183b0000030000000000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x84, 0xcc, &(0x7f0000000600)=""/204, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0xffffffffffffffff], &(0x7f0000000540)=[{0x10040003, 0x5, 0x3}, {0x2, 0x3, 0x3, 0x5}, {0x2, 0x3, 0xf, 0xc}, {0x4, 0x4, 0xc, 0x2}], 0x10, 0x4}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="480000001000030400000000fedbdf2500007400990bf1148b0f435f1eaf7c7c4db8c0f77390d418a47b6bec237a35b74c5f95a679cb141dd8e3b1e014b3b3e2e00b0f2c811f69fb821c7bd8d21a76d5e7ff88498435f4312b20d023e2f08dc74e566272804c011d2b486c442dc71fc334dc55e818e8f76f734cad1ffcd9405fe76e8b87", @ANYRES32=0x0, @ANYBLOB="0008000007500500140012800b00010062726964676500000400028014002b8008000100", @ANYRES32=r7, @ANYBLOB="0800030001000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000200)=0x1, 0x4) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) (async) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d0001"], 0x2c}}, 0x0) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) (async) r10 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000180), 0xf, 0x880) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x6d95e000) (async, rerun: 32) fcntl$setlease(r7, 0x400, 0x1) (async, rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYRES16=r10, @ANYRES16=r5, @ANYRESHEX=r3], 0x3c}, 0x1, 0x2}, 0x8000) 2m26.522834688s ago: executing program 2 (id=507): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="74000000020802030000000000000000050000000900fb0073797a3100000000040004801c0004800800024000d3746286ad77fb44ec9664f3da000000080002400001000108000240000000"], 0x74}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m25.546359034s ago: executing program 2 (id=525): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x80080) r3 = openat$cgroup_ro(r2, &(0x7f00000002c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2e8, 0xffffffff, 0x98, 0x98, 0x198, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@unspec=@connmark={{0x30}, {0x0, 0x0, 0x41}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x6c0) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000240)={&(0x7f00000003c0)=[{0x4, 0x6000, 0x0, 0x0}, {0x100, 0x210, 0x0, 0x0}], 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="74000000020802030000000000000000050000000900fb0073797a3100000000040004801c0004800800024000d3746286ad77fb44ec9664f3da0000000800024000010001080002400000000c0500030021000000000000000000000200"], 0x74}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m24.068985615s ago: executing program 2 (id=535): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000500)=ANY=[@ANYBLOB="0800000000000000cc0000000000000001"]) write$cgroup_type(r3, &(0x7f0000000000), 0x9) 2m24.009416394s ago: executing program 2 (id=536): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r1 = socket(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r4, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000280)='2', 0x1}], 0x1) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r8}, @ptr={0x70742a85, 0x80000, 0x0, 0xf0, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x1d2) 2m8.84760946s ago: executing program 32 (id=536): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) r1 = socket(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r4, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000280)='2', 0x1}], 0x1) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r8}, @ptr={0x70742a85, 0x80000, 0x0, 0xf0, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x1d2) 1m32.269111128s ago: executing program 4 (id=1505): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x50000, 0x0) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) (async) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 1m32.208957698s ago: executing program 4 (id=1508): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x408200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x36) 1m32.205905001s ago: executing program 0 (id=1509): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x10000000) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x10000, 0x7, 0x2, 0x7e73, 0x7fffffffffffffff, 0x6, 0x95}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, &(0x7f0000000100)}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 1m32.147265927s ago: executing program 0 (id=1510): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_SCAN_ENABLE={{0x3}, 0x6}}}, 0x7) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(0xffffffffffffffff, 0x410, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents64(r1, &(0x7f00000088c0)=""/48, 0x30) getdents(r1, 0xffffffffffffffff, 0x5a) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f00000000c0)={0x5, r0}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x4, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffff7, 0x3}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_buf(r7, 0x1, 0x1a, &(0x7f0000000500)=""/26, &(0x7f0000000540)=0x1a) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000005c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701fefffff8ff000000017c0000040042800c00018006000600800a000014000280100014800c0016800800b600884709"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) 1m32.146899905s ago: executing program 4 (id=1511): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001500010300000000000000000c0000000c0004"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x64e10, 0x36a01}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0xff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) (async) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x64e10, 0x36a01}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0xff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) 1m32.056776787s ago: executing program 4 (id=1514): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff000000bfa30000000000000703000018feffff720aa9fff8ffffff71a4f0ff0000000072030200000000131d400500000000004704000001ed00006b030000000000001d440000000000007a0a00fe00ffffffc303000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7109000000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e50002a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de5c028d6112a0c2d21b2dc98814106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c53218294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb118888876b617398d00a7526103ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e08b7ab6cd9c65ba55f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddc42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293d364b9effa9a9406ac2683e231d4774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479517dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a79e59e1712c8c546768e5722da19fcdb4c2890cda1f96b952511e3a49d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767987d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c32040098e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1be62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070f66b2b388f0f744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028a3a981463f25c068d4410dad0c74e2a9478fa3be18a1a27bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab07001b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe293308b2a146f12a4c205235924cee765d94b1cc06641247c773ab8d1abbeb03ea68"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getpeername$inet(r2, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'geneve1\x00', {0x2}, 0x3}) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(&(0x7f00000025c0)=@sg0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='ocfs2\x00', 0x0, &(0x7f0000000380)='acl') sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r9, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r9, &(0x7f0000000240)='./file0\x00') ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000002c0)) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x8, 0x8}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x2408c0d4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000081000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b000100697036746e6c0000080002800400130008000a00", @ANYRES32=r10, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) 1m32.001059841s ago: executing program 0 (id=1516): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800000000007d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x8, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000540)=0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000600)={0x4000800, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x6}, &(0x7f00000003c0)=""/236, 0xec, &(0x7f0000000180)=""/94, &(0x7f0000000580)=[r0, r1, r2, r3, r4, 0x0], 0x6, {r5}}, 0x58) 1m32.00003501s ago: executing program 0 (id=1518): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x88c80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x40000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0xf76}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89a3, &(0x7f0000000040)={'bridge0\x00', @random="0b0000000010"}) r4 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@code={0xa, 0x7e, {"b9030100c0b823000000ba000000000f300f1b2b66baf80cb80a62d98beffdbafc85b0eeb9c80200000f32400f3066ba4200ecc74424001d000000c74424029fdd000066baf80cb818dbec80ef66bafc0cb803000000efc7442400cb000000c744240203000000ff2c24410f07"}}], 0x7e}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r6 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc0286405, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19) 1m31.929157046s ago: executing program 4 (id=1519): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="1400000013000149993dde440113e90006"], 0x14}], 0x1}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000100)={0xa, 0x100, 0xdf, @empty}, 0x1c, 0x0}}], 0x6a9, 0x4008004) socket$l2tp6(0xa, 0x2, 0x73) (async) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) (async) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="1400000013000149993dde440113e90006"], 0x14}], 0x1}, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000100)={0xa, 0x100, 0xdf, @empty}, 0x1c, 0x0}}], 0x6a9, 0x4008004) (async) 1m31.928487935s ago: executing program 0 (id=1520): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="74000000020802030000000000000000050000000900fb007379"], 0x74}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m31.7987996s ago: executing program 0 (id=1522): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x2, {0x1, 0xff}, 0xfe}, 0x18) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x5, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x4, 0x0, 0x80000004000000, 0x200000000c], 0x100000, 0x2010d3}) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='mounts\x00') read$FUSE(r5, &(0x7f0000003ac0)={0x2020}, 0x2023) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r9}}) splice(r8, 0x0, r7, 0x0, 0xffffffffffff8000, 0x0) close(0x4) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="00000000000000002702000014000000b703000000000000850000009c000000bf0900000000000055090100000000009500000000000000bf910000000000f35ce0809255f6c02400b7020000020000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x94) 1m31.668739316s ago: executing program 4 (id=1523): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x57) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r3 = socket(0x2a, 0x5, 0xd92) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x4d, 0x0, 0x2}, {0x2d}, {0x40, 0x40}, {0x6}]}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) accept4(r7, 0x0, 0x0, 0x80800) 1m31.583988777s ago: executing program 33 (id=1523): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x57) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r3 = socket(0x2a, 0x5, 0xd92) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x4d, 0x0, 0x2}, {0x2d}, {0x40, 0x40}, {0x6}]}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) accept4(r7, 0x0, 0x0, 0x80800) 1m4.478604397s ago: executing program 34 (id=1522): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x2, {0x1, 0xff}, 0xfe}, 0x18) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x5, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x4, 0x0, 0x80000004000000, 0x200000000c], 0x100000, 0x2010d3}) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='mounts\x00') read$FUSE(r5, &(0x7f0000003ac0)={0x2020}, 0x2023) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r9}}) splice(r8, 0x0, r7, 0x0, 0xffffffffffff8000, 0x0) close(0x4) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="00000000000000002702000014000000b703000000000000850000009c000000bf0900000000000055090100000000009500000000000000bf910000000000f35ce0809255f6c02400b7020000020000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x94) 2.724543823s ago: executing program 3 (id=2223): fsopen(&(0x7f0000000280)='cifs\x00', 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000040), &(0x7f0000000e00)=[{}, {}, {}, {}, {}, {}], &(0x7f00000006c0), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000040), &(0x7f0000000e00)=[{}, {}, {}, {}, {}, {}], &(0x7f00000006c0), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, 0x0, r2}) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) (async) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 2.545528355s ago: executing program 3 (id=2225): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x18, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c004}, 0xa4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r0, 0xc010644a, &(0x7f0000000300)) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6d616e676c720000000000000000000000000afc19760ee00d1f0000000000000500"], &(0x7f0000000100)=0x2d) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x13c, 0x1a, 0x413, 0x0, 0x25dfdbfb, {{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x4be6, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, 0xf, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffffffffffc, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf5, 0x0, 0x1000}, 0x0, 0x4, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.010213452s ago: executing program 1 (id=2231): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x85862) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x82803, 0x130) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000280)={r2, 0x1000, {0x0, 0x0, 0x0, 0x10000036, 0x4000000000001005, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237600a8ca5b07dcc14fa02c4dae4162e43ac61b7ad3300", [0x3, 0x8]}}) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x80) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bond0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x26, 0x10000100, 0xffffffff, 0x401, 0x0, 0x5, 0x4, 0x0, 0xb, 0xff, 0x0, 0x8000001f, 0x2, 0x47, 0x0, 0xfffffffd}}) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x85862) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x82803, 0x130) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000280)={r2, 0x1000, {0x0, 0x0, 0x0, 0x10000036, 0x4000000000001005, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237600a8ca5b07dcc14fa02c4dae4162e43ac61b7ad3300", [0x3, 0x8]}}) (async) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x80) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bond0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x26, 0x10000100, 0xffffffff, 0x401, 0x0, 0x5, 0x4, 0x0, 0xb, 0xff, 0x0, 0x8000001f, 0x2, 0x47, 0x0, 0xfffffffd}}) (async) 1.967116556s ago: executing program 1 (id=2232): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "07bbc136c963254c66c42afcdd7d26931300e264c4feb642c8c42699f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0) 1.814649946s ago: executing program 1 (id=2233): socket$netlink(0x10, 0x3, 0x4) (async) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000a00000000008000f0fffeffe809005300fff5dd00000010000100070c10000000000000000000", 0x58}], 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x103802) ioctl$int_in(r0, 0x5421, &(0x7f0000000500)=0xc50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r5) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r5) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x40010) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x40010) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x121800, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r6, @ANYBLOB="00022dbd7000ffdbdf254c0000000c00a70002000000000000000c00a7000400000000000000080001007063690011000200303030303a30303a31302e300000000008000300000000000ce7a70009000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000f00a9007365636f6e646e616d6500000800030001000000"], 0xb4}, 0x1, 0x0, 0x0, 0xc0}, 0x4000040) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r6, @ANYBLOB="00022dbd7000ffdbdf254c0000000c00a70002000000000000000c00a7000400000000000000080001007063690011000200303030303a30303a31302e300000000008000300000000000ce7a70009000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000f00a9007365636f6e646e616d6500000800030001000000"], 0xb4}, 0x1, 0x0, 0x0, 0xc0}, 0x4000040) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x70bd2b, 0xffff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x21}]}, 0x24}}, 0x80) (async) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x70bd2b, 0xffff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x21}]}, 0x24}}, 0x80) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x318, r3, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x58}}}}, [@NL80211_ATTR_TX_RATES={0x84, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7b, 0x0, 0x200, 0x2, 0x2000, 0x3ff, 0x5, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xfff1, 0x5, 0x9, 0x0, 0x0, 0xa, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x2}, {0x7, 0x8}, {0x0, 0x5}, {0x4, 0x2}, {0x3}, {0x0, 0x1}, {0x7, 0x2}, {0x3}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x3}, {0x2, 0x5}, {0x2, 0x5}, {0x4, 0xa}, {0x5, 0x4}, {0x1, 0x9}, {0x3, 0x5}, {0x2, 0x7}, {0x5, 0x1}, {0x4, 0x6}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x2}, {0x1, 0x2}, {0x6, 0xa}, {0x6, 0x4}, {0x5, 0xa}, {0x2, 0x3}, {0x5, 0x6}, {0x6, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xc4, 0x1, 0x6b82, 0x0, 0xbe, 0x100, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x274, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x1, 0x7, 0x3, 0xb, 0x1ff, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x9, 0xf, 0x8001, 0x3897, 0x5e, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa000, 0x9, 0x0, 0x800, 0xfffa, 0x8, 0xc, 0x4000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x7}, {0x1}, {0x5, 0x8}, {0x0, 0x5}, {0x7, 0x6}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0xa}, {0x1, 0x7}, {0x5}, {0x4, 0x2}, {0x7, 0x9}, {0x6, 0x9}, {0x4, 0xa}, {0x3, 0x3}, {0x5, 0x9}, {0x1, 0x1}, {0x4}, {0x5, 0x3}, {0x5}, {0x1, 0x5}, {0x1, 0x2}, {0x7, 0x1}, {0x3, 0xa}, {0x3, 0x7}, {0x1, 0xa}]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x3, 0x7}, {0x2, 0x9}, {0x0, 0x6}, {0x3, 0x1}, {0x0, 0x2}, {0x5, 0x8}, {0x1, 0x8}, {0x0, 0x9}, {0x7, 0x3}, {0x2, 0x5}, {0x7}, {0x0, 0x3}, {0x5, 0x5}, {0x2, 0x7}, {0x3, 0x2}, {0x7, 0x2}, {0x1, 0x1}, {0x0, 0xa}, {0x4, 0xa}, {0x1, 0x5}, {0x0, 0x4}, {0x7, 0x1}, {0x5, 0x2}, {0x3}, {0x1, 0x5}, {0x1, 0x9}, {0x6, 0x8}, {0x2, 0x5}, {0x6, 0x3}, {0x0, 0x7}, {0x2, 0xa}, {0x4, 0x8}, {0x4, 0x9}, {0x3, 0x2}, {0x4, 0x2}, {0x7, 0x4}, {0x5, 0x6}, {0x2, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x8}, {0x1, 0x1}, {0x4, 0x3}, {0x4, 0xa}, {0x2, 0x6}, {0x4, 0x4}, {0x7, 0x1}, {0x0, 0xa}, {0x3, 0x8}, {0x7, 0x8}, {0x7, 0x1}, {0x5, 0x5}, {0x2, 0x6}, {0x5, 0x5}, {0x1, 0x9}, {0x4, 0x9}, {0x3, 0x7}, {0x1, 0x3}, {0x7, 0xa}, {0x3, 0x1}, {0x6, 0x5}, {0x6, 0x9}, {0x6, 0x1e}, {0x5}, {0x1, 0x8}, {0x6, 0x4}, {0x7, 0x1}, {0x0, 0x5}, {0x2, 0x4}, {0x0, 0x7}, {0x0, 0xa}, {0x3, 0x9}]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x7f, 0x3c, 0x1, 0x400, 0x4, 0x7, 0x8]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1, 0x8}, {0x0, 0x2}, {0x0, 0x4}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0x6}, {0x7, 0x6}, {0x2, 0x6}, {0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x3, 0x8, 0x8001, 0x5, 0x101, 0x1, 0x8]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6, 0x16, 0x0, 0x5, 0x4, 0x2, 0x24, 0x24, 0x30, 0x68]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0xca91, 0x200, 0x9, 0x0, 0xfb, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7f, 0x6, 0x6, 0xfffc, 0x7, 0x6, 0xfff5]}}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x3, 0x30d, 0x5, 0x8, 0x6, 0xd49]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf6a6, 0x1, 0x0, 0x6, 0x9, 0x5, 0xed, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe55c, 0x10, 0xd2db, 0x7, 0x1, 0xffff, 0x1, 0x2]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x7, 0x6}, {0x7, 0x7}, {0x6, 0x4}, {0x0, 0x6}, {0x4, 0x9}, {0x2}, {0x2, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x1, 0x5}, {0x4, 0x9}, {0x7, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x0, 0x1}, {0x4, 0x8}, {0x3, 0x3}, {0x5, 0x1}, {0x0, 0x6}, {0x1, 0xa}, {0x1}, {0x4, 0x4}, {0x7, 0x7}, {0x5, 0x2}, {0x6, 0x9}, {0x0, 0x3}, {0x1, 0x3}, {0x0, 0x7}, {0x5, 0x7}, {0x6, 0x3}, {0x1, 0x3}, {0x0, 0x2}, {0x6, 0x6}, {0x7, 0x8}, {0x2, 0xa}, {}, {0x5}, {0x5, 0x2}, {0x5, 0x5}, {0x4, 0x1}, {0x2}, {0x6, 0x1}]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x73f, 0xf5, 0x0, 0x401, 0x4, 0x200, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x2, 0x1, 0xff, 0x1, 0x1, 0xe, 0x6]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x12, 0x48, 0x36, 0x6, 0xb, 0x1678f6aff90eea50, 0x1b, 0x16, 0x4, 0x36, 0xb, 0x18, 0x30, 0xb, 0x60, 0x5]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x4, 0x6}, {0x5, 0x6}, {0x5, 0x9}, {0x4, 0x7}, {0x1, 0x6}, {0x0, 0x1}, {0x3, 0x3}, {0x5, 0x4}, {0x1, 0x2}, {0x1, 0x9}, {0x3, 0xa}, {0x7, 0x8}, {0x6}, {0x0, 0x7}, {0x1, 0x2}, {0x0, 0x6}, {0x4, 0x8}, {0x0, 0x7}, {0x5, 0xe}, {0x0, 0xa}, {0x2, 0x2}, {0x7, 0x7}, {0x1, 0x9}, {0x3}, {0x7, 0xa}, {0x4, 0x8}, {0x0, 0x6}, {0x6, 0x1}, {0x3, 0x1}, {0x5}, {0x7, 0x6}, {0x2}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x57d, 0x9, 0x6, 0xd1, 0x86d, 0x0, 0x94d7, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x80}, 0x10b37881d507c93b) 1.59987815s ago: executing program 3 (id=2235): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x62, &(0x7f00000003c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x10, 0xc2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, '\a\x00'}, @window={0x3, 0x3, 0x81}, @md5sig={0x13, 0x12, "f5c0f39d4786d7de941aad9f438da5f2"}]}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaa6a588b9a716dd2953bc4c0ab24e18ffffffffffff08004500001c000000008002080000"], 0x0) 1.478152272s ago: executing program 1 (id=2237): mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x120c1, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0]) r0 = socket$tipc(0x1e, 0x2, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000005"], 0x14}], 0x1}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) r3 = dup3(r0, r1, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x21, 0x0, 0x0) 1.417101146s ago: executing program 6 (id=2238): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0x3}}, 0x18}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x58, &(0x7f0000000040)}, 0xb) 1.416546353s ago: executing program 3 (id=2239): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x4}]}, 0x30}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="0f2152f40f01b8a579660f3881070f01c40f01c9b800008ee8baa000ec660f382232f20f0125", 0x26}], 0x1, 0x0, 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$packet(0x11, 0xa, 0x300) (async) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x3, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x3, 0x0, &(0x7f0000000480)=""/119, &(0x7f0000000500)=""/122, &(0x7f0000000680)=""/208, 0x58000}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000080)) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000140)=0x8080000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000980)={0x0}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000002780)) (async) syz_emit_ethernet(0x33, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x11, 0x0, @gue={{0x2, 0x1, 0x1, 0xfd, 0x100, @val=0x80}, 'N'}}}}}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES8=r9, @ANYRES64=r4, @ANYRES32, @ANYBLOB="0000018000000100", @ANYRES64=r7, @ANYRES64=r0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x24004044}, 