last executing test programs: 2m9.831732983s ago: executing program 32 (id=15): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$dri(&(0x7f0000000180), 0xd, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x129c81, 0x0) ppoll(&(0x7f0000000340)=[{r1, 0x6200}, {0xffffffffffffffff, 0x20}], 0x2, 0x0, 0x0, 0x0) keyctl$dh_compute(0x10, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, 0x0, 0xff2e) ioctl$TCSETS(r1, 0x40045431, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 2m8.550238261s ago: executing program 33 (id=20): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x6a94cb78266e67f5, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900d308900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000200)={0x1}) 2m7.470613802s ago: executing program 34 (id=31): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, 0x0) 2m5.842565846s ago: executing program 35 (id=36): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a00010000000100000000001c140000fe004001000000000800010000000100"], 0x24}}, 0x2000a000) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x1, 0xffffffff, &(0x7f0000000600)=[0x6], 0x1, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000740)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000040)=""/31) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r4}, 0x8) 2m3.898803535s ago: executing program 36 (id=49): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendfile(r4, r3, 0x0, 0x4) connect$802154_dgram(r0, &(0x7f00000001c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c010) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010102}, 0x10) 2m2.258039749s ago: executing program 7 (id=37): socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) sendto$netrom(0xffffffffffffffff, &(0x7f0000000000)="be553912803ef54e1fcc4f3a9e611be89efd8ceaa64549ffd0baf1ebfc5cecf1abedb4574c53d2583029bd6ff700b9b16426fb6943cccde56665549581d945c19b98a9326fad4abe79f86d62eefa6a02859be15e1f1f76c3f45027eb91e62bc9f48b8ba5d91f012043b071cce5049845f023949269b454c1aa5708fac623e360e847a76a9fab4a585d8c64ed", 0x8c, 0x800, &(0x7f00000000c0)={{0x3, @bcast}, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYRES64=r0], 0x28}}, 0x0) (async) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2m2.159674541s ago: executing program 7 (id=57): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x60, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x1000000, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e20fffc}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@rand_addr=0x64010102}, {@remote}, {@private=0xa010101}, {@private, 0x800}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) 2m2.158193454s ago: executing program 7 (id=58): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x38, r1, 0x1, 0x0, 0x0, {0x2d}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@pci={{0x8}, {0x11}}]}, 0x38}}, 0x0) 2m2.079501056s ago: executing program 7 (id=60): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000180), 0xd, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x40) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000440)=[{0x28, '\x00', @buffer={"fa3ac6db3cbdf073aa9bb3538ad53a2725a4ab497c0877807ea35faf5c6a1cc5", 0x20}, 0x5}]}) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)={r2}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x4, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x129c81, 0x0) ppoll(&(0x7f0000000340)=[{r5}, {r5, 0x20}], 0x2, 0x0, 0x0, 0x0) r6 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x6, 0x7, 0x38, @remote, @remote, 0x8, 0x7, 0x0, 0x15f}}) keyctl$dh_compute(0x10, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r5, 0x0, 0xff2e) ioctl$TCSETS(r5, 0x40045431, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m1.840668573s ago: executing program 7 (id=62): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000013c0)={'syztnl0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x80, 0x1, 0x700, 0xb, {{0x10, 0x4, 0x3, 0x1, 0x40, 0x66, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @broadcast, {[@lsrr={0x83, 0x23, 0x38, [@private=0xa010101, @local, @rand_addr=0x64010101, @rand_addr=0x64010102, @multicast1, @broadcast, @multicast1, @remote]}, @lsrr={0x83, 0x7, 0xfd, [@rand_addr=0x64010100]}]}}}}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002a00)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x7fffffff, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002680), r2) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000026c0)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x48000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r4, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) setpgid(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000003c0)={{0x3, 0x3, 0x4, 0x0, 0xe14ebc5}}) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000280)=0xa) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(0xffffffffffffffff, &(0x7f0000000100)={0x2a, 0xffffffff00000005, 0x2}, 0xc) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x20, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) 2m0.841314894s ago: executing program 7 (id=66): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) syz_emit_ethernet(0x5a, 0x0, 0x0) set_mempolicy(0x8006, 0x0, 0x5) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r0, &(0x7f0000000580)=""/145, 0x91) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FIOCLEX(r5, 0x5451) mkdir(0x0, 0x19) socket$kcm(0x2, 0x3, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r7, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x2000000, 0x0, 0x0, 0x6}, 0x2}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 2m0.717445365s ago: executing program 37 (id=66): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) syz_emit_ethernet(0x5a, 0x0, 0x0) set_mempolicy(0x8006, 0x0, 0x5) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r0, &(0x7f0000000580)=""/145, 0x91) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FIOCLEX(r5, 0x5451) mkdir(0x0, 0x19) socket$kcm(0x2, 0x3, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r7, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x2000000, 0x0, 0x0, 0x6}, 0x2}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 1m49.75119694s ago: executing program 9 (id=193): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x40000025, r0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f0000000280)=@framed={{}, [@exit, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x48}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x5}, 0x10}, 0x94) r6 = fsmount(r4, 0x0, 0x2) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) fchdir(r6) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r9 = fspick(r8, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000040)='\x00', 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000500)='\x06\x84\x19\xd4\x82+\xbb\x11s\x84bq0\xee\fG\xaa\xbd\x99\'\xbf\f\xc3t\x80}\x96\xd9`;\xb5\xa8\xf6y8\x01\x17}\xeb\x96\xf4pg\xfd0\x93\xceO\x8a$>\xea\xb1\x05\xcb6\"\x80\x91\x9e\x17\xfe4\v\xf3\xff\xeeP\'\xce\x06\xbcw\x95\xcfr\x82\x8fk)\x02\xde\xd4:]\b\xa8\xb7\xc5n\x91\xde[\"\xe1~eG8\x17\x00\xee\xa2\xce3', &(0x7f0000000440)='2/J\xc3Q\xef9n\x8b\x06\x00\x8e\xc7\x18\x00\x00\x00\x004\x9a\xc1\xbbt\x12\xad@??\x93\x14\xe1R8A\xb7(mC\x02\x00\x98\xd1\xd1\xcf\xf6\xbdH;\xd1\xef8\xb9}W\xbd\xe6$k%\x83\xa6*}|i \xd6=\xef\x9d\x16\x03\xc5\xaf\f=\xf2\xf0\\c9\\\x1d\xec\xcb*\\\x9a\xb6\xaeLR\xbe\xff\xa1\x97k\xb5MV\xe2\xfd\xd7\xe7\xb7\xfc\x84L(A[\x949\x986T', 0x0) 1m48.881444961s ago: executing program 9 (id=201): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x7d4165c9) listen(r3, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000240)=0x7f) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x1d, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r7, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe, 0x4000010, r0, 0x0) accept4(r1, &(0x7f00000000c0)=@ethernet={0x0, @random}, &(0x7f0000000140)=0x80, 0x800) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 1m47.981428592s ago: executing program 9 (id=208): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x73, 0x0, @dev, @local}}}}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x48, 0x7a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) bind$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000340)={0x0, "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"}) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000140)=0x4) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f00000000c0)) r3 = syz_open_dev$audion(&(0x7f00000001c0), 0x7, 0x181241) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x8000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000300), 0x20040, 0x0) read$ptp(r6, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x14, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x9, 0x0, {0x0, r5}}) 1m47.690951505s ago: executing program 9 (id=212): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc9) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) chroot(0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 1m47.690443791s ago: executing program 9 (id=213): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={r3, 0xd038, 0xd7, 0x5}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={r3, @in6={{0xa, 0x4e20, 0xfffffff8, @mcast1, 0x182f}}, 0x0, 0x0, 0x3fc, 0x0, 0xb2}, 0x9c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bb1000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000bb3000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f20000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x14}, 0x1, 0x0, 0x0, 0xc002}, 0x48010) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x0, &(0x7f0000000140)}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0xb7a3, 0xc000, 0xc, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r7, 0x3a9, 0x3ca2, 0x12, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000240)) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x21) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000580)={[0xa, 0x3, 0x800, 0xd6bffffffffffe, 0x401, 0x8000040000000001, 0xb3, 0x8, 0x4b1a, 0x4000000000000005, 0x1000000000, 0x2081, 0x7, 0x1fd, 0xe6, 0xb286], 0x4, 0x383fc2}) ioctl$KVM_RUN(r9, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e26, 0x0, @private2}, 0x1c) 1m47.501702052s ago: executing program 9 (id=214): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mount$9p_fd(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2001002, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 1m47.450432616s ago: executing program 38 (id=214): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mount$9p_fd(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2001002, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 1m47.161357677s ago: executing program 6 (id=217): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r2, 0x0, 0x10534, 0x0, 0x1, 0x2ea473, 0x2eb80c, 0xf4}) 1m47.15030975s ago: executing program 6 (id=218): socketpair$unix(0x1, 0x2, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x1080c700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) r2 = syz_open_dev$evdev(&(0x7f00000007c0), 0x2, 0x2800) ioctl$EVIOCGABS20(r2, 0x80184520, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) unshare(0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chown(&(0x7f0000000440)='./file0/file0\x00', 0x0, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4) 1m46.229494974s ago: executing program 6 (id=220): sync() sync() r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x30000, 0x80, 0xd, 0x10, 0x3e7, 0x2, 0x0, 0x20, 0x1, 0x20, 0x5, &(0x7f0000000600)=[0x7], 0x1, 0x0}) sync() sync() r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000100)={0x20, 0x0, 0x0}) 1m46.131337071s ago: executing program 6 (id=221): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc9) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) chroot(0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 1m46.130890381s ago: executing program 6 (id=222): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x64, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x1000000, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e20fffc}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@rand_addr=0x64010102}, {@remote}, {@private=0xa010101}, {@private, 0x800}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) 1m45.801260358s ago: executing program 6 (id=223): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000140)={0x24, r3, 0x62c21a4ade68aba1, 0x0, 0x25dfdbf9, {{0x32}, {@val={0x8, 0x1, 0x48}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x8d4}, 0x40010) (async) write$binfmt_elf64(r0, &(0x7f0000000e40)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x3, 0x7, 0x9, 0xe, 0x3, 0x6, 0x7ff, 0xf9, 0x40, 0x32b, 0x10000006, 0x7, 0x38, 0x1, 0x5, 0x20, 0x103}, [{0x70000000, 0x10001, 0x3, 0x9, 0x401, 0x2, 0x2, 0x7}], "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"}, 0x1078) (async) setuid(0xee01) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e61, 0x2, @loopback, 0x7fffffff}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "493f95cadfa68b25", "2c94418e4c10074b7b09bd860e56fd1cbae53718873ca31d9fd8f301bc1fa430", "8fc092ee", "8b6b0561c24333ef"}, 0x38) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x21, 0x3, 0x5f0, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x520, 0xffffffff, 0xffffffff, 0x520, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x5b, 0x21, 0x1a1, 0x101}}, @common=@inet=@hashlimit2={{0x150}, {'bridge0\x00', {0x3, 0x4, 0x60, 0x400, 0x1, 0xf6, 0x7fffffff, 0x20, 0x80}, {0x1}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x5, 0x6}}}, {{@uncond, 0x0, 0x258, 0x2c8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x5, 0x0, 0x3, 0x7, 0x83ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg0\x00', {0x3, 0xd, 0x41, 0x1, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x800, 0x2, 0x5, 0x1, 0x0, "ea1ee5d1c9601b30deb958a92fe3434d35835e19b49a3ba41abc1c94d6a2fafc10325c60f0f8e407c0ad2bf4a9bcbc2a6c01a85913d84289f09effeb1b724612"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x650) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r7, 0x1, 0x47, &(0x7f0000000080), &(0x7f00000000c0)=0x8) (async) r8 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x1100400, 0x0, 0x0, 0x0, {0xfffffffc}, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r8, r8, r8, r8], 0x4}, 0x58) 1m45.745586419s ago: executing program 39 (id=223): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000140)={0x24, r3, 0x62c21a4ade68aba1, 0x0, 0x25dfdbf9, {{0x32}, {@val={0x8, 0x1, 0x48}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x8d4}, 0x40010) (async) write$binfmt_elf64(r0, &(0x7f0000000e40)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x3, 0x7, 0x9, 0xe, 0x3, 0x6, 0x7ff, 0xf9, 0x40, 0x32b, 0x10000006, 0x7, 0x38, 0x1, 0x5, 0x20, 0x103}, [{0x70000000, 0x10001, 0x3, 0x9, 0x401, 0x2, 0x2, 0x7}], "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"}, 0x1078) (async) setuid(0xee01) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e61, 0x2, @loopback, 0x7fffffff}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "493f95cadfa68b25", "2c94418e4c10074b7b09bd860e56fd1cbae53718873ca31d9fd8f301bc1fa430", "8fc092ee", "8b6b0561c24333ef"}, 0x38) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x21, 0x3, 0x5f0, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x520, 0xffffffff, 0xffffffff, 0x520, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x5b, 0x21, 0x1a1, 0x101}}, @common=@inet=@hashlimit2={{0x150}, {'bridge0\x00', {0x3, 0x4, 0x60, 0x400, 0x1, 0xf6, 0x7fffffff, 0x20, 0x80}, {0x1}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x5, 0x6}}}, {{@uncond, 0x0, 0x258, 0x2c8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x5, 0x0, 0x3, 0x7, 0x83ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg0\x00', {0x3, 0xd, 0x41, 0x1, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x800, 0x2, 0x5, 0x1, 0x0, "ea1ee5d1c9601b30deb958a92fe3434d35835e19b49a3ba41abc1c94d6a2fafc10325c60f0f8e407c0ad2bf4a9bcbc2a6c01a85913d84289f09effeb1b724612"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x650) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r7, 0x1, 0x47, &(0x7f0000000080), &(0x7f00000000c0)=0x8) (async) r8 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x1100400, 0x0, 0x0, 0x0, {0xfffffffc}, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r8, r8, r8, r8], 0x4}, 0x58) 57.862692914s ago: executing program 8 (id=770): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x6, 0xc, 0x1, 0x5}}) 57.771393263s ago: executing program 8 (id=772): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0x3f, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c, 0xf4}) 56.621293576s ago: executing program 8 (id=788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000004c0)) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000040)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40400c1}, 0x4008100) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000019dc0)=""/4090, 0xffa) 56.561378908s ago: executing program 8 (id=790): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') lseek(r0, 0x20000000000002, 0x1) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) write$selinux_create(r0, &(0x7f0000000300)=@objname={'system_u:object_r:ping_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0xc22c, 0x20, './file0\x00'}, 0x4d) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000005c0)={0x280a00300, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) getdents64(r0, &(0x7f0000000100)=""/10, 0xa) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r2, 0x29, 0x7, 0x0, &(0x7f00000017c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x18, 0x0, 0x9}) (async) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x18, 0x0, 0x9}) fsmount(r0, 0x54463ed34d855c1a, 0xf0) (async) r8 = fsmount(r0, 0x54463ed34d855c1a, 0xf0) ioctl$sock_rose_SIOCRSCLRRT(r8, 0x89e4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x29, &(0x7f00000001c0)=[@cr4={0x1, 0x108044}], 0x1) ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, &(0x7f0000000140)={0xe200000000000000, 0x3000, 0xfffffffffffffffd, 0x2, 0x2}) (async) ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, &(0x7f0000000140)={0xe200000000000000, 0x3000, 0xfffffffffffffffd, 0x2, 0x2}) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') 56.426946116s ago: executing program 8 (id=792): socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@nested_create_vm={0x12d, 0x18}, @enable_nested={0x12c, 0x18}, @nested_amd_stgi={0x17e, 0x10}], 0x40}) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001140)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x8, 0x5, 0xb, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x1, 0xb4, 0xa, 0xb2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x1000, 0x1, 0x0, 0xd, 0x4, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x8, 0x81, 0x8a, 0x79, 0x2, 0x10001, 0x5, 0x91, 0x4, 0x4, 0x16, 0x0, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xffffff81, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x4, 0x7, 0x20000004, 0x4007f, 0x7fffffff, 0x2], [0x9, 0x16e, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000077, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffd, 0x80a, 0x4, 0x5, 0x1000, 0x0, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x1, 0x2005, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x96, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x1, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1ce, 0x1, 0x80000004, 0x0, 0x6, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x5, 0x200006, 0x8, 0x400, 0xfffffffe, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x401, 0x3e55, 0x5, 0xd3, 0x8, 0x3435, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x80, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x3, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x6, 0x6, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x8000007, 0x21, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x7, 0x5396, 0x936, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xffffffff, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x0, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x80009, 0xc, 0x463f, 0x4, 0xdab, 0x8003, 0x8, 0x14000, 0x1, 0xb]}, 0x45c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9fec010018000000000000000c0000000c00000003000000020000000000000f04000000000000"], 0x0, 0x27}, 0x28) (async) setitimer(0x0, &(0x7f00000000c0)={{}, {0x1}}, 0x0) getitimer(0x2, &(0x7f0000001740)) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000400488014000180100010800400058005000300000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0xc084) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r6 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x718bb647156ec3b7) linkat(r6, &(0x7f0000000100)='./file1\x00', r6, &(0x7f0000000180)='./file0\x00', 0x1000) setsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000140), 0x4) (async, rerun: 64) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x6000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) 56.199908384s ago: executing program 8 (id=794): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) (async) bind$rds(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x6, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}], 0x18}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x84) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x48010) syz_emit_ethernet(0xcc, &(0x7f0000000000)={@multicast, @empty, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "5ac3", "b74148", 0x18, "99e6780bb3287666e39d7f22df128e4a8eb46d5c340d28117b043fd2406b2a032a0092d1a3042aea7208efb18a55a436125c328af81e75572f034ec56f782980de3af04a8246a13a2bdddd5619e09f5d62e2305840399c1bc58b87dc306a1364e6e2c4624af680a08a101ec5b08be0959617cda2bad3c33ad60b2da3e949f0f0b17c1d027504a288df1d4b5242b62407d14bee09d0538234990af3eb1c3f90325932e1ed2c13f75cac1d32b30f010d570fd1b3239b"}}}}}, 0x0) (async) syz_emit_ethernet(0xcc, &(0x7f0000000000)={@multicast, @empty, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "5ac3", "b74148", 0x18, "99e6780bb3287666e39d7f22df128e4a8eb46d5c340d28117b043fd2406b2a032a0092d1a3042aea7208efb18a55a436125c328af81e75572f034ec56f782980de3af04a8246a13a2bdddd5619e09f5d62e2305840399c1bc58b87dc306a1364e6e2c4624af680a08a101ec5b08be0959617cda2bad3c33ad60b2da3e949f0f0b17c1d027504a288df1d4b5242b62407d14bee09d0538234990af3eb1c3f90325932e1ed2c13f75cac1d32b30f010d570fd1b3239b"}}}}}, 0x0) 56.120215505s ago: executing program 40 (id=794): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) (async) bind$rds(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x6, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}], 0x18}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x84) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x48010) syz_emit_ethernet(0xcc, &(0x7f0000000000)={@multicast, @empty, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "5ac3", "b74148", 0x18, "99e6780bb3287666e39d7f22df128e4a8eb46d5c340d28117b043fd2406b2a032a0092d1a3042aea7208efb18a55a436125c328af81e75572f034ec56f782980de3af04a8246a13a2bdddd5619e09f5d62e2305840399c1bc58b87dc306a1364e6e2c4624af680a08a101ec5b08be0959617cda2bad3c33ad60b2da3e949f0f0b17c1d027504a288df1d4b5242b62407d14bee09d0538234990af3eb1c3f90325932e1ed2c13f75cac1d32b30f010d570fd1b3239b"}}}}}, 0x0) (async) syz_emit_ethernet(0xcc, &(0x7f0000000000)={@multicast, @empty, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "5ac3", "b74148", 0x18, "99e6780bb3287666e39d7f22df128e4a8eb46d5c340d28117b043fd2406b2a032a0092d1a3042aea7208efb18a55a436125c328af81e75572f034ec56f782980de3af04a8246a13a2bdddd5619e09f5d62e2305840399c1bc58b87dc306a1364e6e2c4624af680a08a101ec5b08be0959617cda2bad3c33ad60b2da3e949f0f0b17c1d027504a288df1d4b5242b62407d14bee09d0538234990af3eb1c3f90325932e1ed2c13f75cac1d32b30f010d570fd1b3239b"}}}}}, 0x0) 53.748762941s ago: executing program 1 (id=834): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe99) pipe2(0x0, 0x84880) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0xe7ffffff}, 0x5, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x4) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000000000/0x400000)=nil) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000000c0)) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(aegis128-aesni)\x00'}, 0x58) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000280)) kexec_load(0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000006c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x50, r6, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @deauth={{{}, {0xcbb}, @broadcast, @device_b, @random="0d0008982508", {0x7, 0x6}}, 0x2, @val={0x8c, 0x18, {0xd95, "ae9073e8d825", @long="322c2904c5e1f9fec727afcdc708a676"}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 53.398779029s ago: executing program 1 (id=837): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4c00, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f00000007c0)={0x19d8, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x1030, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6}, @broadcast, @device_a, @from_mac=@broadcast, {0xe, 0xaa8}, "", @void, @value=@ver_80211n={0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, @a_msdu=[{@broadcast, @device_b, 