last executing test programs: 4m37.834551533s ago: executing program 3 (id=1529): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000004e40)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d00)={0x68, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:memory_device_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) r4 = dup(r1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000180)="fa64d89c0a5dd9f364f466b9860300000f32f20f2086660f323e0fc71e7100440f20c0663505000000440f22c066b93002000066b80400000066ba008000000f30", 0x41}], 0x1, 0x43, 0x0, 0x0) ioctl$CDROMSTOP(r4, 0x5307) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="04010000160001040000000000000000ac1414aa000000000000000000000000ff01000000000000000000000000000100000fd100040002020000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc02000000000000000000000000000000000000330000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000080010000800000000000000000f3000000000000000000000000010100000000000000000000000000000000000000000000000800000000000004000000060000000004000000000000000000000a0000009400000000000000f5"], 0x104}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) 4m37.696169178s ago: executing program 3 (id=1533): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103fcffffff7e394bcd2b0000000c0006"], 0x20}}, 0x0) setrlimit(0x8, &(0x7f0000000080)) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000100010004"], 0x408100) mlockall(0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x234, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x234}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r8, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r8, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r8, 0x0, 0x3}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\b\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) 4m37.693653324s ago: executing program 3 (id=1536): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x9, 0x63e700000, 0x0, 0x5, 0xe, 0x4, 0xc9, 0x5, 0x82, 0x2, 0x401, 0x7, 0x3, 0x6, 0x8, 0xfffffffffffff9], 0x8000000, 0x285f40}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000080)=@ethtool_dump={0x3f, 0x7ffd, 0x2b2}}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000280)={0x3}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000580)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)={{r6, 0x1, 0x4, 0xd, 0x2, 0xa854, 0x3, 0x0, 0x0, 0x3, 0x7, 0x6, 0x88d, 0x120000000, 0x101}, 0x8, [0x0]}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4m37.44674182s ago: executing program 3 (id=1541): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x1f00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e000100000000000026b82bd90000000100000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000300)="baf80c66b87ce8108266b94502000066b80000000066ba000000000f30bafc0cb8e60066b8067ac18a0f23d80f21f86635400000000f23f86580b1a3e400baf80c66b88d0b178b66efbafc0cb000ee650f017e16640f9315baf80c66b8ae63328566efbafc0ced0f01c50fc77a4e368f4206", 0x72}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x0, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x7e, 0x0, '\x00', 0x5, 0x6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='attr/keycreate\x00') writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x0, 0x8003}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x20}}, 0x0) accept4$unix(r0, &(0x7f0000000100)=@abs, &(0x7f0000000000)=0x6e, 0x80800) 4m36.466893195s ago: executing program 3 (id=1553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1000, 0x3}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000480)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat=@weak_handle, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x22}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000bc0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) r6 = socket(0x2, 0x3, 0xff) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, 0x0, 0x0) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r9, 0xc0405519, &(0x7f00000002c0)={0x5, 0x6, 0x7, 0x4, 'syz0\x00', 0x6}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="e9eda456acfe964faa88ec9a2562dd37379c2bfb5f02764fa8e11e93f292c99c46857ac3e128f0789d5c9c3cc51d5a2ddfce2f64b1a2663b", @ANYBLOB="fe5667c437203c1b85d5cb66e01bdb5190d45c025209158b63f44b3bba856744404ce8862e65bcf88819b78ca59b0e0a5512c98a9ca2f69e1aa0d27098dd5ea2fbded5828a608ba8904dbd4c4c5f45ea776ea848b895885f2b199159eec7dca4690861f973b664a860a355490d401e2e57d1855b2c36e72fd259043ae1effc476a676991f6b12ca8acfe1ff373dfe60535589b79914433d89904afa227ed182211a80403bdb7d45cffa335cec681eef12285c0e99807ad47b705b736ba6261122c347646a6e81496edd5a7fa04631a622d2378b9dad3d494ba1b4a87765ac74869ddf912ff4326af51344c18ecae8668856b3533bf5df97c90", @ANYBLOB="010006000020fedbdf252500000008000300", @ANYRES32=r10, @ANYBLOB="080026006c0900000a000600ffffffffffff000008003500000000000a00340002020202020200000a0006005050505050500000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) 4m36.465530961s ago: executing program 3 (id=1554): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680)={0x79, 0x0, 0x400}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000540)={[0x1, 0x0, 0xfffffffffffffffe, 0x2, 0x9, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x81, 0x0, 0x0, 0x5, 0x6, 0x0, 0xfffffffffffffffe], 0x0, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f0000000180)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) r4 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1ff, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0xc041, 0x40) ioctl$RTC_PIE_ON(r6, 0x7005) r7 = inotify_init1(0x800) inotify_add_watch(r7, &(0x7f0000000240)='.\x00', 0x60000526) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r6, 0xc008aec1, &(0x7f0000000340)={0x4, 0x0, [{0x1, 0x4, 0x6, 0x6, 0x0, 0x0, 0x7}, {0xa, 0x8, 0x2, 0x6, 0x10000, 0x6, 0x8000}, {0x80000007, 0x6, 0x0, 0x3, 0x401, 0x8, 0xc8f}, {0x40000001, 0x7, 0x5, 0x8, 0x4, 0x708, 0x7}]}) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffff64}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r5}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x40000082, 0x0, 0x400}]}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x14, 0x13, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0xffffff95}) 4m30.64812623s ago: executing program 0 (id=1630): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bdb000/0x3000)=nil, 0x3000, &(0x7f0000000000)='&\x00') (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005d40), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f000000b880)={0x0, 0x0, &(0x7f000000b840)={&(0x7f000000b7c0)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) (async) clock_settime(0x0, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000325bd7000ffdbdf256c00000008000300", @ANYRES32=r5, @ANYBLOB="0c009900050000005400000008002201b900000008002201b3030000080026006c0900000800a100800000000500180117000000"], 0x50}, 0x1, 0x0, 0x0, 0x4841}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@bridge_newvlan={0x24, 0x70, 0x1, 0x800000, 0xfffffffc, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}]}, 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014) (async) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000600)={0x0, 0x0, 0xffffffffffffffff}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4m30.59923996s ago: executing program 32 (id=1630): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bdb000/0x3000)=nil, 0x3000, &(0x7f0000000000)='&\x00') (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005d40), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f000000b880)={0x0, 0x0, &(0x7f000000b840)={&(0x7f000000b7c0)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) (async) clock_settime(0x0, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000325bd7000ffdbdf256c00000008000300", @ANYRES32=r5, @ANYBLOB="0c009900050000005400000008002201b900000008002201b3030000080026006c0900000800a100800000000500180117000000"], 0x50}, 0x1, 0x0, 0x0, 0x4841}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@bridge_newvlan={0x24, 0x70, 0x1, 0x800000, 0xfffffffc, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}]}, 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014) (async) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000600)={0x0, 0x0, 0xffffffffffffffff}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4m20.28045446s ago: executing program 33 (id=1554): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680)={0x79, 0x0, 0x400}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000540)={[0x1, 0x0, 0xfffffffffffffffe, 0x2, 0x9, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x81, 0x0, 0x0, 0x5, 0x6, 0x0, 0xfffffffffffffffe], 0x0, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f0000000180)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) r4 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1ff, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0xc041, 0x40) ioctl$RTC_PIE_ON(r6, 0x7005) r7 = inotify_init1(0x800) inotify_add_watch(r7, &(0x7f0000000240)='.\x00', 0x60000526) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r6, 0xc008aec1, &(0x7f0000000340)={0x4, 0x0, [{0x1, 0x4, 0x6, 0x6, 0x0, 0x0, 0x7}, {0xa, 0x8, 0x2, 0x6, 0x10000, 0x6, 0x8000}, {0x80000007, 0x6, 0x0, 0x3, 0x401, 0x8, 0xc8f}, {0x40000001, 0x7, 0x5, 0x8, 0x4, 0x708, 0x7}]}) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffff64}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r5}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x40000082, 0x0, 0x400}]}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x14, 0x13, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0xffffff95}) 2m39.417114674s ago: executing program 1 (id=3475): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) writev(r0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="f3", 0x1}], 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000040)={r2, r3+10000000}, &(0x7f0000000080)) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/cpu_byteorder', 0x307100, 0xd1) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x109200) ioctl$SG_GET_COMMAND_Q(r6, 0x2270, &(0x7f0000000380)) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}]}], {0x14}}, 0x50}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x4, @loopback, 0x25d}], 0x1c) r7 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x242) fsetxattr$security_capability(r7, &(0x7f0000001cc0), &(0x7f0000001d00)=@v2={0x2000000, [{0x101, 0x7}, {0x4, 0x20000000}]}, 0x14, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r7, &(0x7f0000001d80)={0x2, 0x4}, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x1a, 0x0, 0x0, 0x200, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) r8 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000000100)=@isdn={0x22, 0x1, 0x4, 0x7f, 0x2}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)="e3531d8508e4afefa75bdaed64f91f3dcc4deb74972f5581c5d9cb93db7d71de71781f2e108cec0e179584beeb32bbf2dd1183aedaff5bf9e91f108b1ce85e99f0649639dbe4227d0b2776eec6213f68372d80455c", 0x55}, {&(0x7f0000000280)="0ed78465eea92f1ccdb548368c3a3c16654de12ffc95a7f40fd142ef64bc7553eb998b6a1e5f2a9dbe7b79b4630131193abecbce39e56e9b5f5b71d2117971193028e09b9a644524b217dbb0130cff91595808cc446794c9ccd4e945f49cd961240c3979dd5f6a14d09ee659cec5bc80f95ff590285241598b05a6e42d1ccd559907304c48a3e89145369b3a48e32868f9204ca96f796762837190ff8f8bfe1463ef1284a18fbb2eaccbed4f10dd48f2164cee893d8695f52f38cd7d86f52126b8e5ece6d9ca3ca1e2bbd9a5ba", 0xcd}, {&(0x7f0000000380)="83a2a4740d011da0366eaf104bc17a410895827d4e73bd4035b731c1e88d827f544a9c8d74ac7b2e42001695d137fa133ee845e738fc10f7af379aacd8419973ca6057344ad53693c1ab9352f2bb70bdc74565568f0eb3b68fc666e15f0fd990bcb265a2883dc98091e1ebb630bf2f958c45b92e6a38d88bbc8f", 0x7a}, {&(0x7f0000000400)="c4cde4681c91459e4fa4ed74d3f643d413ef36a953b978455aa7f67dfd9d602ee2c66393c62324e641b95ba0de485bd1903e73ab2cce0166a92c099898060bd7138fe6bda18f14ba05b61bc19ceceb6ec582d3769d5b2f82772497308f8f5cac25af3c5e62c1a56f2ec96b521cd347c6a427fd37e2ceb4c0940c50a08b527c0ba125cd1035cfe301de9e53028972495eadfcb64fa1339e2ce8ba3a1564d658650fc6", 0xa2}, {&(0x7f00000004c0)="78a9dc80df6c9ca51b27ab8e5d252d91efe2d028025e8260861e798127a26e18d5a9e0583adc459bab31db2dc35f4c96f332b2bbb4a80ce1d9a4dedfca88534b0350894a0190c8137540e0bb09c2afcd3e81", 0x52}, {&(0x7f0000000700)="b9e5281bc69b523d3bbd03347f4fa9a00fb93dd42a51a192dcbbed817fefce6b72a2bd0a827d102954848b83b50eec4eb7c8c0ed011da335b1fc1e31418310df78d71993ac5c03aa793276fb08e7d5448b64096b1784492dbf0e9e3d2978ff2969329d4c00f86d56dc2b7f69a0961640f06c19d584f88587d44998dc9e05d9439a0a3875a10c8224215c2d73f60601ee975546708098d8f6bed540821887e970e38a9dc3bb2d8716f6d69c4aa317944b3daba56366e363232a13f2d61a3997ae8c378af52c04f48073711c1b2d69661d329750dd0c139b", 0xd7}], 0x6}, 0x5) close_range(r1, 0xffffffffffffffff, 0x0) 2m36.154336497s ago: executing program 1 (id=3529): setresgid(0x0, 0xee01, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c3d98a02e20ae6c23828462696e643d7374617469633a", @ANYRESDEC]) lchown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) setresgid(0x0, 0xee01, 0xffffffffffffffff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c3d98a02e20ae6c23828462696e643d7374617469633a", @ANYRESDEC]) (async) lchown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) (async) 2m36.153763615s ago: executing program 1 (id=3530): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r2) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400030049e3e4e14c70e44d97df30", @ANYRES16=r3, @ANYBLOB="09032d6bfe231b7d870033"], 0x14}}, 0x40) (async) socket(0x2, 0x800, 0x0) (async) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000040)) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x2, 0x1, 0x7, 0x3, 0xccb, 0x7, 0xab, 0xd, 0x100, 0x0, 0xfffffffd, 0x5, 0x7, 0x6, 0xffffffff, 0x1, 0x1a449, 0xffffffff, 0x40000003, 0x89, 0x2, 0x2, 0x20001e58, 0x117, 0x7, 0x3c, 0xa, 0x4, 0x7, 0xd]}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 2m36.057705983s ago: executing program 1 (id=3531): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') (async) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x0) (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000500)={0xa0, 0xfffffffffffffffe, 0x0, {{0x3, 0x3, 0xfffffffffffffffb, 0x432c, 0x1, 0x8, {0xffffffffffffffdf, 0x6, 0x2103, 0x803, 0xf7c, 0x800000000000d615, 0x80003fa, 0x6, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x1c}}, {0x0, 0xb}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f04) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, 0x0) (async) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000000)={0x0}) (async) ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000000)={0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a0102000000000000000001"], 0xec}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 2m35.919993886s ago: executing program 1 (id=3534): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32, @ANYBLOB="f00014000a0001000180c2000000000008000f0004"], 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x204088, &(0x7f0000000140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x40440d0}, 0x24048800) 2m35.790666473s ago: executing program 1 (id=3537): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)={0x38, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @binary="3170d5cb1bc451e04e70f5549e82ac73"}]}]}, 0x38}], 0x1}, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}}, 0x2000400c) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x15, r3, 0x1, 0x57, 0x6, @link_local}, 0x14) 2m35.722472575s ago: executing program 34 (id=3537): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)={0x38, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @binary="3170d5cb1bc451e04e70f5549e82ac73"}]}]}, 0x38}], 0x1}, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}}, 0x2000400c) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x15, r3, 0x1, 0x57, 0x6, @link_local}, 0x14) 2m34.085858494s ago: executing program 4 (id=3575): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000180)="fa64d89c0a5dd9f364f466b9860300000f32f20f2086660f323e0fc71e7100440f20c0663505000000440f22c066b93002000066b80400000066ba008000000f30", 0x41}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000280)="90730fa7c8c809f2a7f080a0050000660f73d1000f20d86635080000000f22d8ba40009a0fc768969650d90f01df", 0x2e}], 0x1, 0x10, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r7}, &(0x7f0000000500), &(0x7f00000002c0)=r6}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x42, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m33.780774841s ago: executing program 4 (id=3576): prctl$PR_GET_THP_DISABLE(0x2a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', r0, 0x29, 0x2, 0x5, 0x2, 0x66, @loopback, @empty, 0x700, 0x7, 0x4, 0x1}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x100010, r2, 0x9e42c000) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000140)={0x0, @aes128, 0x0, @desc1}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x3, 0x0, [{0xb9d, 0x0, 0x3e3}, {0xaef, 0x0, 0x81}, {0xbc7, 0x0, 0x5}]}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', r1, 0x2f, 0x6, 0x82, 0x78a73d56, 0x59, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x80, 0xe, 0xf2b3}}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000003c0)={0x6, &(0x7f0000000380)=[{0xf000, 0x1, 0xab, 0x8}, {0x8, 0x10, 0x7, 0x2e09}, {0x6, 0x80, 0x1, 0x1}, {0x7fff, 0x58, 0x6, 0x8}, {0xfffe, 0x2, 0xfc, 0xfffffff7}, {0x5, 0x9, 0x1, 0x3}]}) r8 = io_uring_setup(0x42ef, &(0x7f0000000400)={0x0, 0xd3e8, 0x20, 0x3, 0x2ac}) io_uring_enter(r8, 0x294c, 0x6939, 0x41, &(0x7f0000000480)={[0xffffff0000000000]}, 0x8) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$EXT4_IOC_GETSTATE(r9, 0x40046629, &(0x7f00000004c0)) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = dup(r10) close_range(r6, r10, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x10000) ioctl$AUTOFS_IOC_ASKUMOUNT(r8, 0x80049370, &(0x7f0000000540)) r12 = socket$packet(0x11, 0x3, 0x300) fstat(r12, &(0x7f0000000580)) r13 = accept4$rose(r11, &(0x7f0000000600)=@short={0xb, @dev, @netrom, 0x1, @rose}, &(0x7f0000000640)=0x1c, 0x80000) ioctl$sock_rose_SIOCDELRT(r13, 0x890c, &(0x7f0000000680)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x404, @bcast, @rose={'rose', 0x0}, 0x8, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000700)=[r8, r9, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) 2m32.688594536s ago: executing program 4 (id=3578): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r5, 0x0, &(0x7f0000000000)="bda8", 0x2, 0x100, 0x1}) io_uring_enter(r1, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000200)='~', 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, r7, 0x400, 0x70bd2b, 0x25dfdbbd, {{}, {@val={0x8, 0x1, 0x87b}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffffb, 0xfffffffc}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x10) 2m32.620278563s ago: executing program 4 (id=3579): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x19, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0xa}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x0, 0xa, 0x3, 0x0, 0x8}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0xffff, 0x2b, &(0x7f0000000200)=""/43, 0x41100, 0xa0, '\x00', r0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xa, 0xe1, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x2, 0x4, 0x4, 0xa}, {0x5, 0x1, 0x5, 0x4}, {0x100000, 0x1, 0xd, 0x2}, {0x0, 0x5, 0x6, 0x5}], 0x10, 0xdd9}, 0x94) r2 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r1, r2, 0x1d, 0x0, @val=@kprobe_multi=@syms={0x0, 0x3, &(0x7f00000004c0)=[&(0x7f0000000400)='*\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='\x00'], 0x0, 0x4}}, 0x30) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x2c, 0x1, 0x1, "00000000bf2b000005000104000000e4f4ffff0000ea00000d00", 0x32344d59}) execve(&(0x7f0000000580)='./file0\x00', &(0x7f0000000700)={[&(0x7f00000005c0)='\x00', &(0x7f0000000600)='batadv_slave_0\x00', &(0x7f0000000640)=',:{^\x00', &(0x7f0000000680)='\xed\'^:%\xbb\\)\x00', &(0x7f00000006c0)='syzkaller\x00']}, &(0x7f0000000880)={[&(0x7f0000000740)='syzkaller\x00', &(0x7f0000000780)='[*\x00', &(0x7f00000007c0)='/dev/video#\x00', &(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)='$]&&\'\xa6\\\x00']}) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000000)={0x1, "c3"}, 0x2) 2m32.617520522s ago: executing program 4 (id=3581): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000180)={0xffffffffffffffff, 0x1, 0xe, r3, 0x5}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400), 0x2c}, 0x8841) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x0, 0x200, 0xb0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @broadcast, 0x0, 0x0, 'geneve0\x00', 'syz_tun\x00', {}, {0xff}, 0x62, 0x2, 0x49}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x8, "4edef53db37bf84c784ad890537bb2408afac8dfac7fc9d26ae9804d8470"}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff000000, 0x0, 'rose0\x00', 'veth1_vlan\x00', {0xff}, {}, 0x5e, 0x1, 0x11}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x4, 0x3, 0x4, 0x3, 0x6, 0x2], 0x1, 0x3}, {0x3, [0x1, 0x4, 0x7, 0x1, 0x0, 0x5], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x0, 0xf, [0x1, 0x25, 0x19, 0x31, 0x22, 0x33, 0x30, 0x37, 0x3d, 0x2a, 0x16, 0x1, 0x7, 0x3a, 0x0, 0x21], 0x2, 0xfffffffa, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) ppoll(&(0x7f00000001c0)=[{}, {}], 0x2, 0x0, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000100), 0x9, 0x1e3a00) ioctl$VIDIOC_ENUMINPUT(r5, 0xc050561a, &(0x7f0000000280)={0x2, "c5c2a91e002b1b80000000003d5eff0010000000000000000000000000001100", 0x2, 0x7, 0x2, 0x2000, 0x20911, 0x2}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2m31.673379224s ago: executing program 4 (id=3603): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x24048180) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000200)={'team_slave_0\x00', 0xff}) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x70, 0x8, 0x6, 0x808, 0x0, 0x0, {0xf5156165140f15ca, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x885}, 0x20000000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r2, &(0x7f0000000340)=""/79, 0x4f) getdents(r2, 0xfffffffffffffffd, 0x3b) sendto$inet6(r2, &(0x7f0000000240)="12ab5fa30d037bfd8300f53dbeb4532c35916cd8173dffc9abe142d57abd108daf849b4290394e07215e7e34072f3281918d09bec165b617fe331cfd1df55c6ce94f8fef9be912a802417dc3c3bc09753c1afdb6790f649201a5fda97c0b5ddc9a44d5c0d2ef729ddd4cfcf55db58d52814f66b8a6a49ccf01885814324052e621b84813b1d060d087586781f1fe76fafc616e3320a1c0bdc1c2ad2e360622dfed82ea9c0192f26d7f58fff790a226f800dd68181d295b5159dd4bf53996ba68111d48d8cce4bac88f3483108805db99b37cc12ccd7070cb4756a9c445821a1595325b14083eabc21fa39c4776", 0xed, 0x4010, &(0x7f0000000340)={0xa, 0x4e21, 0x5, @empty, 0x23f1}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x24048180) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000200)={'team_slave_0\x00', 0xff}) (async) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x70, 0x8, 0x6, 0x808, 0x0, 0x0, {0xf5156165140f15ca, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x885}, 0x20000000) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) getdents64(r2, &(0x7f0000000340)=""/79, 0x4f) (async) getdents(r2, 0xfffffffffffffffd, 0x3b) (async) sendto$inet6(r2, &(0x7f0000000240)="12ab5fa30d037bfd8300f53dbeb4532c35916cd8173dffc9abe142d57abd108daf849b4290394e07215e7e34072f3281918d09bec165b617fe331cfd1df55c6ce94f8fef9be912a802417dc3c3bc09753c1afdb6790f649201a5fda97c0b5ddc9a44d5c0d2ef729ddd4cfcf55db58d52814f66b8a6a49ccf01885814324052e621b84813b1d060d087586781f1fe76fafc616e3320a1c0bdc1c2ad2e360622dfed82ea9c0192f26d7f58fff790a226f800dd68181d295b5159dd4bf53996ba68111d48d8cce4bac88f3483108805db99b37cc12ccd7070cb4756a9c445821a1595325b14083eabc21fa39c4776", 0xed, 0x4010, &(0x7f0000000340)={0xa, 0x4e21, 0x5, @empty, 0x23f1}, 0x1c) (async) 2m15.651123952s ago: executing program 35 (id=3603): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x24048180) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000200)={'team_slave_0\x00', 0xff}) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x70, 0x8, 0x6, 0x808, 0x0, 0x0, {0xf5156165140f15ca, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x885}, 0x20000000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r2, &(0x7f0000000340)=""/79, 0x4f) getdents(r2, 0xfffffffffffffffd, 