0x240010e1) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1.250121898s ago: executing program 5 (id=2241): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) (async) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/84, 0x54) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x1, 0x3, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x3, 0x3}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x48) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) (async) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) (async) bind$unix(r1, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, 0x0) (async) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000040)=""/26, &(0x7f0000000000)=0x1a) r3 = open$dir(&(0x7f00000000c0)='./file0/file0\x00', 0x101600, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000180)='./file0\x00') 1.176614428s ago: executing program 6 (id=2242): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x1, 0x4) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r2, 0xff}, &(0x7f0000000100)=0x8) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={r2, 0x4a, "89b71df09433d354e66c023cb653fbf69c367a3c79257cbfc5659d06035bd59c03a95a1e5a578c6bab8787d304456cbfc60524e26a994993a3743bf5b2b559e7286cd87fb77ed13b1282"}, &(0x7f00000001c0)=0x52) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={r3, 0x5}, &(0x7f0000000240)=0x8) (async) r5 = syz_open_dev$vcsn(&(0x7f0000000280), 0xc, 0x800) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'caif0\x00', 0x1}) (async) r6 = socket$kcm(0x29, 0x7, 0x0) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000300)={0x8, {"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", 0x1000}}, 0x1006) (async, rerun: 64) ioctl$DVB_DEMUX_DMX_QUERYBUF(r5, 0xc0186f3d, &(0x7f0000001340)={0x3, 0x0, 0xff, 0x1, 0x17, 0x2}) (async, rerun: 64) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000001380)={0x2, "cb800342d8bc6ee415cefacfd3468d5cc5f1764810c0e7af38a2ff9a6d4994e9", 0xffffffffffffffff}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x8c282, 0x0) (async) r9 = openat$cgroup_ro(r0, &(0x7f0000001400)='blkio.bfq.dequeue\x00', 0x0, 0x0) r10 = accept4(0xffffffffffffffff, &(0x7f0000001440)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f00000014c0)=0x80, 0x800) (async, rerun: 32) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000001500)=@assoc_value={r4, 0x8}, 0x8) (rerun: 32) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r10, 0x40047211, &(0x7f0000001540)) (async) getsockopt$netrom_NETROM_N2(r10, 0x103, 0x3, &(0x7f0000001580)=0x3ff, &(0x7f00000015c0)=0x4) (async) write$tun(r0, &(0x7f0000001600)={@void, @val={0x3, 0x3, 0x4, 0x5, 0x1, 0x5}, @ipv6=@dccp_packet={0x0, 0x6, "002bcf", 0x18e, 0x21, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@fragment={0x3c, 0x0, 0x3, 0x0, 0x0, 0xc, 0x66}, @routing={0x67, 0xa, 0x0, 0x6, 0x0, [@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @dev={0xfe, 0x80, '\x00', 0x32}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}]}, @fragment={0x0, 0x0, 0x10, 0x1, 0x0, 0x15, 0x67}, @routing={0x3c, 0xa, 0x0, 0xfa, 0x0, [@private0, @empty, @private0, @private0, @loopback]}, @fragment={0x73, 0x0, 0xe5, 0x1, 0x0, 0x7, 0x68}], {{0x4e23, 0x4e23, 0x4, 0x1, 0x3, 0x0, 0x0, 0x3, 0x3, "7dc3b7", 0x8, "92c5a8"}, "d94ee830efd8c03c6dfeb613e0ba8e24973cbc4ade39cf8e5d458a4b40b97ae76af24f4a9cf6cdf5cc97c04542cf3c0f7b9a6b9f5a797a39518788cd5fbb34d8b2ed0dfeea4ce60ee0548f5926613d133ed65874c5c26c6134d907eb36e500d811d67b240969940c91d7748817c889793c161d098053c83d60be9102bac592de77eca9fda156017c916efdacaf5a321e85ed94577effa03a4e2cc294cada5abd492cd10b595fff72812f19eddc5267b0d5efc9cca243"}}}}, 0x1c0) (async) r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000017c0), 0x0, 0x0) (async, rerun: 32) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001840), r10) (rerun: 32) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r11, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x1c, r12, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) (async) r13 = socket$inet(0x2, 0x4, 0x1c00) (async) r14 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001d00), 0x200200, 0x0) (async) r15 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001d40), 0x10000, 0x0) r16 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001d80), 0x2, 0x0) (async) ioctl$TIOCGPGRP(r11, 0x540f, &(0x7f0000001dc0)=0x0) (async) statx(r11, &(0x7f0000001e00)='./file0\x00', 0x100, 0x40, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r5, &(0x7f0000004800)=[{{&(0x7f0000001940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f00000019c0)="334c784c5681093283d7c0869a963a39eb78b56911d1055f54bd6549108d9e05fe4eb45d6a3c719c41e3bc3dae064ff1cb2bc513f607c9cae9239202c95732dad5a0af7d10bb4d6eb1b191d63a4ba8c3ca3ba5a6d5f09512f2188465f3eac9598b166768c715e002447dfabcaf76021abeb48903f54538be7c79b82b1842dacf771a89327d2e0967fe8a09dac642d1b2e56fd611b5ef72b03226e64d2e0ab9a771155635a441132d6cfcdc061519c4964a933e1a07c404cefa1ebfb1ff765b52776b95e60bb8f4452e2545fc2ade98e2651fd5bee6d2917ef94c9812ceb4918e3a361ea624b30af597a070ef2a9f24", 0xef}, {&(0x7f0000001ac0)}, {&(0x7f0000001b00)="71b1ce37eb2e8e3339f3ff6c494cd3e953ecb7a299f31285f1d893ea95c7a42fe846b20139b00f6eca8513f927e6b41f24b2bfee7954a1065b6cd8d48cabfae7b67c2b16294eae8cf8a246bfc0f75dd43b4a9807f89f2c6e68b2ac550ff13606dd1a09a289647ee43836f4a9d81cfa352f17f64f06565bbe67af8bc6ed4b4170b34bc5031d8ed137d47f6bafcb4660777d5d0048f6b5ce4822c32e98b47a47c480e9cff9dd01f683c3e328b46201440f629fcde350abd3e28589b948ab6382f8380cee882a4508d821722495bd146d33f4a15636abf4af7acb199fda819d197a893face00cdcc498a8b74bbdc9b0a3869715fef7b565fc8844d0", 0xfa}, {&(0x7f0000001c00)="16692584be839743f34015a9276e4a77834bb2f5a59e0c430ece3880dcc2cca30ba1efc1d406db5457fc29ddee3a97e06353598ea29d0d94bbfa5acb5e307ade3111251840f1c85037464d1cd08cbeffbe509a691cc5bf53ca56fef5a13b859f71015a5cdf66c8617cdec82358e5f8cd5b48b810109ee0620fff151e72216d5f422dcc3a8e6cb4b45067e85d6daeda7a4bb57de24f8da9bf5a3cd787c64b9774df3c6841484724", 0xa7}], 0x4, &(0x7f0000001f80)=[@rights={{0x38, 0x1, 0x1, [r5, r5, r1, r14, r8, r15, r16, r7, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r11]}}, @rights={{0x14, 0x1, 0x1, [r13]}}, @cred={{0x1c, 0x1, 0x2, {r17, r18}}}], 0x88}}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002040)="413b8575326bfa0d66b7f86ee73579cd850c8ed2b378b2d94f40c30666e7d82752a8c07e38681e1a9023e50a98757820308780553d", 0x35}, {&(0x7f0000002080)="c4983cc374066d37a5021bf285dee39e3e6efa531ec9fe46ebfd1f7f3987116cfb1486bd1f2fb483334634ab789b3153ea1c39e16966eb930fffbcd7eac932c62c97d0b2e41990fc34ede65fd6f3b7273955c67b222accfed52f17f5c57fb10ef94bb17b6fd85e34add5cb7b04a09a91e70f08e5ea2a920c7d1d0a1125e13ae904514fa22fce7f5ae0407e01abda84b4a41b8479540b0edffebfe0", 0x9b}, {&(0x7f0000002140)="66ea4496bfbb1a7e6cb4c2b19073611b2a4df0d657b79cdfbedb4e23de12ca19d39dd0a6938bcc4927ccac4b7b66397a9371c2cd1d4fa37393e0f341f9d6109c87c0ccb9814e6dddd6b553247d902c105819a2b0bda1cf8a40bd1f1f0308374879bdfaf333e420b6e7998e8fc9ae217895b94f78e8a3abd1731c11204dd070672e7148fec9372aa58f49dd60dc5ce87acf5890d50d05e39b2d4e527a78beaf8989cbd476d0752395ed99f7690893", 0xae}, {&(0x7f0000002200)="c4ab944d6e7090f8a5cce50211f7b02e0793bb3cbbfafd66fed7f4f021a93133cfdee821bf6dc473f0ee1189e6c38991d9c8d2f6abec55862fc711f971a4", 0x3e}, {&(0x7f0000002240)="0ee354e2a972b9c0ddbd1e38ace48caf3417658ed32e4b80e286516b10207206a8108bcc01af51bfe2243ba6ce45222d781028d9925da01234bcc32838b6266f86764d1d3ab8a3c03345d0d12b6a886b02fb0c80361427db3ca8f7b2985cd4da71ba9c80de5fd2e43a2596d8e57325da1a5d23bf7170418338df908e39360b8a95", 0x81}, {&(0x7f0000002300)="aebbe954e2e2a32c01a172129f58ce3f670006b5579796803b6b759528406cb06da47314556c3290d59b541f9854dc73edbbc27ff613f9b126cea41aefb98168ea9bb51d2078bf4699592a025de857c175dec89da7e7d787f0db4e6d768e0e5a85f84451fbf7742aa8ba9d2ee365a541ef2248a63622bd0281f4dc7cf501b35f12d7e8952f84e9e33ad7e45519de9539fb3a6eeeaec41df52c630cc505fa9388b8a02c21b0f97c17ebc12e6b51598cfaa5", 0xb1}], 0x6, &(0x7f0000002680)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, r10]}}], 0x58, 0x10}}, {{&(0x7f0000002700)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003940)=[{&(0x7f0000002780)="f6abfe2d78e29efa1c30fa9f8b9f0d229ea11fd23544ace927e0be2e137a7b458b0392e8fadabef5b748ee1f4d966b3fc539ff154222b2d8535ca478122e04f06b88dc1c709a21aee06d8c0ac0b0f2c577d6f50071", 0x55}, {&(0x7f0000002800)="17f672799c90e9664d06caf4df3ad4b0d614a55b6b9f8141b68e851e9e0415a11a25481e910c547319f9be1850d1101f9463c9d8419fdc", 0x37}, {&(0x7f0000002840)="678a55312f29b0720733f5ae0e16b8c2efa579f0411eeaf35f385f5244ec154890d8c4d6adec87b97fd305ef29fcfd77664f0af7b9d171673e163d3925d84ba81e3f437f4c693f2b11ce7c5a517e4750e99f96bbda6f2f74472fff1530ec3dde86dad51ca2ed020603f19e9dfceb2a6d3a602895ebcfabe2d2c507cf54f315671b3fb0b0c12f895566052a202b72d34d5c08271826501528823141b2d24a85f203999d51725475f3b363b476d6d8ef32dd732a988ee56829f7f997ab82e06458449f9b66ae1a60073b3025af6a742d6272ab1e9158be7db0509d7bf9784128c2e592928722ac37c6f0f3c9e12d909c3b87ca7099fb8acbc3dfe54c7472f9b4081b07be86f3ce211557a65437a1909340ba4f1f84b6190deb49eb890e8ca44fb4fd5e9428b45f1317566bfd654cd875cee8bcf975cf2903727bad3f5749b6f6a3d7494e9fa55812b9d015217bba1beb4fcd885d73bf1a52499eb1f93e3069fb3209fd23976c21eadb24655b869da44eca227a0070394b4d63054b0a0fce72a229b84ef5bd6084c89ff292dbb84169b4b49867d057c7b48b31623ae05c4a41a3cf24e49dc6766f2dbcbd9466216f7abc38ede49394a2e0fa92b6dea5042065b37d76383a636c8b440956acf06701788c6286bc813a61ca4b5aa7c6cf32d209154d34a7efca7b7f9f3bdf6317f63f0445bbaadf6c507dd9f426e63d8a3420f3c99c50c9ec22724fe6703cf2135065dd8291248ca1e034d43bad20185647fc186788402b2f1fbbcd0f8064e57c7375d9aa19a8dd9968d88a73b972c20b7fa70267fbec86c10f16ea4f4b900cba93ca63afb5bb271b5fbe39bbdc9111b5fdafe8fe52d922ba8d9d6f8c597d935f0854e92cead883ed65b657154a1383b7a073b2ecdea2e751ad5cc104cd360b3b340ccce90879c245ae8fd2eb06b630cc01918d11d2f3dbe61cc106df9c00df9431da91928d6eba9f7836a5e374ebbca9960ead584212c2003581a4e7fe84547ba2ef4bd2edde9ecd2533176d17cf5e7b445b16e0a8a2366c4369ea1fb15fd2e7fba5a65672555bbf151b90a8216c2016ea41c4f749544831dea4f3cda7899bb3610d1026a70f7b617a08db78de69d49e9631ca36c630bff350fa95dc76dd45c7c0bb2a7bd9345ebd88de387e5f1de0dff5b59d9c90ac3a64bb140f5163ac3ca3390f433eeec55c20bc99e1ad2f31dd812c8d7f6bcbbc7aad0f2de04f1382e649568e4228b9a2f9a770a7ab5bd64506a2ecaca49d29496caba2c4ca6f6cb611e90479e880d59b9b5c20d760337f7b756285ea026fc152c862eb06a18bbb1cd7ac861c7cdcdf5b514fa636134f7d4efa1dc59bd6c49c8a91520c9a218007d94743463a5c787bbd13333a80cf08ec498e634a1491748b3bd35c2daafcb760aaaa17bcad0fca780f728e33f7f41c82ec402e313c49757a56f3223584484d65b6d2418664fdfce52de7dcd3bf9f8583862f9fd4c6c08e9de049decd054ce4cf8a593c9f0ebd2dbc83b1fa541a46ef833dad789ac9d178af81232938087e745dc335d71efafa58466f198be294093637a13770c42dd9df8fb7b17f920c7f51e921452ee60a0f108f575e5ae2e3698d6f2bd92e456ff5cb69e5d219623eb62bc0bbc27917c657be4606e2d5842c3883e22ec2909107e0e36d5b5cab720b26acc48c35092ce899b82be96d272125c27e1ccdd1d55b6e1bcfb60215dfec16c36ccd11ae0272aec7c19c2078f70864af6b948b91e8b7f9273a1a620ec08ffb859c3ef784c27016fe9aee4d8181ecff96036e9076aba84abfe2be53f68f4f3ad7911c61817109c3cfd6e335f66c58da67bc392260694f33bd400fa82e1d5e78a69d09d802d18f1f99ad6c3cad6f12e57363b42d069d97b6ee66cff3eff5633e3af74f5625a81e402043cd0b403944c9b0a0e17ed91f18e2f243ad8fa1f82fd561b0bfd254987ed55381ef0a192c876e845ebbbdc0db5fb040d6414f4aae5578c0e06bb5f399ea70eacfffc7a25bf89bbc1649a09ab72eb562e76b806b9de9947d9c301ed2fba0d545cea9ca7b194454b855dda20d6296ac536475a5967c550174d601031628639e96d572afa98686987199b2d3b39aaf164cf10a08cc1abcd2d31b22a5749561a07afcd6b6be2f97f02f0517b45a09ac7286bfecb6b06c888e8a521f453dfcc825269f3d10a39cc6638a55df167f460ddf876b6175880306795b6f968066a7a4acab38fd22db689e2d8093e7983c4ce6219424e94099db1a0e9dd40d5e44c34ba7806776428123ed585bbce48f8456e567b59b9ac12e76be8d161656b4c05f8415dfd771956c75b8cf5be537ef72295f3e64f06139e9e632d45353e814f95fea1dddfc59f34a9ec99b67441d192e8d63bbe89a5123f1db6376101ad97e77b9b2290da957840b4d32f2cab53d678f97287ab5d5855a490e25c4a5a27723d0f36ca6bce3bcd4007960be8ee401da315c97596900bb44c90bc43dc33154744ccb6107d592f8ecde5046f455b549e436069c4184e7583261303abd9cf3914dbd87f2462bb1a859ddd1914b0ca71ff11a986be4f5dda153ef8fb389d057668d19f1f4d5a0238cd96c9067b6e5effa27681da0cbe7c69a0ce26b6424cabf8a6c5aac63e4bb82726ac285dab0110b65830aed0d0b8a3fbb6dd1d15dc4e9771e65018d1ab53d99d1912e8751264a4f38b61d10934155ef7f9fb2caed5e6d65bd39c10149f9ecd12d0fa8fccca5370780eeb29116d984adf049e8addd0493b69a42c14ccd84ffb6a6925c36a41416f199b39e8f9ba46dba39f97d3b2393a38a8892000d6c7cfca4df9e86d17ca922606037ff30a4ac7cfe33068356f1209efa9af4741bcd822969c75ea0c1a781540dd2ef2c7b80c4ef40136389c7e4c49085d31cdfd7dbe20f2db1d44ca584f31379969eb0533345aba1573fd632d306210daa36197e3602b9678d4ada76272422822a1a28c90840c6aa2c58f328633bd107956ebdcabe1bc8bd7c593b7a5b9329e173e575071feaa3a73922d74b1365023150a280d21333aac84f5e099734e81ac98e9dab0e6ca1219e0e59943500ad95e0d09e5ec1bd3f7953115a0851f86df154fdf986a722dd1ed511c6eac20a697a4566c5b1fd399640faef716dd50638c077451e99a7b3831f9a78d4081ac3bb2a6da6591222a47b7cde4fa56e350b7e79db79fabb5f4cd06d5dddc985b8a5d0fc0a755a97e94d82a9d6f17da44cf25964bb13c882d7d7b51c7a8cb9390338b79b2e8b49a8dea48d6e47c51fb1bbbaae7aceed62b3085190b79588fbe271692a958a9c66921cf9f029677558b937f161eb23e7dc93b1d7a00275ac56569fb3eb5677f677e58ad0ded3be970aa83a1db9f01beccb755a0b420320f0de897638f787ba2f316c684d4a9b4c0116f468961f0d22226b3aecb708114b1b3feebc20043f8057a78fa0e40dc5ad777aeafcebe69c8f0839bcff8da405145ff4c56c75c22d7cc058a5e98bdd609040d44bc5731c74dfc970b3be08c3d5fc67c142ca9af0b0dfdd46abb35cf01cf12ba65b5a410e0b6324c46aa563fa6afc7e026f5b9378e336143afb045938a19a6c86c5525eddd77df927ebadc2d130991fd92b82508510fefed5144f5cd66cc30ce9efdd184ea934e129d944831148a740425ad44f5e380260ed701f844d3597340fcc5f1b8c8bf5c19b9736c976ee5d6df8aeab588f5c85175bf860330009cad34c18fe2008f8296722f3654ebf1ee62221d28dffae3fc437cba2503d1b70b5f43c840e694b701d59df849faef8ebf38bd849c76fb82db8593be970ee70709e96f6b515e143866a9a807197e0aab8f1056ba34d37bdee32fec6037a1a5661826d9b6f21ff9fa3a061365fc4d42f8599b3171f5f2b764dc5814a43c6f2b38b255a715877b3b4b93e7c885518557d8f2a4ac0db5c07d6efdb02828627e4dd4d7c56865467c985cde0309ae21de2770eb3605749d0bcd9223d43ab25254303cc1f0b8caf32bb11fd551d977dc7d37c70e4971504b39942bc508ef34c7ec0fff0984cae786652c839b2fc1b4dbcf0f1ab1260bac8712f189601505885e4b9724cdfdb1245a104bc4b6f4d9933cf16507b96830c5050b6bc3684720f0198f3bd07e405d3dc8d3c797c2c27ebd4f4e1f4b1f8b0d7aeee39fed50d84ebfc7e8fd75f614c450f3a295adb1594ecedc111f0e51df4ec95690138ba7de27f0a4175b3694ffcaea5c10627d9dafd73200fbd1d775161f711a7188659d3d1cd9eac0f707b87b0a780b67e38987030bc36facf03fea764482e797bf23511e60b2839251a2b07a534bcc742a466f815bf8113cbeaf2ac701cf3c929f6018e38d5846dfb42074f87ac1cbcec30b8ecaef7692ee819ff33e04e5749226bf0db9cc94bd9b8ef6d9c8af36f45c1a4a6e014f999af782bfb6e9bbb0a0bdf36ff4eedf720a6f5928b1899250c264e079690283b0648b6e90c6bb90794952614bb494461e990a58213877f73ea689e60f017ae4c5484a93b64472660a72cec747cdc1a970b5842168ce6077c37c97ac4f497a91b22c5f47e35cd59fbf067ca85dff3718c4d20c11abbb96a0ceab571f96121a0d5e55901949a8c70ce3ca56f45ec11a6a0c45e2a2dd26c8de5067bf389a4b3b2566d4da5fb63075ffa6eef6facf0f1ab1a2d246b40a1949d195e0fbc025dd09157a309e4de0c31724981f38430d664be18399b6a2d6d5f48df3df268cd9762c5989a599d81dcbb66a60b47323af63a36f2be5ce1743f5aa439c50afedbaa6d63f2e1a057471ab75c664f761cb080a8629a217e8dc6a752f5ef23d491ac172fe9cf15021d0445ec6fe2f5c9ff7144d93b4e614a4b820917f8683950a7246ad9e1c129bc0c1667ab9c832683ab5bb07f0bfaca14849ad4b0f69ec6faf5252778f86754fb4aed29eca0cfee66e111c544f02e00db38415d10df9e9cf52415f42d8da55b63713cb13ec6ba5ca171a77ed431a26dd81608789f604d5c781eec7214fc7a95a552dc2683433bd33f7ac896289eafd5fc24055cb04d6e34974a4bc184de98db3e15515d968132825f4777803f509b9919bd4e2d08df180a881b5d0bd4d7df27f7b9e17fce5759875679c2a069306445a9c919088c62e65d8a80cbaa27f66dec8d60e01ba3a2d3b241fc33ec90788c2b07bb824fbfeb192d921a82a89567e4aeed698072176fe8b94dca923b50056e3d11452553cd998c9fe2f9b85df3d1a57d49634bb6e9654fb15bbb98ff07a22d9be1ac79b3f29e0cc9e828513bc579a4aa433f8008706c00aaa530f4741470180d498dd606c312adf63d6d77a1ee80f677b6c544ac16177434c30ae05f398f773501e684c430b1b023fb0162be2c20862617147a4f9fff087948ed9bc88cab07d2d7bcdfc22d007a054d046e604043c074ca7b5ad2b5ab3ed6ff1d293e33112bb99c58d00ac7a36ce8f459a998201535f59aae57da9ed71cbd7ace086eb1759b3d52248c4d0db35dd57adf1d7553bf9db1eaa52c216887d1d6cc3670bd5641239258cd0274b8bc00e26e435a037ee81c9610e5c7b4c1086d0cb1c3f1e667ada180181ad6e0bbf7adda221a61f501e89fc7da9221e0b974a4d4d21cf0f294e58f015ebda3a55b232b59b037650563fa84cdf329c6310f58ee82e599a8fa9e609a233709e7d3fd608fd43c5247235de4851b2b4ed3c276a50876f6aeb251dc3de140c339ce5ca47e50c4dce775b940fbb83441184d3061b4d834cf56b1e2c926ea9babb1e92b463ec6026e6e1413c1f400031cc5e6cb62fd", 0x1000}, {&(0x7f0000003840)="5ecab3506f439cad0bd86ab2544733fa141157ccd86d8f2ad9090fd081000d599bd87dcac2830d0ca326f73beb3394dc66411c6a2b0a41902e4a0f9048869d4f4376451402959ad6f001dc6ed6bb682017f8f59bee1c61a7a92b98f6eb3f602ae5c399531a8135535e13cf94da13f6280fcec5be46d59839f999a437147e0354e5bbca26652d4990f49bae42a0d12e549dc717e801d21d613fd846482ed56c56e324f67ef0268c887678861c2986819d67423d62820e878cb77cff43e519dc9fce8e9829cb21966050a1a05c0245ea70af0ba62282ba2ba40eefb8c1f430ac8074e77d5c6e979a", 0xe7}], 0x4, &(0x7f0000003e00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r1, r0, r11, r10, r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r13]}}, @cred={{0x1c}}], 0xc0, 0x24000009}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003ec0)="64b5424fe686ebd901b0dcf61687a933314e5d6ed3ec65f2b394b4469e784f87c3e000ee99b67453bf9e232b88eb954d0bb23904bd45d4ea958bf0c2c8751ba7e43b5376fdec35336b71f425cd72256bee9a750bcfe0a7cf97a122047357d393c48885743d6f2cce925149a632961cc00aa3759dda4474f4054de8ab449b135607d5d8efdf32393c59b76f121f5eed08f09a83d9f17c97b5", 0x98}, {&(0x7f0000003f80)="0c746e3bd516fcaa7c42a93c2a734a3bbd61cfda95851fbe14a2805e4714530cefc09c3c213c07cf4c75f41521b3cbeaf5ae1323f0c43073fce62f2ab5ce788aa15ecfe558c18dfc79b159a4c408ddf83b9d6dc4003d2e09041f3f8eca9b417db3e57d1ec0b3c1429ed303bbf44d13b00b2ea0557d3a05114494d1f79ae5a7d35fb1412cb823e910519f7f6dd9da31f122dd39590a5203af6d6c5a1295e536f992fcb6c7c107644980ed297937ccbe0fcac412060e738d19636a293b943324a63b0cc7d41724de1d9d94d91e8243e2876712e2cd8331ff490719397de82896ef9990cdb8a3b3d09ab80356c5eb23d3155aa92699834780", 0xf7}, {&(0x7f0000004080)="b3d3f7e00f41448a7f731dcca7223086ac02e10b8bc0beb42d28b48908390c4f766410a957f9c4cc7eb386cf37c66eac30458fc5948e6673e8590268e2", 0x3d}, {&(0x7f00000040c0)="6ed7867cc256ae0cc602e005c76587728495ef10ebd0973589ba490c5390458af60855acabbc92c2d4df142b77bd933b57841c18452c", 0x36}, {&(0x7f0000004100)="1f8158eab8325e0ffbbcb9dc94", 0xd}, {&(0x7f0000004140)="cad7ae951a121babd9583c863386e2ca2a736d6ec5fd9f8063535325a8d25e68fd01f72e9c6c5ecfb417", 0x2a}], 0x6, &(0x7f0000004240)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [r5, r9, r10, r1, 0xffffffffffffffff, r1]}}, @rights={{0x24, 0x1, 0x1, [r6, r0, r5, r11, r0]}}], 0x70, 0x4000}}, {{&(0x7f00000042c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004380)=[{&(0x7f0000004340)="44d5a0b220254addae3fd202873f61d740d23e966fab303eebd5760cf9cff27a89a15604093af4a907", 0x29}], 0x1, 0x0, 0x0, 0x8000}}, {{&(0x7f00000043c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004740)=[{&(0x7f0000004440)="9a9f98702435ed1ef32e5b8928372d277431ae87", 0x14}, {&(0x7f0000004480)="8cc01a8e07229101414661a8d0c7279255c823ec0169e8775644446c314c61463f23693a2f0033bbacec9a4f582ecaf36d43c6a14b025df174570736086f17faba15", 0x42}, {&(0x7f0000004500)="d5fa71d2e2f0e9e4196fcbfeef6e1fef77d3ec70f6d2a604081a075f396cbc94129f5a3ccf23727481debf2e4de622289f6dc28177100d1a86df5af0d6d2420cd8fe600c0c0719630f0f41d68ac70f40d6df47cb2fb1bf7c0996a216e20bf2ec851696affa656d8d508c8ffa148cf18e", 0x70}, {&(0x7f0000004580)="f7780c481ef209e9f99c0a86e1bc2410f269668b40802f5ff680179b9a9db9280306ea467f69c6ac732e25e8d97fc31f4953d7cad39aac359c1522399dfa583890592a642cfe8aa8d677f5963ee98c6d9cfffaad70de52de088ea120556caa0485d7357194a15e5d1b0f12304092af736d5f9af118eedf231a1f3894b1ed946e123009b29585b080018dc51f8c0335bc016f13c0129ce9b52484ec1d7b8ae8161dac3a2c6f189f52962863dc8eb575736cd44a26ccadda79705c3b63ea307ffe2af1e6d389827103c41cd6a7e246100ad66a6dcf1ae59f9f4c", 0xd9}, {&(0x7f0000004680)="f8e9d9e9b60f494d297dcbd3f7d2902e918dc668409802c8b7a62f750480736f24da68d4243c38ecba4fc812b415d8e2de631bfbb138d4835db4d0d9aec71ac921d79ff483d8a8cf5f758fe60fe1e2d0dd4d8eca567fa06d740f9ddc35331b61f855f63f9c8e4a38bcd2c6081edad34c7e729b0b59b6a407136cd18c3015d8cdd7112823dd472f399945545ed7d8811ba9f7c3ae0ebf", 0x96}], 0x5, &(0x7f00000047c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r10, r0, r0, r10, r13, r10, r1, r13]}}], 0x38}}], 0x6, 0x1) 1.036922557s ago: executing program 5 (id=2243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @random="a547ae413200", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x16, 0x0, 0x0, @multicast2}}}}}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 941.431115ms ago: executing program 3 (id=2244): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="74000000020802030000000000000000050000000900fb0073"], 0x74}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a6, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 938.563736ms ago: executing program 6 (id=2245): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x20, 0x14, 0x4, 0x0, 0x0, 0x0, 0x8, 0x3001a}}, 0x1c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 879.799858ms ago: executing program 5 (id=2246): r0 = socket(0x10, 0x80000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x89f2, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\xc0\a\xb0\xfd\xa3\x1c\n\x17\x1b\xfa\x81 \xdd!