0x1000, "72648238069b3192c283c845ff03e0edec6ff89de88d5a8feecca38b7828cc41b749e0e2362ac0453cc9991803b5c650ee5749ad383d50d29299cac56fa9b732a85ff99213842bac17f0107fd33eb53973f85bd97af10d2de144ee05155066362c5063f1252f4b5cb607a5a2fdb9a65b259adb3b29ac88e2c0e2717570369e153c1486fc1be594b2bd8df3589c21b44db27b8e19c472f43334146b745df3101005fcb3982d6e2dca4d3f199bcb1559b0bd06eef7224d8113469c1863fe86864343b6f43dc6bfbf31c69b52335a23570b05eb89443cce6a48d2d5b0e9687e14017a034757acc66df1b5fbbfa3f5d199725426d169413478534ffb4aa639cc00d62ed929e5fb48bbe1f566e918b046a0d2cdd6f7dd0413091b60f2e5302ca66ce14e8950ba711d28ba9c5bacaea96c9e23b925a52d685578e10a32210814e934e9162e3cee6470e835af95ea08ce1f09443c638182f14198dfa31658c9b7878d4cecc05e7fbb2f8a90e4e34dbee21e3b262ec5a80e7e9e647eb76e0d230adc6921437bd589e5dee806f648f34c2d3e1eaca2fb86b438d7bd9dd7383bc469d60ffd6e1d35a165273416991eb4d0b4e3d58a8182413ed26b4096273f88caef39b449373ca8481f5f464f40a123cbc81b3303bcf07c5147ad08d6af09c55b0e34d657d7149cd880be534695c72fc11400ff1ca1395f5227340e765c3a003c77a980b00e1a3ec008498ba948d60f8363389d25b48927afcabe815b076c8f2f4bd04365b64c6e2e35154c69dab1c27f5bf56c0f25333384a80d4348df5f5077529332e8bf0c607d3d7970d072b47b784c6e527573dc0dff5f1ae02adaa4c154dabca97ba9bf9c881d22d35a626b5c58cc987479bbe45e470c15bf785c876fc6e7ae60f2700ea7df383fe4a048518611d9d12c57798c280ec635b07b9fc00d63f6e471c70c9b8e99396383d48de8b70e021f0f83f5c9f7b0937254165b8724c9201b1a02dae574676e1ec8f79ecce285849595d9e31278d1f5a7420732b216940166316f1743ec9836db5fc664a262617dc38189d2662e604a74f2885a003b8cb52510041854d18dc055ff5bb575d6cc52d15a3db6fc12600e8a5cd24561390d0aea7ce1dba8c6ee6e89ef48f7599fe953a2dc49513f90aafda05e1e3e8b9b2afd70f7e6126c8ae04b16fff9439e034649eb05870e9075a2b1b5ccbfccbc5bb4454d44804e9cc209471bfbd591c4bd729a7a8e7752a19da09c273d334d489b88fe387ac3020c9ed06534d05bd40936183285d21917153c1034b121eed26a599bfa0dba4286b57a8d7eaf6a601189c9dc82ff29ae2b8d1d7fdbd14226ebe5b16f95906bfc435448b2e01d0338faa94507e85b4148c783f3f206d29d7f65abf0ed61eeb7d855b89b5db0dead384f25fe43d31f13d36a9ef8256ff47936fe9f66cc378dc0f0a7070793877f8b8ba70fd1f0708aaf92875a93a4f800eb269b3e40c506061a917a5e4431c055d99d73692c01293ded39d158f90d9b77609f51bcb5ad1e29f9b35dee17106951e6f4e66e4cb02afd8d981f72bfb214598d5b3444db7befc99b13a14c517eeb3d5e1595db40bfede372f90a764c8cc7c977034120f40842dee045c3c1d0d2b6e89017e510c7f77e6a479ff7369147dda87db0bb248188ab656e912577937989a48293a24de2a60a4d832d1f93b4daa75fda4504d2dea3992c7bd26dc7163ba1ae2ca491473d7d080a0927e0a29b55c89f955fc0696f2db6484eb2576f622b32ea72e5d1ecbccabe8d4531657ec6629261594df85d89f52845e61f6ef8383188f2c8061eb5ae69eb4710b6b99eb89b05dc95e613ccd9f10b8a8d8978fbc101c2c0f889f37dc3c45b9be0fea4f33039d9025d0c4f89fd2d685aac047dbef130e9fa3dc541b41e33709fb2cb198b4e62845bda41f422fa01d53b02a5edf0ff7f0714b542d10a112d4c49075210b3ad6008480fa476cfe94aa969c44ea1d064ba16b7116e5de00a47ab1f273184536bcd731407cfa3813bc56875505a0c8117dc5edda1c14ebe6bca73b1ec7c229b1a452e56634e50fe0228f34fced2cae29dfcf6a3346b09c145781d27a3ce740a67b262dfe279ed2dd03cb682ce0c337f72008999fb6a68f682a2b2886165c7937f96dd53d8454f2b87b7d779d0cce7e00b4512fdc16ad6c13a0cf451f311ad8c781303cb19b4ecd02544f95743540a025199b809148f8f59d3c14d4dd3540c6beec7d360405d35e36a25b2137436b64050e118873bad314ecdd14d7c2e16a375e3612462313b65a88056c0318f5ad3211ed6e110e78151c5126b8c84ce8aff8095f880f33a508011cf183467db81b154e56db6e1e6820da3d1128796a296a79bde00317756632b128e2871a4d2841f9c64d41e5908ed3def3166c2f50e70cccb332c35eb38d5052a3a5a940fc58ec9741906828d6bf92a91bdef0b6648d848166f64c56da6768cfeca8857fe6c668f44dd1e9af2f6c78ab4254fa6fe21c543c4c650a90649b78fe97f2e07201a87dd5b0d093b5fe77b9332d291045aa7f05f9cbab3a4ed42c63db465d338702461d9c3c71ac12f70abfc2a4d2d4f037e24f6a6571a394e68d5f9fe86890a9cff2bc36f9721b146451249f1ad29b3f844dab47da2e34271d4330aba43f616339c9d0fdba76c54ed6850f113116c9ed0e749f88cbc24b276f6fa4e2ab71ef5190e4686c08158b9787c2dce44d62bb415657f74e18ebe6f13ee350c0bd03a6d349b205598cbc7fb6f3c98174a45ffc82470ec106efee930f99bfd0f38f006a1c59afb61cc4a3b40ea2e0adf175886a49b62d54276d4214e9131e2c914db6759d0b5eaa8add1851cd7dc0457974675a77e2ff1bafa125032a1c29a49c5798dc5f7582d475aa0252d4bc79876fab4f3dff49d3d22f7a03b5f9fae3879955bc6e0d22c72d2fc98b157d9594c88822d83fadc3e986c40762af9a4a95dd8cd6604af1e0fb2a369a7e1b335b8d1cb7ba039126b01c7be43057475898b953ed0a985a284c42cbac0c3b5e003dcaaf545c638470a45492988eeab386da2552016580bc3e224f24c4925752dc706855421ec056bc96d1bb2748855b8f9d5b111396a893e284b1cbfc5c2a645abc01f84dadd1db69c4b3e9539f9f0292caaa14098a00530587e440d2f45e0f9177aedc322a37d8b704f9a7cf6c5cb2e7b3aaf1baf308dee7f1d132a27e38a0335143f859b2763fdfb665c8587ad03fd733a0717e6c0b71a79034f8d1fcf31aa3b8fff897a2b3c82d46725f87b87d5116621cdc2b0544902a48366b13cfe22c9cb98d8c93784662d29aa758841615e1efe50e54a520a85816742cedd495e111cf06c3412fe1c0c02d1e452766ab951e8fcec48bb4baaa85a2df2df22cb4c40d45c051ec81062ade0497424c8747468a222ca195f5b18ffa86c6b1e0df1a2b0dba8189e7f6e43a70e41061b98a4645ec3969cff84daabf6a16af4318a4996399bfe0c1fa3bf621d828203ff9a62a9051819dfcbdac7d0f35152395a193da54ddd927c9cb551043ed617a276d1ca54f856f012c8187a4098969ab7d55bfe4e7e44aaa809f3f2dae4a253fe92f4b8e6539ef16a204b56d59597991bbbf5514ea872390b52515de588db8b6514be8c08ff2a46399f377a81cd021dcfc8f243b6c7c03f7001e51a36f9e56579c5dc865d4cb4fbad62eda49fde36e21353225ac77e36fa02a87d91c7b103b158fdc9ef9a91b2df8ab5f98c8be1045afe2bad1790e69caf9462426f3e899cf76a15d7c207abdf82947eb423d743800dbb47216126cb42fb6f529b8dde13dbe705d75f841b9b548506f06be572f3c61df3aa84408617937c68687b2514be62a332b2758fbe0bc327944af04d4504a246afbdc05e178908f4c4d410a1ff18fd979c62e308e9debb7fe79db20d5cc720fa0aeec0f63f82c05d7666ea0480ab6104b5694ae35307781a5cba425e7b180ded70be58b75f2cfe5f11eefb28738c31e2d7b1f4ef4178d51ddb4beaf26216e15acf7344046c0217a533fcc1dbf70d3e51b84cbeb70fe442fbee8cb015a725780278a3edbf116181c93b32fd14089cd99c3f99dad05ec4f17002198e3d49e22b0701e61c982145cd41df133025c90eb56b7ff7a634eda14cbe7d571297b9412e205e1c51d5e5d076785b5db63889046d2b82448983c044c992e1baa4a6125f7a1eb6e221be95388bc0b918ee88f274c4aa706a153d926e1380c423b325ce6eeb5582547ec1d09267c8455c5b52fb254e176b773234c6baacd20e243029a0a88569b5aa5385b8c487d31e660bf6b56b092715a293245503195d5dfa4196fb211656353fb3e01cef058439007aa47cfd9b10ed0a2001bc7846dd2aebb6cb1cc5df6a3df1ef9a3d1f0a52ba919dee31392e83d0a13d98fcc3f22a6e4b7702738ea7f526134a0d35538feb04e27e8bf94a7977956d5cd413af53ecea8688d2a99f36f55834ea2979d1fefdc3537674c6246d911bbf7225984b8c06e1178eb1f2cb2c8533723b5dfcade0bdbf627149909ea6a8e53aa2af229acb24da48025516c0e6807fa59f5102f63fcb3a5e4b6c571610d31b7fd2bc5048171676b3a57a6af7cec3d51e81a5242f1ea8e20793f2af6b66566b5a17866db015fc47f98032967b330a5f8dd858ff08b51c25a9b20e3d7b8f8a40142e6f200d498dc4894c7de97b88fdd29ae3193ce88081c5d92055545ec54808abce71ebe01799ce294dbfa91e444acdae69388bc56d0ab23b8db6e41a5c7bcc20f9d879f89ff2ef6c9efab55233387291977d1bbd2068915850f7add5925c5e70f69e14ae6deca64640faa40638e935ee25bc00110f64dbe5affc5eda820da74d232ba14eeeda49ad45d98aa77f3d045fc4de28b0f0bf03a2f286bf301ce4d1f2294b413ea8cf497078196e09a01e4cd3fab311a4630756d85c0af2f05d25195a76fd16f36641e5c89c944e821d12b93818f3011d8af629a6d86e881f624eba7c526f4671ed9bfff59e4c33dd8bc472bd2ffc57e428705afe32093603a7b64ee811989dc89b96d6c94fc46eb799466d62d3c4a7acce03a6b3113ff2ae25f967e7d77587506845a479feeec43fb4479d876c9f0453a85cf6297c48e5f735b0c200e22ff238987b2fe2652d5e6983122620a5b29d00cbbd59fb635465bf7949db05b6ec80341a7e63d2ee4c19c42cc89b1151138d1a32a6ec20ebbcf73f1726f456efe13546ef395092b1ccc23e44bffe97e8604aaca1a86be69b7612b82b4fde42f8c1a11adb5e0b7aa46614662543f71c005f9ed12aadb1c7fb7164e780368ba8a70d6364914d8edfab05aa29e6b55a0383efcf14f129955c3d62b9bc1338d12b5db13e8e246b0db858ca39b4a596c0f6da4f1c272eacfd713e2fead98571fe156c5296230803b85d5449ca1d84265cee3a138fdc94d5f52135a7da7f8bb5c53f1e230cbfc244b64b2d7c36c171fb17e98dfca5a5f84b4c386cae5a2a951fa2b40dda4f1950ef56765c12c41801943d9b58e137a754bd25e1f0a2a9eef4c4275590c6bfe68e9047a5794dcfeebc4be3be1ff2d501b5e057842843aade0d35736a833df3a5b401d03adf94db3c8ae4d45d8e7ba7a250a175dd4895e71fb911e0f76f6159e99e91150ae051c846f09de176c0137ec1836cb75c72523ca6c384b4eeba150d0bbdd0f4f2c29f789cd1b624b165a71e72c86c323ddb0ae02c368e037d2f253ebeef3ad7da35c70a38f91898950985622f4d270d003e17fb55997789ea411b8dc5f6771c768bad388bf8d144f8"}]}}, @NL80211_ATTR_FRAME={0x448, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x5}, @device_a, @device_b, @random="2c786a58d46d", {0xa, 0x7f}}, @a_msdu=[{@broadcast, @broadcast, 0x80, "92156bce507d4e34f5aad23e2a8775a55e5a43346127fa1937738eea344359e56bfbf5e72333bb34a6423e465a5a5673ec825e26aabce00988919c01aa2b4c83c58c11ec4ce4b68c80b4401e8083da0aa6ff6a31e03286aa0c6124a7f78c795e46104290cba297634147983fe73fa5a88b17686e5e960501483040b2aaf1dfae"}, {@device_b, @device_b, 0xc2, "c50c14929bed0eac19fee30a9e4824ec3525ebde7ad1df675a207351487f3688d85b9056aaa03d8e59a1b266527e219990938949e0edb873a73f18e7ef95b9c2847aec062ce28747b83e871a127021dd9da103c2ba65f820b2d6dbf46f403e3162704b8f71ae6501c3a54359f36b412fd02252b975fb9c3e3f6a7e1a6f791156ed1d49244788c77c420842d34ab09a912b3eb761c3d13fa8334cbd1c80dee5f8f9a0461d25f636d3a08071d51b2d6df1ff0dc0b8d94c3b8a9292c604cd17187ec85e"}, {@broadcast, @device_a, 0xe1, "8b5821875e48dd8da52ae83d98c42709fe4361747db494f32f5835c24d69f3efb4ee9d06c72d34cd8e748ac18a3842fd79976b68e9536a249de1c91943f5ede44182e5d1738af66a7496239a903a3e3eaf22f64779f1bd0236cd2d944d37646f707c6401c51a8f70d3694e1ca3d56c24aa45b51405a3f841a54d7e4d9e56ebab88679a01b8608c666fe735e093259fabf479f61a91fb3fa6afe01bd12800785432f78d0ca2ffa83a57c9f87ad1f1a1fc8c0fc4e35b544904b9b8bb646e473bf2145bb5f62c52fa71e39be6e6c71b42b227585670890e72f33712fd2a0869b9efba"}, {@device_a, @device_b, 0x41, "47796f2ae6d7d3675ebcac22be2e3a2771b43d99696a6594256c8e34ca7d176690b205215b9b0f2f79d02b8c79e2a11a74b4acde23781c324397663485b807d3d7"}, {@device_b, @device_b, 0x56, "524ffac0f8dd24f8478271c3231cf0c130bf68cd778857d3edde556cb191ce5ac2d2a1d491ef8f6cce6996009be2b7594cb01b447a5cbe33fd01ed795ceee26853d7a1af5c0b67fdf6c247d65d203b7601b15deb6eac"}, {@broadcast, @broadcast, 0x1c, "0b67a03b528096ce969e55794648bb97f04e2c7cfbc87b81334cc4f3"}, {@device_a, @device_b, 0xd9, "1f2cdbd4ccfa4bf9e0dfaf536adf5522353012b25a4f25722e2f562ec12a35d976e2954c4104445bffae9a53749de6c10bbdf55e87ec13aaa2896a66df7183f92f4f91d915bfe56d61d9a29122b9728185aad29b31674516c3bd70c702882d93b2e40dbcbc24db90c1abcd9e499787dfa109f33ea4bf57b7414c6d94bbb5ecca0e46d71cdbdadf048340998042d588b1bdf0c2f59c7075f0f6cb7ea5691c9e9e30141cfd82e898b508011bea99f2ab6c85305a2c247c2b43b61d47b0f42db1748d410c9f97e575424d789f20a87ab5826c8b47182ba040959f"}, {@device_a, @device_a, 0x3, "bdf07c"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0xa2, 0x33, @data_frame={@a_msdu=@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x1, 0x1}, {0xa}, @from_mac=@device_b, @broadcast, @from_mac, {0x2, 0x2}, "", @value={0x7, 0x0, 0x1, 0x1, 0x5}}, @a_msdu=[{@device_b, @broadcast, 0x75, "0b42c6cd2e1b1b2f139ae05b3006881534552cfd72287ba42b3e1b11b25596036080716cc29fde30acaa3ec05ec294d1309dc5b81abcdc73cb150358e6124fcc34ab5ddd76986b9cc8212a6b1682d506829575e9815085a4d9256cda996a68a5c40545c35ebd4658d546e34498f33d875e83841c01"}]}}, @NL80211_ATTR_FRAME={0x48f, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_b, @device_a, @initial, {0xb, 0x6}, @value=@ver_80211n={0x0, 0x675, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x0, 0x0, 0x41, @void, [{0xdd, 0x1e, "7580149893adc485a059622840ba3155a740629b0e020b3cf76a07724245"}, {0xdd, 0xc3, "ba6e94b8be310032d07d157f166bbb27504e64bebf4de00ac98fbbd04f53d69c065705ce7e9c122ce9933ea1c26069e2e2d996bc57829430aff2ce5c025b7d11c3edc054f79ff3ba9d45fe1a8a6061394a8cef7bb2fca6f638a13e71e73b0ff3e7ee4ace8fcd1a3b758716697d8e5fe13653592db8decd65866bc41c297b1f7b37f53f46e32cc638167d22d4ce8536883ef3ad4f206d952b51a57296cea918f506a2abf38308010e1991ee0de18c350d244037e9863aaa3ea6cfb011db152f89df2467"}, {0xdd, 0x1d, "b4930c3748dcd753df3ed9b1abf98840609aceac4d4202402eaf2d0f9d"}, {0xdd, 0xe6, "09dd165805f168735e2414b128b4912fad1d566263432b54230113c593f63b2788673b2024baf3391d555548afa157551775751ef5b59fbee671aabddaabd6eaed21a068a0b5d45211c618a9439a94b628fdccd27a821814341aec2381df26ad1809b362caef974d1650c3c552a5a40e2bf5745d286dd4c43753af26e2e8841c16d9a6a1f29b843c6c0ad97af6e52f5ecb40cd0b5f8b75c0552d0f526f884152be28968cf3d9507fa71ded5f70e3712148d8ea6c1425354ff6a24aded1ddfbcbac558a143943c66c6fd10fc27f1ebe990b5af52ce1bb428de91284bdacd3b2a765165429a5b6"}, {0xdd, 0x2e, "190b30a90c3f0a9c8f2d769feea0dc98a39c97f703cecf24a433c2ead4a185c44bb04ef773a87f82d70eb3728f9d"}, {0xdd, 0x19, "78f07ba73bf446bb22999f2fdc2e54a55f866b1eeb787c7e63"}, {0xdd, 0xd8, "e44648bfbb77b31426131f3f821ea0f30ec73a371ef57ebc453e0f4f5a132caaf65bc792dab13df15f1957815ff51335b46ebb757d883284eb63a4821026a510df3b2ed0be577e11d6a541fc7289dd3ed890eb88a114e4a2356426df68617241ee5ad97261de487581428bb5d30bad22ebdea23806a50ec60ad5836e1b65e9f635cd906b0aadb4688364dbe51de9869e869688402f395a84daa2c1e4f6c885217fd66057bf5a900eecd9d481e10b955f4aa16e2066ddea64b17f0deb821845cf32b3ecc10f4a768c390542b20c504b6e73d664d6964ae618"}, {0xdd, 0xab, "754aa558b87eb97acaed5b427b7caa8d9c69fdc1531bd355292cafd901e2e533ed8ad2aa7b440cb733c9c7eb504ea00b88b5ac863b0fc384217166703c5487adeeeccf61a2343c766847bb03353b4e1b26a75f04951e5480dc430365cf210c37ade4c3393f89d76fcf3a107e6dac73cbdfa235e09949fd9184186ef8d667ed1ab61b683f7cfcbe0296457bbfba8c2385c64809164794ff21f21ca579dd2ca94058874d8dc63620f98f5b88"}, {0xdd, 0xa9, "22de36d1e65580434c1d54305d535977af5a4f4345565b62bee938661222dea0f17b6886e9630a5debe039d1b53fc06db819a28c41970a1f9fce7d72d5652bb770a8a37876f2964ed9d0d921802de8ad81dd2d1f207680bd6979afb46727e2e31db9858983e91f25ed8a8a8c6d7a0014870482c84ab903e005e5d9e6d8838ca847fc871630893eeccf26c36373d32a5aea2f39ff559b2618a76721b8686a3f0b792be1b0d6a30228f8"}]}}]}, 0x19d8}, 0x1, 0x0, 0x0, 0x5}, 0x40000) 53.3979399s ago: executing program 1 (id=841): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x100000}], 0x2) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x50, 0x2e, 0x9, 0x70bd27, 0x0, {0x6}, [@typed={0x3c, 0x18, 0x0, 0x0, @binary="08ac0f0002ac0f0009ac0f00b4c6ea978047236b91931953af0e321188bc14dc0a21a004dd323a3af287c7bec8028105fcbee7c6ed007b1a"}]}, 0x50}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 53.293629827s ago: executing program 1 (id=845): syz_usb_connect$midi(0x0, 0x58, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x86a, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x1, 0x9, 0x80, 0x31, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x0, 0x3, [], [{{0x9, 0x5, 0x0, 0x1, 0x20, 0x9, 0x1, 0x2, {0x4}}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x54, 0x0, 0x6, {0x4}}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x80, 0x2, 0x4, {0x4}}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x5, 0x0, 0x10, {0x4}}}]}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x10, &(0x7f00000004c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x25, 0x80, 0x1, 0x10, 0xfb}]}, 0x1, [{0x0, 0x0}]}) r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80, 0x80000) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f00000000c0)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r0, r1, 0x2) 52.030530193s ago: executing program 1 (id=854): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r2 = dup2(r1, r1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x9) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x1c, r10, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000500)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x6, 0xf3de, 0x6, 0x7, 0x5}}, 0x118) 51.957037825s ago: executing program 1 (id=856): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1}, 0x48) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56741, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0xc, 0x2, 0x5, 0x2, 0xf, 0x4, 0x0, 0xb, 0x22, 0x6, 0x1, 0x4], 0x3, [0x4, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x0, 0xd06, 0x7, 0x2, 0x800, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0x0, 0x8, 0x1, 0x6]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r9, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) r10 = socket$unix(0x1, 0x1, 0x0) (async) r11 = socket$kcm(0x11, 0x3, 0x0) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r13, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)='\'', 0x1}], 0x1}, 0x4005) (async) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) r14 = syz_io_uring_setup(0xec4, &(0x7f0000000680)={0x0, 0xdc63, 0x800, 0x2, 0x34a, 0x0, r0}, &(0x7f0000000440), &(0x7f0000000600)) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000380)={r14, &(0x7f0000000240)='\x00', 0x4cad00, &(0x7f0000000280)={@align=0x5, {0x7, 0xb, 0x4e5c, 0x6ec2a597}}, 0xd, &(0x7f00000002c0), &(0x7f0000000300)=0x9}) (async) r15 = socket$l2tp6(0xa, 0x2, 0x73) (async) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2000, 0x100, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r15, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1, 0x4e23, 0x0, 0x4e20, 0x4, 0x8, 0x0, 0x40, 0x0, 0x0, r16}, {0xab, 0x1, 0xf889, 0x3, 0x3, 0x7, 0x7, 0xffffffffffffffff}, {0x10001, 0x8, 0xffffffffffff0001, 0x4}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x1, 0x3}, {{@in6=@remote, 0x4d4, 0xff}, 0xa, @in=@multicast2, 0x3506, 0x4, 0x2, 0x40, 0x8, 0x0, 0x1}}, 0xe8) 50.468542947s ago: executing program 3 (id=873): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x1b, 0x5, 0x660, 0xf0, 0x0, 0xffffffff, 0x348, 0x258, 0x590, 0x590, 0xffffffff, 0x590, 0x590, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x10, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@private0={0xfc, 0x0, '\x00', 0x81}, @port=0x4e22, @icmp_id=0x67}}}, {{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x6, 0x2, 0x2}}, @common=@dst={{0x48}, {0x2, 0x1, 0x0, [0x3, 0x0, 0xfffe, 0x7, 0xa8, 0xf, 0x9, 0xfff7, 0x5, 0x9, 0x1, 0xddbe, 0x2, 0x3, 0x4, 0x5], 0x10}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xa, @ipv4=@loopback, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @icmp_id=0x67}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'syzkaller1\x00', {0x81}}}}, {{@uncond, 0x0, 0x200, 0x248, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffff00], @ipv4=@empty, [0xffffff00, 0xff, 0xffffff00, 0xff], 0x4d3, 0x0, 0x11, 0x0, 0x18, 0x2}, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xffffff00, 0xff000000], @ipv4=@multicast1, [0xffffff00, 0xff000000, 0xffffffff, 0xff], 0x4d5, 0x3500, 0x5e, 0x1, 0xa, 0x1e}, {@ipv6=@local, [0xffffffff, 0xff000000, 0xff, 0xffffff00], @ipv6=@remote, [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 0x4d4, 0x3501, 0x67, 0x1, 0x0, 0x10}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0x0, 0xffffff00, 0xff, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0x7f800000, 0xffffffff, 0x0, 0xffffffff], 0x6, 0x3501, 0x3c, 0x0, 0x15}], 0x0, 0x4}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xffff8000, 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @mcast2, 0x3}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="824f35276e", 0x5}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x20, 0x3b00, 0x0, 0xfffffffffffffdfd) 50.46836128s ago: executing program 3 (id=874): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) (async) socket$alg(0x26, 0x5, 0x0) r1 = syz_io_uring_setup(0x130, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000, 0x3d6}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) (async) io_uring_enter(r1, 0x4913, 0x770e, 0x0, 0x0, 0x0) ioctl$BSG_IO(r0, 0x2285, &(0x7f0000000dc0)={0x51, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffeac, 0x0, 0x0, &(0x7f0000000c00)="d6", 0x0, 0xc30, 0x30, 0x0, 0x4}) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r4, 0x407, 0x100000) (async) ioctl$RTC_IRQP_READ(r4, 0x8008700b, &(0x7f0000000000)) 50.400805686s ago: executing program 3 (id=875): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x80]}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c000280080009000800ffef08000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040040) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) (async) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=@newsa={0xf0, 0x10, 0x200, 0x70bd2a, 0x25dfdbfe, {{@in=@remote, @in6=@empty, 0x4e21, 0x9, 0x4e22, 0x97, 0x2, 0x0, 0xa0, 0x16}, {@in=@remote, 0x4d6, 0xff}, @in6=@loopback, {0x4, 0x9, 0x0, 0x1, 0x4d7, 0x7ff, 0x2, 0x10001}, {0x7f, 0x4, 0x10001, 0x1}, {0xffff, 0x9, 0xf}, 0x70bd2b, 0x3504, 0x2, 0x4, 0x10}}, 0xf0}}, 0x4040) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r1}}, 0x18) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x8880}, 0x0) 50.400574886s ago: executing program 3 (id=876): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mq_unlink(0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) close(0x3) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000400)={0x1, 0x0, [{0xc0010140}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x159) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000300)='./file0\x00') r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000400)={0x1b, "5660359c3245d1c42317afad7d48ed510000000000000100"}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r5, &(0x7f00000054c0)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$poke(0x4, r6, &(0x7f00000011c0), 0xfffffffffffffffe) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) ioctl$SYNC_IOC_FILE_INFO(r5, 0x40103e05, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x240240, 0x90) 50.300041506s ago: executing program 3 (id=878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0xf400, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c, 0xf4}) 50.141175493s ago: executing program 3 (id=880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c00000000201010200000000000000000300000108000340000000041c0010800800024000000007080003400000000808000240000000030c001980"], 0xc0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x74b8b71959f12413, 0x0) write(r1, &(0x7f0000000080)="a37ffe00295f8ac1d11f947a08c5337b364f55e604864a50102f40f2e9bf3bcc5eaafb4882ad86f6f557f6facf66107ed8e6ab279fdf805b061c3524ed45fce198f5a6ad206d2a1cb4ac9e5decff7a5b78ef9354c756c5f1596812250f64504d76e7f24f1b01db51cf19427d6f10175b44698c5fcf778bc5cda684602b23c7c38416065b33885ac860f4cc396f16b497396c4bfff46a11dd1b2fa79583fee373121fe64efed03a2eabce51252c73b51a5b3afebb1b505479483cc09583fef50925ed99", 0xc3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x404c081}, 0xc000) 50.057344351s ago: executing program 41 (id=880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c00000000201010200000000000000000300000108000340000000041c0010800800024000000007080003400000000808000240000000030c001980"], 0xc0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x74b8b71959f12413, 0x0) write(r1, &(0x7f0000000080)="a37ffe00295f8ac1d11f947a08c5337b364f55e604864a50102f40f2e9bf3bcc5eaafb4882ad86f6f557f6facf66107ed8e6ab279fdf805b061c3524ed45fce198f5a6ad206d2a1cb4ac9e5decff7a5b78ef9354c756c5f1596812250f64504d76e7f24f1b01db51cf19427d6f10175b44698c5fcf778bc5cda684602b23c7c38416065b33885ac860f4cc396f16b497396c4bfff46a11dd1b2fa79583fee373121fe64efed03a2eabce51252c73b51a5b3afebb1b505479483cc09583fef50925ed99", 0xc3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x404c081}, 0xc000) 28.804213064s ago: executing program 42 (id=856): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1}, 0x48) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56741, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0xc, 0x2, 0x5, 0x2, 0xf, 0x4, 0x0, 0xb, 0x22, 0x6, 0x1, 0x4], 0x3, [0x4, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x0, 0xd06, 0x7, 0x2, 0x800, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0x0, 0x8, 0x1, 0x6]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r9, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) r10 = socket$unix(0x1, 0x1, 0x0) (async) r11 = socket$kcm(0x11, 0x3, 0x0) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r13, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)='\'', 0x1}], 0x1}, 0x4005) (async) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) r14 = syz_io_uring_setup(0xec4, &(0x7f0000000680)={0x0, 0xdc63, 0x800, 0x2, 0x34a, 0x0, r0}, &(0x7f0000000440), &(0x7f0000000600)) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000380)={r14, &(0x7f0000000240)='\x00', 0x4cad00, &(0x7f0000000280)={@align=0x5, {0x7, 0xb, 0x4e5c, 0x6ec2a597}}, 0xd, &(0x7f00000002c0), &(0x7f0000000300)=0x9}) (async) r15 = socket$l2tp6(0xa, 0x2, 0x73) (async) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2000, 0x100, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r15, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1, 0x4e23, 0x0, 0x4e20, 0x4, 0x8, 0x0, 0x40, 0x0, 0x0, r16}, {0xab, 0x1, 0xf889, 0x3, 0x3, 0x7, 0x7, 0xffffffffffffffff}, {0x10001, 0x8, 0xffffffffffff0001, 0x4}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x1, 0x3}, {{@in6=@remote, 0x4d4, 0xff}, 0xa, @in=@multicast2, 0x3506, 0x4, 0x2, 0x40, 0x8, 0x0, 0x1}}, 0xe8) 4.263472229s ago: executing program 2 (id=1183): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@gettaction={0x40, 0x32, 0x10, 0x70bd25, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd4}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0xc0) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) 4.251680181s ago: executing program 2 (id=1185): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000340)={r1, &(0x7f0000000100)='\x00', 0x10202, &(0x7f0000000240)={@align=0x2, {0x1, 0x7938, 0x8, 0x6}}, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0x8}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000380)={0x4f39, 0x25000, 0x1, r2, 0xe}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000700)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000780)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r4}}, 0x18) (async) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x6, 0x4, 0x0, 0x0, @adapter={0x8, 0x0, 0x4, 0xc, 0x9}}]}) (async) r5 = socket(0x10, 0x3, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {0x0}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f5631012fa0788c5b17f98cc34720b0", 