last executing test programs: 6m26.752518589s ago: executing program 3 (id=4): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000280)={0x0, &(0x7f0000000240)}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000890) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc513, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfd, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) 5m20.485337742s ago: executing program 32 (id=1): r0 = syz_io_uring_setup(0x4fe8, &(0x7f0000000d00)={0x0, 0x7db5, 0x8, 0x0, 0x1d8}, &(0x7f0000000d80), &(0x7f0000000dc0)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000001100)={0x1, 0x1, 0x0, &(0x7f0000001080)=[{0x0}], 0x0}, 0x20) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x44000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_police={0x30, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff3}}]}}]}, 0x70}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r7 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x280003) r8 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r8}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(r9) ioctl$NBD_DISCONNECT(r7, 0xab08) 5m19.556655992s ago: executing program 33 (id=5): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000000)="2700000014000707", 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000000200)=""/100, 0x64}], 0x1, 0x29, 0x3, 0x0) syz_usb_disconnect(r0) 5m19.506691106s ago: executing program 34 (id=6): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4004, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4008094) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000180)={0x1, 0x1, 0x8, 0x3, 0x7}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x3, 0x3, 0x9c4, 0x3, 0x25}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) r5 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x10, 0x0, 0x7, 0x0, 0x0}) io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x18, &(0x7f0000000100)={0x8, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3, 0x1, 0x100, 0x3, 0x5}}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0000800000", @ANYRES32=r10, @ANYBLOB="003000000000000024001280110001006272696467655f736c617665000000000c00058005001b0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) 5m19.382454583s ago: executing program 35 (id=4): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000280)={0x0, &(0x7f0000000240)}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000890) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc513, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfd, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) 2m19.969299404s ago: executing program 7 (id=10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)={{0x7, 0x0, 0x80, {0x5000, 0xdddd1000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa710c3e20fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362eb5bf86fce896dbc2a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca433d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eeae43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b5511ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) 2m19.680103715s ago: executing program 7 (id=18): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x40}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSETELEM={0x24, 0xe, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0xffffffffffffffda, 0x3}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x3c, r7, 0x731, 0x4, 0x25dfdbfe, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x2}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x14, r7, 0x800, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$cgroup_int(r8, &(0x7f00000001c0)=0xfdf3, 0x12) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000600)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x8, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], {0x0, 0x883e, 0x8}}}}}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$rds(0x15, 0x5, 0x0) bind$rds(r11, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r11, &(0x7f0000001300)={&(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0xc}}], 0x30}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltaction={0x28, 0x30, 0x9, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x28}}, 0x0) listen(r3, 0x80000001) 2m19.294535929s ago: executing program 7 (id=21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x109400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x9, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_tcp_int(r3, 0x6, 0x9, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = fsopen(&(0x7f0000000140)='gfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x13, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r8, &(0x7f00000000c0)}, 0x20) r9 = socket(0x11, 0x80a, 0x0) connect$unix(r5, &(0x7f0000000240)=@file={0x0, './file0/../file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5400001954e2fb86b881556bb800000000001000", @ANYRES32=r10, @ANYBLOB="00000000000000003400128009000100626f6e64000000002400028005001600000000000500110001000000080007"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 2m19.088722931s ago: executing program 7 (id=26): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ebffffff0000f77fff00"}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012007e89010000000c00ffdbdf25ac1414fcffff000000000003010000000a006c0066"], 0x28}}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000080), 0x200000, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) inotify_init1(0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000001440)={'bridge_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}) 2m18.50114515s ago: executing program 7 (id=33): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xeaef}]}}}]}, 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000068000100030000000400008000000000000000000c00020002ef2b2a1974ee"], 0x24}}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010700000000000000000a00000008000300", @ANYRES32=r11], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1c, r9, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) sendfile(r13, r10, &(0x7f0000000540)=0xffffffff, 0x4) ioctl$KVM_RUN(r13, 0xae80, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000a6cf006e492bdfc7746147c54226c9903200007a5b2e60ca8bfe0bbe56a9dd5286d79f5020341e12da4c2edec5c019aefd6da3467f76e60de512b73cc2f19eda51f4b82db33c2e5d5a34705a42dc1a93999ac1785aab9b4761229026b14387fcf2145cf52dcff8ea402fdca6a47bd1e28f6f4d92b9e289f06b4c34073f9a9623ce800e18bc09a30c6a77a9c3eb901984ff5ad989706a003ad6f03a8066527bfd68b2983ffbd8857697511b01f4b7d64f912847be9351fa9204e5a000b793abaaae6324e119b271785ce2d828d691b30327f657d64f3605982b947ede881ea8d5cc28379933cc075ea2b37fb976273ef93b7345ce342caef16d3a31849e159eac65dfad", @ANYRES16=r6, @ANYBLOB="000829bd7000fddbdf250300000008000b0080000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xba862584ae2c50b0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090200000000001e00000f000000080034000010000008000300", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 2m18.46916394s ago: executing program 36 (id=33): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xeaef}]}}}]}, 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000068000100030000000400008000000000000000000c00020002ef2b2a1974ee"], 0x24}}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010700000000000000000a00000008000300", @ANYRES32=r11], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1c, r9, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) sendfile(r13, r10, &(0x7f0000000540)=0xffffffff, 0x4) ioctl$KVM_RUN(r13, 0xae80, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="000829bd7000fddbdf250300000008000b0080000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xba862584ae2c50b0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090200000000001e00000f000000080034000010000008000300", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1m59.090583385s ago: executing program 4 (id=327): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 1m59.030789548s ago: executing program 4 (id=329): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000000)=0x810, 0x4) r2 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x6a, 0x5, 0x20000000, 0x6) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000711207000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000, @void, @value}, 0x94) shutdown(r1, 0x2) 1m58.860091846s ago: executing program 4 (id=331): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000001340)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8f}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x10000, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xe, 0xfe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0x0, 0x3}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x50, 0x0, 0xf801, 0x0, [0x0, 0x0, 0x1]}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r5, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}], 0x3, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f00000000c0)) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x34, r1, 0x1, 0x0, 0x0, {0x37}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000247000/0x1000)=nil, 0x1000, &(0x7f0000000040)=""/242) 1m56.780756899s ago: executing program 4 (id=368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x40}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) 1m56.780063487s ago: executing program 4 (id=369): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a00000000000000080a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a8b29b911ac473c5fa02bb0e24e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594d7a6edc9d1270a7819fc0c597fdfb4d7842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e6405000000be9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac7a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3d0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b2581b555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578ead8ec76b17acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022e2731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181224175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329924b8b39e6dc4b2077a4b9645d8e0a445ae2c7be53d66007d491ab0f6851a2cc1cffeed15f586a035c1a2888c56f43"], &(0x7f0000000340)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f086dd6000000e00003a00630677", 0x0, 0xfa, 0x2000000, 0x3f, 0x5e, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff02, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90235fc60040011000a7401002a3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5, {r3, r4}}, './file1\x00'}) ioctl$KVM_NMI(r6, 0xae9a) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000002000000001400000002001190780000000000ffff000890780000000000"], 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001a80)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000260000000820000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67974cbc7651ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd3641130bfc4e90a6341865c3f5ab3e89cf6c66052ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce7400dae15cb7947c491b8bea3fd2e23902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f000006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc21b3f904fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08e774c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d32872c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe91ff799a11d9b219c00c369a12bf8885b862d0dbdd956cbda1bae489ef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d263e8778e6e8ffe4ea50b076446f35efffc806b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd311a40030f9ffce75ffff996a80153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b58fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be1557951854c01dbc2d061827ae6349a045b780893771524a424335b9fc34616ee9f0914105726253060000009b969938779736ece7b470078ac0b1b4b528000000009866e9994ca9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a100000000e795ace0d52bb3e9f2bf29960000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676590bd2047229e0237c1e34641848531712ff09e89fb062a3e66f4fced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3dfbfd0e5e381398e9d5428a10cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e419fbd7aeb7a60a0290bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b239a3646ef55b9f070ae14466b3acef9f8b28fb918a237e2e068ae4a6bce4407b54cc14614c7b69122cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcc1f594ecfaff9a79b56f8b38038002d25ddb1ce347e8d4c0f4c04be8fa72dc8a4e5d51468bce285102a0863e9b7785df924059ca5fa9380c2124adf160b644f2b2edc369046f654dadd5401b35b85b0aea58bb471c818c5ff9d5f7262d96c3977731459d231f00be487b9753d377e268d237cfd768d6883e9cc575dbb452052f5c676a75a51b50f9b5de8ffe3405a7a687ca8dbdedfc10268f3bf52cb9f72c7c1134067238399c9f16ac25877a09f9f8a614a087db4f347994c3b693ec5a99c9ee01eaf01b373ed85bc66b44f9c7c9dd061f6ce78d7e6b00a5a706ffa4bad65af70bb9188c8d5329d7acdc475ba330bb52d000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) write$FUSE_INIT(r10, &(0x7f0000000300)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x81, 0x1800, 0x3, 0xf24, 0x5, 0x100}}, 0x50) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000440)="d83a2d70f9236a9e39574f602807ede516ab3d0f194a50cec48c2e795fca4679fd3740e3bb9f1e4565b2633b92135dda27fcff4280e3f4ea59336af4009b49358159c16e990e3fd3d88dc8820122df54750d9b21568cc47a2297a6580ba25b927e4f249b3caa2201b291dae8a8256e3d4785184cfc409f2a4ef4e68d3c286360f6026ab909b0bfe55d3d8f6b72e9e294bb3742d832", 0x95}, {&(0x7f00000003c0)="52c93bbb686d5cef8b3e26076863c6015ba92b50828daf2092a7a67863d7ee0ddba0166cd201eb0943fe62df73fe", 0x2e}, {&(0x7f0000000500)="050e3e3852c3381e5a3b036c178b83a99a2f5ad833830c8523d64d30cca847c3200cb77fe383cff653333a85cb6790f732078badeb7e4bcd801bc0858823cc7920ad360dafe5006941a8c9132c3c4c940bf2aac5f14c7d5a0b855db83bc1683b9de7f6ec43edd73dab09ef703b1d05b24e9fe3c823bde9d4bb7507c68c43b68193630fa049ea233a6ba59ff67477e574e1fac881b9f833bea99a3797bab6d62d182865ba8ff859ab93af14", 0xab}], 0x3) symlinkat(&(0x7f00000002c0)='./file1\x00', r7, &(0x7f0000000300)='./file1\x00') r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) bind$bt_hci(r11, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r11, &(0x7f0000000000), 0xd) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x7ffffffffffffffa, r2, {0x7, 0x29, 0x7, 0xffffffff80200001, 0xd, 0x9, 0x5, 0x3, 0x0, 0x0, 0x10, 0xe5}}, 0x50) 1m56.661985589s ago: executing program 4 (id=370): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002f00)=[{0x0}, {0x0}, {0x0}], 0x3}}], 0x2, 0xf000000) sendmsg$netlink(r0, &(0x7f0000000040), 0x0) 1m51.838510195s ago: executing program 8 (id=423): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbfc, {0x1}}, 0x14}}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) (rerun: 64) 1m51.836805814s ago: executing program 8 (id=425): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x25, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffa}, @ringbuf_query, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xc}]}, &(0x7f0000000140)='syzkaller\x00', 0x8e, 0x0, 0x0, 0x20800, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x4, 0x4, 0xee6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x3, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x17, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x4}, @alu={0x4, 0x0, 0xc, 0x6, 0x10, 0x6, 0xfffffffffffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @alu={0x7, 0x0, 0xd, 0x5, 0x8, 0xfffffffffffffff0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0xffff, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0xf, 0x80, 0xa2a3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000640)=[r1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1], &(0x7f0000000840)=[{0x0, 0x3, 0xb, 0x1}, {0x5, 0x2, 0x6, 0x2}, {0x4, 0x3, 0xe}, {0x3, 0x5, 0x7, 0x9}, {0x4, 0x1, 0xa, 0x3}, {0x3, 0x1, 0x2, 0x8}, {0x2, 0x2, 0xa, 0x3}], 0x10, 0x3ee6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='f2fs_truncate_partial_nodes\x00', r2, 0x0, 0x52dd}, 0x18) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/179}, {}, {&(0x7f00000003c0)=""/117, 0x2c}], 0xf, 0x0, 0x11}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000600)={0x3, 0x81, 0xf1eb}) 1m51.719952079s ago: executing program 8 (id=426): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f0000000500), 0x4) close(r1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 1m51.641250622s ago: executing program 8 (id=428): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x3091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x80000, 0x10e) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x8000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r1, @void, @void, @value}, 0x50) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00', 0x200) 1m51.57103656s ago: executing program 8 (id=430): io_setup(0x81, &(0x7f0000000180)=0x0) (async) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r0, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000340)='p', 0x300}]) (async) recvmsg$unix(r1, &(0x7f0000000340)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)=""/106, 0x6a}, {&(0x7f0000000140)=""/49, 0x31}, {&(0x7f00000001c0)=""/42, 0x2a}], 0x3, &(0x7f0000000280)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x40000141) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{}, 'syz0\x00', 0x52}) (async) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x51) (async) ioctl$UI_DEV_CREATE(r2, 0x5501) (async) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x72, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000040)={0x50, 0x1, 0x0, {0x2002, 0xe}, {0x104, 0x5}, @rumble={0x7, 0x6a}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f000df06712e9232f3c8db0049d90", 0x1e}, {&(0x7f0000000200)="c6", 0x1}], 0x2) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) syz_usb_control_io(r7, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xc0105b08, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_OIF={0x8, 0x5, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x40880}, 0x48040) 1m51.368331032s ago: executing program 8 (id=435): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x3) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@random="e90c630faca2", @local, @void, {@ipv4={0x6000, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "61c03d2d2548741ff5015767096e1cd263026dd8f0703d2e22e3916500fdb8ec", "615eee2cb3c51e06deb424010178396b2afe4378c81f63a9eefc66ef338492fd3b688b2b06e6f206e4e6b8d1174296cd", "d8dbed9defbb6502c2888b524721c5807f3b4eedba8966f8774437de", {"c5f2fb530587df89cc9aa18e60d1a66b", "0c9ec23f1b56eba488bfededb3c997ae"}}}}}}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000, 0x9) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x20, 0x800000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}, 0x20040}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) (async) sendfile(r0, r0, 0x0, 0x3) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) (async) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@random="e90c630faca2", @local, @void, {@ipv4={0x6000, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "61c03d2d2548741ff5015767096e1cd263026dd8f0703d2e22e3916500fdb8ec", "615eee2cb3c51e06deb424010178396b2afe4378c81f63a9eefc66ef338492fd3b688b2b06e6f206e4e6b8d1174296cd", "d8dbed9defbb6502c2888b524721c5807f3b4eedba8966f8774437de", {"c5f2fb530587df89cc9aa18e60d1a66b", "0c9ec23f1b56eba488bfededb3c997ae"}}}}}}}, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000, 0x9) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x20, 0x800000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}, 0x20040}) (async) 1m51.256393792s ago: executing program 37 (id=435): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x3) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@random="e90c630faca2", @local, @void, {@ipv4={0x6000, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "61c03d2d2548741ff5015767096e1cd263026dd8f0703d2e22e3916500fdb8ec", "615eee2cb3c51e06deb424010178396b2afe4378c81f63a9eefc66ef338492fd3b688b2b06e6f206e4e6b8d1174296cd", "d8dbed9defbb6502c2888b524721c5807f3b4eedba8966f8774437de", {"c5f2fb530587df89cc9aa18e60d1a66b", "0c9ec23f1b56eba488bfededb3c997ae"}}}}}}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000, 0x9) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x20, 0x800000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}, 0x20040}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) (async) sendfile(r0, r0, 0x0, 0x3) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) (async) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@random="e90c630faca2", @local, @void, {@ipv4={0x6000, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "61c03d2d2548741ff5015767096e1cd263026dd8f0703d2e22e3916500fdb8ec", "615eee2cb3c51e06deb424010178396b2afe4378c81f63a9eefc66ef338492fd3b688b2b06e6f206e4e6b8d1174296cd", "d8dbed9defbb6502c2888b524721c5807f3b4eedba8966f8774437de", {"c5f2fb530587df89cc9aa18e60d1a66b", "0c9ec23f1b56eba488bfededb3c997ae"}}}}}}}, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000, 0x9) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x20, 0x800000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}, 0x20040}) (async) 1m41.469938s ago: executing program 38 (id=370): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002f00)=[{0x0}, {0x0}, {0x0}], 0x3}}], 0x2, 0xf000000) sendmsg$netlink(r0, &(0x7f0000000040), 0x0) 1m25.891154122s ago: executing program 5 (id=796): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/mnt\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x6a02f080, 0x0, 0xfffffffffffffda4, 0x0, 0x0, 0x0) 1m25.818189356s ago: executing program 5 (id=797): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000020605000000000000000000020000400c000300686173683a6970001c000780050007006200000008000b40000000db080068de82e90400"], 0x3c}, 0x1, 0x0, 0x0, 0x240000c0}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x33}]}, 0x24}}, 0x48850) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) (async) clock_nanosleep(0x9, 0x0, &(0x7f00000007c0)={0x0, 0x989680}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_GET_CAPABILITIES(r6, 0x8004551a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) (async) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x80010, 0xffffffffffffffff, 0x44ed4000) (async, rerun: 64) mount(&(0x7f0000000040)=@sr0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='hfsplus\x00', 0x2000493, 0x0) (async, rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r7, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x11, 0x148, 0xb8, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@length={{0x28}, {0x5, 0xffbe}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000680001002abd7000020000000a00000000000000060007000200000008000500", @ANYRES32=r8, @ANYBLOB="14000880040008800c000280"], 0x3c}}, 0x0) 1m25.771007359s ago: executing program 5 (id=798): syz_open_dev$vcsu(&(0x7f0000000240), 0x8, 0x9d1401) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0xfffd, 0x0, 0x0, "e872185081e6c67e"}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x200, 0x70bd28, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r4, @ANYBLOB="00082abd7000fcdbdf25030000000900010073797a31000000000900ee0073797a310000000014000200776730000000000000000000000000000900030073797b31000000001400020076657468305f746f5f6873720000000005000400010000001400020070696d36726567007f3bed2f76c01b0abb2c1def4e00000000000000000900010073797a3000000000"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000000800024000000002080006400000000000000000000000010900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 1m25.640771782s ago: executing program 5 (id=801): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x92140) syz_emit_ethernet(0x56, &(0x7f0000000200)={@multicast, @remote, @void, {@canfd={0xd, {{0x4, 0x0, 0x1}, 0x1e, 0x3, 0x0, 0x0, "e16b85dfeec3b5b7534c3a331e8990acd20eaf1466f8f7caa9affea192d2f459da5c1fdab322f3f54056f8c70e877ab06b650b3eb3879cf6af43b8c2591499d7"}}}}, &(0x7f0000000280)={0x1, 0x2, [0x4c7, 0xc76, 0x217, 0x471]}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000005c0)={0x1, 0x0, [{0x400000b6}]}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000340)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r4, 0xc00864c0, &(0x7f0000000440)={r5}) (async) r6 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000100)=0x8) (async) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getstat={0xe0, 0x15, 0x0, 0x70bd29, 0x0, {{'digest_null-generic\x00'}, '\x00', '\x00', 0x0, 0x2400}}, 0xe0}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000004c0000000c00a600000000000000000008000100"], 0x3c}}, 0x0) sendmsg$nl_crypto(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000180)={0x7, 0xc, 0x1000, 0x9, r7}, &(0x7f00000001c0)=0x10) 1m25.450704189s ago: executing program 5 (id=807): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000006500000000000000007ed67eb55e5bff803a073ccf91d08b17977a847a11dc16f69b874147a1e1eea120251a690ceda3c52f57d00bc4ab6317a889c4979c3014c2"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$dri(&(0x7f0000002500), 0x2, 0x0) write$UHID_INPUT(r2, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1, 0x2}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 1m25.289990498s ago: executing program 5 (id=810): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000000000000000000000ff02000000000000000000000000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) read$FUSE(r6, &(0x7f00000004c0)={0x2020}, 0x2020) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000000000000000000000ff02000000000000000000000000000100000000000000000a"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) (async) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) (async) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r2, 0x3) (async) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) dup(r5) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) read$FUSE(r6, &(0x7f00000004c0)={0x2020}, 0x2020) (async) 1m10.285043348s ago: executing program 39 (id=810): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000000000000000000000ff02000000000000000000000000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) read$FUSE(r6, &(0x7f00000004c0)={0x2020}, 0x2020) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000000000000000000000ff02000000000000000000000000000100000000000000000a"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) (async) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) (async) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r2, 0x3) (async) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) dup(r5) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) read$FUSE(r6, &(0x7f00000004c0)={0x2020}, 0x2020) (async) 21.797684652s ago: executing program 9 (id=1376): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') write$sysctl(r0, &(0x7f0000000140)='3\x00', 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000000)={0x5, 0x2, 0x9, 0xf6c7}) read$rfkill(r0, 0x0, 0x0) 21.699095399s ago: executing program 9 (id=1378): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'dummy0\x00', &(0x7f0000000980)=@ethtool_dump={0x3f, 0xfffe000, 0xd56e}}) 21.698780759s ago: executing program 9 (id=1379): r0 = socket(0x10, 0x3, 0x0) setitimer(0x1, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, 0x3, 0x8, 0x101, 0x0, 0x0, {0xc, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x81}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f2}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008801}, 0x40040) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000005200210900000000000000001c"], 0x24}}, 0x4000) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r2, &(0x7f00000000c0)=0x58, 0x9) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000080)) r5 = fanotify_init(0x4, 0x0) lseek(r5, 0xff, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 20.755705133s ago: executing program 9 (id=1394): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r1, 0x0, &(0x7f0000000600)="90b347ac250f55e509", 0x9, 0x102, 0x1}) r4 = fsopen(&(0x7f0000000380)='iso9660\x00', 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) io_uring_enter(r5, 0x7a98, 0xd68a, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r6, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000540)={&(0x7f0000000300), 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x110, r8, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0xfc01}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200000}, {0x6, 0x11, 0x72b}, {0x8, 0x13, 0x80}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x52d15bfe}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x8001}, {0x5}}]}, 0x110}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0xfea7) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000030000000200000000000000ff7f000009090000000000000000000000004da898391abc0000000000000000501c49f30e3d100fb62f472fe1aa4108b3885c257f9296fd369faa6977b19a891488d65837b76f84e41557350e928d7a76c8382ef5a58590d6952390c2410ad6b207a96b24b9672b6ee5a44ccb2895b955650ed105e5fc00618fcd5a5f1f90633368ad3b044f22c690d635afb8fe"]) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r11 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800202", 0x1001, r11) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000580)='id_resolver\x00', &(0x7f00000005c0)=@keyring={'key_or_keyring:', r11}) r12 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r13 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r13, &(0x7f00000002c0)=[{&(0x7f0000000200)='\x00\x00', 0x2}, {0x0}], 0x2) syz_pidfd_open(r12, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@bridge_dellink={0x0, 0x11, 0x931, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r10, 0x2000, 0xa}, [@IFLA_IFALIAS={0x0, 0x14, 'wlan0\x00'}, @IFLA_NET_NS_PID={0x0, 0x13, r12}, @IFLA_TXQLEN={0x0, 0xd, 0x86e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44890}, 0x4044481) 20.642108333s ago: executing program 9 (id=1395): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket(0x10, 0x803, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000080)={0x7d, 0x156}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xf00}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) syz_clone3(&(0x7f0000000200)={0x100104400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) 19.42485089s ago: executing program 9 (id=1403): ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x980903, 0x18, {0x400d, 0x1, 0xc}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x2c}, @l2cap_cid_signaling={{0x28}, [@l2cap_conf_rsp={{0x5, 0x4, 0x24}, {0xe36, 0x7, 0x4, [@l2cap_conf_rfc={0x4, 0x9, {0x1, 0x9, 0x7, 0x99a3, 0xfffe, 0xfff8}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x7f}, @l2cap_conf_ews={0x7, 0x2, 0x5}, @l2cap_conf_flushto={0x2, 0x2, 0x3}, @l2cap_conf_ews={0x7, 0x2, 0x70ed}]}}]}}, 0x31) 19.388392157s ago: executing program 40 (id=1403): ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x980903, 0x18, {0x400d, 0x1, 0xc}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x2c}, @l2cap_cid_signaling={{0x28}, [@l2cap_conf_rsp={{0x5, 0x4, 0x24}, {0xe36, 0x7, 0x4, [@l2cap_conf_rfc={0x4, 0x9, {0x1, 0x9, 0x7, 0x99a3, 0xfffe, 0xfff8}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x7f}, @l2cap_conf_ews={0x7, 0x2, 0x5}, @l2cap_conf_flushto={0x2, 0x2, 0x3}, @l2cap_conf_ews={0x7, 0x2, 0x70ed}]}}]}}, 0x31) 12.233388464s ago: executing program 6 (id=1450): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xc, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 11.946059647s ago: executing program 6 (id=1453): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x2, 0x1) (async) socket$inet(0x2, 0x2, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000950000000000000093fca0ec6ae811308909c6203a3f7c77b70505aff9caab2d64ccad74a30d0a619e05ce3241d4f5a6d69f2c156d3c411a5a1ab35a87a949eb8dd494b0dbbdeb2f120a"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x1b, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x13, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x13, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r6) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r9 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000300", @ANYRES32=r8, @ANYBLOB="08001c00", @ANYRES32=r9], 0x24}}, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000300", @ANYRES32=r8, @ANYBLOB="08001c00", @ANYRES32=r9], 0x24}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x6622, 0x0, 0x40}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) 11.716920512s ago: executing program 6 (id=1456): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)={[{@dyn}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r1, r0, 0x0, 0x80000000) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff}, 0x80) r3 = add_key$keyring(&(0x7f0000001680), &(0x7f00000016c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$afs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)={[{@dyn}]}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) (async) sendfile(r1, r0, 0x0, 0x80000000) (async) pipe2$watch_queue(&(0x7f0000000400), 0x80) (async) add_key$keyring(&(0x7f0000001680), &(0x7f00000016c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) 11.415251012s ago: executing program 6 (id=1460): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40041000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x800, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20040080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r7, @ANYBLOB="0000000000fbffffffffffffff000080120000000d0000002f70726f632f737973766970632f73656d0000000000000001000000000000000900000000000000010000000d0000002400000000000000"], 0x60) (async) write$FUSE_DIRENT(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r7, @ANYBLOB="0000000000fbffffffffffffff000080120000000d0000002f70726f632f737973766970632f73656d0000000000000001000000000000000900000000000000010000000d0000002400000000000000"], 0x60) readv(r6, &(0x7f0000000080), 0x0) 11.121387622s ago: executing program 6 (id=1464): r0 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x8, 0x1, 0xfffffffa, @vifc_lcl_ifindex=r3, @local}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 10.828821447s ago: executing program 6 (id=1469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0x43, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @local}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xc0}}, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x1, r2, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0x43, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @local}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xc0}}, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x1, r2, 0x1}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) 10.762255993s ago: executing program 41 (id=1469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0x43, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @local}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xc0}}, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x1, r2, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0x43, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @local}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xc0}}, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x1, r2, 0x1}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) 2.769067444s ago: executing program 0 (id=1504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000180)={0x54, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x1, 0x7, 0x32315559, 0x8, 0x200, 0x5, 0x8, 0xc562, 0x1, 0x3}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) write$FUSE_INIT(r5, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x202}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) r6 = socket(0xa, 0x801, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r8, @ANYBLOB="200001"], 0x38}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r9) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r9, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010800800000000008001701000000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000300)='bond_slave_0\x00') 2.661674338s ago: executing program 1 (id=1505): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000010000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="00000000000021ffffffe0000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="112686a8bf714fad05efbe62065900000053e87a9c4a093614452ae537a84301964fc8fe23f349fec427b5287c0adb28ba088e17a9f23ec02b9f6564bdba7f2fd56d55c3dd2f", @ANYRES32=r2, @ANYBLOB, @ANYRES64=0x0], 0x20) close(r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x6d}}, './file0\x00'}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) listen(r1, 0x6) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2.550391435s ago: executing program 2 (id=1506): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20805) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0xa, 0x2, 0x0) getsockopt$nfc_llcp(r3, 0x11, 0xb, 0x0, 0x2000005b) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000005a00)=ANY=[@ANYBLOB="66696c7465721d00000000000000000000007d1600000000000000000000000004"], 0x68) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000080001"], 0x1c}}, 0x884) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000040)={0x44, r9, 0x1, 0x70bd29, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x28, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}]}, 0x44}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r9, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x40055) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000009, 0x12, r1, 0x80000000) 2.549315223s ago: executing program 0 (id=1507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = fsopen(&(0x7f00000003c0)='hpfs\x00', 0x1) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000040)=""/52, 0x34) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'vlan1\x00'}) 2.470311053s ago: executing program 1 (id=1508): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x2a0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1}, 0x7fa9a5e0}], 0x1, 0x1, 0x0) pread64(r2, &(0x7f0000000540)=""/142, 0x8e, 0x5) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0], 0xfe1b) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c"], 0x84}}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) 2.453909328s ago: executing program 3 (id=1470): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f00000007c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0x9}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 2.353097046s ago: executing program 2 (id=1509): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x30, r0, 0x61b7d000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x2, 0x300) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x53d, 0x8, 0xfffffffb, 0x2000, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x8, @void, @value, @void, @value}, 0x50) r6 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r6}, 0x20) recvfrom$inet6(r6, &(0x7f0000000240)=""/242, 0xf2, 0x40000040, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = getpid() syz_clone3(&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[r7], 0x1}, 0x58) r8 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r8, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, 0x0, &(0x7f0000000540)) r10 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x6c4e42, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r10, 0x4004662b, &(0x7f0000000240)=0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x4, 0x9}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1e, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}}}}]}, 0x78}}, 0xd4) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100000009000110000000300c00000040000000030a01020000f47f1292467821c60f000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a300000000040000000060a010400000000000000000100000008000b40000000000900010073797a300000000018000480140001800a0001007265646972000000040002801400000011000100000000"], 0xc2}}, 0x0) syz_io_uring_setup(0x1a2f, &(0x7f00000002c0)={0x0, 0x8fb6, 0x20, 0x1, 0x272}, &(0x7f0000000340), &(0x7f0000000380)) 2.351280205s ago: executing program 0 (id=1510): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newqdisc={0x158, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0x2}}, [@TCA_STAB={0x134, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x0, 0xdae, 0xfffffff8, 0x2, 0x80000000, 0xc, 0x6}}, {0x10, 0x2, [0x8c0, 0x8, 0x0, 0x76, 0x5ded, 0x5]}}, {{0x1c, 0x1, {0x1, 0x6, 0x9, 0x2, 0x0, 0x1b75, 0x7f, 0x6}}, {0x10, 0x2, [0x6, 0x4, 0x5, 0x2, 0x6, 0xfbff]}}, {{0x1c, 0x1, {0x8d, 0xa, 0x8, 0x0, 0x1, 0x7fff, 0x7f, 0x6}}, {0x10, 0x2, [0x0, 0xb, 0xffff, 0x1, 0x6, 0x3a4c]}}, {{0x1c, 0x1, {0x9, 0x6, 0x185b, 0x7, 0x0, 0x7, 0x9, 0x6}}, {0x10, 0x2, [0x3, 0x3, 0x90, 0x603, 0x245, 0xf]}}, {{0x1c, 0x1, {0x40, 0x5, 0x4, 0x1, 0x2, 0x80000001, 0x0, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x6, 0x40, 0x6, 0x8, 0x0, 0x3c, 0x7fffffff, 0x4}}, {0xc, 0x2, [0x5, 0xd7c2, 0x7, 0x9]}}, {{0x1c, 0x1, {0x1, 0x9, 0xe, 0x81, 0x1, 0x80, 0x3, 0xa}}, {0x18, 0x2, [0x8, 0x2, 0x4e9e, 0x7, 0x3ff, 0x8, 0x22, 0xff2d, 0xd6, 0x1000]}}]}]}, 0x158}}, 0x44040) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x1000, &(0x7f000030d000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000309000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x70, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="a67a2f94dccfc6ae460ca60b3a8a515712384d7806f2f81ff78c69cd084000000035b0b397e0a545bd99b8eecf9c15e9c5edf285f7d100b2", 0x38}], 0x1}}], 0x1, 0x0) r7 = eventfd2(0xffffffff, 0x80001) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x1fe, 0x0, 0x1, r7, 0x1}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r8, 0x540c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f00000000c0)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r9, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000800)={r9, &(0x7f0000000400), 0x0}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000480)=""/179, 0xb3}], 0x1, 0x1a, 0x0) ioctl$TIOCGSERIAL(r10, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/71}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.262521405s ago: executing program 1 (id=1511): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000e071000040"]) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) syz_emit_ethernet(0xd2, &(0x7f0000000000)={@random="99177fa54f29", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x9c, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "c156a03ffed6c751a37125316c7bd8f548ce3ba305f32fd2d0d42b1eb645f0c7", "f2d09d59b48021e3521edb629bb972d2d72196890d8ca94bf611c5cf0ebb2113d8f27ee8a8b7dede6f2584fb4f67d659", "6e5e71e43997bf4d99ab136c59b74a69f75c57e3b6934f73f776463c", {"581abb18f7828be4dff7e5414e5e4dc0", "ddacbf7edb483532440f131cb627de94"}}}}}}}}, 0x0) 2.261855776s ago: executing program 3 (id=1512): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r0) (async) r3 = syz_io_uring_setup(0x7540, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000200)=0x0) r5 = syz_io_uring_setup(0x34eb, &(0x7f0000000280)={0x0, 0x0, 0x40, 0x0, 0x12c, 0x0, r3}, &(0x7f00000003c0)=0x0, &(0x7f0000001480)) syz_io_uring_submit(r6, r4, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r5, 0x0, 0x0}) io_uring_enter(r3, 0x2003, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r2, 0x325, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x0) 2.080328156s ago: executing program 3 (id=1513): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00221a0000002b574e6962b003f9050000"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r4 = memfd_create(&(0x7f0000000340)='D\xa3\xd5Wj\x00\x00x0\xc1\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xc9\rDa\x16\xbd\x1a\xb2w\b', 0x0) write(r4, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = dup3(r3, r4, 0x0) fchdir(r5) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000040)='.