\xd9\xeb\x1d\nW\xc1\x81p\x92\nH\xb0i\x03\xbdv\xb4<\xb3\x7f/E+\x12\xf9\x1c\xf3\xad\x80\x9dxa\xbf\xa2\t\xee\xdc\xae\x19d\xa9\xb5\x8f\xb1\xfa\xb6)\v\xb8\xa7\xb1\xf0\xb7ysd\xe15\b\xe9\x91\xb6\xec\x8f\x922]\xe3\x0ez\xcd\x04\r\xb0\xe8\xff\xcd\xf8\xb6>\xe2\xa5\x04\xa9\v\x0f\xf2A\xf2\xf5\xf2\xd2\x1a\t\xf9R\xc6\xddO') r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000080)=""/38, 0x26}], 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) syz_open_procfs$namespace(r3, &(0x7f0000000140)='ns/uts\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000003340)={0x2020}, 0x2020) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 737.291298ms ago: executing program 6 (id=2247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004910) close_range(r1, r2, 0x0) socket$nl_route(0x10, 0x3, 0x0) unlink(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000680)=@generic={&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4}, 0x18) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x82000000003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000040)={0x0, 0x56595559, 0x2, @stepwise={0x8, 0x8, 0x7ff, 0x4, 0xaeae, 0x84a}}) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000080)="78626cbd7d910e7347dc834616824ffbd787478ece32d17df22f92b4e78558de5c997dd2fa87d4664a98ba44b9b1de5e7bed1547393d5ebe4462e20328cb7e8e", 0x40}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000000140)="be8b7dee7eb3d3cc0b", 0x9}, {&(0x7f0000000240)="7e2ee58d7d8bfa553ead02647ad263379e74b3aa1e0781a080fc95af9588616c3eb2386f4108869082f33db1ec353da82ece0b5d1b528a904e3a13d95f801341f0b949188bee994f8efbe2e4c75f66d77187bbdfa5f4311bd6c6e04ef41b5424c8e937140fe9258faa3a86033d22e1df603f9b035dd1507e42d4532c8acb1ca2d80268c37eba90315bf6154767686056251fb8205b48abd2c7c351b57e1975d8619c4497a9584f2ef5210e5158ead49df9cc18089a75c37fafc15c60e20931562f1f6de6a8eee975", 0xc8}, {&(0x7f00000003c0)="3f247ea3051e314dfce22730832de67935b2afa6e4c9d7b1e5345c6ee6dca4f5140ded4213995a1591890d76ebce05db176905e19e3c837ed4075c4ed73beacee30e69e9166fc9f5e5f7ab5ca191ac5da53204d25b2d5a766dee6c7b86eabd86fabe59c5538c3170f45602d7508e77ad608c26b2ae3bc7e478ed3a2a3c5b0a77fab5b32ad07b8981e8aee7e497d53c27cafb0f38a6b1d394319b7ef549a6756492d0fd52a75295965f71eb833ccae67e184f9c20", 0xb4}, {&(0x7f0000000480)="736f17079aaeeb3c5f5dacab4818f80be7e4ee46720c1bdbb1f715d7018e4ac7c48fe2edbd2c49c06767605ffc5f3c377e14eb420c1cd4b46b8a8f1c64efc367d1029dbf8162e8ac44400af1e3d02ba560922ea59b13d64143375f65f50e8e75d237e84b2992d5cffcbcc3c03a7b535dfed5a14dd5770147dacf956c71e37277532f3b353495f603af55c47ec60e41fe5858a44e222939ba2d33bb3020a8702d1784d69188b8cb3c368c33779030323568a135e228c6fe390d7c07e728a486305ad2935a7baa9361620d03083f3d9beed1a2046b29a8ef2fd783c024", 0xdc}], 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x2e]}}, 0x0, 0x1c, 0x0, 0x1}, 0x28) ioctl$SIOCSIFHWADDR(r3, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"}) 602.057731ms ago: executing program 1 (id=2248): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x7}, 0x2}, [{0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x5ad8d0b5}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e21, 0x3142, @local, 0xb}, 0x1c) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000cc0)={0x5c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x5c}}, 0x1005c814) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100)={@private2}, &(0x7f0000000140)=0x14) r7 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r8}, 0xc) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x0, r8, 0x267a4e37}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x24008050}, 0x20008000) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x48a33}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000001}]}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) r14 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r14, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r14, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r15, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'gretap0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x8, 0x7, 0x4, 0x40, {{0x1b, 0x4, 0x3, 0x11, 0x6c, 0x64, 0x0, 0xe, 0x4, 0x0, @loopback, @private=0xa010100, {[@noop, @rr={0x7, 0x17, 0x1c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010100, @empty, @remote]}, @rr={0x7, 0x13, 0x46, [@loopback, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x1c, 0x62, 0x0, 0x3, [0x9cc, 0x6, 0x5, 0x3, 0xb3a7, 0x9]}, @lsrr={0x83, 0xf, 0xc8, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101]}]}}}}}) 601.760754ms ago: executing program 6 (id=2249): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf250100000006000a004e24000014000900fa880000000000000000000000000100050002000a"], 0x38}, 0x1, 0x0, 0x0, 0x8000000}, 0x800) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x8, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x7f, 0xfffffffd, 0xe, 0x7}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x1) 498.274707ms ago: executing program 5 (id=2250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044040}, 0x8000) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x3, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x9}, 0x94) 384.22929ms ago: executing program 5 (id=2251): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015"], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000780), 0x201c0, 0x0) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="140000000000000029000000340000000400000000000000180000000000000029000000040000000400000000000000403e0000000000000029000000360000005e04000000000000ff0f50d650847249ad288702ebd0d654b90001000001000708000000030000ff0f000000000000"], 0x70}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x24088804) (async) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000120001022bbd7000fcdbdf256374722d74776f666973682d617678000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/224], 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) (async) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) recvmmsg(r7, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x1, &(0x7f0000000480)={r8, r9+10000000}) 224.182027ms ago: executing program 5 (id=2252): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) (async) r0 = creat(&(0x7f0000000380)='./file0\x00', 0x4a) io_uring_enter(r0, 0x7542, 0xaf85, 0x0, &(0x7f00000003c0)={[0x1]}, 0x8) (async) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x891, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11eee) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ad56000081000008000d00"/24, 0x18) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000009c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES8=r0, @ANYBLOB="ffef2bbd70000000000001000000100002800c0001800800010009000000e6288b2878ad89e96014616211b0f7ecc45fbe095b350662f1beb1ff43fc1154710cb164b9c47f5b5b3054fb5eb3f9c4cababca3ca675c8db60814e701c2191975217c10eb8e71af408a144dcd86aad4c24c1048dd4ee73f187c215cbee75dd0572fb093c76da3a8ed36b9415ef190488f4524104dde7c5b603af142d6d8d0d5463f32f296465d52", @ANYRES8=r2, @ANYRES32=r4, @ANYRESHEX=r2, @ANYRESOCT=r1, @ANYRES8=r0], 0x24}}, 0x0) (async) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @local, 0xf}, 0x1c) (async) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0xac, 0x3a, ']:', 0x3a, '\x00', 0x3a, './file0', 0x3a, [0x50, 0x4f, 0x50, 0x46, 0x43]}, 0x2f) listen(r5, 0x2) (async) syz_emit_ethernet(0x5e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f900f500280601fe800000000000000000000000000025fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0020000907800001e122b3c3818920773c6c5f94279024ab5b2000048ba0e85f296efcd3bb95ce72a890613"], 0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0], 0x50) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3900f57f1e48d42c, 0x13, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYBLOB="e61166cefcbc18289d481f57543f2f56e3a004018327de53870ba29a4bade547afc8affa401ef42a2a077c601d3f660f71ed9454c3579874c87c533d7f6c748f833d129a7f37cfe42b678bef6802b3db11923bc61bde9f", @ANYRESDEC], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004800000048e200000b0000000000000000000003000000000100000002000000020000100d00000000000010100000000a0000000000001008000000050000000000000a00000000040000000000000b0200000000614f615f612e5f002e00"], &(0x7f0000000700)=""/180, 0x6b, 0xb4, 0x1, 0x81, 0x10000, @value=r1}, 0x28) r10 = dup(r8) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (rerun: 64) write$tun(r11, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r9], 0xfdef) 165.414007ms ago: executing program 6 (id=2253): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0), 0x0) accept4(r0, 0x0, 0x0, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r7, 0x80106f53, &(0x7f0000000040)={0x30, &(0x7f0000000100)=[{0x33, '\x00', @st={0x4, [{0x7, @svalue=0xde6}, {0x1, @svalue=0x81}, {0x3, @svalue=0x9}, {0x0, @svalue=0x9}]}}]}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0x1, 0x3}, 0x1}, 0x18) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x401}, 0x0) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)="3b7053c89aaf2ef8c5034dae054c781e238c5e61475dffca3bc45c6ff9ed1e342e69b9225c3ccf5be4b0c8c9fdd81172fb78758110101c162b8634e6bb77d88660708d1a2ce2d4dcc8662e42f105a00633456e5041096c28eef9", 0x5a}}, 0x20000010) sendmsg$can_j1939(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)}, 0x1, 0x0, 0x0, 0x20000081}, 0x480c4) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 85.232704ms ago: executing program 3 (id=2254): bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x5, 0x10001, 0x7fff, 0x202, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x34}, 0x50) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000003c0)={r2, 0x1000, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffe, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061a74df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce6, 0xa]}}) sendfile(r1, r2, 0x0, 0x200) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x3d, 0x3}}], 0x18}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xc2c8}}, './file0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r0, 0x2f, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0], 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), &(0x7f0000000140), 0x0}, 0x40) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x0, r0}, 0x18) mkdir(&(0x7f0000000080)='./file1\x00', 0xb) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r6, 0x26, 0x0, 0x7fffffff, &(0x7f0000000100)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x12, &(0x7f0000000200)={'trans=virtio,', {[{@noextend}]}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r8, &(0x7f0000000400)={0x2020}, 0x2020) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback=r3, r8, 0x0, 0x4, 0x0, @void, @value=r5, @void, @void, r4}, 0x20) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 0s ago: executing program 1 (id=2255): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) r1 = eventfd2(0x4, 0x1) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000040)={r1, 0xffffffff}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) eventfd(0x401) r2 = syz_pidfd_open(0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/87, 0x57}, {&(0x7f0000000140)=""/89, 0x59}, {&(0x7f00000001c0)=""/18, 0x12}, {&(0x7f0000000200)=""/195, 0xc3}], 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000340)="6a6466ba2100edc4c3ed5e6683003e670f01d1360fc75f81b9800000c00f3235004000000f300f01d10f01d10f2115b9610b0000b806000000ba000000000f30", 0x40}], 0x1, 0x8, &(0x7f00000003c0)=[@dstype3={0x7, 0xd}, @efer={0x2, 0x5c01}], 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000400)=0x1000) process_mrelease(r2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000005c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000440)}}, 0x10) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvfrom$x25(r3, &(0x7f0000000600)=""/108, 0x6c, 0x0, &(0x7f0000000680)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000006c0), 0x10800, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r4, 0x408c563e, &(0x7f0000000700)={0x400, 0x3, 0x2c, "817571ef2c3fb8106c9ce011271dc0d796c8d7ce48a85f1a027d42f26ccf87064e555761c7dad25df4c52d3d1ecb8d0e3d061e33a43d2e9b874b8bf9", 0x25, "57168eeb98e48125f9883458adbed2d4ddff41fb8a3b73b36ed8050a39692714bfbfdf0d2ac6ff927cc2ce87b9ee00ac3181acdfe948f5c81bdc7dd2", 0x68}) openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x800, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000800)={0x1, 'hsr0\x00', {}, 0x8}) preadv(r3, &(0x7f0000000a80)=[{&(0x7f0000000840)=""/34, 0x22}, {&(0x7f0000000880)=""/196, 0xc4}, {&(0x7f0000000980)=""/156, 0x9c}, {&(0x7f0000000a40)=""/15, 0xf}], 0x4, 0x6, 0x6) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$int_in(r6, 0x5421, &(0x7f0000000ac0)=0x80000001) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), r4) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b80)={0x188, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x528}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x134}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xbb52}]}, @TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x300}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20080884}, 0x4000000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000000dc0)={0x3, [0xe, 0x9, 0x3ff]}, 0xa) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000e00)={0x0, 0x6, 0x2}) r9 = pidfd_getfd(r2, r6, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000e40)={'macvlan1\x00', 0x200}) socket$l2tp(0x2, 0x2, 0x73) kernel console output (not intermixed with test programs): e bond_slave_0): Enslaving as an active interface with an up link [ 118.085534][ T8611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.126981][ T8611] team0: Port device team_slave_0 added [ 118.132722][ T8611] team0: Port device team_slave_1 added [ 118.153801][ T8611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.156589][ T8611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.166493][ T8611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.188322][ T8611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.190643][ T8611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.198601][ T8611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.233178][ T8611] hsr_slave_0: entered promiscuous mode [ 118.235922][ T8611] hsr_slave_1: entered promiscuous mode [ 118.238421][ T8611] debugfs: 'hsr0' already exists in 'hsr' [ 118.249878][ T8611] Cannot create hsr debugfs directory [ 118.403615][ T8611] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 118.413839][ T8611] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.421732][ T8611] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.440950][ T8611] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.594586][ T6326] bond2 (unregistering): (slave xfrm1): Releasing backup interface [ 118.597376][ T6326] xfrm1 (unregistering): left promiscuous mode [ 118.664187][ T6326] bond3 (unregistering): (slave bridge0): Releasing active interface [ 118.740433][ T6326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.746365][ T6326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.750486][ T6326] bond0 (unregistering): Released all slaves [ 118.821954][ T6326] bond1 (unregistering): Released all slaves [ 118.896652][ T6326] bond2 (unregistering): Released all slaves [ 118.973360][ T6326] bond3 (unregistering): Released all slaves [ 118.989306][ T8655] netem: incorrect ge model size [ 118.992327][ T8655] netem: change failed [ 119.020011][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.734'. [ 119.082260][ T6326] : left promiscuous mode [ 119.216011][ T8611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.258145][ T8611] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.321002][ T6321] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.324383][ T6321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.334437][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.336942][ T6322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.556597][ T6326] hsr_slave_0: left promiscuous mode [ 119.558839][ T6326] hsr_slave_1: left promiscuous mode [ 119.571629][ T6326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.575703][ T6326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.586080][ T6326] pim6reg (unregistering): left allmulticast mode [ 119.599413][ T8726] IPv6: NLM_F_REPLACE set, but no existing node found! [ 119.636928][ T6321] smc: removing ib device yz0 [ 119.657413][ T8727] netlink: 'syz.3.746': attribute type 1 has an invalid length. [ 119.795714][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 119.795727][ T40] audit: type=1400 audit(119.734:34433): avc: denied { watch watch_reads } for pid=8730 comm="syz.1.747" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 119.827890][ T6326] team0 (unregistering): Port device team_slave_1 removed [ 119.840109][ T5296] Bluetooth: hci4: command tx timeout [ 119.854484][ T6326] team0 (unregistering): Port device team_slave_0 removed [ 119.932433][ T8735] selinux_netlink_send: 23 callbacks suppressed [ 119.932452][ T8735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8735 comm=syz.3.746 [ 119.958663][ T8737] trusted_key: encrypted_key: master key parameter ''ÒµþNŒCÀÖ ú< 2¹ý¸ÄÃ9™£`*„Î73j¹6b0‘Øxi™}w—N‡$×QÆÈòq&+४Y„Â]a-ÊäA`=Õ)gÚÙR¥§doÚ´á`öŠ(r¶³çP1’àÖ;Ý®¤Nè/tpÂ5' is invalid [ 120.132274][ T40] audit: type=1400 audit(120.074:34434): avc: denied { connect } for pid=8747 comm="syz.0.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.246932][ T8611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.294372][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.751'. [ 120.376062][ T8764] netlink: 48 bytes leftover after parsing attributes in process `syz.0.753'. [ 120.428529][ T8611] veth0_vlan: entered promiscuous mode [ 120.434548][ T8611] veth1_vlan: entered promiscuous mode [ 120.453864][ T8611] veth0_macvtap: entered promiscuous mode [ 120.457841][ T8611] veth1_macvtap: entered promiscuous mode [ 120.475158][ T8611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.483234][ T8611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.491921][ T6323] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.494765][ T6323] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.515490][ T6323] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.518391][ T6323] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.613056][ T6322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.617845][ T6322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.655849][ T6321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.659455][ T6321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.701445][ T40] audit: type=1400 audit(120.644:34435): avc: denied { mounton } for pid=8611 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 120.710557][ T40] audit: type=1400 audit(120.644:34436): avc: denied { mounton } for pid=8611 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 120.763747][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.721'. [ 121.049103][ T8828] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 121.054772][ T40] audit: type=1400 audit(120.984:34437): avc: denied { mounton } for pid=8826 comm="syz.1.767" path="/file0" dev="ramfs" ino=25174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 121.060330][ T8828] overlayfs: failed to set xattr on upper [ 121.066323][ T8828] overlayfs: ...falling back to redirect_dir=nofollow. [ 121.069120][ T8828] overlayfs: ...falling back to index=off. [ 121.071629][ T8828] overlayfs: ...falling back to uuid=null. [ 121.096625][ T8828] fuse: Bad value for 'fd' [ 121.098806][ T8828] overlay: Unknown parameter 'uid<00000000000000000000' [ 121.106406][ T8834] qnx4: no qnx4 filesystem (no root dir). [ 121.180798][ T40] audit: type=1400 audit(121.124:34438): avc: denied { name_bind } for pid=8845 comm="syz.3.773" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 121.215277][ T40] audit: type=1400 audit(121.154:34439): avc: denied { write } for pid=8841 comm="syz.4.772" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 121.215723][ T8851] fuse: Bad value for 'fd' [ 121.220498][ T8852] fuse: Bad value for 'fd' [ 121.230462][ T40] audit: type=1400 audit(121.154:34440): avc: denied { open } for pid=8841 comm="syz.4.772" path="/5/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 121.237462][ T40] audit: type=1400 audit(121.154:34441): avc: denied { ioctl } for pid=8841 comm="syz.4.772" path="/5/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 121.354511][ T8865] netlink: 152 bytes leftover after parsing attributes in process `syz.3.779'. [ 121.361624][ T8865] netlink: 'syz.3.779': attribute type 3 has an invalid length. [ 121.388316][ T8868] No source specified [ 121.394098][ T8868] No source specified [ 121.395532][ T8868] No source specified [ 121.450608][ T40] audit: type=1400 audit(121.394:34442): avc: denied { block_suspend } for pid=8879 comm="syz.1.783" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.570318][ T8896] tmpfs: Unknown parameter 'y' [ 121.576727][ T8896] can0: slcan on pty29. [ 121.650525][ T8895] can0 (unregistered): slcan off pty29. [ 121.709198][ T8913] netlink: 'syz.1.792': attribute type 21 has an invalid length. [ 121.841155][ T8916] Invalid option length (1048180) for dns_resolver key [ 121.925392][ T5296] Bluetooth: hci4: command tx timeout [ 122.301770][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'. [ 122.603265][ T8951] netlink: 'syz.3.801': attribute type 2 has an invalid length. [ 122.606491][ T8951] netlink: 46 bytes leftover after parsing attributes in process `syz.3.801'. [ 122.763973][ T8957] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 122.782227][ T8959] netlink: 'syz.4.803': attribute type 1 has an invalid length. [ 122.783141][ T8957] batman_adv: batadv0: Adding interface: gretap1 [ 122.785137][ T8959] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.803'. [ 122.787629][ T8957] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.787654][ T8957] batman_adv: batadv0: Interface activated: gretap1 [ 122.905038][ T8971] fuse: Bad value for 'fd' [ 122.973652][ T8977] : entered promiscuous mode [ 123.143683][ T1475] IPVS: starting estimator thread 0... [ 123.147395][ T8999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.154923][ T8998] tipc: Started in network mode [ 123.157440][ T8998] tipc: Node identity ac1414aa, cluster identity 4711 [ 123.162200][ T8998] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 123.165513][ T8998] tipc: Enabled bearer , priority 10 [ 123.229977][ T9000] IPVS: using max 26 ests per chain, 62400 per kthread [ 123.283615][ T9004] team0: Device gtp0 is up. Set it down before adding it as a team port [ 123.301555][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 123.440000][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 123.560622][ T9019] netlink: 'syz.1.820': attribute type 1 has an invalid length. [ 123.589668][ T9019] bond3: (slave geneve2): making interface the new active one [ 123.592955][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 123.596423][ T9019] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 123.602674][ T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 123.605655][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 123.611752][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 123.617850][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 123.740018][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 123.823282][ T9046] __nla_validate_parse: 2 callbacks suppressed [ 123.823299][ T9046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.830'. [ 123.879942][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 123.896755][ T9053] netlink: 'syz.0.834': attribute type 1 has an invalid length. [ 123.917676][ T9053] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 123.921896][ T9053] bond8: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 123.930577][ T9053] bond8: (slave vxcan1): making interface the new active one [ 123.933575][ T9053] bond8: (slave vxcan1): Enslaving as an active interface with an up link [ 123.974189][ T9067] netlink: 48 bytes leftover after parsing attributes in process `syz.0.838'. [ 123.977403][ T9067] netlink: 68 bytes leftover after parsing attributes in process `syz.0.838'. [ 123.988665][ T9067] kAFS: unable to lookup cell '(,c¾ûL' [ 123.995501][ T9067] kAFS: unable to lookup cell '\,' [ 124.020017][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 124.037429][ T9073] fuse: Bad value for 'fd' [ 124.039655][ T9073] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 124.043209][ T9073] overlayfs: missing 'lowerdir' [ 124.102400][ T9084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.843'. [ 124.162490][ T1475] tipc: Node number set to 2886997162 [ 124.178023][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.850'. [ 124.184358][ T9098] netlink: 'syz.3.850': attribute type 30 has an invalid length. [ 124.196460][ T8821] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.201137][ T8821] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.206501][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.850'. [ 124.206777][ T8821] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.210198][ T9098] netlink: 'syz.3.850': attribute type 30 has an invalid length. [ 124.216380][ T8821] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.231521][ T9103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.848'. [ 124.254060][ T9101] geneve3: entered promiscuous mode [ 124.256168][ T9101] geneve3: entered allmulticast mode [ 124.287180][ T9105] overlayfs: failed to clone upperpath [ 124.299987][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 124.334669][ T9108] ata1.00: invalid multi_count 128 ignored [ 124.346848][ T9110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.854'. [ 124.378588][ T9101] syz.1.851 (9101) used greatest stack depth: 17080 bytes left [ 124.391574][ T9113] netlink: 'syz.1.855': attribute type 15 has an invalid length. [ 124.569950][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 124.862015][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 124.862028][ T40] audit: type=1400 audit(124.804:34453): avc: denied { unlink } for pid=5943 comm="syz-executor" name="file0" dev="tmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.969161][ T40] audit: type=1400 audit(124.904:34454): avc: denied { watch } for pid=9142 comm="syz.3.866" path="/235/file0" dev="tmpfs" ino=1308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 125.546432][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.874'. [ 125.579531][ T9208] netlink: 160 bytes leftover after parsing attributes in process `syz.1.875'. [ 125.760358][ T5296] Bluetooth: hci4: command tx timeout [ 126.185729][ T40] audit: type=1400 audit(126.124:34455): avc: denied { mounton } for pid=9282 comm="syz.3.897" path="/242/file0" dev="tmpfs" ino=1349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 126.236248][ T9288] netlink: 'syz.0.896': attribute type 8 has an invalid length. [ 126.246874][ T9288] bond0: entered promiscuous mode [ 126.249067][ T9288] bond_slave_0: entered promiscuous mode [ 126.252356][ T9288] bond_slave_1: entered promiscuous mode [ 126.254345][ T9288] batadv0: entered promiscuous mode [ 126.257403][ T9288] gretap0: entered promiscuous mode [ 126.262012][ T9288] bond0: left promiscuous mode [ 126.264125][ T9288] bond_slave_0: left promiscuous mode [ 126.266122][ T9288] bond_slave_1: left promiscuous mode [ 126.268525][ T9288] batadv0: left promiscuous mode [ 126.273954][ T9288] gretap0: left promiscuous mode [ 126.287241][ T9279] netlink: 'syz.0.896': attribute type 8 has an invalid length. [ 126.293469][ T9279] bond0: entered promiscuous mode [ 126.295711][ T9279] bond_slave_0: entered promiscuous mode [ 126.297707][ T9279] bond_slave_1: entered promiscuous mode [ 126.300239][ T9279] batadv0: entered promiscuous mode [ 126.302735][ T9279] gretap0: entered promiscuous mode [ 126.305778][ T9279] bond0: left promiscuous mode [ 126.307404][ T9279] bond_slave_0: left promiscuous mode [ 126.309193][ T9279] bond_slave_1: left promiscuous mode [ 126.311216][ T9279] batadv0: left promiscuous mode [ 126.313766][ T9279] gretap0: left promiscuous mode [ 126.536703][ T9304] fuse: Bad value for 'fd' [ 126.540846][ T9304] fuse: Bad value for 'fd' [ 128.048768][ T9337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9337 comm=syz.1.915 [ 128.149808][ T9349] xt_connbytes: Forcing CT accounting to be enabled [ 128.224542][ T9348] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 128.239955][ C3] net_ratelimit: 4 callbacks suppressed [ 128.239968][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 128.278550][ T40] audit: type=1400 audit(128.214:34456): avc: denied { setopt } for pid=9368 comm="syz.4.