0xf3}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae4864", 0x62}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f00000011c0)}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f702a9bd45a1d7bec2b2ccf08c24fec06bd18667119d193444ed6c60c641f54a3826524167885f2542b1bef1", 0xc0}], 0x8, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a", 0xdb}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898a", 0x88}, {0x0}, {0x0}, {0x0}], 0x5}}], 0x1, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async, rerun: 32) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) (async) sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) 4.010936915s ago: executing program 2 (id=1189): syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) 4.010239768s ago: executing program 2 (id=1190): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)={0x20, 0x11, 0x74, {0x74, 0x8, "f5774d4dcc13c3267a1567420d49f70cc1393c58618222e41ba261b6a591950d78850e53b10ebc6ee25d6c032c100a827a54ca67e615ecf2b7f56d9858012b9217ccc616d9fd85c76d6b1c605865ef3106be96d857fd9f354c2399e89d2442a6cd16d690befb3a6da2cbeb4d501818ae9262"}}, &(0x7f0000000140)={0x0, 0x3, 0x70, @string={0x70, 0x3, "068a09db01920d7425868b84141ddcc08a2f439b55e361a6a7f3d4ef5adda6c900e1d05f06b627da7c9547c6ac91b6d563cad817911c31efbd0a3c61a09348721d3e13562fbafc496c1e7bc02bf44862e6dc14af676f5159816186771e68b3956db1e68897594e451f7980d185e7"}}, &(0x7f0000000200)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x4, 0x1, 0x9, "3ae2767d", "266ff899"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd, 0x8, 0x8, 0x9, 0x1, 0x7}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000380)={0x40, 0x1, 0x45, "2a92d92dde7ab4441a8ebe1005b2a32c2121d171bca8114c9d967dfa99068d0385f868a88a2c96fbc39dc2a6823737ece39248a06576f8015a90da401b712b7fd3f3dc33e9"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1e0, 0x20}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000580)={0x40, 0xb, 0x2, "39fb"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000600)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000640)={0x40, 0x17, 0x6}, &(0x7f0000000680)={0x40, 0x19, 0x2, "9ca3"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x4}}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@deltfilter={0x1278, 0x2d, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x7, 0xe}, {0x4, 0xfff1}, {0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1244, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff8, 0xc}}, @TCA_MATCHALL_ACT={0x1238, 0x2, [@m_skbedit={0x74, 0x5, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0x5}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5c}]}, {0x36, 0x6, "7f2013866348f7660c9d6bcd5d0eed4c47d0adb3ca2dab660aa9f90014a18e2ae07999dce901772adf051a8452ff71534ee1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0xd8, 0xa, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}]}, {0xa2, 0x6, "a325f11cb1b30d0d453c128636b73bb4d5b7922772031a2f93802575538e47de57c8272805cd16f1868cf1fee504a53312c46a776e638e36fe8eabec4ece7ff998170f5f23364daacb0ff06cef918cb9975d77aaa8e88e32add760d1ee827fd1e528b6f8405eb934922ac3f511f6ede672e9d2b025391f1b112c8347ddcba8b0bd24787fa3e5509e87601a71bcbb743bff1a94595e8446bd2d74b5c74485"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x44, 0x1f, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @empty}]}, {0x6, 0x6, "e28d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x98, 0x13, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0xe0f0a}, @TCA_MPLS_TC={0x5, 0x6, 0x4}]}, {0x53, 0x6, "bcde5c22b6fb037207034b06128dda35d6686c78123e6b9c5d0a05962bd9c01cc0b51c129e348eee46d7e9b5dd2b9a7044ddcb4fb32f8de0beba9a1a6dc3dbb8d1dbb982183e12e518f0b5241a3048"}, {0xc}, {0xc}}}, @m_xt={0xdc, 0x16, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}]}, {0x6f, 0x6, "764c6f3920b22dec2a2c3a045449b1b7c04072480eaa37938074cc2228426cceda6908195b2dcc662a8567bbe36f036ec5e185560c8cc14dc79be9b9a4324a2203a74683f186f244acc11272c938b7ba243af2b8f7247068ef861359211be87444f38b6bff21309ef59ba8"}, {0xc}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x90, 0x1d, 0x0, 0x0, {{0xc}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffff7, 0x3, 0x8, 0xa9, 0x9}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0xfff2}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1000}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xffffffff}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xff4ce937, 0x7fff, 0x4, 0x2, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1bc7fa0e058f811c, 0x1}}}}, @m_pedit={0xea0, 0x20, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xe1, 0xd, 0x20000000, 0x3, 0x2}, 0x5, 0x4e, [{0x8, 0x9, 0xa, 0x2, 0xe088, 0xfffffffa}]}, [{0x1, 0x0, 0x8000, 0xd, 0x100, 0x80000000}, {0x7, 0x6, 0x81, 0x7fffffff, 0x2, 0x800}, {0xde, 0x5, 0x6ce6, 0x7, 0x5, 0xfffffffb}, {0x2, 0x1000, 0x3, 0x9, 0x4cf1, 0x1}, {0xfff, 0x2b, 0x8e, 0xffff7fff, 0xffffffff, 0x7}, {0x7fff, 0x6, 0x5c2d, 0x6, 0x9, 0x7ff}, {0xc6b8, 0xffff, 0x80000001, 0x6, 0xa052, 0x4}, {0xffff, 0x7, 0x81, 0x5, 0x8, 0x23b}, {0x3, 0x6, 0x9, 0x92d3, 0x8, 0x3}, {0x4, 0xd5c1, 0xa1ed, 0x5, 0x1, 0x7}, {0x6, 0x8, 0x7, 0x936, 0x3ff, 0x87}, {0x80, 0x3, 0x20, 0x2, 0xfffff489, 0x3}, {0x629a, 0x8, 0x80000000, 0x528a, 0x1, 0x7}, {0x0, 0x5, 0x7, 0x2, 0x4, 0x5}, {0x401, 0x8, 0x10, 0x9, 0xffffffff, 0x7}, {0x1, 0xc7ef, 0x5, 0xfc, 0x8000}, {0x9, 0x0, 0xff, 0x5, 0x2f5b8b97, 0x7}, {0x81, 0x1000, 0x7, 0xe24, 0x9, 0x4}, {0x1, 0xfffffffd, 0x200, 0x80000000, 0xfffffff3, 0xa6}, {0x2, 0x8c, 0x0, 0x2, 0x10001, 0x40}, {0x5, 0x9, 0x6, 0x9, 0x6, 0x1}, {0x1, 0x7, 0xd36, 0xffff8000, 0x400, 0x4}, {0x401, 0x7fff, 0x9, 0xffffff91, 0xfffffff3, 0x9}, {0x2, 0x9aeb, 0xfff, 0x8, 0x4, 0x2}, {0x8001, 0x80, 0x1, 0x4, 0x2, 0x3}, {0x5, 0x9ff6, 0x9, 0x1, 0x6, 0x10000}, {0xfffffffb, 0x5, 0x3, 0x34d, 0xffffffa5, 0x253}, {0x6, 0xba2, 0x0, 0x9, 0x100, 0x4c6}, {0x1d, 0x6, 0x7, 0x2, 0x2, 0x1000}, {0x7, 0x4b15150, 0x8, 0x4, 0x8, 0x1}, {0xffffff5c, 0x4, 0x3, 0x3, 0x2, 0x751}, {0x1000, 0x1, 0xa, 0x8, 0x200, 0x6}, {0x8, 0x3, 0x7, 0x4, 0x37e23f5d, 0x3c9}, {0x6, 0x7, 0x80, 0x31a1, 0x2b21, 0x9}, {0x1, 0x0, 0x7f, 0x68e8, 0x3ff, 0xffff}, {0x9, 0x4, 0x5, 0x98c, 0x1, 0x1}, {0x3, 0x8, 0xe, 0x0, 0x9, 0x3}, {0x2, 0x7, 0x8d45, 0x6, 0x46, 0x140000}, {0x5, 0x6, 0xf456, 0x8, 0x8, 0x5}, {0x5ca, 0x7, 0x0, 0x9, 0x8, 0x694}, {0x6, 0x5, 0x8, 0x7f, 0xc, 0x9}, {0x8, 0x4, 0x3, 0x8, 0x85, 0x7}, {0x2, 0x97, 0x9, 0x3b03, 0x1, 0xfffffff4}, {0x5d, 0x0, 0xffff, 0xffffca30, 0xbc6, 0x7}, {0x9, 0x2, 0x3ff, 0x101, 0x2, 0x2}, {0x0, 0x8, 0x4, 0x5686, 0x4, 0xfff}, {0x242, 0x653b, 0x34fab22d, 0x6, 0x87f, 0x10}, {0x1, 0x101, 0x200, 0xd72, 0x9, 0x3}, {0xfff, 0xfffffff9, 0x80000000, 0x40, 0x6, 0x5}, {0x3, 0x7, 0x6, 0x9, 0x200, 0x5}, {0xa9, 0xfffffff9, 0x726b, 0x9, 0xa, 0x100}, {0x1000, 0x3, 0x2, 0x5, 0x101, 0xd}, {0xd, 0x9, 0x4, 0x5, 0x6, 0x7f}, {0x3e178140, 0x3, 0x2, 0x5, 0xb, 0xffffffff}, {0x8, 0x4, 0xdb01, 0x8, 0x5, 0xff}, {0x8, 0x1, 0xffffff3d, 0x0, 0x3, 0x81}, {0x8, 0x0, 0x2, 0xfffffff9, 0x1, 0xe}, {0x5, 0x1ef, 0xe1d3, 0x400, 0x401, 0x7f}, {0x3, 0x44, 0xfffffdc5, 0xa, 0x6c, 0xff}, {0x7ff, 0x6, 0x2, 0x1ff, 0x5, 0x6}, {0x9, 0xdf55, 0x2, 0x800, 0x2}, {0x3, 0x5, 0x4, 0xfffffff4, 0x5, 0x5}, {0x8, 0x4, 0xfffffff4, 0x8000, 0x8, 0xffff8001}, {0xe3d2, 0x3, 0x9, 0x20b6d1eb, 0xfffffffb, 0xc17}, {0x80c9a11, 0x7, 0x401, 0xfffffff8, 0x4, 0x1}, {0x3, 0x4, 0x8, 0x80000000, 0x0, 0x80000000}, {0x10000, 0x6, 0x10001, 0x3, 0x4, 0x5}, {0x0, 0x5, 0xfffffffc, 0x8, 0x6, 0xaf3}, {0xff, 0x7c, 0x75, 0xfffffffd, 0x7fff, 0x6}, {0x94c, 0x7b2e, 0x0, 0x8, 0x7, 0x5}, {0x100, 0x7f, 0x80000001, 0x800, 0xb, 0x1}, {0xfff, 0x0, 0x4, 0x4, 0x80000000}, {0xd, 0xcd, 0xf, 0x4, 0xf37, 0xd}, {0x4, 0x9, 0x7, 0x0, 0x3, 0x31}, {0x3, 0x9, 0xfffffff9, 0x8, 0x3, 0x9}, {0x6, 0x9, 0x0, 0x3, 0xfffff00f, 0x7}, {0x9, 0x27be, 0x8, 0x700, 0x1000, 0x2}, {0x6, 0x8, 0xc, 0x559, 0xa4, 0x66a}, {0x9, 0x7, 0x9, 0x7, 0x24, 0xc}, {0x0, 0x1, 0xe, 0x400, 0x7ff, 0x2}, {0x1, 0x8000, 0xf82, 0x5, 0x2, 0x2ce3}, {0x7, 0x1, 0x5, 0x7, 0x8, 0x1}, {0x7, 0x50800000, 0x6, 0x8000, 0x3ff, 0x5}, {0x6, 0x1, 0x7f, 0x1, 0x5, 0xffff}, {0x0, 0x5, 0x81, 0x4, 0x63c6, 0x8}, {0x621, 0x0, 0x8, 0x1843, 0x8, 0x3}, {0xecca, 0x8, 0xf86, 0x9, 0x2, 0x2}, {0x6, 0x1ff, 0x0, 0xff, 0x0, 0x9}, {0x6, 0x4f, 0xfffffffa, 0x6, 0x1, 0x6}, {0x5a, 0x4, 0xff, 0x8, 0x5}, {0xac6a, 0x1, 0xe, 0x0, 0x7ff, 0x2386}, {0x0, 0x4, 0x3, 0x9221, 0x8, 0xfffffffe}, {0x401, 0xbc30, 0x3, 0xfffffffa, 0x9}, {0xfffffffa, 0xffff89e9, 0x8, 0x9, 0x0, 0x40}, {0x9, 0x0, 0x9, 0x3, 0x5, 0x1ca}, {0x7, 0x7, 0xf, 0x0, 0x80000000, 0x3ff}, {0x0, 0x101, 0x6, 0xfffffffd, 0x8, 0xf82}, {0x6, 0x1, 0xf, 0x8, 0xffffffd8, 0x1ea5}, {0x8, 0x4dc0, 0x3, 0x8001, 0x9, 0x7}, {0x7, 0x5, 0x80, 0xf, 0x4, 0x1504}, {0x9, 0x49, 0x1, 0x9e, 0xa, 0x2}, {0x6, 0x0, 0x10000, 0x0, 0x401, 0x4}, {0x8, 0x5, 0x2, 0x7, 0x57, 0xffffff7f}, {0x8, 0x9, 0x8d, 0x8, 0x7, 0x9}, {0x9, 0x7, 0x886, 0x2a26c8fd, 0x100, 0xa03}, {0x4, 0x101, 0x3, 0x2, 0x7, 0x9}, {0x1000, 0x7, 0x1, 0x0, 0x800, 0x6}, {0xb, 0x1, 0x5, 0x9, 0x55e, 0x3}, {0x0, 0x0, 0x9, 0x10, 0xa23b, 0x4}, {0x9, 0x7, 0x100, 0xa, 0x80000000, 0xffffffff}, {0x8, 0xa01, 0x4, 0x1, 0x5, 0x36}, {0x94e, 0x7fffffff, 0x9, 0x2, 0x805c, 0x4}, {0x7, 0x7, 0x0, 0x7, 0x4, 0xfffffffe}, {0x3, 0x5, 0x6, 0xe2, 0x7fff, 0xfffffbff}, {0xd, 0x3, 0x8, 0x10000, 0x5, 0x8805}, {0x8000, 0xd4, 0x633, 0x0, 0x8, 0x80}, {0x6, 0x5, 0x1, 0x6, 0xfffffff9, 0x34}, {0x7, 0x80, 0x1, 0xffffffff, 0xd3, 0x10001}, {0x6, 0x8001, 0x0, 0xe3e, 0x7f, 0xe}, {0x7fff, 0x6, 0x2, 0x9a, 0x8, 0x8}, {0x5, 0x3, 0x4, 0x3, 0x8, 0xc000}, {0x8, 0x8, 0x0, 0x1ff, 0x9, 0x10001}, {0x2aba, 0x5, 0x3ff, 0xc000, 0x7, 0x8}, {0x0, 0xff, 0x7, 0x3, 0x3, 0x5}, {0x401, 0x3ff, 0x4, 0x100, 0x0, 0xeab}, {0x7, 0xffffffff, 0x9, 0x100, 0x5, 0x7}, {0x4, 0x6, 0x40, 0x4, 0x6, 0x2}, {0x5, 0x6, 0x2, 0x3ff, 0x8, 0x8}], [{0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x4}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {}, {0x3, 0xfe16682dba4c78a7}, {0x5}, {0x1}, {}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x4}, {0x4}, {0x1, 0x1}, {0x3}, {0x5}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x3}, {}, {0x4}, {0x3}, {0x3, 0x1}, {0x2}, {0x1}, {0x2}, {0x2}, {0x6, 0x1}, {0x1}, {}, {}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x4, 0x2}, {0x3}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}], 0x1}}]}, {0x3a, 0x6, "624a9138a105a34aaea01ae4d3a362db491d4c5d31464c8f0618e85affbd02b5f0a9ee3655689eb52d983df69447c4d78329da93208b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x1278}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 920.777513ms ago: executing program 2 (id=1222): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f00000000c0)={&(0x7f00000008c0)=[{0x1, 0x1, 0x0, {0xafe7, 0x1, 0x2}}, {0x7fffffff, 0x2, 0x0, {0x40, 0x8, 0x1}}, {0x0, 0x0, 0x0, {0x80000000, 0x80, 0x1}}, {0x1, 0x0, 0x0, {0x3, 0x74, 0x1}}, {0x1, 0x0, 0x0, {0x5, 0x5775}}, {0x2, 0x0, 0x0, {0xa531, 0x3ff, 0x1}}], 0x6, 0x20, 0x1ebd, 0xfffffffffffffff9}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000800180006ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) (async, rerun: 64) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57dfe09000000001400"}}}}}}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000240)='pids.events\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 628.988567ms ago: executing program 2 (id=1224): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bind$netrom(0xffffffffffffffff, 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 500.573972ms ago: executing program 4 (id=1227): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x249}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x3, r4, 0x7ffffff5, 0x8000ffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, 0x0, 0x4d, 0x7, 0x800, 0x0, {0x80000001, 0xfff, 0x0, 0x6, 0x9, 0x9, 0x5, 0x100, 0xb, 0x2, 0x0, 0x8, 0x5, 0x6, "4e80de46358e7f255a5d3f52e16f724fd04ef0eb3e6202d127cf9208f8a3226c"}}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 450.863093ms ago: executing program 5 (id=1228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a40300001e0a05010000000000000000070000070900020073797a31000000000900010073797a300000000078030380740300800800034000000002680301"], 0x428}}, 0x40088) openat$rtc(0xffffffffffffff9c, &(0x7f00000015c0), 0x80000, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0xfffffe57) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3ff, 0x2) r3 = dup2(r2, r2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000280)={0x0, 0x2, 0x0, "adbdee06009e4aeabde9eefaff7a78cda902552f08cef4a662dd836c7451f8e5"}) accept4(r1, 0x0, 0x0, 0x800) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x40, 0x1}}}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006", @ANYRES16=r8, @ANYRES64, @ANYRES64=r8], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0xfe73, &(0x7f0000000300)={&(0x7f0000000140)=@ipv4_getaddr={0x0, 0x16, 0x20, 0x70bd25, 0x25dfdbfc, {0x2, 0x80, 0x22, 0xfd, r8}, [@IFA_TARGET_NETNSID={0x0, 0xa, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r9, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140), 0x14) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 377.695252ms ago: executing program 5 (id=1229): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x70bd2a, 0x25dfdbfd, {0xa, 0x80, 0x84, 0xc8}, [@IFA_LOCAL={0x14, 0x2, @private2}, @IFA_CACHEINFO={0x14, 0x6, {0x1f, 0x5, 0x3, 0x4}}]}, 0x40}}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000001c0)={0x44, r4, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r7, 0x80044dff, &(0x7f0000000280)) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003a00010339bd7000fcffffff04000000b3162890365874a75da14d650d4369a58d3557a53b7341bd7ff64ab3caa8b2f1c0cadaa4565b791670cddcb87604973c090bad2d9ce2ce8f0ddf7119a281a30452f145dd5adc152b9d37a90695db26313acc6f7f01af8e54cb37e2a12c1972d8b506545e923ed1c2a7dc132be164d5d8aec4bb58307b3db95358efd592bbdb2e14565cb36c7e1e3d35f38502245a5892807a0ca4d1dd1f3ce740e52210962f9d96d1da58bf0fed7047b0f529735426efd48ede2d7f19c2ea5f840dcf32e7b17bc55a3c625d019b219b56734601012cae5f5b20f559d9e8fa04928bb54e10ddbe381a7a44"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX=r6, @ANYBLOB="01012abd"], 0x24}, 0x1, 0x0, 0x0, 0x240000c4}, 0x4040000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x70bd2a, 0x25dfdbfd, {0xa, 0x80, 0x84, 0xc8}, [@IFA_LOCAL={0x14, 0x2, @private2}, @IFA_CACHEINFO={0x14, 0x6, {0x1f, 0x5, 0x3, 0x4}}]}, 0x40}}, 0x4000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000001c0)={0x44, r4, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) ioctl$SOUND_MIXER_READ_RECSRC(r7, 0x80044dff, &(0x7f0000000280)) (async) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003a00010339bd7000fcffffff04000000b3162890365874a75da14d650d4369a58d3557a53b7341bd7ff64ab3caa8b2f1c0cadaa4565b791670cddcb87604973c090bad2d9ce2ce8f0ddf7119a281a30452f145dd5adc152b9d37a90695db26313acc6f7f01af8e54cb37e2a12c1972d8b506545e923ed1c2a7dc132be164d5d8aec4bb58307b3db95358efd592bbdb2e14565cb36c7e1e3d35f38502245a5892807a0ca4d1dd1f3ce740e52210962f9d96d1da58bf0fed7047b0f529735426efd48ede2d7f19c2ea5f840dcf32e7b17bc55a3c625d019b219b56734601012cae5f5b20f559d9e8fa04928bb54e10ddbe381a7a44"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX=r6, @ANYBLOB="01012abd"], 0x24}, 0x1, 0x0, 0x0, 0x240000c4}, 0x4040000) (async) 376.639022ms ago: executing program 5 (id=1230): r0 = socket$alg(0x26, 0x5, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x1) futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01010000004a3200000049d0d6fa9525278bf6ff00000000417d5cafcf835190f6f7df"], 0x0, 0x1a}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002f80)=@newtaction={0x1830, 0x13, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x181c, 0x1, [@m_skbmod={0x98, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x919}]}, {0x64, 0x6, "07cb83bad5c6d5800107ccc9d254343832881a8257355226959513fbab061f2cb1590a724f92abc0dd721faaf9a97f8d316e5d3b2b6e2243e0f177dd2348c8cd6cb5cd8fc8be809bfd547c04835e448d632b2ecc38fc087499b4e9fa127a2511"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x208, 0x13, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x1, 0x0, 0x800, 0x1}, 0x2a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x5, 0x8, 0x5}, 0x3}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7f, 0x0, 0x7, 0x8, 0x8000}, 0x51}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x10000, 0x4, 0x2, 0x80}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3e06, 0xb, 0x6, 0x1ff, 0xffffffba}, 0x23}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x4, 0x4, 0x7fffffff, 0x100}, 0x5b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xff, 0x6, 0x9, 0xbf99}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xf9, 0xacd3aeb2d6345e5c, 0x5000, 0xee42}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x5, 0x5, 0x5, 0x6}, 0x4c}}]}, {0xdd, 0x6, "c38a384d3c13278608e38ea3a3ba9faa0f76664337877161077eccdd79b3da544b9b6585c18918a9ad24ac7cae5614e16839352c1954fae540d24d580637d167624c13d5ab6a6e0ece11565566cd54293e1d6d9a4d8666d5657404ff6b31b517ed878e182db496b5cf5649c91b5241b0c413fdaea371e8efc52cc1d3e04afcb0d8e82ffd0860afd778c8f07f2680bde4716bc0565eddd8089a02153b387ac656bf3dc12c57e8d68e27d43b880bc564d2b9c787e48dbb594272618d308e85301e99a1adf614091e339f2da3663955fb8fe527606b15695ec712"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_police={0x1174, 0x6, 0x0, 0x0, {{0xb}, {0x1090, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0xdbd}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x2, 0xffffffff, 0x4, 0x2, 0xffffffff, 0x7fffffff, 0x1ff, 0x4, 0xfffffff8, 0x7, 0x8, 0xfffffffa, 0xd, 0x7, 0x2, 0x2, 0x2, 0x3d, 0x6f6, 0x4, 0x8, 0x9, 0x80000001, 0x5, 0x0, 0x6, 0x8, 0x0, 0x1, 0x7d21, 0x7, 0x8, 0x3, 0x8, 0x2, 0x6, 0x6, 0x1, 0x3ff, 0xc, 0xc97, 0x7, 0x2, 0x1, 0x6, 0x5, 0x2, 0x7, 0x81b3, 0x0, 0x1, 0x1, 0x6, 0x9, 0x3, 0x8, 0xb, 0x0, 0xb25c, 0x401, 0x0, 0xff, 0xf1, 0x7f, 0x7, 0xe34d, 0xfffff322, 0x2, 0x1d, 0xaa7, 0x4, 0x3, 0x6, 0x6, 0x3ff, 0x8, 0x10001, 0x8, 0x1, 0x3, 0x6, 0x7, 0xeb1800, 0x6, 0x7, 0x4, 0x954, 0x468, 0x80, 0x32, 0x7b, 0xd, 0x7, 0x101, 0x9, 0xf, 0x7, 0x1, 0x9c44, 0x7fff, 0x63b2, 0x3, 0x3, 0x9, 0x5, 0xffff, 0x0, 0x21c4, 0x3, 0x2, 0x4, 0x1, 0x1, 0xfc5, 0xf, 0x53f, 0x8001, 0x5, 0xaa6, 0x6, 0xfff, 0x4, 0xbd6, 0xbdb, 0xff, 0x1, 0x2, 0x400, 0x1, 0xc3f6, 0x4, 0x1, 0x1, 0x1ff, 0x1, 0x5654, 0x3cfa6489, 0x8, 0xd697, 0x200, 0x6, 0x3ff, 0x0, 0x10, 0x55, 0x4, 0x0, 0x7, 0x3, 0x0, 0x1, 0x3, 0x7fff, 0x5, 0x9, 0x7, 0x1000000, 0x9, 0x6, 0x1, 0xa92, 0x67b, 0xd6, 0x8, 0x7, 0x8, 0x1800, 0x8, 0x596, 0xfffffff8, 0x0, 0x4, 0xffffffff, 0x5, 0x3ff, 0x7, 0xf, 0x9, 0x8, 0xa4e5, 0x9, 0x3, 0x2, 0x5, 0x400000, 0x1, 0x7, 0xe92, 0x2, 0x1, 0x2, 0x5, 0x3ff, 0xffff, 0x40000000, 0x6, 0x8, 0x4, 0xfff, 0x6, 0x80000001, 0xfffff80b, 0x6, 0x2000000, 0xd04, 0x5, 0x52bd5f4d, 0xffffffff, 0x5, 0x3a, 0x5, 0xc, 0x5, 0x7, 0x80, 0x3, 0x72, 0x54, 0x1, 0x846b, 0xa, 0xb741, 0x9d, 0x9, 0x10000, 0x10001, 0x6, 0x4, 0xcf3, 0xeda5, 0x5, 0x0, 0x3b41, 0x28000000, 0xd, 0x7fffffff, 0x1, 0x81, 0x3, 0xffff, 0x24, 0x7fff, 0x9, 0xe, 0x8000, 0x7, 0x3, 0x6d2, 0x4, 0x400, 0x1, 0x3, 0x80000000, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7fff, 0x14, 0x6, 0xe, 0xb, 0x3, 0x7, 0x6c2b, 0x7, 0x48, 0x7fffffff, 0x6, 0x2, 0xc, 0xb, 0x7, 0x2, 0x1, 0xf2f9, 0x100, 0x1ff, 0x0, 0x6, 0x80000000, 0x7fff, 0x7fff, 0x1ad9b6ca, 0xfffffff9, 0x80000000, 0x9, 0x3, 0xffffffff, 0x3, 0x3, 0xd, 0x3, 0x40000, 0x7, 0x7, 0x200, 0x3ff, 0x8, 0xffff, 0x5, 0x8, 0x5, 0x2, 0x351a, 0x9, 0xceb, 0x3, 0x2, 0x0, 0x0, 0x4a3b, 0x8, 0x4, 0x5951, 0x9, 0x2, 0x16d2, 0xa, 0x4, 0x4, 0x7, 0xaf4, 0x10, 0x9, 0x5, 0x9, 0x2, 0x7, 0x6, 0x6, 0x7, 0x2, 0x100, 0x610, 0x8, 0xe, 0x2, 0xa1, 0x4, 0x3affa1cd, 0x0, 0x800, 0x3ff, 0x1000, 0x1, 0x6, 0xfffffefd, 0x2, 0x563, 0x2, 0x80, 0x70b, 0xf, 0x46, 0x80000000, 0x80000000, 0x3, 0x2, 0xa, 0x1, 0x3, 0xfffff17f, 0x7ff, 0x1, 0xa, 0x7fffffff, 0x90000000, 0x9, 0xa, 0xb, 0x5, 0x1, 0xbd07, 0x8001, 0xfffffffa, 0x2, 0x4, 0x7, 0x3, 0x7, 0x5, 0x10001, 0x4, 0x714, 0x80000001, 0x3, 0x1, 0xfa, 0xffffffff, 0xfffff92b, 0xb4, 0x8, 0xc, 0x4, 0x10001, 0x7, 0x4, 0x5, 0x2, 0x5, 0xdad1, 0x6, 0x6, 0x7, 0x9, 0x1, 0xc1c, 0x4, 0x4, 0xd, 0x99, 0xd, 0x157, 0x2, 0x0, 0xe7, 0x7, 0xd4, 0x6, 0x2, 0x3, 0x4000000, 0x171, 0x1, 0x7, 0x7, 0x10, 0x0, 0x80000000, 0xf, 0x8, 0x2, 0x80000, 0x2, 0x2, 0x1, 0x3, 0x3, 0x7, 0x77, 0x6, 0x7, 0xfffffff7, 0x6, 0x3, 0x5, 0x91, 0x31c, 0xf9, 0x9, 0xc, 0x3, 0x5, 0xfffffffd, 0xfffff001, 0x6, 0x5, 0x0, 0x2, 0x4c4, 0x6, 0x7, 0x5, 0x4, 0x2, 0x2, 0xfffffffc, 0xffffffc0, 0xf9, 0x6, 0xe, 0x7fffffff, 0x8, 0x8, 0x8, 0x1, 0xffffffff, 0x10001, 0x9, 0x7fffffff, 0x6b06, 0x7ff, 0x4, 0x7, 0x9, 0xe, 0xff, 0x1500, 0x7fff, 0x5, 0x6, 0x5, 0x54, 0x2, 0x4, 0x5dc9aaa7, 0x1ff, 0x9, 0xd, 0x2, 0x242, 0x64ea, 0x0, 0xfffffff7, 0x8, 0x2, 0xd1, 0x75b0, 0x8, 0x0, 0x2, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x36c, 0x9, 0x8, 0xfffffffd, 0xcbb, 0xfe, 0x3ff, 0x2, 0x845, 0x3, 0x6de, 0x23b3, 0xffff, 0x6, 0x0, 0x5, 0x6, 0xb827, 0x9, 0x3, 0x6, 0xe, 0x10000, 0x7, 0x5, 0x8000, 0x6, 0xffff0000, 0x6, 0x5, 0x7, 0x9, 0x6, 0x4, 0x7411, 0x8, 0x80000000, 0x8563, 0x1, 0x1, 0x8, 0x6c3, 0x0, 0x10001, 0x849, 0x7f, 0x8, 0x4, 0x8, 0x2799a230, 0xdcf, 0x8ae, 0x3, 0x2, 0x100, 0x9, 0x8, 0xc, 0x7, 0x2, 0xd35, 0x1000, 0x3, 0xfffeffff, 0x7, 0x7, 0x0, 0x8001, 0xb, 0xfffff801, 0x2, 0x8, 0x5, 0x101, 0x6, 0x2, 0x100, 0x92, 0x4, 0xfffffff1, 0xd907, 0x2b3, 0xfffffffc, 0xa2200, 0x3, 0x200, 0x6, 0x4, 0x4, 0xb315, 0x2, 0x7254, 0x5, 0xfffffe00, 0x4, 0xb, 0xd, 0x7, 0x8001, 0x100, 0x1, 0x8, 0x4bf08515, 0xfffffff7, 0x1, 0xffffff4e, 0x8, 0x0, 0x5, 0x3, 0x5, 0x4, 0x400, 0xb08, 0xf, 0x10001, 0x3cf, 0x518, 0x11e, 0x3d7, 0x72a, 0xfffffffd, 0xfffffffb, 0x9, 0x2, 0x0, 0x9, 0x6, 0x6, 0x800, 0x1, 0x4, 0x2, 0xfb27, 0x2, 0x3, 0x0, 0xe, 0x5, 0x0, 0x80, 0x46c, 0xe7f1, 0x7, 0x4, 0x1, 0x4, 0x6, 0x4, 0x100, 0x7, 0x1, 0x2, 0xffffffde, 0x8, 0x1, 0x8, 0x3, 0x8, 0xfffffffd, 0x100, 0x2, 0x80000001, 0x8000, 0xaa9, 0x1, 0x7, 0x101, 0x94f, 0x7, 0x10001, 0x7, 0x6, 0x0, 0x9, 0x60, 0x8000, 0x7, 0x7, 0x2, 0x5, 0x1, 0x9, 0x2b02, 0x3b, 0x2, 0x1000, 0x0, 0x4, 0x7, 0x10000, 0x7, 0x78b4, 0xd754, 0x5, 0x850, 0x0, 0xef, 0x6, 0xfffffffc, 0x81, 0x7, 0x1ff, 0x7, 0x4, 0x2, 0x5, 0x4, 0x10000, 0xb08, 0x5, 0xe, 0xdb5, 0x0, 0x8, 0x0, 0x80, 0x0, 0xa, 0x0, 0x0, 0x6, 0x1, 0x1, 0x51, 0x0, 0xf, 0xfffffff4, 0x8, 0x3ff, 0x8f5, 0x41cb, 0x5, 0x88, 0x0, 0x3, 0x9, 0x7, 0x9, 0x4, 0x3, 0x1, 0x80, 0x2, 0xba, 0x10000, 0x6c2, 0x6, 0xb07e, 0x7, 0x8f, 0xfffffffb, 0x3, 0x3, 0x92, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xffffffffffffffff, 0x9, 0x80, 0x1, {0x1, 0x0, 0x3, 0x4, 0x5, 0x7fffffff}, {0x0, 0x0, 0xff, 0x8, 0xf800, 0xfffffff7}, 0x9, 0x3, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x3, 0x2, 0x3, 0x7, 0xc9a, 0x1, 0x7, 0x15bc, 0x3, 0x9, 0xb0df, 0x7, 0x9, 0x2dd9, 0x44, 0x3ff, 0x9, 0x3, 0x5, 0x4, 0x80000001, 0x3, 0x7fff, 0x8, 0x8, 0xfffffff0, 0x7f, 0x0, 0x9, 0x0, 0x4fd, 0xfffffff8, 0x5, 0x101, 0x0, 0x6a6, 0x71, 0x10000, 0xf, 0x9, 0x7, 0x3, 0x5, 0xdcbb, 0x6, 0x9, 0x1, 0x10001, 0x6, 0x101, 0x0, 0x7fffffff, 0x0, 0x400, 0xfffff801, 0xffffffff, 0x81, 0x16e0, 0xb884, 0x5, 0xfffffa35, 0xbb, 0x4, 0x8, 0x2, 0x8, 0x4, 0x7, 0x10, 0x40, 0x1, 0x3ff, 0x9, 0x81, 0x6, 0x10000, 0x2, 0x3, 0x3895, 0x76880, 0x1, 0xffc00000, 0x6, 0x1, 0x6, 0x8000, 0x7, 0x8, 0x8, 0x1, 0xe, 0x4, 0x7, 0x3, 0x8, 0x0, 0x19d30527, 0x8, 0x2, 0x709, 0x6, 0x1, 0x51, 0x6, 0x8, 0x0, 0x3, 0x52, 0x7f, 0x6, 0x0, 0x2, 0x6, 0x0, 0x2, 0x1, 0xa0, 0x8, 0x89, 0x10, 0x3, 0x3, 0x9, 0xe73, 0x2, 0x2, 0xc, 0x401, 0x9, 0x4, 0x1, 0xfff, 0x6, 0x9, 0x6, 0x4, 0x6, 0x0, 0x6, 0x8d2f, 0x3, 0xf, 0x6, 0x45d5b94a, 0x5, 0x2, 0x1000, 0x2, 0x80000001, 0x8, 0x1, 0x0, 0x8d79, 0x10000, 0x7, 0x7, 0xfffffffa, 0x5, 0x360, 0x0, 0x2, 0x6, 0x6, 0x40, 0x8, 0x1, 0xc, 0x9, 0xe, 0xfffffffd, 0x9, 0x8ca, 0x8, 0x1, 0x10001, 0xe, 0x40, 0x5, 0x2, 0x400, 0x6b, 0x8ec2, 0x0, 0x3000, 0x1, 0x8, 0x0, 0x3, 0x1, 0xa463, 0x7f800, 0x100, 0x80000000, 0x6, 0xce, 0xeab8, 0xaa, 0x6, 0xf8, 0xd, 0x9, 0x3, 0x0, 0x480, 0x8, 0x36, 0x7fffffff, 0xb, 0xb90, 0xed54, 0x5, 0x4000, 0x3, 0x2a2, 0x8, 0x3, 0x8, 0x2, 0x0, 0x2, 0xa, 0x657, 0x8, 0x1, 0x9, 0x3, 0x2, 0x100, 0x40, 0x5f58012f, 0x6, 0xa762, 0x1, 0x9, 0xfc, 0x80000000, 0x5, 0x6, 0x2, 0x4, 0x7, 0x62, 0x2, 0x6, 0x30, 0x5, 0x6, 0x1, 0x3, 0x45c, 0x7, 0x7f, 0x1a9, 0x8, 0x6e5]}]]}, {0xba, 0x6, "75710b2cedb2eb8e07b274b008f0bb60904ceab170009e6cd6bc66a522597c28301982b0319d85b4b80ff600fdc6db396778d6b7c5d2a25b76fd022e1223545aa49c3c97b522da930914fbfa3d8bbe123efb184fe99c2355c7f1b81ccd30e191adfaaf38b561e15c18d6748bcece02854ffb2d5477ad181bb1fb39ce54ae543de9eeb37872e8dc8c39c3169aa6772cbb0059889170ce38fd4d459bb26fbf2c42c69f7db6eeaf59bd7343aa44deb76be08bf3243ab874"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x1fc, 0x12, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xf, 0xffffffffffffffff, 0x0, 0x1}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x9, 0x6, 0x452, 0x7}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xffffff99, 0x20000000, 0x0, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe9, 0x4f7, 0xffffffffffffffff, 0xfffffff1, 0xcd7}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x5, 0x0, 0xffffffff}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x8, 0x20000000, 0x4, 0xe}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x100, 0xf6e, 0x7, 0xffff0000, 0xfffffffb}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fff, 0x1ff, 0x2, 0xcad, 0xffffffff}, 0x4}}]}, {0xcd, 0x6, "42ceb2946ace93738cd3a4d4eaa26f79c848ed669977f7518699e5b29b3612eb955faa69ce47e79a72db6dbf53f28c74bb6c26afcc02cca1bd5512f19c949cb9155bb243ba1764e9eef12792a992e9def5fe5bdc8800ee18d0ee7412d6fec4cdc9267bd9a899e3ccb185d7648bbe49912fc055ea9d0ec34beaef28bc410f38f78faa806bac670656793fecae3f6ceca8e13f4cfdd3c2617f0cebb9dea5c1919f1abbcfe8d82a2347a137ade89a4e5a4bc7898892285f479395416e3a034048993319ea9cf9eaada425"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x12c, 