last executing test programs: 6m29.601293502s ago: executing program 1 (id=2): syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x800}, 0x10) unshare(0x2a020480) r0 = memfd_create(&(0x7f0000000000)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb1w&\xdfP\xba\xdf\xf9F\xc1\xd4x\xaa\x92~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7R\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b$\x0e\x00\x00\x00\x00\x00\x00\x94&\xac\x88\x95\xff\xda\x14d\xcbx\bx\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x00\x17\x00\x00sH\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,-\n\xe6gB#\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f \xbb\xfa\xd3\x88\xad=5J\x13>u\x8c\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xdf\xcf\b\x9f\xb6\xf2\x84\xbag\xe5.\xe4\x1f\xb3\xf4\xc6\xad\x06\x1btb\"\x87\x0f\xd7\xf9\x10~\xdc7\xe7\xdc\x11\xd8?\x040\xc5%%\x1c\x8d\xe0\xb99\x10\x11\x84\xbb\xa9\x9em\x1d\xfd\xd4\xcf\x8cH\xa6\x980\xadg\x9b\x8b$\x0e\x04\xd8\xaa\x17\xac\xf4\xda\xd0z\x87H\x03Du\x91\x839\xec\xd7\xde\xf2P\xf6dj-b\x84\x18\xe9\fy`\xca\x86Za7\xe4P\x95B\xeefTdk\x83\xcc\xa4\xa5\b\x1e\x998\x042\xb2\xdd\x8a\xea\xefQ\xf3-Z\a\xd3\xbb\xd5\x80\xb7\v\xa9\xae*\xca\xd90\xc8\xf4_\xe9N7*K:\xe1\xa4\xf7G\a\xd4Q\f7\xdeK,&\xf8\xe7\xffj\xd1\xae\xa1\x04\xf9\xd5\xc5\\\xcc:\xb1\xa70\x84\xf72 \xd1\xcb}Ky\xa5\x9bx&\xad\xf0U\x1aK\x8bN\xcd\xf50\xa3\xc7\xee\x7f\x1a#\xc9\xb3^\xdd/\x13\xb6\xe9%\xed\x04\xf4o}\x17U\x16C\xb2\xea7C\xb6fH$\xd6\xeb\x03\xd2\xa9\xa0\x9a\x93\xed-S\xe5p\xa28*\x98C\xa9\xf5\xf1*\xaa3\xb9\x88\xb3E\x03\x06\xf7\xa7', 0xa) fchmod(r0, 0x184) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r8, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902"], 0x0) ioctl$EVIOCRMFF(r4, 0x4004550e, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r9, 0x29, 0x2b, &(0x7f0000000b40)={0x3ff, {{0xa, 0x4e21, 0x4, @mcast2, 0x8}}, {{0xa, 0x4e21, 0x8, @mcast2, 0x67}}}, 0x108) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0xa850880, &(0x7f0000000280)="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", 0xff, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000a40)="63f9e1d77bac2a67309703f962f2c26d35c7f1d2c51667f974d01e9ffbcff0032498445e1ff8aed2fcf25e8cbe5e3609859ca3c2e214c6be50006957e9776ffd9abb216d7652503c66123f2dc982c28f0f51540a418417b19db4e8f086067fe9cbc6e785ad57b1b033a8621d55ddf0bde510f869b5ffa2645a0ddf1d12efd61620199e7c9d95a3da20ea6891aeddc18769e608c6336266b4fdf99245689fc2c1af00573830b7fc12e568c91ed52a307a37687ff32091548675f6aef8d30a03037adc1604d63803e03950f966158970dd8901b26c6f762259fae7b65a01748bca2b2cdd66") openat$cgroup_int(r10, &(0x7f0000000400)='notify_on_release\x00', 0x2, 0x0) r11 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) ioctl$HIDIOCGRAWNAME(r11, 0x80404804, &(0x7f0000000000)) 6m29.261107398s ago: executing program 2 (id=6): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6aec, 0x1000}}, './cgroup\x00'}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x0, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048851}, 0x20000004) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r4, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40) unlink(&(0x7f0000000000)='./file0\x00') ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000001240)={0x9, 0x5, 0x4, 0x0, 0x5, 0x0, [{0x200, 0x5, 0xb665, '\x00', 0x2100}, {0x9, 0xfffffffffffffffa, 0x6, '\x00', 0x8}, {0x5, 0x3, 0x4, '\x00', 0x1080}, {0x4, 0x9, 0x0, '\x00', 0x2002}, {0x6, 0x1, 0xfff, '\x00', 0x800}]}) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r1, 0x0, 0x12, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) pread64(r0, &(0x7f0000000240)=""/4080, 0xff0, 0x5) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="0f09c4a1a458fa0f79ab0e000000c423c948fb9a67f3420f09660fc240ccf964460f01cac481dd69cb0f09642e65410f01c4", 0x32}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001380)={{0xa0, 0x7f}, 'port0\x00', 0x10, 0xa0c22, 0x9b200000, 0x2, 0xffff, 0x5, 0x562f, 0x0, 0x3, 0x7c}) getsockopt$inet6_tcp_int(r5, 0x6, 0x22, 0x0, &(0x7f0000000080)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='adfs\x00', 0x221000d, 0x0) 6m28.991146189s ago: executing program 2 (id=14): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00100003040000000000000000f200000053203783955bad76b883e2e1a5d9ac68ab81de680fa854b95db4353ad8ae8afeb14c70d7385e74d34337ee6e5a1b311cb6bf4f3509681a31bf30f24b54fb3f41e70255ab232092c068dd19682fd75f5680ec574150dc01483e24207ac9da24d4bce2220746bba90ec08eb31903c4f76e4d4a9770bf7bfc1917bfdbb7060a96c61f0528bd64c0f6746844cd4fd2d5a1105cd0cbfa62c553aedcc9c3565b0e1cb7358bd4edb29c13510e2a42b4f2d8edc812e3d312a405353111fd9b6fe89a147b", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) write(r0, &(0x7f00000000c0)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001", 0x21) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20, 0x40e28}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008001}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x34, r6, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) r9 = socket$l2tp(0x2, 0x2, 0x73) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xa7, '\x00', 0x0, 0x0, 0x7}}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', r2, 0x4, 0x4e, 0x8, 0x4, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x7800, 0x7, 0x4}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, r6, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 6m28.857651661s ago: executing program 2 (id=17): r0 = socket$inet(0xa, 0x801, 0x84) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/4095, 0xfff}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/169, 0xa9}], 0x0, 0x1}, 0x20) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) listen(r0, 0x8) r2 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) socket$inet(0xa, 0x801, 0x84) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) io_uring_setup(0x3450, &(0x7f0000000080)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/4095, 0xfff}], 0x1) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/169, 0xa9}], 0x0, 0x1}, 0x20) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) (async) listen(r0, 0x8) (async) accept4(r0, 0x0, 0x0, 0x80000) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) (async) 6m28.74096304s ago: executing program 2 (id=18): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async, rerun: 64) socket(0x10, 0x3, 0x0) (async) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) (async) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (rerun: 64) r6 = socket(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x27, &(0x7f00000002c0)={@broadcast, @remote, @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@generic={0x4305, "e9770574d659570eb411d4ce33f92ca16c201e0d7a"}}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000180)='./control\x00', 0xa4000960) (async) inotify_add_watch(r8, &(0x7f0000000000)='./control\x00', 0x40000000) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000180)=@x86={0x9, 0x9, 0xab, 0x0, 0x8, 0x58, 0x1c, 0xfa, 0x5, 0x3, 0x5, 0x8, 0x0, 0x5, 0x7, 0xc7, 0x10, 0x80, 0x6b, '\x00', 0x8, 0x7}) ioctl$KVM_RUN(r11, 0xae80, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r10, @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6m28.681109912s ago: executing program 2 (id=20): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) syz_open_dev$evdev(&(0x7f0000000000), 0x10000, 0x600001) openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x600, 0x0) r2 = syz_io_uring_setup(0x286f, &(0x7f00000001c0)={0x0, 0x5f41, 0x4000, 0x1, 0xca}, &(0x7f0000000100), &(0x7f0000000240)) r3 = syz_io_uring_setup(0x1000010a, &(0x7f0000000140)={0x0, 0x5883, 0x4c20, 0x0, 0x1cd, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) close(0x3) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r6, &(0x7f00000004c0)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4000001}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r7, 0x80) accept$netrom(r7, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 6m28.53996302s ago: executing program 3 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @loopback, 0xfffffffb}, 0x1c, 0x0, 0x0, 0x0, 0x60}}], 0x1, 0x2004c944) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001540)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) fchmod(r2, 0x20) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r3], 0x20}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000080), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') recvmsg$unix(r1, &(0x7f0000000540)={&(0x7f00000000c0), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000440)=""/117, 0x75}], 0x1, &(0x7f00000004c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x10040) 6m28.481120848s ago: executing program 3 (id=28): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x207ffd, 0xfffffffe}, 0x8) (async) shutdown(r0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfcc00000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffb, 0xffffffffffffff0f, 0x0, @buffer={0x0, 0x0, &(0x7f0000000240)=""/86}, &(0x7f00000000c0)="8516a69e20db268c99540c0c4d755ef653e8f4a6151d2e4d9f4c076575f96acf7c1518d5f60238b377d659f7bb700debccf243dbb01f49c4cb23c6c6bf4119e0df3d877e3263e5e3d9d4f4335d1eff843c53a999bed1ba0070eeda8f6717e0ea1d71aa6a3acedb5ed60c20a93f34bd93bfec5a81ec493fb3a69dff6dd7481d79822d14c335fbd34fd723beaea2", 0x0, 0xfffffffb, 0x10039, 0x0, 0x0}) 6m28.480205322s ago: executing program 3 (id=29): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, &(0x7f0000000280)={&(0x7f0000000780)=[0x1, 0x9, 0x9, 0x800, 0x0, 0x6, 0x3, 0x7, 0xffffffff, 0x8, 0x0, 0x8, 0x3, 0x4, 0x9, 0x1, 0x9, 0x5, 0x7, 0xaf, 0x48, 0x1, 0xa578, 0x7ad, 0x2, 0x4, 0x8d7, 0xfff, 0x6, 0x4, 0xffff, 0x870e, 0x88a9, 0x3, 0x4, 0x2, 0x100, 0x1, 0x2, 0x0, 0xab7, 0xd0a, 0x8, 0x9, 0x1, 0x5, 0x2, 0x3, 0x80, 0x209, 0x1, 0xffff, 0x5, 0x87ff, 0xffff042c, 0x7b, 0x5, 0x8, 0x9, 0xf4, 0x101, 0x0, 0x9, 0x80000001, 0x80, 0x0, 0x1, 0x6, 0xfffffffb, 0xfbe3, 0x4, 0x0, 0xffff, 0x6, 0x2, 0x1, 0x4, 0x3, 0x2dc7, 0x6, 0x1, 0x3d2540, 0xfffff683, 0xffffffff, 0x6, 0x4, 0x1, 0xd75, 0x4, 0x0, 0xfffffff8, 0x7f, 0x5, 0x4, 0xfffffff3, 0x1, 0x894, 0x101, 0xd1, 0x22eb99fa, 0x5, 0x6, 0x2, 0xcd, 0x5, 0x2, 0x3, 0x0, 0x7, 0x4, 0x6, 0x200, 0x1000, 0x1, 0x10001, 0x9, 0xffffffff, 0x1a6, 0x3, 0x7ff, 0x6fa, 0xee, 0xb1, 0x3ff, 0x2, 0xc8ce, 0x80000000, 0x3ff, 0x4, 0x4, 0x1, 0x4, 0x40, 0xede, 0x6, 0x2, 0x4, 0x2, 0xb9c2, 0x80000000, 0x1, 0x2, 0xffffffff, 0x417, 0xaa, 0x0, 0x0, 0x6, 0xaf3e, 0xfff, 0x4, 0x8, 0x40, 0x8, 0x3, 0x1, 0x0, 0x0, 0x1f09, 0x3, 0x7, 0x1, 0x753e, 0x0, 0xd010, 0x8, 0x3dc, 0xffff, 0xfffff807, 0xdc, 0x7a0b8, 0x0, 0xd6, 0x5, 0xec, 0xff, 0x5, 0x1000, 0x6, 0x5, 0xfffffffa, 0x9, 0x4, 0x80000000, 0x9, 0x8, 0x7, 0x2, 0x66ec4556, 0x1, 0x6, 0xfffffffd, 0x80000000, 0xe, 0x7, 0x69, 0x100, 0x3, 0x401, 0x10001, 0x0, 0x1000, 0xfffffe01, 0x6, 0x0, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2, 0x8, 0x40, 0x6, 0x602b0e0f, 0xf, 0x8, 0x0, 0x5c3c, 0xffffffff, 0x10, 0x400, 0x80000000, 0x3, 0xb, 0x6, 0x0, 0x400, 0x9043, 0x7, 0xb5db, 0x10000, 0x5, 0x6, 0x800, 0x2d9a, 0x3, 0x48b163a2, 0x5, 0x5, 0x74082ae9, 0x8, 0x6, 0x4, 0x4, 0x2, 0xb, 0xffac, 0x4, 0x1, 0x5, 0x0, 0x9, 0x1, 0x7, 0x3572000, 0x3, 0x8, 0x8, 0x1, 0x5, 0x81, 0xf1, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x6be, 0x7, 0x3, 0x90, 0x1, 0x10, 0x40, 0x8, 0x4, 0x7, 0x1, 0x3, 0x5dbb3750, 0x9, 0x3, 0x9, 0x9, 0xffffafcb, 0x0, 0x6, 0xe4d9, 0xc, 0x1, 0x6, 0x0, 0x7, 0x0, 0x1, 0x5e6fe215, 0x5, 0x2, 0x8, 0x861, 0x6, 0x775e71ab, 0x8, 0x6, 0xa76, 0x1, 0x3, 0x1, 0x5, 0x1ff, 0x9, 0x2, 0x101, 0x8000, 0x5, 0x2, 0xe, 0x2a38, 0x0, 0x2, 0x600000, 0x1, 0xa339, 0x2, 0xd, 0x8509, 0x6, 0x4a, 0xd7d40, 0x1, 0x782, 0x101, 0x1, 0x252, 0x4, 0xdf93, 0x40, 0x5, 0x3, 0x10001, 0x0, 0xff, 0xf, 0x7, 0xa1, 0x3, 0x23, 0x6, 0x6, 0x6c67, 0x2, 0xe4ca, 0x1, 0x9, 0x2, 0x90000000, 0x0, 0x7, 0x81, 0x40, 0x3, 0x2, 0x5, 0x401, 0x7f, 0x800, 0x7, 0xfffffffe, 0x16e, 0x10001, 0x2, 0x9, 0x5, 0x3, 0x2, 0xfffff718, 0x6, 0x6e, 0xfffffff7, 0x0, 0x6, 0x8, 0x0, 0xf, 0x1c, 0x50f, 0x5f95, 0x2, 0x50e9d5d7, 0x0, 0x4, 0x6, 0x80000001, 0xa94, 0x2, 0x741c7811, 0x9, 0x5, 0x0, 0x2, 0x7, 0xfffffff7, 0x8, 0x10001, 0x9, 0x1, 0x5, 0x5, 0x1ec, 0x0, 0x1, 0x2, 0x0, 0x1, 0x6, 0xfff, 0x7, 0x4, 0x6, 0x7, 0x401, 0x0, 0x401, 0x4, 0x9, 0x11c0000, 0x2, 0x4, 0x9, 0x9, 0x3, 0x101, 0xfffffff9, 0x6, 0x2, 0x100, 0xa57, 0x5, 0x2, 0xfffffffc, 0x2, 0x4, 0x4, 0x4, 0x7fff, 0x0, 0xc, 0x0, 0x7, 0x400, 0x1, 0x2, 0xffffffff, 0x3, 0x6, 0x5, 0x2, 0xfffffffd, 0xff, 0x9, 0x10, 0x7, 0x0, 0x8, 0xfffffffc, 0x4, 0x4680444b, 0x80000000, 0x0, 0x81, 0x9, 0x2, 0xccd, 0x4, 0x8, 0x4, 0x4, 0x76cc, 0x1995, 0xefe, 0x0, 0x1a, 0x5, 0x8, 0x8, 0x5, 0x10000, 0x1ff, 0x5, 0x9, 0x5, 0xf, 0x0, 0x8, 0x6, 0x7fff, 0x800, 0x3, 0x7, 0x5, 0x1ff, 0xf2, 0x5, 0xa, 0xfffffffe, 0x7e59f772, 0x230d, 0x7, 0x4, 0x5, 0x8, 0x9, 0x0, 0x2, 0x6, 0x2, 0x6, 0x8, 0x9, 0xff, 0x7, 0x101, 0x10, 0x9, 0x7, 0x2, 0x8, 0xffffffff, 0x6, 0x9, 0x6, 0x9, 0x8, 0x7, 0x3, 0x77, 0x9, 0x3, 0x80, 0x47, 0x5, 0x3, 0x1, 0x6, 0x5b47, 0x9, 0xfffffffe, 0x200, 0x9, 0x5, 0x1, 0x6, 0x2, 0xa39, 0x101, 0x10, 0x8001, 0x100, 0x6c2, 0x10, 0x49b8, 0x4, 0x101, 0x6, 0x641, 0x8000, 0x8, 0x3, 0x7fffffff, 0x4, 0xc, 0x80, 0x5, 0x401, 0x7, 0x8001, 0x5, 0x6, 0x7, 0x7, 0x1, 0x18b8, 0x6, 0x9, 0x4, 0x5, 0x3ff, 0x5, 0x7, 0xdd, 0x3, 0x4, 0x3b0, 0x839, 0xffffff9d, 0x7, 0x4, 0x7, 0x0, 0x0, 0xff, 0x2f, 0x2, 0x3, 0x3, 0x7, 0x2, 0xcd39, 0x8, 0x5, 0x4e, 0x9, 0xe, 0x3ff, 0x9, 0x6, 0x3, 0x9, 0x7, 0x1ff, 0x4, 0xa4, 0x0, 0x8000, 0x5, 0x6, 0x4, 0x1, 0x3, 0x4, 0x1, 0x1, 0x8, 0x8, 0x3, 0xe, 0xff800000, 0x10000009, 0x7, 0x7, 0x8, 0x383, 0x5, 0xffffffff, 0x0, 0x1, 0x400, 0xfd, 0x9, 0x0, 0x0, 0x32, 0x100, 0x0, 0x80000001, 0xff, 0xffffae34, 0x2000000, 0x8a, 0xff, 0xffffffff, 0x7, 0x2686adca, 0x1, 0x5, 0x8, 0x9, 0x4, 0xfffffff8, 0x5, 0x6, 0xfffffb23, 0x0, 0xabd, 0xfffffffc, 0x5, 0x180, 0x40000000, 0x1ff, 0x9, 0x800, 0x48, 0x401, 0x3, 0xc, 0x9, 0x6, 0x7, 0x2, 0x8, 0x4, 0x4, 0x2, 0x0, 0x8, 0x7, 0x8, 0xd0a, 0x888, 0x1, 0x7, 0x3, 0x4, 0x1, 0x1, 0x9, 0x5, 0xb, 0x3, 0x3, 0xffffff01, 0x1, 0x101, 0x2c8, 0x6, 0x2, 0x9, 0x10001, 0x1, 0xfffffff8, 0x3ba96b8f, 0x0, 0x4, 0x7c6b7408, 0xd7b1, 0x2, 0x3, 0x8, 0x7, 0x1b, 0x800, 0x200, 0x7fffffff, 0x1, 0x7, 0xb1, 0x2, 0xf7f, 0x8, 0x0, 0x9, 0x8, 0x0, 0x7ff, 0x3, 0x1, 0x0, 0x9, 0x8, 0xe9, 0x6, 0x80000000, 0x4, 0x5, 0x431, 0x4, 0xf76a, 0x7, 0xff, 0x6, 0x2, 0x1a, 0x8000, 0x3ff, 0x5, 0x4, 0x2, 0x3, 0xffffffff, 0x7cd, 0x6, 0x3, 0x4, 0x1, 0x101, 0x10f, 0x4, 0x0, 0x0, 0xfffffffa, 0x101, 0x6a1b, 0x7, 0xffffff94, 0x9, 0xffff, 0xfd6, 0x9876, 0x6, 0x5, 0x0, 0x86, 0x0, 0x431, 0x100, 0xf0, 0x3, 0xfffffffc, 0x3, 0x0, 0x7ff, 0x3, 0x0, 0x9, 0xc23, 0xfffffffb, 0x400000, 0x97, 0x0, 0x3, 0x5, 0x9, 0x0, 0x800, 0x5, 0x8000, 0x3, 0x200, 0xe, 0x0, 0x80, 0x81, 0x9, 0x2, 0xc2, 0x100, 0xffffffff, 0x6, 0x8000, 0x8c1, 0x80, 0x3ff, 0x7, 0x1, 0x80, 0x9, 0x1, 0x10001, 0x6ff, 0xff, 0xe0f0, 0x6, 0x85b9, 0x80, 0x5, 0xf, 0x7, 0x3ff, 0xb, 0x5, 0x400000, 0x4, 0x6, 0x90000, 0x7, 0x9, 0x5, 0x8, 0x7, 0x3, 0x6, 0x1000, 0xda, 0x0, 0xa, 0x7f, 0x8, 0xffffffff, 0x80000, 0x8, 0x3e0, 0x1, 0x7, 0x1fa3, 0x400, 0x64, 0x5, 0xb, 0x4291, 0x0, 0xadd, 0x66, 0xfffffffb, 0x200, 0x9, 0x4, 0x6, 0x9, 0x3b, 0xfffffffb, 0x5, 0xb, 0x4, 0x7fff, 0x2, 0x8, 0x6, 0x9, 0x2, 0xffffff80, 0x3, 0x571b0000, 0x7, 0x1, 0x5, 0x8, 0x401, 0x1, 0x7fff, 0x9, 0x78c, 0x4, 0x5, 0xfff, 0xfffffffd, 0x9, 0x400, 0x100, 0x1, 0x0, 0x5, 0x0, 0x4, 0x0, 0xfffff800, 0x6, 0x5, 0x1ff, 0x6, 0x49, 0xfffeffff, 0x10000, 0x4, 0x9, 0x0, 0x9, 0x9, 0x5, 0x81, 0x0, 0x20b9928e, 0x4, 0x0, 0x4, 0x5, 0x42, 0xa7df, 0xffff, 0x7, 0x7, 0x0, 0x5, 0x5, 0x4, 0x101, 0x8000, 0x5, 0x0, 0x6, 0x0, 0x77, 0x5, 0xdd, 0x0, 0x46, 0xffff, 0x9, 0x8, 0x1, 0x2, 0xfff, 0x80000000, 0xee, 0x7, 0x2f2, 0x9, 0x6a, 0x8, 0xffffffff, 0x2, 0x8, 0xc0000000, 0x3ff, 0x76, 0x2, 0xa, 0x5, 0xe, 0x100, 0x9, 0x5, 0x504, 0x7, 0x9, 0x0, 0x80000001, 0x4, 0x4, 0x2, 0xb0000000, 0x7, 0x7, 0xd, 0x0, 0xc, 0x7, 0xb3fa, 0x0, 0x1, 0x7, 0x2, 0x7ff, 0x800, 0x9, 0x4, 0xfffffffc, 0x4, 0x80000000, 0x7, 0x1, 0x6, 0x401, 0x5], 0x6, 0x400, 0x10}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x8000000, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000005000000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b0000140000001100010040000000000000000700000a000000"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000005000000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b0000140000001100010040000000000000000700000a000000"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f00000001c0)={0x5, 0x3, 0xb, 0x8, 0x0, 0x3}) close(0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000080)={0x1d, r7}, 0x10) 6m28.300340755s ago: executing program 3 (id=31): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg/1:0:0:0\x00', 0x40802, 0x0) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f00000000c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@loopback, 0x4e20, 0x7, 0x4e20, 0x0, 0x2, 0x20, 0xa0, 0x3a, 0x0, r3}, {0x7ff, 0xfff, 0x5, 0x1, 0x2, 0x1, 0xe9e0, 0xfffffffffffff85b}, {0x3, 0x7fff, 0x5, 0x8}, 0x90cf, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in=@private=0xa010101, 0x4d6, 0x2b}, 0xa, @in=@rand_addr=0x64010100, 0x3502, 0x0, 0x0, 0x7, 0x9, 0x8, 0x8}}, 0xe8) (async) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@loopback, 0x4e20, 0x7, 0x4e20, 0x0, 0x2, 0x20, 0xa0, 0x3a, 0x0, r3}, {0x7ff, 0xfff, 0x5, 0x1, 0x2, 0x1, 0xe9e0, 0xfffffffffffff85b}, {0x3, 0x7fff, 0x5, 0x8}, 0x90cf, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in=@private=0xa010101, 0x4d6, 0x2b}, 0xa, @in=@rand_addr=0x64010100, 0x3502, 0x0, 0x0, 0x7, 0x9, 0x8, 0x8}}, 0xe8) r4 = syz_open_dev$vcsa(&(0x7f0000000340), 0x3, 0x0) openat$cgroup_pressure(r4, &(0x7f0000000380)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r4, &(0x7f0000000380)='memory.pressure\x00', 0x2, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000003c0)) bind$bt_hci(r1, &(0x7f0000000400)={0x1f, 0x4, 0x7}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000400)={0x1f, 0x4, 0x7}, 0x6) socket$unix(0x1, 0x0, 0x0) (async) socket$unix(0x1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r4) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440), 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xf4, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffe3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0xa006, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000680)={'full', 0x20, 0x6, 0x20, 0x3}, 0x2f) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000006c0)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r8 = getpid() process_vm_readv(r8, &(0x7f00000029c0)=[{&(0x7f0000000700)=""/221, 0xdd}, {&(0x7f0000000800)=""/109, 0x6d}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/104, 0x68}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/10, 0xa}, {&(0x7f0000002940)=""/113, 0x71}], 0x7, &(0x7f0000002d80)=[{&(0x7f0000002a40)=""/168, 0xa8}, {&(0x7f0000002b00)=""/160, 0xa0}, {&(0x7f0000002bc0)=""/135, 0x87}, {&(0x7f0000002c80)=""/215, 0xd7}], 0x4, 0x0) r9 = accept4$vsock_stream(r6, &(0x7f0000002dc0)={0x28, 0x0, 0x0, @host}, 0x10, 0x180000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r9, 0x8982, &(0x7f0000002e00)) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r9, 0x8982, &(0x7f0000002e00)) open(&(0x7f0000002e40)='./file0\x00', 0x141200, 0x118) (async) r10 = open(&(0x7f0000002e40)='./file0\x00', 0x141200, 0x118) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000002e80)) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000002e80)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000002ec0)={r11}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000002f40)={0x3, &(0x7f0000002f00)=[{0x5, 0xe5, 0x5, 0xf3a8}, {0x8000, 0x7, 0x1, 0x2}, {0xff, 0x7, 0x1, 0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000002f40)={0x3, &(0x7f0000002f00)=[{0x5, 0xe5, 0x5, 0xf3a8}, {0x8000, 0x7, 0x1, 0x2}, {0xff, 0x7, 0x1, 0x6}]}, 0x10) getsockopt$IP6T_SO_GET_REVISION_TARGET(r10, 0x29, 0x45, &(0x7f0000002f80)={'ipvs\x00'}, &(0x7f0000002fc0)=0x1e) r12 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000003000), 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000003040)={0x0, 0x8001}, &(0x7f0000003080)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r12, 0x84, 0xa, &(0x7f00000030c0)={0x7, 0x0, 0x4, 0x3b, 0x8, 0x3, 0x5, 0x1, r13}, 0x20) 6m28.299803975s ago: executing program 3 (id=32): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2c}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x24000810) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='nv\x00', 0x3) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m22.588111025s ago: executing program 1 (id=34): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1f7508ee}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg0\x00'}]}]}], {0x14}}, 0xa8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r3, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01000b1027bd7000c7e0df2100"], 0x14}, 0x1, 0x0, 0x0, 0x40840}, 0x4020) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xfffffffffffffe0d, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pimreg1\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffe}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008014}, 0x20040000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x4010, r0, 0x78345000) 6m18.358854999s ago: executing program 2 (id=35): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000480)=[{0x3, 0x0, {0x0, 0x0, 0x2}, {0x0, 0xf0, 0x2}, 0x2, 0xfd}, {0x3, 0x3, {0x1, 0xf0, 0x3}, {0x0, 0xf0, 0x3}, 0x2, 0xfe}], 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x8000000, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x3}, [@FRA_FLOW={0x8, 0xb, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0x6, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 6m18.35853366s ago: executing program 3 (id=36): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@empty}, 0x20) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80000, 0x0, 0xffffffffffffffff}) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x800, 0x7}, &(0x7f0000000240)=0x8) (rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={r2, @in={{0x2, 0x4e20, @multicast2}}, [0x9, 0xffffffffffff47f6, 0x1, 0x2, 0x9, 0xfffffffffffffff8, 0xbcc, 0x8, 0xa, 0x2, 0xe18e, 0x6, 0x8, 0x7, 0x70]}, &(0x7f0000000380)=0x100) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) close_range(r3, r0, 0x2) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "aa86a17f10963671", "fd9a1970cdcecf0157c1240f9d84d5c3f2520b283905a31bb1aac79dc8c1ad41", "4fa07939", "6f7084fea1627f1b"}, 0x38) (async) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000480)="974e3ae35822b9296e342cf2427c84a96e709c1b607e04ec9f93df5650f7637d7cc814f70ae50c665e8b6aed0ce026e93097a31d9b2dda6de15e42295f38d497c0832833d45cf53d178259372c7478a6218e6d6c71698b74b09600685fd2472fc28e1c2024aedde33b602d8292f5df42fab32dfd84b8c5ae5f646284e34a1f687b41a77e646fc2a0d3c0622c17815af238aca89084cb04b2947ae90ccf4df2aef2926f7954762d13cca3a24e527eee56dc674e345c86ee15bfe123e049415399c9dc9e768a9300655b6f9652e37c74fd", 0xd0}, {&(0x7f00000003c0)="0f5cc5", 0x3}, {&(0x7f00000007c0)="fa24d41a67261be5090eace8243d9dd4f6eb21abc81b070e32ecf1c13b037aec505b477105d03c550ae69229af4b67739063d8a735d05db2331fc9ebb32453e9694552ad4649f15f4322fd4c3e2c5ee76080a35fc12ac7a89a2117439c677d3ef9b041dfd8ab4c33d2bfbdbff6fd794e5751f23c62d8289584a34d5536438bf719dbd9b9ba1efe48a19e03a2e27c962cae", 0x91}, {&(0x7f0000000880)="2ca01730194f4130c132b3a72db238abccfa835eac5ef59b4c7973f0d48836d383c4598366ad17eee96d640353dbc0360af4cfc850adde76e17d16ab163ba81c84c84573ac0b483e27703168a0242cf83b8749d8a08780293c116dbd917b4fe31ac03e05e575eb03607e336056d90ea5b222c0bc5f1bb6f11541fb51aaf37af9e117a01802d4c22457af4be0985e7b68a2fd0833c2e46fd890a9f33226173fe7eeb6130dcf22d418f367ebbdf7ded585938cff726982168fec1bfaac7bca33e5aaeeaae260b50ff559062903d69b613c5be877b4f32b623148", 0xd9}, {&(0x7f0000000980)="134321dbeb895c18a6ecd9c1dfbf35b0e391da4a11326f77cf67fb6f0e5fb1bf240b1d563e638c6ee4bcff81a7cf1c290c0482123daa1ddf451159263d28903f111abf19d1b52b1a01c9f92375ba5bd132fde76fa71b85dcac9a8273e42685e65d8a0834aeb0155d36bc1e4702562eadab7f9b7a64b48ad390cd30f61c0bab919623b621d87d82fc069e0b38efeb70d120165e9903823c7fad63da5ac60151f3c283f09000a55b6c64ef9f82f5c8d6753bb7c2c7ec900933877c2939516a7cef83e6b1f956f9da7082f740f5c6a668d4560760813b877fefac46ac671858c35a544ac251fa91c9067678dfdbe80a", 0xee}], 0x5) (async, rerun: 32) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) (async, rerun: 32) r5 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x2a, 0x0, &(0x7f0000000340)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6m4.835092323s ago: executing program 32 (id=33): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r2, 0x8001}, &(0x7f00000000c0)=0x8) (async) socket$kcm(0x10, 0x2, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r2, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x7, 0x400, 0x1, 0xffffff81, 0x2, 0x9, 0x9}, 0x9c) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002180)=ANY=[@ANYBLOB="8400000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128008000100677470004400028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000300", @ANYRES32], 0x84}}, 0x0) (async) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40000840) 5m42.499906965s ago: executing program 33 (id=34): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1f7508ee}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg0\x00'}]}]}], {0x14}}, 0xa8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r3, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01000b1027bd7000c7e0df2100"], 0x14}, 0x1, 0x0, 0x0, 0x40840}, 0x4020) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xfffffffffffffe0d, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pimreg1\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffe}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008014}, 0x20040000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x4010, r0, 