0x3b) sendto$inet6(r2, &(0x7f0000000240)="12ab5fa30d037bfd8300f53dbeb4532c35916cd8173dffc9abe142d57abd108daf849b4290394e07215e7e34072f3281918d09bec165b617fe331cfd1df55c6ce94f8fef9be912a802417dc3c3bc09753c1afdb6790f649201a5fda97c0b5ddc9a44d5c0d2ef729ddd4cfcf55db58d52814f66b8a6a49ccf01885814324052e621b84813b1d060d087586781f1fe76fafc616e3320a1c0bdc1c2ad2e360622dfed82ea9c0192f26d7f58fff790a226f800dd68181d295b5159dd4bf53996ba68111d48d8cce4bac88f3483108805db99b37cc12ccd7070cb4756a9c445821a1595325b14083eabc21fa39c4776", 0xed, 0x4010, &(0x7f0000000340)={0xa, 0x4e21, 0x5, @empty, 0x23f1}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x24048180) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000200)={'team_slave_0\x00', 0xff}) (async) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x70, 0x8, 0x6, 0x808, 0x0, 0x0, {0xf5156165140f15ca, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x885}, 0x20000000) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) getdents64(r2, &(0x7f0000000340)=""/79, 0x4f) (async) getdents(r2, 0xfffffffffffffffd, 0x3b) (async) sendto$inet6(r2, &(0x7f0000000240)="12ab5fa30d037bfd8300f53dbeb4532c35916cd8173dffc9abe142d57abd108daf849b4290394e07215e7e34072f3281918d09bec165b617fe331cfd1df55c6ce94f8fef9be912a802417dc3c3bc09753c1afdb6790f649201a5fda97c0b5ddc9a44d5c0d2ef729ddd4cfcf55db58d52814f66b8a6a49ccf01885814324052e621b84813b1d060d087586781f1fe76fafc616e3320a1c0bdc1c2ad2e360622dfed82ea9c0192f26d7f58fff790a226f800dd68181d295b5159dd4bf53996ba68111d48d8cce4bac88f3483108805db99b37cc12ccd7070cb4756a9c445821a1595325b14083eabc21fa39c4776", 0xed, 0x4010, &(0x7f0000000340)={0xa, 0x4e21, 0x5, @empty, 0x23f1}, 0x1c) (async) 2m5.362515663s ago: executing program 6 (id=4033): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0xe, "fe4042c317ae82c6d1a51a1e45a7"}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'macsec0\x00', @ifru_addrs=@phonet={0x23, 0x6, 0x9, 0x7}}) ioctl$sock_netdev_private(r2, 0x8949, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usbip_server_init(0xaa7f3cec63cbb9d) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r3, 0x89e2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x6) setsockopt$inet_tcp_int(r4, 0x6, 0x1, &(0x7f0000000040)=0x4, 0x4) r5 = socket(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 2m4.711380881s ago: executing program 6 (id=4038): setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x27, 0x4, 0x2, 0x7, 0x2, 0x3, 0x9d, 0x8, 0x3, 0x2, 0x8, 0xbf, 0x24, 0x8}, 0xe) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x8, 0x25, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x40, 0x9, 0x2}}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000002c0)={r2, 0x2}) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000240)=0xf) sendmsg$xdp(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, 0x5, r1, 0x3e}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000180)="3f2736fe263c14530ec07a8fb473bec45142af95c9", 0x15}], 0x1, 0x0, 0x0, 0x20040041}, 0x4c001) 2m4.710948976s ago: executing program 6 (id=4039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) read$FUSE(r2, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) rmdir(&(0x7f00000004c0)='./file0/file0\x00') syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x4fcb6233, {0x4000000000000, 0x6, 0x0, '\x00', {0x1, 0x803, 0xadf, 0x800, r4, 0x0, 0x6000, '\x00', 0x6, 0x7e, 0x1, 0x3, {0x8, 0x6}, {0x4000000000006, 0x9}, {0x3fe0000000, 0xd}, {0x7, 0x7}, 0x9, 0x2, 0xffeffffe, 0x6}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) write$FUSE_INIT(r2, &(0x7f0000001200)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) pwrite64(r1, &(0x7f0000000140)="cc7c4751a728c6a60f40fb1c8ea9d0a5093072b36ae8d5f24d5f7ca4f2a1f0d83e3e392c0d603117f288d0b261cbd869fdc8676d6cf25b31a7a79ad3fc5c8ff8bdb98d4c27e16a75bde9b37fa21f78fa498948368c8860a520e6508aad7c1935a406dc9a0074ef50da22d3a23c2e0d72954421de4123b02c5be2fb31feee3641975a83be16098017a00a0f1e9c94dcfb9672454bf468a7640319df5e3520977cdb507912c2b1a465c1917155bf0c8288cd3c0ee26e29700c559eaa437f59", 0xbe, 0x9) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @broadcast}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x28) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) open$dir(&(0x7f0000000540)='./file0\x00', 0x8000, 0x84) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x138d, 0x4, 0x10011, 0xffff, 0x9, 0x1ed, 0x2, 0x3, 0xbb, 0x4, 0x70, 0x2, 0x7, 0x8, 0xfffffff8], 0x1, 0x4}) lseek(r5, 0x405, 0x1) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x5, 0x4, 0x3, 0x2, 0xf6c, 0x68, 0x2f, 0x5, 0x33, 0x1, @remote, @rand_addr=0x64010101}}}}, 0xfdef) r8 = accept4(r5, &(0x7f0000000240)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x80, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r8, 0x5411, &(0x7f00000002c0)) 2m4.32968068s ago: executing program 6 (id=4044): socket(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x28) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) syz_emit_ethernet(0x2a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) r4 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r4, &(0x7f0000000180)=r5, 0x12) write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x28, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x10003, 0x2, 0x80a0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) write$tcp_congestion(r1, &(0x7f00000000c0)='lp\x00', 0xfffffdef) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 2m4.240202494s ago: executing program 6 (id=4045): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x3) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000950304001080080015"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x40000) epoll_pwait2(r1, &(0x7f0000000080)=[{}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={[0x1]}, 0x8) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000280)={'veth1_to_bridge\x00', {0x2, 0x4e21, @multicast2}}) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x9, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2m3.898405898s ago: executing program 6 (id=4052): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x3, 0x3c}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x58, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}, [@FRA_SRC={0x0, 0x2, @mcast1}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @FRA_DST={0x2f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x58}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}]}}}]}, 0x5c}}, 0x4010) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/ip6_mr_vif\x00') pread64(r3, &(0x7f0000003700)=""/119, 0x77, 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000000)=@ethtool_test={0x1a, 0x0, 0x5}}) mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz1:', 'syz0', '.backup'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00'}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) 2m3.813240937s ago: executing program 36 (id=4052): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x3, 0x3c}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x58, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}, [@FRA_SRC={0x0, 0x2, @mcast1}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @FRA_DST={0x2f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x58}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}]}}}]}, 0x5c}}, 0x4010) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/ip6_mr_vif\x00') pread64(r3, &(0x7f0000003700)=""/119, 0x77, 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000000)=@ethtool_test={0x1a, 0x0, 0x5}}) mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz1:', 'syz0', '.backup'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00'}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) 32.51288118s ago: executing program 8 (id=5592): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}}) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x2, 0x0, 0x98, &(0x7f00000000c0)={0x400, 0x4000d54, 0xd}}) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000480)={0x2, 0x0, 0x0, 0x2, 0xd5e}) (async) r2 = syz_clone(0x8001000, &(0x7f0000000180)="997c9481e91348a4286368d99832ab20ed529a38cd4a0f199ea00701e2e2b29421ea58ffce5686c2864c73497d4145505f11271c515d716907e155a99e99db1238d283a3c645ac54a39ed7772d3ce0055ceaab549b4ec3ade6250d8930c29199b3024f09261ef1c53bfacef07c2b3c0e032b2e8e69453e4aa483aa4c813b894916aa4c6e9cbe76df6ef6e6fe75fbbc81474008f80bba320242c50c789ae1d830bd8765cab30035a5e120658ecf7d078d7d5ca53e09522fe9d2e51be12ac3ae51a0ea3045e09cf2c01e", 0xc9, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000280)="7350477477891b904d9b23d60dc143346ffd54a17cd281a65044dcbf2b3ddd18ad5ad4be2a62a9bc85162d319c4ee48076297f9b7d6fe18bd99166c3260c3ba3b79ab84c3ad8c93a66d3ecefa87155d6820ac5d6032388ee5ac44daa4cbef2576f2ad48309a5ef835299e08172cbad3c") ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000300)={'\x00', 0x9, 0xffffffff, 0xf, 0x7, 0x7, r2}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) (async) ptrace$poke(0x4, r2, &(0x7f0000000400), 0xd) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='gadgetfs\x00', 0xc94, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 32.438593241s ago: executing program 8 (id=5599): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000002ac0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ff1100001f79a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7040000050000006a0af2fe00000000850000001a000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffffffff55bb2007ee51050512b5b42128aa090a79507df719af36349f298129da4871307b534bf901115e17392ac66ad022186a8929d1c000006146001e04aeacea799a22a2fa030000c412f6cae80043eb27d53319d0ad229e5752548300000000dbc2777df150dd488318b5790bee7e6c8bd03acdd77b85b941092314fd085f028f4e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b217369ca8b6712f000000001b1df65b3e1b9bf115646914ce53d13d0ccacda1ef16fdcceaede3faedc51d29a47fc813ce3d32cfc7a53ac271d6d6f4ea6bf97f2f1be2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488e40b030166565a097b1b44b451de7940b0000db8db03d4b7745fef1d04ec633dee254a6d491b8496da787e814c4fdf0b4a387b4c8149d18c1020029a18986252a70f8f92eb6f0e8c7db000068fbaa2e2a27efd9104297f2c58159f02d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa909ac06b57479321a0574fb304bc2a1681989328c8ddc20ea011bf5742e0ef94234db1f00000000000000c20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b35f421c3552772ca7f3e2c25a65f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41aad8bda74d66f47cc17d8ba3eec0fd80f82c5f573c6d294d366505000000da0fde0745db06753a7ac7fe13cab6692422a46e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da323947004cacadcaff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c5f1e24d9f679e4fbe948dfb4cc4a389469608241730459f012b060e7d23fd39206000000000000eb55d001623258a141bd587cc9dad46de56ef907b059b99a79ae5498f6589880ed6eea7b9c670012f80cd6a1397953ba5870786554df26236ebced9390cb6941b8365d936a7d2120eca291963eb2d537d87cbb54e588ee5d6944ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a0aa9a104e16b3b8c6e64836ac3f32f53c9a2bae513464ca03aff14b9fd8cd9539f5096412b92012e095b84c202060098df3314f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c363000000000223201780200c6ed7966130b547dbf8b497af0a77f52f2cd39000000200000e81c23cf14156951210001c800000000001500000000000928ee53595a779d243a48cea769470424d28804c026ab7f4a201dc36eff615c81921e0128dfd70b438af60b060000000000000056642b49b745f3bf2c01808b6d7d748308eea09f0161b4735efbf3411738d6ee7aebf9ef40662d7836d252c566e1ee938a9a6804ed3a1079b0282a12043408cd60b9e53978c81839be0000000000456f7d2a42cb13da2022f23eaec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea394cd8ffd3d628293e591dc6f71c2710a7ea8a4fdc214e1cc275b26adfa892e6de9200000000e50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab50fe82d5a96b09c68c73de2f04f15d005387577f480000ea65559eb00e014df20fa209bcbb5c252b11a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cdfba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5d81e750d50515a59a3ad09e8802e8f4f535447dc0fc9d5f99a145dfcedad69da9cd4b75c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d583f436137a3c5dc714c9402c21d181aae59efb28d4f91652f6750b9195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa80900000000b6638c420eb4304f66e3a37aaf000000c42a570f0e9d76fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284df80e4636c25b96174327d82761c26e329555f9290af40000000000000100000fd3763655500344bae34347f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419a5c16e2055b85058099448430587a49bed2ee9647c5d3bbb47bc00edf5e9020c09ab004321610b857e8717974b633b21cb32f0e03280e09758bd445ab91d201782d656ab09f508bbbaca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92b32af00f191b66b6a6f732a91f0a2e9120be61e58c79d497247d278888901d44bf77e8246605a644e9e3d769db497c3960df05caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f3101985602688888ccb85c87b4f8ffffff7f000000002c331fca0e541b7ca2119ff0d61c5224550346115b43f8b1894c8fa8a14dc4810f61ae01000000000000000000000102000000000000000000000027c9585c0cead5d619d18475ccde2857279a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77a23b0000e49666c464d35ca9b50f3ed3e535b3da8c17a23692759ccf5a205311b7d122532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952b3d42c68a3102fa1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e8918a0d6e2949affcacb5ba0a56aa063b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9448a2ff93060ff073b3a113e47edf76f7d1b8b90bc0df4cfb0b9c8c80158b44ecae9420654f7016b0aac117087406d343e27b372d6027ab2aec2bcad7fe6bb932bc5751d2974e95455a277fa3b472bc7bbdd2ac5a1ea608e8137ace03361607cc1a84be659355629ab13ad49008c3fcfa2423439a3607961d5b59da48a0155e8e42cc13c702cc40c99cf86c2021d72f9f4ab1b00de555a5a39593c93871ff7eb5ecadb64837a2d88723ef65aa5152e3d5864e57581b61f2b0960600000000000000265f091e7bce17d20604c5ab751773a5cf8a719a7ada06ed03832bf274707c7c970edc20f4a1eaa3b610450d2025cae6d2cb639ecd58709b05a20097208d03f7a146a6901913618738679d4e0af53eae997eecfa0dc3dcec19d3d9205450765d659220c92701ee75c8710470d9eb6f62c5c721883f1544ba66271c8dab05a933746c16b6e93294b561c6715a32a394ed1e6c01670c931bfa52c58c6f34d64e758a7a7f7d33c49336d4cba2cbb170ad7539a45774dfcc55257215c8ae719dc1c232fc6699ef01005887d04a543030b4328ab48744ac23ff56fd2da52eb9fb2eefcdd2d92d73ac1b111ea8b5e1fec36a3579879acfe366d393f1fa9cbe08d9ba57a443643e9cd251dc88e91a5e458e66ea1e822d55d4dd919a95eb4c25a08cb6e1070000003a0fd07a4ad9df240e00006aaa2db0dfe416146840d88bd08365e547c970e2983200703864a3b9e1682cb479dad6d34d211b05267eb1355520e9ec0c5014b0832f7fb35782fdbfcbf5e23a7f5d51ea480371748d18d8e10608ab8261fe058d1732f288145e0c1d84a04a2bb36c89bdd245e3293a14df1ac567301a78514f103abd387d6ef2d9d94508ac0f6135c8921279573eefd5d4e33b9ef585980789a94d9848906f545559d30000b5040f0776703363249ca984cbb09752f099efbb9e7362e4999594c1086d8958e9469db01d85fb0b9b3148663e9ea2e755d96c70e540b4200e4cf82986712dd733b26d00e947d03c42215118426d548cb2077b43b89e4163d260faea1db53e2cf3427c90aefa2662a1c2b28b0e020e872bda1d39da508de5dbc37d03ee056b2579a1d16799589a2600000000aa00006c94bcaf115fbbcb216e3cb7fd9afe16d1fff2d047e508aa5f6de0ea4e9ec1b3a4ab1f8b5f312fc50000000000000000000000000042709db6de7e969ac0ce18b47280fb1b1b1531648122fed3e25edecb5200f5000000000000166f7d36b2966c19af7ffa6afa69e50821c9aa3ae60fbc196cf8ad2f7f86d79db1bb0ecbf9c3d0d3d407574def838e4def26ed9c7e6c69858f7813be8ffc565583663bebfe7485660b67e1436cbc6d4d3c48ab7b033d7d1195173edb16643f69cb779802839d490a4df94e5ea89c192af2ae83876edd59c9a7140e12ba591f073ec604f7e8f1e100cd414e9237ecfc052d9a73a868cd0e4b06da0435af72fb0d25657e8f5464b19fa83f977e6900000000367871fa37420e7a232ef9b440bb0639994c655d144c5786939d6a187b8182ddd2bec36cd28371b1754cb6c53697fb23576ee0d3fd0a5803c9be9fe384f1a7a9a8eb64d17d238fa3238a001aa8ed040a69e9ec0a627e3b3ca64d4680d819c14c71684581000000000000000000000000000000000000c6a6587715865fe14558960bc936bc83abd1f2a00b17a407457681d0760000000000000040000000000000000000004faeabea6de40ae30291662594c993099ef041c264a64d77d69e0cdfa620a191704cef91e269044acf752b55690075fa844de65a099200265e13c2a8f9b717886dea8e79407e34bc268a17965033ca1d000000000000000046595642f9fc008875ddb7aebda7a16b1d20dd8b65bcdac8cdc75a173fd2e57a9c37bf5a52ea001ec981dd7ad4e5944575ced39233ada8f3c1b856644812828bb79536a5188d14fe537250dc107121534cbbc7598f48aa2335616ae8eb72acf6982048e568e37f1f58e9714343587734c7ec0fa5c44d13165d6384bf9500757b4b0275950d6e7c451eef3fd353d47c54c4c2cf7318e6c24583ba0966225284d1abac80786519c563ddf0e6c023d537ca6eb8e9b0928d0d6d4e072c98f45415d13f0dcea174f162ebd00b42264f6fa3dccd09f4101dd254e54423b30e06713eccfacb6ffb38afff920980af938a4d78f4b9a6b5c7424e91121cda789104ee490d25843f1622bba93257cc23e45cd7ed42abdb991d51804e674e507dfd53b5ab6944df33f4f494b9ae0d2de410539828e82a939ad82b385e66809d7d4d3630b6f22c2f41fdaa0fadeea09fa4f7005813643c2d6307d55689faf6f656327ac5872a3bd4c11363909a8b9f30e5401993a0f6e1a9b42287542647d1e86b02b7e36319414629ac1f35572a9cc1e98ce1457f922da0c2de76c9e97944efad0a3ad78cda81c5b82709d696e85bbf4595ef9664a6aff8cf96446cb6c26595f4eb659d26c846471f6551dbb24fc6c03a01e33efcd5939472b687d31be9bd9bd1bcda45bd2236f06c000000007d348ebcb9d810d4dc3c55bbe4055ce9c45267daeec7a7d8b498f56ee933cc02fb53c2c28fa09ce5ada5687889357599971a8c794f8ce23c1f7add4f65280ab446ea2d130000000000000000000000d1a0313ff63bc4e4463688db1d6ac7f4595a02c89349a973f118d936f33ea18e69d7739f4532e1b8580ef125b47cf5b402b6f2beffed6cc9afe2b548c4dbc78363118818d9473f29d52444685c41620eeaeb1f8786e87aeaf287fb9b63b30e6761507503dcd47b64f0b6157d970a989844f9b7dbe83211cd7999c82bd151bee0c67f3e6642ef1772d759df9ec9b4197383f9a66217e180e434e650dd560aa3ed42acddd44d6f45807a3c63e15929cfbebc7eef1a219d3147a6c06bd974168ac689392fa851ebdf524ca2331148ff7e855cccc106074ca92153734d5c5e3f9efc6592b08e0c07c7b5d42ec71484bb2a4c0f4293138369f39f9fa4a9cc607b42ba6102f918ce4e76d66fba450e94849962fae5059bda419fd2a170ea387c10a4ada5893f38486069ef1bfdbb432ab322ce87d7a94fa967135833157bafbed3b48bb267fc3aa56d1e5b66417a673b40884fc91ec9558eab6a08222dfe37767095b2d94cda881290d6017137595cdd53972353f485adfde8015cac0e1acd64ca97d67023f75a54b1ebe55053652ad16292a15e79dc58ba080f795f1a753d1c5c85475e286c548da6f669e5c34afc272e5a32f27264d9210acec3b65a264fd5e85d5f44979431eab3fcd8d33d5476e070d2e20e6156ad9c964ebbfe7d9096461b72530295b3603bf85b0c8f9921e9ca95d744bf5c03d60f7364f3fd9d98f7acc80cabd02d061818d028056c68805ee4783aa4b90d39e9b29085429de28c615668e4b4f4dd77b3a55a8058b99f3adff03294e01da549dd64cacd59382466e562a3f67ef5d042426659574ed041bc19ed625b7c0633154a290f69437f43065795d3ae5b11ee8e935b9969f5291a32ce3adca268162efcee3898e823affe0f50f7efe763d47288004a2b310e2a79115160b8e0e09067f26a7653a3a0886691fe44a307f8f344eb9512b632bc132c26220ec86dbf788f4fadd493c37e38f782fc1c0e64f7d3e6a04aa1918796fa53353ab58cfc4505147ed35624871b085e507c90b991a675bf2b6393a732f4a69c3859dbeca89140ba5b3f47d457877d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x80000001, 0x9, 0x3}}, 0xffffffdb) sendfile(r3, r1, 0x0, 0x4000000053d2) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0xd) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000001600)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="d510c490f913672b5ae413000500", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000000)={0x7, @raw_data="50e4bea09973dc52b676d93ad5074038b4b5dcc4de232fc23d83fd904625e489752aa0b6ff73c28d41515fb3ac7899c2032550d5f5a22767af3b51428f5624b5b27627774b69afb7943920d662ba404cadfe72cd43c900f7fa68090c8c5d8ceead7214336d0da32a7f193bf1c48dd59d7320c5c1cd4700e8f56304d4d4cd41330a39b40a8d8d8409b7c23e06f0edec0e327e818360a2d76419d441bf4b7c66352cd124106b137d2d79f2d8eba2965f2297932289e326d26c5ba5ded34f6c9c3313026208ef1d3e31"}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r7, &(0x7f0000000080)=[{&(0x7f00000004c0)='\n', 0x1}], 0x1) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r5, 0x803) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000001640)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602a8435001406ff00000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES64, @ANYRES32=0x41424344, @ANYBLOB="9564d11e4b53e89e"], 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @private0, @local, {[@hopopts={0x89, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xfffffffe}]}], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x4}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xe0, 0x2, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_NAT_SRC={0xac, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3f}}]}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x1c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x9}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x7f}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x8}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4090}, 0x4000801) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) ftruncate(r8, 0xc17a) setresuid(0x0, 0xee01, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r9, &(0x7f0000000280), &(0x7f0000000340)=""/140}, 0x20) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000200)=""/188) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) readv(r10, &(0x7f0000001580)=[{&(0x7f0000000480)=""/88, 0x58}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x3) 32.246322557s ago: executing program 8 (id=5603): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x23, 0x3, 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x2}, 0x5c) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xbc}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x15}, 0x4040010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 32.116339567s ago: executing program 8 (id=5607): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000440)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000500)=0x90) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000440)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000500)=0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x91) umount2(&(0x7f0000000000)='./file0\x00', 0x1) chmod(&(0x7f0000000180)='./file0\x00', 0x243) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x28) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') openat(r1, &(0x7f0000000200)='./file0\x00', 0x200000, 0x1c9) (async) openat(r1, &(0x7f0000000200)='./file0\x00', 0x200000, 0x1c9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef) clock_nanosleep(0x7, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r3 = syz_open_dev$vim2m(&(0x7f0000000240), 0x7fffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x10, 0x1, 0x0, "27110000000000000010002200"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x10, 0x1, 0x0, "27110000000000000010002200"}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d616376746170000000080002"], 0x54}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d616376746170000000080002"], 0x54}}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x40000) (async) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x40000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r7, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000440)=[r8], 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r7, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000080)=[r8], &(0x7f00000005c0), 0x1}) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x0, 0x7ffe}, 0xc) (async) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x0, 0x7ffe}, 0xc) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r4, 0x3ba0, &(0x7f0000000280)={0x48, 0x3, 0x0, 0x0, 0x100000000, 0x0, 0x0}) (async) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r4, 0x3ba0, &(0x7f0000000280)={0x48, 0x3, 0x0, 0x0, 0x100000000, 0x0, 0x0}) 31.901587165s ago: executing program 8 (id=5609): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0xabd42) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="40003a000a000200ff"], 0x30}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4048aecb, &(0x7f0000001440)={{0x5, 0x0, 0x80, {0xffffffffffffffff, 0x1, 0x1}}, "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", "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"}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600"}}) r8 = dup(r1) write$UHID_INPUT(r8, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 31.513204238s ago: executing program 8 (id=5612): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0x20008045) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, 0x0) syz_emit_ethernet(0x95, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv4={0x800, @igmp={{0x13, 0x4, 0x2, 0x1, 0x87, 0x68, 0x0, 0x0, 0x2, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3c}, {[@ssrr={0x89, 0x17, 0x94, [@empty, @multicast1, @rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x1f, 