\x00', 0x140002d2) r7 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r8 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xffffffff, 0x0, 0x0, 0xa, 0x1}) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x6, 0x3ff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x5500, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xfffffffc, 0x0, 0xfffffff5, 0x0, 0x0, 0xcf6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x702f4598, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffd], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r9, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r9, 0x5501) 1.88076217s ago: executing program 0 (id=1514): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000ffffffffffffffff007663616e000000000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 1.760697738s ago: executing program 2 (id=1515): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x200000000000009, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x4, 0x8ed9, "03272657ae2a99cb0360c4dd317e855d488aa954d8972496a2ab1659e64ce673c454ef1343560ec2c382b37e81b6a01b58553189cfa51351150834d58a28de6557e55cd2b0dbc2b98da37d3343cb6efbe619108f53ad525b35ac8b5651c3e1bf39532016f00bde8437488f2de36089a97e93e60a3cc1b5e7687015b1a65056356aa0ee6b95137f9507a0da776e2ba1c8008796207ba4f97d1631d751cd287a5eabbb0fa748ab965d28386214bdc4e0edbbd06e8618d3d13b81b95775959f6bd006a6a9c73ee9bae30faec35d088c1dc708a30ead92a3377dcd2a5afdec1cd246f5b0d9c015ede552c0608aadde68f81ddf3c36720cb5955910ed9504e3f5288a", 0xff, 0xc, 0x4, 0x32, 0x8, 0xe, 0x2, 0x1}, r3}}, 0x120) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000080)=0xfffffff9) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x4000000) flock(r1, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@struct={0x8, 0x0, 0x0, 0xf, 0x0, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x2e, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x20) flock(r1, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000007b0301719d0000000000002018110000", @ANYRES32=r0, @ANYRES64=r3], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x200000000000009, &(0x7f0000000040), 0x111, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x4, 0x8ed9, "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", 0xff, 0xc, 0x4, 0x32, 0x8, 0xe, 0x2, 0x1}, r3}}, 0x120) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000080)=0xfffffff9) (async) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x4000000) (async) flock(r1, 0x2) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@struct={0x8, 0x0, 0x0, 0xf, 0x0, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x2e, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x20) (async) flock(r1, 0x5) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000007b0301719d0000000000002018110000", @ANYRES32=r0, @ANYRES64=r3], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 1.542461088s ago: executing program 0 (id=1516): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x230441, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04000000", @ANYRES16=r1, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x8015}, 0x4000) 1.542104095s ago: executing program 2 (id=1517): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="d2684251ef8f4fd04df57fae87edb3a373e16ba46ff34e7d5a8ccdb491ab2d5f255e14023f08a183a969fbf0738ffcb974cb499701b92e82853a028e588905293f84c8e1b361ebfd22bd7f4cf3bb2842c10575fea5972bf55bd3ca8785178ef760474a31f5fe499d8aa3c7d488d97d12174907df75ee35f570dda5348d0a11ed2fb04867a1f2f7bf9153297625c9c08bd7fc30ac8ee9e8", 0x97}, {&(0x7f0000000440)="19ef79002cd5980f4d92fa5437585940817d1dbd00a8e7931ba1250a0fdb92a948613322fe77fbf6d556440202a4a36dcd5a51b87376de2245f7bb75b81335b91ffeea038078e378592de74720a284cfa6d8fa0a8d42e74d29a96c471648ebd41be40c810374ef91974190a200ab68b16bcf3e047a70c5437b4f7910496ef4933567334a4c82eba3e15926b8cfe1b583ac55249db39312e80eff1640cc2bb4febad04a947e13537bd2e4a382891d437c6743c168235c71f4600e8f02dc71705ee18a39d2f2aae631", 0xc8}, {&(0x7f0000000100)="bdb99e4769199b47f0d4645d3b4bedf36197310832f39790", 0x18}, {&(0x7f00000002c0)="4de4208df161757308874cd4d8cc3d70cb726d4778c9872e4d7be4c32e242825c20e6170910626f1c0f9f8072292f6651b2160", 0x33}, {&(0x7f0000000540)="c9bbbd7923d6007db15be7eed47b87a956b7c516f00b45f3ae91a17080f8b4fa30ca4190b4fe2bc9ffb2be8c9c8bdf1cdce62a0b9348508426c4d7951bd2c03f44ee76860dbb1dbefdb13f95a92c580b48c84b70c26349e25e32ab225e3f91d7155f593bbb6e645f494e2ec93c849f10a38dad3e8b925caa2a90d0ab0f65d41a97e573dce0eb964a7e24906f9e3195c7cf9cc3c4199fa25befc822e9d9a4747bc2a3812159bb4984fff6c5b446509ddfd22a66f00d6877ec75658c51d61f15663b132a14", 0xc4}, {&(0x7f0000000340)}], 0x6) connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e) close(r1) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000081000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="001d0000000000000000000b00000000000000000000010000000000"], 0x50) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000004000/0x400000)=nil, 0x400000, 0x0, 0x11, r7, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x4000) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x4b564d05, 0x0, 0x1}]}) 1.381771335s ago: executing program 0 (id=1518): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r1, 0x0, 0x31, &(0x7f0000000180), 0x4) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) io_setup(0x2, &(0x7f0000000380)=0x0) io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x350, 0xffffffff, 0xffffffff, 0x350, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xf97e}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xff], 'vlan0\x00', 'xfrm0\x00'}, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x2, 0x5, 0x0, 0x0, 0x7, 0x2, 0x40, 0x80}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x4, 0x41, 0x4, 0x0, 0x1000, 0x6, 0x3}, {0x4}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x200}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x480) 1.057849129s ago: executing program 1 (id=1519): socketpair(0x1e, 0x6, 0xfffffff8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/127, &(0x7f00000000c0)=0x7f) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x401, 0x501000) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) fcntl$setsig(r1, 0xa, 0x3a) getpeername$ax25(r1, &(0x7f00000001c0)={{0x3, @rose}, [@default, @null, @remote, @rose, @bcast, @rose, @null, @netrom]}, &(0x7f0000000240)=0x48) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x0}]}) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000340)) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, &(0x7f0000000400)={0x0, &(0x7f0000000380)="45f03d231f93953df0a2263c9ac3232312f76c44371df57b60a20f638ee9c1a8ba794459d65450add1234779e2840755f2a424ab735c8989b2d04e5a24ef42906f69c9de11759f", 0x47}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000440), 0x2, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000540)={0x4, 0x7, 0x2, {0x0, @win={{0x6, 0x0, 0x9, 0x41de}, 0x7, 0xffffff80, &(0x7f0000000480)={{0xec, 0x81, 0x7}}, 0x5, &(0x7f00000004c0)="6148a08c4a9d045476b5b9afae2e8c6b6944b9bce52cc1a8aa6fd954aee4e625afb29f7d2702810857f47bffa403f639d9c8185fc6fef76491f7a15ccba58edd2b08144b7bcba0ac7b9950f9e4522a2046e36eeffd502bedf9f2fe852149384658bc873bc6d8b908be7173", 0x4}}, 0x80}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000640), 0x80800) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0xc0a85352, &(0x7f0000000680)={{0x8, 0x3}, 'port0\x00', 0x0, 0x0, 0x8000, 0xd, 0x51ff, 0x8, 0xae2f, 0x0, 0x2, 0x3}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x2e47c3ecac90c745, 0x0) ioctl$TUNGETVNETBE(r7, 0x800454df, &(0x7f0000000780)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000840)={&(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000008c0)={&(0x7f0000000880)=[r8], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000900), 0x400401, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r10, 0x40106437, &(0x7f0000000940)={0x0, 0x7}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000980)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r6, {0xee01, 0xee00}}, './file0\x00'}) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, r12, &(0x7f0000000a00)={0xfff, 0xff, 0x8, 0x1, 0x1, 0x3, 0xbf, 0x8000, 0x7}) ioctl$DRM_IOCTL_NEW_CTX(r9, 0x40086425, &(0x7f0000000a80)={r4}) recvfrom$ax25(r9, &(0x7f0000000ac0)=""/4096, 0x1000, 0x2, &(0x7f0000001ac0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @bcast, @default, @null, @null]}, 0x48) bind$netrom(r9, &(0x7f0000001b40)={{0x3, @null, 0x7}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast, @default, @bcast, @bcast]}, 0x48) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r9, 0xc08c5334, &(0x7f0000001bc0)={0x4, 0xffffffff, 0x1, 'queue0\x00', 0x2}) connect$tipc(r11, &(0x7f0000001c80)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x4}}, 0x10) 1.056170489s ago: executing program 2 (id=1520): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_io_uring_setup(0x237, &(0x7f0000000080)={0x0, 0x4, 0x10100, 0x0, 0x2, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f0000000280)={0x80000000, 0xf1}, 0x1) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x28) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x4, 0x300, 0x0, 0x101, 0x300}}) fchdir(r0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000d80)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}], 0x1, 0x0) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0xfed, 0xc39, 0x8, 0xf4fa, 0x10}}) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x169941, 0x16b) 921.086858ms ago: executing program 1 (id=1521): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000140)=ANY=[], 0xb8) clock_gettime(0x1, &(0x7f0000004f40)) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000005600)=ANY=[], 0x2cc4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) recvmmsg(r2, &(0x7f0000004940)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)=""/196, 0xc4}], 0x1}}], 0x1, 0x2143, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) getsockopt$packet_int(r2, 0x107, 0x15, 0x0, &(0x7f0000000200)) dup3(r1, r0, 0x0) 258.875208ms ago: executing program 1 (id=1522): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="00000000000000c0d32d4f93a7cddb295b6dcd385800"/34, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x1890a0, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f00000000c0)={0x578, 0xf0, 0xa0, 0x400, 0x0, 0x0, 0x2, 0x1, {0x0, 0x80000000, 0x2}, {0x0, 0x7fffffff}, {0x3, 0x0, 0xffffffff}, {0xb, 0x0, 0x1}, 0x6, 0x1, 0xfffff001, 0x155, 0x1, 0x8, 0x0, 0x0, 0x9, 0x0, 0xff, 0x40000002, 0x0, 0x9f06360662c05544, 0x2, 0x9}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10) io_setup(0x3, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="00000000000000c0d32d4f93a7cddb295b6dcd385800"/34, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x1890a0, 0x0) (async) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f00000000c0)={0x578, 0xf0, 0xa0, 0x400, 0x0, 0x0, 0x2, 0x1, {0x0, 0x80000000, 0x2}, {0x0, 0x7fffffff}, {0x3, 0x0, 0xffffffff}, {0xb, 0x0, 0x1}, 0x6, 0x1, 0xfffff001, 0x155, 0x1, 0x8, 0x0, 0x0, 0x9, 0x0, 0xff, 0x40000002, 0x0, 0x9f06360662c05544, 0x2, 0x9}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10) (async) io_setup(0x3, &(0x7f0000000340)) (async) 0s ago: executing program 2 (id=1523): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffe1a, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x6c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)={'#! ', './file2', [{0x20, ','}, {0x20, 'ex\x00\x00\x00\x03\x00\x03\xf1\x98\xccn\xe1\x12M\xf1r]B\xdc\xca\x90I\x9f\xa6\xff\xfd\x8cc\xcb\xda\xc1\xde\xaf\x0e\xd8f=7j\v\xe2\x98\x9a;\x8b\xed\xddr\x84a\\|J6\xde\x17\x01\t\xeb\x7fZ\x8d\xcfG\\Hx\x12G'}, {0x20, '\x00\xb0\x91\xa7{N\xb1L\xc4\xfe[o\xee\x19|\xaf\xa8\r\xe4\xa0\xcd\x0e\x1f\xbcN\x94WGr*\xe6|(\xf0o\xafv\xbb\xf7\xba\xed\xdb\x8eF\xf5$\xf1$\x16\x1b\xbcw[;\x13\xf5\x13\x14_@r\x8fW%\xd4w=\x9b\x89\xaftz\xe3\x7f9\xc9\x1f>\\\xd6\x14\xd9r\x85\xd3\xb1B\xbe\xf7P{\x88\x00\xb9R\x1e\xab\x14\x06pp\x10\xb8\xa2\x18\xab]\xa7\x93\x82\xbe\xd8\x1aH\xff'}, {0x20, 'ext\xdb\xda'}, {0x20, '\xffb'}, {}, {0x20, '@!)['}], 0xa, "98ffe8aad4600ffdee7f7b202931869cc0ebacd18510f0008697cfc47a9bb236"}, 0xf7) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) connect$bt_l2cap(r6, &(0x7f00000004c0)={0x1f, 0x0, @none}, 0xe) write$qrtrtun(r3, &(0x7f0000000180)="ca0e808bb35bda15a08769fc40f8cb9694c01f0000000000000000000000000000000000000000000000000000000100", 0x30) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6005, &(0x7f0000000040)=0x7, 0x7, 0x0) write$qrtrtun(r3, &(0x7f0000000240)="25375468d806d8f58187445ffe9858217350a60bd72487386e", 0x19) write$qrtrtun(r3, &(0x7f00000016c0)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e8458e6f5f76e0e4e781bfca4c928c956321dd514877569805db6602f1584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26ce40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a6b657ff95930e9268649ad0003afe9a912179ce61631b3dab94642d2768f1f22299deb9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f403000000203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8356985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b671ff8b0bf20420c462aa1bb93218edaa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725416101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5afd9ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5899948ddbfac66c848ef0f842eab95248e9d064c0ec4247483f0aa0cad7ca970365e474fe73cf79cf8c70fc7a015caa273ce41723453632cf5b809586d227f7e98e8ec41494518b0b8a8adbaf5ead6529451b116fab06529b653bffdd6d98f8322265305bdc0ff69f4a70dea414fcc63d149c564c834f24b8f7495c79ccafa1e3f652cd3270935800ee0d5598afcaa41c150dac263408d77a61b5c77e2c3644dda1b8c333a36c30ce893140ce133827dde34d896d35c498bf6dda965a27cc77e2872fcedaf9dcb89614c758cf62ad769ac05a4fb9e27b421b82c1761f1322b03cc9ea586d15f7d2ffb6ed63c639cee97d9eea8f3934045e60b15eca5c13ebe002467", 0x385) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) kernel console output (not intermixed with test programs): error -71 [ 338.962678][ T8728] tipc: Started in network mode [ 338.964514][ T8728] tipc: Node identity ceabce5a1c66, cluster identity 4711 [ 338.968655][ T8728] tipc: Enabled bearer , priority 0 [ 338.985838][ T8728] syzkaller0: entered promiscuous mode [ 338.988824][ T8728] syzkaller0: entered allmulticast mode [ 338.990673][ T8728] tipc: Resetting bearer [ 338.999677][ T8727] tipc: Resetting bearer [ 339.034168][ T8732] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 339.146779][ T2294] usb 11-1: new low-speed USB device number 9 using dummy_hcd [ 339.166859][ T2294] usb 11-1: device descriptor read/8, error -71 [ 339.234472][ T8735] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 339.276720][ T2294] usb usb11-port1: unable to enumerate USB device [ 339.316526][ T6026] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 339.338432][ T8740] syz.9.669 (8740): drop_caches: 2 [ 339.981976][ T2294] tipc: Node number set to 3536703066 [ 340.416716][ T5942] Bluetooth: hci1: command 0x0419 tx timeout [ 340.495948][ T8727] tipc: Disabling bearer [ 340.660847][ T8770] bridge0: port 1(veth0_to_bridge) entered blocking state [ 340.663542][ T8770] bridge0: port 1(veth0_to_bridge) entered disabled state [ 340.666191][ T8770] veth0_to_bridge: entered allmulticast mode [ 340.669673][ T8770] veth0_to_bridge: entered promiscuous mode [ 340.673363][ T8770] bridge0: port 1(veth0_to_bridge) entered blocking state [ 340.676002][ T8770] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 340.720644][ T8777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.681'. [ 341.113582][ T8799] Trying to write to read-only block-device nullb0 [ 341.397035][ T5933] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 341.428862][ T8823] netlink: 40 bytes leftover after parsing attributes in process `syz.0.696'. [ 341.438035][ T8823] netlink: 40 bytes leftover after parsing attributes in process `syz.0.696'. [ 341.441208][ T8823] netlink: 40 bytes leftover after parsing attributes in process `syz.0.696'. [ 341.444291][ T8823] netlink: 40 bytes leftover after parsing attributes in process `syz.0.696'. [ 341.547991][ T5933] usb 14-1: config 128 has an invalid interface number: 90 but max is 0 [ 341.550060][ T5933] usb 14-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 341.552651][ T5933] usb 14-1: config 128 has no interface number 0 [ 341.554261][ T5933] usb 14-1: config 128 interface 90 altsetting 4 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 341.557880][ T5933] usb 14-1: config 128 interface 90 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 1024 [ 341.560883][ T5933] usb 14-1: config 128 interface 90 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 341.563699][ T5933] usb 14-1: config 128 interface 90 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 341.567279][ T5933] usb 14-1: config 128 interface 90 has no altsetting 0 [ 341.570445][ T5933] usb 14-1: New USB device found, idVendor=0ac8, idProduct=0328, bcdDevice=ae.ad [ 341.572693][ T5933] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.574804][ T5933] usb 14-1: Product: syz [ 341.575850][ T5933] usb 14-1: SerialNumber: syz [ 341.581986][ T8806] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 341.596156][ T8837] overlayfs: conflicting options: nfs_export=on,index=off [ 341.616809][ T8830] netlink: 36 bytes leftover after parsing attributes in process `syz.6.698'. [ 341.684278][ T8843] cgroup: noprefix used incorrectly [ 342.010028][ T8806] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.018047][ T5933] gspca_main: vc032x-2.14.0 probing 0ac8:0328 [ 342.020347][ T5933] gspca_vc032x: reg_r err -71 [ 342.022045][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 342.023885][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 342.025742][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 342.027434][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 342.028766][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 342.030071][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 342.031629][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 342.032968][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 342.034275][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 342.035592][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 342.037302][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 342.038713][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 342.040041][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 342.041371][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 342.043062][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 342.044520][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 342.045837][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 342.047582][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 342.049001][ T5933] gspca_vc032x: Unknown sensor... [ 342.050316][ T5933] vc032x 14-1:128.90: probe with driver vc032x failed with error -22 [ 342.055569][ T5933] usb 14-1: USB disconnect, device number 3 [ 342.197777][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 342.197792][ T40] audit: type=1400 audit(1734864680.872:589): avc: denied { append } for pid=8866 comm="syz.0.708" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 342.256753][ T8868] program syz.0.708 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.496515][ T5942] Bluetooth: hci1: command 0x0419 tx timeout [ 342.551862][ T8880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.904190][ T8884] openvswitch: netlink: IP tunnel dst address not specified [ 342.997168][ T8888] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 343.003156][ T8888] overlay: filesystem on ./file1 not supported as upperdir [ 343.082018][ T40] audit: type=1400 audit(1734864681.752:590): avc: denied { map } for pid=8893 comm="syz.6.720" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 343.164132][ T8892] ubi1: attaching mtd0 [ 343.165425][ T8892] ubi1 error: ubi_attach_mtd_dev: bad VID header (6) or data offsets (70) [ 343.168464][ T40] audit: type=1400 audit(1734864681.842:591): avc: denied { map } for pid=8891 comm="syz.5.719" path="socket:[30106]" dev="sockfs" ino=30106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 343.171329][ T8905] 9p: Unknown uid 00000000004294967295 [ 343.272559][ T40] audit: type=1400 audit(1734864681.942:592): avc: denied { nlmsg_write } for pid=8913 comm="syz.6.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 343.310447][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'. [ 343.351660][ T40] audit: type=1400 audit(1734864682.022:593): avc: denied { setopt } for pid=8923 comm="syz.0.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 343.360526][ T40] audit: type=1400 audit(1734864682.032:594): avc: denied { create } for pid=8923 comm="syz.0.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 343.421475][ T8930] virtio-fs: tag <(null)> not found [ 343.424484][ T40] audit: type=1400 audit(1734864682.092:595): avc: denied { bind } for pid=8929 comm="syz.9.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 343.430457][ T40] audit: type=1400 audit(1734864682.092:596): avc: denied { write } for pid=8929 comm="syz.9.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 343.481033][ T8933] netlink: 40 bytes leftover after parsing attributes in process `syz.9.730'. [ 343.888581][ T8942] [U]  [ 343.899389][ T8942] netlink: 288 bytes leftover after parsing attributes in process `syz.0.734'. [ 343.940265][ T40] audit: type=1326 audit(1734864682.612:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8943 comm="syz.0.735" exe="/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7fa6efd85d29 code=0x0 [ 344.029894][ T40] audit: type=1400 audit(1734864682.702:598): avc: denied { listen } for pid=8952 comm="syz.0.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 344.139830][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.739'. [ 344.474145][ T8980] delete_channel: no stack [ 344.576546][ T5942] Bluetooth: hci1: command 0x0419 tx timeout [ 345.129060][ T9038] program syz.0.762 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.133608][ T9038] netlink: 32 bytes leftover after parsing attributes in process `syz.0.762'. [ 345.306758][ T9047] netlink: 36 bytes leftover after parsing attributes in process `syz.0.765'. [ 345.632902][ T9063] netlink: 108 bytes leftover after parsing attributes in process `syz.0.770'. [ 345.735660][ T9015] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 345.988260][ T62] libceph: connect (1)[c::]:6789 error -101 [ 345.990087][ T62] libceph: mon0 (1)[c::]:6789 connect error [ 346.256849][ T62] libceph: connect (1)[c::]:6789 error -101 [ 346.258745][ T62] libceph: mon0 (1)[c::]:6789 connect error [ 346.405775][ T9105] TCP: TCP_TX_DELAY enabled [ 346.766661][ T62] libceph: connect (1)[c::]:6789 error -101 [ 346.768209][ T62] libceph: mon0 (1)[c::]:6789 connect error [ 346.838705][ T9092] ceph: No mds server is up or the cluster is laggy [ 346.985031][ T9130] hugetlbfs: Unknown parameter 'â' [ 347.174278][ T9143] netlink: 168 bytes leftover after parsing attributes in process `syz.0.791'. [ 347.318813][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 347.318827][ T40] audit: type=1400 audit(1734864685.992:618): avc: denied { bind } for pid=9148 comm="syz.9.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 347.327027][ T40] audit: type=1400 audit(1734864685.992:619): avc: denied { name_bind } for pid=9148 comm="syz.9.795" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 347.335604][ T40] audit: type=1400 audit(1734864685.992:620): avc: denied { node_bind } for pid=9148 comm="syz.9.795" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 347.388244][ T40] audit: type=1400 audit(1734864686.062:621): avc: denied { shutdown } for pid=9148 comm="syz.9.795" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 347.648065][ T1142] Bluetooth: Error in BCSP hdr checksum [ 347.649940][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.5.798'. [ 347.652276][ T40] audit: type=1400 audit(1734864686.322:622): avc: denied { unmount } for pid=6106 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 347.701427][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'. [ 347.703765][ T9167] bond0: option ad_select: unable to set because the bond device is up [ 347.707866][ T6090] bond0: (slave bond_slave_0): interface is now down [ 347.710197][ T6090] bond0: (slave bond_slave_1): interface is now down [ 347.717293][ T6090] bond0: now running without any active interface! [ 347.830746][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 347.830748][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 347.909618][ T6050] Bluetooth: Error in BCSP hdr checksum [ 348.036738][ T9192] geneve2: entered promiscuous mode [ 348.038225][ T9192] geneve2: entered allmulticast mode [ 348.624300][ T40] audit: type=1400 audit(1734864687.292:623): avc: denied { create } for pid=9206 comm="syz.6.