0xa, 0x0, 0x0, {{0x9}, {0x80, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0xfffffffe, 0x8, 0x101}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x56}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xe, 0x3, 0xffffffffffffffff, 0x2, 0x1}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x1ff, 0x6, 0x0, 0xfffffffc}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x5fc}]}, {0x83, 0x6, "f2bd0f9e1a4c098098219c4f2f828372970ff56e31348505956157f86f8bfe5330674c8089067eb0cbcbcecf6915ec8c76b520f04e7daf619aab0634d69910edf1b4c53e2b281698370551e6d8573004fc8b9e4f476bd789cc3a51de8fbbca0b24bbd7fcd9c1ec9bb076b4193243087a3f00a18903d5e805cd486c3a0ef396"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0xdc, 0x11, 0x0, 0x0, {{0xb}, {0x80, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x9, 0x735557f584e13c1c, 0xf, 0xc19f}, 0x10}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x100, 0x3, 0xffffffffeffffff4, 0x401, 0x8}, 0x10}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x70400000, 0x4a, 0x0, 0xffff23b0, 0x3}, 0x6}}]}, {0x34, 0x6, "bcfc5e6e6d68b4e284cacb967557de45e3e5801030742d7a8edeed97d9f99b0ff4601cf599987125fd394528fb20950d"}, {0xc}, {0xc, 0x8, {0x3, 0x7}}}}]}]}, 0x1830}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) fsopen(&(0x7f0000000280)='logfs\x00', 0x1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'ip6gretap0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xfff3}, {0xfff3, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x3c}, 0x1, 0x4000000, 0x0, 0x50}, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x4c, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x200) r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r9, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) 319.340834ms ago: executing program 4 (id=1231): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast1, 0x4e24, 0x3, 'lc\x00', 0x2, 0xfffffffb, 0x55}, {@loopback, 0x4e21, 0x10000, 0x0, 0x6, 0x12d5c}}, 0x44) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='attr/keycreate\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x4, 0x1, 0x30000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0xc9, 0x0, 0x0) r7 = socket(0x25, 0x0, 0x3) sendto$inet6(r7, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a000000040085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e018d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x8) socket(0x1, 0x6, 0x1) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 319.026416ms ago: executing program 0 (id=1232): r0 = socket(0x1, 0x1, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x0, 0x148, 0x148, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0xe00, 0x1, 0x1, [0x40, 0x3, 0xffff, 0x4, 0x2, 0x27c, 0x951, 0x6, 0x7, 0x3, 0x8, 0x43, 0x6, 0x80, 0x1, 0xfe00], 0x5}}, @common=@ah={{0x30}, {[0x4d4, 0x4d6], 0x8, 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @broadcast}, [0xff000000, 0x0, 0x80800000, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xff000000], 'wlan1\x00', 'veth0_to_bond\x00', {0x80}, {}, 0x89, 0x83, 0x0, 0x8}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r0}) 318.726965ms ago: executing program 4 (id=1233): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x10, 0x1) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001380)={[&(0x7f0000000080)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m', &(0x7f00000003c0)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, &(0x7f0000001200)={[&(0x7f0000000540)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) 250.909212ms ago: executing program 0 (id=1234): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b7020000380d0000bfa30000000000000703000000feffff720af0fff8ffff1989a4f0ff00000000b7060000080000001e640000000000004504040001000000170400000c000a00b7040000ff0100006a0af2fe00000000850000001a000000b70000003f00000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c4608800000000000000005cbb5a2600"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=r0}, 0x14) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7, 0x0, 0x3f}, 0x20) 250.295924ms ago: executing program 4 (id=1235): munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0x355b, 0x2, 0xfffffffe, 0x181}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x2) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x1a0, 0x1403, 0x100, 0x70bd25, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nicvf0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nicvf0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20048894}, 0x8) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001040), r5) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010004007000fbdbdf250100000008000100030000000800020002"], 0x24}, 0x1, 0x0, 0x0, 0x24048001}, 0x0) sendto$packet(r4, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r3, 0x1, 0x8, 0x6, @broadcast}, 0x14) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x2) 249.762559ms ago: executing program 0 (id=1236): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x1000000, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e20fffc}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@rand_addr=0x64010102}, {@remote}, {@private=0xa010101, 0x6400}, {@private, 0x800}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) 197.068438ms ago: executing program 5 (id=1237): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x1a48, @loopback, 0xfb5}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="5b0313655e5fea4502adf0e304000000a197ae16d59876d70eb9c2618288129a479da09b51717e67286e4b5b99b9708d8be6d56457ed853fee5835e2ac3923895b781acb40e0ada4909b2d3821efdf8daa5a9daec8b6340ba5c450a082114eb2f92a1a6f3d582c83791dc4f79fd2d57590ff0a925c4e64eb72409e98f1645e1301b45c0ecd1b14fe69cdbcf99ec06be8da60c29f2189dcf28cca4a23451f08b13354d7d4393056c58e62c2f2000000000800", 0xb2}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) setrlimit(0x8, &(0x7f0000000040)={0x1, 0x7}) 149.051342ms ago: executing program 4 (id=1238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) io_uring_setup(0x665c, &(0x7f0000000700)={0x0, 0xe70a, 0x2, 0x3, 0x1d6}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) 143.510481ms ago: executing program 0 (id=1239): setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x6}, 0xc) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x61, r0, 0x7f}, 0xc) (async) close(0xffffffffffffffff) 142.698151ms ago: executing program 5 (id=1240): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[], 0x61c}], 0x1, 0x0, 0x0, 0x40}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000080)='THAWED\x00', 0x24) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_timeval(r4, 0x1, 0x43, 0x0, &(0x7f0000000040)) statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2000, 0x80, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) setreuid(r3, r5) 90.381719ms ago: executing program 0 (id=1241): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000040)={'binder0\x00'}) 88.405406ms ago: executing program 4 (id=1242): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, &(0x7f0000000040)) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="011500001fc3fac28e4ccf13eda0480000"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000280)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000300)={0x0, 0x989680}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setrlimit(0x2, &(0x7f0000000040)={0x4, 0x23ffffd}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) listen(r3, 0x4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r2, 0x0) 82.750264ms ago: executing program 0 (id=1243): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x50}}, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000180)={0x0, 0x2, 0xfffffbf7}) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="5e2e0900000000003800128009000100766c616e00000000280002800600010004000000100003800c000100070000800100000009000000000000000300000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x68}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x28, r1}) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x50}}, 0x0) (async) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000180)={0x0, 0x2, 0xfffffbf7}) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00'}) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="5e2e0900000000003800128009000100766c616e00000000280002800600010004000000100003800c000100070000800100000009000000000000000300000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x68}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x28, r1}) (async) 0s ago: executing program 5 (id=1244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x226, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000540)={0x0, 0x0, 0x22, 0x1, 0x0, r2, &(0x7f0000000a00)="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", 0x200, 0x200}]) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000003c0)="0f326635004000000f300f00d636808a0d0001ba4300b80b00eb66b88c5000000f23d02a3ff866352000000e0f23f80f01c30f789deb32660f3a21cf220f2bb00058660f1bde", 0x46}], 0x1, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_io_uring_setup(0x76d4, &(0x7f0000000080)={0x0, 0xabf4, 0x0, 0x4, 0x24f}, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) io_setup(0x226, &(0x7f0000000180)) (async) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000540)={0x0, 0x0, 0x22, 0x1, 0x0, r2, &(0x7f0000000a00)="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", 0x200, 0x200}]) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000003c0)="0f326635004000000f300f00d636808a0d0001ba4300b80b00eb66b88c5000000f23d02a3ff866352000000e0f23f80f01c30f789deb32660f3a21cf220f2bb00058660f1bde", 0x46}], 0x1, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) syz_io_uring_setup(0x76d4, &(0x7f0000000080)={0x0, 0xabf4, 0x0, 0x4, 0x24f}, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) kernel console output (not intermixed with test programs): 007f348be15fa0 R15: 00007ffe97de8f18 [ 109.503200][ T8275] [ 111.188850][ T8235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 111.219005][ T8286] dummy0: entered promiscuous mode [ 111.227997][ T8286] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 111.232680][ T8286] hsr1: entered allmulticast mode [ 111.234315][ T8286] dummy0: entered allmulticast mode [ 111.236010][ T8286] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 111.249929][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.472'. [ 111.253970][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.472'. [ 111.309134][ T8304] xt_hashlimit: size too large, truncated to 1048576 [ 111.362424][ T40] audit: type=1400 audit(1774549873.166:420): avc: denied { ioctl } for pid=8303 comm="syz.3.475" path="socket:[25189]" dev="sockfs" ino=25189 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 111.431040][ T40] audit: type=1400 audit(1774549873.236:421): avc: denied { ioctl } for pid=8313 comm="syz.3.477" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0x9440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 111.517083][ T5935] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 111.565719][ T40] audit: type=1400 audit(1774549873.366:422): avc: denied { connect } for pid=8323 comm="syz.1.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 111.571706][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'. [ 111.573348][ T40] audit: type=1400 audit(1774549873.366:423): avc: denied { bind } for pid=8320 comm="syz.3.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.575741][ T8324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.479'. [ 111.616948][ T40] audit: type=1400 audit(1774549873.416:424): avc: denied { getopt } for pid=8326 comm="syz.3.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 111.622612][ T8329] 9pnet_virtio: no channels available for device syz [ 111.623515][ T40] audit: type=1400 audit(1774549873.426:425): avc: denied { create } for pid=8330 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 111.628277][ T8329] 9pnet_virtio: no channels available for device syz [ 111.636067][ T8329] 9pnet_virtio: no channels available for device syz [ 111.638664][ T8329] 9pnet_virtio: no channels available for device syz [ 111.641009][ T8329] 9pnet_virtio: no channels available for device syz [ 111.643372][ T8329] 9pnet_virtio: no channels available for device syz [ 111.645722][ T8329] 9pnet_virtio: no channels available for device syz [ 111.648287][ T8329] 9pnet_virtio: no channels available for device syz [ 111.650855][ T8329] 9pnet_virtio: no channels available for device syz [ 111.653315][ T8329] 9pnet_virtio: no channels available for device syz [ 111.655935][ T8329] 9pnet_virtio: no channels available for device syz [ 111.659080][ T8329] 9pnet_virtio: no channels available for device syz [ 111.662161][ T8329] 9pnet_virtio: no channels available for device syz [ 111.665288][ T8329] 9pnet_virtio: no channels available for device syz [ 111.667109][ T5935] usb 13-1: Using ep0 maxpacket: 8 [ 111.669386][ T8329] 9pnet_virtio: no channels available for device syz [ 111.673501][ T8329] 9pnet_virtio: no channels available for device syz [ 111.673933][ T5935] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 111.676103][ T8329] 9pnet_virtio: no channels available for device syz [ 111.680096][ T5935] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.681552][ T8329] 9pnet_virtio: no channels available for device syz [ 111.684457][ T5935] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.684475][ T5935] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.684487][ T5935] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.684510][ T5935] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 111.684522][ T5935] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.684721][ T8327] netlink: 20 bytes leftover after parsing attributes in process `syz.3.480'. [ 111.716952][ T8327] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.733809][ T8335] netlink: 168 bytes leftover after parsing attributes in process `syz.2.482'. [ 111.737016][ T8335] netlink: 168 bytes leftover after parsing attributes in process `syz.2.482'. [ 111.853018][ T40] audit: type=1400 audit(1774549873.656:426): avc: denied { relabelfrom } for pid=8348 comm="syz.2.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 111.859839][ T40] audit: type=1400 audit(1774549873.656:427): avc: denied { relabelto } for pid=8348 comm="syz.2.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 111.890529][ T40] audit: type=1400 audit(1774549873.696:428): avc: denied { getopt } for pid=8350 comm="syz.3.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 111.897600][ T40] audit: type=1400 audit(1774549873.696:429): avc: denied { getopt } for pid=8350 comm="syz.3.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.913865][ T5935] usb 13-1: usb_control_msg returned -32 [ 111.915723][ T5935] usbtmc 13-1:16.0: can't read capabilities [ 111.926016][ T8353] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 111.932085][ T8353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8353 comm=syz.3.489 [ 112.046991][ T54] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 112.207364][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 112.210529][ T54] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.213673][ T54] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.217862][ T54] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.220941][ T54] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.226689][ T54] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.229696][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.274176][ T8380] usbtmc 13-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 112.289533][ T8379] bond1: entered allmulticast mode [ 112.449870][ T54] usb 6-1: GET_CAPABILITIES returned 0 [ 112.457152][ T54] usbtmc 6-1:16.0: can't read capabilities [ 112.471193][ T8395] netlink: 16 bytes leftover after parsing attributes in process `syz.2.503'. [ 112.474514][ T8395] netlink: 16 bytes leftover after parsing attributes in process `syz.2.503'. [ 112.477791][ T6899] usb 13-1: USB disconnect, device number 10 [ 112.478224][ T8395] netlink: 32 bytes leftover after parsing attributes in process `syz.2.503'. [ 112.552725][ T8397] FAULT_INJECTION: forcing a failure. [ 112.552725][ T8397] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 112.560184][ T8397] CPU: 3 UID: 0 PID: 8397 Comm: syz.2.504 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.560214][ T8397] Tainted: [L]=SOFTLOCKUP [ 112.560221][ T8397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.560246][ T8397] Call Trace: [ 112.560253][ T8397] [ 112.560262][ T8397] dump_stack_lvl+0x100/0x190 [ 112.560296][ T8397] should_fail_ex.cold+0x5/0xa [ 112.560317][ T8397] ? prepare_alloc_pages+0x16d/0x5f0 [ 112.560341][ T8397] should_fail_alloc_page+0xeb/0x140 [ 112.560362][ T8397] prepare_alloc_pages+0x1f0/0x5f0 [ 112.560387][ T8397] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 112.560416][ T8397] ? __pfx_css_rstat_updated+0x10/0x10 [ 112.560445][ T8397] ? kasan_save_stack+0x3f/0x50 [ 112.560470][ T8397] ? kasan_save_stack+0x30/0x50 [ 112.560493][ T8397] ? kasan_save_track+0x14/0x30 [ 112.560517][ T8397] ? __kasan_slab_alloc+0x89/0x90 [ 112.560532][ T8397] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 112.560556][ T8397] ? ptlock_alloc+0x1f/0x70 [ 112.560576][ T8397] ? __pte_alloc+0x6d/0x3e0 [ 112.560598][ T8397] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.560637][ T8397] ? lock_acquire+0x1cf/0x380 [ 112.560662][ T8397] ? find_held_lock+0x2b/0x80 [ 112.560682][ T8397] ? page_table_check_set+0x49a/0xa10 [ 112.560709][ T8397] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 112.560734][ T8397] ? policy_nodemask+0xed/0x4f0 [ 112.560754][ T8397] alloc_pages_mpol+0x1fb/0x550 [ 112.560775][ T8397] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 112.560801][ T8397] folio_alloc_mpol_noprof+0x36/0x340 [ 112.560824][ T8397] vma_alloc_folio_noprof+0xed/0x1d0 [ 112.560846][ T8397] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 112.560873][ T8397] do_anonymous_page+0xb3a/0x1fb0 [ 112.560905][ T8397] __handle_mm_fault+0x1d42/0x2b60 [ 112.560934][ T8397] ? __pfx___handle_mm_fault+0x10/0x10 [ 112.560959][ T8397] ? pte_offset_map_lock+0x174/0x320 [ 112.560977][ T8397] ? find_held_lock+0x2b/0x80 [ 112.561010][ T8397] ? follow_page_pte+0x5b3/0x1400 [ 112.561034][ T8397] handle_mm_fault+0x36d/0xa20 [ 112.561061][ T8397] __get_user_pages+0xf9c/0x34d0 [ 112.561086][ T8397] ? down_read_killable+0x30e/0x4c0 [ 112.561116][ T8397] ? __pfx___get_user_pages+0x10/0x10 [ 112.561137][ T8397] ? bpf_ksym_find+0x128/0x1c0 [ 112.561160][ T8397] __gup_longterm_locked+0x279/0x16f0 [ 112.561181][ T8397] ? kernel_text_address+0xf1/0x100 [ 112.561206][ T8397] ? __pfx___gup_longterm_locked+0x10/0x10 [ 112.561232][ T8397] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 112.561257][ T8397] gup_fast_fallback+0x18c6/0x2460 [ 112.561279][ T8397] ? __lock_acquire+0x4a5/0x2630 [ 112.561311][ T8397] ? __pfx_gup_fast_fallback+0x10/0x10 [ 112.561336][ T8397] ? find_held_lock+0x2b/0x80 [ 112.561356][ T8397] ? is_bpf_text_address+0x8a/0x1a0 [ 112.561381][ T8397] ? is_bpf_text_address+0x8a/0x1a0 [ 112.561409][ T8397] pin_user_pages_fast+0xa7/0xf0 [ 112.561428][ T8397] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 112.561446][ T8397] ? kernel_text_address+0x8d/0x100 [ 112.561466][ T8397] ? __kernel_text_address+0xd/0x30 [ 112.561485][ T8397] ? unwind_get_return_address+0x59/0xa0 [ 112.561510][ T8397] pfn_reader_user_pin+0xd01/0x10f0 [ 112.561535][ T8397] ? interval_tree_iter_next+0xe9/0x2e0 [ 112.561561][ T8397] ? __pfx_pfn_reader_user_pin+0x10/0x10 [ 112.561587][ T8397] ? interval_tree_span_iter_first+0x329/0x610 [ 112.561615][ T8397] iopt_pages_fill_xarray+0x494/0xdd0 [ 112.561641][ T8397] ? kasan_save_stack+0x3f/0x50 [ 112.561679][ T8397] ? do_syscall_64+0x106/0xf80 [ 112.561703][ T8397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.561725][ T8397] ? __pfx_iopt_pages_fill_xarray+0x10/0x10 [ 112.561783][ T8397] ? kasan_save_track+0x14/0x30 [ 112.561830][ T8397] iopt_area_add_access+0x22a/0x410 [ 112.561859][ T8397] iommufd_access_pin_pages+0x649/0xa10 [ 112.561893][ T8397] ? __pfx_iommufd_access_pin_pages+0x10/0x10 [ 112.561920][ T8397] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 112.561944][ T8397] ? iommufd_test+0x45cb/0x6610 [ 112.561969][ T8397] iommufd_test+0x4631/0x6610 [ 112.561997][ T8397] ? __pfx_iommufd_test+0x10/0x10 [ 112.562017][ T8397] ? tomoyo_path_number_perm+0x188/0x580 [ 112.562047][ T8397] ? find_held_lock+0x2b/0x80 [ 112.562069][ T8397] ? __might_fault+0xc5/0x140 [ 112.562091][ T8397] ? __might_fault+0xc5/0x140 [ 112.562125][ T8397] iommufd_fops_ioctl+0x358/0x520 [ 112.562149][ T8397] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 112.562171][ T8397] ? __fget_files+0x215/0x3d0 [ 112.562190][ T8397] ? hook_file_ioctl_common+0x146/0x410 [ 112.562215][ T8397] ? selinux_file_ioctl+0x139/0x290 [ 112.562240][ T8397] ? selinux_file_ioctl+0xb4/0x290 [ 112.562264][ T8397] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 112.562288][ T8397] __x64_sys_ioctl+0x18e/0x210 [ 112.562318][ T8397] do_syscall_64+0x106/0xf80 [ 112.562341][ T8397] ? clear_bhb_loop+0x40/0x90 [ 112.562364][ T8397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.562379][ T8397] RIP: 0033:0x7fe24d99c799 [ 112.562396][ T8397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.562412][ T8397] RSP: 002b:00007fe24e7f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.562430][ T8397] RAX: ffffffffffffffda RBX: 00007fe24dc15fa0 RCX: 00007fe24d99c799 [ 112.562441][ T8397] RDX: 0000200000000080 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 112.562452][ T8397] RBP: 00007fe24e7f5090 R08: 0000000000000000 R09: 0000000000000000 [ 112.562461][ T8397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 112.562472][ T8397] R13: 00007fe24dc16038 R14: 00007fe24dc15fa0 R15: 00007ffc6f221718 [ 112.562497][ T8397] [ 112.653118][ T6661] usb 6-1: USB disconnect, device number 9 [ 113.182144][ T8430] FAULT_INJECTION: forcing a failure. [ 113.182144][ T8430] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 113.190346][ T8430] CPU: 1 UID: 0 PID: 8430 Comm: syz.2.513 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.190374][ T8430] Tainted: [L]=SOFTLOCKUP [ 113.190379][ T8430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.190389][ T8430] Call Trace: [ 113.190395][ T8430] [ 113.190401][ T8430] dump_stack_lvl+0x100/0x190 [ 113.190439][ T8430] should_fail_ex.cold+0x5/0xa [ 113.190456][ T8430] ? prepare_alloc_pages+0x16d/0x5f0 [ 113.190477][ T8430] should_fail_alloc_page+0xeb/0x140 [ 113.190494][ T8430] prepare_alloc_pages+0x1f0/0x5f0 [ 113.190516][ T8430] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 113.190541][ T8430] ? __pfx_css_rstat_updated+0x10/0x10 [ 113.190565][ T8430] ? kasan_save_stack+0x3f/0x50 [ 113.190586][ T8430] ? kasan_save_stack+0x30/0x50 [ 113.190607][ T8430] ? kasan_save_track+0x14/0x30 [ 113.190628][ T8430] ? __kasan_slab_alloc+0x89/0x90 [ 113.190641][ T8430] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 113.190663][ T8430] ? ptlock_alloc+0x1f/0x70 [ 113.190682][ T8430] ? __pte_alloc+0x6d/0x3e0 [ 113.190699][ T8430] ? rcu_is_watching+0x12/0xc0 [ 113.190719][ T8430] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 113.190746][ T8430] ? lru_gen_add_folio+0x20f/0x13e0 [ 113.190776][ T8430] ? lock_acquire+0x1cf/0x380 [ 113.190792][ T8430] ? find_held_lock+0x2b/0x80 [ 113.190811][ T8430] ? page_table_check_set+0x49a/0xa10 [ 113.190836][ T8430] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 113.190860][ T8430] ? policy_nodemask+0xed/0x4f0 [ 113.190879][ T8430] alloc_pages_mpol+0x1fb/0x550 [ 113.190898][ T8430] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 113.190921][ T8430] folio_alloc_mpol_noprof+0x36/0x340 [ 113.190941][ T8430] vma_alloc_folio_noprof+0xed/0x1d0 [ 113.190960][ T8430] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 113.190986][ T8430] do_anonymous_page+0xb3a/0x1fb0 [ 113.191014][ T8430] __handle_mm_fault+0x1d42/0x2b60 [ 113.191042][ T8430] ? __pfx___handle_mm_fault+0x10/0x10 [ 113.191064][ T8430] ? pte_offset_map_lock+0x174/0x320 [ 113.191080][ T8430] ? find_held_lock+0x2b/0x80 [ 113.191109][ T8430] ? follow_page_pte+0x5b3/0x1400 [ 113.191159][ T8430] handle_mm_fault+0x36d/0xa20 [ 113.191185][ T8430] __get_user_pages+0xf9c/0x34d0 [ 113.191208][ T8430] ? down_read_killable+0x30e/0x4c0 [ 113.191235][ T8430] ? __pfx___get_user_pages+0x10/0x10 [ 113.191253][ T8430] ? bpf_ksym_find+0x128/0x1c0 [ 113.191274][ T8430] __gup_longterm_locked+0x279/0x16f0 [ 113.191291][ T8430] ? kernel_text_address+0xf1/0x100 [ 113.191315][ T8430] ? __pfx___gup_longterm_locked+0x10/0x10 [ 113.191338][ T8430] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 113.191359][ T8430] gup_fast_fallback+0x18c6/0x2460 [ 113.191378][ T8430] ? __lock_acquire+0x4a5/0x2630 [ 113.191412][ T8430] ? __pfx_gup_fast_fallback+0x10/0x10 [ 113.191434][ T8430] ? find_held_lock+0x2b/0x80 [ 113.191453][ T8430] ? is_bpf_text_address+0x8a/0x1a0 [ 113.191474][ T8430] ? is_bpf_text_address+0x8a/0x1a0 [ 113.191500][ T8430] pin_user_pages_fast+0xa7/0xf0 [ 113.191518][ T8430] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 113.191535][ T8430] ? kernel_text_address+0x8d/0x100 [ 113.191552][ T8430] ? __kernel_text_address+0xd/0x30 [ 113.191573][ T8430] ? unwind_get_return_address+0x59/0xa0 [ 113.191600][ T8430] pfn_reader_user_pin+0xd01/0x10f0 [ 113.191625][ T8430] ? interval_tree_iter_next+0xe9/0x2e0 [ 113.191648][ T8430] ? __pfx_pfn_reader_user_pin+0x10/0x10 [ 113.191672][ T8430] ? interval_tree_span_iter_first+0x329/0x610 [ 113.191697][ T8430] iopt_pages_fill_xarray+0x494/0xdd0 [ 113.191719][ T8430] ? kasan_save_stack+0x3f/0x50 [ 113.191746][ T8430] ? do_syscall_64+0x106/0xf80 [ 113.191766][ T8430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.191787][ T8430] ? __pfx_iopt_pages_fill_xarray+0x10/0x10 [ 113.191836][ T8430] ? kasan_save_track+0x14/0x30 [ 113.191860][ T8430] iopt_area_add_access+0x22a/0x410 [ 113.191886][ T8430] iommufd_access_pin_pages+0x649/0xa10 [ 113.191937][ T8430] ? __pfx_iommufd_access_pin_pages+0x10/0x10 [ 113.191959][ T8430] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 113.191982][ T8430] ? iommufd_test+0x45cb/0x6610 [ 113.192005][ T8430] iommufd_test+0x4631/0x6610 [ 113.192029][ T8430] ? __pfx_iommufd_test+0x10/0x10 [ 113.192047][ T8430] ? tomoyo_path_number_perm+0x188/0x580 [ 113.192075][ T8430] ? find_held_lock+0x2b/0x80 [ 113.192094][ T8430] ? __might_fault+0xc5/0x140 [ 113.192114][ T8430] ? __might_fault+0xc5/0x140 [ 113.192145][ T8430] iommufd_fops_ioctl+0x358/0x520 [ 113.192166][ T8430] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 113.192187][ T8430] ? __fget_files+0x215/0x3d0 [ 113.192203][ T8430] ? hook_file_ioctl_common+0x146/0x410 [ 113.192225][ T8430] ? selinux_file_ioctl+0x139/0x290 [ 113.192247][ T8430] ? selinux_file_ioctl+0xb4/0x290 [ 113.192269][ T8430] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 113.192291][ T8430] __x64_sys_ioctl+0x18e/0x210 [ 113.192316][ T8430] do_syscall_64+0x106/0xf80 [ 113.192336][ T8430] ? clear_bhb_loop+0x40/0x90 [ 113.192355][ T8430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.192370][ T8430] RIP: 0033:0x7fe24d99c799 [ 113.192385][ T8430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.192400][ T8430] RSP: 002b:00007fe24e7f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.192422][ T8430] RAX: ffffffffffffffda RBX: 00007fe24dc15fa0 RCX: 00007fe24d99c799 [ 113.192433][ T8430] RDX: 0000200000000080 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 113.192442][ T8430] RBP: 00007fe24e7f5090 R08: 0000000000000000 R09: 0000000000000000 [ 113.192451][ T8430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.192460][ T8430] R13: 00007fe24dc16038 R14: 00007fe24dc15fa0 R15: 00007ffc6f221718 [ 113.192483][ T8430] [ 113.197845][ T8435] romfs: Unknown parameter '^-%'--:%!.