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 128.307507][ T9367] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 128.358047][ T9375] netlink: 'syz.0.926': attribute type 1 has an invalid length. [ 128.380501][ T40] audit: type=1400 audit(128.324:34457): avc: denied { accept } for pid=9376 comm="syz.3.928" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.430449][ T9379] netlink: 'syz.3.929': attribute type 6 has an invalid length. [ 128.440633][ T9379] netlink: 'syz.3.929': attribute type 4 has an invalid length. [ 129.289911][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 129.296379][ T40] audit: type=1400 audit(129.234:34458): avc: denied { mount } for pid=9411 comm="syz.1.939" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 129.380563][ T9427] __nla_validate_parse: 16 callbacks suppressed [ 129.380582][ T9427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.943'. [ 129.410311][ T9425] syz_tun: entered allmulticast mode [ 129.410621][ T40] audit: type=1400 audit(129.354:34459): avc: denied { map } for pid=9423 comm="syz.3.944" path="socket:[27636]" dev="sockfs" ino=27636 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 129.413545][ T9425] syz_tun: left allmulticast mode [ 129.836839][ T40] audit: type=1400 audit(129.774:34460): avc: denied { connect } for pid=9450 comm="syz.4.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 130.169997][ T5296] Bluetooth: hci2: command 0x0401 tx timeout [ 130.329898][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 130.411594][ T9471] openvswitch: netlink: IP tunnel dst address not specified [ 130.446332][ T9481] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 130.616105][ T9489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.961'. [ 130.679140][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 130.699815][ T9496] 8021q: adding VLAN 0 to HW filter on device bond4 [ 130.744413][ T9502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.966'. [ 130.791328][ T9504] tmpfs: Bad value for 'mpol' [ 130.815551][ T40] audit: type=1400 audit(130.754:34461): avc: denied { mounton } for pid=9510 comm="syz.1.969" path="/240/file0" dev="tmpfs" ino=1319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 130.881605][ T40] audit: type=1400 audit(130.824:34462): avc: denied { associate } for pid=9509 comm="syz.0.968" name="file0" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 130.948293][ T9512] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 131.113949][ T9527] overlay: Bad value for 'workdir' [ 131.359998][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 131.427027][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.978'. [ 131.473541][ T9543] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.978'. [ 131.505507][ T9546] netlink: 24 bytes leftover after parsing attributes in process `syz.3.979'. [ 131.925525][ T9571] io-wq is not configured for unbound workers [ 131.958418][ T9580] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 132.118680][ T9596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9596 comm=syz.0.991 [ 132.226059][ T9619] syz_tun: entered allmulticast mode [ 132.234053][ T9619] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 132.344420][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.999'. [ 132.348170][ T9630] bridge_slave_1: left allmulticast mode [ 132.351063][ T9630] bridge_slave_1: left promiscuous mode [ 132.354510][ T9630] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.401377][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 132.569468][ T9659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1009'. [ 132.584821][ T40] audit: type=1400 audit(132.524:34463): avc: denied { setopt } for pid=9660 comm="syz.3.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.588202][ T9659] 8021q: adding VLAN 0 to HW filter on device bond9 [ 132.605984][ T9659] bond9: entered allmulticast mode [ 132.632197][ T9665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1011'. [ 132.996120][ T40] audit: type=1400 audit(132.934:34464): avc: denied { listen } for pid=9685 comm="syz.4.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.012463][ T9684] pimreg: entered allmulticast mode [ 133.219393][ T9714] overlayfs: failed to clone upperpath [ 133.391406][ T40] audit: type=1400 audit(133.334:34465): avc: denied { listen } for pid=9726 comm="syz.4.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 133.439997][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 133.701194][ T9748] vxcan1 speed is unknown, defaulting to 1000 [ 133.705014][ T9748] vxcan1 speed is unknown, defaulting to 1000 [ 133.708211][ T9748] vxcan1 speed is unknown, defaulting to 1000 [ 133.834729][ T9748] infiniband syz2: set active [ 133.836837][ T1475] vxcan1 speed is unknown, defaulting to 1000 [ 133.839676][ T9748] infiniband syz2: added vxcan1 [ 133.844872][ T9748] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 133.847492][ T9748] infiniband syz2: Couldn't open port 1 [ 133.868294][ T9748] RDS/IB: syz2: added [ 133.870475][ T9748] smc: adding ib device syz2 with port count 1 [ 133.873012][ T9748] smc: ib device syz2 port 1 has no pnetid [ 133.875426][ T1475] vxcan1 speed is unknown, defaulting to 1000 [ 133.878940][ T9748] vxcan1 speed is unknown, defaulting to 1000 [ 133.975225][ T9748] vxcan1 speed is unknown, defaulting to 1000 [ 134.051977][ T9748] vxcan1 speed is unknown, defaulting to 1000 [ 134.081177][ T9759] xt_hashlimit: size too large, truncated to 1048576 [ 134.135413][ T9748] vxcan1 speed is unknown, defaulting to 1000 [ 134.256114][ T9771] openvswitch: netlink: Flow actions attr not present in new flow. [ 134.429542][ T9790] Driver unsupported XDP return value 0 on prog (id 100) dev N/A, expect packet loss! [ 134.455333][ T9795] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 134.491937][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 134.552800][ T40] audit: type=1400 audit(134.494:34466): avc: denied { getopt } for pid=9801 comm="syz.0.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.562015][ T40] audit: type=1400 audit(134.504:34467): avc: denied { write } for pid=9801 comm="syz.0.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 135.088908][ T9826] overlayfs: missing 'lowerdir' [ 135.271987][ T9836] __nla_validate_parse: 5 callbacks suppressed [ 135.272010][ T9836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1061'. [ 135.349808][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1065'. [ 135.353494][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1065'. [ 135.434918][ T9864] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1067'. [ 135.527712][ T9868] raw_sendmsg: syz.1.1068 forgot to set AF_INET. Fix it! [ 135.530999][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 135.665728][ T9870] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1069'. [ 135.669634][ T9870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1069'. [ 135.978475][ T40] audit: type=1400 audit(135.914:34468): avc: denied { listen } for pid=9890 comm="syz.3.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 135.987444][ T40] audit: type=1400 audit(135.914:34469): avc: denied { accept } for pid=9890 comm="syz.3.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 136.195646][ T9895] netlink: 'syz.0.1078': attribute type 29 has an invalid length. [ 136.202214][ T9895] netlink: 'syz.0.1078': attribute type 29 has an invalid length. [ 136.207508][ T9895] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1078'. [ 136.214817][ T9895] overlayfs: failed to resolve './cgroup': -2 [ 136.287385][ T9901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9901 comm=syz.1.1080 [ 136.339383][ T9908] overlayfs: failed to clone upperpath [ 136.377257][ T9913] netlink: 'syz.0.1085': attribute type 23 has an invalid length. [ 136.560030][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 136.560174][ T5941] Bluetooth: hci0: command 0x1003 tx timeout [ 136.566048][ T5296] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 136.652086][ T9929] geneve2: entered promiscuous mode [ 136.883675][ T9936] overlayfs: failed to clone upperpath [ 137.168942][ T9908] 9pnet_fd: p9_fd_create_tcp (9908): problem connecting socket to 127.0.0.1 [ 137.295658][ T9943] sctp: [Deprecated]: syz.1.1092 (pid 9943) Use of int in max_burst socket option. [ 137.295658][ T9943] Use struct sctp_assoc_value instead [ 137.373502][ T9945] Invalid source name [ 137.375172][ T9945] UBIFS error (pid: 9945): cannot open "./file0", error -22 [ 137.376569][ T40] audit: type=1400 audit(137.314:34470): avc: denied { mounton } for pid=9944 comm="syz.4.1093" path="/51/file0" dev="tmpfs" ino=288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 137.386627][ T9945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1093'. [ 137.391237][ T40] audit: type=1400 audit(137.314:34471): avc: denied { execute } for pid=9946 comm="syz.0.1094" name="file0" dev="ramfs" ino=31014 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 137.397910][ T40] audit: type=1400 audit(137.334:34472): avc: denied { execute_no_trans } for pid=9946 comm="syz.0.1094" path="/file0" dev="ramfs" ino=31014 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 137.540307][ T40] audit: type=1400 audit(137.484:34473): avc: denied { write } for pid=9954 comm="syz.4.1096" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 137.555258][ T9955] XFS (nbd4): SB validate failed with error -5. [ 137.601141][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 137.688643][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.690925][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.861670][ T9997] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.276466][T10029] netlink: 'syz.3.1120': attribute type 21 has an invalid length. [ 138.279805][T10029] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1120'. [ 138.624253][ T40] audit: type=1400 audit(138.564:34474): avc: denied { connect } for pid=10034 comm="syz.1.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 138.639961][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 138.685242][T10042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1125'. [ 138.968840][T10078] fuse: Unknown parameter '' [ 139.007750][T10077] xt_connbytes: Forcing CT accounting to be enabled [ 139.010258][T10077] Cannot find set identified by id 0 to match [ 139.027092][T10076] sctp: [Deprecated]: syz.3.1134 (pid 10076) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.027092][T10076] Use struct sctp_sack_info instead [ 139.039995][ T40] audit: type=1800 audit(138.974:34475): pid=10076 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1134" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 139.065595][T10093] MPI: mpi too large (107144 bits) [ 139.092119][T10097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.164489][T10105] xt_hashlimit: size too large, truncated to 1048576 [ 139.191569][T10109] netlink: 'syz.3.1146': attribute type 1 has an invalid length. [ 139.194707][T10108] netlink: 'syz.3.1146': attribute type 1 has an invalid length. [ 139.229211][T10108] bond2: (slave geneve2): making interface the new active one [ 139.234324][T10108] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 139.237777][ T8825] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 139.241756][ T8825] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 139.245274][ T8825] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 139.258698][T10109] bond2 (unregistering): (slave geneve2): Releasing active interface [ 139.266172][T10109] bond2 (unregistering): Released all slaves [ 139.269174][ T40] audit: type=1400 audit(2000000000.210:34476): avc: denied { accept } for pid=10116 comm="syz.0.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 139.285495][ T8825] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 139.289145][ T8825] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 139.295485][ T8825] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 139.346397][ T40] audit: type=1400 audit(2000000000.290:34477): avc: denied { read } for pid=10121 comm="syz.1.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 139.602260][T10147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=10147 comm=syz.0.1156 [ 139.679923][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 140.119276][T10190] netlink: 'syz.3.1167': attribute type 1 has an invalid length. [ 140.287893][T10208] __nla_validate_parse: 6 callbacks suppressed [ 140.287908][T10208] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1172'. [ 140.335661][T10214] overlayfs: failed to clone upperpath [ 140.448171][T10229] tipc: Started in network mode [ 140.450581][T10229] tipc: Node identity ac1414aa, cluster identity 4711 [ 140.453998][T10229] tipc: Enabled bearer , priority 10 [ 140.601346][T10237] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1180'. [ 140.719910][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 140.787729][T10249] bond1: option downdelay: invalid value (18446744073709551615) [ 140.791090][T10249] bond1: option downdelay: allowed values 0 - 2147483647 [ 140.799425][T10249] bond1 (unregistering): Released all slaves [ 141.030176][T10260] fuse: Unknown parameter 'overlay' [ 141.032170][T10260] fuse: Unknown parameter 'overlay' [ 141.033878][T10260] fuse: Unknown parameter 'overlay' [ 141.035655][T10260] fuse: Unknown parameter 'overlay' [ 141.037408][T10260] fuse: Unknown parameter 'overlay' [ 141.039304][T10260] fuse: Unknown parameter 'overlay' [ 141.041568][T10260] fuse: Unknown parameter 'overlay' [ 141.043439][T10260] fuse: Unknown parameter 'overlay' [ 141.047703][T10260] fuse: Unknown parameter ' ' [ 141.276208][T10276] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1191'. [ 141.512087][T10298] vxcan1 speed is unknown, defaulting to 1000 [ 141.514548][T10302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1198'. [ 141.518427][T10302] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1198'. [ 141.591151][ T5961] tipc: Node number set to 2886997162 [ 141.727725][T10325] netlink: 'syz.0.1203': attribute type 21 has an invalid length. [ 141.759965][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 141.769399][T10329] vxcan1 speed is unknown, defaulting to 1000 [ 141.791804][T10298] netlink: 57 bytes leftover after parsing attributes in process `syz.1.1196'. [ 141.905934][T10338] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1204'. [ 141.930793][T10336] vxcan1 speed is unknown, defaulting to 1000 [ 141.945695][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 141.945710][ T40] audit: type=1400 audit(2000000002.890:34488): avc: denied { mount } for pid=10344 comm="syz.0.1209" name="/" dev="rpc_pipefs" ino=29502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 142.020113][T10353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1211'. [ 142.117913][ T40] audit: type=1400 audit(2000000003.060:34489): avc: denied { ioctl } for pid=10367 comm="syz.4.1215" path="socket:[31470]" dev="sockfs" ino=31470 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 142.124780][T10368] tipc: Started in network mode [ 142.127696][T10368] tipc: Node identity 4, cluster identity 4711 [ 142.131420][T10368] tipc: Node number set to 4 [ 142.310252][ T40] audit: type=1400 audit(2000000003.260:34490): avc: denied { read } for pid=10385 comm="syz.0.1220" path="socket:[30554]" dev="sockfs" ino=30554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 142.311905][T10386] Cannot find add_set index 65532 as target [ 142.331182][ T40] audit: type=1400 audit(2000000003.280:34491): avc: denied { write } for pid=10385 comm="syz.0.1220" path="socket:[30554]" dev="sockfs" ino=30554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 142.556578][T10412] netlink: 'syz.3.1231': attribute type 4 has an invalid length. [ 142.635117][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1233'. [ 142.638842][T10420] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1233'. [ 142.800006][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 142.882865][ T40] audit: type=1400 audit(2000000003.830:34492): avc: denied { write } for pid=10445 comm="syz.4.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 142.888984][ T40] audit: type=1400 audit(2000000003.830:34493): avc: denied { lock } for pid=10445 comm="syz.4.1240" path="socket:[29589]" dev="sockfs" ino=29589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 143.026214][T10472] netlink: 'syz.4.1248': attribute type 1 has an invalid length. [ 143.030300][T10471] netlink: 'syz.3.1249': attribute type 1 has an invalid length. [ 143.049743][T10471] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.102855][T10477] vxcan1 speed is unknown, defaulting to 1000 [ 143.119953][T10481] ref_ctr_offset mismatch. inode: 0x8c3 offset: 0x0 ref_ctr_offset(old): 0x24 ref_ctr_offset(new): 0x0 [ 143.174499][T10490] bond10 (unregistering): Released all slaves [ 143.178512][T10494] netlink: 'syz.4.1256': attribute type 1 has an invalid length. [ 143.202204][T10481] IPv6: NLM_F_REPLACE set, but no existing node found! [ 143.246094][T10494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.272025][T10496] bond1: (slave bridge1): making interface the new active one [ 143.274800][T10496] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 143.353789][ T40] audit: type=1400 audit(2000000004.300:34494): avc: denied { map } for pid=10504 comm="syz.4.1260" path="socket:[30650]" dev="sockfs" ino=30650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.362406][ T40] audit: type=1400 audit(2000000004.300:34495): avc: denied { accept } for pid=10504 comm="syz.4.1260" path="socket:[30650]" dev="sockfs" ino=30650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.624583][ T40] audit: type=1400 audit(2000000004.570:34496): avc: denied { getopt } for pid=10532 comm="syz.1.1268" lport=33992 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 143.789800][T10542] netlink: 'syz.3.1271': attribute type 1 has an invalid length. [ 143.803407][ T40] audit: type=1400 audit(2000000004.750:34497): avc: denied { setopt } for pid=10520 comm="syz.0.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 143.810938][T10542] 8021q: adding VLAN 0 to HW filter on device bond3 [ 143.828046][T10542] vlan0: entered promiscuous mode [ 143.830599][T10542] bond3: entered promiscuous mode [ 143.832801][T10542] vlan0: entered allmulticast mode [ 143.834973][T10542] bond3: entered allmulticast mode [ 143.840009][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 143.856441][T10542] bond3: (slave bridge6): making interface the new active one [ 143.859746][T10542] bridge6: entered promiscuous mode [ 143.862270][T10542] bridge6: entered allmulticast mode [ 143.865641][T10542] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 143.917483][T10548] netlink: 'syz.3.1273': attribute type 8 has an invalid length. [ 143.920136][T10548] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 143.967953][T10560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.100114][T10574] overlayfs: missing 'lowerdir' [ 144.127405][T10576] all: renamed from bridge_slave_0 (while UP) [ 144.156594][T10576] netlink: 'syz.3.1282': attribute type 21 has an invalid length. [ 144.388085][T10599] netlink: 'syz.3.1288': attribute type 1 has an invalid length. [ 144.408799][T10599] bond4: entered promiscuous mode [ 144.411123][T10599] bond4: entered allmulticast mode [ 144.412958][T10599] 8021q: adding VLAN 0 to HW filter on device bond4 [ 144.430265][T10599] erspan1: entered allmulticast mode [ 144.435475][T10599] bond4: (slave erspan1): making interface the new active one [ 144.438671][T10599] erspan1: entered promiscuous mode [ 144.445198][T10599] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 144.452020][T10599] openvswitch: netlink: IP tunnel dst address not specified [ 144.524157][T10609] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 144.527841][T10612] netlink: 'syz.3.1293': attribute type 1 has an invalid length. [ 144.594448][T10617] vxcan1 speed is unknown, defaulting to 1000 [ 144.651108][ T60] wlan1: Trigger new scan to find an IBSS to join [ 144.724720][T10619] vxcan1 speed is unknown, defaulting to 1000 [ 144.880039][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 145.365992][T10637] erspan2: entered promiscuous mode [ 145.469652][T10647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10647 comm=syz.3.1305 [ 145.480278][T10647] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 145.483615][T10647] bond5: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 145.488335][T10647] bond5: (slave vxcan1): making interface the new active one [ 145.492096][T10647] bond5: (slave vxcan1): Enslaving as an active interface with an up link [ 145.497587][T10647] __nla_validate_parse: 8 callbacks suppressed [ 145.497601][T10647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1305'. [ 145.517779][T10647] bond5 (unregistering): (slave vxcan1): Releasing backup interface [ 145.522336][T10647] bond5 (unregistering): Released all slaves [ 145.624243][T10653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10653 comm=syz.3.1307 [ 145.919970][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 146.208803][T10680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10680 comm=syz.4.1316 [ 146.544498][T10710] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.547090][T10710] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.691809][T10710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.705840][T10710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.871738][T10712] gretap0: entered promiscuous mode [ 146.884055][T10714] bond10: entered promiscuous mode [ 146.886005][T10714] 8021q: adding VLAN 0 to HW filter on device bond10 [ 146.889043][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1329'. [ 146.893861][T10716] gretap0: left promiscuous mode [ 146.900214][ T6019] vxcan1 speed is unknown, defaulting to 1000 [ 146.900257][T10722] ªªªªªª: renamed from veth0_macvtap (while UP) [ 146.902203][ T6019] syz2: Port: 1 Link DOWN [ 146.908890][ T6319] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.912969][ T6319] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.916475][ T6319] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.921515][ T6319] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.925256][ T6019] vxcan1 speed is unknown, defaulting to 1000 [ 146.959958][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 147.048912][T10740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.196103][T10753] tmpfs: Bad value for 'mpol' [ 147.198835][T10753] validate_nla: 4 callbacks suppressed [ 147.198850][T10753] netlink: 'syz.1.1341': attribute type 10 has an invalid length. [ 147.216399][T10753] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 147.259496][T10762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10762 comm=syz.3.1344 [ 147.320201][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1346'. [ 147.323078][T10768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1346'. [ 147.563139][T10788] netlink: 'syz.3.1348': attribute type 4 has an invalid length. [ 147.671088][T10802] geneve3: entered promiscuous mode [ 147.672741][T10802] geneve3: entered allmulticast mode [ 147.899793][T10813] vxcan1 speed is unknown, defaulting to 1000 [ 147.917990][T10815] netlink: 'syz.4.1359': attribute type 4 has an invalid length. [ 147.999993][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 148.124165][T10829] fuse: Bad value for 'rootmode' [ 148.153379][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 148.153391][ T40] audit: type=1400 audit(2000000009.099:34502): avc: denied { map } for pid=10830 comm="syz.0.1364" path="socket:[33969]" dev="sockfs" ino=33969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 148.170015][ T40] audit: type=1400 audit(2000000009.099:34503): avc: denied { accept } for pid=10830 comm="syz.0.1364" path="socket:[33969]" dev="sockfs" ino=33969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 148.179174][T10833] overlayfs: missing 'lowerdir' [ 148.199136][T10835] bridge: RTM_NEWNEIGH with invalid ether address [ 148.239485][T10840] nfs4: Bad value for 'source' [ 148.304955][T10849] vxcan1 speed is unknown, defaulting to 1000 [ 148.349016][T10853] overlayfs: failed to resolve './file1': -2 [ 148.382989][ T40] audit: type=1400 audit(2000000009.319:34504): avc: denied { map } for pid=10854 comm="syz.0.1373" path="/436" dev="tmpfs" ino=2380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 148.433106][ T40] audit: type=1326 audit(2000000009.379:34505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10845 comm="syz.3.1370" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb611d9af79 code=0x0 [ 148.469627][T10848] vxcan1 speed is unknown, defaulting to 1000 [ 148.846990][T10890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=10890 comm=syz.0.1381 [ 149.039918][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 149.094085][T10904] netlink: 'syz.3.1386': attribute type 1 has an invalid length. [ 149.444565][T10926] macsec3: entered promiscuous mode [ 149.646376][ T40] audit: type=1401 audit(2000000010.589:34506): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 149.657848][T10944] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 149.661628][ T40] audit: type=1400 audit(2000000010.619:34507): avc: denied { relabelto } for pid=10938 comm="syz.1.1395" name="345" dev="tmpfs" ino=1884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 149.670804][ T40] audit: type=1400 audit(2000000010.619:34508): avc: denied { associate } for pid=10938 comm="syz.1.1395" name="345" dev="tmpfs" ino=1884 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 149.703147][ T40] audit: type=1400 audit(2000000010.649:34509): avc: denied { remove_name } for pid=5935 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 149.711865][ T40] audit: type=1400 audit(2000000010.649:34510): avc: denied { rmdir } for pid=5935 comm="syz-executor" name="345" dev="tmpfs" ino=1884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 149.749316][T10951] vxcan1 speed is unknown, defaulting to 1000 [ 149.875843][T10962] overlayfs: failed to clone upperpath [ 149.989143][T10973] netlink: 'syz.0.1403': attribute type 1 has an invalid length. [ 150.079962][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 150.129703][T10982] 9pnet_virtio: no channels available for device 127.0.0.1 [ 150.150719][T10984] overlay: Unknown parameter 'smackfshat' [ 150.188009][T10992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1411'. [ 150.194060][T10998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1411'. [ 150.272675][T11005] netlink: 'syz.0.1415': attribute type 1 has an invalid length. [ 150.275854][T11005] netlink: 'syz.0.1415': attribute type 2 has an invalid length. [ 150.302050][ T40] audit: type=1400 audit(2000000011.249:34511): avc: denied { setopt } for pid=11006 comm="syz.4.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.428482][T11014] vxcan1 speed is unknown, defaulting to 1000 [ 150.493368][T11019] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 150.495596][T11019] overlayfs: failed to set xattr on upper [ 150.497393][T11019] overlayfs: ...falling back to redirect_dir=nofollow. [ 150.499550][T11019] overlayfs: ...falling back to index=off. [ 150.501924][T11019] overlayfs: ...falling back to uuid=null. [ 150.503813][T11019] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 151.019977][T11056] trusted_key: encrypted_key: hex blob is missing [ 151.092251][T11061] ip6gre1: entered allmulticast mode [ 151.096780][T11061] team0: Device ip6gre1 is of different type [ 151.120160][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 151.153492][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1435'. [ 151.217895][ T61] libceph: connect (1)[c::]:6789 error -101 [ 151.220785][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 151.287745][T11084] veth1_to_team: entered promiscuous mode [ 151.290755][T11084] veth1_to_team: left promiscuous mode [ 151.310050][T11071] ceph: No mds server is up or the cluster is laggy [ 151.486717][T11109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.488292][T11105] overlayfs: failed to clone upperpath [ 151.708486][T11138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1457'. [ 151.745804][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'. [ 151.751281][T11145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1458'. [ 151.762231][ T60] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.765496][ T60] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.769065][ T60] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.772673][ T60] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.831253][T11159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1463'. [ 151.835025][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1463'. [ 151.838831][T11159] netlink: 'syz.4.1463': attribute type 11 has an invalid length. [ 151.904021][T11164] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1465'. [ 152.160026][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 152.487678][T11190] overlay: ./cgroup is not a directory [ 152.532509][T11192] siw: device registration error -23 [ 152.559571][T11196] overlay: Bad value for 'redirect_dir' [ 153.200036][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 153.204553][T11222] netlink: 'syz.3.1484': attribute type 4 has an invalid length. [ 153.250819][T11226] team0: Device ipvlan1 failed to register rx_handler [ 153.337719][T11232] : entered promiscuous mode [ 153.738187][T11260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.042366][T11271] netlink: 'syz.4.1500': attribute type 10 has an invalid length. [ 154.045686][T11271] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1500'. [ 154.131694][T11273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11273 comm=syz.3.1501 [ 154.191730][T11276] overlayfs: failed to clone upperpath [ 154.191943][T11275] overlayfs: failed to clone upperpath [ 154.239922][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 154.414169][T11304] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1512'. [ 154.457866][T11310] netlink: 'syz.3.1513': attribute type 1 has an invalid length. [ 154.624058][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 154.624071][ T40] audit: type=1400 audit(2000000015.569:34515): avc: denied { read } for pid=11331 comm="syz.3.1521" lport=30764 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 154.727317][T11334] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1521'. [ 155.025422][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.029258][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.032624][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.035800][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.039280][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.058264][T11341] vxcan1 speed is unknown, defaulting to 1000 [ 155.211273][T11341] chnl_net:caif_netlink_parms(): no params data found [ 155.278747][T11341] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.283782][T11341] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.286768][T11341] bridge_slave_0: entered allmulticast mode [ 155.289972][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 155.290557][T11341] bridge_slave_0: entered promiscuous mode [ 155.297730][T11341] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.301075][T11341] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.304092][T11341] bridge_slave_1: entered allmulticast mode [ 155.307864][T11341] bridge_slave_1: entered promiscuous mode [ 155.329558][T11341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.334232][T11341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.353787][T11341] team0: Port device team_slave_0 added [ 155.358574][T11341] team0: Port device team_slave_1 added [ 155.381107][T11341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.384090][T11341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.394810][T11341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.401057][T11341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.403961][T11341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.414456][T11341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.455848][T11341] hsr_slave_0: entered promiscuous mode [ 155.459028][T11341] hsr_slave_1: entered promiscuous mode [ 155.462377][T11341] debugfs: 'hsr0' already exists in 'hsr' [ 155.464648][T11341] Cannot create hsr debugfs directory [ 155.571016][T11357] xt_connbytes: Forcing CT accounting to be enabled [ 155.573634][T11357] set match dimension is over the limit! [ 155.597840][T11341] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.605738][T11341] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.610322][T11341] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.614808][T11341] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.639915][T11369] netlink: 'syz.3.1529': attribute type 21 has an invalid length. [ 155.642566][T11369] netlink: 'syz.3.1529': attribute type 4 has an invalid length. [ 155.645516][T11369] netlink: 'syz.3.1529': attribute type 5 has an invalid length. [ 155.682256][T11341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.701391][T11341] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.709016][ T6327] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.712262][ T6327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.730726][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.733976][ T6322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.766388][T11341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.772081][T11341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.921230][ T40] audit: type=1326 audit(2000000272.877:34516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11379 comm="syz.3.1532" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb611d9af79 code=0x0 [ 156.025759][ T40] audit: type=1400 audit(2000000272.977:34517): avc: denied { create } for pid=11379 comm="syz.3.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 156.048208][T11341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.253189][T11341] veth0_vlan: entered promiscuous mode [ 156.259352][T11341] veth1_vlan: entered promiscuous mode [ 156.277938][T11341] veth0_macvtap: entered promiscuous mode [ 156.282182][T11341] veth1_macvtap: entered promiscuous mode [ 156.289477][T11415] __nla_validate_parse: 4 callbacks suppressed [ 156.289494][T11415] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1540'. [ 156.291817][T11341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.304513][T11341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.320001][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 156.328183][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.331465][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.334141][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.336860][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.386882][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.390418][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.415471][ T6319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.418820][ T6319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.451031][T11419] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.456247][T11419] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 156.463020][T11420] IPVS: set_ctl: invalid protocol: 60 100.1.1.2:20003 [ 156.467125][T11420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1542'. [ 156.493714][ T40] audit: type=1400 audit(2000000273.447:34518): avc: denied { mounton } for pid=11341 comm="syz-executor" path="/syzkaller.PSd7EA/syz-tmp" dev="sda1" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 156.753954][T11419] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.758399][T11419] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 157.116975][T11419] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.125026][T11419] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 157.170559][ T5296] Bluetooth: hci0: command tx timeout [ 157.360096][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 157.389978][T11419] bond0: (slave netdevsim0): Releasing backup interface [ 157.412483][T11419] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.431596][T11419] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 157.660380][T11439] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1549'. [ 157.793752][ T60] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 157.798474][ T60] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 157.814388][ T60] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 157.819441][ T60] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 157.837362][T11443] netlink: 'syz.5.1550': attribute type 13 has an invalid length. [ 157.875322][T11443] gretap0: refused to change device tx_queue_len [ 157.886694][T11443] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 157.900837][ T60] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 157.904907][ T60] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 157.926221][ T60] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 157.930983][ T60] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 157.970987][T11443] No such timeout policy "syz1" [ 158.410074][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 158.545195][T11468] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 158.973203][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1563'. [ 159.044061][T11488] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1564'. [ 159.210186][ T5296] Bluetooth: hci0: command tx timeout [ 159.212937][T11494] netlink: 'syz.5.1566': attribute type 1 has an invalid length. [ 159.359609][T11494] gretap1: entered promiscuous mode [ 159.470747][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 159.807601][T11525] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1573'. [ 159.812806][T11525] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1573'. [ 159.816998][T11525] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1573'. [ 160.031026][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1577'. [ 160.460934][T11559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29037 sclass=netlink_route_socket pid=11559 comm=syz.5.1583 [ 160.486815][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 161.287214][ T5296] Bluetooth: hci0: command tx timeout [ 161.298948][T11600] netlink: 'syz.5.1594': attribute type 1 has an invalid length. [ 161.311834][T11600] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1594'. [ 161.332397][T11600] netlink: 658 bytes leftover after parsing attributes in process `syz.5.1594'. [ 161.337054][T11600] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1594'. [ 161.542778][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 162.048617][T11617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1600'. [ 162.483452][T11628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1605'. [ 162.488005][T11628] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1605'. [ 162.559964][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 162.640405][T11631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11631 comm=syz.1.1606 [ 162.708921][T11634] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 162.842617][T11639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1608'. [ 162.850492][T11639] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 162.970502][T11642] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1610'. [ 162.977190][T11643] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1610'. [ 163.092595][T11646] MPI: mpi too large (107144 bits) [ 163.382312][ T5296] Bluetooth: hci0: command tx timeout [ 163.429511][T11654] netlink: 'syz.5.1614': attribute type 1 has an invalid length. [ 163.433900][T11654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.495055][ T40] audit: type=1400 audit(2000000280.447:34519): avc: denied { execmod } for pid=11655 comm="syz.3.1615" path="/454/cgroup.controllers" dev="tmpfs" ino=2516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 163.609931][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 163.854090][ T40] audit: type=1400 audit(2000000280.807:34520): avc: denied { accept } for pid=11670 comm="syz.3.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 163.883710][ T40] audit: type=1400 audit(2000000280.837:34521): avc: denied { write } for pid=11670 comm="syz.3.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 163.911421][T11673] overlayfs: failed to clone upperpath [ 164.060953][T11679] netlink: 'syz.3.1624': attribute type 13 has an invalid length. [ 164.331411][T11679] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.571784][T11679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.598443][T11679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.639950][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 164.966225][T11679] batman_adv: batadv0: Interface deactivated: gretap1 [ 165.059951][ T6324] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.063148][ T6324] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.066259][ T6324] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.080169][ T6324] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.086466][ T1146] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.118694][ T1146] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.136565][ T1146] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.141922][ T1146] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.252854][T11707] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1633'. [ 165.341454][T11709] netlink: 'syz.1.1634': attribute type 1 has an invalid length. [ 165.344845][T11709] netlink: 'syz.1.1634': attribute type 1 has an invalid length. [ 165.690751][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 165.727265][T11729] overlayfs: failed to clone upperpath [ 165.897732][T11732] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 165.918167][T11732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=11732 comm=syz.5.1642 [ 166.624917][ T40] audit: type=1400 audit(2000000283.577:34522): avc: denied { watch_sb } for pid=11738 comm="syz.1.1644" path="/396" dev="tmpfs" ino=2159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 166.696829][T11749] __nla_validate_parse: 3 callbacks suppressed [ 166.696845][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1646'. [ 166.706445][T11749] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1646'. [ 166.719927][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 167.012072][T11764] netlink: 'syz.5.1650': attribute type 11 has an invalid length. [ 167.015435][T11764] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.1650'. [ 167.145107][T11768] netlink: 'syz.5.1653': attribute type 13 has an invalid length. [ 167.474385][T11776] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1656'. [ 167.762446][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 167.903075][ T6320] tipc: Subscription rejected, illegal request [ 168.800513][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 169.840131][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 170.880161][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 171.919967][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 172.960263][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 174.000161][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 175.040269][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 175.600791][ T5296] Bluetooth: hci2: command 0x0401 tx timeout [ 176.080439][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 177.119957][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 178.160031][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 179.207857][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 180.246189][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 181.280104][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 182.326536][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 182.356948][ T40] audit: type=1400 audit(2000000299.297:34523): avc: denied { read write } for pid=11800 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 182.440913][ T40] audit: type=1400 audit(2000000299.297:34524): avc: denied { open } for pid=11800 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 182.443765][ T5296] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 182.517955][ T5948] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 182.538859][ T5948] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 182.552100][ T5948] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 182.564029][ T5948] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.580289][T11805] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1665'. [ 182.679154][T11800] vxcan1 speed is unknown, defaulting to 1000 [ 182.824106][ T40] audit: type=1804 audit(2000000299.777:34525): pid=11822 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1670" name="file0" dev="tmpfs" ino=241 res=1 errno=0 [ 182.853656][ T40] audit: type=1800 audit(2000000299.777:34526): pid=11822 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1670" name="file0" dev="tmpfs" ino=241 res=0 errno=0 [ 182.933666][T11826] IPVS: sync thread started: state = MASTER, mcast_ifn = bond0, syncid = -2, id = 0 [ 182.948092][ T40] audit: type=1804 audit(2000000299.897:34527): pid=11827 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.1670" name="file0" dev="tmpfs" ino=241 res=1 errno=0 [ 183.272224][T11800] chnl_net:caif_netlink_parms(): no params data found [ 183.366037][T11839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1674'. [ 183.390520][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 183.444997][T11839] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 183.536492][T11800] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.550704][T11800] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.554386][T11800] bridge_slave_0: entered allmulticast mode [ 183.580775][T11800] bridge_slave_0: entered promiscuous mode [ 183.594675][T11800] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.605084][T11800] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.615400][T11800] bridge_slave_1: entered allmulticast mode [ 183.620002][T11800] bridge_slave_1: entered promiscuous mode [ 183.703587][T11800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.720505][T11800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.827014][T11800] team0: Port device team_slave_0 added [ 183.849227][T11800] team0: Port device team_slave_1 added [ 183.964751][T11800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.968044][T11800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.978866][T11800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.991315][T11800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.000913][T11800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.022107][T11800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.052835][T11856] TCP: TCP_TX_DELAY enabled [ 184.125533][T11800] hsr_slave_0: entered promiscuous mode [ 184.130179][T11800] hsr_slave_1: entered promiscuous mode [ 184.134279][T11800] debugfs: 'hsr0' already exists in 'hsr' [ 184.137900][T11800] Cannot create hsr debugfs directory [ 184.143728][T11863] nfs: Unknown parameter '籬Ád¼“¹‚Ӈɭ M'±bMáhžwW©5ö䇯üG*æ~äuc8oþo}1 û' [ 184.292097][T11866] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 184.310656][ T40] audit: type=1400 audit(2000000301.227:34528): avc: denied { create } for pid=11865 comm="syz.1.