last executing test programs: 11m5.297552002s ago: executing program 32 (id=468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x8) inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0x2000040) 11m2.092600349s ago: executing program 33 (id=501): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000140)=0x10, 0x800) accept4$llc(r1, 0x0, &(0x7f0000000280), 0x80800) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r5}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) r6 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r8, 0x28543634fae43ad, 0x70bd2b, 0x0, {0xd}}, 0x14}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) close_range(r6, r2, 0x0) 10m28.145028305s ago: executing program 34 (id=864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x6, 0xa, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x1070bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x200c8000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r6, 0x0) ftruncate(r6, 0x51a9497) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x82) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0xb, 0x101, 0xffffcbef, 0x183, 0x5, 0x7, 0x1, 0x14, 0xb, 0x1a, 0x3, 0xd0b, 0x38f4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) (async) r9 = syz_open_dev$usbfs(&(0x7f0000000c00), 0x71, 0x2081) (async) r10 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c010000100033060000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000aa00000000000000000200000062000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000232000000fe880000000000000000000000000001000000000000009aaf0a3f012d94f600000000000000000000000000000000000000000000000000fdffffffdfffff070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a000000000000004c001400726d643136300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044"], 0x13c}}, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000200)={0xc, @loopback, 0x4e24, 0x1, 'sh\x00', 0x4, 0x97d, 0x76}, 0x2c) (async) write$binfmt_aout(r10, &(0x7f00000002c0)=ANY=[], 0x36) (async) ioctl$SG_GET_NUM_WAITING(r10, 0x227d, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='smb3\x00', 0x4000, &(0x7f00000000c0)='rdma') ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000340)={0x0, 0x5, 0x8, 0x0, 0x0, 0x1000000, 0x0}) 10m22.217195109s ago: executing program 35 (id=919): r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) userfaultfd(0x80001) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) userfaultfd(0x801) (async) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000f8000/0x4000)=nil, 0x4000}}) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x9e3a, 0x10100, 0x80000, 0x1bd}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 8m43.748403473s ago: executing program 36 (id=2070): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'bond0\x00', @local}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 8m39.223260013s ago: executing program 37 (id=2304): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000940)=@mmap={0x5, 0x1, 0x4, 0x8, 0xf, {0x77359400}, {0x5, 0x8, 0x3, 0x4, 0x9, 0x72, "30f6300a"}, 0xfffffc00, 0x1, {}, 0x3}) syz_extract_tcp_res(&(0x7f0000000000), 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x10, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1f41d55a288032f}, 0x40040) 5m50.825226906s ago: executing program 38 (id=4745): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004004}, 0x24004040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000004000080050011802eff"], 0x20}], 0x1}, 0x20040880) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 5m50.099414424s ago: executing program 39 (id=4751): openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) openat$fb1(0xffffffffffffff9c, &(0x7f00000001c0), 0xe86002, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="013a4d0080000000000000"], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x4d6, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x100000000, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80000000000000000000000000001b00000000000000000000ffff0a010102ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000004000b40000000000000200000000000000000000007ffffffe0000000000000000000000000000000000000000000000000000000000000000000100000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e"], 0x104}}, 0x4cc00) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) shutdown(r4, 0x2) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000280)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x3, 0x0, {0xa, 0x4e23, 0x2, @remote, 0x80}}}, 0x32) getsockname(r7, 0x0, &(0x7f00000002c0)) mount(&(0x7f0000000300)=@sg0, &(0x7f0000000380)='./bus\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000000)='usrquota') 4m50.673994279s ago: executing program 40 (id=5414): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001180)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) poll(&(0x7f0000001280)=[{r2, 0x8100}], 0x1, 0x4d8b7b7e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0x9361, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0x102, 0x0) sendfile(r4, r4, 0x0, 0x4) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x3, 0x0) unshare(0x40200) r6 = semget(0x1, 0x4, 0x39c) semop(r6, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r6, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}, {0x2, 0x100, 0x800}], 0x2) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) unshare(0x40400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0], 0x0, 0xda, &(0x7f00000006c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x7}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', r1, 