@)' [ 113.257163][ T54] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 113.418383][ T54] usb 8-1: config 0 has no interfaces? [ 113.433082][ T54] usb 8-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 113.435920][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.440761][ T54] usb 8-1: config 0 descriptor?? [ 113.483806][ T8451] ip6gretap0: entered promiscuous mode [ 113.532699][ T8457] F2FS-fs (nbd8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 113.536229][ T8457] F2FS-fs (nbd8): Can't find valid F2FS filesystem in 1th superblock [ 113.543059][ T8457] F2FS-fs (nbd8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 113.546272][ T8457] F2FS-fs (nbd8): Can't find valid F2FS filesystem in 2th superblock [ 113.552924][ T8461] F2FS-fs (nbd8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 113.555965][ T8461] F2FS-fs (nbd8): Can't find valid F2FS filesystem in 1th superblock [ 113.562756][ T8461] F2FS-fs (nbd8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 113.566020][ T8461] F2FS-fs (nbd8): Can't find valid F2FS filesystem in 2th superblock [ 113.609246][ T8461] 9pnet_fd: p9_fd_create_unix (8461): problem connecting socket: ./file1: -2 [ 113.735982][ T8475] FAULT_INJECTION: forcing a failure. [ 113.735982][ T8475] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 113.742265][ T8475] CPU: 1 UID: 0 PID: 8475 Comm: syz.8.528 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.742300][ T8475] Tainted: [L]=SOFTLOCKUP [ 113.742307][ T8475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.742317][ T8475] Call Trace: [ 113.742324][ T8475] [ 113.742331][ T8475] dump_stack_lvl+0x100/0x190 [ 113.742365][ T8475] should_fail_ex.cold+0x5/0xa [ 113.742384][ T8475] ? prepare_alloc_pages+0x16d/0x5f0 [ 113.742408][ T8475] should_fail_alloc_page+0xeb/0x140 [ 113.742428][ T8475] prepare_alloc_pages+0x1f0/0x5f0 [ 113.742453][ T8475] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 113.742484][ T8475] ? __pfx_css_rstat_updated+0x10/0x10 [ 113.742512][ T8475] ? kasan_save_stack+0x3f/0x50 [ 113.742536][ T8475] ? kasan_save_stack+0x30/0x50 [ 113.742560][ T8475] ? kasan_save_track+0x14/0x30 [ 113.742585][ T8475] ? __kasan_slab_alloc+0x89/0x90 [ 113.742600][ T8475] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 113.742624][ T8475] ? ptlock_alloc+0x1f/0x70 [ 113.742645][ T8475] ? pte_alloc_one+0x82/0x3d0 [ 113.742667][ T8475] ? __pte_alloc+0x6d/0x3e0 [ 113.742682][ T8475] ? do_anonymous_page+0x13cc/0x1fb0 [ 113.742706][ T8475] ? rcu_is_watching+0x12/0xc0 [ 113.742729][ T8475] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 113.742760][ T8475] ? lru_gen_add_folio+0x20f/0x13e0 [ 113.742793][ T8475] ? lock_acquire+0x1cf/0x380 [ 113.742811][ T8475] ? find_held_lock+0x2b/0x80 [ 113.742833][ T8475] ? page_table_check_set+0x49a/0xa10 [ 113.742859][ T8475] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 113.742886][ T8475] ? policy_nodemask+0xed/0x4f0 [ 113.742907][ T8475] alloc_pages_mpol+0x1fb/0x550 [ 113.742927][ T8475] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 113.742952][ T8475] folio_alloc_mpol_noprof+0x36/0x340 [ 113.742975][ T8475] vma_alloc_folio_noprof+0xed/0x1d0 [ 113.742996][ T8475] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 113.743026][ T8475] do_anonymous_page+0xb3a/0x1fb0 [ 113.743059][ T8475] __handle_mm_fault+0x1d42/0x2b60 [ 113.743090][ T8475] ? __pfx___handle_mm_fault+0x10/0x10 [ 113.743141][ T8475] ? pte_offset_map_lock+0x174/0x320 [ 113.743161][ T8475] ? find_held_lock+0x2b/0x80 [ 113.743192][ T8475] ? follow_page_pte+0x5b3/0x1400 [ 113.743218][ T8475] handle_mm_fault+0x36d/0xa20 [ 113.743247][ T8475] __get_user_pages+0xf9c/0x34d0 [ 113.743273][ T8475] ? down_read_killable+0x30e/0x4c0 [ 113.743311][ T8475] ? __pfx___get_user_pages+0x10/0x10 [ 113.743331][ T8475] ? bpf_ksym_find+0x128/0x1c0 [ 113.743353][ T8475] __gup_longterm_locked+0x279/0x16f0 [ 113.743374][ T8475] ? kernel_text_address+0xf1/0x100 [ 113.743408][ T8475] ? __pfx___gup_longterm_locked+0x10/0x10 [ 113.743435][ T8475] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 113.743460][ T8475] gup_fast_fallback+0x18c6/0x2460 [ 113.743481][ T8475] ? __lock_acquire+0x4a5/0x2630 [ 113.743515][ T8475] ? __pfx_gup_fast_fallback+0x10/0x10 [ 113.743538][ T8475] ? find_held_lock+0x2b/0x80 [ 113.743560][ T8475] ? is_bpf_text_address+0x8a/0x1a0 [ 113.743585][ T8475] ? is_bpf_text_address+0x8a/0x1a0 [ 113.743615][ T8475] pin_user_pages_fast+0xa7/0xf0 [ 113.743635][ T8475] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 113.743654][ T8475] ? kernel_text_address+0x8d/0x100 [ 113.743674][ T8475] ? __kernel_text_address+0xd/0x30 [ 113.743693][ T8475] ? unwind_get_return_address+0x59/0xa0 [ 113.743719][ T8475] pfn_reader_user_pin+0xd01/0x10f0 [ 113.743746][ T8475] ? interval_tree_iter_next+0xe9/0x2e0 [ 113.743773][ T8475] ? __pfx_pfn_reader_user_pin+0x10/0x10 [ 113.743799][ T8475] ? interval_tree_span_iter_first+0x329/0x610 [ 113.743824][ T8475] iopt_pages_fill_xarray+0x494/0xdd0 [ 113.743849][ T8475] ? kasan_save_stack+0x3f/0x50 [ 113.743878][ T8475] ? do_syscall_64+0x106/0xf80 [ 113.743901][ T8475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.743923][ T8475] ? __pfx_iopt_pages_fill_xarray+0x10/0x10 [ 113.743980][ T8475] ? kasan_save_track+0x14/0x30 [ 113.744013][ T8475] iopt_area_add_access+0x22a/0x410 [ 113.744044][ T8475] iommufd_access_pin_pages+0x649/0xa10 [ 113.744078][ T8475] ? __pfx_iommufd_access_pin_pages+0x10/0x10 [ 113.744104][ T8475] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 113.744129][ T8475] ? iommufd_test+0x45cb/0x6610 [ 113.744157][ T8475] iommufd_test+0x4631/0x6610 [ 113.744185][ T8475] ? __pfx_iommufd_test+0x10/0x10 [ 113.744205][ T8475] ? tomoyo_path_number_perm+0x188/0x580 [ 113.744236][ T8475] ? find_held_lock+0x2b/0x80 [ 113.744258][ T8475] ? __might_fault+0xc5/0x140 [ 113.744285][ T8475] ? __might_fault+0xc5/0x140 [ 113.744320][ T8475] iommufd_fops_ioctl+0x358/0x520 [ 113.744344][ T8475] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 113.744370][ T8475] ? __fget_files+0x215/0x3d0 [ 113.744386][ T8475] ? hook_file_ioctl_common+0x146/0x410 [ 113.744412][ T8475] ? selinux_file_ioctl+0x139/0x290 [ 113.744436][ T8475] ? selinux_file_ioctl+0xb4/0x290 [ 113.744461][ T8475] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 113.744485][ T8475] __x64_sys_ioctl+0x18e/0x210 [ 113.744512][ T8475] do_syscall_64+0x106/0xf80 [ 113.744533][ T8475] ? clear_bhb_loop+0x40/0x90 [ 113.744555][ T8475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.744572][ T8475] RIP: 0033:0x7f348bb9c799 [ 113.744588][ T8475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.744604][ T8475] RSP: 002b:00007f348ca09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.744621][ T8475] RAX: ffffffffffffffda RBX: 00007f348be15fa0 RCX: 00007f348bb9c799 [ 113.744632][ T8475] RDX: 0000200000000080 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 113.744642][ T8475] RBP: 00007f348ca09090 R08: 0000000000000000 R09: 0000000000000000 [ 113.744652][ T8475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.744662][ T8475] R13: 00007f348be16038 R14: 00007f348be15fa0 R15: 00007ffe97de8f18 [ 113.744687][ T8475] [ 114.060984][ T8491] binder: BC_ATTEMPT_ACQUIRE not supported [ 114.063580][ T8491] binder: 8489:8491 ioctl c0306201 200000000480 returned -22 [ 114.084238][ T8493] Bluetooth: MGMT ver 1.23 [ 114.102335][ T8493] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 114.258786][ T8509] FAULT_INJECTION: forcing a failure. [ 114.258786][ T8509] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 114.263167][ T8509] CPU: 2 UID: 0 PID: 8509 Comm: syz.1.540 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.263185][ T8509] Tainted: [L]=SOFTLOCKUP [ 114.263188][ T8509] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.263195][ T8509] Call Trace: [ 114.263200][ T8509] [ 114.263204][ T8509] dump_stack_lvl+0x100/0x190 [ 114.263226][ T8509] should_fail_ex.cold+0x5/0xa [ 114.263239][ T8509] ? prepare_alloc_pages+0x16d/0x5f0 [ 114.263252][ T8509] should_fail_alloc_page+0xeb/0x140 [ 114.263264][ T8509] prepare_alloc_pages+0x1f0/0x5f0 [ 114.263279][ T8509] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 114.263296][ T8509] ? __pfx_css_rstat_updated+0x10/0x10 [ 114.263314][ T8509] ? kasan_save_stack+0x3f/0x50 [ 114.263329][ T8509] ? kasan_save_stack+0x30/0x50 [ 114.263344][ T8509] ? kasan_save_track+0x14/0x30 [ 114.263359][ T8509] ? __kasan_slab_alloc+0x89/0x90 [ 114.263368][ T8509] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 114.263387][ T8509] ? ptlock_alloc+0x1f/0x70 [ 114.263401][ T8509] ? __pte_alloc+0x6d/0x3e0 [ 114.263411][ T8509] ? rcu_is_watching+0x12/0xc0 [ 114.263425][ T8509] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 114.263444][ T8509] ? lru_gen_add_folio+0x20f/0x13e0 [ 114.263463][ T8509] ? lock_acquire+0x1cf/0x380 [ 114.263474][ T8509] ? find_held_lock+0x2b/0x80 [ 114.263487][ T8509] ? page_table_check_set+0x49a/0xa10 [ 114.263504][ T8509] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 114.263520][ T8509] ? policy_nodemask+0xed/0x4f0 [ 114.263532][ T8509] alloc_pages_mpol+0x1fb/0x550 [ 114.263543][ T8509] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 114.263558][ T8509] folio_alloc_mpol_noprof+0x36/0x340 [ 114.263572][ T8509] vma_alloc_folio_noprof+0xed/0x1d0 [ 114.263586][ T8509] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 114.263611][ T8509] do_anonymous_page+0xb3a/0x1fb0 [ 114.263655][ T8509] __handle_mm_fault+0x1d42/0x2b60 [ 114.263688][ T8509] ? __pfx___handle_mm_fault+0x10/0x10 [ 114.263713][ T8509] ? pte_offset_map_lock+0x174/0x320 [ 114.263730][ T8509] ? find_held_lock+0x2b/0x80 [ 114.263750][ T8509] ? follow_page_pte+0x5b3/0x1400 [ 114.263765][ T8509] handle_mm_fault+0x36d/0xa20 [ 114.263783][ T8509] __get_user_pages+0xf9c/0x34d0 [ 114.263800][ T8509] ? down_read_killable+0x30e/0x4c0 [ 114.263819][ T8509] ? __pfx___get_user_pages+0x10/0x10 [ 114.263832][ T8509] ? bpf_ksym_find+0x128/0x1c0 [ 114.263846][ T8509] __gup_longterm_locked+0x279/0x16f0 [ 114.263859][ T8509] ? kernel_text_address+0xf1/0x100 [ 114.263875][ T8509] ? __pfx___gup_longterm_locked+0x10/0x10 [ 114.263892][ T8509] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 114.263906][ T8509] gup_fast_fallback+0x18c6/0x2460 [ 114.263920][ T8509] ? __lock_acquire+0x4a5/0x2630 [ 114.263948][ T8509] ? __pfx_gup_fast_fallback+0x10/0x10 [ 114.263969][ T8509] ? find_held_lock+0x2b/0x80 [ 114.263988][ T8509] ? is_bpf_text_address+0x8a/0x1a0 [ 114.264009][ T8509] ? is_bpf_text_address+0x8a/0x1a0 [ 114.264033][ T8509] pin_user_pages_fast+0xa7/0xf0 [ 114.264050][ T8509] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 114.264066][ T8509] ? kernel_text_address+0x8d/0x100 [ 114.264083][ T8509] ? __kernel_text_address+0xd/0x30 [ 114.264100][ T8509] ? unwind_get_return_address+0x59/0xa0 [ 114.264122][ T8509] pfn_reader_user_pin+0xd01/0x10f0 [ 114.264148][ T8509] ? interval_tree_iter_next+0xe9/0x2e0 [ 114.264171][ T8509] ? __pfx_pfn_reader_user_pin+0x10/0x10 [ 114.264195][ T8509] ? interval_tree_span_iter_first+0x329/0x610 [ 114.264221][ T8509] iopt_pages_fill_xarray+0x494/0xdd0 [ 114.264246][ T8509] ? kasan_save_stack+0x3f/0x50 [ 114.264272][ T8509] ? do_syscall_64+0x106/0xf80 [ 114.264292][ T8509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.264314][ T8509] ? __pfx_iopt_pages_fill_xarray+0x10/0x10 [ 114.264367][ T8509] ? kasan_save_track+0x14/0x30 [ 114.264394][ T8509] iopt_area_add_access+0x22a/0x410 [ 114.264414][ T8509] iommufd_access_pin_pages+0x649/0xa10 [ 114.264435][ T8509] ? __pfx_iommufd_access_pin_pages+0x10/0x10 [ 114.264452][ T8509] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 114.264469][ T8509] ? iommufd_test+0x45cb/0x6610 [ 114.264485][ T8509] iommufd_test+0x4631/0x6610 [ 114.264502][ T8509] ? __pfx_iommufd_test+0x10/0x10 [ 114.264514][ T8509] ? tomoyo_path_number_perm+0x188/0x580 [ 114.264534][ T8509] ? find_held_lock+0x2b/0x80 [ 114.264549][ T8509] ? __might_fault+0xc5/0x140 [ 114.264564][ T8509] ? __might_fault+0xc5/0x140 [ 114.264585][ T8509] iommufd_fops_ioctl+0x358/0x520 [ 114.264600][ T8509] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 114.264617][ T8509] ? __fget_files+0x215/0x3d0 [ 114.264630][ T8509] ? hook_file_ioctl_common+0x146/0x410 [ 114.264645][ T8509] ? selinux_file_ioctl+0x139/0x290 [ 114.264661][ T8509] ? selinux_file_ioctl+0xb4/0x290 [ 114.264678][ T8509] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 114.264693][ T8509] __x64_sys_ioctl+0x18e/0x210 [ 114.264712][ T8509] do_syscall_64+0x106/0xf80 [ 114.264727][ T8509] ? clear_bhb_loop+0x40/0x90 [ 114.264741][ T8509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.264752][ T8509] RIP: 0033:0x7f637159c799 [ 114.264763][ T8509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.264773][ T8509] RSP: 002b:00007f637243c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.264784][ T8509] RAX: ffffffffffffffda RBX: 00007f6371815fa0 RCX: 00007f637159c799 [ 114.264791][ T8509] RDX: 0000200000000080 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 114.264798][ T8509] RBP: 00007f637243c090 R08: 0000000000000000 R09: 0000000000000000 [ 114.264804][ T8509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.264810][ T8509] R13: 00007f6371816038 R14: 00007f6371815fa0 R15: 00007ffd38f7a638 [ 114.264826][ T8509] [ 114.736145][ T6690] usb 8-1: USB disconnect, device number 6 [ 115.820094][ T8592] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 115.961722][ T8608] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 116.637296][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 116.831388][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 116.831440][ T40] audit: type=1400 audit(1774549878.636:459): avc: denied { read } for pid=8634 comm="syz.8.578" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 116.846479][ T40] audit: type=1400 audit(1774549878.636:460): avc: denied { open } for pid=8634 comm="syz.8.578" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 117.012042][ T40] audit: type=1400 audit(1774549878.816:461): avc: denied { create } for pid=8632 comm="syz.3.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 117.026947][ T40] audit: type=1400 audit(1774549878.826:462): avc: denied { read } for pid=8632 comm="syz.3.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 117.258045][ T8650] program syz.8.581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.452357][ T8656] qnx4: unable to read the superblock [ 117.487944][ T8658] fuse: Bad value for 'fd' [ 117.607532][ T8662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8662 comm=syz.1.587 [ 117.616072][ T8662] __nla_validate_parse: 4 callbacks suppressed [ 117.616081][ T8662] netlink: 40 bytes leftover after parsing attributes in process `syz.1.587'. [ 117.654555][ T8671] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.657092][ T8671] IPv6: NLM_F_CREATE should be set when creating new route [ 117.659653][ T8672] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.686435][ T40] audit: type=1400 audit(1774549879.486:463): avc: denied { connect } for pid=8674 comm="syz.1.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.693681][ T40] audit: type=1400 audit(1774549879.486:464): avc: denied { bind } for pid=8674 comm="syz.1.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.700113][ T40] audit: type=1400 audit(1774549879.486:465): avc: denied { getopt } for pid=8674 comm="syz.1.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.707669][ T8669] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 117.836026][ T40] audit: type=1400 audit(1774549879.636:466): avc: denied { setattr } for pid=8688 comm="syz.1.592" name="/" dev="9p" ino=73924623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.863569][ T5902] IPVS: starting estimator thread 0... [ 117.947281][ T8694] IPVS: using max 45 ests per chain, 108000 per kthread [ 117.981372][ T8707] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 117.986053][ T8707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.028266][ T8717] overlayfs: conflicting options: userxattr,metacopy=on [ 118.035186][ T8718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.039039][ T8718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.042364][ T8709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.045470][ T8709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.338479][ T8731] netlink: 'syz.8.605': attribute type 21 has an invalid length. [ 118.343123][ T8731] netlink: 152 bytes leftover after parsing attributes in process `syz.8.605'. [ 118.471470][ T8739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.607'. [ 118.522912][ T8739] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8739 comm=syz.1.607 [ 118.726983][ T40] audit: type=1400 audit(1774549880.536:467): avc: denied { bind } for pid=8749 comm="syz.2.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.746771][ T40] audit: type=1400 audit(1774549880.546:468): avc: denied { read write } for pid=8746 comm="syz.1.611" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 118.803218][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 119.866667][ T5902] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 119.926018][ T8791] netlink: 32 bytes leftover after parsing attributes in process `syz.2.623'. [ 120.046654][ T5902] usb 6-1: Using ep0 maxpacket: 8 [ 120.050471][ T5902] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 120.053239][ T5902] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.056616][ T5902] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.059964][ T5902] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.063017][ T5902] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.068671][ T5902] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.071685][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.216108][ T8802] openvswitch: netlink: Missing key (keys=40, expected=80) [ 120.218968][ T2298] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 120.277046][ T5902] usb 6-1: usb_control_msg returned -32 [ 120.278902][ T5902] usbtmc 6-1:16.0: can't read capabilities [ 120.376630][ T2298] usb 8-1: Using ep0 maxpacket: 32 [ 120.380802][ T2298] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 120.384198][ T2298] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 120.389213][ T2298] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 120.392696][ T2298] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 120.398681][ T2298] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 120.401725][ T2298] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.404867][ T2298] usb 8-1: Product: syz [ 120.406526][ T2298] usb 8-1: Manufacturer: syz [ 120.408641][ T2298] usb 8-1: SerialNumber: syz [ 120.416792][ C2] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 120.422716][ T2298] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input7 [ 120.476657][ T5902] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 120.620954][ T8798] ip6gre1: entered promiscuous mode [ 120.622845][ T8798] ip6gre1: entered allmulticast mode [ 120.646730][ T2298] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 120.650141][ T2298] (id 0x00) [ 120.656756][ T5902] usb 13-1: Using ep0 maxpacket: 8 [ 120.662044][ T5902] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.665114][ T5902] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.668222][ T5902] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.671965][ T5902] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.676102][ T5902] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.686607][ T5902] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.690314][ T8805] usbtmc 6-1:16.0: control status returned 0 [ 120.707680][ T2298] rc_core: IR keymap rc-imon-pad not found [ 120.709628][ T2298] Registered IR keymap rc-empty [ 120.711375][ T2298] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 120.714690][ T2298] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 120.857750][ T2298] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 120.862613][ T2298] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input8 [ 120.870260][ T2298] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:7> initialized [ 120.906754][ T5902] usb 13-1: GET_CAPABILITIES returned 0 [ 120.909140][ T5902] usbtmc 13-1:16.0: can't read capabilities [ 120.970092][ T6661] usb 6-1: USB disconnect, device number 10 [ 121.043223][ T29] usb 8-1: USB disconnect, device number 7 [ 121.106205][ T6690] usb 13-1: USB disconnect, device number 11 [ 121.632714][ T8816] syzkaller0: entered promiscuous mode [ 121.635087][ T8816] syzkaller0: entered allmulticast mode [ 121.647232][ T8816] input: syz1 as /devices/virtual/input/input9 [ 121.936762][ T29] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 122.085537][ T8830] io-wq is not configured for unbound workers [ 122.103739][ T29] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 122.109840][ T29] usb 13-1: config 0 interface 0 has no altsetting 0 [ 122.113065][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 122.113076][ T40] audit: type=1400 audit(1774549883.916:474): avc: denied { append } for pid=8829 comm="syz.3.636" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 122.113740][ T29] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 122.127133][ T29] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 122.129754][ T29] usb 13-1: Product: syz [ 122.131108][ T29] usb 13-1: Manufacturer: syz [ 122.132589][ T29] usb 13-1: SerialNumber: syz [ 122.136440][ T29] usb 13-1: config 0 descriptor?? [ 122.141053][ T29] usb 13-1: selecting invalid altsetting 0 [ 122.343719][ T29] usb 13-1: USB disconnect, device number 12 [ 122.735618][ T40] audit: type=1400 audit(1774549884.536:475): avc: denied { open } for pid=8855 comm="syz.8.641" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 122.847181][ T40] audit: type=1400 audit(1774549884.646:476): avc: denied { getopt } for pid=8863 comm="syz.8.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 123.284163][ T8871] netlink: 'syz.8.645': attribute type 4 has an invalid length. [ 123.338759][ T8875] netlink: 12 bytes leftover after parsing attributes in process `syz.8.646'. [ 123.339438][ T8876] netlink: 12 bytes leftover after parsing attributes in process `syz.8.646'. [ 123.357395][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.8.646'. [ 123.361221][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.8.646'. [ 123.528603][ T8890] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 123.596254][ T40] audit: type=1400 audit(1774549885.396:477): avc: denied { listen } for pid=8904 comm="syz.3.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 123.606820][ T40] audit: type=1400 audit(1774549885.416:478): avc: denied { accept } for pid=8904 comm="syz.3.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 123.611546][ T8903] tmpfs: Unknown parameter 'Žuota' [ 123.631899][ T8903] netlink: 880 bytes leftover after parsing attributes in process `syz.2.656'. [ 123.791980][ T40] audit: type=1400 audit(1774549885.596:479): avc: denied { write } for pid=8909 comm="syz.2.