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 184.321891][ T40] audit: type=1400 audit(2000000301.247:34529): avc: denied { getopt } for pid=11865 comm="syz.1.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 184.388570][T11877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1684'. [ 184.420414][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 184.666369][ T5941] Bluetooth: hci4: command tx timeout [ 184.685844][ T40] audit: type=1400 audit(2000000301.637:34530): avc: denied { getopt } for pid=11888 comm="syz.1.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 184.874275][T11893] lo: Caught tx_queue_len zero misconfig [ 184.876992][T11893] netem: incorrect ge model size [ 184.879494][T11893] netem: change failed [ 184.897287][T11800] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 184.952429][T11800] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 184.966304][T11800] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 185.011661][T11800] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 185.115742][T11905] pim6reg: entered allmulticast mode [ 185.254829][T11800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.292652][T11800] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.311939][ T6320] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.337024][ T6320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.399715][T11909] netlink: 'syz.3.1691': attribute type 21 has an invalid length. [ 185.417573][ T6320] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.426637][ T6320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.440775][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 185.461550][T11909] netlink: 'syz.3.1691': attribute type 6 has an invalid length. [ 185.466563][T11909] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1691'. [ 185.469908][T11911] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1690'. [ 185.707980][ T40] audit: type=1400 audit(2000000302.657:34531): avc: denied { getopt } for pid=11923 comm="syz.1.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 185.920317][T11800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.118598][T11935] xt_l2tp: v2 doesn't support IP mode [ 186.184584][ T5941] Bluetooth: hci3: command tx timeout [ 186.396921][T11800] veth0_vlan: entered promiscuous mode [ 186.434932][T11800] veth1_vlan: entered promiscuous mode [ 186.492257][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 186.513264][T11800] veth0_macvtap: entered promiscuous mode [ 186.521695][T11800] veth1_macvtap: entered promiscuous mode [ 186.534600][T11800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.541835][T11800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.550632][ T6317] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.555866][T11953] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 186.596463][ T6317] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.610288][T11952] netlink: 212916 bytes leftover after parsing attributes in process `syz.5.1701'. [ 186.724623][ T5941] Bluetooth: hci4: command tx timeout [ 186.878107][ T6317] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.914612][ T6317] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.083296][ T40] audit: type=1400 audit(2000000304.037:34532): avc: denied { bind } for pid=11963 comm="syz.5.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 187.526607][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 187.584154][ T8823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.587003][ T8823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.660713][ T8823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.684791][ T8823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.723399][T11993] netlink: 'syz.1.1710': attribute type 3 has an invalid length. [ 187.984187][T12003] delete_channel: no stack [ 188.063800][T12011] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1715'. [ 188.148518][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1715'. [ 188.358615][T12022] netlink: 'syz.3.1720': attribute type 3 has an invalid length. [ 188.432915][T12030] batman_adv: batadv0: Adding interface: dummy0 [ 188.455966][T12030] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.488758][T12030] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 188.531217][T12024] netlink: 'syz.6.1719': attribute type 13 has an invalid length. [ 188.570458][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 188.712649][T12042] Cannot find set identified by id 0 to match [ 188.786747][T12043] Cannot find set identified by id 0 to match [ 188.801556][ T5941] Bluetooth: hci4: command tx timeout [ 189.022113][T12024] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.040968][T12024] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.336818][T12064] fuse: Bad value for 'fd' [ 189.420954][T12024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.442420][T12024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.609937][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 189.998373][ T8823] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.003005][ T8823] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.034311][ T8823] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.073017][ T8823] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.203832][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 190.203849][ T40] audit: type=1400 audit(2000000307.157:34534): avc: denied { listen } for pid=12077 comm="syz.6.1732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 190.230658][ T40] audit: type=1400 audit(2000000307.167:34535): avc: denied { accept } for pid=12077 comm="syz.6.1732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 190.622367][ T40] audit: type=1400 audit(2000000307.577:34536): avc: denied { create } for pid=12085 comm="syz.3.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 190.631549][ T40] audit: type=1400 audit(2000000307.587:34537): avc: denied { setopt } for pid=12085 comm="syz.3.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 190.670714][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 190.890698][ T5941] Bluetooth: hci4: command tx timeout [ 191.119245][T12101] tmpfs: Unknown parameter 'nr_ü°.vÓg [ 191.119245][T12101] ' [ 191.230519][T12105] netlink: 'syz.5.1742': attribute type 5 has an invalid length. [ 191.235436][T12105] netlink: 'syz.5.1742': attribute type 27 has an invalid length. [ 191.410796][T12105] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.416376][T12105] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.656764][T12120] sctp: [Deprecated]: syz.6.1746 (pid 12120) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.656764][T12120] Use struct sctp_sack_info instead [ 191.706483][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 191.971018][ T40] audit: type=1400 audit(2000000308.917:34538): avc: denied { map } for pid=12125 comm="syz.1.1747" path="socket:[39202]" dev="sockfs" ino=39202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 191.983192][T12105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.014399][T12105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.038867][T12127] overlay: Bad value for 'workdir' [ 192.042565][ T40] audit: type=1400 audit(2000000308.917:34539): avc: denied { read } for pid=12125 comm="syz.1.1747" path="socket:[39202]" dev="sockfs" ino=39202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 192.486518][T12105] gretap1: left promiscuous mode [ 192.498998][ T102] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.503049][ T102] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.508631][ T102] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.515005][ T102] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.639128][ T40] audit: type=1400 audit(2000000309.577:34540): avc: denied { write } for pid=12128 comm="syz.6.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.699676][T12130] Bluetooth: MGMT ver 1.23 [ 192.707898][ T40] audit: type=1400 audit(2000000309.657:34541): avc: denied { connect } for pid=12133 comm="syz.3.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 192.723335][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 192.741145][ T40] audit: type=1400 audit(2000000309.697:34542): avc: denied { accept } for pid=12133 comm="syz.3.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 192.880147][ T40] audit: type=1400 audit(2000000309.827:34543): avc: denied { mounton } for pid=12140 comm="syz.6.1752" path="/7/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 193.116271][T12163] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 193.296774][ T5941] Bluetooth: hci2: unexpected event for opcode 0x2011 [ 193.458763][T12184] netlink: 'syz.3.1764': attribute type 23 has an invalid length. [ 193.648255][T12190] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1768'. [ 193.723321][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1766'. [ 193.727092][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1766'. [ 193.769605][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 193.794144][T12189] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1766'. [ 193.803909][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1766'. [ 193.806783][T12189] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1766'. [ 194.111408][T12216] netlink: 'syz.1.1774': attribute type 12 has an invalid length. [ 194.285990][T12223] batman_adv: batadv0: Adding interface: gretap1 [ 194.289071][T12223] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.322605][T12223] batman_adv: batadv0: Interface activated: gretap1 [ 194.667078][T12249] overlayfs: failed to clone upperpath [ 194.700847][T12254] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.1786'. [ 194.705646][T12254] netlink: Unknown conntrack attr (0) [ 194.806517][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 194.870727][T12263] netlink: 'syz.3.1790': attribute type 21 has an invalid length. [ 194.875695][T12263] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1790'. [ 194.884902][T12263] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1790'. [ 194.896335][T12268] syz_tun: entered allmulticast mode [ 194.910021][T12267] syz_tun: left allmulticast mode [ 194.915967][T12263] netlink: 'syz.3.1790': attribute type 21 has an invalid length. [ 194.922904][T12263] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1790'. [ 194.929026][T12263] netlink: 'syz.3.1790': attribute type 21 has an invalid length. [ 194.937833][T12263] netlink: 'syz.3.1790': attribute type 21 has an invalid length. [ 194.982643][T12263] netlink: 'syz.3.1790': attribute type 21 has an invalid length. [ 194.986164][T12263] netlink: 'syz.3.1790': attribute type 21 has an invalid length. [ 195.103801][T12272] syzkaller0: entered promiscuous mode [ 195.106769][T12272] syzkaller0: entered allmulticast mode [ 195.114114][ T8823] syzkaller0: tun_net_xmit 48 [ 195.193121][T12289] ./bus: Can't lookup blockdev [ 195.370173][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 195.370189][ T40] audit: type=1400 audit(2000000312.327:34548): avc: denied { accept } for pid=12299 comm="syz.5.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 195.376160][T12302] overlayfs: failed to clone lowerpath [ 195.842590][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 195.906733][ T40] audit: type=1326 audit(2000000312.857:34549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12311 comm="syz.1.1804" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f1b39af79 code=0x0 [ 196.880003][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 197.294836][ T5941] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 197.298929][ T5941] Bluetooth: hci2: Injecting HCI hardware error event [ 197.318748][ T5948] Bluetooth: hci2: hardware error 0x00 [ 197.929721][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 198.963554][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 199.125878][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.129464][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.375379][ T5948] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 200.000050][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 201.049929][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 201.108131][T12300] ip6tnl0: Caught tx_queue_len zero misconfig [ 201.449748][T12330] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 201.498029][ T40] audit: type=1400 audit(2000000318.447:34550): avc: denied { setattr } for pid=12334 comm="syz.6.1811" name="XDP" dev="sockfs" ino=36665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 201.530228][T12335] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 201.596543][ T40] audit: type=1400 audit(2000000318.547:34551): avc: denied { ioctl } for pid=12338 comm="syz.3.1812" path="socket:[39362]" dev="sockfs" ino=39362 ioctlcmd=0x942d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 201.615171][ T40] audit: type=1400 audit(2000000318.547:34552): avc: denied { read } for pid=12338 comm="syz.3.1812" path="socket:[39362]" dev="sockfs" ino=39362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 201.820577][ T40] audit: type=1400 audit(2000000318.767:34553): avc: denied { ioctl } for pid=12347 comm="syz.1.1815" path="socket:[36688]" dev="sockfs" ino=36688 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 201.854756][T12351] bridge_slave_0 (unregistering): left allmulticast mode [ 201.859415][T12351] bridge_slave_0 (unregistering): left promiscuous mode [ 201.863881][T12351] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.082359][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 202.119908][ T40] audit: type=1400 audit(2000000319.067:34554): avc: denied { setattr } for pid=12357 comm="syz.5.1818" name="SCTP" dev="sockfs" ino=36701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 202.291088][T12365] __nla_validate_parse: 130 callbacks suppressed [ 202.291107][T12365] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1821'. [ 202.324961][T12367] ./bus: Can't lookup blockdev [ 202.329088][ T5948] Bluetooth: unknown link type 33 [ 202.329526][T12364] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1821'. [ 202.341610][ T5948] Bluetooth: hci0: connection err: -111 [ 202.868497][T12378] xt_hashlimit: size too large, truncated to 1048576 [ 203.005636][T12387] overlayfs: failed to resolve './cgroup': -2 [ 203.119958][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 203.248832][T12394] bond2 (unregistering): Released all slaves [ 203.497776][T12404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1834'. [ 203.568296][T12410] validate_nla: 60 callbacks suppressed [ 203.568314][T12410] netlink: 'syz.3.1837': attribute type 1 has an invalid length. [ 203.621229][T12410] 8021q: adding VLAN 0 to HW filter on device bond5 [ 203.654780][ T40] audit: type=1400 audit(2000000320.597:34555): avc: denied { create } for pid=12407 comm="syz.5.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 203.659128][T12410] vlan2: entered allmulticast mode [ 203.682914][T12410] macsec0: entered allmulticast mode [ 203.686257][T12410] bond5: (slave vlan2): Error -34 calling dev_set_mtu [ 203.707427][T12411] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1836'. [ 203.712720][T12411] openvswitch: netlink: Flow actions attr not present in new flow. [ 203.718782][ T40] audit: type=1400 audit(2000000320.667:34556): avc: denied { bind } for pid=12416 comm="syz.1.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 204.159920][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 204.612712][T12441] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 204.782450][T12449] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 204.977069][T12455] openvswitch: netlink: Flow actions attr not present in new flow. [ 205.120530][T12464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1850'. [ 205.179709][T12464] 8021q: adding VLAN 0 to HW filter on device bond6 [ 205.207619][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 205.290055][T12467] bond6: entered allmulticast mode [ 205.709609][T12496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1856'. [ 205.788325][T12495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1856'. [ 205.850367][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1856'. [ 205.855166][T12496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1856'. [ 205.866615][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1856'. [ 206.240134][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 206.358387][T12523] bond6: entered promiscuous mode [ 206.374106][T12523] 8021q: adding VLAN 0 to HW filter on device bond6 [ 206.405945][T12523] bond6: (slave sit1): refused to change device type [ 207.286531][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 207.719226][ T40] audit: type=1400 audit(2000000324.657:34557): avc: denied { getopt } for pid=12575 comm="syz.3.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 207.789877][T12565] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 207.810999][T12582] __nla_validate_parse: 5 callbacks suppressed [ 207.811015][T12582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1885'. [ 207.814946][T12573] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1881'. [ 208.026707][ T40] audit: type=1400 audit(2000000324.967:34558): avc: denied { read } for pid=12586 comm="syz.6.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 208.309515][T12599] __vm_enough_memory: pid: 12599, comm: syz.5.1890, bytes: 4503599627366400 not enough memory for the allocation [ 208.335813][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 208.857893][T12618] fuse: Bad value for 'fd' [ 209.086704][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1897'. [ 209.375417][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 209.402968][T12638] overlayfs: missing 'workdir' [ 209.698845][T12647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'. [ 209.831801][T12650] netlink: 'syz.3.1908': attribute type 6 has an invalid length. [ 209.835954][T12650] netlink: 352 bytes leftover after parsing attributes in process `syz.3.1908'. [ 210.435770][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 210.585256][T12675] /dev/nullb0: Can't lookup blockdev [ 210.602184][T12675] /dev/nullb0: Can't lookup blockdev [ 210.769333][T12683] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1918'. [ 210.772798][T12683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1918'. [ 210.794345][T12673] bond7: option downdelay: invalid value (18446744073709551615) [ 210.818745][T12673] bond7: option downdelay: allowed values 0 - 2147483647 [ 210.841919][T12673] bond7 (unregistering): Released all slaves [ 211.360300][T12709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1926'. [ 211.454002][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 211.648793][ T40] audit: type=1804 audit(2000000328.587:34559): pid=12718 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1930" name="file0" dev="tmpfs" ino=2579 res=1 errno=0 [ 211.676053][T12718] ref_ctr increment failed for inode: 0xa13 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888026a21880 [ 211.690808][T12730] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1935'. [ 211.704809][T12732] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1935'. [ 211.806912][T12732] team_slave_0: Caught tx_queue_len zero misconfig [ 211.820083][T12716] uprobe: syz.1.1930:12716 failed to unregister, leaking uprobe [ 211.861815][T12739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=12739 comm=syz.5.1935 [ 211.981579][T12748] ip6gre1: entered promiscuous mode [ 211.983884][T12748] ip6gre1: entered allmulticast mode [ 212.051026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 212.107013][T12757] overlay: Unknown parameter '/owerdir' [ 212.108281][T12758] overlay: Unknown parameter '/owerdir' [ 212.190863][T12761] sctp: [Deprecated]: syz.1.1942 (pid 12761) Use of int in max_burst socket option deprecated. [ 212.190863][T12761] Use struct sctp_assoc_value instead [ 212.211029][ T40] audit: type=1400 audit(2000000329.127:34560): avc: denied { mount } for pid=12760 comm="syz.1.1942" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 212.402221][T12761] vlan2: entered promiscuous mode [ 212.411138][T12761] bridge0: entered promiscuous mode [ 212.482236][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 212.491104][T12753] Invalid option length (1048180) for dns_resolver key [ 212.823649][T12781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1948'. [ 213.125480][T12795] netlink: 'syz.6.1951': attribute type 30 has an invalid length. [ 213.219260][T12802] netlink: 'syz.6.1951': attribute type 30 has an invalid length. [ 213.276808][T12807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=12807 comm=syz.1.1956 [ 213.303898][T12807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=12807 comm=syz.1.1956 [ 213.326265][T12807] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1956'. [ 213.376377][T12807] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 213.382723][T12807] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 213.530350][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 213.550383][T12813] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1958'. [ 213.585206][ T40] audit: type=1326 audit(2000000330.537:34561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12808 comm="syz.5.1957" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc84359af79 code=0x0 [ 213.983248][T12820] overlayfs: failed to clone upperpath [ 214.082040][T12820] IPVS: sed: FWM 3 0x00000003 - no destination available [ 214.097885][ T6035] IPVS: starting estimator thread 0... [ 214.229971][T12825] IPVS: using max 29 ests per chain, 69600 per kthread [ 214.559944][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 214.762191][T12851] 9pnet_virtio: no channels available for device syz [ 215.610305][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 216.465079][T12920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1986'. [ 216.660111][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 217.048936][T12935] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1992'. [ 217.220002][T12937] IPVS: Scheduler module ip_vs_sip not found [ 217.382994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 217.639083][T12947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29037 sclass=netlink_route_socket pid=12947 comm=syz.5.1996 [ 217.690150][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 218.014384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 218.102383][T12944] team_slave_0: entered promiscuous mode [ 218.205191][T12944] team_slave_0: entered allmulticast mode [ 218.302517][T12964] IPVS: set_ctl: invalid protocol: 2 100.1.1.0:20000 [ 218.739982][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 218.808141][T12985] xt_ecn: cannot match TCP bits for non-tcp packets [ 219.035450][T12992] sctp: [Deprecated]: syz.3.2008 (pid 12992) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.035450][T12992] Use struct sctp_sack_info instead [ 219.299522][T13002] netlink: 'syz.5.2012': attribute type 10 has an invalid length. [ 219.303001][T13002] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2012'. [ 219.306830][T13002] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 219.351250][T13002] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 219.355999][T13002] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 219.674793][T13014] vxcan1 speed is unknown, defaulting to 1000 [ 