0x78345000) 5m7.453630918s ago: executing program 34 (id=35): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000480)=[{0x3, 0x0, {0x0, 0x0, 0x2}, {0x0, 0xf0, 0x2}, 0x2, 0xfd}, {0x3, 0x3, {0x1, 0xf0, 0x3}, {0x0, 0xf0, 0x3}, 0x2, 0xfe}], 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x8000000, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x3}, [@FRA_FLOW={0x8, 0xb, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0x6, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 4m43.935263604s ago: executing program 35 (id=36): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@empty}, 0x20) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80000, 0x0, 0xffffffffffffffff}) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x800, 0x7}, &(0x7f0000000240)=0x8) (rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={r2, @in={{0x2, 0x4e20, @multicast2}}, [0x9, 0xffffffffffff47f6, 0x1, 0x2, 0x9, 0xfffffffffffffff8, 0xbcc, 0x8, 0xa, 0x2, 0xe18e, 0x6, 0x8, 0x7, 0x70]}, &(0x7f0000000380)=0x100) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) close_range(r3, r0, 0x2) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "aa86a17f10963671", "fd9a1970cdcecf0157c1240f9d84d5c3f2520b283905a31bb1aac79dc8c1ad41", "4fa07939", "6f7084fea1627f1b"}, 0x38) (async) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000480)="974e3ae35822b9296e342cf2427c84a96e709c1b607e04ec9f93df5650f7637d7cc814f70ae50c665e8b6aed0ce026e93097a31d9b2dda6de15e42295f38d497c0832833d45cf53d178259372c7478a6218e6d6c71698b74b09600685fd2472fc28e1c2024aedde33b602d8292f5df42fab32dfd84b8c5ae5f646284e34a1f687b41a77e646fc2a0d3c0622c17815af238aca89084cb04b2947ae90ccf4df2aef2926f7954762d13cca3a24e527eee56dc674e345c86ee15bfe123e049415399c9dc9e768a9300655b6f9652e37c74fd", 0xd0}, {&(0x7f00000003c0)="0f5cc5", 0x3}, {&(0x7f00000007c0)="fa24d41a67261be5090eace8243d9dd4f6eb21abc81b070e32ecf1c13b037aec505b477105d03c550ae69229af4b67739063d8a735d05db2331fc9ebb32453e9694552ad4649f15f4322fd4c3e2c5ee76080a35fc12ac7a89a2117439c677d3ef9b041dfd8ab4c33d2bfbdbff6fd794e5751f23c62d8289584a34d5536438bf719dbd9b9ba1efe48a19e03a2e27c962cae", 0x91}, {&(0x7f0000000880)="2ca01730194f4130c132b3a72db238abccfa835eac5ef59b4c7973f0d48836d383c4598366ad17eee96d640353dbc0360af4cfc850adde76e17d16ab163ba81c84c84573ac0b483e27703168a0242cf83b8749d8a08780293c116dbd917b4fe31ac03e05e575eb03607e336056d90ea5b222c0bc5f1bb6f11541fb51aaf37af9e117a01802d4c22457af4be0985e7b68a2fd0833c2e46fd890a9f33226173fe7eeb6130dcf22d418f367ebbdf7ded585938cff726982168fec1bfaac7bca33e5aaeeaae260b50ff559062903d69b613c5be877b4f32b623148", 0xd9}, {&(0x7f0000000980)="134321dbeb895c18a6ecd9c1dfbf35b0e391da4a11326f77cf67fb6f0e5fb1bf240b1d563e638c6ee4bcff81a7cf1c290c0482123daa1ddf451159263d28903f111abf19d1b52b1a01c9f92375ba5bd132fde76fa71b85dcac9a8273e42685e65d8a0834aeb0155d36bc1e4702562eadab7f9b7a64b48ad390cd30f61c0bab919623b621d87d82fc069e0b38efeb70d120165e9903823c7fad63da5ac60151f3c283f09000a55b6c64ef9f82f5c8d6753bb7c2c7ec900933877c2939516a7cef83e6b1f956f9da7082f740f5c6a668d4560760813b877fefac46ac671858c35a544ac251fa91c9067678dfdbe80a", 0xee}], 0x5) (async, rerun: 32) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) (async, rerun: 32) r5 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x2a, 0x0, &(0x7f0000000340)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m31.5884578s ago: executing program 5 (id=1053): add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="94010000", @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x194}}, 0x0) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) 1m31.495803891s ago: executing program 5 (id=1054): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x4044080) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000000100010000000000000000000000000a20000000000a0102"], 0x10c}}, 0x0) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async) socket$igmp(0x2, 0x3, 0x2) r6 = syz_io_uring_setup(0x497, &(0x7f0000000240)={0x0, 0x6a5d, 0x100, 0x4, 0x1a}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = socket$inet(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) (async) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r12 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r12, 0xc008561c, &(0x7f0000000080)={0x20f0f000, 0x9}) (async) r13 = openat$cgroup_int(r11, &(0x7f0000000200)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) sendmsg$rds(r2, &(0x7f0000000e80)={&(0x7f0000000300)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000340), 0x0, &(0x7f0000000e00)=[@rdma_args={0x48, 0x114, 0x1, {{0x3d, 0x2}, {&(0x7f0000000400)=""/138, 0x8a}, &(0x7f0000000d40)=[{&(0x7f0000000500)=""/86, 0x56}, {&(0x7f0000000580)=""/137, 0x89}, {&(0x7f0000000640)=""/187, 0xbb}, {&(0x7f0000000700)=""/255, 0xff}, {&(0x7f0000000940)=""/145, 0x91}, {&(0x7f0000000a00)=""/220, 0xdc}, {&(0x7f0000000b00)=""/218, 0xda}, {&(0x7f0000000c00)=""/96, 0x60}, {&(0x7f0000000c80)=""/145, 0x91}], 0x9, 0x40, 0xd}}], 0x48, 0x804}, 0x40001) (async, rerun: 64) sendfile(r13, r13, 0x0, 0x10000000001) (async, rerun: 64) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r10, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) (async, rerun: 32) io_uring_enter(r6, 0x3516, 0xf400, 0x0, 0x0, 0x0) (rerun: 32) 1m31.492913637s ago: executing program 5 (id=1055): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x4e, 0x0, 0x1}, 0x20) r1 = fcntl$dupfd(r0, 0x406, r0) write$P9_RREMOVE(r1, &(0x7f0000000000)={0x7, 0x7b, 0x2}, 0x7) (async) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000002c0)={0x10, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1, 0x5, [{{0x2, 0x4e23, @local}}, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x310) 1m31.437931863s ago: executing program 5 (id=1056): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x30742, 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) 1m31.367374468s ago: executing program 5 (id=1057): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000005"], 0x14}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000005"], 0x14}], 0x1}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x300, 0xfffd, 0x0, 0x0, 0x0}) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000), 0xfffffffffffffffc) syz_socket_connect_nvme_tcp() socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r3, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x3}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x40081) (async) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x3}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x40081) 1m31.226204929s ago: executing program 5 (id=1059): r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000005c0), 0xa180, 0x0) readahead(r0, 0xd5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000280)='coredump_filter\x00') write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x2, 0x3, 0x1, 0x6, 0x7fffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x103082, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/comedi2\x00', 0x400, 0x0) poll(&(0x7f0000001200)=[{r4, 0x4a4}], 0x1, 0x6) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f00000001c0)={{r3}, 0x2, &(0x7f0000000140)=[0xd9e8, 0x1], 0xffffffffffffffff, 0x2, 0x1}) ioctl$DVD_READ_STRUCT(r0, 0x5390, &(0x7f0000000600)=@manufact={0x4, 0x3, 0x800, "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"}) 1m31.186047722s ago: executing program 36 (id=1059): r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000005c0), 0xa180, 0x0) readahead(r0, 0xd5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000280)='coredump_filter\x00') write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x2, 0x3, 0x1, 0x6, 0x7fffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x103082, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/comedi2\x00', 0x400, 0x0) poll(&(0x7f0000001200)=[{r4, 0x4a4}], 0x1, 0x6) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f00000001c0)={{r3}, 0x2, &(0x7f0000000140)=[0xd9e8, 0x1], 0xffffffffffffffff, 0x2, 0x1}) ioctl$DVD_READ_STRUCT(r0, 0x5390, &(0x7f0000000600)=@manufact={0x4, 0x3, 0x800, "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"}) 1m13.335723307s ago: executing program 6 (id=1336): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x16) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100033060000000000000000ffffffff000000000000000000000000e00000020000e0ff00000000000000000000000000000000000000a02c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x154}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000240)=[{&(0x7f0000001040)="4aa9edad01cb8162ab0b7e9340fd74d6563efc026b493c1233363a64b5c74fe967f0676fa5adcd848ea355ff120e3ba38380be01f474a4c9b2aa99f8269e15d474a115f4e4eb7d75a89ee747199fafc1ec01e2afba077161d11b3156a6447d890059508f259d9b9c45c2c9c2dfd6de970b4724fa48b8ccb6db7c262dd94a0280110d5a8073c643f4fb3256d8661fcf11ddb93a6e1802c3ffec9bda933847e7b8f759e311f1cdab4339fc0f253190265ff454b8d6cbc24f51ccb324c85d8340659b", 0xc1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "0300", "00b62d000000000500", "c1799d70", "bb0001000100"}, 0x28) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 1m13.335204164s ago: executing program 6 (id=1338): madvise(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x17) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x3a, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000ffffff7f00000000feffffff8500fba2f130000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, 0x94) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) 1m13.257899039s ago: executing program 6 (id=1341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x20}) r2 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r2, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0xe01, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) 1m13.237628244s ago: executing program 6 (id=1343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{}, 'port1\x00'}) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)={0x0, 0x40}) brk(0x689d80000000) socket$pppoe(0x18, 0x1, 0x0) syz_clone(0x6a02f080, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000002a00)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 1m13.134689997s ago: executing program 6 (id=1344): io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000700)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940, 0x57ac123a25013287}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xd1}, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000700)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) (async) accept4(r1, 0x0, 0x0, 0x80000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940, 0x57ac123a25013287}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xd1}, 0x0) (async) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 1m13.085158607s ago: executing program 6 (id=1346): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) mkdir(0x0, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x424) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f0000000140)='i', 0x1, 0xfffffffc}]) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) mkdir(0x0, 0x0) (async) inotify_init() (async) inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x424) (async) io_setup(0x1, &(0x7f00000004c0)) (async) io_submit(r5, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f0000000140)='i', 0x1, 0xfffffffc}]) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 57.259015777s ago: executing program 37 (id=1346): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) mkdir(0x0, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x424) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f0000000140)='i', 0x1, 0xfffffffc}]) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) mkdir(0x0, 0x0) (async) inotify_init() (async) inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x424) (async) io_setup(0x1, &(0x7f00000004c0)) (async) io_submit(r5, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f0000000140)='i', 0x1, 0xfffffffc}]) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 56.019005072s ago: executing program 8 (id=1560): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x19, 0xa, 0x3, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20040005}, 0x4) (async) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 56.018787937s ago: executing program 8 (id=1561): modify_ldt$write2(0x11, &(0x7f0000000140)={0x2, 0x20001000, 0x2000, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x0, 0x1ff, 0x2}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000005c0)={0x1, @win={{0x0, 0x40, 0x50323234}, 0x9, 0x0, 0x0, 0x0, 0x0}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 55.908800776s ago: executing program 8 (id=1562): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0xdffffffb, 0x4) close(r0) 55.906980082s ago: executing program 8 (id=1563): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file0\x00', 0x111) (async, rerun: 32) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xffff7fff}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 55.77160489s ago: executing program 8 (id=1564): mkdir(&(0x7f0000000200)='./bus\x00', 0x10) chroot(&(0x7f0000000000)='./bus\x00') getcwd(&(0x7f00000005c0)=""/181, 0xb5) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c02000013002904000000000000220000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c40105"], 0x27c}, 0x1, 0x0, 0x0, 0x804}, 0x0) 55.461619826s ago: executing program 8 (id=1569): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="74cad6659617423c4b06d15efd8491cf0000"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f00000005c0)={0xa0, 0x0, 0x0, {{0x1, 0x3, 0x1, 0x845, 0xfffffffa, 0x2c, {0x0, 0x7fffffff, 0x5, 0xa, 0x3, 0x8000000000000001, 0x4, 0x7, 0x101, 0x2000, 0x8e5, 0x0, 0x0, 0x7f, 0xffff}}, {0x0, 0x13}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x200000, 0x1}}]}}}]}, 0x78}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1) syz_clone(0x18000000, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) r10 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x5) r11 = dup(r10) ioctl$SIOCSIFHWADDR(r11, 0x8926, &(0x7f0000002640)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}) r12 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r9, 0x40a0ae49, &(0x7f0000000000)={0x7ff, 0x0, 0x0, r12, 0x7000}) syz_emit_ethernet(0x5a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{@empty}, {}, {@rand_addr=0x64010101, 0x3}]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x101, 0x0, 0x3, 0x0, 0xe89f, 0xe0f}, 0x20) 55.417882132s ago: executing program 38 (id=1569): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="74cad6659617423c4b06d15efd8491cf0000"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r3, &(0x7f00000005c0)={0xa0, 0x0, 0x0, {{0x1, 0x3, 0x1, 0x845, 0xfffffffa, 0x2c, {0x0, 0x7fffffff, 0x5, 0xa, 0x3, 0x8000000000000001, 0x4, 0x7, 0x101, 0x2000, 0x8e5, 0x0, 0x0, 0x7f, 0xffff}}, {0x0, 0x13}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x200000, 0x1}}]}}}]}, 0x78}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1) syz_clone(0x18000000, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) r10 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x5) r11 = dup(r10) ioctl$SIOCSIFHWADDR(r11, 0x8926, &(0x7f0000002640)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}) r12 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r9, 0x40a0ae49, &(0x7f0000000000)={0x7ff, 0x0, 0x0, r12, 0x7000}) syz_emit_ethernet(0x5a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{@empty}, {}, {@rand_addr=0x64010101, 0x3}]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x101, 0x0, 0x3, 0x0, 0xe89f, 0xe0f}, 0x20) 7.045901061s ago: executing program 7 (id=2280): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) 6.970484439s ago: executing program 7 (id=2281): r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x7) shmctl$SHM_UNLOCK(r0, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x4000, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', &(0x7f0000000380), 0x11, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x2d, 0x1001, r4, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x103bff, 0x111) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x421}}, 0x44}}, 0x8000) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) (async) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x7) (async) shmctl$SHM_UNLOCK(r0, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x4000, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}}) (async) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', &(0x7f0000000380), 0x11, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) (async) fanotify_init(0x200, 0x0) (async) fanotify_mark(r5, 0x2d, 0x1001, r4, 0x0) (async) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) (async) open(&(0x7f0000000100)='./file0\x00', 0x103bff, 0x111) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x421}}, 0x44}}, 0x8000) (async) 6.896451822s ago: executing program 7 (id=2283): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) (async) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async, rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (rerun: 64) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000180)=0x2) mkdirat(r0, &(0x7f00000004c0)='./bus/file0\x00', 0x2) (async) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='gadgetfs\x00', 0x0, &(0x7f00000000c0)='quota') 6.730079548s ago: executing program 7 (id=2286): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x20, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {0xd, 0xd}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80c0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xfffffffffffff6ff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x4}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) fcntl$setsig(r0, 0xa, 0x36) 6.629765456s ago: executing program 7 (id=2289): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), 0x18000, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0xfffd, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x90e0) r3 = accept4(r2, 0x0, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x9, 0x12) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r0) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0, 0x13f, 0xa}}, 0xfe2f) ioctl$SNDRV_PCM_IOCTL_RESET(r7, 0x4141, 0x0) write$FUSE_GETXATTR(r4, &(0x7f00000004c0)={0x18}, 0x18) syz_clone(0x40040000, &(0x7f0000000200)="d972a43e3846c49e1d5c2840db4bcd4663dec4370aeff58d8f908801fc6a94432cc056ff", 0x24, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000680)="f5c64428229fb0c4b723a144281da3ff9620ba4f3640d92c68a3fdddda0bb0e14b63b92b3bd70f78940515661f97841a6b70d8029da87f807b9df136bbb95479943b96ee11214403bbac667d8c250431ec8d290b66d012cd8a75f7afb52baf31c5d9dad41f6ea63868036246f14dd009243e772c23def650095ade97f92a71ab2e85e18dd20c16e6da9d8c762a85c268ff7d9d3e7bb3cacda0c03d4e1a2e69fabaa824e8c7db02b191ba1e88e98183e2e9ee66ed44ce4800d10dd3fcccfaf326f64a8b7a1a221b27bd2986d0a2c353") r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 3.167265134s ago: executing program 4 (id=2370): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d800", 0x2}], 0x1}, 0x894) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @local, {[@cipso={0x86, 0x8, 0x3, [{0x5, 0x2}]}]}}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020400) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x40894) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x206e) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x80802, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x1) (async) sendmmsg$inet6(r4, &(0x7f00000003c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0x4}], 0x1}}, {}], 0x3, 0x1c000) ppoll(&(0x7f0000000140)=[{r4, 0x5}], 0x1, 0x0, 0x0, 0x0) (async) shutdown(r4, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r5, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x306}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4020040}, 0xc800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001a00010000000000fdffffff020000000000fd00", @ANYRES32, @ANYBLOB="05001b0001"], 0x6c}}, 0x2000c044) 3.110307359s ago: executing program 4 (id=2371): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}, @CTA_NAT_PROTO={0x4}]}]}, 0x74}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000100000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom$inet(r3, &(0x7f0000000440)=""/190, 0xbe, 0x40000000, &(0x7f0000000340)={0x2, 0x4e20, @multicast1}, 0x10) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x8034, 0x2, 0x2}, 0x18, 0x0) landlock_restrict_self(r7, 0x7) (async) landlock_restrict_self(r7, 0x7) r8 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x4) (async) landlock_restrict_self(0xffffffffffffffff, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0x2, 0xfffe, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x6}, @generic={0x5, 0x2}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0x2, 0xfffe, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x6}, @generic={0x5, 0x2}]}}}}}}}, 0x0) r10 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="e00000001000010025bd7000ffdbdf25647262675f6e6f70725f6374725f6165733139320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009c000000000000000200000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f105368900ba0a"], 0xe0}, 0x1, 0x0, 0x0, 0x60000801}, 0x10) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/3, 0x3}, 0xa}], 0x1, 0x2020, 0x0) (async) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/3, 0x3}, 0xa}], 0x1, 0x2020, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)={0x130, 0x0, 0x1, 0x51249efb857004, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_NAT_SRC={0x3c, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x41}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_NAT_SRC={0x54, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_TUPLE_MASTER={0x34, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x130}}, 0x20000000) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)={0x130, 0x0, 0x1, 0x51249efb857004, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_NAT_SRC={0x3c, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x41}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_NAT_SRC={0x54, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_TUPLE_MASTER={0x34, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x130}}, 0x20000000) 2.250176735s ago: executing program 4 (id=2384): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x2) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) bind$packet(r2, &(0x7f0000000240)={0x11, 0x9, r3, 0x1, 0x5, 0x6, @remote}, 0x14) (async, rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x3, 0x5, 0x1000, 0x2000, &(0x7f0000002000/0x2000)=nil}) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket(0x11, 0x2, 0x0) setsockopt(r4, 0x107, 0x1, &(0x7f0000000040)="060000000300060000071a800100613f", 0x10) (async) setsockopt(r4, 0x107, 0x2, &(0x7f0000000040)="060000000300060000071a800100613f", 0x10) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000340)={r8, 0xe000000}, &(0x7f0000000380)=0x8) (async) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x7}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@newtfilter={0x6c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x8}, {0xfff2}, {0xfff1, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x3e7}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfd, 0x1}}]}, 0x6c}}, 0x0) 2.180514153s ago: executing program 4 (id=2387): r0 = socket$inet_smc(0x2b, 0x1, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000180)={0x18, 0xf, 0x2, {{0x8, 0x2}, 0x4}}, 0x18) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000001340)=@userptr={0x6, 0xa, 0x4, 0x2000, 0x6, {0x0, 0x2710}, {0x4, 0xc, 0xd2, 0x9, 0x77, 0x0, "0080ca4f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x4}) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000040)={0x0, @data}) close(r0) 2.037933861s ago: executing program 9 (id=2390): capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) prctl$PR_SET_SECUREBITS(0x1c, 0x25) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000003c0)=[{0x30, 0x5, 0x53, 0xfffff030}]}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x1008000, 0x6, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x200, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x3, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)={0x30, 0x0, 0x1, 0x80, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2805}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="6401010100000000000000000000000000000000330000007f0000010000000000000000000000000000000000000000ffff"], 0x214}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r2, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6076b2af00062f00fc000004cba1414ec4b4b50000000000ff0200000000000000000000000000010000883e"], 0x0) 1.960254892s ago: executing program 7 (id=2391): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) r2 = accept4$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x0, @none}, &(0x7f0000000200)=0xe, 0x1000) bind$bt_l2cap(r2, &(0x7f0000000240)={0x1f, 0xfffd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfff}, 0xe) (async, rerun: 32) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000340)='gfs2\x00', 0x0, &(0x7f0000000380)='acl') (async, rerun: 32) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x15) (rerun: 32) sendmsg$netlink(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)={0x10, 0x11, 0x1}, 0x10}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'\x00', 0x0}) bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x4, 0x6, @remote}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x810087, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x414301, 0x0) (async) sendmmsg$sock(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x30}}], 0x2, 0x20004874) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@getneigh={0x14, 