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 349.103002][ T9233] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 349.105734][ T40] audit: type=1400 audit(1734864687.772:624): avc: denied { setattr } for pid=9232 comm="syz.6.818" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 349.168834][ T9230] syz.0.817 (9230): drop_caches: 2 [ 349.190421][ T9239] __nla_validate_parse: 1 callbacks suppressed [ 349.190432][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.6.820'. [ 349.235524][ T9241] netlink: 'syz.6.821': attribute type 9 has an invalid length. [ 349.238303][ T9241] netlink: 244 bytes leftover after parsing attributes in process `syz.6.821'. [ 349.333301][ T9246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.822'. [ 349.338041][ T9246] netlink: 'syz.0.822': attribute type 25 has an invalid length. [ 349.349483][ T9246] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.352735][ T9246] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.355750][ T9246] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.358860][ T9246] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.457428][ T5945] Bluetooth: hci4: command 0x1003 tx timeout [ 349.460567][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 349.546652][ T2294] usb 11-1: new full-speed USB device number 10 using dummy_hcd [ 349.698730][ T2294] usb 11-1: not running at top speed; connect to a high speed hub [ 349.702433][ T2294] usb 11-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 349.705561][ T2294] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.709505][ T2294] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 349.714411][ T2294] usb 11-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 349.717771][ T2294] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.720642][ T2294] usb 11-1: Product: syz [ 349.722176][ T2294] usb 11-1: Manufacturer: syz [ 349.723850][ T2294] usb 11-1: SerialNumber: syz [ 349.756502][ T6026] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 349.906414][ T6026] usb 14-1: Using ep0 maxpacket: 8 [ 349.909095][ T6026] usb 14-1: config 179 has an invalid interface number: 65 but max is 0 [ 349.911155][ T6026] usb 14-1: config 179 has no interface number 0 [ 349.912665][ T6026] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 349.915247][ T6026] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 349.918134][ T6026] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 349.921712][ T6026] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 349.924511][ T6026] usb 14-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 349.927579][ T6026] usb 14-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 349.929709][ T6026] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.933726][ T9248] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 349.943186][ T2294] usb 11-1: 0:2 : does not exist [ 349.968437][ T2294] usb 11-1: USB disconnect, device number 10 [ 350.167071][ T40] audit: type=1400 audit(1734864688.842:625): avc: denied { write } for pid=9249 comm="syz.0.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 350.308786][ T40] audit: type=1400 audit(1734864688.982:626): avc: denied { connect } for pid=9264 comm="syz.0.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 350.314407][ T40] audit: type=1400 audit(1734864688.982:627): avc: denied { write } for pid=9264 comm="syz.0.828" laddr=172.20.20.10 lport=1 faddr=172.20.20.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 350.337747][ T9248] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 350.345383][ T35] usb 14-1: USB disconnect, device number 4 [ 350.345520][ C1] xpad 14-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 350.350709][ C1] dummy_hcd dummy_hcd.9: timer fired with no URBs pending? [ 350.426546][ T2294] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 350.576455][ T2294] usb 11-1: Using ep0 maxpacket: 8 [ 350.581502][ T2294] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 350.585270][ T2294] usb 11-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 350.590567][ T2294] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 350.593633][ T2294] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.596278][ T2294] usb 11-1: Product: syz [ 350.597804][ T2294] usb 11-1: Manufacturer: 믘ꦤ餑ê‚觊æ⣫é“콩մ룤뢼咷ᗂ粱宫⚓졘⨡砪♈䴾ꌒ맩庅ഉê¯ë„€è‚¡á¢±é¥šå‰•á†–檵믞阚ㆿⷼ홪 [ 350.602976][ T2294] usb 11-1: SerialNumber: syz [ 350.898294][ T9270] netlink: 12 bytes leftover after parsing attributes in process `syz.9.829'. [ 350.948619][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.9.829'. [ 350.951564][ T9271] netlink: 24 bytes leftover after parsing attributes in process `syz.9.829'. [ 351.022093][ T9245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.025298][ T9245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.036259][ T9245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.039400][ T9245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.100359][ T2294] cdc_ncm 11-1:1.0: bind() failure [ 351.105073][ T2294] cdc_ncm 11-1:1.1: CDC Union missing and no IAD found [ 351.107880][ T2294] cdc_ncm 11-1:1.1: bind() failure [ 351.112363][ T2294] usb 11-1: USB disconnect, device number 11 [ 351.284182][ T7260] udevd[7260]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.324519][ T9291] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 351.327206][ T9291] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 351.329451][ T9291] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 351.331686][ T9291] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 351.334015][ T9291] geneve2: entered promiscuous mode [ 351.335384][ T9291] geneve2: entered allmulticast mode [ 351.911195][ T9312] netlink: 'syz.6.840': attribute type 5 has an invalid length. [ 352.071489][ T9324] binder_alloc: 9322: binder_alloc_buf, no vma [ 352.076583][ T9324] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.081085][ T9324] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.261190][ T9340] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 352.267105][ T9340] netlink: 24 bytes leftover after parsing attributes in process `syz.6.848'. [ 352.315406][ T9343] netlink: 16 bytes leftover after parsing attributes in process `syz.0.849'. [ 352.399256][ T9351] cgroup: Unknown subsys name 'fowner' [ 352.422700][ T9353] netlink: 'syz.6.853': attribute type 2 has an invalid length. [ 352.424694][ T9353] netlink: 'syz.6.853': attribute type 1 has an invalid length. [ 352.449940][ T9353] bond6: entered promiscuous mode [ 352.451320][ T9353] bond6: entered allmulticast mode [ 352.453139][ T9353] 8021q: adding VLAN 0 to HW filter on device bond6 [ 352.467725][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 352.467740][ T40] audit: type=1800 audit(1734864691.142:636): pid=9361 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.854" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 353.124603][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.861'. [ 353.128713][ T9391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.861'. [ 353.493811][ T40] audit: type=1400 audit(1734864692.162:637): avc: denied { sqpoll } for pid=9402 comm="syz.6.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 353.779775][ T9425] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.784718][ T9425] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.930683][ T9436] syz.9.875 (9436): drop_caches: 2 [ 353.932611][ T9425] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.935437][ T9425] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.037970][ T9439] ptrace attach of "/syz-executor exec"[7985] was attempted by "/syz-executor exec"[9439] [ 354.038968][ T9440] ptrace attach of "/syz-executor exec"[7985] was attempted by "/syz-executor exec"[9440] [ 354.057848][ T9425] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.061721][ T9425] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.076532][ T7037] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 354.088905][ T40] audit: type=1400 audit(1734864692.762:638): avc: denied { setopt } for pid=9437 comm="syz.9.876" lport=45370 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 354.097162][ T40] audit: type=1400 audit(1734864692.762:639): avc: denied { setopt } for pid=9437 comm="syz.9.876" lport=45370 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 354.212681][ T9425] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.215434][ T9425] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.228242][ T7037] usb 11-1: config 1 interface 0 altsetting 12 endpoint 0x1 has invalid maxpacket 1040, setting to 1024 [ 354.232216][ T7037] usb 11-1: config 1 interface 0 altsetting 12 bulk endpoint 0x1 has invalid maxpacket 1024 [ 354.235715][ T7037] usb 11-1: config 1 interface 0 has no altsetting 0 [ 354.240027][ T7037] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 354.242999][ T7037] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.245666][ T7037] usb 11-1: Product: syz [ 354.247237][ T7037] usb 11-1: Manufacturer: syz [ 354.248916][ T7037] usb 11-1: SerialNumber: syz [ 354.254318][ T9434] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 354.288324][ T9442] binder: 9441:9442 ioctl 8924 20000100 returned -22 [ 354.291421][ T9442] 9pnet_fd: p9_fd_create_unix (9442): problem connecting socket: éq‰Y’3aK: -111 [ 354.295583][ T9442] binder: 9441:9442 ioctl c0306201 20000080 returned -22 [ 354.432603][ T9425] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.434926][ T9425] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.442828][ T9425] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.445013][ T9425] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.451299][ T9425] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.453552][ T9425] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.460723][ T9425] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.463000][ T9425] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.464109][ T9434] nfs4: Unknown parameter '' [ 354.465841][ T9451] tap0: tun_chr_ioctl cmd 1074025677 [ 354.473256][ T9451] tap0: linktype set to 805 [ 354.506442][ T7037] usb 11-1: USB disconnect, device number 12 [ 354.523616][ T40] audit: type=1400 audit(1734864693.192:640): avc: denied { getopt } for pid=9452 comm="syz.0.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 354.666311][ T9467] syz.0.884 (9467): drop_caches: 2 [ 354.719146][ T9471] netlink: 'syz.0.886': attribute type 23 has an invalid length. [ 354.779326][ T9474] xt_hashlimit: size too large, truncated to 1048576 [ 354.805612][ T9472] qnx6: unable to set blocksize [ 354.831766][ T9475] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9475 comm=syz.0.887 [ 355.168240][ T9481] ptrace attach of "/syz-executor exec"[9482] was attempted by ""[9481] [ 355.280072][ T40] audit: type=1400 audit(1734864693.952:641): avc: denied { setopt } for pid=9485 comm="syz.6.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 355.809100][ T9505] __nla_validate_parse: 4 callbacks suppressed [ 355.809117][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.6.895'. [ 355.867005][ T9510] netlink: 12 bytes leftover after parsing attributes in process `syz.6.896'. [ 355.870103][ T9511] netlink: 12 bytes leftover after parsing attributes in process `syz.6.896'. [ 355.915337][ T40] audit: type=1400 audit(1734864694.582:642): avc: denied { remount } for pid=9513 comm="syz.9.898" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 355.915360][ T9514] binder: Binderfs stats mode cannot be changed during a remount [ 355.962468][ T9520] netlink: 68 bytes leftover after parsing attributes in process `syz.9.899'. [ 355.971786][ T9520] tipc: Started in network mode [ 355.973087][ T9520] tipc: Node identity ac14140f, cluster identity 4711 [ 355.975493][ T9520] tipc: New replicast peer: 255.255.255.255 [ 355.978569][ T9520] tipc: Enabled bearer , priority 10 [ 356.084686][ T9527] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 356.092290][ T9528] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 356.116544][ T9522] qnx6: unable to set blocksize [ 356.243488][ T40] audit: type=1326 audit(1734864694.912:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9533 comm="syz.0.904" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa6efd85d29 code=0x0 [ 356.325370][ T9536] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 356.332995][ T40] audit: type=1400 audit(1734864695.002:644): avc: denied { getopt } for pid=9535 comm="syz.6.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 356.526254][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.6.906'. [ 356.616847][ T9542] vxcan2: entered promiscuous mode [ 356.693284][ T40] audit: type=1400 audit(1734864695.362:645): avc: denied { setopt } for pid=9544 comm="syz.6.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 356.694014][ T9545] sctp: [Deprecated]: syz.6.908 (pid 9545) Use of int in max_burst socket option. [ 356.694014][ T9545] Use struct sctp_assoc_value instead [ 356.962845][ T9562] random: crng reseeded on system resumption [ 356.986603][ T7037] tipc: Node number set to 2886997007 [ 357.142685][ T9562] netlink: 16 bytes leftover after parsing attributes in process `syz.6.913'. [ 357.394016][ T9562] syz.6.913 (9562): drop_caches: 1 [ 357.427069][ T9562] syz.6.913 (9562): drop_caches: 1 [ 357.587686][ T9567] xt_HMARK: spi-set and port-set can't be combined [ 358.173477][ T9588] program syz.6.921 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 358.303023][ T9593] netlink: 60 bytes leftover after parsing attributes in process `syz.6.922'. [ 358.573958][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.6.926'. [ 358.577299][ T9607] netlink: 24 bytes leftover after parsing attributes in process `syz.6.926'. [ 358.962109][ T9621] team_slave_1: mtu less than device minimum [ 358.967556][ T9621] gtp0: entered promiscuous mode [ 359.193792][ T9631] netlink: 12 bytes leftover after parsing attributes in process `syz.6.933'. [ 359.414765][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 359.414781][ T40] audit: type=1400 audit(1734864698.082:648): avc: denied { setattr } for pid=9638 comm="syz.6.936" name="/" dev="9p" ino=38928552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 359.497505][ T9643] xt_CT: You must specify a L4 protocol and not use inversions on it [ 359.507155][ T9644] xt_CT: You must specify a L4 protocol and not use inversions on it [ 359.673538][ T9658] openvswitch: netlink: Flow key attr not present in new flow. [ 360.109637][ T9674] binder: 9673:9674 ioctl c0306201 200001c0 returned -22 [ 360.133689][ T9674] binder: 9673:9674 ioctl c0306201 200001c0 returned -22 [ 360.347568][ T9683] netlink: 'syz.6.946': attribute type 16 has an invalid length. [ 360.395428][ T40] audit: type=1400 audit(1734864699.062:649): avc: denied { append } for pid=9684 comm="syz.6.947" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 360.395459][ T9685] random: crng reseeded on system resumption [ 360.670272][ T9685] tipc: Enabling not permitted [ 360.671695][ T9685] tipc: Enabling of bearer rejected, failed to enable media [ 360.676513][ T40] audit: type=1400 audit(1734864699.342:650): avc: denied { ioctl } for pid=9684 comm="syz.6.947" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 360.735585][ T9686] qnx6: unable to set blocksize [ 361.162410][ T9690] __nla_validate_parse: 4 callbacks suppressed [ 361.162422][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'. [ 361.206737][ T9695] xt_l2tp: unknown flags: 17 [ 361.239044][ T9698] netlink: 'syz.0.952': attribute type 29 has an invalid length. [ 361.272395][ T9698] netlink: 'syz.0.952': attribute type 29 has an invalid length. [ 361.275583][ T9698] netlink: 'syz.0.952': attribute type 29 has an invalid length. [ 361.522735][ T9715] netlink: 'syz.9.958': attribute type 10 has an invalid length. [ 361.525166][ T9715] netlink: 2 bytes leftover after parsing attributes in process `syz.9.958'. [ 361.528218][ T9715] team0: entered promiscuous mode [ 361.529719][ T9715] team_slave_0: entered promiscuous mode [ 361.531383][ T9715] team_slave_1: entered promiscuous mode [ 361.533043][ T9715] bridge0: port 3(team0) entered blocking state [ 361.534828][ T9715] bridge0: port 3(team0) entered disabled state [ 361.537478][ T9715] team0: entered allmulticast mode [ 361.539010][ T9715] team_slave_0: entered allmulticast mode [ 361.540974][ T9715] team_slave_1: entered allmulticast mode [ 361.543854][ T9715] bridge0: port 3(team0) entered blocking state [ 361.545509][ T9715] bridge0: port 3(team0) entered forwarding state [ 361.621956][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.6.960'. [ 361.645142][ T9729] netlink: 'syz.9.961': attribute type 6 has an invalid length. [ 361.698221][ T40] audit: type=1400 audit(1734864700.372:651): avc: denied { write } for pid=9730 comm="syz.6.962" name="file0" dev="tmpfs" ino=1617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 361.706575][ T40] audit: type=1400 audit(1734864700.382:652): avc: denied { open } for pid=9730 comm="syz.6.962" path="/302/file0" dev="tmpfs" ino=1617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 361.752088][ T9735] netlink: 12 bytes leftover after parsing attributes in process `syz.9.964'. [ 361.757334][ T9735] batadv0: entered promiscuous mode [ 361.797902][ T9738] ALSA: mixer_oss: invalid OSS volume '' [ 361.915847][ T9749] netlink: 8 bytes leftover after parsing attributes in process `syz.9.970'. [ 362.083151][ T9756] binder: binder_mmap: 9750 20acc000-20ace000 bad vm_flags failed -1 [ 362.087566][ T9755] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 362.275218][ T40] audit: type=1400 audit(1734864700.942:653): avc: denied { write } for pid=9763 comm="syz.0.974" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 362.311463][ T9760] netlink: 20 bytes leftover after parsing attributes in process `syz.6.973'. [ 362.380440][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.383168][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.385713][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.388650][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.390777][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.393202][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.396235][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.399265][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.401823][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.403989][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.405911][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.408295][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.410610][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.412520][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.414440][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.416409][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.418349][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.420815][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.423432][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.425379][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.427541][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.429531][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.431433][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.433345][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.435258][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.437249][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.439254][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.441904][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.444368][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.446867][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.448888][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.450926][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.452849][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.454756][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.457123][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.459182][ T7037] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.466947][ T7037] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 362.526472][ T35] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 362.586818][ T9774] overlayfs: failed to resolve './file1': -2 [ 362.698098][ T35] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 362.698126][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.698143][ T35] usb 5-1: Product: syz [ 362.698156][ T35] usb 5-1: Manufacturer: syz [ 362.706760][ T35] usb 5-1: SerialNumber: syz [ 362.711048][ T35] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 362.730150][ T7037] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 362.842529][ T9784] misc userio: Can't change port type on an already running userio instance [ 362.849215][ T9784] misc userio: Can't change port type on an already running userio instance [ 362.932762][ T5933] usb 5-1: USB disconnect, device number 2 [ 363.300463][ T5945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.309400][ T5945] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.313047][ T5945] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.318850][ T5945] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.323977][ T5945] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 363.336322][ T5945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.465108][ T9804] chnl_net:caif_netlink_parms(): no params data found [ 363.534656][ T9804] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.536881][ T9804] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.539238][ T9804] bridge_slave_0: entered allmulticast mode [ 363.542981][ T9804] bridge_slave_0: entered promiscuous mode [ 363.548874][ T9804] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.551795][ T9804] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.554403][ T9804] bridge_slave_1: entered allmulticast mode [ 363.556827][ T9804] bridge_slave_1: entered promiscuous mode [ 363.585436][ T9804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.591203][ T9804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.640511][ T9804] team0: Port device team_slave_0 added [ 363.643916][ T9804] team0: Port device team_slave_1 added [ 363.668996][ T9804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.670920][ T9804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.678775][ T9804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.682484][ T9804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.684345][ T9804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.686747][ T62] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 363.690816][ T9804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.786666][ T7037] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 363.789595][ T7037] ath9k_htc: Failed to initialize the device [ 363.795674][ T5933] usb 5-1: ath9k_htc: USB layer deinitialized [ 363.810819][ T9804] hsr_slave_0: entered promiscuous mode [ 363.857358][ T9804] hsr_slave_1: entered promiscuous mode [ 363.860798][ T62] usb 14-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 363.863119][ T62] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.865128][ T62] usb 14-1: Product: syz [ 363.866196][ T62] usb 14-1: Manufacturer: syz [ 363.867443][ T62] usb 14-1: SerialNumber: syz [ 363.876582][ T62] usb 14-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 363.885295][ T62] usb 14-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 363.888047][ T9804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.889945][ T9804] Cannot create hsr debugfs directory [ 364.080716][ T40] audit: type=1400 audit(1734864702.752:654): avc: denied { setattr } for pid=9826 comm="syz.6.991" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 364.088455][ T40] audit: type=1400 audit(1734864702.752:655): avc: denied { write } for pid=9826 comm="syz.6.991" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 364.095514][ T40] audit: type=1400 audit(1734864702.752:656): avc: denied { open } for pid=9826 comm="syz.6.991" path="/319/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 364.289841][ T9] usb 14-1: USB disconnect, device number 5 [ 365.136491][ T62] usb 14-1: Service connection timeout for: 256 [ 365.138235][ T62] ath9k_htc 14-1:1.0: ath9k_htc: Unable to initialize HTC services [ 365.144895][ T62] ath9k_htc: Failed to initialize the device [ 365.152125][ T9] usb 14-1: ath9k_htc: USB layer deinitialized [ 365.377659][ T5942] Bluetooth: hci4: command tx timeout [ 367.456491][ T5942] Bluetooth: hci4: command tx timeout [ 369.536491][ T5942] Bluetooth: hci4: command tx timeout [ 371.626607][ T5942] Bluetooth: hci4: command tx timeout [ 377.917162][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.6.993'. [ 377.968913][ T40] audit: type=1400 audit(1734864716.642:657): avc: denied { ioctl } for pid=9850 comm="syz.6.999" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 378.176441][ T40] audit: type=1400 audit(1734864716.842:658): avc: denied { append } for pid=9863 comm="syz.0.1003" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 378.258095][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.576294][ T40] audit: type=1400 audit(1734864717.242:659): avc: denied { mounton } for pid=9893 comm="syz.0.1012" path="/122/file0/file0" dev="9p" ino=38928561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 378.583357][ T40] audit: type=1400 audit(1734864717.252:660): avc: denied { read } for pid=9893 comm="syz.0.1012" name="file0" dev="9p" ino=38928561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 378.593559][ T9896] erofs (device erofs): cannot find valid erofs superblock [ 378.626507][ T9804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 378.630599][ T9804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 378.634871][ T9804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 378.648010][ T9804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 378.679418][ T9804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.689241][ T9804] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.693331][ T6049] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.693723][ T9904] random: crng reseeded on system resumption [ 378.695189][ T6049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.701741][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.703603][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.810243][ T9804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.832811][ T9804] veth0_vlan: entered promiscuous mode [ 378.837946][ T9804] veth1_vlan: entered promiscuous mode [ 378.851673][ T9804] veth0_macvtap: entered promiscuous mode [ 378.852062][ T40] audit: type=1400 audit(1734864717.522:661): avc: denied { listen } for pid=9903 comm="syz.6.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 378.854270][ T9911] Invalid option length (546) for dns_resolver key [ 378.854516][ T9804] veth1_macvtap: entered promiscuous mode [ 378.864313][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.867249][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.869858][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.872601][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.875025][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.878637][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.881609][ T9804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.885721][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.888988][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.892022][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.897741][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.900353][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.903185][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.910090][ T9804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.916764][ T9804] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.919016][ T9804] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.921268][ T9804] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.923500][ T9804] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.990083][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.992121][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.296397][ T9894] 9pnet_fd: p9_fd_create_tcp (9894): problem connecting socket to 127.0.0.1 [ 379.384185][ T9922] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1019'. [ 379.561952][ T9928] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 379.564647][ T9928] SELinux: Context system_u:object_r:sound_device_t:s0 is not valid (left unmapped). [ 379.568301][ T40] audit: type=1400 audit(1734864718.242:662): avc: denied { relabelto } for pid=9927 comm="syz.6.1021" name="file0" dev="tmpfs" ino=1780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:sound_device_t:s0" [ 379.577274][ T40] audit: type=1400 audit(1734864718.242:663): avc: denied { associate } for pid=9927 comm="syz.6.1021" name="file0" dev="tmpfs" ino=1780 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:sound_device_t:s0" [ 379.640751][ T40] audit: type=1400 audit(1734864718.312:664): avc: denied { unlink } for pid=6106 comm="syz-executor" name="file0" dev="tmpfs" ino=1780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:sound_device_t:s0" [ 379.857522][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.859693][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.868196][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1023'. [ 379.896678][ T40] audit: type=1400 audit(1734864718.562:665): avc: denied { mounton } for pid=9804 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 379.907296][ T9944] netlink: 83 bytes leftover after parsing attributes in process `syz.0.1027'. [ 379.969615][ T40] audit: type=1400 audit(1734864718.642:666): avc: denied { append } for pid=9950 comm="syz.6.1030" name="file0" dev="9p" ino=38928561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 380.027877][ T9960] 9pnet_virtio: no channels available for device syz [ 380.105120][ T9966] overlayfs: missing 'workdir' [ 380.125721][ T9968] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 380.197382][ T9984] tmpfs: Bad value for 'mpol' [ 380.333622][ T9993] pimreg: entered allmulticast mode [ 380.336108][ T9993] pimreg: left allmulticast mode [ 380.339182][ T9995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1042'. [ 380.926529][T10019] Driver unsupported XDP return value 0 on prog (id 146) dev N/A, expect packet loss! [ 380.933682][T10021] syz.9.1048 (10021) used greatest stack depth: 20448 bytes left [ 381.031962][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1049'. [ 381.078930][T10026] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1050'. [ 381.274391][T10039] Process accounting resumed [ 381.289569][T10039] Process accounting resumed [ 381.635041][ T5942] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 381.738712][T10076] netlink: 'syz.9.1066': attribute type 1 has an invalid length. [ 382.052155][T10107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1075'. [ 382.160057][T10118] dlm: no locking on control device [ 382.161632][T10119] dlm: no locking on control device [ 382.245467][T10123] fuse: Bad value for 'fd' [ 382.342846][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'. [ 382.375626][T10138] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=57 sclass=netlink_xfrm_socket pid=10138 comm=syz.9.1086 [ 382.376954][T10137] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1085'. [ 382.420871][T10140] xt_hashlimit: size too large, truncated to 1048576 [ 382.446423][ T5999] usb 11-1: new low-speed USB device number 13 using dummy_hcd [ 382.586584][ T5999] usb 11-1: device descriptor read/64, error -71 [ 382.826427][ T5999] usb 11-1: new low-speed USB device number 14 using dummy_hcd [ 382.847612][T10163] netlink: 'syz.1.1097': attribute type 1 has an invalid length. [ 382.851967][T10163] netlink: 'syz.1.1097': attribute type 2 has an invalid length. [ 382.900444][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.902478][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.904858][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.907450][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.909342][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.911361][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.913563][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.915481][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.918585][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.920524][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.922489][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.924776][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.928896][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.931582][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.933556][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.935481][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.937716][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.939698][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.941608][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.943518][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.945425][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.947499][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.949432][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.951343][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.953313][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.955223][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.957193][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.959118][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.961033][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.962943][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.964858][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.966959][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.968878][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.970796][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.972692][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.974593][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.976498][ T5999] usb 11-1: device descriptor read/64, error -71 [ 382.978523][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.980436][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.982370][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.984288][ T6026] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 382.986988][ T6026] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz0 [ 383.086610][ T5999] usb usb11-port1: attempt power cycle [ 383.153254][T10173] __nla_validate_parse: 6 callbacks suppressed [ 383.153266][T10173] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1101'. [ 383.436762][ T5999] usb 11-1: new low-speed USB device number 15 using dummy_hcd [ 383.462348][ T5999] usb 11-1: device descriptor read/8, error -71 [ 383.696437][ T5999] usb 11-1: new low-speed USB device number 16 using dummy_hcd [ 383.717462][ T5999] usb 11-1: device descriptor read/8, error -71 [ 383.836824][ T5999] usb usb11-port1: unable to enumerate USB device [ 396.143612][T10177] team0: No ports can be present during mode change [ 396.147803][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1103'. [ 396.179807][T10198] cgroup2: Unknown parameter 'euid' [ 396.199947][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1104'. [ 396.203193][T10199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1104'. [ 396.281638][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 396.281655][ T40] audit: type=1400 audit(1734864734.952:678): avc: denied { execute_no_trans } for pid=10208 comm="syz.6.1108" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=39121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 396.394300][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1112'. [ 396.474406][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1114'. [ 396.484475][T10229] input: syz0 as /devices/virtual/input/input12 [ 396.520582][T10235] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 396.523185][T10235] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 396.534091][T10235] IPv6: NLM_F_CREATE should be specified when creating new route [ 396.752152][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1125'. [ 396.781034][ T40] audit: type=1400 audit(1734864735.452:679): avc: denied { read } for pid=10249 comm="syz.9.1124" path="socket:[38544]" dev="sockfs" ino=38544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 396.859442][ T40] audit: type=1400 audit(1734864735.532:680): avc: denied { execmod } for pid=10249 comm="syz.9.1124" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=36811 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 396.859486][T10261] binder: 10259:10261 ioctl c0306201 20000580 returned -22 [ 397.038945][T10274] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 397.041247][T10274] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 397.043444][T10274] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 397.045549][T10274] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 397.053739][T10274] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 397.060103][T10274] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 397.063656][T10274] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 397.073701][T10274] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 397.086447][ T6026] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 397.110266][T10274] geneve2: entered promiscuous mode [ 397.111677][T10274] geneve2: entered allmulticast mode [ 397.119494][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1134'. [ 397.247360][ T6026] usb 11-1: Using ep0 maxpacket: 16 [ 397.251275][ T6026] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.254927][ T6026] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 397.263459][ T6026] usb 11-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 397.276481][ T6026] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.280231][ T6026] usb 11-1: config 0 descriptor?? [ 397.323656][T10294] usb usb8: usbfs: process 10294 (syz.0.1140) did not claim interface 2 before use [ 397.418547][T10301] (unnamed net_device) (uninitialized): (slave lo): Device is not bonding slave [ 397.420997][T10301] (unnamed net_device) (uninitialized): option active_slave: invalid value (lo) [ 397.466600][T10303] xt_hashlimit: size too large, truncated to 1048576 [ 397.485616][T10306] openvswitch: netlink: Missing valid actions attribute. [ 397.488450][T10306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.493831][T10306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1145'. [ 397.558260][T10249] delete_channel: no stack [ 397.648860][T10312] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1147'. [ 397.838439][T10326] tipc: Started in network mode [ 397.839774][T10326] tipc: Node identity 4, cluster identity 4711 [ 397.841371][T10326] tipc: Node number set to 4 [ 397.896374][ T40] audit: type=1400 audit(1734864736.562:681): avc: denied { connect } for pid=10332 comm="syz.9.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 397.905627][ T40] audit: type=1400 audit(1734864736.562:682): avc: denied { write } for pid=10332 comm="syz.9.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 397.916481][ T40] audit: type=1400 audit(1734864736.572:683): avc: denied { ioctl } for pid=10332 comm="syz.9.1154" path="socket:[39382]" dev="sockfs" ino=39382 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 397.930615][ T40] audit: type=1400 audit(1734864736.572:684): avc: denied { read } for pid=10332 comm="syz.9.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 397.973531][ T40] audit: type=1400 audit(1734864736.642:685): avc: denied { rename } for pid=10339 comm="syz.9.1156" name="file0" dev="9p" ino=38928561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 398.722157][T10360] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1162'. [ 398.825112][T10360] binder_alloc: binder_alloc_mmap_handler: 10359 20ffc000-20ffd000 already mapped failed -16 [ 398.886621][T10361] wg2: entered promiscuous mode [ 399.076837][T10381] syz.9.1167 (10381): drop_caches: 2 [ 399.344088][T10397] overlay: Bad value for 'workdir' [ 399.479363][T10408] xt_hashlimit: size too large, truncated to 1048576 [ 399.539949][ T40] audit: type=1400 audit(1734864738.212:686): avc: denied { map } for pid=10407 comm="syz.9.1179" path="/223/file0/cgroup.kill" dev="9p" ino=38928686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 399.676510][ T7037] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 399.694641][T10413] syz.1.1178 (10413): drop_caches: 2 [ 399.796035][ T6026] usbhid 11-1:0.0: can't add hid device: -71 [ 399.807631][ T6026] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 399.810540][ T6026] usb 11-1: USB disconnect, device number 17 [ 399.826471][ T7037] usb 5-1: Using ep0 maxpacket: 8 [ 399.833648][ T7037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 399.838152][ T7037] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 399.840759][ T7037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.844313][ T7037] usb 5-1: config 0 descriptor?? [ 399.947273][ T40] audit: type=1400 audit(1734864738.622:687): avc: denied { mounton } for pid=10415 comm="syz.6.1180" path="/proc/1076/task" dev="proc" ino=42088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 400.060249][ T7037] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 400.123814][T10427] virtio-fs: tag <: cryptd(__ctr-aes-aesni) [ 400.123814][T10427] module : kernel [ 400.123814][T10427] priority : 450 [ 400.123814][T10427] refcnt : 1 [ 400.123814][T10427] selftest : passed [ 400.123814][T10427] internal : yes [ 400.123814][T10427] type : skcipher [ 400.123814][T10427] async : yes [ 400.123814][T10427] blocksize : 1 [ 400.123814][T10427] min keysize : 16 [ 400.123814][T10427] max keysize : 32 [ 400.123814][T10427] ivsize : 16 [ 400.123814][T10427] chunksize : 16 [ 400.123814][T10427] walksize : 16 [ 400.123814][T10427] statesize : 0 [ 400.123814][T10427] [ 400.123814][T10427] name : __ecb(aes) [ 400.123814][T10427] driver : cryptd(__ecb-aes-aesni) [ 400.123814][T10427] module : kernel [ 400.123814][T10427] priority : 450 [ 400.123814][T10427] refcnt : 1 [ 400.123814][T10427] selftest : passed [ 400.123814][T10427] internal : yes [ 400.123814][T10427] type : skcipher [ 400.123814][T10427] async : yes [ 400.123814][T10427] blocksize : 16 [ 400.123814][T10427] min keysize : 16 [ 400.123814][T10427] max keysize : 32 [ 400.123814][T10427] ivsize : 0 [ 400.123814][T10427] chunksize : 16 [ 400.123814][T10427] walksize : 16 [ 400.123814][T10427] statesize : 0 [ 400.123814][T10427] [ 400.123814][T10427] name : lrw(aes) [ 400.123814][T10427] driver : lrw(ecb-aes-aesni) [ 400.123814][T10427] module : kernel [ 400.123814][T10427] priority : 400 [ 400.123814][T10427] refcnt : 1 [ 400.123814][T10427] selftest : passed [ 400.123814][T10427] internal : no [ 400.123814][T10427] type : skcipher [ 400.123814][T10427] async : yes [ 400.123814][T10427] blocksize : 16 [ 400.123814][T10427] min keysize : 32 [ 400.123814][T10427] max keysize : 48 [ 400.123814][T10427] ivsize : 16 [ 400.123814][T10427] chunksize : 16 [ 400.124652][T10427] fuse: Unknown parameter '0xffffffffffffffff' [ 400.172579][ C3] vkms_vblank_simulate: vblank timer overrun [ 400.209983][T10430] 9pnet_virtio: no channels available for device syz [ 400.328254][T10432] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 400.579684][ T142] usb 5-1: USB disconnect, device number 3 [ 400.724807][T10445] netlink: 'syz.6.1190': attribute type 1 has an invalid length. [ 400.765675][T10447] netlink: 'syz.6.1191': attribute type 10 has an invalid length. [ 400.806487][T10453] netlink: 'syz.6.1193': attribute type 17 has an invalid length. [ 401.123703][T10483] netlink: 'syz.1.1202': attribute type 1 has an invalid length. [ 401.160658][T10486] __nla_validate_parse: 4 callbacks suppressed [ 401.160669][T10486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1203'. [ 401.171315][T10482] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1201'. [ 401.241290][T10491] xt_hashlimit: max too large, truncated to 1048576 [ 401.248024][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1205'. [ 401.314247][T10500] fuse: blksize only supported for fuseblk [ 401.334895][T10503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=10503 comm=syz.6.1207 [ 401.678188][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 401.678198][ T40] audit: type=1400 audit(1734864740.352:692): avc: denied { unmount } for pid=7985 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 402.537325][T10514] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 402.589162][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1214'. [ 402.641907][T10530] overlayfs: statfs failed on './file0' [ 402.830193][T10536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.904017][ T9] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 403.044527][T10545] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.047234][T10545] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.116613][ T9] usb 14-1: Using ep0 maxpacket: 32 [ 403.119814][ T9] usb 14-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 403.125974][ T9] usb 14-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 403.129724][ T9] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.130314][T10545] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.132534][ T9] usb 14-1: Product: syz [ 403.132550][ T9] usb 14-1: Manufacturer: syz [ 403.132563][ T9] usb 14-1: SerialNumber: syz [ 403.139835][ T9] input: bcm5974 as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.0/input/input13 [ 403.156408][T10545] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.216434][ T6026] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 403.228611][T10545] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.231083][T10545] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.344669][T10545] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.347414][T10545] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.376546][ T6026] usb 6-1: Using ep0 maxpacket: 8 [ 403.398338][ T6026] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 403.401225][ T6026] usb 6-1: config 179 has no interface number 0 [ 403.403441][ T6026] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 403.407543][ T6026] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 403.410719][ T6026] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 403.414509][ T6026] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 403.419882][ T6026] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 403.423298][ T6026] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 403.425644][ T6026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.435720][T10542] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 403.585751][T10545] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.588364][T10545] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.603040][T10545] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.605858][T10545] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.612832][T10545] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.615128][T10545] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.623077][T10545] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.625525][T10545] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.708310][T10555] netlink: 'syz.6.1224': attribute type 1 has an invalid length. [ 403.714194][T10555] pim6reg1: entered promiscuous mode [ 403.715786][T10555] pim6reg1: entered allmulticast mode [ 403.771945][ T40] audit: type=1400 audit(1734864742.442:693): avc: denied { ioctl } for pid=10554 comm="syz.6.1224" path="socket:[39817]" dev="sockfs" ino=39817 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 403.790969][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1225'. [ 403.848339][T10536] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 403.850670][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 403.853040][T10536] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1216'. [ 403.858322][ T1464] usb 6-1: USB disconnect, device number 3 [ 403.859936][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 403.859955][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 404.527559][T10558] overlayfs: statfs failed on './file0' [ 405.053635][T10624] xt_CT: No such helper "pptp" [ 405.224249][ T40] audit: type=1400 audit(1734864743.892:694): avc: denied { write } for pid=10635 comm="syz.0.1251" path="socket:[41511]" dev="sockfs" ino=41511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 405.229159][T10639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1252'. [ 405.235880][ T40] audit: type=1400 audit(1734864743.902:695): avc: denied { ioctl } for pid=10635 comm="syz.0.1251" path="socket:[42583]" dev="sockfs" ino=42583 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 405.486900][ T40] audit: type=1400 audit(1734864744.162:696): avc: denied { connect } for pid=10655 comm="syz.6.