0xf8, [@rand_addr=0x64010100, @rand_addr=0x64010102, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @empty, @broadcast]}]}}, {0x1f, 0xff, 0x0, @multicast1, "e869829409c00d199bdd1ea0070022ccd78431ca53d9ce6b3570c459b51083415c064c12db3e713a43316db6d6d860e09713e3"}}}}}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0xf, 0x2) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0xa, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0xffffffffffffe}, 0x60) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x2, 0x1, 0x0, "81914800fcffffffffffffa7d9fcea57000900000000000000000000002000", 0x7741611}) 31.451422246s ago: executing program 37 (id=5612): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0x20008045) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, 0x0) syz_emit_ethernet(0x95, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv4={0x800, @igmp={{0x13, 0x4, 0x2, 0x1, 0x87, 0x68, 0x0, 0x0, 0x2, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3c}, {[@ssrr={0x89, 0x17, 0x94, [@empty, @multicast1, @rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x1f, 0xf8, [@rand_addr=0x64010100, @rand_addr=0x64010102, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @empty, @broadcast]}]}}, {0x1f, 0xff, 0x0, @multicast1, "e869829409c00d199bdd1ea0070022ccd78431ca53d9ce6b3570c459b51083415c064c12db3e713a43316db6d6d860e09713e3"}}}}}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0xf, 0x2) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0xa, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0xffffffffffffe}, 0x60) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x2, 0x1, 0x0, "81914800fcffffffffffffa7d9fcea57000900000000000000000000002000", 0x7741611}) 8.139462536s ago: executing program 7 (id=5932): iopl(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x1, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6}, 0x20) syz_io_uring_setup(0x35ea, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x2, 0x3c5}, 0xfffffffffffffffe, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1900000004000000040000000280000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000008200"], 0x50) 7.870460628s ago: executing program 7 (id=5933): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007b19a200000000008510000002"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_GET_SECCOMP(0x44) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0xb02b, 0x7, 0x4, 0x4000002, 0x88d7, 0x8d, 0x1007, 0x0, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000009, 0x80001, 0x5, 0x1, 0x8, 0x3, 0x9, 0x91, 0x10c, 0x0, 0x7, 0xa, 0x7, 0x9, 0x75, 0xc, 0xff, 0x400002, 0x1]}) syz_usb_connect(0x3, 0x24, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x48c42, 0x0) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x80, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) 7.171841343s ago: executing program 7 (id=5940): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x45, 0x0, &(0x7f0000cab000)) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syslog(0x9, 0x0, 0x0) (async) unlink(&(0x7f0000000040)='./file0\x00') (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x6, 0x3f, 0x0, 0xfffffffffffffffe, 0x2004cb, 0x751b, 0xfffffffffffffffe, 0x3, 0x1, 0x8, 0xfffffffffffffffa, 0x2, 0x0, 0x6], 0x8080000}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.042742047s ago: executing program 7 (id=5941): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) r0 = syz_clone(0x6000011, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) r1 = socket(0x23, 0x1, 0x2000) accept(r1, 0x0, 0x0) (async) fgetxattr(r1, &(0x7f0000000000)=@random={'os2.', 'autofs\x00'}, &(0x7f00000001c0)=""/62, 0x3e) (async) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) (async) chdir(&(0x7f0000000080)='./file0\x00') (async) setpgid(r0, r0) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x323000, 0x24) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x102) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x220901, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) setpgid(0x0, r0) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) (async, rerun: 64) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (rerun: 64) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) (async) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) readv(r4, &(0x7f0000001600)=[{&(0x7f0000000100)=""/150, 0x96}], 0x1) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x1c, 0x14, 0x1, 0x800000, 0x0, "", [@typed={0xa, 0x15, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) (async, rerun: 64) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x44, &(0x7f0000002f00)={[{0x3d, 0x4e00, "118810fbff5019eee2a2adc056eb0e2f8997cc2a396d5b68b8af5a466d7de20883d1df916c8da487a94ec6f28335c4e7f85afcb3c73c762459d2aba53c"}]}) (rerun: 64) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) (async) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) 6.977216307s ago: executing program 7 (id=5943): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {0x0, 0x7d}, @raw32}], 0x1c) (async) r1 = semget$private(0x0, 0x6, 0x3b1) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) (async, rerun: 32) semop(r1, &(0x7f00000000c0)=[{}], 0x1) (rerun: 32) semctl$IPC_RMID(r1, 0x0, 0x0) 6.913306182s ago: executing program 7 (id=5945): socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) (async) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, 0x0, &(0x7f0000000880)) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@delqdisc={0x84, 0x25, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x9, 0x3}, {0x4, 0x6}, {0x0, 0x7}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2}}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x40000000, 0xb, 0x4}}}}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xd2a2, 0x2cb0, 0x1234, 0x400, 0x2, 0x1, 0x0, 0x7, 0x2}}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x20008040) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket(0x2, 0x5, 0x0) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) setxattr$security_selinux(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:apm_bios_t:s0\x00', 0x20, 0x3) (async) socket$unix(0x1, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x9b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) r9 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r9, &(0x7f0000000040)='./file1\x00', 0x2000, 0x0) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) linkat(r9, &(0x7f0000000100)='./file1\x00', r9, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000640)='./file0\x00') 6.828365287s ago: executing program 38 (id=5945): socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) (async) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, 0x0, &(0x7f0000000880)) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@delqdisc={0x84, 0x25, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x9, 0x3}, {0x4, 0x6}, {0x0, 0x7}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2}}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x40000000, 0xb, 0x4}}}}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xd2a2, 0x2cb0, 0x1234, 0x400, 0x2, 0x1, 0x0, 0x7, 0x2}}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x20008040) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket(0x2, 0x5, 0x0) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) setxattr$security_selinux(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:apm_bios_t:s0\x00', 0x20, 0x3) (async) socket$unix(0x1, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x9b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) r9 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r9, &(0x7f0000000040)='./file1\x00', 0x2000, 0x0) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) linkat(r9, &(0x7f0000000100)='./file1\x00', r9, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000640)='./file0\x00') 2.341841974s ago: executing program 0 (id=5946): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x2c69c0, 0x91) umount2(0x0, 0x1) chmod(&(0x7f0000000180)='./file0\x00', 0x243) 2.286305908s ago: executing program 0 (id=6010): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x8b}, 0x15, 0x3, 'nq\x00', 0x1, 0x400000, 0x4}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000100)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@rand_addr=0x64010100, 0x4e23, 0x3, 0x244, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.032497677s ago: executing program 0 (id=6014): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000100)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x19}, @val={0x5, 0x0, 0x0, 0x0, 0x15}, @ipv4=@dccp={{0x5, 0x4, 0x1, 0x22, 0x24, 0x7, 0x0, 0xe5, 0x21, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x17}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, "499d57", 0x7, "e8ac64"}}}}, 0x32) 1.394851251s ago: executing program 5 (id=6026): r0 = socket(0x40000000015, 0x805, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) getsockopt(r0, 0x114, 0x271d, 0x0, &(0x7f00000000c0)) 1.322703729s ago: executing program 5 (id=6027): socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @dev}, &(0x7f0000000080)=0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580), 0x0, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffffffffffffff9f, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_NUM_TX_QUEUES={0x0, 0x1f, 0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r0}]}, 0x3c}}, 0x8000) 1.322347512s ago: executing program 5 (id=6028): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x200) setrlimit(0x6, &(0x7f0000000100)={0x3, 0x3}) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000640)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000540)="8a21d57b0000", 0x0, 0x0, 0x10001, 0x0, 0x0}) getrlimit(0x5, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 1.258471519s ago: executing program 5 (id=6029): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) 1.138490725s ago: executing program 5 (id=6030): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/57, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$vcsu(&(0x7f0000000240), 0x6, 0x248200) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000014001100010080000000000009000000080002"], 0x1c}], 0x1}, 0x0) socket$kcm(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) mount$9p_virtio(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x26021, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) 716.539599ms ago: executing program 2 (id=6033): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0xffa6, 0x0, 0x240008c4}, 0x4054) 634.907099ms ago: executing program 2 (id=6034): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x11, 0x1, 0xc, 0x8001, @vifc_lcl_ifindex, @empty}, 0x10) r1 = syz_open_dev$video4linux(&(0x7f0000000380), 0x28, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000003c0)={0x40f0f000, 0x8, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x0, 0x10b, 0x100000, 0xfffffffffffffffa, 0x4, 0x1, 0x20000}) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x400) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x10, 0x4, 0x0, 0x5, 0x11, 0x18, "8cd628b0ec690556b52201179cfe72e9b337a978a8ac42aaed80b981d7b9a009bfc0d2e8a7fc09406123ae7c29c42708207b09c98bc346b7a56b897d64f9d8a6", "3f419417364b404605dd4b7f37682ddac91e638cf5eff3df5994f7a66c8bff6034234ab28ae2e2f806d528457dc8cea57a77299bd0ae5bf85e86370900aab9a0", "619f11d112237ca03acc63fe486ee668f0ba88093ae102ba9ff488c70400d40e", [0x2, 0xe3b3]}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcf, &(0x7f0000000800)=""/207, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async) r3 = syz_open_pts(0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1000, 0x3}) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) (async) socket$inet6(0xa, 0x4, 0xfffffffb) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b090000", @ANYRES16=r8, @ANYBLOB="0100000000000000000005000000"], 0x14}}, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) (async) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000240)=@arm64_fp_extra={0x60200000001000d5, &(0x7f0000000100)=0x6}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000480)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat=@weak_handle, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x22}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000bc0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$KDSKBLED(r3, 0x4b65, 0xffff) 634.646653ms ago: executing program 2 (id=6035): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0xabd42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600"}}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000161411"], 0x20}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r5, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 526.910751ms ago: executing program 2 (id=6037): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x2c69c0, 0x91) umount2(&(0x7f0000000000)='./file0\x00', 0x1) chmod(0x0, 0x243) 462.337617ms ago: executing program 2 (id=6039): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x2d, 0x1, 0x0, "1c13ebdaf2f20d55806ba058e8edb1439bfcc1000000efffffffffffffff00", 0x56544943}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) sendto$packet(r1, &(0x7f0000000040)="7538736d00ff370100", 0x9, 0x24044881, &(0x7f0000000000)={0x11, 0x88a8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x1, 0x10, 0x8, 0x7, {{0x10, 0x4, 0x1, 0x6, 0x40, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @private=0xa010101, {[@timestamp_addr={0x44, 0x2c, 0x9d, 0x1, 0x9, [{@private=0xa010100, 0x7f}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x9}, {@local, 0x21a6}, {@broadcast, 0x9}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x0, 0x40, 0x7, 0x0, {{0x16, 0x4, 0x2, 0x6, 0x58, 0x65, 0x0, 0x5, 0x29, 0x0, @multicast1, @broadcast, {[@ssrr={0x89, 0x17, 0xd4, [@multicast2, @broadcast, @empty, @local, @loopback]}, @timestamp_addr={0x44, 0x2c, 0xa1, 0x1, 0x0, [{@broadcast, 0x3ff}, {@remote, 0x3}, {@loopback, 0x6b499805}, {@private=0xa010100, 0x4}, {@rand_addr=0x64010102, 0x40}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x4, 0x81, 0xd3, 0x401, 0xc, @empty, @mcast2, 0x80, 0x80, 0xf, 0x4}}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000480)={@initdev, @private, 0x0}, &(0x7f00000004c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x2f, 0xd, 0x9, 0x563, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x8, 0x20, 0x7ff, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000600)={@dev, 0x0}, &(0x7f0000000640)=0x14) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x60388}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r18}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000008}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)={0x26c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x8000}, 0x4020) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x1, 0x9, 0xb, 0xc, 0x2}) 386.426879ms ago: executing program 9 (id=6042): r0 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000010002000000000000000a00806e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 311.760424ms ago: executing program 9 (id=6043): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000006a00230126bd7000fedbdf25020000000000000004000b0004000b000400090029ffffffffffffffff2d18592afc4f34b1cd9134a461054c3ca6d0138530032bb14fc9eee2ed20253ce99f1126f82ce0a441f768580e6f62c44186ae70bfa49c6478b73fa2cb74112f42a37396bc7ffdf1e5b529af579f7f0a8cd5ee270751f7727c8f2ba2e2aa4e2d0a82b08b135f13aab07c2a39ba370aa4ff8e5e7279602973e6a2f4444ad79048d7252c1c2c06d787cfc04ef1eafb1c1028214720801083d17e8bf978ca185564103b0a51dd3ac314737153e8a97f935478c257c7339548f64fb56d39843fb582caf661288567a6897cde40807fa5c7ccd0f9"], 0x24}, 0x1, 0x4000000, 0x0, 0x240008c4}, 0x4054) 310.985762ms ago: executing program 9 (id=6044): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRESOCT=r0, @ANYBLOB="000000000000d77d40a3c08841252dc64709e5d002450000b703000000e000008521c792a539f41f3c3dcf4da1157b697dac3a0cc21bcde26cffd4f3f10378f52226ed97202d0e902efd251d1d42f43b1f0707ee10e0e796214f5d864a61e9db88ff4bfc"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x66) r2 = creat(&(0x7f0000000300)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(r2) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f00000000c0)={0x0, 0x7}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 237.26145ms ago: executing program 2 (id=6045): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) (async, rerun: 64) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) (async, rerun: 64) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xd96d8b7b53e1f130, 0xc}) mount(&(0x7f0000000300), &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) setsockopt$sock_void(r1, 0x1, 0x0, 0x0, 0x0) 236.011396ms ago: executing program 9 (id=6046): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000075bc700b00"/28], 0x48) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0x7, 0x4, 0x1, 0x5}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xa}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x40080) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x100, 0x7, 0x29335b58, 0x8, 0xfffffffb, 0xe6, 0xc, 0x4, 0x0, 0x2, 0x0, 0x2}}) r8 = dup(r6) write$UHID_INPUT(r8, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) (async) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) (async, rerun: 64) sendmsg$tipc(r10, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) (async, rerun: 64) r11 = dup3(r9, r10, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r11, 0x0, 0x0) (async, rerun: 64) setsockopt$TIPC_GROUP_LEAVE(r11, 0x10f, 0x88) (async, rerun: 64) r12 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r12, 0xc0481273, &(0x7f0000000180)={'\x00', 0x7ff, 0x0, 0x1, 0x5, 0x100000002, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r12, 0x1276, 0x66000300) (async, rerun: 32) r13 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRES32=r13], &(0x7f0000000640)='syzkaller\x00', 0x2}, 0x94) 234.708731ms ago: executing program 9 (id=6047): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x9}]]}}}]}, 0x38}, 0x1, 0x2000000000000000}, 0x4000) 161.800432ms ago: executing program 9 (id=6048): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000840)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x1000, 0x7, 0x7, 0x80000000, 0x2, 0x4d75, "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"}}, 0x1118) syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@gettaction={0x18, 0x32, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r6 = socket(0x1, 0x803, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000180)={0xa8ae3399c433be75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82}) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r7, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r10 = socket(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, &(0x7f0000000040)) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r9], 0x50}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r11) sendmsg$IEEE802154_ADD_IFACE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00f04a2a2b1def4ece8c9aa1cc4967a2925131f99ec5f236abaeffe8c742fc6c50886da3cf6575243c7e6d894fd76931cc7fd893d59e55f5db56abfa934227990000000000", @ANYRES16=r12, @ANYBLOB="eb7a2dbd7000fadbdf35210000000a0001007770616e3100000009001f007068793100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40892) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r13}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 161.437476ms ago: executing program 0 (id=6049): prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000805) r2 = syz_open_dev$loop(&(0x7f0000000140), 0xc, 0x4000) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000180)) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f0000000200)={0x7, 0x5, 0xff00}) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000003c0)={r3, 0x37, 0xc9c7, 0x4}) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000400)={0x7, r6, 0x1}) 108.019808ms ago: executing program 5 (id=6050): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000102, 0x0, 0x10}]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x9, 0x6, @dev}, 0x14) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3904feffffff000705769600000008000300", @ANYRES32=r9, @ANYBLOB='\b\x00k'], 0x24}}, 0x4004000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @private2, 0xffffffff}}, 0xfffc}, 0x90) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f000000d040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x34, r10, 0x8de13c6b70ae92c3, 0x41403, 0xfffffffe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xed}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x28000800}, 0x0) madvise(&(0x7f000031a000/0x2000)=nil, 0x2000, 0x65) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 0s ago: executing program 0 (id=6051): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x5c000003, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0xf, 0x5, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x10, 0x43, 0xfffffffffffffffd, 0xaf1, 0x10000000ffff, 0x1, 0x400000000000b3, 0x9ae6, 0x3ff, 0x4000000000000008, 0x80, 0x81, 0x3, 0x8, 0xe5, 0x5], 0x3000, 0x3276c3}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, r8, 0x303, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 0 (id=6052): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000010000000000000000070000090900020073797a31000000000500010007000000080009400000000504000880"], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) fsetxattr$security_ima(r0, &(0x7f0000000100), &(0x7f0000000140)=@sha1={0x1, "1ae3fe225808d1faf7e99748ff7915d7b4fdc60c"}, 0x15, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x40000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000440)=[r2], 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000300)=[r2], &(0x7f0000000180)=[0x4], 0x40000083}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): [ 350.214498][ T40] audit: type=1400 audit(2000000106.917:94320): avc: denied { execute } for pid=21972 comm="syz.7.4855" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 350.264243][T21978] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4855'. [ 350.419959][T21986] overlayfs: missing 'lowerdir' [ 350.467069][ T40] audit: type=1400 audit(2000000107.169:94321): avc: denied { bind } for pid=21987 comm="syz.8.4860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 350.649587][T21997] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4862'. [ 350.653723][T21997] 8021q: VLANs not supported on ip_vti0 [ 351.116367][T22012] syz_tun: left allmulticast mode [ 351.146287][T22014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4867'. [ 351.300037][ T40] audit: type=1326 audit(2000000107.936:94322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22026 comm="syz.7.4871" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88b2f8f6c9 code=0x0 [ 351.616743][ T40] audit: type=1400 audit(2000000108.235:94323): avc: denied { accept } for pid=22036 comm="syz.8.4874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 351.779234][T22045] SELinux: Context Ü is not valid (left unmapped). [ 351.824867][T22047] 8021q: VLANs not supported on sit0 [ 352.090195][T22064] syzkaller1: entered promiscuous mode [ 352.094282][T22064] syzkaller1: entered allmulticast mode [ 352.101239][T22064] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached [ 352.224325][T22067] fuse: Bad value for 'group_id' [ 352.226147][T22067] fuse: Bad value for 'group_id' [ 352.290971][T22071] program syz.2.4887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.293913][T22071] ata1.00: non-matching transfer count (0/2304) [ 352.303102][T22073] program syz.8.4888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.307838][T22073] ata1.00: non-matching transfer count (0/2304) [ 352.311786][T22075] program syz.8.4888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.314941][T22075] ata1.00: non-matching transfer count (6656/2304) [ 352.349766][T22077] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4890'. [ 352.459067][T22080] netlink: 'syz.8.4891': attribute type 11 has an invalid length. [ 352.633037][T22082] netlink: 'syz.8.4892': attribute type 21 has an invalid length. [ 352.662848][T22088] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20002 [ 352.681144][T22090] netlink: 'syz.5.4894': attribute type 21 has an invalid length. [ 352.681835][T22088] xfrm0 speed is unknown, defaulting to 1000 [ 352.684129][T22090] netlink: 'syz.5.4894': attribute type 21 has an invalid length. [ 