0x1e, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}}, 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file3\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@ignoreqv}, {@access_client}], [{@hash}, {@audit}]}}) 1.679146706s ago: executing program 9 (id=2398): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x48800) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="3e2600070a0002"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20040040) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x126, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0xf0, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\t\x00', 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x15, '\x00', [@generic={0xf}, @generic, @ra, @generic={0x0, 0x85, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f"}, @generic={0x0, 0xe, "8b168e4b48529453d91cea424030"}, @calipso={0x7, 0x8}]}]}}}}}}}, 0x0) unshare(0x2000400) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_XSAVE(r5, 0x5000aea5, &(0x7f00000002c0)={[0x7f, 0x0, 0x80, 0x9, 0x3, 0xc, 0x7, 0x81, 0x0, 0x68, 0xffff, 0x7, 0xa, 0x4, 0x100, 0x8, 0x5, 0x400, 0x9, 0x17ee, 0xd, 0x6, 0x8000, 0x4a, 0x80, 0x1, 0x3ff, 0xe7a, 0x5, 0x4, 0x7, 0xd, 0x4ed, 0x0, 0x3, 0x7, 0x10000, 0x6, 0x9, 0x10000, 0xe504, 0x2, 0x27, 0x1, 0xfffffffb, 0x2a3, 0x8000, 0x397, 0x0, 0x1, 0xc24, 0x6, 0x4, 0xe929, 0x4e468a6b, 0x9, 0x6, 0x3643, 0x4, 0x1, 0x10, 0x5, 0xfffffffc, 0x400, 0x0, 0x9, 0x6, 0x800, 0x6, 0x3, 0xfffffffb, 0x8001, 0x3, 0x1ff, 0xfffffffd, 0xfffffff7, 0x0, 0xe, 0x3, 0x1, 0x6, 0x3, 0x80000001, 0x9, 0x2, 0x2, 0xc3d, 0x143, 0x0, 0x1, 0x4, 0x8b82, 0x50, 0xfffffff9, 0x6, 0x8, 0x7, 0xaa62, 0x5, 0x1, 0x8, 0x8, 0x7, 0x32f2, 0x3ff, 0xbbb6, 0x1, 0x2, 0x7, 0x4, 0x7, 0x3, 0xb0b, 0xffff, 0x5, 0x5, 0xacb7, 0x24, 0x9, 0x1000, 0x4, 0x7, 0xfffffff7, 0x7, 0x7ff, 0x1, 0x2b13, 0x6, 0x2, 0x0, 0x8, 0x40, 0x401, 0x4, 0x8001, 0x0, 0x4, 0x7, 0x7ff, 0xe, 0x2, 0x800004, 0x9, 0x4, 0x3, 0x7, 0xffffffff, 0x9, 0x8, 0x6, 0x2, 0x7, 0x3, 0x80000001, 0x2, 0x8000, 0x4, 0x9, 0xb861, 0x3, 0xfffffffd, 0x2d5, 0x5ac, 0x44, 0x24ce4ec7, 0x7, 0x9000, 0x2, 0x7, 0x5, 0xcc, 0x7fff, 0x0, 0xa84, 0x401, 0xfffffffa, 0x9cc, 0x0, 0x3, 0x1, 0x7, 0x80000, 0x9, 0x1, 0x7, 0xfff, 0x7fffffff, 0xffffffff, 0x6f63, 0xa0000000, 0x800, 0x6, 0x6, 0x1d, 0x80000000, 0x7ff, 0x60000000, 0xe, 0x2f, 0xfffffbff, 0x6, 0x8, 0x4, 0x4, 0x4, 0xf, 0x8, 0x71a7, 0x80000001, 0x6, 0x40, 0x2, 0x200, 0x80, 0x1, 0x4, 0x0, 0x2, 0x4, 0x49, 0x5, 0x9, 0x5, 0x2, 0x1ff, 0x100, 0x0, 0x2, 0xb, 0x4, 0x5, 0x3, 0x8d, 0x0, 0x101, 0x8, 0x0, 0x10000, 0xeef, 0x2, 0xffffffb7, 0x100, 0x7, 0x6, 0xe, 0x1, 0x8, 0x5, 0x2, 0xad, 0x1, 0x7, 0x5, 0x9, 0x80000000, 0x8, 0xff, 0x2, 0x7, 0x8, 0x2, 0x40, 0x200, 0x51, 0x1, 0x3, 0x7, 0x0, 0x200, 0xffffffda, 0xfffffffa, 0x100, 0x7, 0x8000d, 0x4, 0x9, 0x3, 0x7, 0x6, 0x10, 0xe, 0x7f, 0x3, 0x1, 0x5, 0xa, 0x6, 0x2, 0xfffffff7, 0x1ff, 0x7, 0x7fff, 0x3, 0x8, 0x6, 0xc, 0xc6, 0x40, 0x5, 0x7, 0x2c, 0x7, 0x81, 0x5, 0x6, 0xc1, 0xdae3, 0x5, 0x5, 0x1000, 0x9, 0x3, 0x2, 0x5, 0x300000, 0x1, 0xd, 0x1, 0x71, 0x1, 0x9, 0x8000, 0xc09, 0x9, 0x5, 0x3, 0xc, 0x17, 0x6, 0x9, 0x4, 0x2, 0x7, 0x8001, 0x9, 0x7, 0x6, 0x9, 0x6, 0x3, 0x1, 0xd, 0x8, 0x2, 0xd189, 0x4, 0x80000001, 0xfff, 0x9, 0x7e, 0x1, 0x50a, 0x6, 0x75, 0x3, 0x5, 0x5f4, 0x8001, 0x8, 0xd45e, 0x0, 0x7fffffff, 0x91, 0x87e0, 0x5, 0x0, 0x4, 0x9, 0x2, 0x80000000, 0x7ff, 0x9, 0xfb3, 0x1ff, 0x8, 0xf, 0x7, 0x3, 0x4, 0xfffffe01, 0x0, 0xc, 0x1ff, 0x40, 0x5, 0x7, 0x8, 0x80, 0xc, 0x451, 0x7fffffff, 0xfffffffd, 0xfffffff8, 0x8, 0x3, 0x9, 0x5, 0x0, 0x3, 0xffffff0d, 0xf, 0x7, 0x1, 0x9, 0x3a, 0x7, 0xe, 0xf, 0x6, 0x6, 0x7fffffff, 0xece3, 0x2, 0x4, 0xffff, 0x2, 0xfffffffd, 0x8, 0x0, 0x80, 0x81, 0x1b5, 0x3, 0xe, 0x2, 0x401, 0x3, 0x1, 0x5, 0x5, 0x80000000, 0x2, 0x3, 0x6, 0x1, 0x1, 0x7, 0xff, 0x7f, 0x2, 0x1, 0xd0000000, 0x3, 0x7, 0x4, 0x6, 0x4, 0xc6, 0x80, 0x100, 0xfffffffc, 0x6, 0x40, 0xc6, 0x5, 0x4, 0x4, 0x7f, 0x1160, 0x3, 0x8f69ebaa, 0xf115, 0x6, 0x9, 0x5, 0x9, 0x10000, 0x8b32, 0xf55f, 0x8a4, 0x2, 0x100, 0x8, 0xd, 0x7ff, 0x1c32, 0xe, 0xfffffff0, 0x9, 0x30000000, 0xe, 0x8, 0x4, 0x6, 0x3, 0x7, 0x7c4, 0x0, 0x6, 0x9, 0xb304, 0xd68, 0xb, 0x1, 0x98b, 0x9, 0x71d7, 0x100, 0x2c3c, 0x1ff, 0x0, 0x5, 0xf630, 0x9, 0x8001, 0x1, 0x3, 0x10, 0x5, 0x8001, 0x40000000, 0x8, 0x101, 0x7, 0xa, 0x4, 0x3, 0x5, 0x6, 0x401, 0x711, 0xc, 0x6, 0x5, 0x7fffffff, 0xffffffff, 0x2310, 0x4, 0x5, 0x9, 0x9, 0x4, 0x9, 0x91, 0xb2b, 0x9, 0x100, 0x3, 0x5, 0x100, 0x9, 0xb, 0x7a5d, 0x0, 0x4, 0x100, 0x301, 0x80, 0x9b8, 0xd, 0x1, 0xd, 0x7d5, 0x4, 0x1400, 0x7, 0xa40, 0x6, 0xfffffffc, 0x40, 0x6, 0x3, 0x8000, 0x4, 0x244a, 0x1, 0x8, 0x4, 0x6c, 0xbd, 0xed, 0xa0, 0xfffffff9, 0x5, 0x200, 0x4, 0x5, 0x2, 0x6, 0x2, 0x4, 0x0, 0x4, 0xa, 0x8b6, 0x9, 0x200, 0x80, 0x7, 0x9, 0x0, 0x6, 0x9, 0x4, 0xfffffff7, 0x8, 0x2, 0x9, 0x372, 0xc8, 0x1, 0x7, 0x4, 0x1000, 0x80000000, 0x2, 0x0, 0x3, 0x4, 0x7, 0x8, 0x1000, 0x81, 0x4, 0x8, 0xb971, 0x800, 0x3, 0x6, 0xe1, 0xdca, 0x3, 0x2, 0x1ff, 0x90, 0x200, 0x80000001, 0x1, 0x5, 0xb7, 0xbcaf, 0xffffffd5, 0x3ff, 0xfffffff8, 0x8, 0x1, 0x8, 0xc09, 0x800, 0x8, 0xd45c, 0xe8f, 0x2, 0x7, 0x9, 0xd135, 0x7, 0xc466, 0x8000, 0x6, 0x6, 0x2, 0x1, 0x7f, 0x7, 0x3, 0x4, 0x5, 0x6, 0xaf2, 0xffffffff, 0x2, 0x1, 0x63d2, 0x5, 0x9, 0xfffffff9, 0x2, 0x6, 0xb1b, 0x3, 0x8, 0x0, 0xc, 0x4, 0x0, 0x2, 0x5, 0xffffffff, 0x2, 0x0, 0x7fff, 0x80000000, 0x3, 0x1, 0xf, 0x4, 0x5, 0xfffff001, 0x0, 0x0, 0x8, 0x368, 0x10000, 0x9, 0x9, 0x65, 0x6, 0xd, 0x0, 0x10, 0x8, 0x320, 0x40000000, 0x8, 0x0, 0xbe6e, 0x1, 0x0, 0xffff, 0x3, 0xfffffc00, 0xffffffff, 0x2, 0x1, 0x0, 0x5, 0x6, 0x6, 0xffffffff, 0x1, 0xfffffff4, 0xabb, 0x3c000, 0x6, 0x8, 0x7fff, 0x8, 0x7fffffff, 0x4, 0x6, 0x9, 0xffff, 0x5, 0x0, 0x0, 0x8, 0x1, 0x9, 0x972, 0x28, 0x4, 0x1, 0x9, 0xb, 0xfffffff7, 0xb7, 0xa, 0x2, 0x5377, 0x2, 0x7, 0x5, 0x7fffffff, 0x1, 0x2, 0x1, 0xfffffffc, 0x9, 0x2e5fd874, 0x1, 0x1, 0x8, 0x40, 0x4, 0x9, 0x6, 0x7, 0x9, 0x0, 0x10000, 0x0, 0x231, 0x2, 0x1, 0x4, 0x0, 0xfffffffc, 0x4800, 0x2, 0x1, 0x4, 0x6100, 0x8, 0x80, 0x6, 0x2, 0x10, 0x9, 0x10, 0x1ff, 0x9, 0xe, 0xfffffffa, 0x4a5, 0x2, 0x8, 0x9, 0x4, 0x9, 0x63, 0x1000, 0x0, 0xa, 0x9c, 0x7, 0x9, 0x1, 0x4, 0x80000001, 0x7, 0x9, 0x7000000, 0x11, 0x7, 0x80000001, 0x5, 0x7ff, 0x4, 0x400, 0x4, 0x5, 0x4be, 0x439c, 0x2, 0x0, 0x3, 0x9, 0x7, 0xfff, 0x66a0de64, 0x2, 0x400, 0x5b, 0x0, 0x1, 0xc481, 0x7, 0xc0, 0x64d09d13, 0x1, 0x1e31f5b3, 0x0, 0x7, 0x3, 0x3, 0xa4, 0x55a7, 0x2, 0xfffffffc, 0xfffffff4, 0x8, 0x3, 0x6, 0x3, 0x6, 0x2, 0x4, 0x4, 0x5, 0x4, 0x2, 0x8, 0x80000000, 0x7, 0x10000, 0x7, 0x1, 0x7, 0x6, 0x0, 0x10, 0x80000001, 0x6, 0x6, 0xbe55, 0xfffffffb, 0x9, 0xffffff80, 0x1a6, 0x0, 0x80000000, 0xf208, 0x2, 0x6, 0x5, 0x8, 0x5ea, 0x8001, 0x3e, 0x2f9f, 0x4, 0xd, 0x9, 0xfffffff8, 0x2, 0x9, 0x3, 0x7, 0x3f1, 0x3, 0x6, 0xd, 0x5, 0x47e, 0x5, 0x6, 0x9, 0x8, 0x5, 0x3, 0xa1, 0x6, 0xfffffc01, 0x8, 0x8, 0x10, 0x6, 0x65af, 0x9, 0xd3965bf1, 0x5, 0x40, 0x4, 0x10001, 0xf, 0x7, 0x8, 0x70, 0xfffffff6, 0x33b, 0x80000000, 0xff, 0x2, 0xfffffffb, 0xb, 0xffffffff, 0x5, 0x5, 0x3f9, 0x1, 0x1f, 0x9, 0x1, 0x200, 0x9, 0x46c8a4cb, 0x7, 0x0, 0x1, 0x5, 0x6, 0x29c, 0xc67, 0x3e, 0x6, 0x1, 0x6de5, 0x0, 0x2, 0x1, 0xffff, 0xffff3b80, 0x1, 0x390, 0x5, 0x2, 0x8a, 0x4, 0xe, 0xa2e, 0x6, 0x4, 0xb8d, 0x9, 0xc, 0x3, 0x3, 0x3, 0x8, 0x0, 0x1, 0xfffffe00, 0x6, 0xf05, 0x5, 0x7, 0xfffffff5, 0xb, 0x800, 0x4, 0x800, 0xfffffffc, 0x4, 0x81, 0x5, 0x3, 0xa7, 0x1, 0x1, 0x4, 0x3c6, 0x5, 0xffff0000, 0xb0, 0x68, 0x2000b, 0xfffffffc, 0x3fe, 0x7e2c, 0x9, 0x6, 0x7f, 0x3, 0x6, 0x7fff, 0x8, 0x4, 0x6, 0x4, 0xa, 0x5, 0x4, 0x8]}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000580), 0x0) recvmmsg(r6, 0x0, 0x0, 0x1a000, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000bc0)={'#! ', './file1/../file0', [{0x20, '\x00\xfb\xfc\x99\xf6\xf7\xbc!\bl\xc1s\x9b#:\x15\xfb'}, {0x20, '@\x1d$.%{'}, {0x20, '\xab\x06\xa9\fD\xb2\x86w\xbd\x877\xa4\xe2\x95\x03\x89\b\xce\xae\x12\x82E\xc4\xf2\xd2\xdc\b\xac\xe4-\xf4Z\xaaSJ\x99\xe0\xbb!\xf3\xbf\x8e\xcf\x9b\xf9\xec\xc5=oM\xb8\xcb\xff\xca\xf9x\"c\x186\x8f\xfc>=\xdc\xe5\xb3\x8eA\x13\x9f\x17H\xca3F\x11\x83\xa7\x98\xd0\xf4\xbc\xe6\xc9\x10\xf6\x9f\x00\xcd}(\xdf\xe5kQ\x93\x13\xaa\x17\xa5\x01\x06\xd2.\f\x96\xc3\xa1[\x17\xd5\xda\x97\xd0\xe3\x80\x7fjj\xfd\x9d\xda\x82\x9d`\xcex\xc1*J-\x04c\t>\xb1\xf8\xf8n\xad\x8c\xb5\x9a=\xecQ\xe4m\xb0;\xd89$6\xbem\xd4\xeaZ\xf37\x9e\xa2\x81\xbcw\x95e\xe5\x1eM\xe0\x13?\x18s\t\x04\x84:\xcf\x9a\xe9\xe9!X\x10\xdfw\x81vH]\x180[\xfa\xc1\"\xd0 \x98\r_,%\x9e\xf9\xde[z\xe2\xa8\xca\xc2|\x9d\x1f\xbdv\x8d\xe1\xbd\x0f\xe4\xab\n6\xe8\v\xc0\xd9\xd9Tti\x13\x01\'c(\v\xca'}, {0x20, 'k(\\}\x1c#Y\xc1\xb5\xc8!\x8b\xc8hGu\xe2\xa8\xe9eH\x19\xc4\x1a\x15\xe7Xzon\x14\xb8\xdf0\x7f\x17\xafr\xd2\'\xd8b\x82\xb3\x9e\x06\xee\xa2\xa8FW\xcf,\xbb\x1a\xd9\xac\xc0%\a\x8e\xb9RbW\x81!a\xf5\b]\x94\x18s\x91$\xb8\xeb\x1c_\xc5\xd9\x8a`\xee\xc8C\xb8ur\x93\x87<\xd5$\x84\xd0o\x14\x0f\xab\xbf\xd7\xd4w\\\x91N!\x01\xcf\x82.\xd8\xf8\xe8Bl6bj\xc3/\xfaJ\xe3x\xbd2\xcc\x8c\xb5\xc5D\x81\x12\xc4\xa5d\a\xd4\x12/p\xa9\x87_\x97\x89\xe3\xf7'}, {}], 0xa, "0000783348b29e910024000029f50a899336010000000000000000ebf7fade3d580388d290d96721ec137228b60a0fd94415ad24ed37066498a2e1fed31075654e1b44ce9354e57979626903f434b5d6957398b43841d87d000e28863c05541ca0c925aa7abb20db364524f96af9fabc4777fc7aeb7cf194e16c05317ff4d8c1"}, 0x256) write$UHID_INPUT(r9, &(0x7f00000034c0)={0x8, {"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", 0x1000}}, 0x104e) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) ioctl$DRM_IOCTL_SET_VERSION(r9, 0xc0106407, &(0x7f0000000100)={0xaa25, 0xfffffffc, 0x1, 0x5}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r10}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1.609953365s ago: executing program 9 (id=2401): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x2001) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00') write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc}}, 0x50) (async) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x4e, 0x0, &(0x7f0000000040)) (async) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@bridge_setlink={0x44, 0x13, 0xa2f, 0x70bd2b, 0x25cfdbfd, {0x7, 0x0, 0x68, r8, 0x16318}, [@IFLA_LINKINFO={0x24, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x4, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x80) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcm3724\x00', [0x4f37, 0x7, 0x10002, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x5, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x2, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3d, 0x8, 0x6, 0x0, 0xfffffff8]}) syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x6, 0xffffffff, {0x5, 0x2, 0x1000b, 0x100000a, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0x8000, 0x2000002, 0x0, r4, 0x7, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r0, &(0x7f0000006680)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x6, {0x6, 0x1, 0xff, 0xfffffffffffffffd, 0x9, 0xffffffff, {0x2, 0x80000808000083, 0x3, 0xd, 0x10000, 0x100000800000008, 0x80000000, 0x0, 0x6, 0x1000, 0x7fffffff, r3, r4, 0x0, 0xe8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.510375055s ago: executing program 9 (id=2404): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x49783, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}}, 0x0) rt_sigprocmask(0x3, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001c00070c29bd7000000000002d", @ANYRESDEC=r1, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.360278084s ago: executing program 4 (id=2407): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x8}}}}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, 0x0) 577.831295ms ago: executing program 0 (id=2410): r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @empty, 0x1ff}, 0x1c) 577.424675ms ago: executing program 0 (id=2411): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x100000c2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0x16, 0x2, 0x1, "18e889d15b38429faa8ff62438eaed752e68f3a6d09382b392b049e33958b16c"}) r2 = socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x73c, r4, 0x1008, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff8000, 0x21}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3e5, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x5}, @device_b, @device_a, @from_mac, {0x4, 0x8}}, 0x7, @random=0x410b, 0x2000, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0x48}, {0x24, 0x1}]}, @void, @void, @void, @val={0x5, 0xc4, {0x7, 0xf7, 0x6, "7adccccc5b6ced41c1626fe10d7a8f06d6169c0955de9b3bacb2f4609b10363c6c67dbbc4ff0cdc5f30eb29d5ed8034d915be5a1628e58215759cc8dba9d49b2d4ff687bcddf3c5cb98facd82f25d37162bc84af8fac507e202d5239a3b00edf498a3c1810cf54db85b99d439f8041a8511d7679ce206aeb733d8c3507c823736fa8d8838335140cfd5718fca67c5b06741afdd3b7c82aaaba9f19183800a7fc626165ac4fc3a5ed37f0dc906cb2f7766cc1f6449109a903a74e73fe968770cdfa"}}, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xe6, 0x2, 0x18, 0x7}}, [{0xdd, 0xdb, "f2ef0975a5f2a1bd42ac79db46e9a61dc64141ee77ea0ffb0b80d5df75acb37e1ed44cd5d36e0d8aa4ae242b7008dd06e736514a60b3399d13540f3aa5ff8c7dfd64bbe8d59230986fcf75af9355f25dcf027fe08a8291967d0d16db6637d264e9f83994545a582140e80e12e6c30f544bc154f277986b103f39bad2540c4909b795c45851c6399a7d45f92e8c40bb4fc7f38d557c877a6c4d1c6c535b18eb7f8d3d4a585942f6ed6a6525ed485aa8fcadba04066f932984193538ca35ab19d1302334359789f417fb9993c6d3a4bd807450dca02536847d3bbc29"}, {0xdd, 0xf7, "ee11e49e24f6c6b33173a26f5c8ca74423d0d1cd46cd6e7fa71930ec61bb53a6e8813ac055ba460872fc647862f4b9a67ce117d40b54bb8460a61a42aed14b262f7c2ae43fd4b18a13f75d53db275dff5b50f45c5c1977f7b0070fd07b8d968f2e2ea2863a6e3ee7462474b2590695a5c69eb88074cbc3a78c4d504c0b1165334cedeb2d69293b38c8f3dc228b90b733032dd0d73afbf6c33b669ccfefe42983cc6532e6fd01a46cf807207675263930c998fa845ab7670364977380938a8a72e21dde2015e4af4914350997cf4152c393b95fc99903e8051a25133dd687aacd0a37a8fe392533c2cccc342814815572c329a184feb9ee"}, {0xdd, 0x1c, "973c42e4e3491e8ca0df3b50ddb26c8b455f2f994296e77146f8ab22"}, {0xdd, 0xe5, "f0fd76d1a7a417db99fb78016c8897e019d7e9c41db9523844e0ae8cab2298dfaf5cefcfb5afeb0eebc1d7b3a32e82f62d8b10a895d038ceeb38f1dc26d66699018fb2fdb45207d4499570a09d5fab24e74b2a5fc0ff0e8d7c212bf7e32ae63f7721343a4daadfb88ec2f51abe6564cefac92851fa0b51132f2d1be1134a34d374b202013c6ab122011dad0e69044ddf14c1fa5fed0689b39b84315db4dd090b5b30b01a26c6adc6fcb66d2f4a979cd466e83027e07ccfb1205e00a06741e092421f72367824287db2985eee5d40275a0e2150bd4bba2155f9fdf1b1bd9fd20b05effa698e"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x95, 0x80, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2}}, @gcr_ga={0xbd, 0x6, @broadcast}, @rann={0x7e, 0x15, {{0x0, 0x6f}, 0x1, 0x29, @device_a, 0x8, 0xc5, 0x9}}, @preq={0x82, 0x67, {{0x1}, 0x2a, 0x1, 0xe, @device_a, 0x2, @void, 0x7, 0x6, 0x7, [{{0x0, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x41}, {{0x1, 0x0, 0x1}, @device_b, 0x7}, {{}, @device_b, 0xffff}, {{0x0, 0x0, 0x1}}, {{0x1}, @device_b, 0x1000}, {{0x0, 0x0, 0x1}, @broadcast, 0xdb9}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x120, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x1c, 0x3, "1f543cf6fe951db5a6f3817a15349957377600191e4453e3"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xf9, 0x3, "4106bd78059412e502ed8d275177f2054f44e7753e4893380b7f6adf57149d958c368849c4cfc335aa616241d82ad3f79133602d075a32037ae232d1d0bb26060c91fed03f9a183faf56b3f01de2f06864f3f5281618327d9840303a077e2fc3fe59b3bcd41b92cf67b72592b3fb0e243858e1c529fc5e87949835d6a7a7a9cc9dccd877b8644dbadf2115390a21513045b1f873b4e84b27a3d2c04321d94d8eb1096d043befffd584b13ff2a8daef0f91fda9b14e66cdd69a2a3b799ff2ef84f09fa5f4283c8c3f963ba5dfb549c3f4a1ac4098e7fa6b9b850d03a96fb6cfec941b9f531602fafd58ff78bb85255df480caccbad8"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE={0x8f, 0x2a, [@peer_mgmt={0x75, 0x6, {0x1, 0xffc0, @val=0x432, @void, @void}}, @ibss={0x6, 0x2, 0x8000}, @preq={0x82, 0x7d, {{0x1, 0x1}, 0xb, 0x8, 0x79205874, @device_a, 0x7fffffff, @void, 0x8, 0x2, 0x9, [{{}, @device_b, 0x8}, {{0x1, 0x0, 0x1}, @device_a, 0xb}, {{0x1, 0x0, 0x1}, @broadcast, 0x80000000}, {{}, @broadcast, 0x59}, {{0x1, 0x0, 0x1}, @device_b, 0xfff}, {{0x1, 0x0, 0x1}, @device_a, 0x4}, {{0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x1}, @device_a, 0x1000}, {{0x0, 0x0, 0x1}, @device_b, 0xfffffffe}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xe9, 0x7f, [@random={0xd, 0x99, "dd98af75a480b75a78562861ad66a6ad9e1f3ec1dcd8972590ef28dbcb97685d410da95c9f339df7ee16e87b701686a1f1e88920f70476082211016f03c877454b9d367b70eee246072db9ce84af38b129fe95e98ef6787e30cb52631e7c13105a55de24f563d395d5bee67eefa6ed4ca028162c44b283ee88ca919ce8e3191d0cae88c7b54166b84dacb2baf1e3977041bd5659a1fd6a3fcf"}, @mic={0x8c, 0x10, {0x41f, "81975350aa4f", @short="391bb127e347d001"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @preq={0x82, 0x30, {{0x1}, 0x7, 0x0, 0x3, @broadcast, 0x9, @void, 0x3, 0x6b5, 0x2, [{{0x1}, @device_a, 0x3}, {{0x1}, @device_a, 0x1}]}}, @dsss={0x3, 0x1, 0x40}]}]]}, 0x73c}, 0x1, 0x0, 0x0, 0x44814}, 0x8000) (async) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x73c, r4, 0x1008, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff8000, 0x21}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3e5, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x5}, @device_b, @device_a, @from_mac, {0x4, 0x8}}, 0x7, @random=0x410b, 0x2000, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0x48}, {0x24, 0x1}]}, @void, @void, @void, @val={0x5, 0xc4, {0x7, 0xf7, 0x6, "7adccccc5b6ced41c1626fe10d7a8f06d6169c0955de9b3bacb2f4609b10363c6c67dbbc4ff0cdc5f30eb29d5ed8034d915be5a1628e58215759cc8dba9d49b2d4ff687bcddf3c5cb98facd82f25d37162bc84af8fac507e202d5239a3b00edf498a3c1810cf54db85b99d439f8041a8511d7679ce206aeb733d8c3507c823736fa8d8838335140cfd5718fca67c5b06741afdd3b7c82aaaba9f19183800a7fc626165ac4fc3a5ed37f0dc906cb2f7766cc1f6449109a903a74e73fe968770cdfa"}}, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xe6, 0x2, 0x18, 0x7}}, [{0xdd, 0xdb, "f2ef0975a5f2a1bd42ac79db46e9a61dc64141ee77ea0ffb0b80d5df75acb37e1ed44cd5d36e0d8aa4ae242b7008dd06e736514a60b3399d13540f3aa5ff8c7dfd64bbe8d59230986fcf75af9355f25dcf027fe08a8291967d0d16db6637d264e9f83994545a582140e80e12e6c30f544bc154f277986b103f39bad2540c4909b795c45851c6399a7d45f92e8c40bb4fc7f38d557c877a6c4d1c6c535b18eb7f8d3d4a585942f6ed6a6525ed485aa8fcadba04066f932984193538ca35ab19d1302334359789f417fb9993c6d3a4bd807450dca02536847d3bbc29"}, {0xdd, 0xf7, "ee11e49e24f6c6b33173a26f5c8ca74423d0d1cd46cd6e7fa71930ec61bb53a6e8813ac055ba460872fc647862f4b9a67ce117d40b54bb8460a61a42aed14b262f7c2ae43fd4b18a13f75d53db275dff5b50f45c5c1977f7b0070fd07b8d968f2e2ea2863a6e3ee7462474b2590695a5c69eb88074cbc3a78c4d504c0b1165334cedeb2d69293b38c8f3dc228b90b733032dd0d73afbf6c33b669ccfefe42983cc6532e6fd01a46cf807207675263930c998fa845ab7670364977380938a8a72e21dde2015e4af4914350997cf4152c393b95fc99903e8051a25133dd687aacd0a37a8fe392533c2cccc342814815572c329a184feb9ee"}, {0xdd, 0x1c, "973c42e4e3491e8ca0df3b50ddb26c8b455f2f994296e77146f8ab22"}, {0xdd, 0xe5, "f0fd76d1a7a417db99fb78016c8897e019d7e9c41db9523844e0ae8cab2298dfaf5cefcfb5afeb0eebc1d7b3a32e82f62d8b10a895d038ceeb38f1dc26d66699018fb2fdb45207d4499570a09d5fab24e74b2a5fc0ff0e8d7c212bf7e32ae63f7721343a4daadfb88ec2f51abe6564cefac92851fa0b51132f2d1be1134a34d374b202013c6ab122011dad0e69044ddf14c1fa5fed0689b39b84315db4dd090b5b30b01a26c6adc6fcb66d2f4a979cd466e83027e07ccfb1205e00a06741e092421f72367824287db2985eee5d40275a0e2150bd4bba2155f9fdf1b1bd9fd20b05effa698e"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x95, 0x80, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2}}, @gcr_ga={0xbd, 0x6, @broadcast}, @rann={0x7e, 0x15, {{0x0, 0x6f}, 0x1, 0x29, @device_a, 0x8, 0xc5, 0x9}}, @preq={0x82, 0x67, {{0x1}, 0x2a, 0x1, 0xe, @device_a, 0x2, @void, 0x7, 0x6, 0x7, [{{0x0, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x41}, {{0x1, 0x0, 0x1}, @device_b, 0x7}, {{}, @device_b, 0xffff}, {{0x0, 0x0, 0x1}}, {{0x1}, @device_b, 0x1000}, {{0x0, 0x0, 0x1}, @broadcast, 0xdb9}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x120, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x1c, 0x3, "1f543cf6fe951db5a6f3817a15349957377600191e4453e3"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xf9, 0x3, "4106bd78059412e502ed8d275177f2054f44e7753e4893380b7f6adf57149d958c368849c4cfc335aa616241d82ad3f79133602d075a32037ae232d1d0bb26060c91fed03f9a183faf56b3f01de2f06864f3f5281618327d9840303a077e2fc3fe59b3bcd41b92cf67b72592b3fb0e243858e1c529fc5e87949835d6a7a7a9cc9dccd877b8644dbadf2115390a21513045b1f873b4e84b27a3d2c04321d94d8eb1096d043befffd584b13ff2a8daef0f91fda9b14e66cdd69a2a3b799ff2ef84f09fa5f4283c8c3f963ba5dfb549c3f4a1ac4098e7fa6b9b850d03a96fb6cfec941b9f531602fafd58ff78bb85255df480caccbad8"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE={0x8f, 0x2a, [@peer_mgmt={0x75, 0x6, {0x1, 0xffc0, @val=0x432, @void, @void}}, @ibss={0x6, 0x2, 0x8000}, @preq={0x82, 0x7d, {{0x1, 0x1}, 0xb, 0x8, 0x79205874, @device_a, 0x7fffffff, @void, 0x8, 0x2, 0x9, [{{}, @device_b, 0x8}, {{0x1, 0x0, 0x1}, @device_a, 0xb}, {{0x1, 0x0, 0x1}, @broadcast, 0x80000000}, {{}, @broadcast, 0x59}, {{0x1, 0x0, 0x1}, @device_b, 0xfff}, {{0x1, 0x0, 0x1}, @device_a, 0x4}, {{0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x1}, @device_a, 0x1000}, {{0x0, 0x0, 0x1}, @device_b, 0xfffffffe}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xe9, 0x7f, [@random={0xd, 0x99, "dd98af75a480b75a78562861ad66a6ad9e1f3ec1dcd8972590ef28dbcb97685d410da95c9f339df7ee16e87b701686a1f1e88920f70476082211016f03c877454b9d367b70eee246072db9ce84af38b129fe95e98ef6787e30cb52631e7c13105a55de24f563d395d5bee67eefa6ed4ca028162c44b283ee88ca919ce8e3191d0cae88c7b54166b84dacb2baf1e3977041bd5659a1fd6a3fcf"}, @mic={0x8c, 0x10, {0x41f, "81975350aa4f", @short="391bb127e347d001"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @preq={0x82, 0x30, {{0x1}, 0x7, 0x0, 0x3, @broadcast, 0x9, @void, 0x3, 0x6b5, 0x2, [{{0x1}, @device_a, 0x3}, {{0x1}, @device_a, 0x1}]}}, @dsss={0x3, 0x1, 0x40}]}]]}, 0x73c}, 0x1, 0x0, 0x0, 0x44814}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x100, 0x0, 0x65dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x20}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x100, 0x0, 0x65dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x20}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000200)={0x8000, "60a35db75d82d98808667817f3e71df4f96c513ff22f2e363fb6bad7437f75d0", 0x4, 0x2, 0x49, 0x1, 0x4, 0x1, 0x3, 0x4}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000000180)) 440.560191ms ago: executing program 0 (id=2412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000427bd7000fbdbdf25090000003c000180140004000000000000000000000000000000000108000700", @ANYRES32=0x0, @ANYBLOB="050002000500000014000400fc01000000000000000000000000157a33ba030003000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000890}, 0x200c0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000680)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 230.163614ms ago: executing program 0 (id=2413): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x1c1f) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00030008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 229.952079ms ago: executing program 0 (id=2414): syz_open_dev$loop(&(0x7f0000000040), 0x7, 0xc0041) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioperm(0x0, 0xe4d, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) 148.787849ms ago: executing program 4 (id=2415): chmod(&(0x7f0000000000)='./file0\x00', 0x108) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000700)={&(0x7f0000000040)=@can, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/24, 0x18}, {&(0x7f0000000100)=""/140, 0x8c}, {&(0x7f00000001c0)=""/107, 0x6b}, {&(0x7f0000000240)=""/238, 0xee}, {&(0x7f0000000340)=""/34, 0x22}, {&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/134, 0x86}], 0x8, &(0x7f0000000600)=""/222, 0xde}, 0x20) r1 = creat(&(0x7f0000000740)='./file0\x00', 0x140) socketpair(0x2c, 0x3, 0x965, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000840)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000940)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getresuid(&(0x7f0000000a40)=0x0, &(0x7f0000000a80), &(0x7f0000000ac0)) fstat(r2, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000b80)=0x0) mount$fuse(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x401, &(0x7f0000000bc0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xf}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x10}}, {@default_permissions}], [{@smackfsfloor={'smackfsfloor', 0x3d, '('}}, {@euid_lt={'euid<', 0xee00}}, {@subj_user={'subj_user', 0x3d, '$'}}, {@dont_hash}, {@uid_eq={'uid', 0x3d, r6}}, {@subj_user={'subj_user', 0x3d, '%($])&)G\\'}}, {@uid_lt={'uid<', r7}}, {@euid_lt={'euid<', r8}}]}}) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000000d80)=0x9) lsetxattr$trusted_overlay_upper(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00), &(0x7f0000000e40)={0x0, 0xfb, 0x3e, 0x7, 0x1, "41ae42879348544a83af788f58daa345", "d6952ccd5caa58982610ab3171c1432f20b712c268764a3bd5c09352c198090f3d5512ba5014d0f0b8"}, 0x3e, 0x2) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000e80)) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000ec0)={{0x87, @local, 0x4e22, 0x4, 'nq\x00', 0xb, 0x7, 0x65}, {@private=0xa010102, 0x4e21, 0x2, 0x3aea, 0x40, 0x10000}}, 0x44) getpeername(r3, &(0x7f0000000f40)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000fc0)=0x80) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001000)=0x0) ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000001040)={'\x00', 0x1, 0x8, 0x9, 0x5a, 0x9, r9}) r10 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r10, 0x6, 0x6, &(0x7f00000010c0), &(0x7f0000001100)=0x4) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000001140)={0x9}) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqsrc(r11, 0x0, 0x27, &(0x7f0000001180)={@loopback, @local, @empty}, &(0x7f00000011c0)=0xc) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001200)={0x3, {{0xa, 