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 123.797134][ T8910] bridge_slave_1: left allmulticast mode [ 123.800351][ T8910] bridge_slave_1: left promiscuous mode [ 123.802862][ T8910] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.808996][ T8910] ¾x9ÿ: left allmulticast mode [ 123.810945][ T8910] ¾x9ÿ: left promiscuous mode [ 123.812811][ T8910] bridge0: port 1(1¾x9ÿ) entered disabled state [ 124.045560][ T40] audit: type=1400 audit(1774549885.846:480): avc: denied { getopt } for pid=8913 comm="syz.8.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.406093][ T8930] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.667'. [ 124.475745][ T40] audit: type=1400 audit(1774549886.276:481): avc: denied { setopt } for pid=8932 comm="syz.1.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.529055][ T8940] qnx4: no qnx4 filesystem (no root dir). [ 124.639473][ T8944] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.722213][ T8944] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.780255][ T8944] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.796928][ T29] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 124.865447][ T8944] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.950283][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 124.953891][ T29] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.961490][ T29] usb 6-1: New USB device found, idVendor=0525, idProduct=b4a8, bcdDevice= 0.41 [ 124.964521][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 124.965803][ T46] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.968149][ T29] usb 6-1: Product: syz [ 124.973138][ T29] usb 6-1: Manufacturer: syz [ 124.974713][ T29] usb 6-1: SerialNumber: syz [ 124.983455][ T46] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.994317][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.004025][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.070978][ T40] audit: type=1400 audit(1774549886.876:482): avc: denied { write } for pid=8955 comm="syz.3.675" name="usbmon1" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 125.090319][ T40] audit: type=1400 audit(1774549886.896:483): avc: denied { ioctl } for pid=8955 comm="syz.3.675" path="/dev/usbmon1" dev="devtmpfs" ino=738 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 125.169619][ T8958] netlink: 'syz.3.676': attribute type 10 has an invalid length. [ 125.173001][ T8958] netlink: 232 bytes leftover after parsing attributes in process `syz.3.676'. [ 125.188319][ T29] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xB4A8 [ 125.236472][ T8960] netlink: 52 bytes leftover after parsing attributes in process `syz.8.677'. [ 125.392542][ T8942] xt_HMARK: spi-set and port-set can't be combined [ 125.400755][ T5902] usb 6-1: USB disconnect, device number 11 [ 125.414049][ T5902] usblp0: removed [ 125.438250][ T8973] kvm: MONITOR instruction emulated as NOP! [ 125.468813][ T8973] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 125.901825][ T8992] netlink: 'syz.8.685': attribute type 1 has an invalid length. [ 125.945660][ T8992] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.973989][ T8992] bond2: (slave geneve2): making interface the new active one [ 125.983850][ T8992] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 125.990749][ T8997] program syz.1.687 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.992095][ T46] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 126.002939][ T46] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 126.006764][ T100] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 126.010476][ T100] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 126.306620][ T9021] netlink: 32 bytes leftover after parsing attributes in process `syz.1.695'. [ 126.326051][ T9024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.695'. [ 126.329527][ T9018] kvm: pic: single mode not supported [ 126.341292][ T9018] kvm: pic: level sensitive irq not supported [ 126.348648][ T9018] kvm: pic: single mode not supported [ 126.393446][ T9029] i2c i2c-1: dtv_property_process_set: SET cmd 0x000002c0 undefined [ 126.406649][ T9029] Dead loop on virtual device ip6_vti0, fix it urgently! [ 126.685389][ T9051] xt_l2tp: v2 tid > 0xffff: 2031748 [ 126.822500][ T9062] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 126.824906][ T9062] overlayfs: failed to set xattr on upper [ 126.829567][ T9062] overlayfs: ...falling back to redirect_dir=nofollow. [ 126.831896][ T9062] overlayfs: ...falling back to index=off. [ 126.833778][ T9062] overlayfs: ...falling back to uuid=null. [ 126.835629][ T9062] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 126.862128][ T9065] binder: BINDER_SET_CONTEXT_MGR already set [ 126.864291][ T9065] binder: 9063:9065 ioctl 4018620d 200000004a80 returned -16 [ 126.921159][ T9073] netlink: 'syz.1.713': attribute type 1 has an invalid length. [ 127.116372][ T9084] netlink: 'syz.2.718': attribute type 4 has an invalid length. [ 127.124959][ T9084] netlink: 'syz.2.718': attribute type 4 has an invalid length. [ 127.128802][ T9084] netlink: 'syz.2.718': attribute type 4 has an invalid length. [ 127.132412][ T9084] netlink: 'syz.2.718': attribute type 4 has an invalid length. [ 127.135596][ T9084] netlink: 'syz.2.718': attribute type 4 has an invalid length. [ 127.149217][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 127.149231][ T40] audit: type=1400 audit(1774549888.956:501): avc: denied { ioctl } for pid=9091 comm="syz.8.719" path="socket:[29487]" dev="sockfs" ino=29487 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 127.164391][ T40] audit: type=1400 audit(1774549888.966:502): avc: denied { connect } for pid=9091 comm="syz.8.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 127.212834][ T9100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.316648][ T40] audit: type=1400 audit(1774549889.116:503): avc: denied { ioctl } for pid=9109 comm="syz.2.725" path="socket:[32060]" dev="sockfs" ino=32060 ioctlcmd=0x586d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 127.406900][ T40] audit: type=1400 audit(1774549889.206:504): avc: denied { map } for pid=9117 comm="syz.1.728" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 128.047104][ T9101] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.050829][ T9101] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 128.053010][ T9101] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 128.056683][ T9101] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 128.060383][ T9101] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 128.062672][ T9101] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 128.072140][ T9101] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 128.120735][ T9140] netlink: 'syz.3.734': attribute type 11 has an invalid length. [ 128.156757][ T40] audit: type=1400 audit(1774549889.956:505): avc: denied { bind } for pid=9148 comm="syz.1.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.163293][ T40] audit: type=1400 audit(1774549889.956:506): avc: denied { node_bind } for pid=9148 comm="syz.1.739" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 128.182100][ T40] audit: type=1800 audit(1774549889.986:507): pid=9154 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.740" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 128.247764][ T9161] i2c i2c-1: dtv_property_process_set: SET cmd 0x000002c0 undefined [ 128.282233][ T9146] atomic_op ffff88802e34a998 conn xmit_atomic 0000000000000000 [ 128.319108][ T9166] netlink: 'syz.2.743': attribute type 2 has an invalid length. [ 128.322583][ T9166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=9166 comm=syz.2.743 [ 128.393318][ T9173] __nla_validate_parse: 74 callbacks suppressed [ 128.393330][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.745'. [ 128.410136][ T9173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.745'. [ 128.413058][ T9173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.745'. [ 128.427627][ T40] audit: type=1400 audit(1774549890.196:508): avc: denied { name_bind } for pid=9172 comm="syz.2.745" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 128.517562][ T9180] bond0: (slave vlan2): Opening slave failed [ 128.738831][ T40] audit: type=1400 audit(1774549890.546:509): avc: denied { accept } for pid=9185 comm="syz.1.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.863315][ T9194] kvm: kvm [9192]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 128.866536][ T9194] kvm: kvm [9192]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 128.907329][ T6690] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 129.076845][ T6690] usb 7-1: Using ep0 maxpacket: 8 [ 129.091490][ T6690] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 129.094787][ T6690] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 129.099311][ T6690] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.102323][ T6690] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.106076][ T6690] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.109248][ T6690] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.160203][ T40] audit: type=1400 audit(1774549890.966:510): avc: denied { read } for pid=9205 comm="syz.3.754" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.178964][ T9206] autofs4:pid:9206:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc018937e) [ 129.184175][ T9206] autofs4:pid:9206:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 129.252710][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.755'. [ 129.255690][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.755'. [ 129.317130][ T6690] usb 7-1: GET_CAPABILITIES returned 0 [ 129.319465][ T6690] usbtmc 7-1:16.0: can't read capabilities [ 129.348775][ T5938] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.378799][ T9217] tmpfs: Unknown parameter 'inovqácËdbÈ' [ 129.384371][ T6766] usb 7-1: USB disconnect, device number 10 [ 129.539644][ T9225] netlink: 16 bytes leftover after parsing attributes in process `syz.3.759'. [ 129.573285][ T9227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.760'. [ 129.590425][ T9227] macvlan2: entered promiscuous mode [ 129.720065][ T9239] tun0: tun_chr_ioctl cmd 1074025698 [ 129.722529][ T9239] tun0: tun_chr_ioctl cmd 1074025675 [ 129.724845][ T9239] tun0: persist enabled [ 129.727815][ T9239] tun0: tun_chr_ioctl cmd 1074025675 [ 129.730105][ T9239] tun0: persist enabled [ 129.732668][ T9239] tun0: tun_chr_ioctl cmd 1074025673 [ 129.735141][ T9241] tun0: tun_chr_ioctl cmd 1074025698 [ 129.767199][ T6766] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 129.830154][ T9254] netlink: 24 bytes leftover after parsing attributes in process `syz.8.768'. [ 129.904170][ T9260] fuse: Bad value for 'user_id' [ 129.906261][ T9260] fuse: Bad value for 'user_id' [ 129.913798][ T9260] Attempt to restore checkpoint with obsolete wellknown handles [ 129.925084][ T9264] fuse: Bad value for 'user_id' [ 129.927338][ T9264] fuse: Bad value for 'user_id' [ 129.928333][ T6766] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 129.932296][ T6766] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 129.935658][ T6766] usb 7-1: config 0 interface 0 has no altsetting 0 [ 129.939539][ T6766] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 129.942793][ T6766] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 129.945545][ T6766] usb 7-1: Product: syz [ 129.946952][ T6766] usb 7-1: Manufacturer: syz [ 129.948524][ T6766] usb 7-1: SerialNumber: syz [ 129.956251][ T6766] usb 7-1: config 0 descriptor?? [ 129.959938][ T6766] hub 7-1:0.0: bad descriptor, ignoring hub [ 129.961943][ T6766] hub 7-1:0.0: probe with driver hub failed with error -5 [ 129.965774][ T6766] usb 7-1: selecting invalid altsetting 0 [ 130.067849][ T5938] Bluetooth: hci0: command 0x041b tx timeout [ 130.067897][ T5940] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.070833][ T63] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 130.327605][ T9291] netlink: 14 bytes leftover after parsing attributes in process `syz.1.780'. [ 130.354466][ T9291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.369749][ T9291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.375426][ T9291] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 130.392356][ T9291] bond0 (unregistering): Released all slaves [ 130.580110][ T6690] usb 7-1: USB disconnect, device number 11 [ 130.588232][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.782'. [ 130.717026][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 130.727051][ T6690] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 130.909782][ T6690] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 130.912603][ T6690] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 130.927052][ T6690] usb 7-1: config 0 interface 0 has no altsetting 0 [ 130.931986][ T6690] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 130.934875][ T6690] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 130.938658][ T6690] usb 7-1: Product: syz [ 130.940544][ T6690] usb 7-1: Manufacturer: syz [ 130.942219][ T6690] usb 7-1: SerialNumber: syz [ 130.947832][ T6690] usb 7-1: config 0 descriptor?? [ 130.951722][ T6690] hub 7-1:0.0: bad descriptor, ignoring hub [ 130.953621][ T6690] hub 7-1:0.0: probe with driver hub failed with error -5 [ 130.959463][ T6690] usb 7-1: selecting invalid altsetting 0 [ 130.959978][ T9323] syzkaller1: entered promiscuous mode [ 130.963607][ T9323] syzkaller1: entered allmulticast mode [ 131.256982][ T29] usb 7-1: USB disconnect, device number 12 [ 131.437551][ T6690] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 131.510049][ T9349] program syz.1.793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.515699][ T9351] program syz.1.793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.585342][ T107] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.589923][ T107] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 131.610099][ T6690] usb 8-1: Using ep0 maxpacket: 16 [ 131.613235][ T6690] usb 8-1: config index 0 descriptor too short (expected 6674, got 18) [ 131.616270][ T6690] usb 8-1: config 88 has too many interfaces: 132, using maximum allowed: 32 [ 131.621660][ T6690] usb 8-1: config 88 has an invalid descriptor of length 44, skipping remainder of the config [ 131.625028][ T6690] usb 8-1: config 88 has 0 interfaces, different from the descriptor's value: 132 [ 131.632557][ T6690] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 131.635678][ T6690] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.639725][ T6690] usb 8-1: Product: syz [ 131.641064][ T6690] usb 8-1: Manufacturer: syz [ 131.642524][ T6690] usb 8-1: SerialNumber: syz [ 131.721969][ T107] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.724405][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.726369][ T107] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 131.730861][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.737082][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.741354][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.745386][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.774160][ T9375] xt_NFQUEUE: number of total queues is 0 [ 131.870352][ T9368] chnl_net:caif_netlink_parms(): no params data found [ 131.896025][ T9386] validate_nla: 4 callbacks suppressed [ 131.896038][ T9386] netlink: 'syz.2.801': attribute type 5 has an invalid length. [ 131.914573][ T9386] ip6erspan0: entered promiscuous mode [ 131.939819][ T107] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.943105][ T107] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 131.957407][ T6690] usb 8-1: USB disconnect, device number 8 [ 132.012440][ T9368] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.015078][ T9368] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.022104][ T9368] bridge_slave_0: entered allmulticast mode [ 132.025299][ T9368] bridge_slave_0: entered promiscuous mode [ 132.028461][ T9368] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.030761][ T9368] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.033158][ T9368] bridge_slave_1: entered allmulticast mode [ 132.035803][ T9368] bridge_slave_1: entered promiscuous mode [ 132.047759][ T107] netdevsim netdevsim8 netdevsim0 (unregistering): left promiscuous mode [ 132.051080][ T107] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.055472][ T107] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 132.074296][ T9368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.079024][ T9368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.094756][ T9368] team0: Port device team_slave_0 added [ 132.098054][ T9368] team0: Port device team_slave_1 added [ 132.116211][ T9368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.119910][ T9368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.128451][ T9368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.134668][ T9368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.137455][ T9368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.145528][ T9368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.148922][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.161808][ T63] Bluetooth: hci0: command 0x041b tx timeout [ 132.178929][ T9368] hsr_slave_0: entered promiscuous mode [ 132.181304][ T9368] hsr_slave_1: entered promiscuous mode [ 132.183594][ T9368] debugfs: 'hsr0' already exists in 'hsr' [ 132.185553][ T9368] Cannot create hsr debugfs directory [ 132.255970][ T107] bridge_slave_1: left allmulticast mode [ 132.258394][ T107] bridge_slave_1: left promiscuous mode [ 132.260742][ T107] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.265727][ T107] bridge_slave_0: left allmulticast mode [ 132.268024][ T107] bridge_slave_0: left promiscuous mode [ 132.269942][ T107] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.385907][ T107] bond2 (unregistering): (slave geneve2): Releasing active interface [ 132.513328][ T107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.518205][ T107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.522431][ T107] bond0 (unregistering): Released all slaves [ 132.531183][ T107] bond1 (unregistering): Released all slaves [ 132.542779][ T107] bond2 (unregistering): Released all slaves [ 132.631451][ T9425] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.705998][ T9425] bond2: (slave ip6gretap1): making interface the new active one [ 132.709848][ T9425] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 132.811041][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 132.811057][ T40] audit: type=1800 audit(1774549894.606:520): pid=9429 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.812" name="file0" dev="tmpfs" ino=781 res=0 errno=0 [ 132.838372][ T40] audit: type=1800 audit(1774549894.606:521): pid=9429 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.812" name="file0" dev="tmpfs" ino=781 res=0 errno=0 [ 132.853770][ T40] audit: type=1800 audit(1774549894.606:522): pid=9429 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.812" name="file0" dev="tmpfs" ino=781 res=0 errno=0 [ 132.865922][ T40] audit: type=1800 audit(1774549894.606:523): pid=9429 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.812" name="file0" dev="tmpfs" ino=781 res=0 errno=0 [ 132.876143][ T40] audit: type=1800 audit(1774549894.606:524): pid=9429 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.812" name="file0" dev="tmpfs" ino=781 res=0 errno=0 [ 132.883964][ T40] audit: type=1800 audit(1774549894.606:525): pid=9429 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.812" name="file0" dev="tmpfs" ino=781 res=0 errno=0 [ 132.892205][ T40] audit: type=1800 audit(1774549894.606:526): pid=9429 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.812" name="file0" dev="tmpfs" ino=781 res=0 errno=0 [ 132.901556][ T40] audit: type=1800 audit(1774549894.606:527): pid=9429 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.812" name="file0" dev="tmpfs" ino=781 res=0 errno=0 [ 132.921325][ T40] audit: type=1800 audit(1774549894.606:528): pid=9429 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.812" name="file0" dev="tmpfs" ino=781 res=0 errno=0 [ 132.930558][ T40] audit: type=1800 audit(1774549894.606:529): pid=9429 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.812" name="file0" dev="tmpfs" ino=781 res=0 errno=0 [ 132.973096][ T9447] exFAT-fs (loop3): unable to read boot sector [ 132.975477][ T9447] exFAT-fs (loop3): failed to read boot sector [ 132.982319][ T9447] exFAT-fs (loop3): failed to recognize exfat type [ 132.988765][ T9447] exFAT-fs (loop3): unable to read boot sector [ 132.993731][ T9447] exFAT-fs (loop3): failed to read boot sector [ 132.995963][ T9447] exFAT-fs (loop3): failed to recognize exfat type [ 133.127536][ T107] dummy0: left promiscuous mode [ 133.154126][ T9473] sctp: [Deprecated]: syz.2.822 (pid 9473) Use of int in max_burst socket option deprecated. [ 133.154126][ T9473] Use struct sctp_assoc_value instead [ 133.162422][ T107] hsr_slave_0: left promiscuous mode [ 133.173913][ T107] hsr_slave_1: left promiscuous mode [ 133.176033][ T107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.186612][ T107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.189982][ T107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.192351][ T107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.210185][ T107] veth1_macvtap: left promiscuous mode [ 133.212011][ T107] veth0_macvtap: left promiscuous mode [ 133.213747][ T107] veth1_vlan: left promiscuous mode [ 133.215458][ T107] veth0_vlan: left promiscuous mode [ 133.367781][ T107] team0 (unregistering): Port device team_slave_1 removed [ 133.375806][ T107] team0 (unregistering): Port device team_slave_0 removed [ 133.476198][ T9491] Falling back ldisc for ttyS3. [ 133.489535][ T9461] __nla_validate_parse: 4 callbacks suppressed [ 133.489547][ T9461] netlink: 52 bytes leftover after parsing attributes in process `syz.1.820'. [ 133.642203][ T9504] bridge0: entered promiscuous mode [ 133.700453][ T9511] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 133.716794][ T9511] netlink: 27 bytes leftover after parsing attributes in process `syz.2.829'. [ 133.750941][ T9514] tmpfs: Bad value for 'mpol' [ 133.790349][ T9516] sctp: [Deprecated]: syz.2.831 (pid 9516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.790349][ T9516] Use struct sctp_sack_info instead [ 133.826886][ T63] Bluetooth: hci2: command tx timeout [ 133.877162][ T54] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.973746][ T9532] netlink: 20 bytes leftover after parsing attributes in process `syz.2.833'. [ 134.012635][ T9530] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2139632632 (8558530528 ns) > initial count (4400489236 ns). Using initial count to start timer. [ 134.228088][ T63] Bluetooth: hci0: command 0x041b tx timeout [ 134.230817][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.287530][ T9560] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 134.716769][ T2298] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 134.886749][ T2298] usb 6-1: Using ep0 maxpacket: 32 [ 134.891345][ T2298] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 134.897334][ T2298] usb 6-1: string descriptor 0 read error: -22 [ 134.899513][ T2298] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 134.902238][ T2298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.127293][ T2298] usb 6-1: USB disconnect, device number 12 [ 135.374103][ T9368] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 135.399326][ T9368] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 135.404881][ T9368] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 135.415063][ T9368] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 135.474590][ T9368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.490077][ T9368] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.502545][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.505148][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.519003][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.521450][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.560475][ T9368] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.563783][ T9368] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.719997][ T9644] netfs: Couldn't get user pages (rc=-14) [ 135.725180][ T9368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.734334][ T9636] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 135.759059][ T9368] veth0_vlan: entered promiscuous mode [ 135.765494][ T9368] veth1_vlan: entered promiscuous mode [ 135.788622][ T9368] veth0_macvtap: entered promiscuous mode [ 135.795829][ T9368] veth1_macvtap: entered promiscuous mode [ 135.806290][ T9368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.811915][ T9368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.827092][ T1153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.830835][ T1153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.846774][ T1153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.849886][ T1153] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.916673][ T5938] Bluetooth: hci2: command tx timeout [ 135.926960][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.927306][ T9218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.930124][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.932736][ T9218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.316661][ T5938] Bluetooth: hci0: command 0x041b tx timeout [ 136.508992][ T9691] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 137.245831][ T9728] x_tables: duplicate underflow at hook 1 [ 137.489498][ T9218] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.613162][ T9218] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.681164][ T9218] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.750295][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.753045][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.764338][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.768904][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.772694][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.777571][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.781272][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.802861][ T9218] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.830511][ T9753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9753 comm=syz.0.882 [ 137.876741][ T6661] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 137.888065][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'. [ 137.986938][ T63] Bluetooth: hci2: command tx timeout [ 137.990865][ T9757] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 137.994078][ T9757] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 138.001854][ T9757] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 138.004274][ T9757] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 138.029623][ T6661] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 138.033753][ T6661] usb 7-1: config 0 interface 0 has no altsetting 0 [ 138.038768][ T6661] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 138.042583][ T6661] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 138.046133][ T6661] usb 7-1: Product: syz [ 138.048531][ T6661] usb 7-1: Manufacturer: syz [ 138.050558][ T6661] usb 7-1: SerialNumber: syz [ 138.061126][ T6661] usb 7-1: config 0 descriptor?? [ 138.069075][ T9218] bridge_slave_1: left allmulticast mode [ 138.071659][ T9218] bridge_slave_1: left promiscuous mode [ 138.074320][ T9218] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.074466][ T6661] usb 7-1: selecting invalid altsetting 0 [ 138.080973][ T40] kauditd_printk_skb: 72 callbacks suppressed [ 138.080984][ T40] audit: type=1400 audit(1774549899.886:602): avc: denied { bind } for pid=9759 comm="syz.0.