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 405.493540][ T40] audit: type=1400 audit(1734864744.162:697): avc: denied { map } for pid=10658 comm="syz.0.1260" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 405.503688][ T40] audit: type=1400 audit(1734864744.162:698): avc: denied { execute } for pid=10658 comm="syz.0.1260" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 405.511193][T10662] vivid-001: disconnect [ 405.516098][ T5942] Bluetooth: hci1: unexpected event for opcode 0x204e [ 405.525358][T10658] vivid-001: reconnect [ 405.527605][T10663] binder: 10655:10663 unknown command 0 [ 405.529563][T10663] binder: 10655:10663 ioctl c0306201 20000080 returned -22 [ 405.540214][T10663] syz.6.1258 (10663): drop_caches: 2 [ 405.556232][ T40] audit: type=1400 audit(1734864744.222:699): avc: denied { accept } for pid=10666 comm="syz.1.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 405.681075][T10681] xt_hashlimit: size too large, truncated to 1048576 [ 405.721797][T10683] bridge_slave_1: left allmulticast mode [ 405.723861][T10683] bridge_slave_1: left promiscuous mode [ 405.725993][T10683] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.727698][ T5332] bcm5974 14-1:1.0: could not read from device [ 405.739308][T10683] bond0: (slave bond_slave_0): Releasing backup interface [ 405.790062][ T9] usb 14-1: USB disconnect, device number 6 [ 405.790304][T10683] bond0: (slave bond_slave_1): Releasing backup interface [ 405.849233][T10683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.851368][T10683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.853945][T10683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.855970][T10683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.869561][T10683] bond0: (slave bond2): Releasing backup interface [ 405.940278][T10688] netlink: 'syz.1.1266': attribute type 4 has an invalid length. [ 406.046074][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1273'. [ 406.185485][T10712] syz.9.1275 (10712): drop_caches: 2 [ 406.263968][T10718] netlink: 'syz.9.1277': attribute type 13 has an invalid length. [ 406.267229][T10718] netlink: 152 bytes leftover after parsing attributes in process `syz.9.1277'. [ 406.270931][T10718] syz_tun: refused to change device tx_queue_len [ 406.273236][T10718] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 406.404609][T10727] kvm: pic: non byte write [ 406.430177][T10731] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 406.558713][T10753] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1288'. [ 406.561310][T10753] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1288'. [ 406.574060][T10748] program syz.6.1286 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 406.612104][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1290'. [ 406.783097][T10781] netlink: 480 bytes leftover after parsing attributes in process `syz.6.1295'. [ 406.787786][T10781] gre0: entered promiscuous mode [ 406.961560][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1300'. [ 406.989956][ T40] audit: type=1400 audit(1734864745.662:700): avc: denied { ioctl } for pid=10799 comm="syz.6.1301" path="socket:[41731]" dev="sockfs" ino=41731 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 406.998241][ T7037] IPVS: starting estimator thread 0... [ 407.024423][ T40] audit: type=1400 audit(1734864745.692:701): avc: denied { read } for pid=10790 comm="syz.1.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 407.087163][T10804] IPVS: using max 38 ests per chain, 91200 per kthread [ 407.244605][T10823] overlayfs: missing 'workdir' [ 407.262952][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1311'. [ 407.310755][ T40] audit: type=1400 audit(1734864745.972:702): avc: denied { relabelfrom } for pid=10827 comm="syz.0.1312" name="PACKET" dev="sockfs" ino=42837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 407.318125][T10829] SELinux: Context system_u:object_r:mail_spool_t:s0 is not valid (left unmapped). [ 407.327493][ T40] audit: type=1400 audit(1734864746.002:703): avc: denied { relabelto } for pid=10827 comm="syz.0.1312" name="PACKET" dev="sockfs" ino=42837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=packet_socket permissive=1 trawcon="system_u:object_r:mail_spool_t:s0" [ 407.359512][ T40] audit: type=1400 audit(1734864746.032:704): avc: denied { write } for pid=10833 comm="syz.9.1315" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 407.379486][T10836] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1316'. [ 407.670233][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1322'. [ 407.711430][T10857] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2687774503 (86008784096 ns) > initial count (67893909056 ns). Using initial count to start timer. [ 407.736465][ T30] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 407.861437][T10867] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 407.896535][ T30] usb 11-1: Using ep0 maxpacket: 8 [ 407.899667][ T30] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 407.903124][ T30] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 407.906238][ T30] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 407.910828][ T30] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.916188][ T30] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 407.919587][ T30] usb 11-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 407.922596][ T30] usb 11-1: Product: syz [ 407.966398][ T40] audit: type=1400 audit(1734864746.632:705): avc: denied { accept } for pid=10877 comm="syz.0.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 408.066156][T10886] cgroup: fork rejected by pids controller in /syz0 [ 408.111449][T10987] ufs: You didn't specify the type of your ufs filesystem [ 408.111449][T10987] [ 408.111449][T10987] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 408.111449][T10987] [ 408.111449][T10987] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 408.121467][T10987] ufs: failed to set blocksize [ 408.131594][ T30] usb 11-1: GET_CAPABILITIES returned 0 [ 408.133497][ T30] usbtmc 11-1:16.0: can't read capabilities [ 408.153275][ T40] audit: type=1400 audit(1734864746.822:706): avc: denied { recv } for pid=5919 comm="syz-executor" saddr=127.0.0.1 src=50672 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 408.172049][ T40] audit: type=1400 audit(1734864746.842:707): avc: denied { connect } for pid=11070 comm="syz.0.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 408.179523][ T40] audit: type=1400 audit(1734864746.842:708): avc: denied { ioctl } for pid=11070 comm="syz.0.1334" path="socket:[43245]" dev="sockfs" ino=43245 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 408.197160][ T40] audit: type=1400 audit(1734864746.872:709): avc: denied { recv } for pid=16 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50672 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 408.213103][T11074] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 408.250113][T11079] cgroup: Unknown subsys name 'smackfshat' [ 408.279255][T11081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1337'. [ 408.279264][T11082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11082 comm=syz.0.1337 [ 408.377465][ T2294] usb 11-1: USB disconnect, device number 18 [ 408.689830][T11096] fuseblk: Unknown parameter '¡8ž@(5ÅÞ OÙÖ`gro}p_id' [ 409.003749][T11115] @: renamed from vlan0 (while UP) [ 409.146592][ T2294] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 409.256460][ T5999] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 409.308363][ T2294] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 409.311062][ T2294] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 409.313311][ T2294] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 409.315418][ T2294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.318960][T11099] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 409.323242][ T2294] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 409.426469][ T5999] usb 14-1: Using ep0 maxpacket: 16 [ 409.430173][ T5999] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.433327][ T5999] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.435903][ T5999] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 409.439396][ T5999] usb 14-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 409.441752][ T5999] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.445346][ T5999] usb 14-1: config 0 descriptor?? [ 409.531580][ T62] usb 5-1: USB disconnect, device number 4 [ 409.852797][ T5999] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 409.855572][ T5999] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 409.857380][ T5999] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 409.859212][ T5999] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 409.861128][ T5999] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 409.865423][ T5999] input: HID 0955:7214 Haptics as /devices/virtual/input/input14 [ 409.887542][ T5999] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 409.889903][ T5999] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 410.051229][T11119] random: crng reseeded on system resumption [ 410.187961][T11161] sock: sock_set_timeout: `syz.6.1363' (pid 11161) tries to set negative timeout [ 410.334566][ T2294] usb 14-1: USB disconnect, device number 7 [ 410.335483][ T9] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 410.342224][ T9] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 410.345594][ T9] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 410.348520][ T9] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 410.864738][T11171] binder: 11170:11171 ioctl c0046209 0 returned -22 [ 410.868471][T11171] binder: 11170:11171 ioctl 4008f50a 20000000 returned -22 [ 410.871459][T11171] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=128 sclass=netlink_xfrm_socket pid=11171 comm=syz.9.1366 [ 411.071444][T11189] xt_hashlimit: size too large, truncated to 1048576 [ 411.130735][T11192] xt_hashlimit: size too large, truncated to 1048576 [ 411.133966][T11192] warn_alloc: 56 callbacks suppressed [ 411.133976][T11192] syz.9.1372: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 411.144586][T11192] CPU: 0 UID: 0 PID: 11192 Comm: syz.9.1372 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 411.147860][T11192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 411.151939][T11192] Call Trace: [ 411.153201][T11192] [ 411.154407][T11192] dump_stack_lvl+0x16c/0x1f0 [ 411.156133][T11192] warn_alloc+0x24d/0x3a0 [ 411.157621][T11192] ? __pfx_warn_alloc+0x10/0x10 [ 411.159363][T11192] ? __get_vm_area_node+0x1b0/0x2f0 [ 411.161152][T11192] ? __get_vm_area_node+0x1dc/0x2f0 [ 411.162997][T11192] __vmalloc_node_range_noprof+0x1105/0x1530 [ 411.165079][T11192] ? __pfx___lock_acquire+0x10/0x10 [ 411.166959][T11192] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 411.169123][T11192] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 411.171288][T11192] ? __pfx_lock_release+0x10/0x10 [ 411.173153][T11192] ? trace_lock_acquire+0x14e/0x1f0 [ 411.175076][T11192] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 411.177282][T11192] vmalloc_noprof+0x6b/0x90 [ 411.178935][T11192] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 411.181038][T11192] hashlimit_mt_check_common+0x8b0/0x1450 [ 411.183059][T11192] hashlimit_mt_check+0x71/0x90 [ 411.184827][T11192] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 411.186820][T11192] xt_check_match+0x284/0xa50 [ 411.188483][T11192] ? __wait_for_common+0x3f2/0x600 [ 411.190433][T11192] ? __pfx_xt_check_match+0x10/0x10 [ 411.192332][T11192] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 411.194445][T11192] ? xt_find_match+0x1f2/0x290 [ 411.196221][T11192] find_check_entry.constprop.0+0x34d/0xa20 [ 411.198318][T11192] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 411.200632][T11192] ? kvfree+0x47/0x50 [ 411.202040][T11192] translate_table+0xd06/0x17b0 [ 411.203749][T11192] ? __pfx_translate_table+0x10/0x10 [ 411.205541][T11192] ? __might_fault+0xe3/0x190 [ 411.207188][T11192] do_ip6t_set_ctl+0x926/0xbf0 [ 411.208908][T11192] ? trace_contention_end+0xee/0x140 [ 411.210727][T11192] ? __mutex_lock+0x1cc/0xa60 [ 411.212437][T11192] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 411.214298][T11192] ? __mutex_unlock_slowpath+0x164/0x690 [ 411.216311][T11192] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 411.218422][T11192] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 411.220529][T11192] nf_setsockopt+0x8a/0xf0 [ 411.222029][T11192] ipv6_setsockopt+0x135/0x170 [ 411.223344][T11192] rawv6_setsockopt+0xd7/0x680 [ 411.224874][T11192] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 411.226585][T11192] ? selinux_socket_setsockopt+0x6a/0x80 [ 411.228421][T11192] ? sock_common_setsockopt+0x2e/0xf0 [ 411.230168][T11192] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 411.232086][T11192] do_sock_setsockopt+0x222/0x480 [ 411.233751][T11192] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 411.235555][T11192] ? lock_acquire+0x2f/0xb0 [ 411.237114][T11192] __sys_setsockopt+0x1a0/0x230 [ 411.238722][T11192] __x64_sys_setsockopt+0xbd/0x160 [ 411.240397][T11192] ? do_syscall_64+0x91/0x250 [ 411.242002][T11192] ? lockdep_hardirqs_on+0x7c/0x110 [ 411.243687][T11192] do_syscall_64+0xcd/0x250 [ 411.245161][T11192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.247055][T11192] RIP: 0033:0x7f6a08585d29 [ 411.248482][T11192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.254870][T11192] RSP: 002b:00007f6a0930c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 411.257663][T11192] RAX: ffffffffffffffda RBX: 00007f6a08776160 RCX: 00007f6a08585d29 [ 411.259551][T11192] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 411.261653][T11192] RBP: 00007f6a08601aa8 R08: 0000000000000598 R09: 0000000000000000 [ 411.264226][T11192] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000000 [ 411.266883][T11192] R13: 0000000000000001 R14: 00007f6a08776160 R15: 00007ffe31ebde18 [ 411.269552][T11192] [ 411.271360][T11192] Mem-Info: [ 411.273070][T11192] active_anon:7852 inactive_anon:125 isolated_anon:0 [ 411.273070][T11192] active_file:13573 inactive_file:1467 isolated_file:0 [ 411.273070][T11192] unevictable:1768 dirty:57 writeback:0 [ 411.273070][T11192] slab_reclaimable:7491 slab_unreclaimable:83683 [ 411.273070][T11192] mapped:28823 shmem:2469 pagetables:1065 [ 411.273070][T11192] sec_pagetables:313 bounce:0 [ 411.273070][T11192] kernel_misc_reclaimable:0 [ 411.273070][T11192] free:476081 free_pcp:8331 free_cma:0 [ 411.287734][T11192] Node 0 active_anon:31408kB inactive_anon:500kB active_file:52892kB inactive_file:5860kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:113956kB dirty:192kB writeback:0kB shmem:6340kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14096kB pagetables:4260kB sec_pagetables:1252kB all_unreclaimable? yes [ 411.298174][T11192] Node 1 active_anon:0kB inactive_anon:0kB active_file:1400kB inactive_file:8kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:1336kB dirty:36kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? yes [ 411.308194][T11192] Node 0 DMA free:15328kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 411.317189][T11192] lowmem_reserve[]: 0 1212 0 0 0 [ 411.318936][T11192] Node 0 DMA32 free:322928kB boost:61440kB min:89048kB low:95948kB high:102848kB reserved_highatomic:2048KB active_anon:31408kB inactive_anon:500kB active_file:52892kB inactive_file:5860kB unevictable:3536kB writepending:192kB present:2080628kB managed:1269908kB mlocked:0kB bounce:0kB free_pcp:9972kB local_pcp:1132kB free_cma:0kB [ 411.328975][T11192] lowmem_reserve[]: 0 0 0 0 0 [ 411.330313][T11192] Node 1 Normal free:1565564kB boost:89172kB min:128804kB low:138712kB high:148620kB reserved_highatomic:2048KB active_anon:0kB inactive_anon:0kB active_file:1400kB inactive_file:8kB unevictable:3536kB writepending:36kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:23632kB local_pcp:12020kB free_cma:0kB [ 411.338549][T11192] lowmem_reserve[]: 0 0 0 0 0 [ 411.339866][T11192] Node 0 DMA: 0*4kB 0*8kB 2*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (U) 1*4096kB (M) = 15328kB [ 411.343775][T11192] Node 0 DMA32: 34*4kB (ME) 454*8kB (ME) 682*16kB (UME) 310*32kB (UME) 2093*64kB (UME) 671*128kB (UME) 158*256kB (UME) 6*512kB (U) 2*1024kB (U) 8*2048kB (UMH) 4*4096kB (UM) = 322776kB [ 411.348803][T11192] Node 1 Normal: 81*4kB (UME) 177*8kB (UME) 215*16kB (UME) 354*32kB (UME) 234*64kB (UME) 195*128kB (UME) 159*256kB (UE) 142*512kB (UM) 123*1024kB (UM) 116*2048kB (UMH) 252*4096kB (U) = 1565564kB [ 411.353611][T11192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 411.355941][T11192] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 411.358521][T11192] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 411.361058][T11192] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 411.363366][T11192] 17539 total pagecache pages [ 411.364595][T11192] 30 pages in swap cache [ 411.365706][T11192] Free swap = 123932kB [ 411.367257][T11192] Total swap = 124996kB [ 411.368426][T11192] 1048443 pages RAM [ 411.369464][T11192] 0 pages HighMem/MovableOnly [ 411.370712][T11192] 281645 pages reserved [ 411.371810][T11192] 0 pages cma reserved [ 411.406596][T11195] can0: slcan on ptm0. [ 411.620867][T11200] binder: 11199:11200 ioctl c0306201 20000140 returned -14 [ 411.668318][T11204] syz.9.1376 (11204): /proc/11201/oom_adj is deprecated, please use /proc/11201/oom_score_adj instead. [ 411.692504][T11206] x_tables: duplicate underflow at hook 1 [ 411.701638][T11195] can0 (unregistered): slcan off ptm0. [ 411.902108][T11241] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 411.907906][T11241] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 411.981639][T11249] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 412.326504][ T8] usb 11-1: new full-speed USB device number 19 using dummy_hcd [ 412.477754][ T8] usb 11-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 412.480295][ T8] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.482970][ T8] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 412.487174][ T8] usb 11-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 412.489726][ T8] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.491743][ T8] usb 11-1: Product: 풭ꜸḖꕾ鵫㢧尼㩂㰕ꞣ㕞燶颔䯲椴싡⭀촥肽餛⻡৓嘫緶ä®î¹€ç–®ážä€žéž¯ì¾¼æ¸å¹‰éƒ’å„–í˜í“Ÿî«¶æ±ˆë½¶çžë•‹ê›Žê’ é”“å“崵䈯껶㰻ឮ뚄僈ᢕⓙ⎞㶆୩휹숺갫쮾䛴剤à¦ï¼éŸºæ´Šï¶®è¿ ä€³ï‡„á¸ê—ᡤ鹬췎襾ä­ãŽºá Œæ‘£è³“ᆼ滂䶀킓릑⛴숾᷸ [ 412.499784][ T8] usb 11-1: Manufacturer: ဌ [ 412.501045][ T8] usb 11-1: SerialNumber: ᥺ê¿à·œá®”拡凣ꥳ넴☎䆔ۚ꼆뾟므䱯伶∱ã˜Éžë·€ê¿˜í•„吝ï»è¨¤äš†ï¾« [ 412.652584][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 412.652599][ T40] audit: type=1400 audit(1734864751.322:719): avc: denied { mount } for pid=11264 comm="syz.9.1394" name="/" dev="configfs" ino=3097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 412.663187][ T40] audit: type=1400 audit(1734864751.332:720): avc: denied { read } for pid=11264 comm="syz.9.1394" name="/" dev="configfs" ino=3097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 412.663219][T11265] PKCS8: Unsupported PKCS#8 version [ 412.669052][ T40] audit: type=1400 audit(1734864751.332:721): avc: denied { open } for pid=11264 comm="syz.9.1394" path="/263/file0" dev="configfs" ino=3097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 412.669073][ T40] audit: type=1400 audit(1734864751.332:722): avc: denied { search } for pid=11264 comm="syz.9.1394" name="/" dev="configfs" ino=3097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 