0x4e22, 0x3e55, @private2, 0x39bf22bc}}, 0x1, 0x8, [{{0xa, 0x4e23, 0x9, @empty, 0xffff5481}}, {{0xa, 0x4e22, 0x4, @local, 0xffff7fff}}, {{0xa, 0x4e23, 0x800, @rand_addr=' \x01\x00', 0x40}}, {{0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4}}, {{0xa, 0x4e20, 0x8, @private2, 0xffffffc0}}, {{0xa, 0x4e24, 0x7bfd4761, @mcast2, 0xc}}, {{0xa, 0x4e20, 0xf, @mcast1, 0x80000000}}, {{0xa, 0x4e23, 0xfffffff4, @loopback, 0x7f}}]}, 0x490) r12 = openat$mice(0xffffffffffffff9c, &(0x7f00000016c0), 0x60040) setsockopt$inet_tcp_int(r12, 0x6, 0x12, &(0x7f0000001700)=0xff, 0x4) lsetxattr(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)=@known='trusted.syz\x00', &(0x7f00000017c0)='smackfsfloor', 0xc, 0x1) r13 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r13, 0x84, 0x21, &(0x7f0000001800)=0x1, 0x4) ioctl$VIDIOC_QUERYCAP(r12, 0x80685600, &(0x7f0000001840)) 148.473862ms ago: executing program 9 (id=2416): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x2010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba800000000", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b30000000000000000f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6924849e6098ed884e7cb51726b360fbb37b6fe034bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffd12}, {&(0x7f0000000040)="e1d4313b495283bdb83fb043a67a5e23"}, {&(0x7f00000002c0)="54c1ee4851c1d6ccd3be49c6a43997be020d8142d41acd5f82dd296c4fe48571b034b0d0c0c186b22ac7557fa53f020f80be950a87c577eee3d64c77569b01a8af33b356ab9b4fc9496cce90f65dc100265216fcdffc165d9b7bc3213a515cf38a8ceb0987b6a39d2bf8820cec5386c4020dbe2260735faee151e2ec1b57cdfd952973b09cb7a8639b0332be6f7677a57a22a7"}, {&(0x7f0000000540)="25d134f7ce589fad1e9c6b4946d3d774c02b253755ad8834aee2baf2d1f9e2d9ff957e2a53af"}, {&(0x7f0000000580)="a1692033a99dda4f0f7286eac91acae77e68b78cdd38a104d55ea9ed42cfacc4f9cb5d4e9744b01d10c2c26ecd022e06f120de5decfbf7c0b0caf61dba430d26b03aa372eaee15f2f45bc240187a41283600b76fc943cb3e81dd2b92f8a9d1b13b7d6331f6ffa68d9a560680cfc9bc09700212b7a8a4e5"}, {&(0x7f00000017c0)="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"}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2000847}], 0x1, 0x40800) 278.846µs ago: executing program 9 (id=2417): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0xf, 0xc9, 0x10}}}, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x40d, 0x70bd2a, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 0s ago: executing program 0 (id=2418): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x10002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0xe, "fe4042c317ae82c6d1a51a1e45a7"}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) (async) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r6}, 0x18) (async) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) (async, rerun: 64) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="ad43000000000100000006"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) (async) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000140000000041000040"]) kernel console output (not intermixed with test programs): ted on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.222391][T11792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.303185][T11792] hsr_slave_0: entered promiscuous mode [ 384.306441][T11792] hsr_slave_1: entered promiscuous mode [ 384.311834][T11792] debugfs: 'hsr0' already exists in 'hsr' [ 384.314252][T11792] Cannot create hsr debugfs directory [ 384.558545][ T6040] usb 12-1: new high-speed USB device number 30 using dummy_hcd [ 384.730688][ T6040] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 384.733916][ T6040] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 384.737792][ T6040] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 384.741563][ T6040] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 384.745525][ T6040] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 384.751561][ T6040] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 384.754813][ T6040] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 384.757718][ T6040] usb 12-1: Product: syz [ 384.759466][ T6040] usb 12-1: Manufacturer: syz [ 384.764233][ T6040] cdc_wdm 12-1:1.0: skipping garbage [ 384.766338][ T6040] cdc_wdm 12-1:1.0: skipping garbage [ 384.769996][ T6040] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 384.772475][ T6040] cdc_wdm 12-1:1.0: Unknown control protocol [ 384.822883][T11792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 384.827855][T11792] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 384.841098][T11792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 384.847551][T11792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 384.867337][T11792] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.869648][T11792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.872756][T11792] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.875599][T11792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.916099][T11792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.925336][ T6181] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.934741][ T6181] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.966664][ T141] usb 12-1: USB disconnect, device number 30 [ 384.970535][T11856] netlink: 'syz.4.1587': attribute type 1 has an invalid length. [ 384.986166][T11856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 384.998148][T11792] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.006024][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.008332][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.009598][T11856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11856 comm=syz.4.1587 [ 385.016733][T11856] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1587'. [ 385.017479][ T6181] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.023297][ T6181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.024159][T11860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8464 sclass=netlink_route_socket pid=11860 comm=syz.9.1588 [ 385.057026][T11792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.073632][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1589'. [ 385.076537][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1589'. [ 385.086252][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1589'. [ 385.185361][T11792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.220476][T11792] veth0_vlan: entered promiscuous mode [ 385.225225][ T40] audit: type=1400 audit(1758057819.416:978): avc: denied { create } for pid=11883 comm="syz.9.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 385.227350][T11792] veth1_vlan: entered promiscuous mode [ 385.235531][ T40] audit: type=1400 audit(1758057819.416:979): avc: denied { connect } for pid=11883 comm="syz.9.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 385.256376][T11792] veth0_macvtap: entered promiscuous mode [ 385.262705][T11792] veth1_macvtap: entered promiscuous mode [ 385.275507][T11792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.283095][T11792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.286780][ T83] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.286853][ T83] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.286919][ T83] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.288199][ T83] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.345566][ T7252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.350204][ T7252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.359299][T11889] binder_alloc: 11888: binder_alloc_buf size -416 failed, no address space [ 385.363335][T11889] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 385.365475][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.369979][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.376157][T11889] netlink: 212388 bytes leftover after parsing attributes in process `syz.9.1594'. [ 385.379731][T11889] openvswitch: netlink: Message has 5 unknown bytes. [ 385.408541][ T141] usb 12-1: new low-speed USB device number 31 using dummy_hcd [ 385.487120][ T40] audit: type=1400 audit(1758057819.676:980): avc: denied { name_connect } for pid=11895 comm="syz.9.1596" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 385.561526][ T141] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 385.564041][ T141] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 385.567554][ T141] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 385.573457][ T141] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 385.577064][ T141] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 385.582266][ T141] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 385.585939][ T141] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 385.589594][ T141] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 385.593397][ T141] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 385.596984][ T141] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 385.616780][ T141] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 385.619396][ T141] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 385.629247][ T141] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 385.632966][ T141] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 385.636542][ T141] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 385.651529][ T141] usb 12-1: string descriptor 0 read error: -22 [ 385.653627][ T141] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 385.657326][ T141] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.663376][ T141] adutux 12-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 385.683442][T11907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1597'. [ 385.689021][ T7252] dummy0: left allmulticast mode [ 385.690979][ T7252] bridge0: port 3(dummy0) entered disabled state [ 385.694917][ T7252] bridge_slave_1: left allmulticast mode [ 385.696799][ T7252] bridge_slave_1: left promiscuous mode [ 385.701113][ T7252] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.707175][ T7252] bridge_slave_0: left allmulticast mode [ 385.718255][ T7252] bridge_slave_0: left promiscuous mode [ 385.718614][ T5333] Bluetooth: hci1: command tx timeout [ 385.722418][T11913] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(16) [ 385.723072][ T7252] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.724500][T11913] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 385.724639][T11914] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(13) [ 385.731608][T11914] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 385.737296][T11913] vhci_hcd vhci_hcd.0: Device attached [ 385.739865][T11914] vhci_hcd vhci_hcd.0: Device attached [ 385.743189][T11913] vhci_hcd vhci_hcd.0: port 0 already used [ 385.745593][T11915] vhci_hcd: connection closed [ 385.745743][T11916] vhci_hcd: connection closed [ 385.746658][ T6181] vhci_hcd: stop threads [ 385.754911][ T6181] vhci_hcd: release socket [ 385.758302][ T40] audit: type=1400 audit(1758057819.946:981): avc: denied { kexec_image_load } for pid=11919 comm="syz.0.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 385.765642][ T6181] vhci_hcd: disconnect device [ 385.767783][ T6181] vhci_hcd: stop threads [ 385.772030][ T6181] vhci_hcd: release socket [ 385.773474][ T6181] vhci_hcd: disconnect device [ 385.888664][ T5333] Bluetooth: hci5: command tx timeout [ 385.919806][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1601'. [ 385.922801][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1601'. [ 386.108280][T11928] Context (ID=0x4da) not attached to queue pair (handle=0x4db:0x0) [ 386.205759][T11932] Bluetooth: MGMT ver 1.23 [ 386.379868][ T6405] usb 12-1: USB disconnect, device number 31 [ 386.440913][ T5333] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 386.442807][ T40] audit: type=1400 audit(1758057820.636:982): avc: denied { setattr } for pid=11949 comm="syz.4.1610" name="001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 386.446435][ T5333] CPU: 1 UID: 0 PID: 5333 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 386.446459][ T5333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 386.446474][ T5333] Workqueue: hci5 hci_rx_work [ 386.446520][ T5333] Call Trace: [ 386.446528][ T5333] [ 386.446536][ T5333] dump_stack_lvl+0x16c/0x1f0 [ 386.446562][ T5333] sysfs_warn_dup+0x7f/0xa0 [ 386.446594][ T5333] sysfs_create_dir_ns+0x24b/0x2b0 [ 386.446618][ T5333] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 386.446642][ T5333] ? find_held_lock+0x2b/0x80 [ 386.446671][ T5333] ? do_raw_spin_unlock+0x172/0x230 [ 386.446693][ T5333] kobject_add_internal+0x2c4/0x9b0 [ 386.446721][ T5333] kobject_add+0x16e/0x240 [ 386.446746][ T5333] ? __pfx_kobject_add+0x10/0x10 [ 386.446773][ T5333] ? do_raw_spin_unlock+0x172/0x230 [ 386.446795][ T5333] ? kobject_put+0xab/0x5a0 [ 386.446826][ T5333] device_add+0x288/0x1aa0 [ 386.446853][ T5333] ? __pfx_dev_set_name+0x10/0x10 [ 386.446871][ T5333] ? __pfx_device_add+0x10/0x10 [ 386.446898][ T5333] ? mgmt_send_event_skb+0x2fb/0x460 [ 386.446925][ T5333] hci_conn_add_sysfs+0x17e/0x230 [ 386.446948][ T5333] le_conn_complete_evt+0x1075/0x1d70 [ 386.446972][ T5333] ? trace_contention_end+0xdd/0x130 [ 386.446989][ T5333] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 386.447008][ T5333] ? hci_event_packet+0x459/0x11c0 [ 386.447034][ T5333] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 386.447055][ T5333] ? skb_pull_data+0x166/0x210 [ 386.447079][ T5333] hci_le_meta_evt+0x354/0x5e0 [ 386.447099][ T5333] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 386.447123][ T5333] hci_event_packet+0x682/0x11c0 [ 386.447150][ T5333] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 386.447173][ T5333] ? __pfx_hci_event_packet+0x10/0x10 [ 386.447196][ T5333] ? kcov_remote_start+0x3c9/0x6d0 [ 386.447218][ T5333] ? lockdep_hardirqs_on+0x7c/0x110 [ 386.447254][ T5333] hci_rx_work+0x2c5/0x16b0 [ 386.447275][ T5333] ? rcu_is_watching+0x12/0xc0 [ 386.447302][ T5333] process_one_work+0x9cc/0x1b70 [ 386.447333][ T5333] ? __pfx_process_one_work+0x10/0x10 [ 386.447361][ T5333] ? assign_work+0x1a0/0x250 [ 386.447382][ T5333] worker_thread+0x6c8/0xf10 [ 386.447412][ T5333] ? __pfx_worker_thread+0x10/0x10 [ 386.447432][ T5333] kthread+0x3c2/0x780 [ 386.447450][ T5333] ? __pfx_kthread+0x10/0x10 [ 386.447470][ T5333] ? rcu_is_watching+0x12/0xc0 [ 386.447492][ T5333] ? __pfx_kthread+0x10/0x10 [ 386.447511][ T5333] ret_from_fork+0x5d4/0x6f0 [ 386.447527][ T5333] ? __pfx_kthread+0x10/0x10 [ 386.447545][ T5333] ret_from_fork_asm+0x1a/0x30 [ 386.447579][ T5333] [ 386.447605][ T5333] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 386.555341][ T5333] Bluetooth: hci5: failed to register connection device [ 386.598286][ T7252] bond1 (unregistering): (slave geneve2): Releasing active interface [ 387.038285][ T7252] bond4 (unregistering): (slave bridge4): Releasing active interface [ 387.199591][T11958] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1613'. [ 387.250092][ T7252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.257044][ T7252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.267106][ T7252] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 387.271728][ T7252] bond0 (unregistering): Released all slaves [ 387.278222][ T7252] bond1 (unregistering): Released all slaves [ 387.301336][ T40] audit: type=1400 audit(1758057821.486:983): avc: granted { setsecparam } for pid=11966 comm="syz.7.1616" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 387.391945][ T7252] bond2 (unregistering): Released all slaves [ 387.398884][ T7252] bond3 (unregistering): Released all slaves [ 387.404980][ T7252] bond4 (unregistering): Released all slaves [ 387.416878][T11965] ip6_vti0: mtu less than device minimum [ 387.483614][T11985] overlay: Unknown parameter 'measure' [ 387.525438][T11983] XFS (nullb0): Invalid superblock magic number [ 387.526132][T11992] netlink: 'syz.7.1622': attribute type 10 has an invalid length. [ 387.554276][T11992] team0: Port device dummy0 added [ 387.556287][ T7252] tipc: Disabling bearer [ 387.558077][ T7252] tipc: Left network mode [ 387.579199][T11992] netlink: 'syz.7.1622': attribute type 10 has an invalid length. [ 387.587181][T11992] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 387.606650][T11992] team0: Failed to send options change via netlink (err -105) [ 387.610416][T11992] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 387.613372][T11992] team0: Port device dummy0 removed [ 387.617104][T11992] .: (slave dummy0): Enslaving as an active interface with an up link [ 387.662796][T12007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.663901][T12001] can0: slcan on ttyS3. [ 387.735566][T12007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.802632][ T5984] Bluetooth: hci1: command tx timeout [ 387.880194][T12011] can0 (unregistered): slcan off ttyS3. [ 387.945869][T12029] nfsd: Unknown parameter 'norecovery' [ 387.948655][T12026] tipc: Started in network mode [ 387.960397][ T5984] Bluetooth: hci5: command tx timeout [ 387.963246][T12033] overlayfs: failed to resolve './file1': -2 [ 387.965281][T12026] tipc: Node identity 523dac874d13, cluster identity 4711 [ 387.971941][T12026] tipc: Enabled bearer , priority 0 [ 388.035201][T12026] syzkaller0: entered promiscuous mode [ 388.036964][T12026] syzkaller0: entered allmulticast mode [ 388.041731][T12026] tipc: Resetting bearer [ 388.061746][ T7252] hsr_slave_0: left promiscuous mode [ 388.064366][ T7252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.066853][ T7252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.104176][ T7252] veth1_macvtap: left promiscuous mode [ 388.106099][ T7252] veth0_macvtap: left allmulticast mode [ 388.107989][ T7252] veth0_macvtap: left promiscuous mode [ 388.110169][ T7252] veth1_vlan: left promiscuous mode [ 388.111973][ T7252] veth0_vlan: left promiscuous mode [ 388.164895][ T7252] pimreg (unregistering): left allmulticast mode [ 388.472730][ T40] audit: type=1400 audit(1758057822.666:984): avc: denied { write } for pid=12066 comm="syz.7.1641" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 388.822351][ T7252] team0 (unregistering): Port device team_slave_1 removed [ 388.921153][ T7252] team0 (unregistering): Port device team_slave_0 removed [ 389.032389][ T53] tipc: Node number set to 523152519 [ 389.608099][ T6040] lo speed is unknown, defaulting to 1000 [ 389.612964][ T6040] infiniband syz0: ib_query_port failed (-19) [ 389.658602][ T40] audit: type=1400 audit(1758057823.846:985): avc: denied { accept } for pid=12072 comm="syz.0.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 389.668217][ T6181] tipc: Resetting bearer [ 389.680216][T12025] tipc: Resetting bearer [ 389.736229][T12076] efs: device does not support 512 byte blocks [ 389.738473][T12076] device does not support 512 byte blocks [ 389.738473][T12076] [ 389.775359][ T40] audit: type=1400 audit(1758057823.966:986): avc: denied { getopt } for pid=12078 comm="syz.7.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 389.862643][ T40] audit: type=1400 audit(1758057824.056:987): avc: denied { node_bind } for pid=12093 comm="syz.4.1650" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 389.879049][ T5984] Bluetooth: hci1: command tx timeout [ 389.904244][ T40] audit: type=1400 audit(1758057824.086:988): avc: denied { create } for pid=12093 comm="syz.4.1650" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 389.932506][ T40] audit: type=1400 audit(1758057824.126:989): avc: denied { rmdir } for pid=12093 comm="syz.4.1650" name="control" dev="9p" ino=35913989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 389.935751][T12098] SELinux: failed to load policy [ 390.000735][T12101] 9pnet_virtio: no channels available for device syz [ 390.001301][ T40] audit: type=1400 audit(1758057824.196:990): avc: denied { mounton } for pid=12093 comm="syz.4.1650" path="/53/file0/file0" dev="9p" ino=35913873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 390.019004][ T1222] usb 12-1: new high-speed USB device number 32 using dummy_hcd [ 390.039741][ T5984] Bluetooth: hci5: command tx timeout [ 390.175994][ T1222] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.180812][ T1222] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.184967][ T1222] usb 12-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 390.188804][ T1222] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.194897][ T1222] usb 12-1: config 0 descriptor?? [ 391.108270][T12079] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 391.143460][ T1222] usbhid 12-1:0.0: can't add hid device: -71 [ 391.145453][ T1222] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 391.153422][ T1222] usb 12-1: USB disconnect, device number 32 [ 391.164911][T12025] tipc: Disabling bearer [ 391.179233][T12096] bridge: RTM_NEWNEIGH with invalid ether address [ 391.354111][T12115] delete_channel: no stack [ 391.356007][ T40] audit: type=1400 audit(1758057825.546:991): avc: denied { setattr } for pid=12117 comm="syz.4.1656" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 391.464656][T12135] binder: 12134:12135 ioctl 800454e0 200000000040 returned -22 [ 391.490473][ T53] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 391.669236][ T53] usb 14-1: Using ep0 maxpacket: 8 [ 391.680506][ T53] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 391.686546][ T53] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 391.691326][ T53] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 391.697139][ T53] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.701992][ T53] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 391.704916][ T53] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.743205][T12166] netlink: 'syz.4.1671': attribute type 2 has an invalid length. [ 391.769904][T12171] netlink: 'syz.7.1672': attribute type 20 has an invalid length. [ 391.775068][T12171] netlink: 'syz.7.1672': attribute type 1 has an invalid length. [ 391.816497][T12177] lo speed is unknown, defaulting to 1000 [ 391.821599][T12177] lo speed is unknown, defaulting to 1000 [ 391.824094][T12177] lo speed is unknown, defaulting to 1000 [ 391.912377][ T53] usb 14-1: GET_CAPABILITIES returned 0 [ 391.914178][ T53] usbtmc 14-1:16.0: can't read capabilities [ 391.921110][T12177] infiniband syz0: set active [ 391.922748][T12177] infiniband syz0: added lo [ 391.928118][ T53] lo speed is unknown, defaulting to 1000 [ 391.940952][T12177] RDS/IB: syz0: added [ 391.942809][T12177] smc: adding ib device syz0 with port count 1 [ 391.944853][T12177] smc: ib device syz0 port 1 has pnetid [ 391.948617][ T6056] lo speed is unknown, defaulting to 1000 [ 391.952338][T12177] lo speed is unknown, defaulting to 1000 [ 391.969177][ T5984] Bluetooth: hci1: command tx timeout [ 392.045287][T12177] lo speed is unknown, defaulting to 1000 [ 392.148048][T12177] lo speed is unknown, defaulting to 1000 [ 392.184859][ T29] usb 14-1: USB disconnect, device number 2 [ 392.274998][T12177] lo speed is unknown, defaulting to 1000 [ 392.289324][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 392.373935][T12177] lo speed is unknown, defaulting to 1000 [ 392.453848][T12177] lo speed is unknown, defaulting to 1000 [ 392.564796][T12184] bpf: Bad value for 'uid' [ 392.652107][T12187] __nla_validate_parse: 1 callbacks suppressed [ 392.652125][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1677'. [ 392.659443][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1677'. [ 392.663848][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1677'. [ 392.667870][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1677'. [ 392.672435][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1677'. [ 392.704074][T12193] geneve1: entered allmulticast mode [ 392.749957][T12194] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1678'. [ 392.752834][T12194] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1678'. [ 392.814165][T12206] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 392.870519][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1684'. [ 393.140981][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1688'. [ 393.149799][ T40] audit: type=1400 audit(1758057827.336:992): avc: denied { shutdown } for pid=12227 comm="syz.0.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 393.201907][T12225] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1688'. [ 393.452800][T12256] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.554865][T12267] ip6gretap1: entered promiscuous mode [ 393.556672][T12267] ip6gretap1: entered allmulticast mode [ 393.662208][ T40] audit: type=1400 audit(1758057827.856:993): avc: denied { setopt } for pid=12280 comm="syz.4.