352.729941][ T40] audit: type=1400 audit(2000000109.282:94324): avc: denied { lock } for pid=22087 comm="syz.8.4893" path="socket:[102363]" dev="sockfs" ino=102363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 353.047056][T22109] netlink: 'syz.2.4901': attribute type 14 has an invalid length. [ 353.049621][T22109] netlink: 'syz.2.4901': attribute type 14 has an invalid length. [ 353.205633][T22111] netlink: 'syz.2.4902': attribute type 2 has an invalid length. [ 353.549256][T22127] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 353.558339][T22128] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 353.858166][ T40] audit: type=1400 audit(2000000110.339:94325): avc: denied { create } for pid=22146 comm="syz.8.4912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 353.864338][ T40] audit: type=1400 audit(2000000110.339:94326): avc: denied { bind } for pid=22146 comm="syz.8.4912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 353.870570][ T40] audit: type=1400 audit(2000000110.339:94327): avc: denied { listen } for pid=22146 comm="syz.8.4912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 353.876868][ T40] audit: type=1400 audit(2000000110.339:94328): avc: denied { connect } for pid=22146 comm="syz.8.4912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 354.147565][T22162] loop2: detected capacity change from 0 to 7 [ 354.150229][T22162] Dev loop2: unable to read RDB block 7 [ 354.152204][T22162] loop2: AHDI p1 p2 p3 [ 354.153778][T22162] loop2: partition table partially beyond EOD, truncated [ 354.156704][T22162] loop2: p1 start 1601398130 is beyond EOD, truncated [ 354.158812][T22162] loop2: p2 start 1702059890 is beyond EOD, truncated [ 354.263393][T11592] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 354.311472][ T40] audit: type=1400 audit(2000000110.760:94329): avc: denied { sys_admin } for pid=22171 comm="syz.2.4921" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 354.321805][T22173] xfrm0 speed is unknown, defaulting to 1000 [ 354.444759][T11592] usb 13-1: Using ep0 maxpacket: 8 [ 354.447839][T11592] usb 13-1: config 0 interface 0 has no altsetting 0 [ 354.449963][T11592] usb 13-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 354.452901][T11592] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.457096][T11592] usb 13-1: config 0 descriptor?? [ 354.895710][T11592] mcp2221 0003:04D8:00DD.000D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 355.158937][T22200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.161979][T22200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.223687][ T24] usb 13-1: USB disconnect, device number 5 [ 355.315141][T22222] __nla_validate_parse: 5 callbacks suppressed [ 355.315156][T22222] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4938'. [ 355.320960][T22222] afs: Unknown parameter '/dev/video2' [ 355.372724][T22227] syzkaller0: entered promiscuous mode [ 355.374560][T22227] syzkaller0: entered allmulticast mode [ 355.600389][T22237] netlink: 'syz.7.4943': attribute type 1 has an invalid length. [ 355.603230][T22237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.647675][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 356.811451][T22245] overlayfs: unescaped trailing colons in lowerdir mount option. [ 356.881861][T22257] MPI: mpi too large (16392 bits) [ 357.167164][T22269] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20001 [ 357.170748][T22269] IPVS: nq: FWM 3 0x00000003 - no destination available [ 357.224124][T22290] netlink: 'syz.5.4961': attribute type 6 has an invalid length. [ 357.226853][T22290] netlink: 'syz.5.4961': attribute type 5 has an invalid length. [ 357.398679][T22303] netlink: 'syz.8.4963': attribute type 1 has an invalid length. [ 357.577113][T22313] overlay: ./file0 is not a directory [ 358.020399][T22284] orangefs_mount: mount request failed with -4 [ 358.262336][T22331] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 358.275153][T22331] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 358.357701][T22340] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 358.363547][T22340] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 358.363987][T22341] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 358.523562][T22344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4978'. [ 358.569955][T22346] xfrm0 speed is unknown, defaulting to 1000 [ 358.643699][T22353] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4981'. [ 358.791016][T22366] openvswitch: netlink: Flow key attribute not present in set flow. [ 358.871783][T22379] loop4: detected capacity change from 0 to 2560 [ 358.877120][T22379] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 358.948353][T22384] cdrom: dropping to single frame dma [ 359.102412][T22398] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4994'. [ 359.106167][T22398] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4994'. [ 359.112383][T22398] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4994'. [ 359.115201][T22398] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4994'. [ 359.152228][T22400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4989'. [ 359.250156][T22416] ieee802154 phy0 wpan0: encryption failed: -22 [ 359.303851][T22426] syzkaller0: entered promiscuous mode [ 359.305663][T22426] syzkaller0: entered allmulticast mode [ 359.323213][T22432] netlink: 'syz.5.5006': attribute type 1 has an invalid length. [ 359.356118][T22432] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 359.359988][T22432] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 359.363214][T22432] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 359.626623][T22468] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 359.907833][T22492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5026'. [ 359.913023][T22492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5026'. [ 359.986539][ T40] audit: type=1400 audit(2000000116.070:94330): avc: denied { read } for pid=22500 comm="syz.8.5030" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 359.993764][ T40] audit: type=1400 audit(2000000116.070:94331): avc: denied { open } for pid=22500 comm="syz.8.5030" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 360.001843][ T40] audit: type=1400 audit(2000000116.070:94332): avc: denied { ioctl } for pid=22500 comm="syz.8.5030" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 360.013416][T22501] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 360.015508][T22501] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 360.018636][T22501] vhci_hcd vhci_hcd.0: Device attached [ 360.021250][T22504] vhci_hcd: connection closed [ 360.021515][T19228] vhci_hcd: stop threads [ 360.026978][T19228] vhci_hcd: release socket [ 360.029452][T19228] vhci_hcd: disconnect device [ 360.515530][T22525] FAULT_INJECTION: forcing a failure. [ 360.515530][T22525] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 360.522192][T22525] CPU: 3 UID: 0 PID: 22525 Comm: syz.7.5038 Not tainted syzkaller #0 PREEMPT(full) [ 360.522216][T22525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 360.522227][T22525] Call Trace: [ 360.522246][T22525] [ 360.522253][T22525] dump_stack_lvl+0x16c/0x1f0 [ 360.522297][T22525] should_fail_ex+0x512/0x640 [ 360.522327][T22525] _copy_from_user+0x2e/0xd0 [ 360.522348][T22525] copy_msghdr_from_user+0x98/0x160 [ 360.522369][T22525] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 360.522402][T22525] ___sys_sendmsg+0xfe/0x1d0 [ 360.522445][T22525] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.522463][T22525] ? __lock_acquire+0x622/0x1c90 [ 360.522517][T22525] __sys_sendmsg+0x16d/0x220 [ 360.522537][T22525] ? __pfx___sys_sendmsg+0x10/0x10 [ 360.522567][T22525] ? fput+0x9b/0xd0 [ 360.522590][T22525] do_syscall_64+0xcd/0xfa0 [ 360.522615][T22525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.522632][T22525] RIP: 0033:0x7f88b2f8f6c9 [ 360.522646][T22525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.522661][T22525] RSP: 002b:00007f88b3d40038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.522678][T22525] RAX: ffffffffffffffda RBX: 00007f88b31e5fa0 RCX: 00007f88b2f8f6c9 [ 360.522689][T22525] RDX: 0000000020000800 RSI: 0000200000000100 RDI: 0000000000000003 [ 360.522700][T22525] RBP: 00007f88b3d40090 R08: 0000000000000000 R09: 0000000000000000 [ 360.522710][T22525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.522719][T22525] R13: 00007f88b31e6038 R14: 00007f88b31e5fa0 R15: 00007ffea353b918 [ 360.522744][T22525] [ 360.597600][ C3] vkms_vblank_simulate: vblank timer overrun [ 360.936409][ T53] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 360.960816][T22548] __nla_validate_parse: 1 callbacks suppressed [ 360.960827][T22548] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5047'. [ 360.973152][ T40] audit: type=1326 audit(2000000116.987:94333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22513 comm="syz.5.5034" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fb98f6c9 code=0x7fc00000 [ 360.995639][T22550] FAULT_INJECTION: forcing a failure. [ 360.995639][T22550] name failslab, interval 1, probability 0, space 0, times 1 [ 360.999569][T22550] CPU: 0 UID: 0 PID: 22550 Comm: syz.8.5048 Not tainted syzkaller #0 PREEMPT(full) [ 360.999584][T22550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 360.999591][T22550] Call Trace: [ 360.999603][T22550] [ 360.999607][T22550] dump_stack_lvl+0x16c/0x1f0 [ 360.999657][T22550] should_fail_ex+0x512/0x640 [ 360.999683][T22550] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 360.999705][T22550] should_failslab+0xc2/0x120 [ 360.999718][T22550] kmem_cache_alloc_node_noprof+0x78/0x770 [ 360.999734][T22550] ? __alloc_skb+0x2b2/0x380 [ 360.999753][T22550] ? __alloc_skb+0x2b2/0x380 [ 360.999786][T22550] ? __pfx_netlink_insert+0x10/0x10 [ 360.999801][T22550] __alloc_skb+0x2b2/0x380 [ 360.999814][T22550] ? __pfx___alloc_skb+0x10/0x10 [ 360.999827][T22550] ? netlink_autobind.isra.0+0x158/0x370 [ 360.999845][T22550] netlink_alloc_large_skb+0x69/0x140 [ 360.999861][T22550] netlink_sendmsg+0x698/0xdd0 [ 360.999879][T22550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.999900][T22550] ____sys_sendmsg+0xa98/0xc70 [ 360.999911][T22550] ? copy_msghdr_from_user+0x10a/0x160 [ 360.999927][T22550] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.999945][T22550] ___sys_sendmsg+0x134/0x1d0 [ 360.999960][T22550] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.999972][T22550] ? __lock_acquire+0x622/0x1c90 [ 361.000006][T22550] __sys_sendmsg+0x16d/0x220 [ 361.000020][T22550] ? __pfx___sys_sendmsg+0x10/0x10 [ 361.000039][T22550] ? fput+0x9b/0xd0 [ 361.000054][T22550] do_syscall_64+0xcd/0xfa0 [ 361.000072][T22550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.000082][T22550] RIP: 0033:0x7f4275b8f6c9 [ 361.000091][T22550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.000101][T22550] RSP: 002b:00007f4276974038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.000112][T22550] RAX: ffffffffffffffda RBX: 00007f4275de5fa0 RCX: 00007f4275b8f6c9 [ 361.000118][T22550] RDX: 0000000020000800 RSI: 0000200000000100 RDI: 0000000000000003 [ 361.000124][T22550] RBP: 00007f4276974090 R08: 0000000000000000 R09: 0000000000000000 [ 361.000130][T22550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.000136][T22550] R13: 00007f4275de6038 R14: 00007f4275de5fa0 R15: 00007ffe37f5faa8 [ 361.000150][T22550] [ 361.061550][T22555] macvlan0: left allmulticast mode [ 361.078229][T22555] netlink: 'syz.5.5050': attribute type 2 has an invalid length. [ 361.098611][ T53] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 361.101943][ T53] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.105326][ T53] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.108674][ T53] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 361.113759][ T53] usb 12-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 361.116725][ T53] usb 12-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 361.120502][ T53] usb 12-1: Manufacturer: syz [ 361.123261][ T53] usb 12-1: config 0 descriptor?? [ 361.185218][ T40] audit: type=1400 audit(2000000117.192:94334): avc: denied { watch_with_perm } for pid=22570 comm="syz.8.5055" path="/189/bus" dev="tmpfs" ino=1019 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 361.213131][T22573] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 361.215203][T22573] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 361.221127][T22573] vhci_hcd vhci_hcd.0: Device attached [ 361.223095][T22574] usbip_core: unknown command [ 361.224744][T22574] vhci_hcd: unknown pdu 795108726 [ 361.226570][T22574] usbip_core: unknown command [ 361.228276][ T6702] vhci_hcd: stop threads [ 361.229734][ T6702] vhci_hcd: release socket [ 361.231182][ T6702] vhci_hcd: disconnect device [ 361.560690][ T53] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 361.565128][ T53] appleir 0003:05AC:8243.000E: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 361.840736][T22582] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5058'. [ 362.248015][T22601] tmpfs: Unknown parameter 'grpquota_block_hùfè1«&.ardlimit' [ 362.960709][T22618] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5070'. [ 363.059152][T22618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.066797][T22618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.073063][T22618] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 363.073073][T22627] FAULT_INJECTION: forcing a failure. [ 363.073073][T22627] name failslab, interval 1, probability 0, space 0, times 0 [ 363.080364][T22627] CPU: 2 UID: 0 PID: 22627 Comm: syz.2.5071 Not tainted syzkaller #0 PREEMPT(full) [ 363.080387][T22627] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 363.080397][T22627] Call Trace: [ 363.080404][T22627] [ 363.080411][T22627] dump_stack_lvl+0x16c/0x1f0 [ 363.080442][T22627] should_fail_ex+0x512/0x640 [ 363.080464][T22627] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 363.080490][T22627] should_failslab+0xc2/0x120 [ 363.080539][T22627] kmem_cache_alloc_noprof+0x75/0x6e0 [ 363.080567][T22627] ? skb_clone+0x190/0x3f0 [ 363.080594][T22627] ? skb_clone+0x190/0x3f0 [ 363.080615][T22627] skb_clone+0x190/0x3f0 [ 363.080639][T22627] netlink_deliver_tap+0xabd/0xd30 [ 363.080670][T22627] netlink_unicast+0x64c/0x870 [ 363.080698][T22627] ? __pfx_netlink_unicast+0x10/0x10 [ 363.080733][T22627] netlink_sendmsg+0x8c8/0xdd0 [ 363.080761][T22627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.080796][T22627] ____sys_sendmsg+0xa98/0xc70 [ 363.080814][T22627] ? copy_msghdr_from_user+0x10a/0x160 [ 363.080838][T22627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.080868][T22627] ___sys_sendmsg+0x134/0x1d0 [ 363.080893][T22627] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.080914][T22627] ? __lock_acquire+0x622/0x1c90 [ 363.080973][T22627] __sys_sendmsg+0x16d/0x220 [ 363.080997][T22627] ? __pfx___sys_sendmsg+0x10/0x10 [ 363.081031][T22627] ? fput+0x9b/0xd0 [ 363.081063][T22627] do_syscall_64+0xcd/0xfa0 [ 363.081090][T22627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.081107][T22627] RIP: 0033:0x7efe8c98f6c9 [ 363.081126][T22627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.081142][T22627] RSP: 002b:00007efe8d750038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.081159][T22627] RAX: ffffffffffffffda RBX: 00007efe8cbe5fa0 RCX: 00007efe8c98f6c9 [ 363.081175][T22627] RDX: 0000000020000800 RSI: 0000200000000100 RDI: 0000000000000003 [ 363.081186][T22627] RBP: 00007efe8d750090 R08: 0000000000000000 R09: 0000000000000000 [ 363.081196][T22627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.081206][T22627] R13: 00007efe8cbe6038 R14: 00007efe8cbe5fa0 R15: 00007ffe373affc8 [ 363.081232][T22627] [ 363.083110][T22618] bond0 (unregistering): Released all slaves [ 363.223020][T22631] vim2m vim2m.0: vidioc_s_fmt queue busy [ 363.226110][T22631] netlink: 'syz.2.5073': attribute type 4 has an invalid length. [ 363.323620][T22637] input: syz0 as /devices/virtual/input/input35 [ 363.457939][T22647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5078'. [ 363.550418][T22650] netlink: 'syz.7.5079': attribute type 32 has an invalid length. [ 363.710220][T22668] netlink: 92 bytes leftover after parsing attributes in process `syz.7.5083'. [ 363.716673][T22670] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5084'. [ 363.741494][T22673] umip_printk: 1 callbacks suppressed [ 363.813115][T22695] bridge0: entered promiscuous mode [ 363.815090][ T6466] usb 12-1: USB disconnect, device number 6 [ 363.816392][T22695] macsec1: entered promiscuous mode [ 363.908022][T22704] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 363.910283][T22705] syzkaller1: entered promiscuous mode [ 363.912474][T22705] syzkaller1: entered allmulticast mode [ 363.969985][T22704] xt_nat: multiple ranges no longer supported [ 363.973626][T22704] zonefs (nbd2) ERROR: Not a zoned block device [ 364.067217][T22711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5096'. [ 364.091944][ T40] audit: type=1400 audit(2000000119.913:94335): avc: denied { read } for pid=22710 comm="syz.2.5096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 364.620973][T22726] xt_hashlimit: overflow, rate too high: 0 [ 364.674134][T22735] futex_wake_op: syz.5.5106 tries to shift op by -1; fix this program [ 364.705940][T22739] openvswitch: netlink: IP tunnel dst address not specified [ 364.717240][T22739] fuse: Bad value for 'fd' [ 364.763893][T22745] netlink: 'syz.7.5107': attribute type 8 has an invalid length. [ 364.811881][T22751] netlink: 'syz.5.5111': attribute type 11 has an invalid length. [ 364.929671][T22767] binder: 22766:22767 ioctl c00c620f 200000000000 returned -22 [ 364.961417][T22773] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5119'. [ 365.080322][T22783] overlayfs: missing 'lowerdir' [ 365.130399][T22785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=22785 comm=syz.7.5122 [ 365.135661][T22785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=22785 comm=syz.7.5122 [ 365.438070][T22825] ntfs3(sr0): Primary boot signature is not NTFS. [ 365.441476][T22825] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 365.535501][ T3252] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 365.536102][ T5935] Bluetooth: hci1: command 0x0c1a tx timeout [ 365.537661][ T3252] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 365.546780][T22828] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 365.935954][T22851] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 365.938126][T22851] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 365.940615][T22851] vhci_hcd vhci_hcd.0: Device attached [ 366.134480][ T5996] vhci_hcd: vhci_device speed not set [ 366.198422][ T5996] usb 51-1: new full-speed USB device number 2 using vhci_hcd [ 366.711614][T22852] vhci_hcd: connection reset by peer [ 366.715447][T19209] vhci_hcd: stop threads [ 366.716908][T19209] vhci_hcd: release socket [ 366.719154][T19209] vhci_hcd: disconnect device [ 366.734778][T22857] ip6gretap1: entered promiscuous mode [ 366.736590][T22857] ip6gretap1: entered allmulticast mode [ 366.895159][T22874] afs: Unknown parameter 'dynile0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 367.759992][ T5935] Bluetooth: hci5: command 0x0419 tx timeout [ 367.761995][ T3252] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 367.763908][ T3252] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 368.367266][T22931] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5163'. [ 368.508347][ T40] audit: type=1400 audit(2000000380.028:94336): avc: denied { mounton } for pid=22940 comm="syz.5.5167" path="/441/file0" dev="tmpfs" ino=2381 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 368.516805][ T40] audit: type=1400 audit(2000000380.037:94337): avc: denied { append } for pid=22940 comm="syz.5.5167" name="file0" dev="tmpfs" ino=2381 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 368.524010][ T40] audit: type=1400 audit(2000000380.037:94338): avc: denied { setattr } for pid=22940 comm="syz.5.5167" path="/441/file0" dev="tmpfs" ino=2381 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 368.628088][T22950] overlay: filesystem on ./file0 not supported [ 369.616995][ T40] audit: type=1400 audit(2000000381.066:94339): avc: denied { map } for pid=22968 comm="syz.5.5177" path="socket:[107173]" dev="sockfs" ino=107173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 369.629283][ T40] audit: type=1400 audit(2000000381.066:94340): avc: denied { read accept } for pid=22968 comm="syz.5.5177" path="socket:[107173]" dev="sockfs" ino=107173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 369.760062][T22977] netlink: 'syz.5.5181': attribute type 23 has an invalid length. [ 369.984770][ T5935] Bluetooth: hci0: command 0x0c1a tx timeout [ 369.986970][ T3252] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 369.988877][ T3252] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 370.809742][T22993] xfrm0 speed is unknown, defaulting to 1000 [ 371.011969][T23007] tipc: Resetting bearer [ 371.051822][T23007] tipc: Disabling bearer [ 371.267594][T23017] 9pnet_virtio: no channels available for device syz [ 371.696140][ T5996] vhci_hcd: vhci_device speed not set [ 372.209241][ T5935] Bluetooth: hci3: command 0x040f tx timeout [ 372.209424][ T3252] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 372.213804][ T3252] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 372.220923][T22814] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 372.272409][T23026] openvswitch: netlink: nsh attribute has 65531 unknown bytes. [ 372.278016][T23026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.310721][ T6018] hid (null): bogus close delimiter [ 372.312470][ T6018] hid (null): invalid report_count 913897540 [ 372.315454][ T6018] hid-generic 0004:0009:0001.000F: bogus close delimiter [ 372.317822][ T6018] hid-generic 0004:0009:0001.000F: item 0 0 2 10 parsing failed [ 372.320535][ T6018] hid-generic 0004:0009:0001.000F: probe with driver hid-generic failed with error -22 [ 372.402118][ T40] audit: type=1400 audit(2000000383.665:94341): avc: denied { setattr } for pid=23038 comm="syz.7.5202" name="SMC" dev="sockfs" ino=108827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 372.415486][ T40] audit: type=1400 audit(2000000383.693:94342): avc: denied { getopt } for pid=23035 comm="syz.5.5200" lport=54004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 372.424531][ T40] audit: type=1400 audit(2000000383.693:94343): avc: denied { getopt } for pid=23035 comm="syz.5.5200" lport=54004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 372.438087][ T40] audit: type=1400 audit(2000000383.712:94344): avc: denied { read write } for pid=20006 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 372.447431][ T40] audit: type=1400 audit(2000000383.712:94345): avc: denied { open } for pid=20006 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 372.766726][T23083] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 372.964532][T23110] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5220'. [ 372.967337][T23110] openvswitch: netlink: Flow key attr not present in new flow. [ 372.990830][T23112] mkiss: ax0: crc mode is auto. [ 373.056037][T23116] vlan4: entered promiscuous mode [ 373.057754][T23116] vlan4: entered allmulticast mode [ 373.059471][T23116] hsr_slave_1: entered allmulticast mode [ 373.063235][T23116] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5223'. [ 373.404160][T23125] random: crng reseeded on system resumption [ 373.412630][T23125] Restarting kernel threads ... [ 373.414962][T23125] Done restarting kernel threads. [ 373.565195][T23136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5230'. [ 373.905740][T23143] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5232'. [ 373.917802][T23143] macsec1: entered allmulticast mode [ 373.922876][T23143] bridge0: port 1(macsec1) entered blocking state [ 373.925170][T23143] bridge0: port 1(macsec1) entered disabled state [ 373.964193][ T40] kauditd_printk_skb: 98 callbacks suppressed [ 373.964211][ T40] audit: type=1400 audit(2000000385.142:94444): avc: denied { mount } for pid=23142 comm="syz.5.5232" name="/" dev="9p" ino=71827629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 373.973533][ T40] audit: type=1400 audit(2000000385.142:94445): avc: denied { add_name } for pid=23142 comm="syz.5.5232" name="cpuset.memory_pressure_enabled" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 