412.669090][ T40] audit: type=1400 audit(1734864751.332:723): avc: denied { write } for pid=11264 comm="syz.9.1394" name="/" dev="configfs" ino=3097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 412.681793][ T40] audit: type=1400 audit(1734864751.352:724): avc: denied { recv } for pid=29 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50672 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 412.701286][ T40] audit: type=1400 audit(1734864751.352:725): avc: denied { recv } for pid=29 comm="ksoftirqd/1" saddr=10.0.2.2 src=42268 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 412.735209][ T40] audit: type=1400 audit(1734864751.402:726): avc: denied { unmount } for pid=7985 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 412.742129][ T40] audit: type=1400 audit(1734864751.402:727): avc: denied { read } for pid=7985 comm="syz-executor" name="/" dev="configfs" ino=3097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 412.749356][ T40] audit: type=1400 audit(1734864751.402:728): avc: denied { open } for pid=7985 comm="syz-executor" path="/263/file0" dev="configfs" ino=3097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 412.783986][T11267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.786475][T11267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.454331][T11274] kvm: pic: non byte write [ 413.495922][T11273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1398'. [ 413.620386][T11281] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 413.622822][T11281] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 413.626401][T11281] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 413.634089][T11281] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 413.635688][T11281] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 413.643114][T11281] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 413.847003][T11286] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 413.852477][T11286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1400'. [ 413.863353][T11286] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1400'. [ 414.303257][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 414.308343][ T5945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 414.311337][ T5945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 414.316579][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 414.319363][ T5945] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 414.321573][ T5945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 414.877779][T11319] xt_hashlimit: size too large, truncated to 1048576 [ 414.879446][T11304] chnl_net:caif_netlink_parms(): no params data found [ 415.041445][T11304] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.048337][T11304] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.052918][T11304] bridge_slave_0: entered allmulticast mode [ 415.064735][T11304] bridge_slave_0: entered promiscuous mode [ 415.083811][T11304] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.089500][T11304] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.094259][T11304] bridge_slave_1: entered allmulticast mode [ 415.096624][ T8] usb 11-1: 0:2 : does not exist [ 415.105232][T11304] bridge_slave_1: entered promiscuous mode [ 415.106894][ T8] usb 11-1: USB disconnect, device number 19 [ 415.220787][T11304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.248882][T11304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.312696][T11304] team0: Port device team_slave_0 added [ 415.318717][T10414] udevd[10414]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 415.330901][T11304] team0: Port device team_slave_1 added [ 415.440721][T11304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.442596][T11304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.452999][T11304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.459692][T11304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.461570][T11304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.469439][T11304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.616478][ T5942] Bluetooth: hci1: command 0x0419 tx timeout [ 415.714566][ T5942] Bluetooth: hci4: command 0x0c1a tx timeout [ 415.837967][T11304] hsr_slave_0: entered promiscuous mode [ 415.866673][T11304] hsr_slave_1: entered promiscuous mode [ 415.917678][T11304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.919774][T11304] Cannot create hsr debugfs directory [ 416.426536][ T5942] Bluetooth: hci0: command tx timeout [ 416.970556][T11377] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1431'. [ 416.998406][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1431'. [ 417.001471][T11377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1431'. [ 417.059160][T11377] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1431'. [ 417.656896][ T40] kauditd_printk_skb: 1675 callbacks suppressed [ 417.656912][ T40] audit: type=1400 audit(1734864756.332:2404): avc: denied { read write open } for pid=6106 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 417.666948][ T40] audit: type=1400 audit(1734864756.332:2405): avc: denied { ioctl } for pid=6106 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 417.675023][ T40] audit: type=1400 audit(1734864756.342:2406): avc: denied { read } for pid=5329 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 417.682155][ T40] audit: type=1400 audit(1734864756.342:2407): avc: denied { search } for pid=5329 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.696539][ T5942] Bluetooth: hci1: command 0x0419 tx timeout [ 417.702948][ T40] audit: type=1400 audit(1734864756.342:2408): avc: denied { append } for pid=5329 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 417.711277][ T40] audit: type=1400 audit(1734864756.342:2409): avc: denied { append open } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 417.719161][ T40] audit: type=1400 audit(1734864756.342:2410): avc: denied { getattr } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 417.734992][ T40] audit: type=1400 audit(1734864756.362:2411): avc: denied { recv } for pid=40 comm="kauditd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50672 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 417.742606][ T40] audit: type=1400 audit(1734864756.372:2412): avc: denied { recv } for pid=40 comm="kauditd" saddr=127.0.0.1 src=50672 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 417.754637][ T40] audit: type=1400 audit(1734864756.372:2413): avc: denied { recv } for pid=40 comm="kauditd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50672 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 417.779743][ T5942] Bluetooth: hci4: command 0x0c1a tx timeout [ 417.853302][T11304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 417.874521][T11304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 417.881230][T11304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 417.901718][T11304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 418.139849][T11304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.164877][T11304] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.174552][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.176480][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.193994][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.195867][ T6049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.506423][ T5942] Bluetooth: hci0: command tx timeout [ 418.856948][T11420] xt_hashlimit: size too large, truncated to 1048576 [ 419.148750][T11304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.257412][T11304] veth0_vlan: entered promiscuous mode [ 419.274505][T11304] veth1_vlan: entered promiscuous mode [ 419.341629][T11304] veth0_macvtap: entered promiscuous mode [ 419.353237][T11304] veth1_macvtap: entered promiscuous mode [ 419.383380][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.387535][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.390154][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.392966][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.395466][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.399341][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.402494][T11304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.413589][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.416394][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.418977][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.421679][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.424181][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.427166][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.430327][T11304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.440681][T11304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.442952][T11304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.445150][T11304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.447599][T11304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.588113][T10969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.590246][T10969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.656525][T10969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.658609][T10969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.783219][ T5942] Bluetooth: hci1: command 0x0419 tx timeout [ 419.856527][ T5942] Bluetooth: hci4: command 0x0c1a tx timeout [ 420.346404][ T7037] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 420.496469][ T7037] usb 7-1: Using ep0 maxpacket: 32 [ 420.510522][ T7037] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 420.512810][ T7037] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 420.515110][ T7037] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 420.536505][ T7037] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 420.539080][ T7037] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 420.541519][ T7037] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 420.544806][ T7037] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 420.557721][ T7037] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.571332][ T7037] usb 7-1: config 0 descriptor?? [ 420.579176][ T5942] Bluetooth: hci0: command tx timeout [ 420.810424][ T7037] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 421.020613][ T7037] usb 7-1: USB disconnect, device number 2 [ 421.026896][ T7037] usblp0: removed [ 421.132394][T11458] netlink: 'syz.0.1449': attribute type 4 has an invalid length. [ 421.673927][T11480] 9p: Unknown Cache mode or invalid value mmap" [ 422.068785][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1459'. [ 422.135148][T11499] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 422.164428][T11499] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 422.169075][T11499] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 422.180856][T11499] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 422.183944][T11499] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 422.189555][T11499] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 422.294897][T11509] xt_hashlimit: size too large, truncated to 1048576 [ 422.410529][T11513] usb usb9: check_ctrlrecip: process 11513 (syz.0.1465) requesting ep 01 but needs 81 [ 422.434796][T11513] usb usb9: usbfs: process 11513 (syz.0.1465) did not claim interface 0 before use [ 422.667791][ T40] kauditd_printk_skb: 1221 callbacks suppressed [ 422.667807][ T40] audit: type=1400 audit(1734864761.342:3581): avc: denied { prog_load } for pid=11522 comm="syz.1.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 422.686748][ T40] audit: type=1400 audit(1734864761.342:3582): avc: denied { recv } for pid=5919 comm="syz-executor" saddr=127.0.0.1 src=50672 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 422.693994][ T40] audit: type=1400 audit(1734864761.342:3583): avc: denied { bpf } for pid=11522 comm="syz.1.1468" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 422.716535][ T40] audit: type=1400 audit(1734864761.342:3584): avc: denied { perfmon } for pid=11522 comm="syz.1.1468" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 422.721801][ T40] audit: type=1400 audit(1734864761.342:3585): avc: denied { perfmon } for pid=11522 comm="syz.1.1468" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 422.739629][ T40] audit: type=1400 audit(1734864761.342:3586): avc: denied { perfmon } for pid=11522 comm="syz.1.1468" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 422.746410][ T40] audit: type=1400 audit(1734864761.342:3587): avc: denied { recv } for pid=5917 comm="sshd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50672 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 422.752881][ T40] audit: type=1400 audit(1734864761.342:3588): avc: denied { perfmon } for pid=11522 comm="syz.1.1468" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 422.760124][ T40] audit: type=1400 audit(1734864761.342:3589): avc: denied { bpf } for pid=11522 comm="syz.1.1468" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 422.765664][ T40] audit: type=1400 audit(1734864761.342:3590): avc: denied { bpf } for pid=11522 comm="syz.1.1468" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 422.987406][ T5945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 422.995090][ T5945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 422.999163][ T5945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 423.002494][ T5945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 423.004980][ T5945] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 423.015710][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 423.739781][T11559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11559 comm=syz.1.1476 [ 423.986440][ T5975] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 424.136422][ T5975] usb 6-1: Using ep0 maxpacket: 8 [ 424.152255][ T5975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 424.155142][ T5975] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 424.159320][ T5975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.165119][ T5975] usb 6-1: config 0 descriptor?? [ 424.218749][T11553] veth0_vlan: left promiscuous mode [ 424.220486][T11553] veth0_vlan: entered promiscuous mode [ 424.249393][T11530] chnl_net:caif_netlink_parms(): no params data found [ 424.258216][T11568] qnx6: unable to set blocksize [ 424.346031][T11571] ubi0: attaching mtd0 [ 424.349697][T11571] ubi0: scanning is finished [ 424.391457][ T5975] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 424.475158][T11571] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 424.628999][ T5933] usb 6-1: USB disconnect, device number 4 [ 425.056442][ T5945] Bluetooth: hci2: command tx timeout [ 425.339303][T11594] xt_hashlimit: size too large, truncated to 1048576 [ 426.023288][T11530] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.025263][T11530] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.029464][T11530] bridge_slave_0: entered allmulticast mode [ 426.032673][T11530] bridge_slave_0: entered promiscuous mode [ 426.039141][T11530] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.041096][T11530] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.043144][T11530] bridge_slave_1: entered allmulticast mode [ 426.045364][T11530] bridge_slave_1: entered promiscuous mode [ 426.165144][T11530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.177460][T11530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.239128][T11530] team0: Port device team_slave_0 added [ 426.243524][T11530] team0: Port device team_slave_1 added [ 426.304776][T11530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.316473][T11530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.324202][T11530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.349489][T11530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.351413][T11530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.358503][T11530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.450932][T11530] hsr_slave_0: entered promiscuous mode [ 426.560986][T11530] hsr_slave_1: entered promiscuous mode [ 426.636916][T11530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.638671][T11609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1487'. [ 426.638917][T11530] Cannot create hsr debugfs directory [ 426.744091][T11611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61583 sclass=netlink_route_socket pid=11611 comm=syz.1.1488 [ 427.146657][ T5945] Bluetooth: hci2: command tx timeout [ 427.676677][ T40] kauditd_printk_skb: 603 callbacks suppressed [ 427.676687][ T40] audit: type=1400 audit(1734864766.352:4194): avc: denied { read write open } for pid=11630 comm="syz.1.1493" path="/dev/radio0" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 427.684083][ T40] audit: type=1400 audit(1734864766.352:4195): avc: denied { ioctl } for pid=11630 comm="syz.1.1493" path="/dev/radio0" dev="devtmpfs" ino=980 ioctlcmd=0x5638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 427.690465][ T40] audit: type=1400 audit(1734864766.352:4196): avc: denied { ioctl } for pid=11630 comm="syz.1.1493" path="/dev/radio0" dev="devtmpfs" ino=980 ioctlcmd=0x5665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 427.702031][ T40] audit: type=1400 audit(1734864766.352:4197): avc: denied { read } for pid=11630 comm="syz.1.1493" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 427.714257][ T40] audit: type=1400 audit(1734864766.352:4198): avc: denied { read open } for pid=11630 comm="syz.1.1493" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 427.720594][ T40] audit: type=1400 audit(1734864766.352:4199): avc: denied { ioctl } for pid=11630 comm="syz.1.1493" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 427.727221][ T40] audit: type=1400 audit(1734864766.352:4200): avc: denied { ioctl } for pid=11630 comm="syz.1.1493" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 427.733562][ T40] audit: type=1400 audit(1734864766.362:4201): avc: denied { create } for pid=11630 comm="syz.1.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 427.738969][ T40] audit: type=1400 audit(1734864766.362:4202): avc: denied { create } for pid=11630 comm="syz.1.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 427.744201][ T40] audit: type=1400 audit(1734864766.362:4203): avc: denied { bind } for pid=11630 comm="syz.1.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 428.017074][ T62] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 428.167240][ T62] usb 6-1: device descriptor read/64, error -71 [ 428.195133][T11530] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 428.211404][T11530] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 428.217745][T11530] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 428.225663][T11530] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 428.372681][T11530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.399938][T11530] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.410392][T10958] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.412908][T10958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.422554][T10958] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.424540][T10958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.466662][ T62] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 428.616640][ T62] usb 6-1: device descriptor read/64, error -71 [ 428.738658][ T62] usb usb6-port1: attempt power cycle [ 428.905471][T11658] kvm: emulating exchange as write [ 429.023992][T11661] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1499'. [ 429.096481][ T62] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 429.136942][ T62] usb 6-1: device descriptor read/8, error -71 [ 429.216467][ T5945] Bluetooth: hci2: command tx timeout [ 429.376455][ T62] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 429.384621][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1500'. [ 429.397717][T11664] veth1_to_batadv: entered promiscuous mode [ 429.399699][T11664] macsec2: entered promiscuous mode [ 429.400558][ T62] usb 6-1: device descriptor read/8, error -71 [ 429.413758][T11530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.487220][T11530] veth0_vlan: entered promiscuous mode [ 429.505268][T11530] veth1_vlan: entered promiscuous mode [ 429.516549][ T62] usb usb6-port1: unable to enumerate USB device [ 429.578819][T11530] veth0_macvtap: entered promiscuous mode [ 429.588167][T11530] veth1_macvtap: entered promiscuous mode [ 429.612377][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.615252][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.618476][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.621253][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.623919][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.627080][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.629904][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.632824][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.636227][T11530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.674810][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.686439][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.689035][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.691977][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.694587][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.705117][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.709191][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.712001][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.715997][T11530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.736109][T11530] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.738619][T11530] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.740873][T11530] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.743151][T11530] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.761066][T11669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1502'. [ 430.612852][T10969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.614958][T10969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.691715][T10969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.694967][T10969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.786945][T11679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'. [ 431.058768][T11687] netlink: 3526 bytes leftover after parsing attributes in process `syz.1.1508'. [ 431.215519][T11698] xt_hashlimit: size too large, truncated to 1048576 [ 431.306600][ T5945] Bluetooth: hci2: command tx timeout [ 431.587864][T11710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11710 comm=syz.0.1514 [ 431.592865][T11710] netlink: 'syz.0.1514': attribute type 1 has an invalid length. [ 431.669973][T11713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1514'. [ 431.747080][T11710] 8021q: adding VLAN 0 to HW filter on device bond3 [ 431.779699][T11714] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 