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 393.790569][ T40] audit: type=1400 audit(1758057828.984:994): avc: denied { append } for pid=12290 comm="syz.4.1710" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 393.868069][T12297] netlink: 'syz.0.1709': attribute type 1 has an invalid length. [ 393.892226][T12297] bond1: entered promiscuous mode [ 393.894801][T12297] 8021q: adding VLAN 0 to HW filter on device bond1 [ 393.914239][T12297] 8021q: adding VLAN 0 to HW filter on device bond1 [ 393.916589][T12297] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 393.920546][T12297] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 393.926099][T12297] bond1: (slave ip6gre2): making interface the new active one [ 393.928733][T12297] ip6gre2: entered promiscuous mode [ 393.932663][T12297] bond1: (slave ip6gre2): Enslaving as an active interface with an up link [ 393.939017][T12300] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.943465][T12300] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.997693][T12305] tmpfs: User quota inode hardlimit too large. [ 394.302690][T12327] input: syz1 as /devices/virtual/input/input23 [ 394.345771][T12333] kvm: user requested TSC rate below hardware speed [ 394.645081][T12353] ata1.00: invalid multi_count 128 ignored [ 394.669694][T12356] binder: 12355:12356 ioctl c0306201 0 returned -14 [ 394.693197][ T151] ata1.00: invalid multi_count 128 ignored [ 394.749243][ T29] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 394.800528][T12365] Unsupported ieee802154 address type: 0 [ 394.904350][ T29] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 394.908769][ T29] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 394.915435][ T29] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 394.921285][ T29] usb 9-1: string descriptor 0 read error: -22 [ 394.923275][ T29] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 394.926300][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.931725][T12344] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 395.023017][T12372] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 395.035441][T12372] kvm: pic: level sensitive irq not supported [ 395.037838][T12372] kvm: pic: non byte read [ 395.093436][T12372] kvm: pic: level sensitive irq not supported [ 395.093840][T12372] kvm: pic: non byte read [ 395.137719][ T29] cdc_ncm 9-1:1.0: bind() failure [ 395.142102][ T29] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 395.144882][ T29] cdc_ncm 9-1:1.1: bind() failure [ 395.148885][ T29] usb 9-1: USB disconnect, device number 13 [ 395.238263][T12385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.341553][T12380] infiniband syz1: set active [ 395.344822][T12380] infiniband syz1: added veth1_virt_wifi [ 395.364886][T12389] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 395.367326][T12380] RDS/IB: syz1: added [ 395.368860][T12380] smc: adding ib device syz1 with port count 1 [ 395.371160][T12380] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 395.793556][T12423] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 395.804090][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 395.804101][ T40] audit: type=1800 audit(1758057830.994:997): pid=12421 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.1749" name="bus" dev="9p" ino=35913980 res=0 errno=0 [ 395.816462][ T40] audit: type=1800 audit(1758057831.004:998): pid=12421 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.1749" name="bus" dev="9p" ino=35913980 res=0 errno=0 [ 395.824111][ T40] audit: type=1400 audit(1758057831.014:999): avc: denied { append } for pid=12425 comm="syz.7.1751" name="pfkey" dev="proc" ino=4026534455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 395.836530][ T40] audit: type=1400 audit(1758057831.014:1000): avc: denied { map } for pid=12425 comm="syz.7.1751" path="/proc/1407/net/pfkey" dev="proc" ino=4026534455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 395.874128][T12433] netfs: Couldn't get user pages (rc=-14) [ 395.889947][T12430] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 395.892857][T12430] overlayfs: missing 'lowerdir' [ 396.037531][T12437] 8021q: adding VLAN 0 to HW filter on device bond2 [ 396.190599][T12446] trusted_key: encrypted_key: master key parameter 'defãult' is invalid [ 396.196753][T12446] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 396.214137][T12446] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 396.229983][T12441] nbd1: detected capacity change from 0 to 127 [ 396.235304][ T5984] block nbd1: Receive control failed (result -32) [ 396.272726][T12451] overlayfs: failed lookup in lower (newroot/36, name='file0', err=-40): overlapping layers [ 396.433792][T12461] tipc: Enabling of bearer rejected, failed to enable media [ 396.482650][T12458] Bluetooth: MGMT ver 1.23 [ 396.487358][ T40] audit: type=1400 audit(1758057831.674:1001): avc: denied { accept } for pid=12456 comm="syz.0.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 396.638340][T12478] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 396.648770][ T40] audit: type=1400 audit(1758057831.834:1002): avc: denied { relabelto } for pid=12477 comm="syz.4.1763" name="cgroup.procs" dev="cgroup" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 396.663554][ T40] audit: type=1400 audit(1758057831.834:1003): avc: denied { associate } for pid=12477 comm="syz.4.1763" name="cgroup.procs" dev="cgroup" ino=410 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 396.673440][ T40] audit: type=1400 audit(1758057831.854:1004): avc: denied { setattr } for pid=12477 comm="syz.4.1763" name="cgroup.procs" dev="cgroup" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 396.838713][T12498] vivid-004: disconnect [ 397.173327][T12514] overlayfs: failed to resolve './file0': -2 [ 397.174103][ T40] audit: type=1400 audit(1758057832.364:1005): avc: denied { mounton } for pid=12512 comm="syz.4.1774" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 397.552178][T12499] vivid-004: reconnect [ 397.676146][T12543] netlink: 'syz.0.1783': attribute type 11 has an invalid length. [ 397.869195][ T1222] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 398.019291][ T1222] usb 9-1: Using ep0 maxpacket: 8 [ 398.030055][ T1222] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 398.032649][ T1222] usb 9-1: config 179 has no interface number 0 [ 398.034638][ T1222] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 398.038503][ T1222] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 398.046483][ T1222] usb 9-1: config 179 interface 65 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 398.050063][ T1222] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 398.054231][ T1222] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 398.057435][ T1222] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.064064][T12539] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 398.222745][T12560] __nla_validate_parse: 9 callbacks suppressed [ 398.222756][T12560] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1788'. [ 398.243246][T12560] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1788'. [ 398.270108][ T61] usb 9-1: USB disconnect, device number 14 [ 398.292162][T12569] netlink: 'syz.7.1791': attribute type 10 has an invalid length. [ 398.295106][T12569] bridge0: left allmulticast mode [ 398.302258][T12569] .: (slave bridge0): Enslaving as an active interface with an up link [ 398.330951][ T40] audit: type=1400 audit(1758057833.524:1006): avc: denied { execute } for pid=12570 comm="syz.7.1792" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=54243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 398.479424][ T840] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 398.609266][ T5333] Bluetooth: hci1: command 0x0405 tx timeout [ 398.649318][ T840] usb 14-1: Using ep0 maxpacket: 8 [ 398.653176][ T840] usb 14-1: config 0 interface 0 has no altsetting 0 [ 398.656015][ T840] usb 14-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 398.660803][ T840] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.665751][ T840] usb 14-1: config 0 descriptor?? [ 399.078843][ T840] hid_parser_main: 8 callbacks suppressed [ 399.078856][ T840] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 399.082919][ T840] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 399.085045][ T840] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 399.087238][ T840] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 399.091151][ T840] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 399.097109][ T840] mcp2221 0003:04D8:00DD.000A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 399.276644][ T840] usb 14-1: USB disconnect, device number 3 [ 399.781213][T12622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1809'. [ 399.900058][T12627] netlink: 'syz.9.1811': attribute type 21 has an invalid length. [ 399.902972][T12627] netlink: 128 bytes leftover after parsing attributes in process `syz.9.1811'. [ 399.906537][T12627] netlink: 'syz.9.1811': attribute type 4 has an invalid length. [ 399.911247][T12627] netlink: 'syz.9.1811': attribute type 5 has an invalid length. [ 399.914545][T12627] netlink: 3 bytes leftover after parsing attributes in process `syz.9.1811'. [ 400.089269][ T6040] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 400.239239][ T6040] usb 9-1: Using ep0 maxpacket: 8 [ 400.245634][ T6040] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 400.250058][ T6040] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 400.254144][ T6040] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 400.258270][ T6040] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 400.263869][ T6040] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 400.267355][ T6040] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.470880][T12642] usb usb4: usbfs: interface 0 claimed by hub while 'syz.7.1816' sets config #1 [ 400.474163][ T6040] usb 9-1: GET_CAPABILITIES returned 0 [ 400.477868][ T6040] usbtmc 9-1:16.0: can't read capabilities [ 400.481068][T12643] binder: 12639:12643 ioctl c0306201 200000000080 returned -14 [ 400.553756][T12645] kvm: pic: non byte write [ 400.701498][T12625] syzkaller0: entered promiscuous mode [ 401.298461][T12649] netlink: zone id is out of range [ 401.326167][T12649] netlink: set zone limit has 4 unknown bytes [ 402.057677][T12679] fuse: Unknown parameter 'ÿXªen"kümÚ·}Ð@÷øž€Sóœéy¯âˆŠ!_ô‘ËŠ>²C…' [ 402.065275][ T840] usb 9-1: USB disconnect, device number 15 [ 402.128959][T12687] sctp: [Deprecated]: syz.7.1828 (pid 12687) Use of int in maxseg socket option. [ 402.128959][T12687] Use struct sctp_assoc_value instead [ 402.248581][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 402.248598][ T40] audit: type=1400 audit(1758057837.434:1010): avc: denied { setattr } for pid=12690 comm="syz.9.1830" name="NETLINK" dev="sockfs" ino=56483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 402.344943][ T40] audit: type=1400 audit(1758057837.534:1011): avc: denied { getopt } for pid=12699 comm="syz.7.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 402.345162][T12700] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.1834'. [ 402.442389][T12716] 8021q: adding VLAN 0 to HW filter on device bond2 [ 402.515995][ T40] audit: type=1400 audit(1758057837.704:1012): avc: denied { mounton } for pid=12724 comm="syz.7.1841" path="/syzcgroup/unified/syz7" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 402.528601][ T40] audit: type=1400 audit(1758057837.704:1013): avc: denied { mount } for pid=12724 comm="syz.7.1841" name="/" dev="pstore" ino=4563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 402.563389][T12729] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1843'. [ 402.566290][T12729] netlink: 'syz.9.1843': attribute type 21 has an invalid length. [ 402.606228][T12733] siw: device registration error -23 [ 402.611892][T12736] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 402.643347][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1847'. [ 402.646150][T12739] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1847'. [ 402.650635][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1847'. [ 402.998290][T12759] loop4: detected capacity change from 0 to 2560 [ 403.005699][T12759] buffer_io_error: 22 callbacks suppressed [ 403.005712][T12759] Buffer I/O error on dev loop4, logical block 0, async page read [ 403.021574][T12759] Buffer I/O error on dev loop4, logical block 0, async page read [ 403.024790][T12759] Buffer I/O error on dev loop4, logical block 0, async page read [ 403.038470][T12759] Buffer I/O error on dev loop4, logical block 0, async page read [ 403.044152][T12759] Buffer I/O error on dev loop4, logical block 0, async page read [ 403.047380][T12759] Buffer I/O error on dev loop4, logical block 0, async page read [ 403.068090][T12759] loop4: unable to read partition table [ 403.072532][T12764] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 403.075920][T12764] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 403.081482][T12759] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 403.086844][T12764] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 403.090577][T12764] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 403.138443][T12767] mkiss: ax0: crc mode is auto. [ 403.879213][ T5333] Bluetooth: hci1: command 0x0405 tx timeout [ 404.156286][T12797] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 404.368621][T12806] random: crng reseeded on system resumption [ 404.498093][T12815] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 404.563020][T12822] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 404.612772][ T40] audit: type=1400 audit(1758057839.804:1014): avc: denied { read write } for pid=12826 comm="syz.7.1871" name="swradio4" dev="devtmpfs" ino=1031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:udev_exec_t:s0" [ 404.623533][ T40] audit: type=1400 audit(1758057839.804:1015): avc: denied { open } for pid=12826 comm="syz.7.1871" path="/dev/swradio4" dev="devtmpfs" ino=1031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:udev_exec_t:s0" [ 404.765680][T12833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.769095][T12833] binder_alloc: 12832: binder_alloc_buf, no vma [ 404.999312][ T6056] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 405.162409][ T6056] usb 14-1: config index 0 descriptor too short (expected 39, got 27) [ 405.164961][ T6056] usb 14-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 405.168099][ T6056] usb 14-1: config 0 interface 0 has no altsetting 0 [ 405.172586][ T6056] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 405.175489][ T6056] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 405.178095][ T6056] usb 14-1: Product: syz [ 405.181974][ T6056] usb 14-1: Manufacturer: syz [ 405.183450][ T6056] usb 14-1: SerialNumber: syz [ 405.186179][ T6056] usb 14-1: config 0 descriptor?? [ 405.188995][ T6056] hub 14-1:0.0: bad descriptor, ignoring hub [ 405.191330][ T6056] hub 14-1:0.0: probe with driver hub failed with error -5 [ 405.195516][ T6056] usb 14-1: selecting invalid altsetting 0 [ 405.354015][ T40] audit: type=1400 audit(1758057840.544:1016): avc: denied { mounton } for pid=12836 comm="syz.7.1875" path="/syzcgroup/unified/syz7" dev="pstore" ino=4563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 405.525872][T12844] bad cache= option: none [ 405.525872][T12844] [ 405.528099][T12844] CIFS: VFS: bad cache= option: none [ 405.596370][ T40] audit: type=1400 audit(1758057840.784:1017): avc: denied { ioctl } for pid=12847 comm="syz.7.1878" path="socket:[57789]" dev="sockfs" ino=57789 ioctlcmd=0x4b4a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 405.653626][T12855] F2FS-fs (nbd7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 405.656304][T12855] F2FS-fs (nbd7): Can't find valid F2FS filesystem in 1th superblock [ 405.659068][T12855] F2FS-fs (nbd7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 405.662238][T12855] F2FS-fs (nbd7): Can't find valid F2FS filesystem in 2th superblock [ 406.065114][T12880] __nla_validate_parse: 1 callbacks suppressed [ 406.065133][T12880] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1886'. [ 406.113720][T12831] usb 14-1: reset high-speed USB device number 4 using dummy_hcd [ 406.167783][T12883] overlay: Unknown parameter 'uid<00000000000000016384' [ 406.271650][T12831] usb 14-1: device firmware changed [ 406.274990][ T1222] usb 14-1: USB disconnect, device number 4 [ 406.387568][T12890] usb usb8: usbfs: process 12890 (syz.7.1889) did not claim interface 0 before use [ 406.393057][ T40] audit: type=1400 audit(1758057841.584:1018): avc: denied { map } for pid=12886 comm="syz.7.1889" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 406.404329][ T40] audit: type=1400 audit(1758057841.584:1019): avc: denied { execute } for pid=12886 comm="syz.7.1889" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 406.429333][ T1222] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 406.608710][ T1222] usb 14-1: config index 0 descriptor too short (expected 39, got 27) [ 406.611361][ T1222] usb 14-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 406.614439][ T1222] usb 14-1: config 0 interface 0 has no altsetting 0 [ 406.619020][ T1222] usb 14-1: string descriptor 0 read error: -22 [ 406.621138][ T1222] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 406.623988][ T1222] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 406.628242][ T1222] usb 14-1: config 0 descriptor?? [ 406.631160][ T1222] hub 14-1:0.0: bad descriptor, ignoring hub [ 406.633069][ T1222] hub 14-1:0.0: probe with driver hub failed with error -5 [ 406.638273][ T1222] usb 14-1: selecting invalid altsetting 0 [ 406.987196][T12892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1890'. [ 406.991112][T12892] Unsupported xt match [ 406.991123][T12892] unable to load match [ 406.995254][T12892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=12892 comm=syz.4.1890 [ 407.006648][T12892] tmpfs: Unknown parameter '¹' [ 407.011013][T12892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1890'. [ 407.012709][ T1222] usb 14-1: USB disconnect, device number 5 [ 407.014843][T12892] Unsupported xt match [ 407.015806][T12892] unable to load match [ 407.227398][T12899] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1892'. [ 407.541961][T12920] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1899'. [ 407.596244][T12930] netlink: 'syz.4.1902': attribute type 10 has an invalid length. [ 407.609909][T12930] hsr_slave_0: left promiscuous mode [ 407.613023][T12930] hsr_slave_1: left promiscuous mode [ 407.648669][T12941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.705647][T12941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.772451][T12945] lo speed is unknown, defaulting to 1000 [ 407.846417][T12959] mkiss: ax0: crc mode is auto. [ 408.191912][T12976] fuse: Bad value for 'group_id' [ 408.193534][T12976] fuse: Bad value for 'group_id' [ 408.224782][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 408.224793][ T40] audit: type=1326 audit(1758057843.414:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12977 comm="syz.0.1915" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1eb8eba9 code=0x7ffc0000 [ 408.234116][ T40] audit: type=1326 audit(1758057843.424:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12977 comm="syz.0.1915" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea1eb8eba9 code=0x7ffc0000 [ 408.241344][ T40] audit: type=1326 audit(1758057843.424:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12977 comm="syz.0.1915" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1eb8eba9 code=0x7ffc0000 [ 408.248511][ T40] audit: type=1326 audit(1758057843.424:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12977 comm="syz.0.1915" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fea1eb8eba9 code=0x7ffc0000 [ 408.262155][ T40] audit: type=1326 audit(1758057843.424:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12977 comm="syz.0.1915" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1eb8eba9 code=0x7ffc0000 [ 408.271229][ T40] audit: type=1326 audit(1758057843.424:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12977 comm="syz.0.1915" exe="/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fea1eb8eba9 code=0x7ffc0000 [ 408.278482][ T40] audit: type=1326 audit(1758057843.424:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12977 comm="syz.0.1915" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1eb8eba9 code=0x7ffc0000 [ 408.286185][ T40] audit: type=1326 audit(1758057843.424:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12977 comm="syz.0.1915" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1eb8eba9 code=0x7ffc0000 [ 408.293307][ T40] audit: type=1326 audit(1758057843.434:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12977 comm="syz.0.1915" exe="/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fea1eb8eba9 code=0x7ffc0000 [ 408.300514][ T40] audit: type=1326 audit(1758057843.434:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12977 comm="syz.0.1915" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1eb8eba9 code=0x7ffc0000 [ 408.393704][T12998] netlink: 148 bytes leftover after parsing attributes in process `syz.9.1920'. [ 408.481857][T13014] ALSA: mixer_oss: invalid OSS volume '' [ 408.499960][T13014] netlink: 'syz.4.1924': attribute type 9 has an invalid length. [ 408.502512][T13014] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1924'. [ 408.507232][T13014] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 408.764230][T13036] lo speed is unknown, defaulting to 1000 [ 408.927159][T13050] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1935'. [ 409.165908][T13065] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 409.168179][T13065] IPv6: NLM_F_CREATE should be set when creating new route [ 409.170544][T13065] IPv6: NLM_F_CREATE should be set when creating new route [ 409.172756][T13065] IPv6: NLM_F_CREATE should be set when creating new route [ 409.178395][T13065] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 409.181607][T13065] netlink: 'syz.7.1938': attribute type 4 has an invalid length. [ 409.192162][ T60] lo speed is unknown, defaulting to 1000 [ 409.194023][ T60] syz0: Port: 1 Link DOWN [ 409.196340][ T60] lo speed is unknown, defaulting to 1000 [ 409.883049][T13088] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 410.131220][ T840] usb 12-1: new high-speed USB device number 33 using dummy_hcd [ 410.204880][T13105] erofs (device loop0): cannot find valid erofs superblock [ 410.291156][ T840] usb 12-1: too many configurations: 204, using maximum allowed: 8 [ 410.296084][ T840] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 410.299704][ T840] usb 12-1: can't read configurations, error -61 [ 410.429202][ T840] usb 12-1: new high-speed USB device number 34 using dummy_hcd [ 410.581587][ T840] usb 12-1: too many configurations: 204, using maximum allowed: 8 [ 410.586696][ T840] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 410.590874][ T840] usb 12-1: can't read configurations, error -61 [ 410.593897][ T840] usb usb12-port1: attempt power cycle [ 410.776196][T13130] netlink: 212376 bytes leftover after parsing attributes in process `syz.9.1963'. [ 410.805160][T13132] fuse: Unknown parameter 'subj_type' [ 410.940090][ T840] usb 12-1: new high-speed USB device number 35 using dummy_hcd [ 410.971355][ T840] usb 12-1: too many configurations: 204, using maximum allowed: 8 [ 410.975155][ T840] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 410.978451][ T840] usb 12-1: can't read configurations, error -61 [ 411.044952][T13149] program syz.4.1970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 411.047925][T13149] ata1.00: invalid transfer count 0 [ 411.074358][T13154] netlink: 37 bytes leftover after parsing attributes in process `syz.4.1971'. [ 411.077203][T13154] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 411.079518][T13154] IPv6: NLM_F_CREATE should be set when creating new route [ 411.081837][T13154] IPv6: NLM_F_CREATE should be set when creating new route [ 411.087071][T13155] kvm: kvm [13153]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x4 [ 411.119308][ T840] usb 12-1: new high-speed USB device number 36 using dummy_hcd [ 411.141032][ T840] usb 12-1: too many configurations: 204, using maximum allowed: 8 [ 411.145522][ T840] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 411.147952][ T840] usb 12-1: can't read configurations, error -61 [ 411.150578][ T840] usb usb12-port1: unable to enumerate USB device [ 411.392039][T13170] can: request_module (can-proto-3) failed. [ 411.401294][ T1222] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 411.549203][ T1222] usb 9-1: Using ep0 maxpacket: 16 [ 411.553644][ T1222] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 411.561775][ T1222] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 411.565812][ T1222] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.568937][ T1222] usb 9-1: Product: syz [ 411.571151][ T1222] usb 9-1: Manufacturer: syz [ 411.572967][ T1222] usb 9-1: SerialNumber: syz [ 411.577456][ T1222] usb 9-1: config 0 descriptor?? [ 411.581512][ T1222] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 411.585112][ T1222] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 411.946536][T13194] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1982'. [ 411.950309][T13194] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1982'. [ 412.121275][T13203] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 412.184265][ T1222] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 412.429514][ T6056] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 412.589209][ T6056] usb 14-1: Using ep0 maxpacket: 32 [ 412.592162][ T6056] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 412.594993][ T1222] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 412.595689][ T6056] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 412.595711][ T6056] usb 14-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 412.597919][ T6056] usb 14-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 412.601195][ T1222] em28xx 9-1:0.0: board has no eeprom [ 412.602292][ T6056] usb 14-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 412.615949][ T6056] usb 14-1: Product: syz [ 412.617339][ T6056] usb 14-1: Manufacturer: syz [ 412.618998][ T6056] usb 14-1: SerialNumber: syz [ 412.626364][ T6056] input: appletouch as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.0/input/input25 [ 412.829725][T13210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.832596][T13210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.941828][ T6040] usb 14-1: USB disconnect, device number 6 [ 413.024913][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1988'. [ 413.061029][ T6040] appletouch 14-1:1.0: input: appletouch disconnected [ 413.567412][T13244] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 413.570991][T13244] SELinux: failed to load policy [ 