373.982122][ T40] audit: type=1400 audit(2000000385.142:94446): avc: denied { create } for pid=23142 comm="syz.5.5232" name="cpuset.memory_pressure_enabled" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 373.990542][ T40] audit: type=1400 audit(2000000385.142:94447): avc: denied { associate } for pid=23142 comm="syz.5.5232" name="cpuset.memory_pressure_enabled" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 373.998308][ T40] audit: type=1400 audit(2000000385.152:94448): avc: denied { read append } for pid=23142 comm="syz.5.5232" name="cpuset.memory_pressure_enabled" dev="9p" ino=71827925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 374.007322][ T40] audit: type=1400 audit(2000000385.152:94449): avc: denied { open } for pid=23142 comm="syz.5.5232" path="/472/file0/cpuset.memory_pressure_enabled" dev="9p" ino=71827925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 374.015157][ T40] audit: type=1400 audit(2000000385.161:94450): avc: denied { write } for pid=23142 comm="syz.5.5232" name="cpuset.memory_pressure_enabled" dev="9p" ino=71827925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 374.023233][ T40] audit: type=1400 audit(2000000385.180:94451): avc: denied { setopt } for pid=23145 comm="syz.7.5233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 374.031396][ T40] audit: type=1400 audit(2000000385.189:94452): avc: denied { unmount } for pid=19017 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 374.062946][ T40] audit: type=1400 audit(2000000385.226:94453): avc: denied { mount } for pid=23149 comm="syz.8.5236" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 374.070267][T23150] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5236'. [ 374.129959][T23155] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 374.182358][T23160] netlink: 'syz.8.5240': attribute type 10 has an invalid length. [ 374.353115][T23177] netlink: 'syz.5.5244': attribute type 10 has an invalid length. [ 374.356200][T23177] batadv0: left allmulticast mode [ 374.368613][T23177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.371290][T23177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.427205][T23184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5247'. [ 374.451963][T23191] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5248'. [ 374.533467][T23198] netlink: 'syz.5.5250': attribute type 12 has an invalid length. [ 374.565395][T23204] Invalid ELF header type: 0 != 1 [ 374.583725][T23191] nbd0: detected capacity change from 0 to 63 [ 374.588223][T23203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5252'. [ 374.589798][ T5935] block nbd0: Receive control failed (result -32) [ 374.620212][T23215] lo: entered allmulticast mode [ 374.621366][T23214] bpf: Bad value for 'uid' [ 374.622351][T23215] tunl0: entered allmulticast mode [ 374.626707][T23215] gre0: entered allmulticast mode [ 374.629557][T23215] gretap0: entered allmulticast mode [ 374.632508][T23215] erspan0: entered allmulticast mode [ 374.635567][T23215] ip_vti0: entered allmulticast mode [ 374.638207][T23215] ip6_vti0: entered allmulticast mode [ 374.640714][T23215] sit0: entered allmulticast mode [ 374.643035][T23215] ip6tnl0: entered allmulticast mode [ 374.645382][T23215] ip6gre0: entered allmulticast mode [ 374.648313][T23215] syz_tun: entered allmulticast mode [ 374.650769][T23215] ip6gretap0: entered allmulticast mode [ 374.654076][T23215] bridge0: entered allmulticast mode [ 374.656635][T23215] vcan0: entered allmulticast mode [ 374.659305][T23215] bond0: entered allmulticast mode [ 374.660974][T23215] bond_slave_0: entered allmulticast mode [ 374.662831][T23215] bond_slave_1: entered allmulticast mode [ 374.668288][T23215] team0: entered allmulticast mode [ 374.671736][T23234] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5257'. [ 374.671821][T23215] team_slave_0: entered allmulticast mode [ 374.676437][T23215] team_slave_1: entered allmulticast mode [ 374.683487][T23215] dummy0: entered allmulticast mode [ 374.688226][T23215] nlmon0: entered allmulticast mode [ 374.690945][T23215] caif0: entered allmulticast mode [ 374.692782][T23215] batadv0: entered allmulticast mode [ 374.695771][T23215] vxcan0: entered allmulticast mode [ 374.698078][T23215] vxcan1: entered allmulticast mode [ 374.700315][T23215] veth0: entered allmulticast mode [ 374.705659][T23215] veth1: entered allmulticast mode [ 374.709449][T23215] wg0: entered allmulticast mode [ 374.711764][T23215] wg1: entered allmulticast mode [ 374.714019][T23215] wg2: entered allmulticast mode [ 374.716500][T23215] veth0_to_bridge: entered allmulticast mode [ 374.720809][T23215] veth1_to_bridge: entered allmulticast mode [ 374.725571][T23215] veth0_to_bond: entered allmulticast mode [ 374.729554][T23215] veth1_to_bond: entered allmulticast mode [ 374.734467][T23215] veth0_to_team: entered allmulticast mode [ 374.738781][T23215] veth1_to_team: entered allmulticast mode [ 374.743046][T23215] veth0_to_batadv: entered allmulticast mode [ 374.747063][T23215] batadv_slave_0: entered allmulticast mode [ 374.750581][T23215] veth1_to_batadv: entered allmulticast mode [ 374.755639][T23215] batadv_slave_1: entered allmulticast mode [ 374.759480][T23215] xfrm0: entered allmulticast mode [ 374.761783][T23215] veth0_to_hsr: entered allmulticast mode [ 374.766449][T23215] veth1_to_hsr: entered allmulticast mode [ 374.770927][T23215] veth1_virt_wifi: entered allmulticast mode [ 374.774449][T23241] netlink: 'syz.5.5258': attribute type 1 has an invalid length. [ 374.774468][T23215] veth0_virt_wifi: entered allmulticast mode [ 374.781472][T23215] veth1_macvtap: entered allmulticast mode [ 374.785079][T23215] veth0_macvtap: entered allmulticast mode [ 374.788921][T23215] macvtap0: entered allmulticast mode [ 374.791461][T23215] macsec0: entered allmulticast mode [ 374.793971][T23215] geneve0: entered allmulticast mode [ 374.796299][T23215] geneve1: entered allmulticast mode [ 374.800059][T23215] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 374.807782][T23215] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 374.811632][T23215] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 374.814712][T23215] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 374.818349][T23215] mac80211_hwsim hwsim49 wlan0: entered allmulticast mode [ 374.821002][T23215] mac80211_hwsim hwsim50 wlan1: entered allmulticast mode [ 374.823279][T23215] ip6erspan0: entered allmulticast mode [ 374.825067][T23215] bond1: entered allmulticast mode [ 374.827463][T23215] vlan2: entered allmulticast mode [ 374.829187][T23215] veth2: entered allmulticast mode [ 374.829300][T23242] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5258'. [ 374.831045][T23215] veth3: entered allmulticast mode [ 374.833674][T23242] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5258'. [ 374.835485][T23215] @: entered allmulticast mode [ 374.840946][T23215] syztnl1: entered allmulticast mode [ 374.842814][T23215] ip6tnl1: entered allmulticast mode [ 374.844691][T23215] veth4: entered allmulticast mode [ 374.846504][T23215] veth5: entered allmulticast mode [ 375.040132][T23259] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 375.075153][T23263] macvlan0: entered promiscuous mode [ 375.077550][T23263] macvlan0: entered allmulticast mode [ 375.079273][T23263] veth1_vlan: entered allmulticast mode [ 375.082832][T23263] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5265'. [ 375.097021][ T5996] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 375.141362][T23276] netlink: 596 bytes leftover after parsing attributes in process `syz.7.5269'. [ 375.183772][T23251] cgroup: Unknown subsys name 'cpuset' [ 375.267370][T23287] netlink: 'syz.2.5272': attribute type 10 has an invalid length. [ 375.271185][T23287] team0: left allmulticast mode [ 375.275968][T23287] team0: Cannot enslave team device to itself [ 375.288626][T23287] geneve2: entered promiscuous mode [ 375.290842][T23287] geneve2: entered allmulticast mode [ 375.293728][ T5996] usb 13-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 375.296633][ T5996] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.299145][ T5996] usb 13-1: Product: syz [ 375.301321][ T5996] usb 13-1: Manufacturer: syz [ 375.302801][ T5996] usb 13-1: SerialNumber: syz [ 375.308492][ T5996] usb 13-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 375.327158][ T5996] usb 13-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 375.531473][T23299] random: crng reseeded on system resumption [ 375.544461][T23299] bridge0: port 3(batadv0) entered disabled state [ 375.549377][T23299] bridge_slave_1: left allmulticast mode [ 375.551006][T23299] bridge_slave_1: left promiscuous mode [ 375.552947][T23299] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.557317][T23299] bridge_slave_0: left allmulticast mode [ 375.559578][T23299] bridge_slave_0: left promiscuous mode [ 375.561816][T23299] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.783342][T23304] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 376.489725][ T5996] ath9k_htc 13-1:1.0: ath9k_htc: Target is unresponsive [ 376.492274][ T5996] ath9k_htc: Failed to initialize the device [ 376.512076][ T5996] usb 13-1: ath9k_htc: USB layer deinitialized [ 376.734355][ T54] usb 13-1: USB disconnect, device number 6 [ 376.762592][T23334] tmpfs: Bad value for 'mpol' [ 376.769770][T23334] erspan0: entered promiscuous mode [ 376.772402][T23334] gretap0: entered promiscuous mode [ 377.359749][T23373] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 377.626351][T23391] overlayfs: missing 'lowerdir' [ 377.655541][T23395] netlink: 'syz.5.5310': attribute type 2 has an invalid length. [ 377.702161][T23399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=23399 comm=syz.8.5309 [ 377.720158][T23399] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 378.679054][T23415] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 379.026952][T23462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.029228][T23462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.031998][T23462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.034634][T23462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.470260][ T40] kauditd_printk_skb: 149 callbacks suppressed [ 379.470271][ T40] audit: type=1400 audit(2000000390.275:94603): avc: denied { read } for pid=23481 comm="syz.8.5339" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 379.479323][ T40] audit: type=1400 audit(2000000390.275:94604): avc: denied { open } for pid=23481 comm="syz.8.5339" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 379.564492][ T40] audit: type=1400 audit(2000000390.369:94605): avc: denied { write } for pid=23486 comm="syz.8.5340" name="unix" dev="proc" ino=4026533709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 379.746134][T23494] exFAT-fs (nbd8): unable to read boot sector [ 379.748007][T23494] exFAT-fs (nbd8): failed to read boot sector [ 379.750019][T23494] exFAT-fs (nbd8): failed to recognize exfat type [ 379.754462][T23495] exFAT-fs (nbd8): unable to read boot sector [ 379.756527][T23495] exFAT-fs (nbd8): failed to read boot sector [ 379.758506][T23495] exFAT-fs (nbd8): failed to recognize exfat type [ 379.796977][T23497] __nla_validate_parse: 15 callbacks suppressed [ 379.796989][T23497] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5343'. [ 379.852658][ T40] audit: type=1400 audit(2000000390.640:94606): avc: denied { create } for pid=23493 comm="syz.8.5342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 379.860372][ T40] audit: type=1400 audit(2000000390.640:94607): avc: denied { create } for pid=23493 comm="syz.8.5342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 379.867591][ T40] audit: type=1400 audit(2000000390.649:94608): avc: denied { setopt } for pid=23500 comm="syz.5.5344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 379.875671][ T40] audit: type=1400 audit(2000000390.659:94609): avc: denied { write } for pid=23500 comm="syz.5.5344" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 379.934552][ T40] audit: type=1400 audit(2000000390.715:94610): avc: denied { sqpoll } for pid=23504 comm="syz.5.5345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 379.997400][T23513] netlink: 'syz.8.5347': attribute type 1 has an invalid length. [ 380.002704][ T40] audit: type=1400 audit(2000000390.780:94611): avc: denied { name_bind } for pid=23512 comm="syz.8.5347" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 380.143058][ T40] audit: type=1400 audit(2000000390.911:94612): avc: denied { ioctl } for pid=23520 comm="syz.5.5351" path="socket:[110177]" dev="sockfs" ino=110177 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 380.301726][T23535] autofs: Bad value for 'fd' [ 380.347596][T23537] netlink: 'syz.8.5354': attribute type 1 has an invalid length. [ 380.361211][T23537] 8021q: adding VLAN 0 to HW filter on device bond1 [ 380.378925][T23537] 8021q: adding VLAN 0 to HW filter on device bond1 [ 380.382448][T23537] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 380.386463][T23537] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 380.436575][T23541] veth5: entered promiscuous mode [ 380.440872][T23541] bond1: (slave veth5): Enslaving as an active interface with a down link [ 380.448707][T23542] batman_adv: batadv0: Adding interface: gretap2 [ 380.450740][T23542] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.453841][T23537] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5354'. [ 380.458892][T23542] batman_adv: batadv0: Interface activated: gretap2 [ 380.465448][T23537] 8021q: adding VLAN 0 to HW filter on device bond1 [ 380.528030][T23554] netlink: 'syz.8.5362': attribute type 12 has an invalid length. [ 380.685377][T23563] mkiss: ax0: crc mode is auto. [ 380.694596][T23563] pim6reg1: entered promiscuous mode [ 380.696383][T23563] pim6reg1: entered allmulticast mode [ 381.276102][T23591] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=23591 comm=syz.8.5375 [ 381.588795][ T24] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 381.752541][ T24] usb 13-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 381.755879][ T24] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.758381][ T24] usb 13-1: Product: syz [ 381.759782][ T24] usb 13-1: Manufacturer: syz [ 381.761350][ T24] usb 13-1: SerialNumber: syz [ 381.764219][ T24] usb 13-1: config 0 descriptor?? [ 381.982970][ T24] usb 13-1: USB disconnect, device number 7 [ 382.236420][T23634] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5386'. [ 382.384441][T23647] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 382.386532][T23649] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5390'. [ 382.393546][T23649] openvswitch: netlink: Flow key attr not present in new flow. [ 382.429492][T23655] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5392'. [ 382.445799][T23655] 8021q: adding VLAN 0 to HW filter on device bond6 [ 382.451429][T23655] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5392'. [ 382.454277][T23655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5392'. [ 382.525066][T23663] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.5395'. [ 382.527989][T23663] ksmbd: Unknown IPC event: 3, ignore. [ 382.564959][T23672] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5398'. [ 382.582775][T23672] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5398'. [ 382.726150][T23678] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 382.876898][T23695] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 382.953993][T23701] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 382.997379][T23704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23704 comm=syz.5.5409 [ 383.144252][T23713] netlink: 'syz.5.5412': attribute type 11 has an invalid length. [ 383.181780][T23718] sit0: left allmulticast mode [ 383.500293][T23729] veth1_to_bond: entered allmulticast mode [ 383.564387][T23729] veth1_to_bond: left allmulticast mode [ 383.644305][T23738] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 383.649103][T23738] netlink: 'syz.8.5420': attribute type 6 has an invalid length. [ 383.729542][T23744] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 383.731788][T23744] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode [ 383.748840][T23744] tmpfs: Unknown parameter 'usrquotauencer' [ 383.814215][T23751] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23751 comm=syz.7.5427 [ 383.961771][T23772] XFS (nullb0): Invalid superblock magic number [ 384.225069][T23787] netlink: 'syz.8.5437': attribute type 11 has an invalid length. [ 384.365706][T23799] xfrm0 speed is unknown, defaulting to 1000 [ 384.602402][T23811] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 384.651502][T23809] program syz.8.5443 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 384.689133][T23817] tmpfs: Invalid uid '0x00000000ffffffff' [ 385.086236][ T24] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 385.257450][ T24] usb 12-1: Using ep0 maxpacket: 8 [ 385.265118][ T24] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 385.268591][ T24] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.271831][ T24] usb 12-1: Product: syz [ 385.273639][ T24] usb 12-1: Manufacturer: syz [ 385.275369][ T24] usb 12-1: SerialNumber: syz [ 385.310517][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 385.310529][ T40] audit: type=1400 audit(2000000395.736:94659): avc: denied { read } for pid=23839 comm="syz.5.5454" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 385.346660][T23844] netlink: 'syz.5.5455': attribute type 30 has an invalid length. [ 385.360888][T23844] bond7: option arp_missed_max: invalid value (0) [ 385.362920][T23844] bond7: option arp_missed_max: allowed values 1 - 255 [ 385.368004][T23844] bond7 (unregistering): Released all slaves [ 385.401359][ T40] audit: type=1400 audit(2000000395.829:94660): avc: denied { bind } for pid=23843 comm="syz.5.5455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 385.407780][ T40] audit: type=1400 audit(2000000395.829:94661): avc: denied { node_bind } for pid=23843 comm="syz.5.5455" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 385.455169][ T40] audit: type=1400 audit(2000000395.876:94662): avc: denied { bind } for pid=23854 comm="syz.5.5457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 385.461746][ T40] audit: type=1400 audit(2000000395.876:94663): avc: denied { listen } for pid=23854 comm="syz.5.5457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 385.467800][ T40] audit: type=1400 audit(2000000395.876:94664): avc: denied { connect } for pid=23854 comm="syz.5.5457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 385.474941][ T40] audit: type=1400 audit(2000000395.876:94665): avc: denied { accept } for pid=23854 comm="syz.5.5457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 385.483172][ T40] audit: type=1400 audit(2000000395.876:94666): avc: denied { read } for pid=23854 comm="syz.5.5457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 385.494895][ T24] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 385.573913][T23867] overlayfs: failed to resolve './file1': -2 [ 385.580077][T23867] __nla_validate_parse: 7 callbacks suppressed [ 385.580087][T23867] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5461'. [ 385.592055][ T40] audit: type=1400 audit(2000000396.007:94667): avc: denied { read } for pid=23866 comm="syz.5.5461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 385.629720][T23873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5462'. [ 385.632721][T23873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5462'. [ 385.636986][T23873] Cannot find del_set index 2 as target [ 385.704332][ T40] audit: type=1400 audit(2000000396.110:94668): avc: denied { getopt } for pid=23877 comm="syz.5.5464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 385.705601][T23878] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5464'. [ 386.331667][T23891] overlayfs: failed lookup in lower (newroot/292, name='bus', err=-40): overlapping layers [ 386.336018][T23892] overlayfs: failed lookup in lower (newroot/292, name='file1', err=-40): overlapping layers [ 386.340200][T23888] overlayfs: failed lookup in lower (newroot/292, name='bus', err=-40): overlapping layers [ 386.392776][T23895] xfrm0 speed is unknown, defaulting to 1000 [ 386.610360][T23910] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5473'. [ 386.775915][T23917] qnx4: unable to read the superblock [ 386.837010][T23925] IPv6: NLM_F_CREATE should be specified when creating new route [ 387.020305][T23958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5486'. [ 387.161050][T23975] mac80211_hwsim hwsim45 : renamed from wlan1 [ 387.348124][T23996] netlink: 'syz.5.5498': attribute type 4 has an invalid length. [ 387.359275][T23996] netlink: 'syz.5.5498': attribute type 4 has an invalid length. [ 387.409406][T24002] loop5: detected capacity change from 0 to 7 [ 387.434745][T24011] x_tables: duplicate underflow at hook 1 [ 387.517350][T24016] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.600340][T24016] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.682810][T24016] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.743205][T24016] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.880745][T19229] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.889764][T19229] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.897024][T19229] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.904508][T19229] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.004799][T24023] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5509'. [ 388.017168][ T53] usb 12-1: USB disconnect, device number 7 [ 388.024520][ T53] usblp0: removed [ 388.077492][T24034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5512'. [ 388.121676][T24043] fuse: Bad value for 'group_id' [ 388.123356][T24043] fuse: Bad value for 'group_id' [ 388.141854][T24045] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24045 comm=syz.2.5516 [ 388.173608][T24052] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.182578][T24052] program syz.2.5518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 388.223280][T24056] netlink: 220 bytes leftover after parsing attributes in process `syz.8.5519'. [ 388.270921][T24070] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5522'. [ 388.280438][T24074] support for cryptoloop has been removed. Use dm-crypt instead. [ 388.562131][ T5996] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 388.711772][ T5996] usb 13-1: device descriptor read/64, error -71 [ 388.970132][ T5996] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 389.121278][ T5996] usb 13-1: device descriptor read/64, error -71 [ 389.251013][ T5996] usb usb13-port1: attempt power cycle [ 389.606480][T24139] xt_hashlimit: max too large, truncated to 1048576 [ 389.627945][ T5996] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 389.650637][ T5996] usb 13-1: device descriptor read/8, error -71 [ 389.874024][T24168] netlink: 'syz.7.5555': attribute type 1 has an invalid length. [ 389.893983][T24168] 8021q: adding VLAN 0 to HW filter on device bond2 [ 389.903689][T24168] vlan2: entered promiscuous mode [ 389.905670][T24168] bond2: entered promiscuous mode [ 389.911780][T24168] gretap3: entered promiscuous mode [ 389.912506][T24172] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 389.917109][T24168] bond2: (slave gretap3): making interface the new active one [ 389.921255][T24168] bond2: (slave gretap3): Enslaving as an active interface with an up link [ 389.929885][ T5996] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 389.962989][ T5996] usb 13-1: device descriptor read/8, error -71 [ 390.092119][ T5996] usb usb13-port1: unable to enumerate USB device [ 390.118990][T24181] Cannot find del_set index 29 as target [ 390.699738][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 390.699754][ T40] audit: type=1400 audit(2000524685.773:94704): avc: denied { append } for pid=24205 comm="syz.7.5567" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:init_var_run_t:s0" [ 390.750687][T24209] overlayfs: failed to resolve './file0/file1': -2 [ 390.754223][ T40] audit: type=1400 audit(2000524685.820:94705): avc: denied { watch watch_reads } for pid=24208 comm="syz.7.5568" path="/389/file0" dev="tmpfs" ino=2117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 