431.790342][T11714] bond3: (slave batadv1): making interface the new active one [ 431.793408][T11714] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 432.141232][T11728] xt_hashlimit: size too large, truncated to 1048576 [ 432.212235][T11730] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 432.544080][T11735] PM: Enabling pm_trace changes system date and time during resume. [ 432.544080][T11735] PM: Correct system time has to be restored manually after resume. [ 432.648015][T11741] ALSA: mixer_oss: invalid OSS volume '' [ 432.772916][ T40] kauditd_printk_skb: 1265 callbacks suppressed [ 432.772932][ T40] audit: type=1400 audit(1734864771.442:5469): avc: denied { module_request } for pid=11734 comm="syz.2.1520" kmod="crypto-gcm_base(ctr(aes-aesni),ghash-generic)-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 432.812991][ T40] audit: type=1400 audit(1734864771.482:5470): avc: denied { module_request } for pid=11736 comm="syz.1.1521" kmod="crypto-ctr(cast5)-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 433.113808][ T40] audit: type=1400 audit(1734864771.782:5471): avc: denied { recv } for pid=5919 comm="syz-executor" saddr=127.0.0.1 src=50672 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 433.125030][ T40] audit: type=1400 audit(1734864771.782:5472): avc: denied { recv } for pid=5917 comm="sshd" saddr=10.0.2.2 src=42268 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 433.144218][ T40] audit: type=1400 audit(1734864771.812:5473): avc: denied { read write } for pid=9804 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 433.154134][ T40] audit: type=1400 audit(1734864771.812:5474): avc: denied { read write open } for pid=9804 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 433.179446][ T40] audit: type=1400 audit(1734864771.812:5475): avc: denied { ioctl } for pid=9804 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 433.193901][ T40] audit: type=1400 audit(1734864771.832:5476): avc: denied { recv } for pid=5347 comm="udevd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50672 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 433.202456][ T40] audit: type=1400 audit(1734864771.842:5477): avc: denied { recv } for pid=5347 comm="udevd" saddr=127.0.0.1 src=50672 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 433.220674][ T40] audit: type=1400 audit(1734864771.842:5478): avc: denied { recv } for pid=5347 comm="udevd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50672 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 433.487378][T11755] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1523'. [ 433.509721][T11755] [ 433.510599][T11755] ====================================================== [ 433.513016][T11755] WARNING: possible circular locking dependency detected [ 433.515428][T11755] 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 Not tainted [ 433.518435][T11755] ------------------------------------------------------ [ 433.520994][T11755] syz.2.1523/11755 is trying to acquire lock: [ 433.522661][T11755] ffff888027ac2330 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x132/0x4f0 [ 433.525592][T11755] [ 433.525592][T11755] but task is already holding lock: SYZFAIL: failed to recv rpc [ 433.528131][T11755] ffff888027ac23c0 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_register_queue+0x5c/0x4f0 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 433.531640][T11755] [ 433.531640][T11755] which lock already depends on the new lock. [ 433.531640][T11755] [ 433.535310][T11755] [ 433.535310][T11755] the existing dependency chain (in reverse order) is: [ 433.538403][T11755] [ 433.538403][T11755] -> #5 (&q->sysfs_dir_lock){+.+.}-{4:4}: [ 433.541269][T11755] __mutex_lock+0x19b/0xa60 [ 433.543130][T11755] blk_mq_sysfs_unregister_hctxs+0x92/0x2d0 [ 433.545398][T11755] __blk_mq_update_nr_hw_queues+0x93f/0x14e0 [ 433.547712][T11755] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 433.549306][T11755] nbd_start_device+0x15b/0xd70 [ 433.550712][T11755] nbd_ioctl+0x21a/0xfd0 [ 433.552210][T11755] blkdev_ioctl+0x276/0x6d0 [ 433.553969][T11755] __x64_sys_ioctl+0x190/0x200 [ 433.555791][T11755] do_syscall_64+0xcd/0x250 [ 433.557632][T11755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.559879][T11755] [ 433.559879][T11755] -> #4 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 433.562880][T11755] blk_mq_submit_bio+0x1fb6/0x24c0 [ 433.564805][T11755] __submit_bio+0x384/0x540 [ 433.566637][T11755] submit_bio_noacct_nocheck+0x698/0xd70 [ 433.568746][T11755] submit_bio_noacct+0x93a/0x1e20 [ 433.570642][T11755] mpage_readahead+0x41d/0x590 [ 433.572459][T11755] read_pages+0x1a8/0xdc0 [ 433.574146][T11755] page_cache_ra_unbounded+0x3dc/0x750 [ 433.576207][T11755] force_page_cache_ra+0x24b/0x340 [ 433.578079][T11755] page_cache_sync_ra+0x110/0x9c0 [ 433.579527][T11755] filemap_get_pages+0xd7b/0x1be0 [ 433.580968][T11755] filemap_read+0x3ca/0xd70 [ 433.582297][T11755] blkdev_read_iter+0x187/0x480 [ 433.583668][T11755] vfs_read+0x87f/0xbe0 [ 433.584905][T11755] ksys_read+0x12b/0x250 [ 433.586191][T11755] do_syscall_64+0xcd/0x250 [ 433.587551][T11755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.589377][T11755] [ 433.589377][T11755] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 433.591588][T11755] down_read+0x9a/0x330 [ 433.592823][T11755] filemap_fault+0x2e0/0x2820 [ 433.594278][T11755] __do_fault+0x10a/0x490 [ 433.595549][T11755] do_pte_missing+0xebd/0x3e00 [ 433.596916][T11755] __handle_mm_fault+0x103c/0x2a40 [ 433.598646][T11755] handle_mm_fault+0x3fa/0xaa0 [ 433.600098][T11755] __get_user_pages+0x8d9/0x3b50 [ 433.601602][T11755] __gup_longterm_locked+0x3b7/0x1870 [ 433.603139][T11755] gup_fast_fallback+0x1802/0x2690 [ 433.604600][T11755] get_user_pages_fast+0xa8/0x100 [ 433.606050][T11755] __iov_iter_get_pages_alloc+0x8ed/0x2280 [ 433.607731][T11755] iov_iter_get_pages2+0xa4/0x100 [ 433.609182][T11755] fuse_copy_fill+0x670/0x880 [ 433.610672][T11755] fuse_dev_do_write+0x220/0x3720 [ 433.612184][T11755] fuse_dev_write+0x14f/0x1e0 [ 433.613579][T11755] vfs_write+0x5ae/0x1150 [ 433.614876][T11755] ksys_write+0x12b/0x250 [ 433.616248][T11755] do_syscall_64+0xcd/0x250 [ 433.617735][T11755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.619777][T11755] [ 433.619777][T11755] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 433.622073][T11755] __might_fault+0x11b/0x190 [ 433.623403][T11755] _copy_from_user+0x29/0xd0 [ 433.624727][T11755] __blk_trace_setup+0xa8/0x180 [ 433.626132][T11755] blk_trace_setup+0x47/0x70 [ 433.627740][T11755] sg_ioctl+0x65e/0x2750 [ 433.629449][T11755] __x64_sys_ioctl+0x190/0x200 [ 433.631319][T11755] do_syscall_64+0xcd/0x250 [ 433.633162][T11755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.635479][T11755] [ 433.635479][T11755] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 433.638276][T11755] __mutex_lock+0x19b/0xa60 [ 433.640119][T11755] blk_register_queue+0x13c/0x4f0 [ 433.642091][T11755] add_disk_fwnode+0x785/0x1300 [ 433.643986][T11755] brd_alloc.isra.0+0x5a2/0x840 [ 433.645841][T11755] brd_init+0x12b/0x1d0 [ 433.647514][T11755] do_one_initcall+0x128/0x700 [ 433.649438][T11755] kernel_init_freeable+0x5c7/0x900 [ 433.651442][T11755] kernel_init+0x1c/0x2b0 [ 433.653223][T11755] ret_from_fork+0x45/0x80 [ 433.655043][T11755] ret_from_fork_asm+0x1a/0x30 [ 433.656989][T11755] [ 433.656989][T11755] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 433.659755][T11755] __lock_acquire+0x249e/0x3c40 [ 433.661716][T11755] lock_acquire.part.0+0x11b/0x380 [ 433.663735][T11755] __mutex_lock+0x19b/0xa60 [ 433.665459][T11755] blk_register_queue+0x132/0x4f0 [ 433.667472][T11755] add_disk_fwnode+0x785/0x1300 [ 433.668987][T11755] nbd_dev_add+0x78b/0xbc0 [ 433.670288][T11755] nbd_genl_connect+0x8b1/0x1c00 [ 433.671851][T11755] genl_family_rcv_msg_doit+0x202/0x2f0 [ 433.673604][T11755] genl_rcv_msg+0x565/0x800 [ 433.674949][T11755] netlink_rcv_skb+0x16b/0x440 [ 433.676713][T11755] genl_rcv+0x28/0x40 [ 433.678226][T11755] netlink_unicast+0x53c/0x7f0 [ 433.679502][T11755] netlink_sendmsg+0x8b8/0xd70 [ 433.680843][T11755] ____sys_sendmsg+0xaaf/0xc90 [ 433.682231][T11755] ___sys_sendmsg+0x135/0x1e0 [ 433.684025][T11755] __sys_sendmsg+0x16e/0x220 [ 433.685880][T11755] do_syscall_64+0xcd/0x250 [ 433.687554][T11755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.689659][T11755] [ 433.689659][T11755] other info that might help us debug this: [ 433.689659][T11755] [ 433.692261][T11755] Chain exists of: [ 433.692261][T11755] &q->sysfs_lock --> &q->q_usage_counter(io)#55 --> &q->sysfs_dir_lock [ 433.692261][T11755] [ 433.695930][T11755] Possible unsafe locking scenario: [ 433.695930][T11755] [ 433.697957][T11755] CPU0 CPU1 [ 433.699372][T11755] ---- ---- [ 433.700751][T11755] lock(&q->sysfs_dir_lock); [ 433.701986][T11755] lock(&q->q_usage_counter(io)#55); [ 433.704001][T11755] lock(&q->sysfs_dir_lock); [ 433.705862][T11755] lock(&q->sysfs_lock); [ 433.706989][T11755] [ 433.706989][T11755] *** DEADLOCK *** [ 433.706989][T11755] [ 433.709093][T11755] 3 locks held by syz.2.1523/11755: [ 433.710480][T11755] #0: ffffffff8ff7ba10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 433.712590][T11755] #1: ffffffff8ff7bac8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x580/0x800 [ 433.714901][T11755] #2: ffff888027ac23c0 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_register_queue+0x5c/0x4f0 [ 433.717498][T11755] [ 433.717498][T11755] stack backtrace: [ 433.719056][T11755] CPU: 3 UID: 0 PID: 11755 Comm: syz.2.1523 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 433.721808][T11755] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 433.724564][T11755] Call Trace: [ 433.725442][T11755] [ 433.726223][T11755] dump_stack_lvl+0x116/0x1f0 [ 433.727454][T11755] print_circular_bug+0x419/0x5d0 [ 433.728775][T11755] check_noncircular+0x31a/0x400 [ 433.730083][T11755] ? __pfx_check_noncircular+0x10/0x10 [ 433.731501][T11755] ? lockdep_lock+0xc6/0x200 [ 433.732710][T11755] ? __pfx_lockdep_lock+0x10/0x10 [ 433.734028][T11755] __lock_acquire+0x249e/0x3c40 [ 433.735297][T11755] ? __pfx___lock_acquire+0x10/0x10 [ 433.736651][T11755] ? xa_find_after+0x291/0x480 [ 433.737905][T11755] lock_acquire.part.0+0x11b/0x380 [ 433.739245][T11755] ? blk_register_queue+0x132/0x4f0 [ 433.740600][T11755] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 433.742061][T11755] ? rcu_is_watching+0x12/0xc0 [ 433.743316][T11755] ? trace_lock_acquire+0x14e/0x1f0 [ 433.744696][T11755] ? blk_register_queue+0x132/0x4f0 [ 433.746060][T11755] ? lock_acquire+0x2f/0xb0 [ 433.747246][T11755] ? blk_register_queue+0x132/0x4f0 [ 433.748608][T11755] __mutex_lock+0x19b/0xa60 [ 433.749819][T11755] ? blk_register_queue+0x132/0x4f0 [ 433.751169][T11755] ? blk_register_queue+0x132/0x4f0 [ 433.752522][T11755] ? __pfx___mutex_lock+0x10/0x10 [ 433.753837][T11755] ? kobject_add+0x17c/0x240 [ 433.755045][T11755] ? blk_register_queue+0x132/0x4f0 [ 433.756408][T11755] blk_register_queue+0x132/0x4f0 [ 433.757733][T11755] add_disk_fwnode+0x785/0x1300 [ 433.759011][T11755] nbd_dev_add+0x78b/0xbc0 [ 433.760188][T11755] ? __pfx_nbd_dev_add+0x10/0x10 [ 433.761459][T11755] ? bpf_lsm_capable+0x9/0x10 [ 433.762673][T11755] ? __radix_tree_lookup+0x21f/0x2c0 [ 433.764000][T11755] nbd_genl_connect+0x8b1/0x1c00 [ 433.765267][T11755] ? __pfx_nbd_genl_connect+0x10/0x10 [ 433.766647][T11755] ? __nla_parse+0x40/0x60 [ 433.767817][T11755] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 433.769757][T11755] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 433.771680][T11755] genl_family_rcv_msg_doit+0x202/0x2f0 [ 433.773129][T11755] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 433.774748][T11755] ? genl_get_cmd+0x195/0x580 [ 433.775993][T11755] ? __radix_tree_lookup+0x21f/0x2c0 [ 433.777380][T11755] genl_rcv_msg+0x565/0x800 [ 433.778581][T11755] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.779921][T11755] ? __pfx_nbd_genl_connect+0x10/0x10 [ 433.781333][T11755] ? __pfx___lock_acquire+0x10/0x10 [ 433.782699][T11755] netlink_rcv_skb+0x16b/0x440 [ 433.783957][T11755] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.785272][T11755] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.786660][T11755] ? down_read+0xc9/0x330 [ 433.787798][T11755] ? __pfx_down_read+0x10/0x10 [ 433.789091][T11755] ? netlink_deliver_tap+0x1ae/0xd30 [ 433.790476][T11755] genl_rcv+0x28/0x40 [ 433.791536][T11755] netlink_unicast+0x53c/0x7f0 [ 433.792803][T11755] ? __pfx_netlink_unicast+0x10/0x10 [ 433.794212][T11755] netlink_sendmsg+0x8b8/0xd70 [ 433.795497][T11755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.796897][T11755] ____sys_sendmsg+0xaaf/0xc90 [ 433.798176][T11755] ? copy_msghdr_from_user+0x10b/0x160 [ 433.799615][T11755] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.800996][T11755] ___sys_sendmsg+0x135/0x1e0 [ 433.802217][T11755] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.803572][T11755] ? __pfx_lock_release+0x10/0x10 [ 433.804881][T11755] ? trace_lock_acquire+0x14e/0x1f0 [ 433.806242][T11755] ? __fget_files+0x206/0x3a0 [ 433.807477][T11755] __sys_sendmsg+0x16e/0x220 [ 433.808695][T11755] ? __pfx___sys_sendmsg+0x10/0x10 [ 433.810042][T11755] ? __x64_sys_futex+0x1e1/0x4c0 [ 433.811354][T11755] do_syscall_64+0xcd/0x250 [ 433.812553][T11755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.814106][T11755] RIP: 0033:0x7fef6fb85d29 [ 433.815277][T11755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.820223][T11755] RSP: 002b:00007fef70a53038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.822381][T11755] RAX: ffffffffffffffda RBX: 00007fef6fd75fa0 RCX: 00007fef6fb85d29 [ 433.824416][T11755] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 433.826477][T11755] RBP: 00007fef6fc01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 433.828531][T11755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.830578][T11755] R13: 0000000000000000 R14: 00007fef6fd75fa0 R15: 00007ffc1f772b18 [ 433.832624][T11755] [ 433.833532][ C3] vkms_vblank_simulate: vblank timer overrun [ 434.398538][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.588850][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.739658][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.900435][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.135238][ T12] bridge_slave_1: left allmulticast mode [ 435.137249][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.140228][ T12] bridge_slave_0: left allmulticast mode [ 435.141723][ T12] bridge_slave_0: left promiscuous mode [ 435.144033][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.178222][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.237510][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.317292][ T12] bond0 (unregistering): Released all slaves [ 437.320733][ T12] bond1 (unregistering): Released all slaves [ 438.219293][ T12] hsr_slave_0: left promiscuous mode [ 438.276636][ T12] hsr_slave_1: left promiscuous mode [ 438.356472][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.358843][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.362246][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.364948][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.368608][ T40] kauditd_printk_skb: 110 callbacks suppressed [ 438.368622][ T40] audit: type=1400 audit(1734864777.042:5589): avc: denied { read } for pid=5329 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 438.377056][ T40] audit: type=1400 audit(1734864777.042:5590): avc: denied { search } for pid=5329 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.377499][ T12] veth1_macvtap: left promiscuous mode [ 438.383673][ T40] audit: type=1400 audit(1734864777.042:5591): avc: denied { append } for pid=5329 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 438.385114][ T12] veth0_macvtap: left promiscuous mode [ 438.391188][ T40] audit: type=1400 audit(1734864777.042:5592): avc: denied { append open } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 438.400039][ T40] audit: type=1400 audit(1734864777.042:5593): avc: denied { getattr } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 439.697543][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.708256][ T40] audit: type=1400 audit(1734864778.382:5594): avc: denied { read } for pid=5329 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 439.714096][ T40] audit: type=1400 audit(1734864778.382:5595): avc: denied { search } for pid=5329 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.719893][ T40] audit: type=1400 audit(1734864778.382:5596): avc: denied { append } for pid=5329 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 439.725702][ T40] audit: type=1400 audit(1734864778.382:5597): avc: denied { append open } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 439.732278][ T40] audit: type=1400 audit(1734864778.382:5598): avc: denied { getattr } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 VM DIAGNOSIS: 10:52:52 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff81940e10 RBX=ffff888023464880 RCX=ffffffff819296eb RDX=ffff888023464880 RSI=ffffffff81929708 RDI=ffff888023464880 RBP=ffffffff8e222800 RSP=ffffc90005657aa0 R8 =0000000000000005 R9 =000000000000000e R10=000000000000000b R11=0000000000000000 R12=0000000000000800 R13=dffffc0000000000 R14=000000000000000c R15=ffffc90005657628 RIP=ffffffff81940e10 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555566f8808 CR3=000000002f020000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=000000000000001f Opmask02=000000000000ffdf Opmask03=0104100080810010 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055624ed63d00 000055624ed7f390 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5c431d1c1a141601 5c43000611171d5c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000031 0000000000000000 44455a494c414954 494e495f43455355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e5fb8e24af59de5 0000556718f33bba 0000000000000081 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055624ed77f50 000055624ed8e8c0 0000000000000021 0000000000000031 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 000064656c3a6575 6c623a30656b6900 306d656d702f6b63 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffffffffc 00005d77dedffff7 00007ffefefbbe79 30007ff3befdfe7f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49383a3a2648383a 3a2633383a3a2632 383a3a263d383a3a 263c383a3a263f38 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055624e3f1b00 0000556200307830 0000000000000021 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00004d5500304530 0000000000000021 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffffff9a9bcde8 RCX=ffffffff81773706 RDX=0000000000000000 RSI=0000000000000004 RDI=ffffffff9a9bcde8 RBP=1ffff92000685ed5 RSP=ffffc9000342f6a8 R8 =0000000000000000 R9 =fffffbfff35379bd R10=ffffffff9a9bcdeb R11=00000000000a4001 R12=dffffc0000000000 R13=0000000000000200 R14=dffffc0000000000 R15=0000000000000206 RIP=ffffffff8177372f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb3da7c3280 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fef6fd452d8 CR3=000000005a662000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000008 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=00000000bfdfdfdf Opmask03=0080810010010010 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b5f5455504e495f 4449006b636f6c62 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd2bc0fd0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000ff0000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a474f475a054149 454648051a041a4f ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 494b5a594f474b44 051a4445434d4f58 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f00534b4e494c56 454400454d414e56 4544005845444e49 464900524f4e494d ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000002a1 0000000000000000 32706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e5fb8e24af59de5 0000556718f3928c 0000000000000031 0000000000000031 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 002a6d656d70002a 6d6373002a646200 306d656d70006b63 6f6c6200302e3065 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49383a3a2648383a 3a2633383a3a2632 383a3a263d383a3a 263c383a3a263f38 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055624e3f1b00 0000556200307830 0000000000000021 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00004d5500304530 0000000000000021 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffc90000657e00 RDX=dffffc0000000000 RSI=ffffffff8992c72e RDI=0000000000000001 RBP=ffffc90000657e00 RSP=ffffc90000657d48 R8 =ffffc90000657dec R9 =ffffffff91897396 R10=ffffc90000657db8 R11=00000000000892c3 R12=ffffc90000657e08 R13=ffffc90000657db8 R14=ffffc90000657ded R15=ffff88801cb82440 RIP=ffffffff8149404c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055556e7f0500 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f61ce03ff6c CR3=000000002480a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556e8067f0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556e876101 000055556e875c60 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556e87b4ff 000055556e87ab90 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 07800409a00307cb 080009900303ffff ffff040980030108 0003800404025dbe ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02800402a5a00300 080002a5900303ff ffffff0402a58003 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d00303ffffffff04 02a5c00302100002 a5b0030388100002 90031e8004028003 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a580040100000408 060a0143ae000800 02a5f00300080002 a5e00300100002a5 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100001000000 0806010000020806 060103d208800403 ffffffff042a0800 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 048e080001000004 08060a0109fe0008 0008800308100000 04240800048e0800 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000808060a01 59f8408004000403 000400000303ffff ffff040185861000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02100002a5800401 00000408060a0143 ae00080002a5f003 00080002a5e00300 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851bc8a5 RDI=ffffffff9ab0fbe0 RBP=ffffffff9ab0fba0 RSP=ffffc90004c0e828 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff851bc840 R15=0000000000000000 RIP=ffffffff851bc8cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fef70a536c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c31db81 CR3=0000000054988000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1f772eb0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef6fc02a3a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef6fc02a47 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef6fc02a41 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef6fc02a55 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef6fc02adb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef6fc02bb9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000