413.625557][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2000'. [ 413.730390][T13165] em28xx 9-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 413.784001][T13275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.789481][ T1222] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 413.792683][ T1222] em28xx 9-1:0.0: dvb set to bulk mode. [ 413.803809][ T60] em28xx 9-1:0.0: Binding DVB extension [ 413.814806][ T1222] usb 9-1: USB disconnect, device number 16 [ 413.817525][ T1222] em28xx 9-1:0.0: Disconnecting em28xx [ 413.841004][ T60] em28xx 9-1:0.0: Registering input extension [ 413.843197][ T1222] em28xx 9-1:0.0: Closing input extension [ 413.855440][ T1222] em28xx 9-1:0.0: Freeing device [ 413.951919][T13284] vxfs: WRONG superblock magic 00000000 at 1 [ 413.954095][T13284] vxfs: WRONG superblock magic 00000000 at 8 [ 413.956251][T13284] vxfs: can't find superblock. [ 413.973503][T13284] lo speed is unknown, defaulting to 1000 [ 414.225219][T13287] autofs4:pid:13287:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 414.299920][ T840] usb 12-1: new high-speed USB device number 37 using dummy_hcd [ 414.466280][ T840] usb 12-1: Using ep0 maxpacket: 8 [ 414.473189][ T840] usb 12-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 414.477003][ T840] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.483938][ T840] usb 12-1: Product: syz [ 414.485804][ T840] usb 12-1: Manufacturer: syz [ 414.487797][ T840] usb 12-1: SerialNumber: syz [ 414.496234][ T840] usb 12-1: config 0 descriptor?? [ 414.701061][ T840] usb 12-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 414.703950][T13278] program syz.7.2006 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 414.708607][ T840] dvb_usb_rtl28xxu 12-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 414.712754][ T840] usb 12-1: USB disconnect, device number 37 [ 415.060618][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 415.060629][ T40] audit: type=1400 audit(1758057850.254:1046): avc: denied { setattr } for pid=13314 comm="syz.9.2016" name="dlm-monitor" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 415.327788][T13321] program syz.7.2019 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.334754][T13329] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2021'. [ 415.337691][T13329] netlink: 244 bytes leftover after parsing attributes in process `syz.9.2021'. [ 415.379820][T13327] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2019'. [ 415.422756][T13335] netlink: 284 bytes leftover after parsing attributes in process `syz.4.2022'. [ 415.426425][T13335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2022'. [ 415.443903][T13337] binder: BINDER_SET_CONTEXT_MGR already set [ 415.446305][T13337] binder: 13336:13337 ioctl 4018620d 200000000100 returned -16 [ 415.510965][ T40] audit: type=1400 audit(1758057850.704:1047): avc: denied { append } for pid=13343 comm="syz.7.2025" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 415.600666][T13302] syz.0.2013: vmalloc error: size 18874368, failed to allocated page array size 36864, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 415.608696][T13302] CPU: 3 UID: 0 PID: 13302 Comm: syz.0.2013 Not tainted syzkaller #0 PREEMPT(full) [ 415.608722][T13302] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 415.608733][T13302] Call Trace: [ 415.608740][T13302] [ 415.608748][T13302] dump_stack_lvl+0x16c/0x1f0 [ 415.608796][T13302] warn_alloc+0x248/0x3a0 [ 415.608823][T13302] ? __pfx_warn_alloc+0x10/0x10 [ 415.608862][T13302] ? hash_netport4_resize+0x1d8/0x1c50 [ 415.608881][T13302] ? __vmalloc_node_noprof+0xad/0xf0 [ 415.608913][T13302] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 415.608950][T13302] ? hash_netport4_resize+0x1d8/0x1c50 [ 415.608975][T13302] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 415.609007][T13302] ? ___kmalloc_large_node+0xed/0x160 [ 415.609039][T13302] __kvmalloc_node_noprof+0x30a/0x620 [ 415.609057][T13302] ? hash_netport4_resize+0x1d8/0x1c50 [ 415.609075][T13302] ? __kmalloc_noprof+0x242/0x510 [ 415.609092][T13302] ? hash_netport4_resize+0x1d8/0x1c50 [ 415.609132][T13302] ? hash_netport4_resize+0x1d8/0x1c50 [ 415.609149][T13302] hash_netport4_resize+0x1d8/0x1c50 [ 415.609169][T13302] ? __pfx_hash_netport4_add+0x10/0x10 [ 415.609191][T13302] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 415.609217][T13302] ? __pfx___mutex_lock+0x10/0x10 [ 415.609270][T13302] ? __pfx_hash_netport4_resize+0x10/0x10 [ 415.609294][T13302] call_ad.constprop.0+0x36d/0x940 [ 415.609325][T13302] ? __pfx_hash_netport4_resize+0x10/0x10 [ 415.609347][T13302] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 415.609376][T13302] ? __pfx___nla_validate_parse+0x10/0x10 [ 415.609418][T13302] ? __nla_parse+0x40/0x60 [ 415.609471][T13302] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 415.609501][T13302] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 415.609526][T13302] ? rcu_sync_func+0x10/0x1a0 [ 415.609576][T13302] ? find_held_lock+0x2b/0x80 [ 415.609605][T13302] nfnetlink_rcv_msg+0x9fc/0x1200 [ 415.609633][T13302] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 415.609654][T13302] ? __lock_acquire+0x62e/0x1ce0 [ 415.609705][T13302] ? avc_has_perm_noaudit+0x149/0x3b0 [ 415.609731][T13302] netlink_rcv_skb+0x155/0x420 [ 415.609757][T13302] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 415.609777][T13302] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 415.609813][T13302] ? ns_capable+0xd7/0x110 [ 415.609838][T13302] nfnetlink_rcv+0x1b3/0x430 [ 415.609860][T13302] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 415.609877][T13302] ? netlink_deliver_tap+0x1ae/0xd30 [ 415.609906][T13302] netlink_unicast+0x5aa/0x870 [ 415.609934][T13302] ? __pfx_netlink_unicast+0x10/0x10 [ 415.609959][T13302] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 415.609991][T13302] netlink_sendmsg+0x8d1/0xdd0 [ 415.610020][T13302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.610055][T13302] ____sys_sendmsg+0xa98/0xc70 [ 415.610084][T13302] ? copy_msghdr_from_user+0x10a/0x160 [ 415.610105][T13302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.610137][T13302] ? kernelmode_fixup_or_oops.constprop.0+0x77/0xe0 [ 415.610163][T13302] ___sys_sendmsg+0x134/0x1d0 [ 415.610187][T13302] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.610245][T13302] __sys_sendmsg+0x16d/0x220 [ 415.610269][T13302] ? __pfx___sys_sendmsg+0x10/0x10 [ 415.610291][T13302] ? __pfx_bpf_trace_run2+0x10/0x10 [ 415.610318][T13302] ? syscall_trace_enter+0x1cb/0x240 [ 415.610340][T13302] ? rcu_is_watching+0x12/0xc0 [ 415.610366][T13302] do_syscall_64+0xcd/0x4c0 [ 415.610392][T13302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.610410][T13302] RIP: 0033:0x7fea1eb8eba9 [ 415.610427][T13302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.610444][T13302] RSP: 002b:00007fea1f951038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.610460][T13302] RAX: ffffffffffffffda RBX: 00007fea1edd5fa0 RCX: 00007fea1eb8eba9 [ 415.610473][T13302] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 415.610484][T13302] RBP: 00007fea1ec11e19 R08: 0000000000000000 R09: 0000000000000000 [ 415.610495][T13302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.610505][T13302] R13: 00007fea1edd6038 R14: 00007fea1edd5fa0 R15: 00007ffe1f17f0c8 [ 415.610531][T13302] [ 415.610630][T13302] Mem-Info: [ 415.764371][T13302] active_anon:44456 inactive_anon:0 isolated_anon:0 [ 415.764371][T13302] active_file:3401 inactive_file:46312 isolated_file:0 [ 415.764371][T13302] unevictable:1768 dirty:51 writeback:0 [ 415.764371][T13302] slab_reclaimable:10107 slab_unreclaimable:86772 [ 415.764371][T13302] mapped:30636 shmem:34195 pagetables:1452 [ 415.764371][T13302] sec_pagetables:312 bounce:0 [ 415.764371][T13302] kernel_misc_reclaimable:0 [ 415.764371][T13302] free:368161 free_pcp:37987 free_cma:0 [ 415.764422][T13302] Node 0 active_anon:137924kB inactive_anon:0kB active_file:13316kB inactive_file:178940kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:120232kB dirty:204kB writeback:0kB shmem:98524kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14608kB pagetables:4832kB sec_pagetables:1240kB all_unreclaimable? yes Balloon:0kB [ 415.764467][T13302] Node 1 active_anon:39900kB inactive_anon:0kB active_file:288kB inactive_file:6308kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:2312kB dirty:0kB writeback:0kB shmem:38256kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:656kB pagetables:976kB sec_pagetables:8kB all_unreclaimable? no Balloon:0kB [ 415.764508][T13302] Node 0 DMA free:7284kB boost:2048kB min:2388kB low:2472kB high:2556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1484kB inactive_anon:0kB active_file:132kB inactive_file:1152kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:312kB local_pcp:8kB free_cma:0kB [ 415.764558][T13302] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 415.764595][T13302] Node 0 DMA32 free:83536kB boost:47104kB min:74620kB low:81496kB high:88372kB reserved_highatomic:2048KB free_highatomic:2048KB active_anon:136440kB inactive_anon:0kB active_file:13184kB inactive_file:177788kB unevictable:3536kB writepending:204kB present:2080628kB managed:1263444kB mlocked:0kB bounce:0kB free_pcp:20148kB local_pcp:4572kB free_cma:0kB [ 415.764678][T13302] lowmem_reserve[]: 0 0 0 0 0 [ 415.834810][T13302] Node 1 Normal free:1381692kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:8192KB free_highatomic:8140KB active_anon:39900kB inactive_anon:0kB active_file:288kB inactive_file:6308kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:131156kB local_pcp:21788kB free_cma:0kB [ 415.834868][T13302] lowmem_reserve[]: 0 0 0 0 0 [ 415.834906][T13302] Node 0 DMA: 16*4kB (UM) 12*8kB (UME) 8*16kB (UM) 33*32kB (UME) 24*64kB (UME) 17*128kB (UME) 1*256kB (U) 2*512kB (UM) 1*1024kB (E) 0*2048kB 0*4096kB = 7360kB [ 415.835061][T13302] Node 0 DMA32: 486*4kB (UME) 1037*8kB (UM) 463*16kB (UME) 677*32kB (UME) 182*64kB (UME) 138*128kB (UME) 22*256kB (UM) 10*512kB (UM) 2*1024kB (UM) 1*2048kB (H) 0*4096kB = 83472kB [ 415.835232][T13302] Node 1 Normal: 127*4kB (MH) 84*8kB (MEH) 60*16kB (MEH) 89*32kB (UMH) 55*64kB (UMEH) 45*128kB (UMEH) 199*256kB (UMEH) 209*512kB (UM) 179*1024kB (UMEH) 93*2048kB (UMEH) 204*4096kB (UM) = 1381564kB [ 415.835405][T13302] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 415.835423][T13302] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 415.835439][T13302] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 415.835455][T13302] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 415.835471][T13302] 83905 total pagecache pages [ 415.835480][T13302] 0 pages in swap cache [ 415.835487][T13302] Free swap = 124996kB [ 415.835495][T13302] Total swap = 124996kB [ 415.835503][T13302] 1048443 pages RAM [ 415.835510][T13302] 0 pages HighMem/MovableOnly [ 415.835518][T13302] 283269 pages reserved [ 415.835525][T13302] 0 pages cma reserved [ 415.904195][T13361] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 416.034586][ T40] audit: type=1400 audit(1758057851.224:1048): avc: denied { ioctl } for pid=13362 comm="syz.4.2030" path="pid:[4026532869]" dev="nsfs" ino=4026532869 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 416.095666][T13379] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input29 [ 416.104802][T13376] __nla_validate_parse: 2 callbacks suppressed [ 416.104813][T13376] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2034'. [ 416.202729][T13395] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2040'. [ 416.205564][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2040'. [ 416.209083][T13395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13395 comm=syz.4.2040 [ 416.397114][ C2] ata1: illegal qc_active transition (00000000->00000200) [ 416.399565][T13418] ip6gre0: entered allmulticast mode [ 416.446704][ T40] audit: type=1400 audit(1758057851.634:1049): avc: denied { create } for pid=13416 comm="syz.4.2043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 416.468972][T13425] fuse: Bad value for 'rootmode' [ 416.475330][T13425] sp0: Synchronizing with TNC [ 416.723179][ T1116] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 416.726126][ T1116] ata1.00: configured for UDMA/100 [ 416.755582][T13458] lo speed is unknown, defaulting to 1000 [ 416.802664][T13462] vxlan2: entered promiscuous mode [ 416.804376][T13462] vxlan2: entered allmulticast mode [ 416.806451][ T6181] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.811192][ T6181] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.814210][ T6181] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.816930][ T6181] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.095443][T13480] netlink: 'syz.9.2052': attribute type 10 has an invalid length. [ 417.113384][T13480] batman_adv: batadv0: Adding interface: team0 [ 417.115414][T13480] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.136459][T13480] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 417.143618][T13480] netlink: 'syz.9.2052': attribute type 10 has an invalid length. [ 417.158130][T13480] netlink: 'syz.9.2052': attribute type 10 has an invalid length. [ 417.160887][T13480] netlink: 'syz.9.2052': attribute type 10 has an invalid length. [ 417.164406][T13480] netlink: 'syz.9.2052': attribute type 10 has an invalid length. [ 417.179572][T13480] netlink: 'syz.9.2052': attribute type 10 has an invalid length. [ 417.180150][T13484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2053'. [ 417.182105][T13480] netlink: 'syz.9.2052': attribute type 10 has an invalid length. [ 417.187296][T13480] netlink: 'syz.9.2052': attribute type 10 has an invalid length. [ 417.192019][T13480] netlink: 'syz.9.2052': attribute type 10 has an invalid length. [ 417.194680][T13480] netlink: 'syz.9.2052': attribute type 10 has an invalid length. [ 417.259906][T13498] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2055'. [ 417.262693][T13498] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2055'. [ 417.364413][T13510] fuse: Unknown parameter 'id' [ 417.452690][T13478] cgroup: fork rejected by pids controller in /syz9 [ 417.641879][ T5333] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 417.644804][ T5333] Bluetooth: hci5: Injecting HCI hardware error event [ 417.647933][ T5984] Bluetooth: hci5: hardware error 0x00 [ 417.855102][T13541] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 417.859788][T13541] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 418.107454][T13556] geneve2: entered promiscuous mode [ 418.110241][T13556] geneve2: entered allmulticast mode [ 418.166234][T13566] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2067'. [ 418.196480][ T40] audit: type=1400 audit(1758057853.384:1050): avc: denied { create } for pid=13570 comm="syz.4.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 418.205980][ T40] audit: type=1400 audit(1758057853.394:1051): avc: denied { write } for pid=13570 comm="syz.4.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 418.509265][ T1222] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 418.540757][T13591] tipc: Enabled bearer , priority 0 [ 418.543401][T13591] syzkaller0: entered promiscuous mode [ 418.545187][T13591] syzkaller0: entered allmulticast mode [ 418.560710][T13591] tipc: Resetting bearer [ 418.583813][T13590] tipc: Resetting bearer [ 418.594193][T13590] tipc: Disabling bearer [ 418.639211][ T1222] usb 9-1: device descriptor read/64, error -71 [ 418.739448][ T40] audit: type=1400 audit(1758057853.924:1052): avc: denied { connect } for pid=13596 comm="syz.9.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 418.747553][ T40] audit: type=1400 audit(1758057853.934:1053): avc: denied { ioctl } for pid=13596 comm="syz.9.2078" path="socket:[61154]" dev="sockfs" ino=61154 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 418.909502][ T1222] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 419.058635][T13613] bridge1: entered promiscuous mode [ 419.059282][ T1222] usb 9-1: device descriptor read/64, error -71 [ 419.169626][ T1222] usb usb9-port1: attempt power cycle [ 419.186466][T13620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.192028][T13620] batadv_slave_0: entered promiscuous mode [ 419.245137][T13623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2086'. [ 419.248046][T13623] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2086'. [ 419.258476][T13628] fuse: Bad value for 'fd' [ 419.295259][T13631] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 419.312406][ T9] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 419.314915][ T9] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 419.317335][ T9] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 419.323129][ T9] hid-generic 0003:0004:0000.000B: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 419.365586][T13638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=13638 comm=syz.7.2091 [ 419.365593][T13637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=13637 comm=syz.7.2091 [ 419.385744][T13642] binder: 13639:13642 ioctl c018620c 200000000240 returned -22 [ 419.391376][T13642] team0: No ports can be present during mode change [ 419.398761][T13642] batadv1: entered promiscuous mode [ 419.519691][ T1222] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 419.537002][T13652] cgroup: Name too long [ 419.541129][ T1222] usb 9-1: device descriptor read/8, error -71 [ 419.596104][T13650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.606299][T13650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.659418][ T6040] usb 12-1: new full-speed USB device number 38 using dummy_hcd [ 419.782306][ T1222] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 419.802472][ T1222] usb 9-1: device descriptor read/8, error -71 [ 419.821045][ T6040] usb 12-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 419.825024][ T6040] usb 12-1: config 1 interface 0 has no altsetting 0 [ 419.828761][ T6040] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 419.833119][ T6040] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.835645][ T6040] usb 12-1: Product: syz [ 419.836991][ T6040] usb 12-1: Manufacturer: syz [ 419.838652][ T6040] usb 12-1: SerialNumber: syz [ 419.919428][ T1222] usb usb9-port1: unable to enumerate USB device [ 419.953985][T13663] overlayfs: failed to resolve './bus': -2 [ 419.996972][ T40] audit: type=1400 audit(1758057855.184:1054): avc: denied { read } for pid=13664 comm="syz.0.2101" name="file0" dev="tmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 420.005237][ T40] audit: type=1400 audit(1758057855.184:1055): avc: denied { open } for pid=13664 comm="syz.0.2101" path="/96/file0" dev="tmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 420.040135][ T5984] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 420.040945][T13667] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2102'. [ 420.046227][T13667] nbd: must specify a device to reconfigure [ 420.117996][T13670] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 420.499455][ T6056] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 420.652676][ T6056] usb 14-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1024 [ 420.656048][ T6056] usb 14-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 16 [ 420.659408][ T6056] usb 14-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.663463][ T6056] usb 14-1: config 1 interface 0 has no altsetting 0 [ 420.667128][ T6056] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 420.671443][ T6056] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.673996][ T6056] usb 14-1: Product: syz [ 420.675390][ T6056] usb 14-1: Manufacturer: syz [ 420.677255][ T6056] usb 14-1: SerialNumber: syz [ 420.688977][T13678] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 420.691537][T13678] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 420.898416][ T6056] usblp 14-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 3 proto 2 vid 0x0525 pid 0xA4A8 [ 420.904353][ T6056] usb 14-1: USB disconnect, device number 7 [ 420.908233][ T6056] usblp0: removed [ 421.283794][T13697] dlm: no locking on control device [ 421.330514][T13702] loop6: detected capacity change from 0 to 2560 [ 421.332887][T13702] buffer_io_error: 316 callbacks suppressed [ 421.332895][T13702] Buffer I/O error on dev loop6, logical block 0, async page read [ 421.337333][T13702] Buffer I/O error on dev loop6, logical block 0, async page read [ 421.338069][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 421.340198][T13702] Buffer I/O error on dev loop6, logical block 0, async page read [ 421.343450][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 421.346019][T13702] Buffer I/O error on dev loop6, logical block 0, async page read [ 421.346067][T13702] Buffer I/O error on dev loop6, logical block 0, async page read [ 421.350349][ C0] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 421.353622][T13702] Buffer I/O error on dev loop6, logical block 0, async page read [ 421.356051][ C0] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 421.359849][T13702] Buffer I/O error on dev loop6, logical block 0, async page read [ 421.362679][ C0] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 421.365769][T13702] Buffer I/O error on dev loop6, logical block 0, async page read [ 421.368848][ C0] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 421.374453][T13702] ldm_validate_partition_table(): Disk read failed. [ 421.376213][ C0] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 67 prio class 2 [ 421.380331][T13702] Buffer I/O error on dev loop6, logical block 0, async page read [ 421.382862][ C0] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 67 prio class 2 [ 421.386720][T13702] Buffer I/O error on dev loop6, logical block 0, async page read [ 421.398333][T13702] Dev loop6: unable to read RDB block 0 [ 421.401278][T13702] loop6: unable to read partition table [ 421.403141][T13702] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 421.454989][T13712] __nla_validate_parse: 5 callbacks suppressed [ 421.454999][T13712] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2116'. [ 421.506433][T13722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2115'. [ 421.561570][T13732] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.629470][T13739] gretap1: entered promiscuous mode [ 421.710113][ T5984] Bluetooth: hci1: unexpected event for opcode 0x200b [ 421.805071][T13752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2127'. [ 421.807961][T13752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2127'. [ 421.812835][T13752] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2127'. [ 421.953010][T13779] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2136'. [ 421.982449][T13783] 9p: Unknown Cache mode or invalid value mmape0 [ 421.988409][T13785] syz1: rxe_newlink: already configured on veth1_virt_wifi [ 422.020726][T13782] overlayfs: conflicting options: userxattr,metacopy=on [ 422.047501][T13790] sctp: [Deprecated]: syz.4.2139 (pid 13790) Use of int in max_burst socket option deprecated. [ 422.047501][T13790] Use struct sctp_assoc_value instead [ 422.052377][T13790] sctp: [Deprecated]: syz.4.2139 (pid 13790) Use of int in max_burst socket option deprecated. [ 422.052377][T13790] Use struct sctp_assoc_value instead [ 422.057131][T13790] sctp: [Deprecated]: syz.4.2139 (pid 13790) Use of int in max_burst socket option deprecated. [ 422.057131][T13790] Use struct sctp_assoc_value instead [ 422.062345][T13790] sctp: [Deprecated]: syz.4.2139 (pid 13790) Use of int in max_burst socket option deprecated. [ 422.062345][T13790] Use struct sctp_assoc_value instead [ 422.063699][T13789] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2139'. [ 422.067094][T13790] sctp: [Deprecated]: syz.4.2139 (pid 13790) Use of int in max_burst socket option deprecated. [ 422.067094][T13790] Use struct sctp_assoc_value instead [ 422.072810][T13791] IPVS: Error connecting to the multicast addr [ 422.076152][T13790] sctp: [Deprecated]: syz.4.2139 (pid 13790) Use of int in max_burst socket option deprecated. [ 422.076152][T13790] Use struct sctp_assoc_value instead [ 422.084289][T13790] sctp: [Deprecated]: syz.4.2139 (pid 13790) Use of int in max_burst socket option deprecated. [ 422.084289][T13790] Use struct sctp_assoc_value instead [ 422.089221][T13790] sctp: [Deprecated]: syz.4.2139 (pid 13790) Use of int in max_burst socket option deprecated. [ 422.089221][T13790] Use struct sctp_assoc_value instead [ 422.094094][T13790] sctp: [Deprecated]: syz.4.2139 (pid 13790) Use of int in max_burst socket option deprecated. [ 422.094094][T13790] Use struct sctp_assoc_value instead [ 422.098848][T13790] sctp: [Deprecated]: syz.4.2139 (pid 13790) Use of int in max_burst socket option deprecated. [ 422.098848][T13790] Use struct sctp_assoc_value instead [ 422.132965][T13795] siw: device registration error -23 [ 422.231379][T13800] ufs: You didn't specify the type of your ufs filesystem [ 422.231379][T13800] [ 422.231379][T13800] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 422.231379][T13800] [ 422.231379][T13800] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 422.245927][T13800] ufs: failed to set blocksize [ 422.292037][T13802] qnx4: no qnx4 filesystem (no root dir). [ 422.501972][ T6040] usb 12-1: USB disconnect, device number 38 [ 422.524767][T13808] pim6reg1: entered promiscuous mode [ 422.527216][T13808] pim6reg1: entered allmulticast mode [ 423.029410][ T29] usb 12-1: new high-speed USB device number 39 using dummy_hcd [ 423.056472][T13817] validate_nla: 28 callbacks suppressed [ 423.056482][T13817] netlink: 'syz.0.2150': attribute type 28 has an invalid length. [ 423.061699][T13817] netlink: 'syz.0.2150': attribute type 3 has an invalid length. [ 423.064722][T13817] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2150'. [ 423.099741][T13814] f2fs: Unknown parameter 'barrier½ç©ó~G' [ 423.192882][ T29] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 423.196332][ T29] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 423.200007][ T29] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 423.203065][ T29] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.207293][T13810] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 423.211659][ T29] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 423.246806][T13830] ufs: You didn't specify the type of your ufs filesystem [ 423.246806][T13830] [ 423.246806][T13830] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 423.246806][T13830] [ 423.246806][T13830] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 423.258644][T13830] ufs: failed to set blocksize [ 423.419247][ T61] usb 12-1: USB disconnect, device number 39 [ 423.619365][T13810] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 423.851151][T13850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2161'. [ 423.854955][ T40] audit: type=1400 audit(1758057859.044:1056): avc: denied { setopt } for pid=13849 comm="syz.0.