390.818949][T24214] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 390.823945][T24215] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 390.860003][ T40] audit: type=1400 audit(2000524685.922:94706): avc: denied { setattr } for pid=24218 comm="syz.7.5571" name="RDS" dev="sockfs" ino=115810 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 390.901248][ T40] audit: type=1400 audit(2000524685.959:94707): avc: denied { getopt } for pid=24222 comm="syz.7.5572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 390.909437][ T40] audit: type=1400 audit(2000524685.959:94708): avc: denied { accept } for pid=24222 comm="syz.7.5572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 390.945187][T24225] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 390.973839][T24227] __nla_validate_parse: 4 callbacks suppressed [ 390.973852][T24227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5574'. [ 390.995117][ T40] audit: type=1400 audit(2000524686.042:94709): avc: denied { name_bind } for pid=24228 comm="syz.7.5575" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 391.035601][T24234] loop5: detected capacity change from 0 to 7 [ 391.044758][T24234] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 391.047027][T24234] loop5: partition table partially beyond EOD, truncated [ 391.050072][T24234] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 391.140458][T24248] FAT-fs (loop7): unable to read boot sector [ 391.148921][T24249] xt_NFQUEUE: number of total queues is 0 [ 391.649176][T24268] sg_write: data in/out 4060/12 bytes for SCSI command 0x0-- guessing data in; [ 391.649176][T24268] program syz.8.5588 not setting count and/or reply_len properly [ 391.659220][ T40] audit: type=1400 audit(2000524686.663:94710): avc: denied { ioctl } for pid=24267 comm="syz.8.5588" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x227c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:init_var_run_t:s0" [ 392.065968][T24272] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5589'. [ 392.886080][T24272] vxlan0: entered promiscuous mode [ 392.888361][T19225] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.892596][T19225] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.895574][T19225] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.917059][T19225] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.955381][T24286] SET target dimension over the limit! [ 392.965659][ T40] audit: type=1400 audit(2000524687.869:94711): avc: denied { read } for pid=24288 comm="syz.2.5595" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 392.983803][ T40] audit: type=1400 audit(2000524687.869:94712): avc: denied { open } for pid=24288 comm="syz.2.5595" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 392.994569][ T40] audit: type=1400 audit(2000524687.869:94713): avc: denied { ioctl } for pid=24288 comm="syz.2.5595" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 393.035826][ T1464] page_pool_release_retry() stalled pool shutdown: id 114, 1 inflight 60 sec [ 393.090636][T24307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5602'. [ 393.106516][T24309] ipt_rpfilter: unknown options [ 393.305201][T24321] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5606'. [ 393.358175][ T5938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 393.366678][ T5938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 393.370901][ T5938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 393.374021][ T5938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 393.376544][ T5938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 393.383466][T24325] 9pnet_virtio: no channels available for device syz [ 393.387213][ T5935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 393.392149][ T5935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 393.394957][ T5935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 393.398353][ T5935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 393.401885][ T5935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 393.429511][T24322] xfrm0 speed is unknown, defaulting to 1000 [ 393.446699][T24331] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5607'. [ 393.450582][T24325] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5607'. [ 393.563348][T24322] chnl_net:caif_netlink_parms(): no params data found [ 393.684774][T24322] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.687861][T24322] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.691130][T24322] bridge_slave_0: entered allmulticast mode [ 393.694972][T24322] bridge_slave_0: entered promiscuous mode [ 393.698217][T24322] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.700440][T24322] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.702811][T24322] bridge_slave_1: entered allmulticast mode [ 393.706143][T24322] bridge_slave_1: entered promiscuous mode [ 393.744304][T24322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.754049][T24322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.806482][T24322] team0: Port device team_slave_0 added [ 393.809957][T24322] team0: Port device team_slave_1 added [ 393.843572][T24322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.846565][T24347] fuse: Bad value for 'user_id' [ 393.846910][T24322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.848474][T24347] fuse: Bad value for 'user_id' [ 393.856478][T24322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.857505][T24322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.863704][T24322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.866056][T24347] netlink: 'syz.7.5611': attribute type 4 has an invalid length. [ 393.872712][T24322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.874477][T24347] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5611'. [ 393.888482][T24347] .`: renamed from bond0 (while UP) [ 393.930741][T24322] hsr_slave_0: entered promiscuous mode [ 393.933286][T24322] hsr_slave_1: entered promiscuous mode [ 393.935471][T24322] debugfs: 'hsr0' already exists in 'hsr' [ 393.937277][T24322] Cannot create hsr debugfs directory [ 394.018389][T24350] netlink: 3696 bytes leftover after parsing attributes in process `syz.7.5614'. [ 394.022074][T24350] netlink: 3696 bytes leftover after parsing attributes in process `syz.7.5614'. [ 394.074878][T24322] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.122635][ T5938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 394.126933][ T5938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 394.130087][ T5938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 394.132998][ T5938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 394.137001][ T5938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 394.157707][T24351] xfrm0 speed is unknown, defaulting to 1000 [ 394.235051][T24322] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.272340][T24351] chnl_net:caif_netlink_parms(): no params data found [ 394.324191][T24322] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.327055][T24360] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 394.340420][T24362] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 394.381406][T24351] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.384779][T24351] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.387853][T24351] bridge_slave_0: entered allmulticast mode [ 394.391859][T24351] bridge_slave_0: entered promiscuous mode [ 394.409128][T24322] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.416085][T24351] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.418458][T24351] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.421501][T24351] bridge_slave_1: entered allmulticast mode [ 394.424841][T24351] bridge_slave_1: entered promiscuous mode [ 394.461261][T24351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.466044][T24351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.490493][T11592] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 394.511480][T24351] team0: Port device team_slave_0 added [ 394.518244][T24351] team0: Port device team_slave_1 added [ 394.556130][T24351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.558469][T24351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.566592][T24351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.592769][T24351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.595025][T24351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.603270][T24351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.650883][T24374] openvswitch: netlink: Unknown nsh attribute 0 [ 394.653261][T24374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.666280][T11592] usb 12-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 394.669910][T11592] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.676297][T11592] usb 12-1: config 0 descriptor?? [ 394.676632][T24351] hsr_slave_0: entered promiscuous mode [ 394.680675][T24351] hsr_slave_1: entered promiscuous mode [ 394.682795][T24351] debugfs: 'hsr0' already exists in 'hsr' [ 394.684688][T24351] Cannot create hsr debugfs directory [ 394.684836][T11592] input: bcm5974 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input39 [ 394.688100][T24322] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 394.714107][T24322] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 394.723511][T24322] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 394.748650][T24322] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 394.860157][T24351] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 394.865427][T24351] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 394.870255][T24351] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 394.875967][T24351] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 394.883123][T24322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.906279][ T29] usb 12-1: USB disconnect, device number 8 [ 394.933275][T24322] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.944100][T19227] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.947029][T19227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.954661][T19226] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.957669][T19226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.010379][T24351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.021462][T24351] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.037150][T19227] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.039351][T19227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.045403][T19227] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.047601][T19227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.096129][T24407] overlay: filesystem on ./bus not supported as upperdir [ 395.099031][T24407] overlay: filesystem on ./bus not supported as upperdir [ 395.101722][T24407] overlay: filesystem on ./bus not supported as upperdir [ 395.104280][T24407] overlay: filesystem on ./bus not supported as upperdir [ 395.107908][T24407] overlay: filesystem on ./bus not supported as upperdir [ 395.110479][T24407] overlay: filesystem on ./bus not supported as upperdir [ 395.113046][T24407] overlay: filesystem on ./bus not supported as upperdir [ 395.116072][T24407] overlay: filesystem on ./bus not supported as upperdir [ 395.118487][T24322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.120921][T24407] overlay: filesystem on ./bus not supported as upperdir [ 395.123610][T24407] overlay: filesystem on ./bus not supported as upperdir [ 395.127603][T24407] overlay: filesystem on ./bus not supported as upperdir [ 395.130173][T24407] overlay: filesystem on ./bus not supported as upperdir [ 395.132746][T24407] overlay: filesystem on ./bus not supported as upperdir [ 395.135608][T24407] overlay: filesystem on ./bus not supported as upperdir [ 395.139035][T24407] overlay: filesystem on ./bus not supported as upperdir [ 395.141585][T24407] overlay: filesystem on ./bus not supported as upperdir [ 395.144114][T24407] overlay: filesystem on ./bus not supported as upperdir [ 395.146776][T24407] overlay: filesystem on ./bus not supported as upperdir [ 395.152107][T24407] overlayfs: failed to resolve './bus': -2 [ 395.160756][T24351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.262353][T24322] veth0_vlan: entered promiscuous mode [ 395.267212][T24322] veth1_vlan: entered promiscuous mode [ 395.286899][T24322] veth0_macvtap: entered promiscuous mode [ 395.291005][T24322] veth1_macvtap: entered promiscuous mode [ 395.302228][T24322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.315205][T24322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.329012][ T6702] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.332848][ T6702] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.343640][ T6702] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.349208][ T6702] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.360553][T24351] veth0_vlan: entered promiscuous mode [ 395.390872][T24351] veth1_vlan: entered promiscuous mode [ 395.393794][T19228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.396634][T19228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.402981][T24436] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 395.416734][T19226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.419364][T19226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.430396][T24351] veth0_macvtap: entered promiscuous mode [ 395.435511][T24351] veth1_macvtap: entered promiscuous mode [ 395.452457][T24351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.459399][T24351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.474551][T19211] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.477371][T19211] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.488075][T24438] bond2: entered promiscuous mode [ 395.488672][T24445] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 395.490572][T24438] 8021q: adding VLAN 0 to HW filter on device bond2 [ 395.494455][T24445] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 395.496992][T24438] bond2: entered allmulticast mode [ 395.499708][T24445] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 395.501746][T24438] bond0: (slave bond2): Enslaving as an active interface with an up link [ 395.506752][T24445] UDF-fs: Scanning with blocksize 512 failed [ 395.507701][T19211] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.512996][T19211] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.513347][T24445] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 395.524167][T24445] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 395.528444][T24445] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 395.531659][T24445] UDF-fs: Scanning with blocksize 1024 failed [ 395.538407][T24445] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 395.545311][T24445] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 395.554453][T24445] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 395.556903][T24445] UDF-fs: Scanning with blocksize 2048 failed [ 395.560920][T24445] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 395.562665][ T6702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.563911][T24445] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 395.566325][ T6702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.570614][T24445] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 395.574076][T24445] UDF-fs: Scanning with blocksize 4096 failed [ 395.576115][T24445] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 395.596165][T19211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.599185][T19211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.622493][ T5935] Bluetooth: hci2: command tx timeout [ 395.660272][T24462] netlink: 'syz.5.5638': attribute type 4 has an invalid length. [ 395.677401][T24466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.747294][T24466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.097041][ T40] kauditd_printk_skb: 3088 callbacks suppressed [ 396.097057][ T40] audit: type=1326 audit(2000524690.773:97802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24459 comm="syz.2.5637" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c98f6c9 code=0x7fc00000 [ 396.109704][ T40] audit: type=1326 audit(2000524690.782:97803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24459 comm="syz.2.5637" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c98f6c9 code=0x7fc00000 [ 396.118630][ T40] audit: type=1326 audit(2000524690.782:97804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24459 comm="syz.2.5637" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c98f6c9 code=0x7fc00000 [ 396.126001][ T40] audit: type=1326 audit(2000524690.782:97805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24459 comm="syz.2.5637" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c98f6c9 code=0x7fc00000 [ 396.133643][ T40] audit: type=1326 audit(2000524690.782:97806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24459 comm="syz.2.5637" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c98f6c9 code=0x7fc00000 [ 396.143778][ T40] audit: type=1326 audit(2000524690.782:97807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24459 comm="syz.2.5637" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c98f6c9 code=0x7fc00000 [ 396.153144][ T40] audit: type=1326 audit(2000524690.782:97808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24459 comm="syz.2.5637" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c98f6c9 code=0x7fc00000 [ 396.162563][ T40] audit: type=1326 audit(2000524690.782:97809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24459 comm="syz.2.5637" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c98f6c9 code=0x7fc00000 [ 396.172453][ T40] audit: type=1326 audit(2000524690.782:97810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24459 comm="syz.2.5637" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c98f6c9 code=0x7fc00000 [ 396.181774][ T40] audit: type=1326 audit(2000524690.782:97811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24459 comm="syz.2.5637" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c98f6c9 code=0x7fc00000 [ 396.312039][ T5935] Bluetooth: hci0: command tx timeout [ 396.351052][T24476] tipc: Enabling of bearer rejected, failed to enable media [ 396.499984][T24489] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5646'. [ 396.604370][T24499] netlink: 'syz.2.5648': attribute type 14 has an invalid length. [ 396.654099][T24506] Bluetooth: MGMT ver 1.23 [ 396.767285][T24511] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 396.977763][T24525] kvm: kvm [24524]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 396.982154][T24525] kvm: kvm [24524]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 397.318815][T24551] 9pnet_virtio: no channels available for device syz [ 397.345427][T24553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.364395][T24553] delete_channel: no stack [ 397.552583][ T2300] usb 14-1: new full-speed USB device number 2 using dummy_hcd [ 397.737144][ T2300] usb 14-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 397.741326][ T2300] usb 14-1: config 0 interface 0 has no altsetting 0 [ 397.746469][ T2300] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 397.751658][ T2300] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 397.754995][ T2300] usb 14-1: Product: syz [ 397.757010][ T2300] usb 14-1: Manufacturer: syz [ 397.758942][ T2300] usb 14-1: SerialNumber: syz [ 397.762743][ T2300] usb 14-1: config 0 descriptor?? [ 397.769598][ T2300] usb 14-1: selecting invalid altsetting 0 [ 397.875852][ T5935] Bluetooth: hci2: command tx timeout [ 397.955668][T24582] ata1.00: invalid cdb length 6 [ 397.995295][ T1338] usb 14-1: USB disconnect, device number 2 [ 398.553199][ T5935] Bluetooth: hci0: command tx timeout [ 398.787206][T24591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42602 sclass=netlink_route_socket pid=24591 comm=syz.9.5673 [ 398.838353][T24594] loop2: detected capacity change from 0 to 7 [ 398.840731][T24594] loop2: [ 398.841721][T24594] loop2: partition table partially beyond EOD, truncated [ 398.977118][T24609] veth0: entered promiscuous mode [ 398.979908][T24609] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5679'. [ 398.984600][T24609] bridge_slave_1: left allmulticast mode [ 398.986826][T24609] bridge_slave_1: left promiscuous mode [ 398.989033][T24609] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.993901][T24609] bridge_slave_0: left allmulticast mode [ 398.999658][T24609] bridge_slave_0: left promiscuous mode [ 399.002032][T24609] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.203474][T24608] veth0: left promiscuous mode [ 399.242177][T24629] netlink: 'syz.9.5685': attribute type 3 has an invalid length. [ 399.910138][T24651] program syz.2.5691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 399.918864][T24651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5691'. [ 399.921772][T24651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5691'. [ 400.009164][T24653] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 400.011177][T24653] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 400.014148][T24653] vhci_hcd vhci_hcd.0: Device attached [ 400.086030][T24654] usbip_core: unknown command [ 400.087526][T24654] vhci_hcd: unknown pdu 795108726 [ 400.089076][T24654] usbip_core: unknown command [ 400.090803][T19211] vhci_hcd: stop threads [ 400.092243][T19211] vhci_hcd: release socket [ 400.093775][T19211] vhci_hcd: disconnect device [ 400.104422][ T5935] Bluetooth: hci2: command tx timeout [ 400.550030][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 400.805404][ T5935] Bluetooth: hci0: command tx timeout [ 402.344852][ T5935] Bluetooth: hci2: command tx timeout [ 402.380065][T24622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 402.418240][T24661] fuse: Unknown parameter '0x00000000000000040x0000000000000005' [ 402.494957][ T2300] IPVS: starting estimator thread 0... [ 402.572315][ T40] kauditd_printk_skb: 86 callbacks suppressed [ 402.572326][ T40] audit: type=1400 audit(2000524696.788:97898): avc: denied { getopt } for pid=24676 comm="syz.2.5695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 402.578177][T24675] ./cgroup: Can't lookup blockdev [ 402.580567][ T40] audit: type=1400 audit(2000524696.788:97899): avc: denied { write } for pid=24676 comm="syz.2.5695" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 402.592522][T24673] IPVS: using max 45 ests per chain, 108000 per kthread [ 402.647283][T24682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=24682 comm=syz.2.5702 [ 402.667542][T24690] "syz.5.5700" (24690) uses obsolete ecb(arc4) skcipher [ 402.671925][ T40] audit: type=1400 audit(2000524696.881:97900): avc: denied { read append } for pid=24688 comm="syz.5.5700" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 402.681984][ T40] audit: type=1400 audit(2000524696.881:97901): avc: denied { open } for pid=24688 comm="syz.5.5700" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 402.692645][ T3252] usb 12-1: new low-speed USB device number 9 using dummy_hcd [ 402.697537][ T40] audit: type=1400 audit(2000524696.881:97902): avc: denied { append } for pid=24688 comm="syz.5.5700" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 402.738162][T24697] overlayfs: overlapping lowerdir path [ 402.820685][T24703] netlink: 'syz.2.5708': attribute type 10 has an invalid length. [ 402.823219][T24703] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5708'. [ 402.826176][T24703] dummy0: entered promiscuous mode [ 402.827883][T24703] dummy0: left allmulticast mode [ 402.829983][T24703] bridge0: port 3(dummy0) entered blocking state [ 402.832116][T24703] bridge0: port 3(dummy0) entered disabled state [ 402.834399][T24703] dummy0: entered allmulticast mode [ 402.837495][T24703] bridge0: port 3(dummy0) entered blocking state [ 402.839628][T24703] bridge0: port 3(dummy0) entered forwarding state [ 402.864521][ T3252] usb 12-1: config index 0 descriptor too short (expected 1307, got 27) [ 402.868321][ T3252] usb 12-1: config 0 has an invalid interface number: 0 but max is -1 [ 402.871804][ T3252] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 402.875847][ T3252] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 402.880390][ T3252] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 402.884829][ T3252] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 402.889356][ T3252] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 402.902015][ T3252] usb 12-1: string descriptor 0 read error: -22 [ 402.903989][ T3252] usb 12-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 402.907163][ T3252] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.911402][ T3252] usb 12-1: config 0 descriptor?? [ 402.913994][ T3252] hub 12-1:0.0: bad descriptor, ignoring hub [ 402.916728][ T3252] hub 12-1:0.0: probe with driver hub failed with error -5 [ 402.920280][ T3252] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input40 [ 402.966884][ T40] audit: type=1400 audit(2000524697.150:97903): avc: denied { bind } for pid=24712 comm="syz.5.5713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 402.973997][ T40] audit: type=1400 audit(2000524697.160:97904): avc: denied { ioctl } for pid=24712 comm="syz.5.5713" path="socket:[120912]" dev="sockfs" ino=120912 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 403.004195][ T40] audit: type=1400 audit(2000524697.187:97905): avc: denied { read } for pid=24718 comm="syz.5.5715" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 403.011091][ T40] audit: type=1400 audit(2000524697.187:97906): avc: denied { open } for pid=24718 comm="syz.5.5715" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 403.019726][ T40] audit: type=1400 audit(2000524697.187:97907): avc: denied { write } for pid=24718 comm="syz.5.5715" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 403.034483][ T5935] Bluetooth: hci0: command tx timeout [ 403.038049][T24719] program syz.5.5715 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 403.241902][ T2300] usb 12-1: USB disconnect, device number 9 [ 403.400221][ T54] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 403.497093][ T6018] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 403.561656][ T54] usb 14-1: Using ep0 maxpacket: 16 [ 403.564846][ T54] usb 14-1: config 0 has an invalid interface number: 132 but max is 0 [ 403.567434][ T54] usb 14-1: config 0 has no interface number 0 [ 403.571307][ T54] usb 14-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 403.574395][ T54] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.576929][ T54] usb 14-1: Product: syz [ 403.578282][ T54] usb 14-1: Manufacturer: syz [ 403.579782][ T54] usb 14-1: SerialNumber: syz [ 403.582593][ T54] usb 14-1: config 0 descriptor?? [ 403.585704][ T54] hub 14-1:0.132: bad descriptor, ignoring hub [ 403.587662][ T54] hub 14-1:0.132: probe with driver hub failed with error -5 [ 403.591402][ T54] input: bcm5974 as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.132/input/input41 [ 403.670942][ T6018] usb 10-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 403.674698][ T6018] usb 10-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 403.678437][ T6018] usb 10-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 403.682698][ T6018] usb 10-1: config 0 interface 0 has no altsetting 0 [ 403.684998][ T6018] usb 10-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 403.688092][ T6018] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.692275][ T6018] usb 10-1: config 0 descriptor?? [ 403.809124][T24742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.969027][T24758] Process accounting resumed [ 404.079661][T24764] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5729'. [ 404.082822][T24765] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5729'. [ 404.133325][ T6018] usb 10-1: string descriptor 0 read error: -71 [ 404.138149][T24765] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5729'. [ 404.139510][ T6018] usb 10-1: USB disconnect, device number 17 [ 404.141001][T24765] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5729'. [ 404.169833][T24770] x_tables: duplicate underflow at hook 3 [ 404.172716][T24770] ieee802154 phy0 wpan0: encryption failed: -22 [ 404.273531][T24779] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 404.276645][T24779] IPv6: NLM_F_CREATE should be set when creating new route [ 404.279649][T24779] IPv6: NLM_F_CREATE should be set when creating new route [ 404.282771][T24779] IPv6: NLM_F_CREATE should be set when creating new route [ 404.286674][T24779] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 404.583623][T24798] netlink: 'syz.5.5739': attribute type 3 has an invalid length. [ 404.586766][T24798] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5739'. [ 404.597152][T24800] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5736'. [ 404.663816][T24804] mac80211_hwsim hwsim56 : renamed from wlan1 (while UP) [ 404.749885][ T24] usb 14-1: USB disconnect, device number 3 [ 405.505467][T24826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.511331][T24826] batadv_slave_0: entered promiscuous mode [ 405.548416][T24829] xt_connbytes: Forcing CT accounting to be enabled [ 405.550800][T24829] Cannot find set identified by id 0 to match [ 405.555240][T24833] Cannot find set identified by id 0 to match [ 405.623278][T24839] syzkaller1: entered promiscuous mode [ 405.625667][T24839] syzkaller1: entered allmulticast mode [ 405.817746][T24857] netlink: 'syz.5.5759': attribute type 1 has an invalid length. [ 405.820206][T24857] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5759'. [ 405.874535][T24877] vlan2: entered promiscuous mode [ 405.876347][T24877] vlan2: entered allmulticast mode [ 405.878371][T24877] hsr_slave_1: entered allmulticast mode [ 406.305863][T24892] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5766'. [ 406.369586][T24893] openvswitch: netlink: nsh attr 10 is out of range max 3 [ 406.372869][T24893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.603936][T24921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5773'. [ 406.622755][T24925] qnx6: unable to read the first superblock [ 406.625505][T24925] qnx6: unable to read the first superblock [ 406.628280][T24925] qnx6: unable to read the first superblock [ 406.658038][T24933] mac80211_hwsim hwsim43 : renamed from wlan1 [ 406.746033][T24935] netlink: 'syz.2.5777': attribute type 1 has an invalid length. [ 406.750399][T24935] netlink: 'syz.2.5777': attribute type 1 has an invalid length. [ 407.473008][T24976] cgroup: noprefix used incorrectly [ 407.646732][T24987] kvm: apic: phys broadcast and lowest prio [ 408.042210][ T24] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 408.148149][ T2300] usb 14-1: new full-speed USB device number 4 using dummy_hcd [ 408.212515][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 408.218853][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 408.222951][ T24] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 408.227288][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 408.231365][ T24] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 408.235943][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 408.241348][ T24] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 408.245470][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.251257][ T24] usb 10-1: config 0 descriptor?? [ 408.323919][ T2300] usb 14-1: unable to get BOS descriptor or descriptor too short [ 408.327958][ T2300] usb 14-1: not running at top speed; connect to a high speed hub [ 408.332493][ T2300] usb 14-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.337785][ T2300] usb 14-1: config 1 interface 0 has no altsetting 0 [ 408.343109][ T2300] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 408.346915][ T2300] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.350367][ T2300] usb 14-1: Product: syz [ 408.352167][ T2300] usb 14-1: Manufacturer: syz [ 408.354737][ T2300] usb 14-1: SerialNumber: syz [ 408.480822][ T24] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 408.586758][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 408.586770][ T40] audit: type=1400 audit(2000524702.370:97923): avc: denied { read } for pid=25001 comm="syz.9.5796" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 408.595083][ T2300] usb 14-1: USB disconnect, device number 4 [ 408.598793][ T40] audit: type=1400 audit(2000524702.370:97924): avc: denied { ioctl } for pid=25001 comm="syz.9.5796" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 408.691662][ T54] usb 10-1: USB disconnect, device number 18 [ 408.696316][ T54] usblp0: removed [ 408.793352][ T40] audit: type=1400 audit(2000524702.556:97925): avc: denied { map } for pid=25012 comm="syz.2.5799" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:init_var_run_t:s0" [ 408.805352][ T40] audit: type=1400 audit(2000524702.556:97926): avc: denied { execute } for pid=25012 comm="syz.2.5799" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:init_var_run_t:s0" [ 408.842426][ T40] audit: type=1400 audit(2000524702.612:97927): avc: denied { map } for pid=25012 comm="syz.2.5799" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 409.299583][ T40] audit: type=1400 audit(2000524703.030:97928): avc: denied { read } for pid=25020 comm="syz.9.5801" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 409.308696][ T40] audit: type=1400 audit(2000524703.039:97929): avc: denied { open } for pid=25020 comm="syz.9.5801" path="/39/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 409.318322][ T40] audit: type=1400 audit(2000524703.039:97930): avc: denied { ioctl } for pid=25020 comm="syz.9.5801" path="/39/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d0d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 409.428946][T25029] netlink: 'syz.5.5804': attribute type 10 has an invalid length. [ 409.432205][T25029] __nla_validate_parse: 2 callbacks suppressed [ 409.432226][T25029] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5804'. [ 409.438599][T25029] dummy0: entered promiscuous mode [ 409.442129][T25029] bridge0: port 3(dummy0) entered blocking state [ 409.445179][T25029] bridge0: port 3(dummy0) entered disabled state [ 409.448140][T25029] dummy0: entered allmulticast mode [ 409.452845][T25029] bridge0: port 3(dummy0) entered blocking state [ 409.455718][T25029] bridge0: port 3(dummy0) entered forwarding state [ 409.659071][ T40] audit: type=1400 audit(2000524703.365:97931): avc: denied { write } for pid=25035 comm="syz.5.5806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 409.884606][T25043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5809'. [ 409.921381][ T40] audit: type=1400 audit(2000524703.606:97932): avc: denied { connect } for pid=25044 comm="syz.2.5810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 409.927310][T25050] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 409.930914][T25050] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 410.062670][T25060] nbd: socks must be embedded in a SOCK_ITEM attr [ 410.318793][T25081] netlink: 4456 bytes leftover after parsing attributes in process `syz.5.5823'. [ 410.529861][T25104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5831'. [ 410.535636][T25104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5831'. [ 410.762370][T25123] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5835'. [ 410.908431][T25127] vxfs: WRONG superblock magic 00000000 at 1 [ 410.910710][T25127] vxfs: WRONG superblock magic 00000000 at 8 [ 410.912699][T25127] vxfs: can't find superblock. [ 411.068615][T25137] netlink: 'syz.9.5840': attribute type 21 has an invalid length. [ 411.071121][T25137] netlink: 128 bytes leftover after parsing attributes in process `syz.9.5840'. [ 411.073939][T25137] netlink: 'syz.9.5840': attribute type 6 has an invalid length. [ 411.077060][T25137] netlink: 3 bytes leftover after parsing attributes in process `syz.9.5840'. [ 411.444731][T25147] xt_CT: You must specify a L4 protocol and not use inversions on it [ 411.496328][T25151] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5841'. [ 411.501742][T25151] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5841'. [ 411.585010][T25159] random: crng reseeded on system resumption [ 411.657391][T25170] 9pnet: Unknown protocol version 9 [ 412.075358][T25179] binder: Unknown parameter 'fowner<00000000000000000000' [ 412.148927][T25184] x_tables: duplicate underflow at hook 3 [ 412.179661][T25186] netlink: 'syz.5.5853': attribute type 1 has an invalid length. [ 412.196913][T25186] 8021q: adding VLAN 0 to HW filter on device bond1 [ 412.225772][T25189] syz_tun: entered allmulticast mode [ 412.229490][T25189] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 412.232534][T25189] mroute: pending queue full, dropping entries [ 412.678837][T25190] syz_tun: left allmulticast mode [ 412.743699][T25203] xfrm0 speed is unknown, defaulting to 1000 [ 413.277522][T25219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.384882][T25228] xfrm0 speed is unknown, defaulting to 1000 [ 413.457852][T25242] input input44: cannot allocate more than FF_MAX_EFFECTS effects [ 413.491282][T25228] netlink: 'syz.5.5867': attribute type 12 has an invalid length. [ 413.494146][T25244] gfs2: gfs2 mount does not exist [ 413.501790][T25228] netlink: 'syz.5.5867': attribute type 12 has an invalid length. [ 413.751187][T25259] btrfs: Unknown parameter 'barriert/tun' [ 414.006369][T25264] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 414.331315][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 414.331330][ T40] audit: type=1400 audit(2000524707.705:97948): avc: denied { getopt } for pid=25275 comm="syz.5.5879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 414.358930][T25276] netlink: 'syz.5.5879': attribute type 2 has an invalid length. [ 414.388068][T25281] 9pnet: Unknown protocol version 9p2000. [ 414.509228][ T40] audit: type=1400 audit(2000524707.882:97949): avc: denied { setopt } for pid=25285 comm="syz.5.5883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 414.515461][ T40] audit: type=1400 audit(2000524707.882:97950): avc: denied { write } for pid=25285 comm="syz.5.5883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 414.636192][ T40] audit: type=1400 audit(2000524707.993:97951): avc: denied { mount } for pid=25287 comm="syz.5.5884" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 414.637736][T25288] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 414.643267][ T40] audit: type=1400 audit(2000524707.993:97952): avc: denied { mounton } for pid=25287 comm="syz.5.5884" path="/92/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 414.647850][T25288] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 414.661165][ T40] audit: type=1400 audit(2000524708.021:97953): avc: denied { read } for pid=25287 comm="syz.5.5884" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 414.670445][ T40] audit: type=1400 audit(2000524708.021:97954): avc: denied { open } for pid=25287 comm="syz.5.5884" path="/92/file0" dev="overlay" ino=2305843009213693954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 414.679855][ T40] audit: type=1400 audit(2000524708.021:97955): avc: denied { read } for pid=25287 comm="syz.5.5884" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 414.688377][ T40] audit: type=1400 audit(2000524708.021:97956): avc: denied { read } for pid=25287 comm="syz.5.5884" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 414.695679][ T40] audit: type=1400 audit(2000524708.021:97957): avc: denied { read } for pid=25287 comm="syz.5.5884" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 414.780254][T25301] tmpfs: Bad value for 'mpol' [ 414.909982][T25315] 9pnet: Unknown protocol version 9p2000. [ 414.932685][T25317] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 414.934594][T25317] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 414.938550][T25317] vhci_hcd vhci_hcd.0: Device attached [ 414.942102][ T5935] Bluetooth: unknown link type 101 [ 414.943623][ T5935] Bluetooth: hci0: connection err: -111 [ 414.959306][T25317] veth0: entered promiscuous mode [ 414.961172][T25316] veth0: left promiscuous mode [ 415.027575][T25318] vhci_hcd: connection closed [ 415.027773][T19209] vhci_hcd: stop threads [ 415.031236][T19209] vhci_hcd: release socket [ 415.033172][T19209] vhci_hcd: disconnect device [ 415.567909][T25325] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 415.597292][T25327] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 415.600688][T25327] qnx6: wrong signature (magic) in superblock #1. [ 415.602710][T25327] qnx6: unable to read the first superblock [ 415.801900][T25355] mkiss: ax0: crc mode is auto. [ 415.820686][T25355] ata1.00: invalid multi_count 128 ignored [ 415.895395][T25359] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 415.954490][T25366] (syz.7.5908,25366,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 415.956957][T25366] (syz.7.5908,25366,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 415.959304][T25366] (syz.7.5908,25366,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 415.962697][T25366] (syz.7.5908,25366,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 415.968618][T25370] sp0: Synchronizing with TNC [ 415.971533][T25370] __nla_validate_parse: 7 callbacks suppressed [ 415.971543][T25370] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5909'. [ 416.023026][T25378] xt_CT: No such helper "snmp_trap" [ 416.038863][T25384] netlink: zone id is out of range [ 416.040574][T25384] netlink: zone id is out of range [ 416.042736][T25384] netlink: set zone limit has 8 unknown bytes [ 416.043731][T25380] xt_CT: No such helper "snmp_trap" [ 416.049579][T25384] tmpfs: Invalid uid '0x00000000ffffffff' [ 416.080999][T25389] syz.9.5915: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 416.109051][T25396] bond2: option downdelay: invalid value (18446744073709551615) [ 416.114047][T25396] bond2: option downdelay: allowed values 0 - 2147483647 [ 416.117860][T25396] bond2 (unregistering): Released all slaves [ 416.236389][T25408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5920'. [ 416.308695][T25410] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5921'. [ 417.017979][T25399] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 417.225085][T25442] 9pnet_virtio: no channels available for device syz [ 417.225124][T25440] 9pnet_fd: p9_fd_create_unix (25440): problem connecting socket: ./file0: -111 [ 417.479278][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803920c800: rx timeout, send abort [ 417.482207][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88803920c800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 417.571355][T25450] fuse: Bad value for 'user_id' [ 417.573100][T25450] fuse: Bad value for 'user_id' [ 417.647692][T25456] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5938'. [ 418.357912][ T5935] Bluetooth: hci0: command 0x080f tx timeout [ 418.431060][T25484] sock: sock_timestamping_bind_phc: sock not bind to device [ 418.566648][ T6702] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.571230][ T6702] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.710504][ T6702] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.715495][ T6702] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.758027][T25496] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5949'. [ 418.785958][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 418.793262][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 418.797773][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 418.804590][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 418.808352][T25501] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5950'. [ 418.809182][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 418.837706][ T6702] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.843401][ T6702] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.853651][T25501] tipc: Started in network mode [ 418.855256][T25501] tipc: Node identity ac14140f, cluster identity 4711 [ 418.857586][T25501] tipc: New replicast peer: 255.255.255.255 [ 418.859903][T25501] tipc: Enabled bearer , priority 10 [ 418.875177][T25497] xfrm0 speed is unknown, defaulting to 1000 [ 418.965911][ T6702] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.969163][ T6702] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.989086][T25497] chnl_net:caif_netlink_parms(): no params data found [ 419.066981][T25497] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.071586][T25497] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.074855][T25497] bridge_slave_0: entered allmulticast mode [ 419.079699][T25497] bridge_slave_0: entered promiscuous mode [ 419.086170][T25497] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.088416][T25497] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.091020][T25497] bridge_slave_1: entered allmulticast mode [ 419.091267][T25522] netlink: 'syz.5.5954': attribute type 21 has an invalid length. [ 419.093735][T25497] bridge_slave_1: entered promiscuous mode [ 419.122419][T25524] trusted_key: encrypted_key: keylen parameter is missing [ 419.149318][T25497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.231656][T25497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.276922][T25497] team0: Port device team_slave_0 added [ 419.289246][T25497] team0: Port device team_slave_1 added [ 419.331066][T25497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.333299][T25497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.342936][T25497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.347768][T25497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.350078][T25497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.358216][T25497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.362901][ T6702] veth9: left allmulticast mode [ 419.364504][ T6702] veth9: left promiscuous mode [ 419.366146][ T6702] bridge1: port 2(veth9) entered disabled state [ 419.369677][ T6702] veth7: left allmulticast mode [ 419.371248][ T6702] veth7: left promiscuous mode [ 419.372873][ T6702] bridge1: port 1(veth7) entered disabled state [ 419.378473][ T6702] batman_adv: batadv0: Interface deactivated: gretap2 [ 419.548179][ T6702] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 419.625104][ T6702] erspan0 (unregistering): left promiscuous mode [ 419.638587][ T6702] gretap0 (unregistering): left promiscuous mode [ 419.670353][ T6702] batman_adv: batadv0: Removing interface: gretap2 [ 419.681337][ T6702] bond2 (unregistering): (slave gretap3): Releasing active interface [ 419.854060][ T6702] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.857287][ T6702] bond_slave_0: left allmulticast mode [ 419.862900][ T6702] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.866220][ T6702] bond_slave_1: left allmulticast mode [ 419.868816][ T6702] .