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 138.087662][ T9218] bridge_slave_0: left allmulticast mode [ 138.091625][ T9218] bridge_slave_0: left promiscuous mode [ 138.093995][ T9218] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.171439][ T9762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.884'. [ 138.300971][ T9218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.305948][ T9218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.310701][ T9218] bond0 (unregistering): Released all slaves [ 138.318333][ T9218] bond1 (unregistering): Released all slaves [ 138.329312][ T9750] chnl_net:caif_netlink_parms(): no params data found [ 138.350868][ T9767] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.885'. [ 138.440448][ T9777] netlink: 76 bytes leftover after parsing attributes in process `syz.0.886'. [ 138.444303][ T9750] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.446728][ T9750] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.449172][ T9750] bridge_slave_0: entered allmulticast mode [ 138.451937][ T9750] bridge_slave_0: entered promiscuous mode [ 138.455190][ T9750] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.458174][ T9750] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.460663][ T9750] bridge_slave_1: entered allmulticast mode [ 138.463806][ T9750] bridge_slave_1: entered promiscuous mode [ 138.508427][ T9750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.513214][ T9750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.529272][ T9750] team0: Port device team_slave_0 added [ 138.533544][ T9750] team0: Port device team_slave_1 added [ 138.605102][ T9750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.608797][ T9750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.617585][ T9750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.622392][ T9750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.624934][ T9750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.636278][ T9750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.675855][ T9218] hsr_slave_0: left promiscuous mode [ 138.679159][ T9218] hsr_slave_1: left promiscuous mode [ 138.681522][ T9218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.683919][ T9218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.687036][ T9218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.689609][ T9218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.693928][ T9218] veth1_macvtap: left promiscuous mode [ 138.695700][ T9218] veth0_macvtap: left promiscuous mode [ 138.697674][ T9218] veth1_vlan: left promiscuous mode [ 138.699404][ T9218] veth0_vlan: left promiscuous mode [ 138.735579][ T9792] comedi comedi3: pcl812: I/O port conflict (0xcfc,16) [ 138.785883][ T40] audit: type=1400 audit(1774549900.586:603): avc: denied { getopt } for pid=9794 comm="syz.0.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.796841][ T40] audit: type=1400 audit(1774549900.596:604): avc: denied { ioctl } for pid=9794 comm="syz.0.890" path="socket:[35031]" dev="sockfs" ino=35031 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 138.855775][ T9218] team0 (unregistering): Port device team_slave_1 removed [ 138.867500][ T9218] team0 (unregistering): Port device team_slave_0 removed [ 138.965994][ T9750] hsr_slave_0: entered promiscuous mode [ 138.968730][ T9750] hsr_slave_1: entered promiscuous mode [ 139.209258][ T40] audit: type=1400 audit(1774549901.016:605): avc: denied { append } for pid=9808 comm="syz.0.893" name="2:0:0:0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 139.217880][ T9809] syz.0.893: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 139.590670][ T40] audit: type=1400 audit(1774549901.396:606): avc: denied { append } for pid=9836 comm="syz.0.896" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 139.599708][ T9837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.896'. [ 139.603763][ T9837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.896'. [ 139.609558][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 139.614291][ T40] audit: type=1400 audit(1774549901.416:607): avc: denied { append } for pid=9836 comm="syz.0.896" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 139.829775][ T63] Bluetooth: hci1: command tx timeout [ 140.020295][ T9857] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 140.077315][ T63] Bluetooth: hci2: command tx timeout [ 140.101985][ T40] audit: type=1400 audit(1774549901.906:608): avc: denied { read open } for pid=9862 comm="syz.0.899" path="/" dev="configfs" ino=3128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 140.385775][ T9750] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 140.403718][ T9750] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 140.421058][ T9750] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 140.440215][ T9750] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 140.451520][ T9877] netlink: 'syz.0.900': attribute type 2 has an invalid length. [ 140.474268][ T29] usb 7-1: USB disconnect, device number 13 [ 140.475911][ T9877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9877 comm=syz.0.900 [ 140.539684][ T9891] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 140.544927][ T9891] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 140.550912][ T40] audit: type=1400 audit(1774549902.346:609): avc: denied { firmware_load } for pid=9890 comm="syz.0.902" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 140.584888][ T9750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.600751][ T9750] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.606828][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.610110][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.618465][ T9218] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.621590][ T9218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.633721][ T9900] fuseblk: Unknown parameter 'smackfsroot' [ 140.643859][ T9900] sctp: [Deprecated]: syz.0.903 (pid 9900) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.643859][ T9900] Use struct sctp_sack_info instead [ 140.657734][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.903'. [ 140.691948][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.904'. [ 140.695304][ T9903] ip6t_srh: unknown srh match flags 4000 [ 140.711509][ T9906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.822749][ T9750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.823708][ T9922] sctp: [Deprecated]: syz.2.907 (pid 9922) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.823708][ T9922] Use struct sctp_sack_info instead [ 140.902040][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'. [ 140.908281][ T9932] netlink: 52 bytes leftover after parsing attributes in process `syz.2.908'. [ 140.949220][ T40] audit: type=1400 audit(1774549902.756:610): avc: denied { map } for pid=9937 comm="syz.2.909" path="socket:[36986]" dev="sockfs" ino=36986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 140.985822][ T9750] veth0_vlan: entered promiscuous mode [ 140.993109][ T9750] veth1_vlan: entered promiscuous mode [ 140.995604][ T9942] netlink: 'syz.2.910': attribute type 1 has an invalid length. [ 141.000732][ T9942] netlink: 'syz.2.910': attribute type 2 has an invalid length. [ 141.003289][ T9942] netlink: 'syz.2.910': attribute type 2 has an invalid length. [ 141.005804][ T9942] netlink: 'syz.2.910': attribute type 1 has an invalid length. [ 141.020674][ T9750] veth0_macvtap: entered promiscuous mode [ 141.025190][ T9750] veth1_macvtap: entered promiscuous mode [ 141.039625][ T9750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.045873][ T9750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.052793][ T9218] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.055935][ T9218] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.069494][ T9221] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.073505][ T9221] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.077531][ T40] audit: type=1400 audit(1774549902.876:611): avc: denied { watch watch_reads } for pid=9947 comm="syz.2.912" path="/proc/805" dev="proc" ino=36065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 141.122234][ T9218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.124812][ T9218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.149245][ T9221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.152811][ T9221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.435359][ T9995] erspan0: invalid flags given to default FDB implementation [ 141.480325][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'. [ 141.483066][T10014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.925'. [ 141.485896][T10014] netlink: 'syz.0.925': attribute type 11 has an invalid length. [ 141.504572][T10016] block device autoloading is deprecated and will be removed. [ 141.527416][T10008] libceph: secret too big 289 [ 141.539848][T10021] fuse: Invalid rootmode [ 141.616956][ T1153] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96 [ 141.651184][T10037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10037 comm=syz.0.930 [ 141.666250][T10032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.677461][T10024] netlink: 'syz.2.928': attribute type 4 has an invalid length. [ 141.680569][T10024] netlink: 'syz.2.928': attribute type 4 has an invalid length. [ 141.727325][T10024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=10024 comm=syz.2.928 [ 141.752645][T10053] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 141.753500][T10054] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 141.906817][ T63] Bluetooth: hci1: command tx timeout [ 141.923662][T10059] CIFS: iocharset name too long [ 141.926410][T10059] sctp: [Deprecated]: syz.2.934 (pid 10059) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.926410][T10059] Use struct sctp_sack_info instead [ 141.932219][T10059] sctp: [Deprecated]: syz.2.934 (pid 10059) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.932219][T10059] Use struct sctp_sack_info instead [ 142.143211][T10075] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 142.145986][T10075] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 142.149884][T10075] vhci_hcd vhci_hcd.0: Device attached [ 142.152783][T10077] vhci_hcd: cannot find the pending unlink 4 [ 142.154787][T10077] vhci_hcd: connection closed [ 142.156053][ T1153] vhci_hcd vhci_hcd.2: stop threads [ 142.160073][ T1153] vhci_hcd vhci_hcd.2: release socket [ 142.162066][ T1153] vhci_hcd vhci_hcd.2: disconnect device [ 142.500469][T10089] netlink: 'syz.0.943': attribute type 64 has an invalid length. [ 142.502966][T10089] netlink: 'syz.0.943': attribute type 4 has an invalid length. [ 142.505446][T10089] netlink: 152 bytes leftover after parsing attributes in process `syz.0.943'. [ 142.562279][T10091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.818646][T10098] 9pnet_virtio: no channels available for device syz [ 142.830911][T10097] 9pnet_virtio: no channels available for device wlan0 [ 142.867611][T10114] autofs4:pid:10114:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 142.872792][T10114] ALSA: mixer_oss: invalid OSS volume '' [ 142.928728][T10124] xt_socket: unknown flags 0x48 [ 142.946489][T10124] 9pnet_virtio: no channels available for device 127.0.0.1 [ 143.986892][ T63] Bluetooth: hci1: command tx timeout [ 146.066931][ T63] Bluetooth: hci1: command tx timeout [ 148.628597][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 158.970828][T10188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.979572][T10188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.983569][T10188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.989007][T10188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.993265][T10188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.050878][ T5938] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 159.058431][ T5938] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 159.062430][ T5938] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.065305][ T5938] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.069276][T10184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.075923][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 159.075934][ T40] audit: type=1400 audit(1774549920.876:618): avc: denied { ioctl } for pid=10207 comm="syz.0.962" path="socket:[37199]" dev="sockfs" ino=37199 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 159.076909][ T5938] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 159.089473][ T40] audit: type=1400 audit(1774549920.896:619): avc: denied { accept } for pid=10207 comm="syz.0.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 159.129157][T10215] trusted_key: encrypted_key: insufficient parameters specified [ 159.176333][T10215] omfs: Invalid superblock (0) [ 159.206400][T10223] comedi comedi4: bad chanlist[0]=0x00001000 chan=4096 range length=2 [ 159.234948][T10228] 9pnet_virtio: no channels available for device syz [ 159.255494][T10201] chnl_net:caif_netlink_parms(): no params data found [ 159.318804][T10201] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.321162][T10201] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.323439][T10201] bridge_slave_0: entered allmulticast mode [ 159.326094][T10201] bridge_slave_0: entered promiscuous mode [ 159.329388][T10201] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.331814][T10201] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.334253][T10201] bridge_slave_1: entered allmulticast mode [ 159.337600][T10201] bridge_slave_1: entered promiscuous mode [ 159.352577][T10201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.355491][ T40] audit: type=1400 audit(1774549921.156:620): avc: denied { ioctl } for pid=10239 comm="syz.4.970" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 159.357862][T10201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.379007][T10201] team0: Port device team_slave_0 added [ 159.382172][T10201] team0: Port device team_slave_1 added [ 159.396175][T10201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.398575][T10201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.406635][T10201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.410799][T10201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.412925][T10201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.418326][T10247] __nla_validate_parse: 9 callbacks suppressed [ 159.418339][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.970'. [ 159.420876][T10201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.423979][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.970'. [ 159.442518][ T40] audit: type=1400 audit(1774549921.246:621): avc: denied { read } for pid=10239 comm="syz.4.970" path="socket:[35817]" dev="sockfs" ino=35817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 159.452679][T10201] hsr_slave_0: entered promiscuous mode [ 159.454934][T10201] hsr_slave_1: entered promiscuous mode [ 159.458048][T10201] debugfs: 'hsr0' already exists in 'hsr' [ 159.460355][T10201] Cannot create hsr debugfs directory [ 159.946302][T10201] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 159.952728][T10201] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 159.957384][T10201] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 159.962393][T10201] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 159.987383][T10201] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.989683][T10201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.992082][T10201] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.994322][T10201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.022059][T10201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.030513][ T9220] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.034221][ T9220] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.046983][T10201] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.053017][ T9220] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.055421][ T9220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.061976][T10034] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.064970][T10034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.154090][T10289] nbd: must specify at least one socket [ 160.187647][T10201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.338699][T10201] veth0_vlan: entered promiscuous mode [ 160.347894][T10201] veth1_vlan: entered promiscuous mode [ 160.373338][T10201] veth0_macvtap: entered promiscuous mode [ 160.381829][T10201] veth1_macvtap: entered promiscuous mode [ 160.396439][T10201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.404386][T10201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.414127][ T9220] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.417542][ T9220] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.421207][ T9220] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.424296][ T9220] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.493291][ T9220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.497708][ T9220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.523478][ T9220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.526626][ T9220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.584512][ T40] audit: type=1400 audit(1774549922.386:622): avc: denied { lock } for pid=10315 comm="syz.5.956" path="socket:[36362]" dev="sockfs" ino=36362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 161.108596][T10336] Cannot find add_set index 0 as target [ 161.196848][ T5940] Bluetooth: hci4: command tx timeout [ 161.346972][ T63] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 161.516734][ T63] Bluetooth: hci6: command 0xfc11 tx timeout [ 161.520597][ T5938] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 161.722295][T10374] mkiss: ax0: crc mode is auto. [ 161.956487][ T40] audit: type=1400 audit(1774549923.756:623): avc: denied { setattr } for pid=10390 comm="syz.2.989" name="[io_uring]" dev="anon_inodefs" ino=39074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 162.114399][ T40] audit: type=1400 audit(1774549923.916:624): avc: denied { perfmon } for pid=10403 comm="syz.0.993" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.128299][ T40] audit: type=1400 audit(1774549923.926:625): avc: denied { bpf } for pid=10405 comm="syz.4.994" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.261806][T10414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=10414 comm=syz.0.996 [ 162.412119][T10430] rdma_op ffff888040b201f0 conn xmit_rdma 0000000000000000 [ 162.644694][T10449] sctp: [Deprecated]: syz.0.1007 (pid 10449) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.644694][T10449] Use struct sctp_sack_info instead [ 162.649423][T10450] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 162.691662][T10454] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1010'. [ 162.738234][T10454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10454 comm=syz.5.1010 [ 162.973298][T10483] tipc: Started in network mode [ 162.975091][T10483] tipc: Node identity 080211000001, cluster identity 4711 [ 162.981951][T10483] tipc: Enabled bearer , priority 10 [ 162.986468][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1017'. [ 162.994961][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1017'. [ 163.037730][T10490] validate_nla: 2 callbacks suppressed [ 163.037743][T10490] netlink: 'syz.2.1019': attribute type 32 has an invalid length. [ 163.100794][T10500] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1022'. [ 163.120921][T10500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1022'. [ 163.186896][ T40] audit: type=1400 audit(1774549924.986:626): avc: denied { mount } for pid=10513 comm="syz.4.1024" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 163.236380][T10523] overlayfs: conflicting lowerdir path [ 163.243967][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1026'. [ 163.250691][ T40] audit: type=1400 audit(1774549925.056:627): avc: denied { write } for pid=10520 comm="syz.2.1025" name="pfkey" dev="proc" ino=4026533301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 163.270061][ T5938] Bluetooth: hci4: command tx timeout [ 163.998417][ T7927] tipc: Node number set to 134418688 [ 164.110392][T10565] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1041'. [ 164.370549][T10529] orangefs_mount: mount request failed with -4 [ 164.383405][T10574] ptrace attach of "/syz-executor exec"[10577] was attempted by "/syz-executor exec"[10574] [ 164.421197][T10579] macsec0: entered promiscuous mode [ 164.423836][T10579] macsec0: entered allmulticast mode [ 164.426153][T10579] veth1_macvtap: entered allmulticast mode [ 164.486683][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 164.486694][ T40] audit: type=1400 audit(1774549926.296:632): avc: denied { map } for pid=10585 comm="syz.2.1048" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 164.508296][ T40] audit: type=1400 audit(1774549926.316:633): avc: denied { name_bind } for pid=10587 comm="syz.5.1050" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 164.642634][ T40] audit: type=1400 audit(1774549926.446:634): avc: denied { map } for pid=10583 comm="syz.0.1049" path="socket:[38618]" dev="sockfs" ino=38618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 164.656667][ T40] audit: type=1400 audit(1774549926.446:635): avc: denied { read } for pid=10583 comm="syz.0.1049" path="socket:[38618]" dev="sockfs" ino=38618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 164.735735][T10596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1052'. [ 164.740871][T10614] evm: overlay not supported [ 164.911944][ T40] audit: type=1400 audit(1774549926.716:636): avc: denied { block_suspend } for pid=10627 comm="syz.4.1059" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 164.978562][T10633] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1059'. [ 165.028465][T10635] 9pnet_fd: p9_fd_create_tcp (10635): problem connecting socket to 127.0.0.1 [ 165.120479][ T40] audit: type=1400 audit(1774549926.926:637): avc: denied { write } for pid=10642 comm="syz.5.1064" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 165.177710][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1065'. [ 165.230169][T10648] ubi0: attaching mtd0 [ 165.233116][T10648] CIFS mount error: No usable UNC path provided in device string! [ 165.233116][T10648] [ 165.236433][T10648] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 165.245076][ T40] audit: type=1400 audit(1774549927.046:638): avc: denied { getopt } for pid=10647 comm="syz.5.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 165.274705][T10651] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1067'. [ 165.280370][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1067'. [ 165.348468][ T5938] Bluetooth: hci4: command tx timeout [ 165.353874][ T40] audit: type=1400 audit(1774549927.156:639): avc: denied { connect } for pid=10655 comm="syz.0.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 165.690293][ T40] audit: type=1400 audit(1774549927.496:640): avc: denied { mount } for pid=10674 comm="syz.0.1076" name="/" dev="autofs" ino=40448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 165.750643][T10681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1078'. [ 165.900890][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1084'. [ 165.904169][T10701] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1084'. [ 165.924842][ T40] audit: type=1400 audit(1774549927.726:641): avc: denied { write } for pid=10699 comm="syz.5.