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 423.861307][T13850] new mount options do not match the existing superblock, will be ignored [ 423.870413][T13850] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 423.974417][T13854] netlink: 'syz.0.2162': attribute type 1 has an invalid length. [ 423.995576][T13854] bond3: entered promiscuous mode [ 423.998069][T13854] 8021q: adding VLAN 0 to HW filter on device bond3 [ 424.005540][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2162'. [ 424.031885][T13854] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 424.035558][T13854] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 424.038616][T13854] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 424.117434][T13872] binder: 13871:13872 ioctl 40046205 0 returned -22 [ 424.122175][T13872] binder: 13871:13872 ioctl c0306201 2000000013c0 returned -11 [ 424.195092][T13882] ip6gretap0: entered promiscuous mode [ 424.292127][ T40] audit: type=1400 audit(1758057859.484:1057): avc: denied { getopt } for pid=13891 comm="syz.7.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 424.359277][ T9] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 424.520312][ T9] usb 14-1: Using ep0 maxpacket: 8 [ 424.523372][ T9] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 424.525932][ T9] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 424.528954][ T9] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 424.534225][ T9] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 424.537729][ T9] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 424.544232][ T9] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 424.547446][ T9] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.549232][ T40] audit: type=1400 audit(1758057859.734:1058): avc: denied { map } for pid=13906 comm="syz.0.2179" path="pipe:[63937]" dev="pipefs" ino=63937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 424.581275][T13909] openvswitch: netlink: Missing valid actions attribute. [ 424.583630][T13909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.588117][T13910] openvswitch: netlink: Missing valid actions attribute. [ 424.592207][T13910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.763951][ T9] usb 14-1: GET_CAPABILITIES returned 0 [ 424.767052][ T9] usbtmc 14-1:16.0: can't read capabilities [ 424.968087][ T9] usb 14-1: USB disconnect, device number 8 [ 425.356186][T13935] dvmrp1: entered allmulticast mode [ 425.647583][ T40] audit: type=1326 audit(1758057860.834:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.9.2191" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690038eba9 code=0x7fc00000 [ 425.658451][ T40] audit: type=1326 audit(1758057860.834:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.9.2191" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f690038eba9 code=0x7fc00000 [ 425.668593][ T40] audit: type=1326 audit(1758057860.834:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.9.2191" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690038eba9 code=0x7fc00000 [ 425.680003][ T40] audit: type=1326 audit(1758057860.834:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.9.2191" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690038eba9 code=0x7fc00000 [ 425.688777][ T40] audit: type=1326 audit(1758057860.834:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.9.2191" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690038eba9 code=0x7fc00000 [ 425.701996][ T40] audit: type=1326 audit(1758057860.834:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.9.2191" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690038eba9 code=0x7fc00000 [ 425.711315][ T40] audit: type=1326 audit(1758057860.834:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.9.2191" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690038eba9 code=0x7fc00000 [ 425.802257][T13956] overlayfs: failed to resolve './file1/file0': -2 [ 426.253977][T13982] hugetlbfs: Bad value 'e' for mount option 'size' [ 426.253977][T13982] [ 426.275099][T13986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.312962][T13984] kvm: kvm [13983]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5407 [ 426.316090][T13984] kvm: kvm [13983]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5b07 [ 426.420736][T13996] Invalid logical block size (24576) [ 426.434414][T13998] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 426.437560][T13998] IPv6: NLM_F_CREATE should be set when creating new route [ 426.442376][T13998] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 426.444796][T13998] IPv6: NLM_F_CREATE should be set when creating new route [ 426.515148][T14000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14000 comm=syz.0.2207 [ 426.650086][T14010] __nla_validate_parse: 8 callbacks suppressed [ 426.650096][T14010] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2210'. [ 426.703022][T13984] kvm_intel: kvm [13983]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x9cbf [ 426.720786][T13984] kvm: kvm [13983]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xcabf [ 426.724454][T13984] kvm: kvm [13983]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x78ae [ 426.745476][T13984] kvm: kvm [13983]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x835b [ 426.765800][T13984] kvm: kvm [13983]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x1b4a [ 426.766111][T14021] bridge_slave_0: default FDB implementation only supports local addresses [ 426.769692][T13984] kvm: kvm [13983]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x553a [ 426.789205][ T61] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 426.927279][T14023] futex_wake_op: syz.0.2213 tries to shift op by 32; fix this program [ 426.941577][ T61] usb 14-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 426.945012][ T61] usb 14-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 426.948084][ T61] usb 14-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 426.951380][ T61] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.957582][T14007] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 426.960690][T14032] sp0: Synchronizing with TNC [ 426.962474][ T61] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 427.000791][T14031] [U] è [ 427.055617][T14034] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2216'. [ 427.097951][T14036] binder: 14035:14036 ioctl c0306201 200000000080 returned -14 [ 427.166758][ T6405] usb 14-1: USB disconnect, device number 9 [ 427.402325][T14046] binder: 14045:14046 ioctl c0306201 0 returned -14 [ 427.434449][T14048] openvswitch: netlink: Multiple metadata blocks provided [ 427.449577][T14048] lo speed is unknown, defaulting to 1000 [ 427.772078][T14054] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 428.099442][T14079] ref_ctr increment failed for inode: 0xc1f offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888024dd1580 [ 428.103588][T14080] ref_ctr increment failed for inode: 0xc1f offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888024dd1580 [ 428.249884][ T6405] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 428.292990][T14092] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 428.296193][T14092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2233'. [ 428.309344][T14080] uprobe: syz.7.2230:14080 failed to unregister, leaking uprobe [ 428.419388][ T6405] usb 9-1: Using ep0 maxpacket: 16 [ 428.419736][ T6056] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 428.429050][ T6405] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 428.434939][ T6405] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 428.439087][ T6405] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 428.442351][ T6405] usb 9-1: config 0 interface 0 has no altsetting 0 [ 428.446013][ T6405] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 428.448809][ T6405] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.451859][ T6405] usb 9-1: Product: syz [ 428.453237][ T6405] usb 9-1: Manufacturer: syz [ 428.454805][ T6405] usb 9-1: SerialNumber: syz [ 428.457627][ T6405] usb 9-1: config 0 descriptor?? [ 428.522626][T14100] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2235'. [ 428.582947][ T6056] usb 14-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 428.586650][ T6056] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.587107][ T5984] Bluetooth: hci1: unexpected event for opcode 0x2010 [ 428.589506][T14105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2236'. [ 428.590214][ T6056] usb 14-1: Product: syz [ 428.593464][T14100] team0: entered allmulticast mode [ 428.596281][ T6056] usb 14-1: Manufacturer: syz [ 428.604606][ T6056] usb 14-1: SerialNumber: syz [ 428.612465][ T6056] usb 14-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 428.645736][ T61] usb 14-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 428.667926][T14067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2227'. [ 428.678644][T14067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2227'. [ 428.684739][T14067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.687670][T14067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.692221][ T6405] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input30 [ 428.696610][ T5367] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 428.759343][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 428.762712][ T5367] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 428.772239][T14111] infiniband sLò2: RDMA CMA: cma_listen_on_dev, error -98 [ 428.899481][ T6056] usb 12-1: new high-speed USB device number 40 using dummy_hcd [ 428.960149][T14067] synaptics_usb 9-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 429.059739][ T6010] usb 14-1: USB disconnect, device number 10 [ 429.070219][ T6056] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.074023][ T6056] usb 12-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 429.076825][ T6056] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.080929][ T6056] usb 12-1: config 0 descriptor?? [ 429.140863][ T141] usb 9-1: USB disconnect, device number 21 [ 429.286967][ T6056] usbhid 12-1:0.0: can't add hid device: -71 [ 429.289041][ T6056] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 429.293982][ T6056] usb 12-1: USB disconnect, device number 40 [ 429.596372][T14129] netlink: 'syz.7.2244': attribute type 1 has an invalid length. [ 429.598963][T14129] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2244'. [ 429.603514][T14133] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 429.609423][T14129] netlink: 'syz.7.2244': attribute type 1 has an invalid length. [ 429.611927][T14129] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2244'. [ 429.719404][ T61] ath9k_htc 14-1:1.0: ath9k_htc: Target is unresponsive [ 429.722952][ T61] ath9k_htc: Failed to initialize the device [ 429.728278][ T6010] usb 14-1: ath9k_htc: USB layer deinitialized [ 429.756907][T14144] dns_resolver: Unsupported content type (234) [ 429.766679][T14142] lo speed is unknown, defaulting to 1000 [ 429.904453][T14146] syz.4.2250 (14146): drop_caches: 2 [ 429.977423][T14171] netlink: 'syz.0.2256': attribute type 17 has an invalid length. [ 429.980941][T14171] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2256'. [ 429.987307][T14171] macvtap0: entered allmulticast mode [ 429.992992][T14171] veth0_macvtap: entered allmulticast mode [ 429.996876][T14171] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 430.012261][T14174] netlink: 'syz.4.2255': attribute type 1 has an invalid length. [ 430.032440][ T40] kauditd_printk_skb: 5822 callbacks suppressed [ 430.032455][ T40] audit: type=1400 audit(1758582153.225:6888): avc: denied { getopt } for pid=14175 comm="syz.0.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 430.108280][T14179] tipc: Enabling of bearer rejected, failed to enable media [ 430.181643][T14184] binder: 14183:14184 ioctl c0306201 200000000080 returned -14 [ 430.329281][ T6010] usb 12-1: new high-speed USB device number 41 using dummy_hcd [ 430.479259][ T6010] usb 12-1: Using ep0 maxpacket: 8 [ 430.482125][ T6010] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 430.485328][ T6010] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 430.489728][ T6010] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 430.493868][ T6010] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.499483][ T6010] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 430.503158][ T6010] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.560383][T14188] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 430.638979][T14189] netlink: 'syz.9.2263': attribute type 2 has an invalid length. [ 430.711207][ T6010] usb 12-1: GET_CAPABILITIES returned 0 [ 430.713008][ T6010] usbtmc 12-1:16.0: can't read capabilities [ 430.840940][T14196] netlink: 'syz.9.2265': attribute type 10 has an invalid length. [ 430.843566][T14196] batman_adv: batadv0: Removing interface: team0 [ 430.846110][T14196] team0: Cannot enslave team device to itself [ 430.953412][ T6010] usb 12-1: USB disconnect, device number 41 [ 431.165229][T14211] kvm_intel: kvm [14210]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x6700e0000a [ 431.767104][T14244] netlink: 'syz.9.2278': attribute type 1 has an invalid length. [ 431.770004][T14244] __nla_validate_parse: 4 callbacks suppressed [ 431.770012][T14244] netlink: 136 bytes leftover after parsing attributes in process `syz.9.2278'. [ 431.774576][T14244] netlink: 'syz.9.2278': attribute type 2 has an invalid length. [ 431.777025][T14244] netlink: 'syz.9.2278': attribute type 1 has an invalid length. [ 431.812979][ T40] audit: type=1400 audit(1758582155.005:6889): avc: denied { mounton } for pid=14245 comm="syz.9.2279" path="/181/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 431.840168][ T40] audit: type=1400 audit(1758582155.035:6890): avc: denied { unmount } for pid=11663 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 431.852108][T14251] loop0: Can't mount, would change RO state [ 431.852128][ T40] audit: type=1400 audit(1758582155.045:6891): avc: denied { mounton } for pid=14250 comm="syz.7.2281" path="/595/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 431.867711][T14251] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2281'. [ 432.099497][T14268] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2286'. [ 432.118681][T14270] 9pnet_virtio: no channels available for device 127.0.0.1 [ 432.134792][T14268] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2286'. [ 432.189497][T14275] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 432.232961][ T40] audit: type=1400 audit(1758582155.425:6892): avc: denied { write } for pid=14279 comm="syz.7.2289" path="socket:[66827]" dev="sockfs" ino=66827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 432.241342][ T40] audit: type=1400 audit(1758582155.425:6893): avc: denied { setopt } for pid=14279 comm="syz.7.2289" lport=56579 faddr=::ffff:172.20.255.187 fport=65533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 432.397985][ T40] audit: type=1400 audit(1758582155.585:6894): avc: denied { allowed } for pid=14282 comm="syz.9.2290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 432.419448][T14285] program syz.4.2291 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 432.420460][T14286] program syz.4.2291 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 432.463504][T14288] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.2292'. [ 432.516995][T14292] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2294'. [ 432.529056][ T40] audit: type=1400 audit(1758582155.715:6895): avc: denied { write } for pid=14291 comm="syz.9.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 432.607052][T14295] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 432.610521][T14295] SELinux: failed to load policy [ 432.615800][T14295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.621485][T14295] batadv_slave_0: entered promiscuous mode [ 432.623971][T14295] batadv_slave_0: entered allmulticast mode [ 432.626534][ T40] audit: type=1400 audit(1758582155.815:6896): avc: denied { rename } for pid=14296 comm="syz.4.2295" name="file0" dev="tmpfs" ino=1210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 432.965864][T14310] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2301'. [ 432.966977][ T40] audit: type=1400 audit(1758582156.155:6897): avc: denied { connect } for pid=14312 comm="syz.9.2302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 432.979403][T14313] tipc: Trying to set illegal importance in message [ 433.223712][T14338] usb usb8: usbfs: process 14338 (syz.4.2309) did not claim interface 0 before use [ 433.285945][T14341] kvm: kvm [14340]: vcpu2, guest rIP: 0x912c Unhandled WRMSR(0x11e) = 0xfffffc18 [ 433.289877][T14341] kvm: kvm [14340]: vcpu2, guest rIP: 0x912f Unhandled WRMSR(0x11e) = 0xfffffc18 [ 433.308312][T14341] kvm: kvm [14340]: vcpu2, guest rIP: 0x912c Unhandled WRMSR(0x186) = 0xfffffc18 [ 433.311702][T14341] kvm: kvm [14340]: vcpu2, guest rIP: 0x912f Unhandled WRMSR(0x186) = 0xfffffc18 [ 433.314943][T14341] kvm: kvm [14340]: vcpu2, guest rIP: 0x912c Unhandled WRMSR(0x187) = 0xfffffc18 [ 433.317971][T14341] kvm: kvm [14340]: vcpu2, guest rIP: 0x912f Unhandled WRMSR(0x187) = 0xfffffc18 [ 433.360584][T14345] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 433.382488][T14358] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2313'. [ 433.385452][T14358] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2313'. [ 433.556349][T14376] fuse: Unknown parameter 'groupÈÇïoŽŽ¦á…Ië’_id' [ 433.650214][T14384] IPv6: NLM_F_CREATE should be specified when creating new route [ 433.713252][T14386] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.749630][ T83] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.753256][ T83] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.754783][T14392] tmpfs: Bad value for 'mpol' [ 433.756029][ T83] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.767232][ T1187] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.009189][ T6010] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 434.075683][T14403] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2330'. [ 434.162896][ T6010] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.166311][ T6010] usb 14-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 434.170984][ T6010] usb 14-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 434.173801][ T6010] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.175839][T14423] input: syz1 as /devices/virtual/input/input31 [ 434.177547][ T6010] usb 14-1: rejected 1 configuration due to insufficient available bus power [ 434.182411][ T6010] usb 14-1: no configuration chosen from 1 choice [ 434.184424][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.187508][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.194648][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.197912][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.201839][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.204880][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.208112][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.212518][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.215657][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.218813][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.222217][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.225187][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.228230][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.231655][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.234588][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.237538][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.240674][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.244027][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.246959][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.250102][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.253430][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.256467][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.260001][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.262943][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.265882][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.268919][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.272330][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.274521][T14428] binder: 14427:14428 ioctl c0306201 2000000001c0 returned -14 [ 434.277629][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.280689][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.283738][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.286584][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.289788][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.292791][T14423] usb usb9: usbfs: process 14423 (syz.0.2334) did not claim interface 26 before use [ 434.556379][T14446] binder: 14445:14446 ioctl 40046205 0 returned -22 [ 434.559607][T14446] binder: 14445:14446 ioctl c0306201 2000000013c0 returned -11 [ 434.759315][ T5333] Bluetooth: hci1: command 0x0405 tx timeout [ 434.940818][T14502] sctp: [Deprecated]: syz.0.2350 (pid 14502) Use of int in maxseg socket option. [ 434.940818][T14502] Use struct sctp_assoc_value instead [ 435.005901][T14510] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 435.010031][T14510] random: crng reseeded on system resumption [ 435.045065][T14512] wlan1: mtu less than device minimum [ 435.278827][T14520] binder_alloc: 14519: binder_alloc_buf size -416 failed, no address space [ 435.282935][T14520] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 435.301825][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 435.301836][ T40] audit: type=1400 audit(1758582158.495:6905): avc: denied { append } for pid=14524 comm="syz.4.2358" name="usbmon5" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 435.313880][T14529] netlink: 'syz.0.2359': attribute type 11 has an invalid length. [ 435.416227][T14541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=14541 comm=syz.0.2363 [ 435.436533][ T40] audit: type=1400 audit(1758582158.625:6906): avc: denied { write } for pid=14544 comm="syz.4.