` (unregistering): Released all slaves [ 419.950949][ T6015] tipc: Node number set to 2886997007 [ 419.968762][ T6702] bond1 (unregistering): Released all slaves [ 420.061344][ T6702] bond2 (unregistering): Released all slaves [ 420.168437][T25497] hsr_slave_0: entered promiscuous mode [ 420.171768][T25497] hsr_slave_1: entered promiscuous mode [ 420.174728][T25497] debugfs: 'hsr0' already exists in 'hsr' [ 420.177451][T25497] Cannot create hsr debugfs directory [ 420.188984][T25546] random: crng reseeded on system resumption [ 420.246960][T25548] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 420.394282][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 420.394295][ T40] audit: type=1400 audit(2000524713.349:97982): avc: denied { search } for pid=25572 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.403312][ T40] audit: type=1400 audit(2000524713.349:97983): avc: denied { search } for pid=25572 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1897 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.410762][ T40] audit: type=1400 audit(2000524713.349:97984): avc: denied { search } for pid=25572 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.418573][ T40] audit: type=1400 audit(2000524713.349:97985): avc: denied { search } for pid=25572 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.426712][ T40] audit: type=1400 audit(2000524713.349:97986): avc: denied { read open } for pid=25573 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.435820][ T40] audit: type=1400 audit(2000524713.349:97987): avc: denied { getattr } for pid=25573 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.443612][ T40] audit: type=1400 audit(2000524713.358:97988): avc: denied { add_name } for pid=25572 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.450890][ T40] audit: type=1400 audit(2000524713.358:97989): avc: denied { create } for pid=25572 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 420.458135][ T40] audit: type=1400 audit(2000524713.358:97990): avc: denied { write open } for pid=25572 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth5.link" dev="tmpfs" ino=6944 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 420.466488][ T40] audit: type=1400 audit(2000524713.358:97991): avc: denied { append } for pid=25572 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" dev="tmpfs" ino=6944 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 420.479606][T25580] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5969'. [ 420.507706][T25588] netlink: 'syz.5.5971': attribute type 1 has an invalid length. [ 420.524701][T25588] 8021q: adding VLAN 0 to HW filter on device bond2 [ 420.543150][T25593] CUSE: unknown device info "" [ 420.546440][T25593] CUSE: zero length info key specified [ 420.550165][T25588] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 420.835756][ T6702] hsr_slave_0: left promiscuous mode [ 420.838747][ T6702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.842139][ T6702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.845951][ T6702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.849260][ T6702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.889172][ T6702] veth1_macvtap: left promiscuous mode [ 420.890949][ T6702] veth0_macvtap: left promiscuous mode [ 420.892728][ T6702] veth1_vlan: left allmulticast mode [ 420.894460][ T6702] veth1_vlan: left promiscuous mode [ 420.896537][ T6702] veth0_vlan: left promiscuous mode [ 421.025006][ T5935] Bluetooth: hci1: command tx timeout [ 421.201384][T25625] EXT4-fs (nbd2): unable to read superblock [ 421.246803][T25628] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 421.493698][T25640] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5982'. [ 421.535954][T25642] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5983'. [ 421.538898][T25642] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 422.317976][T25660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5988'. [ 422.557376][T25701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5998'. [ 422.562755][T25701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25701 comm=syz.5.5998 [ 422.574881][T25704] misc userio: No port type given on /dev/userio [ 422.602316][T25497] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 422.612861][T25497] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 422.617419][T25497] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 422.624336][T25497] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 422.697276][T25497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.711110][T25497] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.716715][T19227] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.719491][T19227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.726923][T19209] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.729086][T19209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.865348][T25497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.892237][T25497] veth0_vlan: entered promiscuous mode [ 422.898363][T25497] veth1_vlan: entered promiscuous mode [ 422.943407][T25497] veth0_macvtap: entered promiscuous mode [ 422.947706][T25497] veth1_macvtap: entered promiscuous mode [ 422.957635][T25497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.965794][T25497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.973804][T19228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.977094][T19228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.980657][T19228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.984954][T19228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.039709][T19227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.042173][T19227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.064084][T19227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.067301][T19227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.192257][T25763] random: crng reseeded on system resumption [ 423.261114][ T5935] Bluetooth: hci1: command tx timeout [ 423.313484][T25775] program syz.2.6011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 423.318777][T25775] ata1.00: invalid transfer count 0 [ 423.348007][ T24] IPVS: starting estimator thread 0... [ 423.352424][T25780] afs: Unknown parameter 'floM^ck' [ 423.366192][T25782] xfrm0 speed is unknown, defaulting to 1000 [ 423.394135][T25788] syzkaller1: entered promiscuous mode [ 423.396012][T25788] syzkaller1: entered allmulticast mode [ 423.443593][T25779] IPVS: using max 46 ests per chain, 110400 per kthread [ 423.481293][T25798] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6017'. [ 423.483154][T25797] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6017'. [ 423.502918][T25797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6017'. [ 423.505746][T25797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6017'. [ 423.509910][T25797] netlink: 'syz.5.6017': attribute type 19 has an invalid length. [ 423.697595][T25809] vxfs: WRONG superblock magic 00000000 at 1 [ 423.699920][T25809] vxfs: WRONG superblock magic 00000000 at 8 [ 423.701945][T25809] vxfs: can't find superblock. [ 423.737281][T25811] xfrm0 speed is unknown, defaulting to 1000 [ 423.775359][T25811] geneve0: entered promiscuous mode [ 423.874144][T25818] xfrm0 speed is unknown, defaulting to 1000 [ 423.875723][T25819] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 423.891721][T25820] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 424.120402][T25834] erspan0: entered promiscuous mode [ 424.692464][T25844] IPVS: sh: FWM 3 0x00000003 - no destination available [ 424.771995][T25849] binder: 25847:25849 ioctl 4010aeac 200000000240 returned -22 [ 424.825467][T25852] loop4: detected capacity change from 0 to 2560 [ 424.834936][T25852] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 424.837795][T25852] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 424.840297][T25852] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 424.844164][T25852] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 424.847134][T25852] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 424.849747][T25852] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 424.853019][T25852] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 424.856701][T25852] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 424.859426][T25852] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 424.861993][T25852] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 424.875621][T25852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6035'. [ 424.914370][T25857] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 424.918807][T25857] overlayfs: missing 'lowerdir' [ 425.115045][T25870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6039'. [ 425.261556][ T5996] hid (null): report_id 1455308388 is invalid [ 425.263548][ T5996] hid (null): unknown global tag 0xe [ 425.265307][ T5996] hid (null): unknown global tag 0x70 [ 425.267057][ T5996] hid (null): unknown global tag 0xc [ 425.268821][ T5996] hid (null): invalid report_size -1095303626 [ 425.272470][ T5996] hid (null): unknown global tag 0xd [ 425.274169][ T5996] hid (null): invalid report_size 53390 [ 425.275940][ T5996] hid (null): report_id 1404261044 is invalid [ 425.277910][ T5996] hid (null): invalid report_size 52774 [ 425.279722][ T5996] hid (null): unknown global tag 0xc [ 425.283723][ T5996] hid (null): unknown global tag 0xd [ 425.285554][ T5996] hid (null): unknown global tag 0xc [ 425.287329][ T5996] hid (null): global environment stack underflow [ 425.289322][ T5996] hid (null): global environment stack underflow [ 425.291328][ T5996] hid (null): unknown global tag 0x5b [ 425.294461][ T5996] hid (null): unknown global tag 0xba [ 425.296194][ T5996] hid (null): unknown global tag 0xd [ 425.297879][ T5996] hid (null): unknown global tag 0xc [ 425.299565][ T5996] hid (null): unknown global tag 0xc [ 425.302577][ T5996] hid (null): unknown global tag 0xd2 [ 425.304924][ T5996] hid (null): unknown global tag 0xc [ 425.306619][ T5996] hid (null): unknown global tag 0xd [ 425.308333][ T5996] hid (null): report_id 28897 is invalid [ 425.310798][ T5996] hid (null): report_id 0 is invalid [ 425.312510][ T5996] hid (null): unknown global tag 0xc [ 425.314813][ T5996] hid (null): report_id 3555992353 is invalid [ 425.316733][ T5996] hid (null): unknown global tag 0xe [ 425.318941][ T5996] hid (null): unknown global tag 0xe [ 425.320604][ T5996] hid (null): bogus close delimiter [ 425.322260][ T5996] hid (null): invalid report_size 6300 [ 425.324047][ T5996] hid (null): invalid report_count -209397599 [ 425.329864][ T5996] hid (null): bogus close delimiter [ 425.331557][ T5996] hid (null): report_id 3684249213 is invalid [ 425.333482][ T5996] hid (null): invalid report_count 175361551 [ 425.337259][ T5996] hid (null): report_id 1121594104 is invalid [ 425.339196][ T5996] hid (null): unknown global tag 0xe [ 425.340868][ T5996] hid (null): global environment stack overflow [ 425.342844][ T5996] hid (null): unknown global tag 0xc [ 425.344560][ T5996] hid (null): unknown global tag 0xd [ 425.346485][ T5996] hid (null): invalid report_size 22400 [ 425.349471][ T5996] hid-generic 0007:0007:80000000.0010: report_id 1455308388 is invalid [ 425.351949][ T5996] hid-generic 0007:0007:80000000.0010: item 0 4 1 8 parsing failed [ 425.354758][ T5996] hid-generic 0007:0007:80000000.0010: probe with driver hid-generic failed with error -22 [ 425.449700][T25893] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 425.496647][ T5938] Bluetooth: hci1: command tx timeout [ 425.558266][T25897] ------------[ cut here ]------------ [ 425.560060][T25897] WARNING: CPU: 0 PID: 25897 at mm/page_alloc.c:5159 __alloc_frozen_pages_noprof+0x309/0x2470 [ 425.563773][T25897] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 425.565381][T25897] CPU: 0 UID: 0 PID: 25897 Comm: syz.0.6052 Not tainted syzkaller #0 PREEMPT(full) [ 425.570313][T25897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 425.573817][T25897] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2470 [ 425.576169][T25897] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 11 61 4b 09 83 fe 0a 0f 86 0c fe ff ff 80 3d f6 6d 52 0e 00 75 0b c6 05 ed 6d 52 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 425.582482][T25897] RSP: 0018:ffffc9000349f758 EFLAGS: 00010246 [ 425.584686][T25897] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 425.587231][T25897] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 425.590028][T25897] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 425.592640][T25897] R10: 0000000000000015 R11: 0000000000000001 R12: 0000000000040cc0 [ 425.595539][T25897] R13: 1ffff92000693f01 R14: ffffffff9ab2e4a4 R15: 0000000000000015 [ 425.598165][T25897] FS: 00007fdf8c3936c0(0000) GS:ffff8880d6a08000(0000) knlGS:0000000000000000 [ 425.601019][T25897] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.603081][T25897] CR2: 00007fdf8b573360 CR3: 000000002be80000 CR4: 0000000000352ef0 [ 425.605660][T25897] Call Trace: [ 425.606760][T25897] [ 425.607706][T25897] ? find_held_lock+0x2b/0x80 [ 425.609222][T25897] ? is_bpf_text_address+0x8a/0x1a0 [ 425.610864][T25897] ? bpf_ksym_find+0x127/0x1c0 [ 425.612442][T25897] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 425.614402][T25897] ? is_bpf_text_address+0x94/0x1a0 [ 425.616123][T25897] ? kernel_text_address+0x8d/0x100 [ 425.617779][T25897] ? widen_string+0xdc/0x2d0 [ 425.619253][T25897] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 425.621254][T25897] ? unwind_get_return_address+0x59/0xa0 [ 425.623019][T25897] ? stack_trace_save+0x8e/0xc0 [ 425.624605][T25897] ? __pfx_stack_trace_save+0x10/0x10 [ 425.626578][T25897] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 425.628476][T25897] ? policy_nodemask+0xea/0x4e0 [ 425.630046][T25897] alloc_pages_mpol+0x1fb/0x550 [ 425.631580][T25897] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 425.633270][T25897] ___kmalloc_large_node+0xed/0x160 [ 425.634904][T25897] __kmalloc_large_node_noprof+0x1c/0x70 [ 425.636749][T25897] __kmalloc_noprof.cold+0xc/0x62 [ 425.638346][T25897] ? drm_syncobj_array_find+0x35/0x3c0 [ 425.640069][T25897] ? drm_syncobj_array_find+0x35/0x3c0 [ 425.641784][T25897] drm_syncobj_array_find+0x35/0x3c0 [ 425.643441][T25897] ? __lock_acquire+0xb8a/0x1c90 [ 425.645050][T25897] drm_syncobj_query_ioctl+0x27e/0xbe0 [ 425.646765][T25897] ? kasan_quarantine_put+0x10a/0x240 [ 425.648693][T25897] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 425.650571][T25897] ? find_held_lock+0x2b/0x80 [ 425.652060][T25897] ? drm_dev_exit+0x41/0x60 [ 425.653497][T25897] drm_ioctl_kernel+0x1f4/0x3e0 [ 425.655040][T25897] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 425.656915][T25897] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 425.658845][T25897] drm_ioctl+0x5c9/0xc30 [ 425.660191][T25897] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 425.662081][T25897] ? __pfx_drm_ioctl+0x10/0x10 [ 425.663600][T25897] ? selinux_file_ioctl+0x180/0x270 [ 425.665324][T25897] ? selinux_file_ioctl+0xb4/0x270 [ 425.666964][T25897] ? __pfx_drm_ioctl+0x10/0x10 [ 425.668554][T25897] __x64_sys_ioctl+0x18e/0x210 [ 425.670114][T25897] do_syscall_64+0xcd/0xfa0 [ 425.671558][T25897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.673481][T25897] RIP: 0033:0x7fdf8b58f6c9 [ 425.674955][T25897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.680981][T25897] RSP: 002b:00007fdf8c393038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.683614][T25897] RAX: ffffffffffffffda RBX: 00007fdf8b7e5fa0 RCX: 00007fdf8b58f6c9 [ 425.686105][T25897] RDX: 00002000000002c0 RSI: 00000000c01864cb RDI: 0000000000000004 [ 425.688576][T25897] RBP: 00007fdf8b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 425.691370][T25897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.693846][T25897] R13: 00007fdf8b7e6038 R14: 00007fdf8b7e5fa0 R15: 00007fff59076b38 [ 425.696323][T25897] [ 425.697315][T25897] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 425.699580][T25897] CPU: 0 UID: 0 PID: 25897 Comm: syz.0.6052 Not tainted syzkaller #0 PREEMPT(full) [ 425.702508][T25897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 425.706401][T25897] Call Trace: [ 425.707537][T25897] [ 425.708651][T25897] dump_stack_lvl+0x3d/0x1f0 [ 425.710365][T25897] vpanic+0x640/0x6f0 [ 425.711947][T25897] ? __alloc_frozen_pages_noprof+0x309/0x2470 [ 425.714286][T25897] panic+0xca/0xd0 [ 425.715750][T25897] ? __pfx_panic+0x10/0x10 [ 425.717174][T25897] check_panic_on_warn+0xab/0xb0 [ 425.718652][T25897] __warn+0xf6/0x3c0 [ 425.719898][T25897] ? __alloc_frozen_pages_noprof+0x309/0x2470 [ 425.721846][T25897] report_bug+0x3c3/0x580 [ 425.723217][T25897] ? __alloc_frozen_pages_noprof+0x309/0x2470 [ 425.725127][T25897] handle_bug+0x184/0x210 [ 425.726457][T25897] exc_invalid_op+0x17/0x50 [ 425.727863][T25897] asm_exc_invalid_op+0x1a/0x20 [ 425.729420][T25897] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2470 [ 425.731503][T25897] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 11 61 4b 09 83 fe 0a 0f 86 0c fe ff ff 80 3d f6 6d 52 0e 00 75 0b c6 05 ed 6d 52 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 425.737318][T25897] RSP: 0018:ffffc9000349f758 EFLAGS: 00010246 [ 425.739218][T25897] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 425.741678][T25897] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 425.744179][T25897] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 425.746648][T25897] R10: 0000000000000015 R11: 0000000000000001 R12: 0000000000040cc0 [ 425.749131][T25897] R13: 1ffff92000693f01 R14: ffffffff9ab2e4a4 R15: 0000000000000015 [ 425.751596][T25897] ? find_held_lock+0x2b/0x80 [ 425.753111][T25897] ? is_bpf_text_address+0x8a/0x1a0 [ 425.754762][T25897] ? bpf_ksym_find+0x127/0x1c0 [ 425.756286][T25897] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 425.758222][T25897] ? is_bpf_text_address+0x94/0x1a0 [ 425.759848][T25897] ? kernel_text_address+0x8d/0x100 [ 425.761519][T25897] ? widen_string+0xdc/0x2d0 [ 425.762966][T25897] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 425.764899][T25897] ? unwind_get_return_address+0x59/0xa0 [ 425.766567][T25897] ? stack_trace_save+0x8e/0xc0 [ 425.768039][T25897] ? __pfx_stack_trace_save+0x10/0x10 [ 425.769658][T25897] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 425.771506][T25897] ? policy_nodemask+0xea/0x4e0 [ 425.773046][T25897] alloc_pages_mpol+0x1fb/0x550 [ 425.774621][T25897] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 425.776197][T25897] ___kmalloc_large_node+0xed/0x160 [ 425.777693][T25897] __kmalloc_large_node_noprof+0x1c/0x70 [ 425.779370][T25897] __kmalloc_noprof.cold+0xc/0x62 [ 425.780860][T25897] ? drm_syncobj_array_find+0x35/0x3c0 [ 425.782435][T25897] ? drm_syncobj_array_find+0x35/0x3c0 [ 425.784047][T25897] drm_syncobj_array_find+0x35/0x3c0 [ 425.785645][T25897] ? __lock_acquire+0xb8a/0x1c90 [ 425.787095][T25897] drm_syncobj_query_ioctl+0x27e/0xbe0 [ 425.788711][T25897] ? kasan_quarantine_put+0x10a/0x240 [ 425.790291][T25897] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 425.792042][T25897] ? find_held_lock+0x2b/0x80 [ 425.793436][T25897] ? drm_dev_exit+0x41/0x60 [ 425.794804][T25897] drm_ioctl_kernel+0x1f4/0x3e0 [ 425.796218][T25897] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 425.797957][T25897] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 425.799511][T25897] drm_ioctl+0x5c9/0xc30 [ 425.800784][T25897] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 425.802487][T25897] ? __pfx_drm_ioctl+0x10/0x10 [ 425.803934][T25897] ? selinux_file_ioctl+0x180/0x270 [ 425.805462][T25897] ? selinux_file_ioctl+0xb4/0x270 [ 425.806990][T25897] ? __pfx_drm_ioctl+0x10/0x10 [ 425.808447][T25897] __x64_sys_ioctl+0x18e/0x210 [ 425.809886][T25897] do_syscall_64+0xcd/0xfa0 [ 425.811306][T25897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.813104][T25897] RIP: 0033:0x7fdf8b58f6c9 [ 425.814497][T25897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.820357][T25897] RSP: 002b:00007fdf8c393038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.822978][T25897] RAX: ffffffffffffffda RBX: 00007fdf8b7e5fa0 RCX: 00007fdf8b58f6c9 [ 425.825482][T25897] RDX: 00002000000002c0 RSI: 00000000c01864cb RDI: 0000000000000004 [ 425.827962][T25897] RBP: 00007fdf8b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 425.830413][T25897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.832908][T25897] R13: 00007fdf8b7e6038 R14: 00007fdf8b7e5fa0 R15: 00007fff59076b38 [ 425.835410][T25897] [ 425.837142][T25897] Kernel Offset: disabled [ 425.838523][T25897] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:52:35 Registers: info registers vcpu 0 CPU#0 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85296435 RDI=ffffffff9add8780 RBP=ffffffff9add8740 RSP=ffffc9000349f0c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000002e R14=ffffffff9add8740 R15=ffffffff852963d0 RIP=ffffffff8529645f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fdf8c3936c0 ffffffff 00c00000 GS =0000 ffff8880d6a08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdf8b573360 CR3=000000002be80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf8b613050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf8b61305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf8b613057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf8b61306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf8b6130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf8b6131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000032647261632f 6972642f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000011475142400c 4a51470c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000180 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080080783 RBX=0000000000000000 RCX=ffff8880292a9070 RDX=000000000000009d RSI=ffffffff86799cd8 RDI=ffff8880292a92d0 RBP=0000000000000001 RSP=ffffc900006a0b98 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000001 R13=0000000000004e20 R14=ffff8880292a9070 R15=0000000000000001 RIP=ffffffff86799d1f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f32c9b5e300 ffffffff 00c00000 GS =0000 ffff8880d6b08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fffbf6ccf3c CR3=0000000032efc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=7c7b24a5817a1efe c626dd55c83f5c2c 7c7b24a5817a1efe c626dd55c83f5c2c 7c7b24a5817a1efe c626dd55c83f5c2c 7c7b24a5817a1efe c626dd55c83f5c2c ZMM18=0862eb5cb67a0ee5 92531aa0dab2a2d9 0862eb5cb67a0ee5 92531aa0dab2a2d9 0862eb5cb67a0ee5 92531aa0dab2a2d9 0862eb5cb67a0ee5 92531aa0dab2a2d9 ZMM19=6f1c000000000000 0000000000000005 6f1c000000000000 0000000000000004 6f1c000000000000 0000000000000003 6f1c000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 002403fe080e8003 0e80040680030680 040ba0030008000b 90030fffffffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff040b80030fffff ffffffff0404a4e6 0800010000000806 06013bc4000404a4 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e608000100000008 0606013be8000030 5f6576616c735f76 646174616201ffff ZMM24=dab2a2d9dab2a2d9 dab2a2d9dab2a2d9 dab2a2d9dab2a2d9 dab2a2d9dab2a2d9 dab2a2d9dab2a2d9 dab2a2d9dab2a2d9 dab2a2d9dab2a2d9 dab2a2d9dab2a2d9 ZMM25=92531aa092531aa0 92531aa092531aa0 92531aa092531aa0 92531aa092531aa0 92531aa092531aa0 92531aa092531aa0 92531aa092531aa0 92531aa092531aa0 ZMM26=b67a0ee5b67a0ee5 b67a0ee5b67a0ee5 b67a0ee5b67a0ee5 b67a0ee5b67a0ee5 b67a0ee5b67a0ee5 b67a0ee5b67a0ee5 b67a0ee5b67a0ee5 b67a0ee5b67a0ee5 ZMM27=0862eb5c0862eb5c 0862eb5c0862eb5c 0862eb5c0862eb5c 0862eb5c0862eb5c 0862eb5c0862eb5c 0862eb5c0862eb5c 0862eb5c0862eb5c 0862eb5c0862eb5c ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=6d1c00006d1c0000 6d1c00006d1c0000 6d1c00006d1c0000 6d1c00006d1c0000 6d1c00006d1c0000 6d1c00006d1c0000 6d1c00006d1c0000 6d1c00006d1c0000 info registers vcpu 2 CPU#2 RAX=0000000080000000 RBX=0000000000000002 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8db1a930 RDI=ffffffff8bf07040 RBP=0000000000000002 RSP=ffffc9000413efc8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000007cdd R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b608a5d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc804f17d60 CR3=0000000035e47000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe8ca13050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe8ca1305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe8ca13057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe8ca1306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe8ca130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe8ca131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe8cbb74a8 00007efe8cbb74a0 00007efe8cbb7498 00007efe8cbb7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe8d71d100 00007efe8cbb7460 00007efe8cbb7478 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe8cbb74b8 00007efe8cbb74b0 00007efe8cbb74a8 00007efe8cbb74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000e0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000004b209b RBX=0000000000000003 RCX=ffffffff8b6082a9 RDX=0000000000000000 RSI=ffffffff8da2b0a2 RDI=ffffffff8bf07040 RBP=ffffed1003bd6000 RSP=ffffc90000197de8 R8 =0000000000000001 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000001 R12=0000000000000003 R13=ffff88801deb0000 R14=ffffffff908203d0 R15=0000000000000000 RIP=ffffffff8b606d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6d08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c318b84 CR3=000000002170b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=0000000010000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563c0cacc600 0000563c0cacc600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff6dce5590 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 756c42205d383339 3554205b5d373436 3639342e35323420 205b203a6c656e72 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 383939352e352e7a 79733d6d6d6f6320 31303735323d6469 702074656b636f73 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f6574756f725f6b 6e696c74656e3d73 73616c637320303d 657079745f67736d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6e20303d6c6f63 6f746f7270203a65 67617373656d206b 6e696c74656e2064 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a696e676f6365 726e75203a78756e 694c4553205d3130 373532545b5d3535 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000