0x1b, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x4, 0x5, 0xfffffbff, 0x1}, 0x10, r7, 0x0, 0x9, &(0x7f0000000900)=[r5], &(0x7f0000000940)=[{0x2, 0x1, 0xb, 0x4}, {0x3, 0x1, 0x3, 0x7}, {0x1, 0x2, 0x9, 0xb}, {0x3, 0x5, 0x2, 0x4}, {0x1, 0x1, 0x6, 0x8}, {0x2, 0x4, 0x3, 0x6}, {0x2, 0x2, 0x5, 0x1}, {0x2, 0x2, 0x7, 0xb}, {0x5, 0x2, 0xb, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x80) 2m56.238912789s ago: executing program 41 (id=6920): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0xfff, 0x801, 0x6e, 0x5, 0x402, 0x3}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x9}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "840000000000110002000f116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000100)={0xf, 0x80000000, 0x1}) fcntl$setpipe(r0, 0x407, 0x92) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f00000000c0)={0x2, [0x4, 0xa], 0xdef}, 0x10) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0xfff, 0x801, 0x6e, 0x5, 0x402, 0x3}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) (async) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x9}]}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "840000000000110002000f116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000100)={0xf, 0x80000000, 0x1}) (async) fcntl$setpipe(r0, 0x407, 0x92) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f00000000c0)={0x2, [0x4, 0xa], 0xdef}, 0x10) (async) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) (async) 2m51.445953738s ago: executing program 42 (id=7006): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x40, &(0x7f00000000c0)=']', 0x1, 0x6, 0x75, 0x6, 0x8, 0x79, 0x0}) socket$inet6(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000140), 0x4) sched_setattr(0x0, 0x0, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0xc0580, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x4, "1dc63237"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = inotify_init() lsm_get_self_attr(0x68, &(0x7f0000000240)={0x0, 0x0, 0x48, 0x28, ""/40}, &(0x7f00000002c0)=0x48, 0x1) (async) inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x400017e) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) 2m17.345530495s ago: executing program 43 (id=7531): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = msgget$private(0x0, 0x3b2) msgsnd(r2, &(0x7f0000000d80)={0x2}, 0x8, 0x0) (async) msgsnd(r2, &(0x7f0000000d80)={0x2}, 0x8, 0x0) msgrcv(r2, &(0x7f0000000e80)={0x0, ""/64}, 0x48, 0x2, 0x800) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) (async) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r3, 0x2000000}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r3, 0x2000000}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f00000006c0)) (async) getsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f00000006c0)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x215, 0xfffffffffffffffc, 0x2, 0x700, 0x0, 0x1, 0x1}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x200000]}, 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r9, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r8, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) (async) recvmmsg(r8, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xa0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xa0) getresuid(&(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000480)=0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000440), 0x1000000, &(0x7f0000000540)={[{@clone_children}], [{@obj_role={'obj_role', 0x3d, '}++:-/^%:\f{[!^[&,-Z&:'}}, {@fsname={'fsname', 0x3d, 'vcan0\x00'}}, {@obj_user={'obj_user', 0x3d, '$#}-\xa8'}}, {@dont_measure}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@subj_type={'subj_type', 0x3d, 'clone_children'}}, {@fowner_eq={'fowner', 0x3d, r10}}, {@seclabel}]}) 2m16.951175632s ago: executing program 44 (id=7534): r0 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000044000)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'ni_daq_700\x00', [0x4f27, 0x5, 0x10000, 0x6, 0x66, 0x4c7, 0x0, 0x8004, 0xa, 0x104, 0xffffffff, 0x1, 0xd, 0x1, 0x2, 0x0, 0x5, 0x1a449, 0x3, 0x10400, 0x2082, 0x24, 0x0, 0x20001e5c, 0x7fff, 0x8002, 0x3c, 0xfffffffd, 0x6, 0x0, 0x1000000]}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4, 0x0, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2m2.823072998s ago: executing program 45 (id=7623): r0 = syz_io_uring_setup(0x6285, &(0x7f0000000000)={0x0, 0x467d, 0x200, 0x1, 0x2e3}, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x104, 0x0, 0x30}, 0x18) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000401, r4, &(0x7f0000000540)) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000005c0)=0x1) setreuid(r4, r4) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x240480c4}, 0x4000144) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000740)={0x7731, {{0xa, 0x4e23, 0x800, @dev={0xfe, 0x80, '\x00', 0xd}, 0x3}}}, 0x88) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000800)) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, r4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0xa7) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000840)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000008c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000940)={0x28, 0x1, r7, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000900)}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00'}) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000009c0)=0x1, 0x4) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000a00)={0x0, 0x2800000, 0x5, 