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.117538][ T6012] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 166.312736][T10733] tmpfs: Bad value for 'mpol' [ 166.387855][T10742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.426924][ T5938] Bluetooth: hci4: command tx timeout [ 178.038282][T10775] vim2m vim2m.0: vidioc_s_fmt queue busy [ 178.086795][T10782] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1101'. [ 178.126218][T10786] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 178.130824][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 178.130841][ T40] audit: type=1400 audit(1774549939.926:643): avc: denied { mounton } for pid=10784 comm="syz.2.1100" path="/316/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 178.138655][T10786] qnx4: no qnx4 filesystem (no root dir). [ 178.203937][ T40] audit: type=1400 audit(1774549940.006:644): avc: denied { read } for pid=10791 comm="syz.2.1104" path="socket:[38877]" dev="sockfs" ino=38877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 178.221906][ T40] audit: type=1400 audit(1774549940.026:645): avc: denied { append } for pid=10772 comm="syz.5.1097" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 178.235957][ T40] audit: type=1400 audit(1774549940.026:646): avc: denied { map } for pid=10772 comm="syz.5.1097" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 178.248773][ T40] audit: type=1400 audit(1774549940.056:647): avc: denied { ioctl } for pid=10800 comm="syz.4.1105" path="socket:[39922]" dev="sockfs" ino=39922 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 178.313305][T10812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1106'. [ 178.457028][T10817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10817 comm=syz.2.1116 [ 178.478359][T10820] vim2m vim2m.0: vidioc_s_fmt queue busy [ 178.645548][T10835] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 178.655015][T10835] overlayfs: failed to set xattr on upper [ 178.657272][T10835] overlayfs: ...falling back to redirect_dir=nofollow. [ 178.660495][T10835] overlayfs: ...falling back to index=off. [ 178.663068][T10835] overlayfs: ...falling back to uuid=null. [ 178.730532][T10844] could not allocate digest TFM handle hmac(streebog512) [ 178.737003][T10843] could not allocate digest TFM handle hmac(streebog512) [ 178.766531][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'. [ 178.769542][T10856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1120'. [ 178.772657][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1120'. [ 178.782416][ T1153] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.785380][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'. [ 178.788454][ T1153] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.791272][ T1153] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.794101][ T1153] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.800211][T10856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1120'. [ 178.803203][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1120'. [ 178.816656][ T6657] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 178.879070][ T40] audit: type=1400 audit(1774549940.686:648): avc: denied { create } for pid=10860 comm="syz.4.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 178.889471][ T40] audit: type=1400 audit(1774549940.686:649): avc: denied { sys_admin } for pid=10860 comm="syz.4.1122" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 178.968332][ T6657] usb 7-1: Using ep0 maxpacket: 8 [ 178.972520][ T6657] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 178.983417][ T6657] usb 7-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 178.988591][ T6657] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.991429][ T6657] usb 7-1: Product: syz [ 178.994199][ T6657] usb 7-1: Manufacturer: syz [ 178.997538][ T6657] usb 7-1: SerialNumber: syz [ 179.304016][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1126'. [ 179.308218][T10871] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1126'. [ 179.616535][ T6657] usb 7-1: unable to issue vendor read request (ret = -71) [ 179.620529][ T6657] usb 7-1: unable to issue vendor read request (ret = -71) [ 179.623532][ T6657] usb 7-1: unable to issue vendor read request (ret = -71) [ 179.626159][ T6657] usb 7-1: unable to issue vendor read request (ret = -71) [ 179.649915][ T6657] usb 7-1: USB disconnect, device number 14 [ 179.676811][T10783] udevd[10783]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.812429][ T40] audit: type=1400 audit(1774549941.616:650): avc: denied { bind } for pid=10877 comm="syz.0.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 179.833307][T10878] bond2: entered promiscuous mode [ 179.835942][T10878] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.856807][T10878] bond2: (slave sit1): refused to change device type [ 179.859419][ T40] audit: type=1400 audit(1774549941.666:651): avc: denied { read } for pid=10880 comm="syz.4.1130" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 179.870439][ T40] audit: type=1400 audit(1774549941.666:652): avc: denied { open } for pid=10880 comm="syz.4.1130" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 180.076675][ T5938] Bluetooth: hci1: command tx timeout [ 180.354399][T10915] syzkaller0: entered promiscuous mode [ 180.356338][T10915] syzkaller0: entered allmulticast mode [ 180.361093][ T9219] 0: reclassify loop, rule prio 0, protocol 800 [ 180.399821][T10923] batadv1: entered allmulticast mode [ 180.438366][T10929] pim6reg: entered allmulticast mode [ 180.727147][T10952] befs: (loop0): No write support. Marking filesystem read-only [ 180.730184][T10952] befs: (loop0): unable to read superblock [ 180.736870][ T7562] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 180.857409][T10966] loop6: detected capacity change from 0 to 524287999 [ 180.864098][T10783] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.867758][T10783] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.871847][T10783] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.875134][T10783] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.879138][T10783] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.882564][T10783] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.885846][T10783] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.889369][T10783] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.892878][T10783] ldm_validate_partition_table(): Disk read failed. [ 180.895562][T10783] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.898515][T10783] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.901883][T10783] Dev loop6: unable to read RDB block 0 [ 180.905396][ T7562] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 180.908098][T10783] loop6: unable to read partition table [ 180.910128][ T7562] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.920069][ T6015] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 180.921349][T10966] ldm_validate_partition_table(): Disk read failed. [ 180.925317][T10966] Dev loop6: unable to read RDB block 0 [ 180.928152][T10966] loop6: unable to read partition table [ 180.930780][T10966] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x) failed (rc=-5) [ 180.935289][ T7562] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 180.939239][ T7562] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 180.942587][ T7562] usb 9-1: Manufacturer: syz [ 180.946959][ T7562] usb 9-1: config 0 descriptor?? [ 181.006670][ T7562] rc_core: IR keymap rc-hauppauge not found [ 181.009618][ T7562] Registered IR keymap rc-empty [ 181.014847][ T7562] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 181.020904][T10966] ldm_validate_partition_table(): Disk read failed. [ 181.026951][T10966] Dev loop6: unable to read RDB block 0 [ 181.028434][ T7562] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input18 [ 181.030504][T10966] loop6: unable to read partition table [ 181.036935][T10966] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x) failed (rc=-5) [ 181.066680][ T6015] usb 10-1: Using ep0 maxpacket: 16 [ 181.070812][ T6015] usb 10-1: config 0 has no interfaces? [ 181.073093][ T6015] usb 10-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 181.082664][ T6015] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.090549][ T6015] usb 10-1: config 0 descriptor?? [ 181.157146][ T5992] usb 9-1: USB disconnect, device number 2 [ 181.294980][ T5938] Bluetooth: hci4: unknown advertising packet type: 0x65 [ 181.295022][ T5938] Bluetooth: hci4: Dropping invalid advertising data [ 181.299793][ T5938] Bluetooth: hci4: Malformed LE Event: 0x02 [ 181.316180][ T2298] usb 10-1: USB disconnect, device number 2 [ 181.829723][T11004] MTD: Couldn't look up '/dev/sg0': -15 [ 181.831681][T11004] /dev/sg0: Can't lookup blockdev [ 181.956685][ T2298] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 182.108467][ T2298] usb 7-1: Using ep0 maxpacket: 32 [ 182.111720][ T2298] usb 7-1: config 0 has no interfaces? [ 182.113569][ T2298] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 182.120765][ T2298] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.125921][ T2298] usb 7-1: config 0 descriptor?? [ 182.164762][T11026] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 182.342402][T11039] syzkaller1: entered promiscuous mode [ 182.344293][T11039] syzkaller1: entered allmulticast mode [ 182.347001][T10994] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 182.360129][T11037] nvme_fabrics: missing parameter 'transport=%s' [ 182.363083][T11037] nvme_fabrics: missing parameter 'nqn=%s' [ 182.439413][ T6012] usb 7-1: USB disconnect, device number 15 [ 182.487431][ T6011] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 183.097733][T11067] __nla_validate_parse: 11 callbacks suppressed [ 183.097745][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1182'. [ 183.105892][T11067] vlan2: entered allmulticast mode [ 183.108956][T11067] vlan0: entered allmulticast mode [ 183.111589][T11067] veth0_vlan: entered allmulticast mode [ 183.545207][T11073] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1186'. [ 183.776606][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 183.776622][ T40] audit: type=1400 audit(1774549945.576:664): avc: denied { connect } for pid=11092 comm="syz.0.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 183.831847][ T40] audit: type=1400 audit(1774549945.636:665): avc: denied { write } for pid=11092 comm="syz.0.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 183.840617][ T40] audit: type=1400 audit(1774549945.646:666): avc: denied { setattr } for pid=11092 comm="syz.0.1191" path="socket:[40840]" dev="sockfs" ino=40840 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 183.931165][T11098] overlayfs: failed lookup in lower (newroot/68, name='file1', err=-40): overlapping layers [ 183.935918][T11098] overlayfs: failed lookup in lower (newroot/68, name='bus', err=-40): overlapping layers [ 183.966901][ T53] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 184.126830][ T53] usb 7-1: Using ep0 maxpacket: 8 [ 184.130493][ T53] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.134197][ T53] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 184.138056][ T53] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 184.141653][ T53] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.146997][ T53] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 184.150558][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.357155][ T53] usb 7-1: GET_CAPABILITIES returned 0 [ 184.359530][ T53] usbtmc 7-1:16.0: can't read capabilities [ 184.616714][ T7562] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 184.716717][T11110] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1197'. [ 184.779346][ T7562] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 184.782386][ T7562] usb 5-1: can't read configurations, error -61 [ 184.797771][T11114] comedi comedi3: comedi_config --init_data is deprecated [ 184.916697][ T7562] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 185.019714][T11132] netlink: 'syz.5.1204': attribute type 6 has an invalid length. [ 185.028100][T11132] netlink: 'syz.5.1204': attribute type 4 has an invalid length. [ 185.030759][T11132] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1204'. [ 185.079849][ T7562] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 185.082321][ T7562] usb 5-1: can't read configurations, error -61 [ 185.085630][ T7562] usb usb5-port1: attempt power cycle [ 185.165012][ T40] audit: type=1804 audit(1774549946.966:667): pid=11137 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1206" name="/newroot/76/file0" dev="tmpfs" ino=424 res=1 errno=0 [ 185.167216][T11137] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: 1 [ 185.176890][T11145] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 185.180037][T11137] ref_ctr increment failed for inode: 0x1a8 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802c750000 [ 185.183031][T11145] exFAT-fs (nullb0): invalid boot record signature [ 185.188677][T11145] exFAT-fs (nullb0): failed to read boot sector [ 185.190828][T11137] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: -1 [ 185.190975][T11145] exFAT-fs (nullb0): failed to recognize exfat type [ 185.196064][T11137] ref_ctr decrement failed for inode: 0x1a8 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802c750000 [ 185.201209][T11137] uprobe: syz.5.1206:11137 failed to unregister, leaking uprobe [ 185.239451][T11149] xt_hashlimit: size too large, truncated to 1048576 [ 185.358162][T11156] netlink: 'syz.5.1211': attribute type 1 has an invalid length. [ 185.384640][T11156] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.387870][T11156] bond1: (slave bond2): making interface the new active one [ 185.391045][T11156] bond1: (slave bond2): Enslaving as an active interface with an up link [ 185.433648][T11160] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 185.433723][ T7562] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 185.458647][ T7562] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 185.462115][ T7562] usb 5-1: can't read configurations, error -61 [ 185.596889][ T7562] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 185.631538][ T7562] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 185.633987][ T7562] usb 5-1: can't read configurations, error -61 [ 185.637352][ T7562] usb usb5-port1: unable to enumerate USB device [ 185.716645][ T53] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 185.780246][ T40] audit: type=1400 audit(1774549947.586:668): avc: denied { set_context_mgr } for pid=11174 comm="syz.5.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 185.883559][ T53] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 185.888175][ T53] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 185.891896][ T53] usb 9-1: Product: syz [ 185.893861][ T53] usb 9-1: Manufacturer: syz [ 185.895801][ T53] usb 9-1: SerialNumber: syz [ 185.900894][ T53] usb 9-1: config 0 descriptor?? [ 186.110003][T11185] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 186.110647][T11165] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 186.115399][T11185] overlayfs: overlapping lowerdir path [ 186.121620][T11165] overlayfs: overlapping lowerdir path [ 186.159701][ T53] usb 9-1: USB disconnect, device number 4 [ 186.752619][ T53] usb 7-1: USB disconnect, device number 16 [ 187.261098][T11206] netlink: 868 bytes leftover after parsing attributes in process `syz.5.1228'. [ 187.270212][T11206] netlink: 'syz.5.1228': attribute type 1 has an invalid length. [ 187.283538][T11206] 8021q: adding VLAN 0 to HW filter on device bond3 [ 187.336705][ T7562] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 187.371486][T11216] netlink: 6160 bytes leftover after parsing attributes in process `syz.5.1230'. [ 187.460970][T11230] netlink: 'syz.5.1230': attribute type 2 has an invalid length. [ 187.470828][T11216] loop1: detected capacity change from 0 to 128 [ 187.506856][ T7562] usb 7-1: Using ep0 maxpacket: 8 [ 187.513555][ T7562] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.519722][ T7562] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 187.523903][ T7562] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.528324][ T40] audit: type=1400 audit(1774549949.336:669): avc: denied { recv } for pid=11236 comm="syz.5.1237" saddr=::1 daddr=::1 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 187.534877][ T7562] usb 7-1: config 0 descriptor?? [ 187.548268][ T40] audit: type=1400 audit(1774549949.346:670): avc: denied { recv } for pid=11236 comm="syz.5.1237" saddr=127.0.0.1 src=36534 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 187.649407][T11248] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 187.668473][T11251] netlink: 'syz.0.1243': attribute type 1 has an invalid length. [ 187.670918][T11248] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1240'. [ 187.698591][T11251] 8021q: adding VLAN 0 to HW filter on device bond3 [ 187.711019][T11251] vlan3: entered allmulticast mode [ 187.713940][T11251] veth0_to_bond: entered allmulticast mode [ 187.725221][T11251] bond3: (slave vlan3): making interface the new active one [ 187.732038][T11251] bond3: (slave vlan3): Enslaving as an active interface with an up link [ 187.752045][ T7562] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 187.797260][T11255] ------------[ cut here ]------------ [ 187.799284][T11255] enable_ept && !allow_smaller_maxphyaddr [ 187.799293][T11255] WARNING: arch/x86/kvm/vmx/vmx.c:5444 at handle_exception_nmi+0xa6e/0x1bb0, CPU#2: syz.5.1244/11255 [ 187.805755][T11255] Modules linked in: [ 187.808032][T11255] CPU: 2 UID: 0 PID: 11255 Comm: syz.5.1244 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.812322][T11255] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 187.813939][T11255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.817701][T11255] RIP: 0010:handle_exception_nmi+0xa6e/0x1bb0 [ 187.819851][T11255] Code: 08 84 d2 0f 85 fd 10 00 00 44 0f b6 2d 96 e5 39 0f 31 ff 44 89 ee e8 41 40 69 00 45 84 ed 0f 85 b5 0e 00 00 e8 e3 45 69 00 90 <0f> 0b 90 31 ff 44 89 e6 e8 85 40 69 00 45 85 e4 0f 85 7f 0b 00 00 [ 187.827260][T11255] RSP: 0018:ffffc900039df9d8 EFLAGS: 00010293 [ 187.829510][T11255] RAX: 0000000000000000 RBX: ffff88803de829c0 RCX: ffffffff819fafef [ 187.832373][T11255] RDX: ffff88805acc8000 RSI: ffffffff819faffd RDI: ffff88805acc8000 [ 187.835180][T11255] RBP: 000000000f6632eb R08: 0000000000000001 R09: 0000000000000000 [ 187.838043][T11255] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 187.840768][T11255] R13: 0000000000000000 R14: ffff8880283cc000 R15: ffff88803de82a98 [ 187.843580][T11255] FS: 00007fce068f66c0(0000) GS:ffff8880d653f000(0000) knlGS:0000000000000000 [ 187.847186][T11255] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.849813][T11255] CR2: 0000000000000000 CR3: 000000004d769000 CR4: 0000000000352ef0 [ 187.852860][T11255] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000036 [ 187.855717][T11255] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 187.858812][T11255] Call Trace: [ 187.860192][T11255] [ 187.861277][T11255] ? __pfx_handle_exception_nmi+0x10/0x10 [ 187.863471][T11255] vmx_handle_exit+0x84d/0x1f40 [ 187.865395][T11255] vcpu_run+0x34cf/0x5ca0 [ 187.867200][T11255] ? __pfx_vcpu_run+0x10/0x10 [ 187.869011][T11255] ? rcu_is_watching+0x12/0xc0 [ 187.870892][T11255] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 187.873084][T11255] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 187.875085][T11255] kvm_vcpu_ioctl+0x730/0x1730 [ 187.876957][T11255] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 187.878943][T11255] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 187.881120][T11255] ? do_vfs_ioctl+0x226/0x13e0 [ 187.883170][T11255] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 187.885076][T11255] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 187.887577][T11255] ? __fget_files+0x215/0x3d0 [ 187.889273][T11255] ? hook_file_ioctl_common+0x146/0x410 [ 187.891231][T11255] ? selinux_file_ioctl+0x139/0x290 [ 187.892629][ T34] usb 7-1: USB disconnect, device number 17 [ 187.893153][T11255] ? selinux_file_ioctl+0xb4/0x290 [ 187.897747][T11255] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 187.899857][T11255] __x64_sys_ioctl+0x18e/0x210 [ 187.901829][T11255] do_syscall_64+0x106/0xf80 [ 187.903559][T11255] ? clear_bhb_loop+0x40/0x90 [ 187.905261][T11255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.907690][T11255] RIP: 0033:0x7fce0599c799 [ 187.909396][T11255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.917491][T11255] RSP: 002b:00007fce068f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.920681][T11255] RAX: ffffffffffffffda RBX: 00007fce05c15fa0 RCX: 00007fce0599c799 [ 187.923716][T11255] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 187.926887][T11255] RBP: 00007fce05a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 187.929870][T11255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.932934][T11255] R13: 00007fce05c16038 R14: 00007fce05c15fa0 R15: 00007ffc4f9dfc98 [ 187.936215][T11255] [ 187.937724][T11255] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 187.940866][T11255] CPU: 2 UID: 0 PID: 11255 Comm: syz.5.1244 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.944924][T11255] Tainted: [L]=SOFTLOCKUP [ 187.946478][T11255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.950099][T11255] Call Trace: [ 187.951338][T11255] [ 187.952427][T11255] dump_stack_lvl+0x100/0x190 [ 187.954253][T11255] vpanic+0x552/0x970 [ 187.955773][T11255] ? __pfx_vpanic+0x10/0x10 [ 187.957498][T11255] panic+0xd1/0xe0 [ 187.958901][T11255] ? __pfx_panic+0x10/0x10 [ 187.960504][T11255] ? check_panic_on_warn+0x1f/0x90 [ 187.962374][T11255] check_panic_on_warn.cold+0x19/0x34 [ 187.964529][T11255] ? handle_exception_nmi+0xa6e/0x1bb0 [ 187.966763][T11255] __warn.cold+0x191/0x348 [ 187.968613][T11255] __report_bug+0x296/0x3d0 [ 187.970375][T11255] ? handle_exception_nmi+0xa6e/0x1bb0 [ 187.972695][T11255] ? __pfx___report_bug+0x10/0x10 [ 187.975106][T11255] ? __pfx_skip_emulated_instruction+0x10/0x10 [ 187.977949][T11255] ? kvm_pmu_trigger_event.isra.0+0x789/0xc00 [ 187.980960][T11255] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 187.984061][T11255] ? handle_exception_nmi+0xa6e/0x1bb0 [ 187.986730][T11255] report_bug+0xb2/0x220 [ 187.988803][T11255] ? handle_exception_nmi+0xa6e/0x1bb0 [ 187.991370][T11255] handle_bug+0x16a/0x2a0 [ 187.993421][T11255] exc_invalid_op+0x17/0x50 [ 187.995661][T11255] asm_exc_invalid_op+0x1a/0x20 [ 187.998126][T11255] RIP: 0010:handle_exception_nmi+0xa6e/0x1bb0 [ 188.001343][T11255] Code: 08 84 d2 0f 85 fd 10 00 00 44 0f b6 2d 96 e5 39 0f 31 ff 44 89 ee e8 41 40 69 00 45 84 ed 0f 85 b5 0e 00 00 e8 e3 45 69 00 90 <0f> 0b 90 31 ff 44 89 e6 e8 85 40 69 00 45 85 e4 0f 85 7f 0b 00 00 [ 188.010308][T11255] RSP: 0018:ffffc900039df9d8 EFLAGS: 00010293 [ 188.013172][T11255] RAX: 0000000000000000 RBX: ffff88803de829c0 RCX: ffffffff819fafef [ 188.016934][T11255] RDX: ffff88805acc8000 RSI: ffffffff819faffd RDI: ffff88805acc8000 [ 188.020429][T11255] RBP: 000000000f6632eb R08: 0000000000000001 R09: 0000000000000000 [ 188.023439][T11255] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 188.026723][T11255] R13: 0000000000000000 R14: ffff8880283cc000 R15: ffff88803de82a98 [ 188.029798][T11255] ? handle_exception_nmi+0xa5f/0x1bb0 [ 188.032069][T11255] ? handle_exception_nmi+0xa6d/0x1bb0 [ 188.034050][T11255] ? handle_exception_nmi+0xa6d/0x1bb0 [ 188.036096][T11255] ? __pfx_handle_exception_nmi+0x10/0x10 [ 188.038352][T11255] vmx_handle_exit+0x84d/0x1f40 [ 188.040632][T11255] vcpu_run+0x34cf/0x5ca0 [ 188.042525][T11255] ? __pfx_vcpu_run+0x10/0x10 [ 188.044869][T11255] ? rcu_is_watching+0x12/0xc0 [ 188.047341][T11255] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 188.050246][T11255] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 188.052460][T11255] kvm_vcpu_ioctl+0x730/0x1730 [ 188.054172][T11255] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 188.056134][T11255] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 188.058465][T11255] ? do_vfs_ioctl+0x226/0x13e0 [ 188.060569][T11255] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 188.062556][T11255] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 188.065346][T11255] ? __fget_files+0x215/0x3d0 [ 188.067361][T11255] ? hook_file_ioctl_common+0x146/0x410 [ 188.069744][T11255] ? selinux_file_ioctl+0x139/0x290 [ 188.071992][T11255] ? selinux_file_ioctl+0xb4/0x290 [ 188.073918][T11255] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 188.075895][T11255] __x64_sys_ioctl+0x18e/0x210 [ 188.077591][T11255] do_syscall_64+0x106/0xf80 [ 188.079465][T11255] ? clear_bhb_loop+0x40/0x90 [ 188.081556][T11255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.084178][T11255] RIP: 0033:0x7fce0599c799 [ 188.085988][T11255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.093882][T11255] RSP: 002b:00007fce068f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.096731][T11255] RAX: ffffffffffffffda RBX: 00007fce05c15fa0 RCX: 00007fce0599c799 [ 188.099463][T11255] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 188.102291][T11255] RBP: 00007fce05a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 188.105305][T11255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.108314][T11255] R13: 00007fce05c16038 R14: 00007fce05c15fa0 R15: 00007ffc4f9dfc98 [ 188.111077][T11255] [ 188.113157][T11255] Kernel Offset: disabled [ 188.114792][T11255] Rebooting in 86400 seconds..