219.779999][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 220.610302][T13034] fuse: Bad value for 'fd' [ 220.826226][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 220.994755][ T40] audit: type=1326 audit(2000000337.917:34562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13042 comm="syz.1.2022" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f1b39af79 code=0x0 [ 221.031248][T13050] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2024'. [ 221.032634][ T40] audit: type=1400 audit(2000000337.977:34563): avc: denied { watch watch_reads } for pid=13045 comm="syz.5.2024" path="/140/file0" dev="tmpfs" ino=789 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 221.043742][T13050] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2024'. [ 221.044268][T13050] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2024'. [ 221.361550][T13057] overlayfs: failed to clone upperpath [ 221.784868][T13065] ip6gretap1: entered promiscuous mode [ 221.816481][T13065] ip6gretap1: entered allmulticast mode [ 221.873945][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 222.890210][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 222.964425][T13084] vxcan1 speed is unknown, defaulting to 1000 [ 223.438374][T13107] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2041'. [ 223.452853][T13107] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2041'. [ 223.508892][T13107] geneve2: entered promiscuous mode [ 223.511945][T13107] geneve2: entered allmulticast mode [ 223.628295][T13112] fuse: Unknown parameter '× [ 223.628295][T13112] L}ý€' [ 223.651258][ T6325] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.666084][ T6325] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.678306][ T6325] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.698951][ T6325] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.936599][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 224.130601][T13121] netlink: 'syz.3.2044': attribute type 64 has an invalid length. [ 224.154677][T13121] netlink: 'syz.3.2044': attribute type 4 has an invalid length. [ 224.163220][T13121] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2044'. [ 224.225755][T13118] overlayfs: failed to clone upperpath [ 224.294323][T13115] vxcan1 speed is unknown, defaulting to 1000 [ 224.545564][T13116] vxcan1 speed is unknown, defaulting to 1000 [ 224.733694][T13137] netlink: 344 bytes leftover after parsing attributes in process `syz.3.2050'. [ 224.876038][ T40] audit: type=1400 audit(2000000341.827:34564): avc: denied { read } for pid=13141 comm="syz.1.2051" path="socket:[40181]" dev="sockfs" ino=40181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 224.970157][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 225.342515][T13155] netlink: 'syz.1.2054': attribute type 21 has an invalid length. [ 225.388389][T13158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.010042][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 226.255641][T13169] hfs: unable to load iocharset "io#harset" [ 226.546588][T13188] netlink: 'syz.3.2065': attribute type 7 has an invalid length. [ 226.654092][T13193] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 226.831495][T13199] netlink: 'syz.3.2069': attribute type 1 has an invalid length. [ 226.889395][T13205] bond7: entered promiscuous mode [ 226.897098][T13205] bond7: entered allmulticast mode [ 226.902379][T13205] 8021q: adding VLAN 0 to HW filter on device bond7 [ 226.923253][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2070'. [ 226.953380][T13199] 8021q: adding VLAN 0 to HW filter on device bond8 [ 226.963259][T13199] bond8: entered promiscuous mode [ 226.967340][T13199] bond8: entered allmulticast mode [ 226.970690][T13199] bond7: (slave bond8): Enslaving as a backup interface with a down link [ 227.063023][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 227.562205][T13232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13232 comm=syz.5.2078 [ 227.754825][T13224] xt_hashlimit: size too large, truncated to 1048576 [ 228.086119][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 228.667304][T13262] overlayfs: failed to clone upperpath [ 228.953550][ T40] audit: type=1400 audit(2000000345.907:34565): avc: denied { connect } for pid=13283 comm="syz.6.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 229.119966][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 229.180014][T13295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13295 comm=syz.6.2092 [ 229.224798][T13296] netlink: 'syz.5.2091': attribute type 9 has an invalid length. [ 229.286228][T13297] netlink: 'syz.5.2091': attribute type 9 has an invalid length. [ 229.412746][ T40] audit: type=1326 audit(2000000346.357:34566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13302 comm="syz.6.2094" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f080a59af79 code=0x0 [ 229.465989][ T5941] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 229.501281][ T5941] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 229.533537][ T5941] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 229.546116][ T5941] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 229.561095][ T5941] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 229.617721][T13311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2096'. [ 230.031366][T13304] vxcan1 speed is unknown, defaulting to 1000 [ 230.169266][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 230.240887][T13308] 9pnet_fd: p9_fd_create_tcp (13308): problem connecting socket to 127.0.0.1 [ 230.298808][T13325] futex_wake_op: syz.1.2099 tries to shift op by -1; fix this program [ 230.368999][ T40] audit: type=1804 audit(2000000347.317:34567): pid=13325 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2099" name="file0" dev="tmpfs" ino=2850 res=1 errno=0 [ 230.371955][T13325] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: 1 [ 230.404661][T13325] ref_ctr increment failed for inode: 0xb22 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802bbb1880 [ 230.445149][T13324] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: -1 [ 230.471110][T13324] ref_ctr decrement failed for inode: 0xb22 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802bbb1880 [ 230.500019][T13324] uprobe: syz.1.2099:13324 failed to unregister, leaking uprobe [ 230.774474][T13336] netlink: 'syz.6.2104': attribute type 23 has an invalid length. [ 231.073716][T13304] chnl_net:caif_netlink_parms(): no params data found [ 231.214210][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 231.247412][T13304] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.249990][T13304] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.268845][T13304] bridge_slave_0: entered allmulticast mode [ 231.272910][T13304] bridge_slave_0: entered promiscuous mode [ 231.277868][T13304] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.291267][T13304] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.295049][T13304] bridge_slave_1: entered allmulticast mode [ 231.300814][T13304] bridge_slave_1: entered promiscuous mode [ 231.378851][T13304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.395759][T13304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.476858][ T40] audit: type=1400 audit(2000000348.427:34568): avc: denied { map } for pid=13353 comm="syz.1.2107" path="socket:[41384]" dev="sockfs" ino=41384 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 231.481821][T13304] team0: Port device team_slave_0 added [ 231.516623][T13304] team0: Port device team_slave_1 added [ 231.639789][T13304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.643127][T13304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.671096][T13304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.684080][ T5948] Bluetooth: hci5: command tx timeout [ 231.694768][T13304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.697705][T13304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.712917][T13304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.798176][ T40] audit: type=1400 audit(2000000348.747:34569): avc: denied { setopt } for pid=13369 comm="syz.1.2111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 231.823005][T13304] hsr_slave_0: entered promiscuous mode [ 231.826184][T13304] hsr_slave_1: entered promiscuous mode [ 231.849645][T13304] debugfs: 'hsr0' already exists in 'hsr' [ 231.860896][T13304] Cannot create hsr debugfs directory [ 231.919031][T13374] netlink: 'syz.1.2112': attribute type 1 has an invalid length. [ 232.249972][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 232.457254][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2117'. [ 232.476013][T13387] netlink: 'syz.1.2117': attribute type 30 has an invalid length. [ 232.503099][ T8823] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.542007][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2117'. [ 232.546297][T13391] netlink: 'syz.1.2117': attribute type 30 has an invalid length. [ 232.590127][T13392] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2118'. [ 232.597091][ T8823] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.714992][ T8823] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.719190][ T8823] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.779635][T13395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2119'. [ 232.837016][T13395] bond7: Invalid ad_actor_system MAC address. [ 232.840651][T13395] bond7: option ad_actor_system: invalid value (255) [ 232.866725][T13395] bond7 (unregistering): Released all slaves [ 232.956434][T13404] netlink: 'syz.6.2121': attribute type 11 has an invalid length. [ 232.971477][T13404] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2121'. [ 232.980981][T13404] cgroup: Unknown subsys name 'uid>00000000000000000000' [ 233.290636][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 233.292939][ T40] audit: type=1400 audit(2000000350.217:34570): avc: denied { wake_alarm } for pid=13413 comm="syz.5.2125" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 233.576241][T13304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 233.599385][T13304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 233.612778][T13422] team_slave_1: Caught tx_queue_len zero misconfig [ 233.687255][T13304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 233.755720][T13304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 233.790829][ T5948] Bluetooth: hci5: command tx timeout [ 234.169251][T13304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.204102][T13443] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2134'. [ 234.204415][T13445] netlink: 'syz.5.2135': attribute type 29 has an invalid length. [ 234.255837][T13304] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.271691][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.275046][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.305829][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.324868][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.328979][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 234.397860][T13304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.418711][T13304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.547419][T13463] xt_hashlimit: size too large, truncated to 1048576 [ 234.602094][T13465] bridge_slave_1: left allmulticast mode [ 234.604904][T13465] bridge_slave_1: left promiscuous mode [ 234.607617][T13465] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.643415][T13465] bridge_slave_0: left allmulticast mode [ 234.645797][T13465] bridge_slave_0: left promiscuous mode [ 234.647931][T13465] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.873148][T13304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.952662][T13304] veth0_vlan: entered promiscuous mode [ 234.969190][T13304] veth1_vlan: entered promiscuous mode [ 235.000800][T13304] veth0_macvtap: entered promiscuous mode [ 235.032350][T13304] veth1_macvtap: entered promiscuous mode [ 235.064107][T13304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.088769][T13304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.123324][ T6312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.127748][ T6312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.131862][ T6312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.135463][ T6312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.366372][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 235.372591][ T6317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.372617][ T6317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.502378][ T6311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.507259][ T6311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.711745][T13482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13482 comm=syz.5.2146 [ 235.796252][ T5948] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 235.804674][ T5948] Bluetooth: Wrong link type (-22) [ 235.831442][ T5948] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 235.834877][ T5948] Bluetooth: Wrong link type (-22) [ 235.838737][ T5948] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 235.851587][ T5948] Bluetooth: Wrong link type (-22) [ 235.854229][ T5948] Bluetooth: hci5: command tx timeout [ 236.424901][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 236.433317][T13506] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2152'. [ 236.450529][T13507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.867474][T13518] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2156'. [ 237.449977][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 237.692436][T13537] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.699927][T13537] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 237.705791][T13537] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 237.827513][T13544] vxcan1 speed is unknown, defaulting to 1000 [ 237.922585][ T5948] Bluetooth: hci5: command tx timeout [ 237.927085][T13537] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.933902][T13537] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 237.940875][T13537] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 238.187132][T13546] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2166'. [ 238.264147][T13546] bond0: entered promiscuous mode [ 238.266307][T13546] bond_slave_0: entered promiscuous mode [ 238.269745][T13546] bond_slave_1: entered promiscuous mode [ 238.276006][T13546] gretap0: entered promiscuous mode [ 238.302576][T13546] hsr1: entered promiscuous mode [ 238.336762][T13537] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.365593][T13537] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 238.371380][T13537] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 238.478814][T13549] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 238.482229][T13549] UDF-fs: Scanning with blocksize 2048 failed [ 238.490100][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 238.552639][T13549] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 238.555964][T13549] UDF-fs: Scanning with blocksize 4096 failed [ 238.606812][T13537] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.613510][T13537] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 238.650086][T13537] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 238.874579][ T40] audit: type=1400 audit(2000000611.816:34571): avc: denied { bind } for pid=13561 comm="syz.3.2171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 238.902867][ T40] audit: type=1400 audit(2000000611.816:34572): avc: denied { read append } for pid=13561 comm="syz.3.2171" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 239.038484][T13566] x_tables: duplicate underflow at hook 3 [ 239.118168][ T6317] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.123995][ T6317] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 239.128798][ T6317] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 239.135080][ T6317] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.150078][ T6317] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 239.156935][ T6317] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 239.184569][ T6317] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.194214][ T6317] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 239.197989][ T6317] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 239.209982][ T6317] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.228645][ T6317] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 239.233198][ T6317] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 239.266169][T13562] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 239.289922][T13562] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 239.530042][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 239.631578][T13562] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 239.653002][T13561] delete_channel: no stack [ 239.797263][T13562] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 239.825539][T13562] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 239.957044][T13562] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 240.052653][T13562] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 240.092859][T13562] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 240.189172][T13562] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 240.329274][ T61] IPVS: starting estimator thread 0... [ 240.423943][T13604] IPVS: using max 30 ests per chain, 72000 per kthread [ 240.560315][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 240.891078][T13629] block nbd3: NBD_DISCONNECT [ 240.898532][T13628] block nbd3: Disconnected due to user request. [ 240.916496][T13628] block nbd3: shutting down sockets [ 240.983796][T13631] netlink: 'syz.5.2190': attribute type 30 has an invalid length. [ 241.240474][ T40] audit: type=1400 audit(2000000614.166:34573): avc: denied { ioctl } for pid=13643 comm="syz.3.2194" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 241.284995][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout [ 241.514234][T13660] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2198'. [ 241.610155][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 241.751533][T13671] tipc: Enabling of bearer rejected, failed to enable media [ 241.881392][ T5948] Bluetooth: hci4: command 0x0c1a tx timeout [ 242.090042][ T5948] Bluetooth: hci5: command 0x0c1a tx timeout [ 242.178663][ T40] audit: type=1400 audit(2000000615.126:34574): avc: denied { setopt } for pid=13686 comm="syz.6.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 242.651799][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 242.790796][T13705] CIFS mount error: No usable UNC path provided in device string! [ 242.790796][T13705] [ 242.795398][T13705] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 243.003437][T13715] SET target dimension over the limit! [ 243.116895][ T6988] libceph: connect (1)[c::]:6789 error -101 [ 243.198147][ T6988] libceph: mon0 (1)[c::]:6789 connect error [ 243.324690][ T29] libceph: connect (1)[c::]:6789 error -101 [ 243.335556][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 243.372090][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout [ 243.490544][ T5989] libceph: connect (1)[c::]:6789 error -101 [ 243.494494][ T5989] libceph: mon0 (1)[c::]:6789 connect error [ 243.509777][T13742] Can't find a SQUASHFS superblock on nullb0 [ 243.592652][ T29] libceph: connect (1)[c::]:6789 error -101 [ 243.605310][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 243.691427][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 243.833596][T13714] ceph: No mds server is up or the cluster is laggy [ 243.847572][T13724] ceph: No mds server is up or the cluster is laggy [ 243.878451][T13764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2224'. [ 243.912636][T13765] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2224'. [ 243.930325][ T5948] Bluetooth: hci4: command 0x0c1a tx timeout [ 244.116904][T13770] vxcan1 speed is unknown, defaulting to 1000 [ 244.169680][ T5948] Bluetooth: hci5: command 0x0c1a tx timeout [ 244.258214][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2228'. [ 244.271653][T13778] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2228'. [ 244.294335][T13782] netlink: 'syz.5.2226': attribute type 4 has an invalid length. [ 244.297216][T13782] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2226'. [ 244.475287][T13791] overlayfs: failed to clone upperpath [ 244.562169][T13792] overlayfs: failed to clone upperpath [ 244.660865][ T40] audit: type=1401 audit(2000000617.596:34575): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 244.707358][ T40] audit: type=1400 audit(2000000617.646:34576): avc: denied { create } for pid=13788 comm="syz.6.2230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 244.751413][ T40] audit: type=1400 audit(2000000617.646:34577): avc: denied { write } for pid=13788 comm="syz.6.2230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 244.758043][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 244.946542][T13804] dvmrp6: entered allmulticast mode [ 245.451016][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout [ 245.774013][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 246.019134][ T5948] Bluetooth: hci4: command 0x0c1a tx timeout [ 246.272164][ T5948] Bluetooth: hci5: command 0x0c1a tx timeout [ 246.274762][T13858] pim6reg: entered allmulticast mode [ 246.347424][T13845] ip6gretap0: entered promiscuous mode [ 246.418657][T13869] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2253'. [ 246.497977][T13874] loop4: detected capacity change from 0 to 7 [ 246.547603][T13015] buffer_io_error: 10 callbacks suppressed [ 246.547621][T13015] Buffer I/O error on dev loop4, logical block 0, async page read [ 246.559726][T13015] Buffer I/O error on dev loop4, logical block 0, async page read [ 246.587408][T13015] Buffer I/O error on dev loop4, logical block 0, async page read [ 246.598370][T13015] Buffer I/O error on dev loop4, logical block 0, async page read [ 246.613510][T13015] Buffer I/O error on dev loop4, logical block 0, async page read [ 246.623869][T13015] Buffer I/O error on dev loop4, logical block 0, async page read [ 246.645827][ C3] ================================================================== [ 246.645842][ C3] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 246.645973][ C3] Read of size 1 at addr ffff88803408b018 by task udevd/13015 [ 246.646433][ C3] [ 246.646446][ C3] CPU: 3 UID: 0 PID: 13015 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 246.646471][ C3] Tainted: [L]=SOFTLOCKUP [ 246.646477][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.646736][ C3] Call Trace: [ 246.646906][ C3] [ 246.646916][ C3] dump_stack_lvl+0x100/0x190 [ 246.646940][ C3] print_report+0x156/0x4c9 [ 246.646961][ C3] ? __virt_addr_valid+0x81/0x620 [ 246.646976][ C3] ? __phys_addr+0xe8/0x180 [ 246.646992][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 246.647007][ C3] kasan_report+0xdf/0x1a0 [ 246.647027][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 246.647042][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 246.647056][ C3] __kasan_check_byte+0x36/0x50 [ 246.647073][ C3] lock_acquire+0xf5/0x330 [ 246.647090][ C3] ? do_raw_spin_unlock+0x53/0x1e0 [ 246.647106][ C3] ? .slowpath+0x9/0x18 [ 246.647123][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 246.647139][ C3] ? p9_req_put+0xaf/0x250 [ 246.647159][ C3] p9_req_put+0xaf/0x250 [ 246.647178][ C3] req_done+0x1dc/0x2e0 [ 246.647195][ C3] ? __pfx_req_done+0x10/0x10 [ 246.647361][ C3] ? debug_object_activate+0x331/0x490 [ 246.647393][ C3] ? debug_object_activate+0x331/0x490 [ 246.647411][ C3] ? __pfx_req_done+0x10/0x10 [ 246.647428][ C3] vring_interrupt+0x33b/0x430 [ 246.647445][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 246.647463][ C3] __handle_irq_event_percpu+0x232/0x800 [ 246.647483][ C3] handle_irq_event+0xab/0x1e0 [ 246.647499][ C3] handle_edge_irq+0x375/0x970 [ 246.647517][ C3] __common_interrupt+0xd8/0x2f0 [ 246.647572][ C3] common_interrupt+0x60/0xe0 [ 246.647594][ C3] asm_common_interrupt+0x26/0x40 [ 246.647610][ C3] RIP: 0010:handle_softirqs+0x1ad/0x910 [ 246.647705][ C3] Code: 20 44 88 74 24 1e 45 89 ee 48 c7 c7 e0 6f 8d 8b e8 58 62 af 09 31 d2 65 66 89 15 36 e5 1c 12 e8 a9 5c 47 00 fb bb ff ff ff ff <49> c7 c4 c0 c0 20 8e 41 0f bc de 83 c3 01 0f 85 a4 00 00 00 e9 ab [ 246.647722][ C3] RSP: 0018:ffffc900006f8f30 EFLAGS: 00000206 [ 246.647737][ C3] RAX: 000000000000d444 RBX: 00000000ffffffff RCX: 0000000000000004 [ 246.648085][ C3] RDX: 0000000000000000 RSI: ffffffff8dc46051 RDI: ffffffff8bfa38a0 [ 246.648097][ C3] RBP: 00000000ffffea8f R08: 0000000000000001 R09: 0000000000000000 [ 246.648107][ C3] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000000a [ 246.648117][ C3] R13: 0000000000000200 R14: 0000000000000200 R15: 1ffff920000df1ed [ 246.648215][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 246.648242][ C3] __irq_exit_rcu+0xef/0x150 [ 246.648337][ C3] irq_exit_rcu+0x9/0x30 [ 246.648573][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 246.648630][ C3] [ 246.648636][ C3] [ 246.648642][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 246.648659][ C3] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 246.648721][ C3] Code: 00 e8 91 34 29 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 ef 46 21 00 48 85 ed 0f 85 d7 01 00 00 e8 01 4c 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 246.648868][ C3] RSP: 0018:ffffc900079e6cc0 EFLAGS: 00000293 [ 246.648921][ C3] RAX: ffffffff8f2f9eb8 RBX: ffffffff8f2f9e60 RCX: ffffffff81e5b331 [ 246.648933][ C3] RDX: ffff888028a04980 RSI: ffffffff81e5b33f RDI: ffff888028a04980 [ 246.648944][ C3] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 246.648954][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000014ac [ 246.649236][ C3] R13: ffffffff8f2f9eb8 R14: ffffc900079e6d40 R15: dffffc0000000000 [ 246.649252][ C3] ? console_flush_one_record+0xab1/0xe50 [ 246.649313][ C3] ? console_flush_one_record+0xabf/0xe50 [ 246.649339][ C3] ? __pfx_console_flush_one_record+0x10/0x10 [ 246.649437][ C3] ? is_printk_cpu_sync_owner+0x32/0x40 [ 246.649464][ C3] console_unlock+0x103/0x260 [ 246.649484][ C3] ? __pfx_console_unlock+0x10/0x10 [ 246.649738][ C3] ? _printk+0xcf/0x110 [ 246.649756][ C3] vprintk_emit+0x407/0x6b0 [ 246.649803][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 246.651428][ C3] ? find_held_lock+0x2b/0x80 [ 246.651591][ C3] _printk+0xcf/0x110 [ 246.651608][ C3] ? __pfx__printk+0x10/0x10 [ 246.651623][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 246.651643][ C3] ? __pfx____ratelimit+0x10/0x10 [ 246.651662][ C3] buffer_io_error.cold+0x58/0x64 [ 246.651686][ C3] end_buffer_async_read+0x2ba/0x330 [ 246.651711][ C3] ? find_held_lock+0x2b/0x80 [ 246.651733][ C3] end_buffer_async_read_io+0x13b/0x4d0 [ 246.651759][ C3] ? __pfx_end_buffer_async_read_io+0x10/0x10 [ 246.651781][ C3] end_bio_bh_io_sync+0xe8/0x140 [ 246.651808][ C3] ? __pfx_end_bio_bh_io_sync+0x10/0x10 [ 246.651829][ C3] bio_endio+0x755/0x8b0 [ 246.651850][ C3] blk_mq_submit_bio+0x992/0x2b60 [ 246.651871][ C3] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 246.651886][ C3] ? __lock_acquire+0x4a5/0x2630 [ 246.651905][ C3] ? stack_trace_save+0x8e/0xc0 [ 246.651931][ C3] __submit_bio+0x3f0/0x6c0 [ 246.652108][ C3] ? bio_associate_blkg_from_css+0x4d5/0x13f0 [ 246.652136][ C3] ? __pfx___submit_bio+0x10/0x10 [ 246.652153][ C3] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 246.652167][ C3] ? bio_associate_blkg+0x137/0x2a0 [ 246.652181][ C3] ? bio_associate_blkg+0x137/0x2a0 [ 246.652197][ C3] ? submit_bio_noacct_nocheck+0x50f/0xbb0 [ 246.652213][ C3] submit_bio_noacct_nocheck+0x50f/0xbb0 [ 246.652227][ C3] ? bio_init+0x404/0x610 [ 246.652242][ C3] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 246.652258][ C3] ? __pfx___might_resched+0x10/0x10 [ 246.652277][ C3] submit_bio_noacct+0xb5c/0x1e80 [ 246.652294][ C3] block_read_full_folio+0x4c8/0x8e0 [ 246.652310][ C3] ? __pfx_blkdev_get_block+0x10/0x10 [ 246.652326][ C3] ? __pfx_blkdev_read_folio+0x10/0x10 [ 246.652340][ C3] filemap_read_folio+0xfc/0x3b0 [ 246.652356][ C3] ? __pfx_filemap_read_folio+0x10/0x10 [ 246.652374][ C3] do_read_cache_folio+0x2d7/0x6b0 [ 246.652391][ C3] ? __pfx_blkdev_read_folio+0x10/0x10 [ 246.652406][ C3] read_part_sector+0xd1/0x370 [ 246.652426][ C3] sgi_partition+0xa1/0x890 [ 246.652440][ C3] ? __pfx_blkdev_read_folio+0x10/0x10 [ 246.652455][ C3] ? __pfx_sgi_partition+0x10/0x10 [ 246.652469][ C3] ? read_part_sector+0x25f/0x370 [ 246.652718][ C3] ? __pfx_adfspart_check_ADFS+0x10/0x10 [ 246.652745][ C3] ? adfspart_check_ADFS+0x444/0x610 [ 246.652765][ C3] ? __pfx_adfspart_check_ADFS+0x10/0x10 [ 246.652793][ C3] ? __pfx_sgi_partition+0x10/0x10 [ 246.652809][ C3] bdev_disk_changed+0x76f/0xbe0 [ 246.652832][ C3] ? find_inode_fast+0x1fa/0x910 [ 246.652846][ C3] ? __pfx_bdev_disk_changed+0x10/0x10 [ 246.652868][ C3] blkdev_get_whole+0x187/0x290 [ 246.652890][ C3] bdev_open+0x2c7/0xe40 [ 246.652906][ C3] blkdev_open+0x34e/0x4f0 [ 246.652923][ C3] do_dentry_open+0x73e/0x1570 [ 246.652939][ C3] ? __pfx_blkdev_open+0x10/0x10 [ 246.652957][ C3] vfs_open+0x82/0x3f0 [ 246.652976][ C3] path_openat+0x21dc/0x3120 [ 246.652997][ C3] ? __pfx_path_openat+0x10/0x10 [ 246.653017][ C3] do_filp_open+0x1f7/0x420 [ 246.653035][ C3] ? __pfx_do_filp_open+0x10/0x10 [ 246.653057][ C3] ? _raw_spin_unlock+0x28/0x50 [ 246.653070][ C3] ? alloc_fd+0x476/0x790 [ 246.653237][ C3] do_sys_openat2+0x12e/0x220 [ 246.653260][ C3] ? __pfx_do_sys_openat2+0x10/0x10 [ 246.653281][ C3] ? __sys_recvmsg+0x18c/0x220 [ 246.653301][ C3] ? __pfx___sys_recvmsg+0x10/0x10 [ 246.653322][ C3] __x64_sys_openat+0x12d/0x210 [ 246.653343][ C3] ? __pfx___x64_sys_openat+0x10/0x10 [ 246.653368][ C3] do_syscall_64+0xc9/0xf80 [ 246.653384][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.653399][ C3] RIP: 0033:0x7f1a0a4a7407 [ 246.653414][ C3] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 246.653428][ C3] RSP: 002b:00007ffc265b3c20 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 246.653444][ C3] RAX: ffffffffffffffda RBX: 00007f1a0ab3d880 RCX: 00007f1a0a4a7407 [ 246.653455][ C3] RDX: 00000000000a0800 RSI: 000055b6febd25c0 RDI: ffffffffffffff9c [ 246.653465][ C3] RBP: 000055b6febcf2c0 R08: 0000000000000000 R09: 0000000000000000 [ 246.653473][ C3] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b6fee1a4e0 [ 246.653482][ C3] R13: 000055b6fee0a8d0 R14: 0000000000000000 R15: 000055b6fee1a4e0 [ 246.653497][ C3] [ 246.653503][ C3] [ 246.653508][ C3] Allocated by task 13877: [ 246.653515][ C3] kasan_save_stack+0x30/0x50 [ 246.653532][ C3] kasan_save_track+0x14/0x30 [ 246.653547][ C3] __kasan_kmalloc+0xaa/0xb0 [ 246.653562][ C3] p9_client_create+0xaf/0xd40 [ 246.653578][ C3] v9fs_session_init+0x40/0xce0 [ 246.653592][ C3] v9fs_get_tree+0xb8/0xb50 [ 246.653608][ C3] vfs_get_tree+0x92/0x320 [ 246.653619][ C3] path_mount+0x7d0/0x23c0 [ 246.653637][ C3] __x64_sys_mount+0x293/0x310 [ 246.653656][ C3] do_syscall_64+0xc9/0xf80 [ 246.653671][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.653685][ C3] [ 246.653689][ C3] Freed by task 13877: [ 246.653696][ C3] kasan_save_stack+0x30/0x50 [ 246.653878][ C3] kasan_save_track+0x14/0x30 [ 246.653895][ C3] kasan_save_free_info+0x3b/0x70 [ 246.653906][ C3] __kasan_slab_free+0x5f/0x80 [ 246.653920][ C3] kfree+0x1c7/0x690 [ 246.653934][ C3] p9_client_create+0x72d/0xd40 [ 246.653950][ C3] v9fs_session_init+0x40/0xce0 [ 246.653964][ C3] v9fs_get_tree+0xb8/0xb50 [ 246.653979][ C3] vfs_get_tree+0x92/0x320 [ 246.653991][ C3] path_mount+0x7d0/0x23c0 [ 246.654005][ C3] __x64_sys_mount+0x293/0x310 [ 246.654020][ C3] do_syscall_64+0xc9/0xf80 [ 246.654031][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.654043][ C3] [ 246.654046][ C3] The buggy address belongs to the object at ffff88803408b000 [ 246.654046][ C3] which belongs to the cache kmalloc-512 of size 512 [ 246.654057][ C3] The buggy address is located 24 bytes inside of [ 246.654057][ C3] freed 512-byte region [ffff88803408b000, ffff88803408b200) [ 246.654071][ C3] [ 246.654075][ C3] The buggy address belongs to the physical page: [ 246.654082][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34088 [ 246.654095][ C3] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 246.654107][ C3] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 246.654123][ C3] page_type: f5(slab) [ 246.654138][ C3] raw: 00fff00000000040 ffff88801b842c80 ffffea0000fe5d00 dead000000000002 [ 246.654154][ C3] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 246.654168][ C3] head: 00fff00000000040 ffff88801b842c80 ffffea0000fe5d00 dead000000000002 [ 246.654182][ C3] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 246.654196][ C3] head: 00fff00000000002 ffffea0000d02201 00000000ffffffff 00000000ffffffff [ 246.654209][ C3] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 246.654218][ C3] page dumped because: kasan: bad access detected [ 246.654347][ C3] page_owner tracks the page as allocated [ 246.654354][ C3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 8611, tgid 8611 (syz-executor), ts 119182091662, free_ts 83516012009 [ 246.654382][ C3] post_alloc_hook+0x1e1/0x250 [ 246.654394][ C3] get_page_from_freelist+0xe3d/0x2e10 [ 246.654406][ C3] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 246.654419][ C3] alloc_pages_mpol+0x1fb/0x550 [ 246.654435][ C3] new_slab+0x2c4/0x440 [ 246.654445][ C3] ___slab_alloc+0xda3/0x1ca0 [ 246.654457][ C3] __slab_alloc.isra.0+0x63/0x110 [ 246.654469][ C3] __kmalloc_noprof+0x618/0x9c0 [ 246.654479][ C3] fib6_info_alloc+0x40/0x160 [ 246.654495][ C3] ip6_route_info_create+0x14c/0xad0 [ 246.654513][ C3] addrconf_f6i_alloc+0x2d9/0x670 [ 246.654527][ C3] ipv6_add_addr+0x580/0x1fb0 [ 246.654542][ C3] addrconf_add_linklocal+0x2a5/0x500 [ 246.654561][ C3] addrconf_addr_gen+0x364/0x3b0 [ 246.654577][ C3] addrconf_init_auto_addrs+0x1cb/0x780 [ 246.654595][ C3] addrconf_notify+0x10a6/0x19c0 [ 246.654607][ C3] page last free pid 6919 tgid 6919 stack trace: [ 246.654615][ C3] __free_frozen_pages+0x822/0x1130 [ 246.654636][ C3] __folio_put+0x3b4/0x540 [ 246.654651][ C3] anon_pipe_buf_release+0x40c/0x530 [ 246.654668][ C3] free_pipe_info+0x1f1/0x3f0 [ 246.654686][ C3] pipe_release+0x27a/0x2c0 [ 246.654701][ C3] __fput+0x3ff/0xb40 [ 246.654718][ C3] task_work_run+0x150/0x240 [ 246.654732][ C3] exit_to_user_mode_loop+0x100/0x4b0 [ 246.654746][ C3] do_syscall_64+0x4fe/0xf80 [ 246.654759][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.654773][ C3] [ 246.654776][ C3] Memory state around the buggy address: [ 246.654792][ C3] ffff88803408af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 246.654801][ C3] ffff88803408af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 246.654811][ C3] >ffff88803408b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 246.654820][ C3] ^ [ 246.654827][ C3] ffff88803408b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 246.654838][ C3] ffff88803408b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 246.654848][ C3] ================================================================== [ 246.654857][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 246.654873][ C3] CPU: 3 UID: 0 PID: 13015 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 246.655034][ C3] Tainted: [L]=SOFTLOCKUP [ 246.655040][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.655050][ C3] Call Trace: [ 246.655056][ C3] [ 246.655063][ C3] dump_stack_lvl+0x100/0x190 [ 246.655084][ C3] vpanic+0x20d/0x630 [ 246.655101][ C3] panic+0xd1/0xd1 [ 246.655113][ C3] ? __pfx_panic+0x10/0x10 [ 246.655125][ C3] ? end_report.part.0+0x23/0x90 [ 246.655140][ C3] ? rcu_is_watching+0x12/0xc0 [ 246.655156][ C3] ? end_report.part.0+0x23/0x90 [ 246.655173][ C3] ? check_panic_on_warn+0x1f/0x90 [ 246.655192][ C3] check_panic_on_warn.cold+0x19/0x34 [ 246.655209][ C3] end_report.part.0+0x3a/0x90 [ 246.655228][ C3] kasan_report.cold+0xe/0x18 [ 246.655249][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 246.655267][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 246.655283][ C3] __kasan_check_byte+0x36/0x50 [ 246.655324][ C3] lock_acquire+0xf5/0x330 [ 246.655340][ C3] ? do_raw_spin_unlock+0x53/0x1e0 [ 246.655642][ C3] ? .slowpath+0x9/0x18 [ 246.655660][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 246.655675][ C3] ? p9_req_put+0xaf/0x250 [ 246.655714][ C3] p9_req_put+0xaf/0x250 [ 246.655734][ C3] req_done+0x1dc/0x2e0 [ 246.655752][ C3] ? __pfx_req_done+0x10/0x10 [ 246.655768][ C3] ? debug_object_activate+0x331/0x490 [ 246.655791][ C3] ? debug_object_activate+0x331/0x490 [ 246.655808][ C3] ? __pfx_req_done+0x10/0x10 [ 246.655825][ C3] vring_interrupt+0x33b/0x430 [ 246.655843][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 246.655860][ C3] __handle_irq_event_percpu+0x232/0x800 [ 246.655884][ C3] handle_irq_event+0xab/0x1e0 [ 246.655905][ C3] handle_edge_irq+0x375/0x970 [ 246.655929][ C3] __common_interrupt+0xd8/0x2f0 [ 246.655946][ C3] common_interrupt+0x60/0xe0 [ 246.655968][ C3] asm_common_interrupt+0x26/0x40 [ 246.655986][ C3] RIP: 0010:handle_softirqs+0x1ad/0x910 [ 246.656010][ C3] Code: 20 44 88 74 24 1e 45 89 ee 48 c7 c7 e0 6f 8d 8b e8 58 62 af 09 31 d2 65 66 89 15 36 e5 1c 12 e8 a9 5c 47 00 fb bb ff ff ff ff <49> c7 c4 c0 c0 20 8e 41 0f bc de 83 c3 01 0f 85 a4 00 00 00 e9 ab [ 246.662086][ C3] RSP: 0018:ffffc900006f8f30 EFLAGS: 00000206 [ 246.662139][ C3] RAX: 000000000000d444 RBX: 00000000ffffffff RCX: 0000000000000004 [ 246.662150][ C3] RDX: 0000000000000000 RSI: ffffffff8dc46051 RDI: ffffffff8bfa38a0 [ 246.662160][ C3] RBP: 00000000ffffea8f R08: 0000000000000001 R09: 0000000000000000 [ 246.662169][ C3] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000000a [ 246.662445][ C3] R13: 0000000000000200 R14: 0000000000000200 R15: 1ffff920000df1ed [ 246.662675][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 246.662707][ C3] __irq_exit_rcu+0xef/0x150 [ 246.663053][ C3] irq_exit_rcu+0x9/0x30 [ 246.663072][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 246.663088][ C3] [ 246.663540][ C3] [ 246.663551][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 246.663573][ C3] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 246.663597][ C3] Code: 00 e8 91 34 29 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 ef 46 21 00 48 85 ed 0f 85 d7 01 00 00 e8 01 4c 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 246.663612][ C3] RSP: 0018:ffffc900079e6cc0 EFLAGS: 00000293 [ 246.663627][ C3] RAX: ffffffff8f2f9eb8 RBX: ffffffff8f2f9e60 RCX: ffffffff81e5b331 [ 246.663639][ C3] RDX: ffff888028a04980 RSI: ffffffff81e5b33f RDI: ffff888028a04980 [ 246.663650][ C3] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 246.663660][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000014ac [ 246.663670][ C3] R13: ffffffff8f2f9eb8 R14: ffffc900079e6d40 R15: dffffc0000000000 [ 246.663685][ C3] ? console_flush_one_record+0xab1/0xe50 [ 246.663706][ C3] ? console_flush_one_record+0xabf/0xe50 [ 246.663731][ C3] ? __pfx_console_flush_one_record+0x10/0x10 [ 246.663756][ C3] ? is_printk_cpu_sync_owner+0x32/0x40 [ 246.663780][ C3] console_unlock+0x103/0x260 [ 246.663807][ C3] ? __pfx_console_unlock+0x10/0x10 [ 246.663830][ C3] ? _printk+0xcf/0x110 [ 246.663847][ C3] vprintk_emit+0x407/0x6b0 [ 246.663868][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 246.663890][ C3] ? find_held_lock+0x2b/0x80 [ 246.663913][ C3] _printk+0xcf/0x110 [ 246.663928][ C3] ? __pfx__printk+0x10/0x10 [ 246.663942][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 246.663962][ C3] ? __pfx____ratelimit+0x10/0x10 [ 246.663980][ C3] buffer_io_error.cold+0x58/0x64 [ 246.664003][ C3] end_buffer_async_read+0x2ba/0x330 [ 246.664664][ C3] ? find_held_lock+0x2b/0x80 [ 246.664687][ C3] end_buffer_async_read_io+0x13b/0x4d0 [ 246.664710][ C3] ? __pfx_end_buffer_async_read_io+0x10/0x10 [ 246.664734][ C3] end_bio_bh_io_sync+0xe8/0x140 [ 246.664755][ C3] ? __pfx_end_bio_bh_io_sync+0x10/0x10 [ 246.664774][ C3] bio_endio+0x755/0x8b0 [ 246.664803][ C3] blk_mq_submit_bio+0x992/0x2b60 [ 246.664823][ C3] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 246.664839][ C3] ? __lock_acquire+0x4a5/0x2630 [ 246.664856][ C3] ? stack_trace_save+0x8e/0xc0 [ 246.664878][ C3] __submit_bio+0x3f0/0x6c0 [ 246.664891][ C3] ? bio_associate_blkg_from_css+0x4d5/0x13f0 [ 246.664912][ C3] ? __pfx___submit_bio+0x10/0x10 [ 246.664927][ C3] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 246.664941][ C3] ? bio_associate_blkg+0x137/0x2a0 [ 246.664956][ C3] ? bio_associate_blkg+0x137/0x2a0 [ 246.664972][ C3] ? submit_bio_noacct_nocheck+0x50f/0xbb0 [ 246.664988][ C3] submit_bio_noacct_nocheck+0x50f/0xbb0 [ 246.665004][ C3] ? bio_init+0x404/0x610 [ 246.665021][ C3] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 246.665038][ C3] ? __pfx___might_resched+0x10/0x10 [ 246.665060][ C3] submit_bio_noacct+0xb5c/0x1e80 [ 246.665079][ C3] block_read_full_folio+0x4c8/0x8e0 [ 246.665098][ C3] ? __pfx_blkdev_get_block+0x10/0x10 [ 246.665113][ C3] ? __pfx_blkdev_read_folio+0x10/0x10 [ 246.665126][ C3] filemap_read_folio+0xfc/0x3b0 [ 246.665816][ C3] ? __pfx_filemap_read_folio+0x10/0x10 [ 246.665837][ C3] do_read_cache_folio+0x2d7/0x6b0 [ 246.665854][ C3] ? __pfx_blkdev_read_folio+0x10/0x10 [ 246.665870][ C3] read_part_sector+0xd1/0x370 [ 246.665889][ C3] sgi_partition+0xa1/0x890 [ 246.665904][ C3] ? __pfx_blkdev_read_folio+0x10/0x10 [ 246.666067][ C3] ? __pfx_sgi_partition+0x10/0x10 [ 246.666082][ C3] ? read_part_sector+0x25f/0x370 [ 246.666236][ C3] ? __pfx_adfspart_check_ADFS+0x10/0x10 [ 246.666259][ C3] ? adfspart_check_ADFS+0x444/0x610 [ 246.666486][ C3] ? __pfx_adfspart_check_ADFS+0x10/0x10 [ 246.666505][ C3] ? __pfx_sgi_partition+0x10/0x10 [ 246.666517][ C3] bdev_disk_changed+0x76f/0xbe0 [ 246.666665][ C3] ? find_inode_fast+0x1fa/0x910 [ 246.666677][ C3] ? __pfx_bdev_disk_changed+0x10/0x10 [ 246.666980][ C3] blkdev_get_whole+0x187/0x290 [ 246.667003][ C3] bdev_open+0x2c7/0xe40 [ 246.667158][ C3] blkdev_open+0x34e/0x4f0 [ 246.667177][ C3] do_dentry_open+0x73e/0x1570 [ 246.667191][ C3] ? __pfx_blkdev_open+0x10/0x10 [ 246.667342][ C3] vfs_open+0x82/0x3f0 [ 246.667363][ C3] path_openat+0x21dc/0x3120 [ 246.667620][ C3] ? __pfx_path_openat+0x10/0x10 [ 246.667648][ C3] do_filp_open+0x1f7/0x420 [ 246.667813][ C3] ? __pfx_do_filp_open+0x10/0x10 [ 246.667839][ C3] ? _raw_spin_unlock+0x28/0x50 [ 246.668148][ C3] ? alloc_fd+0x476/0x790 [ 246.668167][ C3] do_sys_openat2+0x12e/0x220 [ 246.668323][ C3] ? __pfx_do_sys_openat2+0x10/0x10 [ 246.668342][ C3] ? __sys_recvmsg+0x18c/0x220 [ 246.668497][ C3] ? __pfx___sys_recvmsg+0x10/0x10 [ 246.668652][ C3] __x64_sys_openat+0x12d/0x210 [ 246.668675][ C3] ? __pfx___x64_sys_openat+0x10/0x10 [ 246.668883][ C3] do_syscall_64+0xc9/0xf80 [ 246.668903][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.669162][ C3] RIP: 0033:0x7f1a0a4a7407 [ 246.669177][ C3] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 246.669191][ C3] RSP: 002b:00007ffc265b3c20 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 246.669208][ C3] RAX: ffffffffffffffda RBX: 00007f1a0ab3d880 RCX: 00007f1a0a4a7407 [ 246.669219][ C3] RDX: 00000000000a0800 RSI: 000055b6febd25c0 RDI: ffffffffffffff9c [ 246.669229][ C3] RBP: 000055b6febcf2c0 R08: 0000000000000000 R09: 0000000000000000 [ 246.669239][ C3] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b6fee1a4e0 [ 246.669249][ C3] R13: 000055b6fee0a8d0 R14: 0000000000000000 R15: 000055b6fee1a4e0 [ 246.669265][ C3] [ 246.675491][ C3] Kernel Offset: disabled VM DIAGNOSIS: 15:47:37 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010002 RBX=0000000000000000 RCX=ffffffff81ac4bb3 RDX=ffff8880572d0000 RSI=ffffffff81ac4bfb RDI=ffffffff93e99fe0 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27d33fc R10=ffffffff93e99fe7 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81ac4bfc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d65d9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3f1c216ff8 CR3=000000002540a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737570635f657669 7463656666652e74 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc74102c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc74102c6 00007ffcc74102cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f1b431d46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f1b431d86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f1b431eea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f1b431d78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000084 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000084 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81ac4bb3 RDX=ffff88801e2a24c0 RSI=ffffffff81ac4bfb RDI=ffffffff93e99fe0 RBP=0000000000000000 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff27d33fc R10=ffffffff93e99fe7 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81ac4bfc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66d9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fba943e86c0 CR3=000000003a156000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6666666666666666 6666666666666666 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdbccfdd76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdbccfdd76 00007ffdbccfdd7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc843631d46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc843631d86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc843631eea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc843631d78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e776f6e6b6e7500 6f6c6c3332302500 657a69732074636f 7274732064616200 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000050000000810 0000000000000a00 0000101000000000 00000d1000000200 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 525d4696f2323f46 d5d0d8d642f13a60 5b7cde4d1024458f 4890f15e41b936ed ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a8a36dc793b02f57 d05de7be5c217c18 3fe74edd48104cc2 d4aa86cd4d148a40 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 af718eeb107c2175 1919c201e71408b6 8d5c67caa3bcbaca c4f9b35efb54305b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5b7fc4b964b10c71 5411fc43ffb1bef1 6206355b09be5fc4 ecf7b01162611460 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000010001 RBX=0000000000000000 RCX=ffffffff81ac4bb3 RDX=ffff888065e6c980 RSI=ffffffff81ac4bfb RDI=ffffffff93e99fe0 RBP=0000000000000000 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff27d33fc R10=ffffffff93e99fe7 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81ac4bfc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff8880d67d9000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3f54d00fe8 CR3=000000004edef000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 696d5f6d61706269 6c2f343662696c2f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000003d8 0000000000005c28 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8569baf5 RDI=ffffffff9b209c00 RBP=ffffffff9b209bc0 RSP=ffffc900006f8648 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000073 R14=0000000000000010 R15=ffffffff8569ba90 RIP=ffffffff8569bb1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1a0ab3d880 ffffffff 00c00000 GS =0000 ffff8880d68d9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fba9529ed58 CR3=0000000024ad0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000040000000 Opmask03=0000000000000000 Opmask04=00000000bfffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc07f49db 00007ffcc07f49db ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc07f4ee0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc07f4ee0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 61626c6c61632030 31203a726f727265 5f6f695f72656666 7562205d35313000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6162666661632030 3120307265727265 5565635572656666 7562205735313000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 202c34706f6f6c20 766564206e6f2072 6f727265204f2f49 2072656666754220 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d7265702074656b 636f735f70756b6f 6f6c5f6269665f6b ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e696c74656e3d73 73616c637420745f 6d64617379733a72 5f6d64617379733a ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746f6f723d747865 746e6f637420745f 6d64617379733a72 5f6d64617379733a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746f6f723d747865 746e6f6373202230 3332322e362e7a79 73223d6d6d6f6320 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63732031 30666178303d646d 636c74636f692031 3033313d6f6e6920 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000