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 435.458638][T14547] sctp: [Deprecated]: syz.4.2365 (pid 14547) Use of struct sctp_assoc_value in delayed_ack socket option. [ 435.458638][T14547] Use struct sctp_sack_info instead [ 435.480961][ T6197] IPVS: starting estimator thread 0... [ 435.569280][T14550] IPVS: using max 44 ests per chain, 105600 per kthread [ 435.623595][T14558] bridge0: port 3(ipvlan0) entered blocking state [ 435.625754][T14558] bridge0: port 3(ipvlan0) entered disabled state [ 435.628508][T14558] ipvlan0: entered allmulticast mode [ 435.630907][T14558] bridge0: entered allmulticast mode [ 435.633541][T14558] ipvlan0: left allmulticast mode [ 435.635144][T14558] bridge0: left allmulticast mode [ 435.704638][T14568] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 435.706913][T14568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.718518][T14569] netlink: 'syz.0.2372': attribute type 10 has an invalid length. [ 435.723276][T14569] hsr_slave_0: left promiscuous mode [ 435.725539][T14569] hsr_slave_1: left promiscuous mode [ 435.830701][T14574] trusted_key: encrypted_key: key user:syz not found [ 435.852966][ T40] audit: type=1400 audit(1758582159.045:6907): avc: denied { getopt } for pid=14575 comm="syz.0.2374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 435.861617][ T40] audit: type=1400 audit(1758582159.045:6908): avc: denied { getopt } for pid=14575 comm="syz.0.2374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 435.868925][ T40] audit: type=1400 audit(1758582159.045:6909): avc: denied { append } for pid=14575 comm="syz.0.2374" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 436.086011][T14591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=14591 comm=syz.0.2380 [ 436.603314][ T40] audit: type=1400 audit(1758582159.795:6910): avc: denied { lock } for pid=14608 comm="syz.0.2386" path="socket:[67268]" dev="sockfs" ino=67268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 436.604142][T14609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14609 comm=syz.0.2386 [ 436.763793][ T6040] usb 14-1: USB disconnect, device number 11 [ 436.849369][ T5333] Bluetooth: hci1: command 0x0405 tx timeout [ 436.864253][T14627] block nbd7: Attempted send on invalid socket [ 436.867083][T14627] I/O error, dev nbd7, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 436.872290][T14627] gfs2: error -5 reading superblock [ 436.875835][T14627] block nbd7: Attempted send on invalid socket [ 436.877904][T14627] I/O error, dev nbd7, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 436.891723][T14627] gfs2: error -5 reading superblock [ 436.904437][T14627] block nbd7: Attempted send on invalid socket [ 436.906437][T14627] I/O error, dev nbd7, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 436.910052][T14627] gfs2: error -5 reading superblock [ 436.947043][ T40] audit: type=1800 audit(1758582160.135:6911): pid=14633 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2392" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 437.145516][ T5977] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 437.152222][ T5977] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 437.154951][T14649] bridge: RTM_NEWNEIGH with invalid ether address [ 437.156343][ T5977] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 437.158747][T14649] bridge: RTM_NEWNEIGH with invalid ether address [ 437.161272][ T5977] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 437.165493][ T5977] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 437.200771][T14646] lo speed is unknown, defaulting to 1000 [ 437.258666][T14658] __nla_validate_parse: 143 callbacks suppressed [ 437.258678][T14658] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2402'. [ 437.267704][ T40] audit: type=1800 audit(1758582160.455:6912): pid=14658 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2402" name="bus" dev="9p" ino=35913980 res=0 errno=0 [ 437.289424][ T40] audit: type=1800 audit(1758582160.455:6913): pid=14658 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2402" name="bus" dev="9p" ino=35913980 res=0 errno=0 [ 437.440915][ T6843] .: (slave syz_tun): Releasing backup interface [ 437.443158][ T6843] .: (slave syz_tun): the permanent HWaddr of slave - aa:aa:aa:aa:aa:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 437.523379][T14646] chnl_net:caif_netlink_parms(): no params data found [ 437.569356][ T6197] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 437.720815][ T6197] usb 14-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 437.725279][ T6197] usb 14-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 437.729597][ T6197] usb 14-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 437.732538][ T6197] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.736877][T14662] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 437.739886][ T29] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 437.740806][ T6197] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 437.891275][ T29] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 437.894899][ T29] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 437.898419][ T29] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 437.901484][ T29] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 437.905848][ T29] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 437.912174][ T29] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 437.915994][ T29] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 437.918642][ T29] usb 9-1: Product: syz [ 437.920274][ T29] usb 9-1: Manufacturer: syz [ 437.926174][ T29] cdc_wdm 9-1:1.0: skipping garbage [ 437.928372][ T29] cdc_wdm 9-1:1.0: skipping garbage [ 437.931328][ T29] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 437.933282][ T29] cdc_wdm 9-1:1.0: Unknown control protocol [ 438.079704][T14646] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.081990][T14646] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.084685][T14646] bridge_slave_0: entered allmulticast mode [ 438.087335][T14646] bridge_slave_0: entered promiscuous mode [ 438.105649][T14646] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.107924][T14646] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.110575][T14646] bridge_slave_1: entered allmulticast mode [ 438.113756][T14646] bridge_slave_1: entered promiscuous mode [ 438.129449][T14496] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.130893][ T6405] usb 14-1: USB disconnect, device number 12 [ 438.132995][ T6010] usb 9-1: USB disconnect, device number 22 [ 438.134158][T14496] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 438.143085][T14496] netdevsim netdevsim7 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 438.183686][T14646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.191811][T14646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.234993][T14646] team0: Port device team_slave_0 added [ 438.238203][T14646] team0: Port device team_slave_1 added [ 438.272177][T14646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.275668][T14646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.284430][T14646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.292793][T14496] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.295872][T14496] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 438.298910][T14496] netdevsim netdevsim7 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 438.307778][T14646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.310097][T14646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.317974][T14646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.328821][T14693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2411'. [ 438.328835][T14694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2411'. [ 438.334515][T14694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2411'. [ 438.334729][T14693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2411'. [ 438.362995][T14646] hsr_slave_0: entered promiscuous mode [ 438.365286][T14646] hsr_slave_1: entered promiscuous mode [ 438.367350][T14646] debugfs: 'hsr0' already exists in 'hsr' [ 438.370147][T14646] Cannot create hsr debugfs directory [ 438.442484][T14697] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (65416116 ns). Using initial count to start timer. [ 438.454736][T14496] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.457772][T14496] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 438.461327][T14496] netdevsim netdevsim7 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 438.528632][T14496] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.532616][T14496] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 438.535656][T14496] netdevsim netdevsim7 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 438.591559][T14700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.743521][T14709] fuse: blksize only supported for fuseblk [ 438.761279][T14496] bond1: left allmulticast mode [ 438.763317][T14496] bridge3: port 1(bond1) entered disabled state [ 439.177573][T14496] . (unregistering): (slave bridge0): Releasing backup interface [ 439.249385][ T5984] Bluetooth: hci3: command tx timeout [ 439.959303][T14496] . (unregistering): (slave dummy0): Releasing backup interface [ 440.052684][T14496] . (unregistering): Released all slaves [ 440.071285][T14496] bond0 (unregistering): Released all slaves [ 440.077683][T14496] bond1 (unregistering): Released all slaves [ 440.163459][T14496] bond2 (unregistering): Released all slaves [ 440.282341][ T5977] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 440.293389][ T5977] Bluetooth: hci0: command 0x0c1a tx timeout [ 440.297301][ T1222] e1000 0000:00:06.0 eth0: Reset adapter [ 440.306734][T14496] : left promiscuous mode [ 440.443745][T14496] tipc: Left network mode [ 440.514395][T14726] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2422'. [ 440.636873][T14729] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 440.803581][T14646] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 440.807877][T14646] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 440.812210][T14646] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 440.816530][T14646] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 440.860166][T14646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.907614][T14646] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.915863][T14469] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.918006][T14469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.927800][T14481] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.930776][T14481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.015312][T14496] hsr_slave_0: left promiscuous mode [ 441.036822][T14496] veth1_macvtap: left allmulticast mode [ 441.038762][T14496] veth1_macvtap: left promiscuous mode [ 441.040935][T14496] veth0_macvtap: left promiscuous mode [ 441.081118][T14744] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2425'. [ 441.329405][ T5977] Bluetooth: hci3: command tx timeout [ 442.230962][T14481] smc: removing ib device syz0 [ 442.277418][T14646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.479416][T14646] veth0_vlan: entered promiscuous mode [ 442.484518][T14646] veth1_vlan: entered promiscuous mode [ 442.512358][T14646] veth0_macvtap: entered promiscuous mode [ 442.520387][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 442.523070][T14646] veth1_macvtap: entered promiscuous mode [ 442.534667][T14646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.541102][T14646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.548969][ T1053] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.553052][ T1053] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.557077][ T1053] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.563844][ T1053] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.632804][T14494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.635346][T14494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.660422][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.662889][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.830317][T14496] ================================================================== [ 442.833417][T14496] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x9db/0xa30 [ 442.836004][T14496] Write of size 8 at addr ffff88804f2208a8 by task kworker/u32:63/14496 [ 442.838804][T14496] [ 442.840237][T14496] CPU: 0 UID: 0 PID: 14496 Comm: kworker/u32:63 Not tainted syzkaller #0 PREEMPT(full) [ 442.840252][T14496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 442.840260][T14496] Workqueue: netns cleanup_net [ 442.840278][T14496] Call Trace: [ 442.840282][T14496] [ 442.840287][T14496] dump_stack_lvl+0x116/0x1f0 [ 442.840302][T14496] print_report+0xcd/0x630 [ 442.840321][T14496] ? __virt_addr_valid+0x81/0x610 [ 442.840335][T14496] ? __phys_addr+0xe8/0x180 [ 442.840348][T14496] ? __xfrm_state_delete+0x9db/0xa30 [ 442.840359][T14496] kasan_report+0xe0/0x110 [ 442.840371][T14496] ? __xfrm_state_delete+0x9db/0xa30 [ 442.840383][T14496] __xfrm_state_delete+0x9db/0xa30 [ 442.840395][T14496] xfrm_state_flush+0x512/0x700 [ 442.840408][T14496] ? __pfx_xfrm6_tunnel_net_exit+0x10/0x10 [ 442.840424][T14496] xfrm6_tunnel_net_exit+0x3d/0x160 [ 442.840439][T14496] ? __pfx_xfrm6_tunnel_net_exit+0x10/0x10 [ 442.840454][T14496] ops_undo_list+0x2eb/0xab0 [ 442.840469][T14496] ? __pfx_ops_undo_list+0x10/0x10 [ 442.840482][T14496] ? cleanup_net+0x334/0x890 [ 442.840495][T14496] ? idr_destroy+0x62/0x2e0 [ 442.840506][T14496] cleanup_net+0x408/0x890 [ 442.840520][T14496] ? __pfx_cleanup_net+0x10/0x10 [ 442.840534][T14496] ? rcu_is_watching+0x12/0xc0 [ 442.840548][T14496] process_one_work+0x9cc/0x1b70 [ 442.840562][T14496] ? __pfx_process_one_work+0x10/0x10 [ 442.840577][T14496] ? assign_work+0x1a0/0x250 [ 442.840587][T14496] worker_thread+0x6c8/0xf10 [ 442.840600][T14496] ? __pfx_worker_thread+0x10/0x10 [ 442.840611][T14496] kthread+0x3c2/0x780 [ 442.840621][T14496] ? __pfx_kthread+0x10/0x10 [ 442.840631][T14496] ? rcu_is_watching+0x12/0xc0 [ 442.840644][T14496] ? __pfx_kthread+0x10/0x10 [ 442.840653][T14496] ret_from_fork+0x5d4/0x6f0 [ 442.840663][T14496] ? __pfx_kthread+0x10/0x10 [ 442.840673][T14496] ret_from_fork_asm+0x1a/0x30 [ 442.840689][T14496] [ 442.840692][T14496] [ 442.905218][T14496] Allocated by task 12187: [ 442.907130][T14496] kasan_save_stack+0x33/0x60 [ 442.908878][T14496] kasan_save_track+0x14/0x30 [ 442.910382][T14496] __kasan_slab_alloc+0x89/0x90 [ 442.911911][T14496] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 442.913732][T14496] xfrm_state_alloc+0x23/0x5c0 [ 442.915766][T14496] __find_acq_core+0xb59/0x2900 [ 442.917424][T14496] xfrm_find_acq+0x7b/0xa0 [ 442.918857][T14496] xfrm_alloc_userspi+0x58e/0xbb0 [ 442.920412][T14496] xfrm_user_rcv_msg+0x58e/0xc00 [ 442.921985][T14496] netlink_rcv_skb+0x155/0x420 [ 442.923489][T14496] xfrm_netlink_rcv+0x71/0x90 [ 442.925010][T14496] netlink_unicast+0x5aa/0x870 [ 442.926571][T14496] netlink_sendmsg+0x8d1/0xdd0 [ 442.928092][T14496] ____sys_sendmsg+0xa98/0xc70 [ 442.929635][T14496] ___sys_sendmsg+0x134/0x1d0 [ 442.931116][T14496] __sys_sendmsg+0x16d/0x220 [ 442.932573][T14496] do_syscall_64+0xcd/0x4c0 [ 442.934030][T14496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.935930][T14496] [ 442.936700][T14496] Freed by task 61: [ 442.938208][T14496] kasan_save_stack+0x33/0x60 [ 442.940182][T14496] kasan_save_track+0x14/0x30 [ 442.941739][T14496] kasan_save_free_info+0x3b/0x60 [ 442.943301][T14496] __kasan_slab_free+0x60/0x70 [ 442.944974][T14496] kmem_cache_free+0x2d1/0x4d0 [ 442.947024][T14496] xfrm_state_gc_task+0x50a/0x770 [ 442.949255][T14496] process_one_work+0x9cc/0x1b70 [ 442.951469][T14496] worker_thread+0x6c8/0xf10 [ 442.953402][T14496] kthread+0x3c2/0x780 [ 442.955105][T14496] ret_from_fork+0x5d4/0x6f0 [ 442.957037][T14496] ret_from_fork_asm+0x1a/0x30 [ 442.959113][T14496] [ 442.960130][T14496] The buggy address belongs to the object at ffff88804f220880 [ 442.960130][T14496] which belongs to the cache xfrm_state of size 928 [ 442.965727][T14496] The buggy address is located 40 bytes inside of [ 442.965727][T14496] freed 928-byte region [ffff88804f220880, ffff88804f220c20) [ 442.971218][T14496] [ 442.972246][T14496] The buggy address belongs to the physical page: [ 442.974872][T14496] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804f220880 pfn:0x4f220 [ 442.979035][T14496] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 442.982496][T14496] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 442.985609][T14496] page_type: f5(slab) [ 442.987293][T14496] raw: 00fff00000000040 ffff88801fa80c80 dead000000000122 0000000000000000 [ 442.990789][T14496] raw: ffff88804f220880 00000000801e001b 00000000f5000000 0000000000000000 [ 442.994218][T14496] head: 00fff00000000040 ffff88801fa80c80 dead000000000122 0000000000000000 [ 442.997808][T14496] head: ffff88804f220880 00000000801e001b 00000000f5000000 0000000000000000 [ 443.000677][T14496] head: 00fff00000000003 ffffea00013c8801 00000000ffffffff 00000000ffffffff [ 443.003363][T14496] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 443.006093][T14496] page dumped because: kasan: bad access detected [ 443.008077][T14496] page_owner tracks the page as allocated [ 443.009845][T14496] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8926, tgid 8925 (syz.5.756), ts 314148484059, free_ts 314131463693 [ 443.016283][T14496] post_alloc_hook+0x1c0/0x230 [ 443.017836][T14496] get_page_from_freelist+0x132b/0x38e0 [ 443.019560][T14496] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 443.021350][T14496] alloc_pages_mpol+0x1fb/0x550 [ 443.022848][T14496] new_slab+0x247/0x330 [ 443.024174][T14496] ___slab_alloc+0xcf2/0x1750 [ 443.026115][T14496] __slab_alloc.constprop.0+0x56/0xb0 [ 443.027826][T14496] kmem_cache_alloc_noprof+0xef/0x3b0 [ 443.029469][T14496] xfrm_state_alloc+0x23/0x5c0 [ 443.030949][T14496] xfrm_add_sa+0x1283/0x5c50 [ 443.032396][T14496] xfrm_user_rcv_msg+0x58e/0xc00 [ 443.033943][T14496] netlink_rcv_skb+0x155/0x420 [ 443.035465][T14496] xfrm_netlink_rcv+0x71/0x90 [ 443.036981][T14496] netlink_unicast+0x5aa/0x870 [ 443.038489][T14496] netlink_sendmsg+0x8d1/0xdd0 [ 443.039977][T14496] ____sys_sendmsg+0xa98/0xc70 [ 443.041450][T14496] page last free pid 8924 tgid 8923 stack trace: [ 443.043386][T14496] __free_frozen_pages+0x7d5/0x10f0 [ 443.045053][T14496] __put_partials+0x165/0x1c0 [ 443.046526][T14496] qlist_free_all+0x4d/0x120 [ 443.048279][T14496] kasan_quarantine_reduce+0x195/0x1e0 [ 443.050226][T14496] __kasan_slab_alloc+0x69/0x90 [ 443.051750][T14496] kmem_cache_alloc_lru_noprof+0x1d0/0x3b0 [ 443.053616][T14496] sock_alloc_inode+0x25/0x1c0 [ 443.055130][T14496] alloc_inode+0x61/0x240 [ 443.056497][T14496] sock_alloc+0x40/0x280 [ 443.057887][T14496] __sock_create+0xc1/0x8d0 [ 443.059319][T14496] __sys_socket+0x14d/0x260 [ 443.060746][T14496] __x64_sys_socket+0x72/0xb0 [ 443.062244][T14496] do_syscall_64+0xcd/0x4c0 [ 443.063683][T14496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.065588][T14496] [ 443.066356][T14496] Memory state around the buggy address: [ 443.068371][T14496] ffff88804f220780: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 443.070890][T14496] ffff88804f220800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 443.073428][T14496] >ffff88804f220880: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 443.075910][T14496] ^ [ 443.077708][T14496] ffff88804f220900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 443.080742][T14496] ffff88804f220980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 443.083624][T14496] ================================================================== [ 443.086226][T14496] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 443.088452][T14496] CPU: 0 UID: 0 PID: 14496 Comm: kworker/u32:63 Not tainted syzkaller #0 PREEMPT(full) [ 443.091458][T14496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 443.094789][T14496] Workqueue: netns cleanup_net [ 443.096313][T14496] Call Trace: [ 443.097401][T14496] [ 443.098348][T14496] dump_stack_lvl+0x3d/0x1f0 [ 443.099818][T14496] vpanic+0x6e8/0x7a0 [ 443.101091][T14496] ? __pfx_vpanic+0x10/0x10 [ 443.102542][T14496] ? __xfrm_state_delete+0x9db/0xa30 [ 443.104205][T14496] panic+0xca/0xd0 [ 443.105405][T14496] ? __pfx_panic+0x10/0x10 [ 443.106834][T14496] ? check_panic_on_warn+0x1f/0xb0 [ 443.108442][T14496] check_panic_on_warn+0xab/0xb0 [ 443.110013][T14496] end_report+0x107/0x170 [ 443.111382][T14496] kasan_report+0xee/0x110 [ 443.112820][T14496] ? __xfrm_state_delete+0x9db/0xa30 [ 443.114489][T14496] __xfrm_state_delete+0x9db/0xa30 [ 443.116098][T14496] xfrm_state_flush+0x512/0x700 [ 443.117651][T14496] ? __pfx_xfrm6_tunnel_net_exit+0x10/0x10 [ 443.119462][T14496] xfrm6_tunnel_net_exit+0x3d/0x160 [ 443.121078][T14496] ? __pfx_xfrm6_tunnel_net_exit+0x10/0x10 [ 443.122920][T14496] ops_undo_list+0x2eb/0xab0 [ 443.124431][T14496] ? __pfx_ops_undo_list+0x10/0x10 [ 443.125987][T14496] ? cleanup_net+0x334/0x890 [ 443.127412][T14496] ? idr_destroy+0x62/0x2e0 [ 443.128858][T14496] cleanup_net+0x408/0x890 [ 443.130249][T14496] ? __pfx_cleanup_net+0x10/0x10 [ 443.131777][T14496] ? rcu_is_watching+0x12/0xc0 [ 443.133254][T14496] process_one_work+0x9cc/0x1b70 [ 443.134796][T14496] ? __pfx_process_one_work+0x10/0x10 [ 443.136472][T14496] ? assign_work+0x1a0/0x250 [ 443.137948][T14496] worker_thread+0x6c8/0xf10 [ 443.139405][T14496] ? __pfx_worker_thread+0x10/0x10 [ 443.140996][T14496] kthread+0x3c2/0x780 [ 443.142251][T14496] ? __pfx_kthread+0x10/0x10 [ 443.143684][T14496] ? rcu_is_watching+0x12/0xc0 [ 443.145153][T14496] ? __pfx_kthread+0x10/0x10 [ 443.146598][T14496] ret_from_fork+0x5d4/0x6f0 [ 443.148057][T14496] ? __pfx_kthread+0x10/0x10 [ 443.149544][T14496] ret_from_fork_asm+0x1a/0x30 [ 443.151062][T14496] [ 443.152567][T14496] Kernel Offset: disabled [ 443.153959][T14496] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:46:29 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85646ef5 RDI=ffffffff9b1150a0 RBP=ffffffff9b115060 RSP=ffffc90005e5f448 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000074697257 R12=0000000000000000 R13=0000000000000034 R14=ffffffff9b115060 R15=ffffffff85646e90 RIP=ffffffff85646f1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc609dfc18 CR3=000000005f9da000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000200c96 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc609e03d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc609e1646 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc609e1646 00007ffc609e164c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d95412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d95412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d95412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d95412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d95412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d95412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000007 RBX=ffff888030740af0 RCX=0000000000020000 RDX=0000000000000007 RSI=0000000000000001 RDI=ffff888030740b40 RBP=0000000000000000 RSP=ffffc900006a0868 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000050 R11=0000000000000001 R12=ffff888030740b40 R13=ffff888030740000 R14=0000000000000000 R15=ffffffff8e5c1260 RIP=ffffffff81975653 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f78a1744300 ffffffff 00c00000 GS =0000 ffff8880d67b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2d78d07d60 CR3=000000002a11c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=2739d84122b90737 73555888d384f276 2739d84122b90737 73555888d384f276 2739d84122b90737 73555888d384f276 2739d84122b90737 73555888d384f276 ZMM18=1dfee835d6385b0a 5ddae59bf52c2e55 1dfee835d6385b0a 5ddae59bf52c2e55 1dfee835d6385b0a 5ddae59bf52c2e55 1dfee835d6385b0a 5ddae59bf52c2e55 ZMM19=e20d000000000000 0000000000000004 e20d000000000000 0000000000000003 e20d000000000000 0000000000000002 e20d000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0005800401c70800 080143d80030656c 69662f2e01ffffff ffffffffffef0805 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8003100d80040510 038002050d800403 8004128004299a08 0008007498000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001ffffffffffff ffffe70812b80301 080012b003099e08 ZMM24=f52c2e55f52c2e55 f52c2e55f52c2e55 f52c2e55f52c2e55 f52c2e55f52c2e55 f52c2e55f52c2e55 f52c2e55f52c2e55 f52c2e55f52c2e55 f52c2e55f52c2e55 ZMM25=5ddae59b5ddae59b 5ddae59b5ddae59b 5ddae59b5ddae59b 5ddae59b5ddae59b 5ddae59b5ddae59b 5ddae59b5ddae59b 5ddae59b5ddae59b 5ddae59b5ddae59b ZMM26=d6385b0ad6385b0a d6385b0ad6385b0a d6385b0ad6385b0a d6385b0ad6385b0a d6385b0ad6385b0a d6385b0ad6385b0a d6385b0ad6385b0a d6385b0ad6385b0a ZMM27=1dfee8351dfee835 1dfee8351dfee835 1dfee8351dfee835 1dfee8351dfee835 1dfee8351dfee835 1dfee8351dfee835 1dfee8351dfee835 1dfee8351dfee835 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=e00d0000e00d0000 e00d0000e00d0000 e00d0000e00d0000 e00d0000e00d0000 e00d0000e00d0000 e00d0000e00d0000 e00d0000e00d0000 e00d0000e00d0000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a441e80 RCX=ffffffff81af8f21 RDX=ffff888028224880 RSI=ffffffff81af8efb RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90005e2f888 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed100d4883d1 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81af8efd RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f97a1780e9c CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000000000 DR2=0000000000000007 DR3=fffffffffffffffe DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000004 Opmask01=0000000000000000 Opmask02=00000000effffdff Opmask03=0000000001041000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005573f663ebf0 00005573f663ebf0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005573f65cdfc0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005573f65c4c50 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e12df1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5c431d1c1a141601 5c43000611171d5c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6961660064657373 65636f727020756c 6c2520716573006e 6f69746974726170 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30302c443230302c 433230302c423230 302c393230003038 3d5145534b534944 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d0d11440f0d0d11 430f0d0d11420f0d 0d11040f0d000d05 005145534b534944 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f30737562646e2f 30303a3231303049 5043412f30303a53 55425953584e4c2f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001c1 6c00305f656b6972 74737265646e7500 306d656d702f6b63 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffffc900006cff28 RCX=ffffc900006d0001 RDX=ffffc900006cff30 RSI=ffffffff8c162c80 RDI=ffffffff8c162cc0 RBP=0000000000000001 RSP=ffffc900006cf7b8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=000000000000853a R12=ffffc900006cf8b8 R13=ffffc900006cf868 R14=ffffc900006cff28 R15=ffffc900006cf89c RIP=ffffffff8b9463b8 RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2606bf CR3=0000000033129000 CR4=00352ef0 DR0=0000000000000007 DR1=000000000000000b DR2=0000000000000002 DR3=0000000000000009 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000004 Opmask01=0000000000000000 Opmask02=00000000effffdff Opmask03=0000000001041000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005573f663ebf0 00005573f663ebf0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005573f65cdfc0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005573f65c4c50 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e12df1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5c431d1c1a141601 5c43000611171d5c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6961660064657373 65636f727020756c 6c2520716573006e 6f69746974726170 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30302c443230302c 433230302c423230 302c393230003038 3d5145534b534944 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d0d11440f0d0d11 430f0d0d11420f0d 0d11040f0d000d05 005145534b534944 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f30737562646e2f 30303a3231303049 5043412f30303a53 55425953584e4c2f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001c1 6c00305f656b6972 74737265646e7500 306d656d702f6b63 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000