0x4000}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000a40)=0x800, 0x4) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000a80)=0x1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000c80)={0x1, 0x0, &(0x7f0000000ac0)=""/161, &(0x7f0000000b80)=""/184, &(0x7f0000000c40)=""/30, 0x5000}) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000cc0)={0x6}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000d00)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000d40)={0x18, r9}) 1m55.208562419s ago: executing program 7 (id=7711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) listen(r2, 0x0) accept$nfc_llcp(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x6, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xd0, &(0x7f0000000740)=""/208, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='xs_stream_read_request\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000000)=0x10010, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xffffffffffffffff}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x48a91bda}]}]}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) 1m54.242884913s ago: executing program 7 (id=7729): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a78000000060a030400000000000000000a0000010900010073797a31000000004c000480480001800b000100746172676574000038000280240003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000000800024000000000080001004c4f47000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0xd, 0x5, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0}, 0x94) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="cc0000000000000012"]) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 1m53.27053985s ago: executing program 7 (id=7744): unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) (async) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}, {0x3, 0xfffb, 0xc00}], 0x2, 0x0) (async) unshare(0x2c040000) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x4f27, 0x5, 0x3, 0x10000004, 0x400, 0xcc7, 0xfff, 0x0, 0x5, 0x100, 0x8, 0x1, 0x7fff, 0x1, 0x80006, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfff7fffd, 0x2, 0x1, 0xb, 0xe69, 0x3c, 0xffffffff, 0x102, 0x8000000, 0xfffffff8]}) 1m53.26389949s ago: executing program 7 (id=7745): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000140)={0x34, r1, 0x1, 0x400000, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2a}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c080}, 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 1m53.141044329s ago: executing program 7 (id=7747): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x137) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0/file0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@type_tag={0x7, 0x0, 0x0, 0x12, 0x2}, @enum64={0x10, 0x1, 0x0, 0x13, 0x1, 0x0, [{0xb, 0x9, 0x10000}]}, @var={0xc, 0x0, 0x0, 0xe, 0x5, 0x2}]}, {0x0, [0x61, 0x61, 0x30, 0x2e]}}, &(0x7f0000000300)=""/123, 0x52, 0x7b, 0x0, 0x9, 0x10000}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0xfffffffc}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001a00010000f0ffffffffffff0a00002400000000fc"], 0x20}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0xffff0000, 0xffffc489, 0x2, 0x21000, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x18}, 0x18) r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x8000, r2}, 0x18) r11 = creat(&(0x7f0000000000)='./bus\x00', 0x181) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r12, 0x8905, &(0x7f0000000100)={'bond0\x00', @ifru_names='rose0\x00'}) write$UHID_INPUT(r11, &(0x7f0000000c40)={0x8, {"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", 0x1000}}, 0x1006) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000003d40)=ANY=[@ANYBLOB="1500000046080000010000800104000089000000", @ANYRES32=0x1, @ANYBLOB="9731ee0300"/23, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)=r2}, 0x20) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r15}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b00)={r9, 0x20, &(0x7f0000000a00)={&(0x7f0000001c80)=""/4096, 0x1000, 0x0, &(0x7f0000002c80)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003c80)={0x10, 0x5, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0x5}, @generic={0x1, 0x7, 0x6, 0xfff, 0x4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}], &(0x7f00000002c0)='GPL\x00', 0x8, 0x9d, &(0x7f0000000900)=""/157, 0x41000, 0x3, '\x00', r4, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x0, 0x4, 0x6ba, 0x7}, 0x10, r16, 0xffffffffffffffff, 0x1, &(0x7f0000000b40)=[0x1, r3, r11, r8], &(0x7f0000000b80)=[{0x2, 0x5, 0x9, 0x3}], 0x10, 0x6c9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r10, r14, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x1d, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, {}, {}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x400}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000140)='GPL\x00', 0x1, 0x39, &(0x7f0000000180)=""/57, 0x40f00, 0x0, '\x00', r4, @fallback, r5, 0x8, &(0x7f00000003c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xc, 0x6, 0x7f}, 0x10, 0x0, r2, 0x1, &(0x7f0000000740)=[r7, r8, r9, r10, r11, r13, r14, r15], &(0x7f0000000780)=[{0x0, 0x2, 0x3, 0x3}], 0x10, 0x9}, 0x94) 1m52.713241872s ago: executing program 7 (id=7753): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x9, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfe, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb1000000080088484803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 1m52.711665259s ago: executing program 9 (id=7755): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x23, 0x1, 0x13, 0x1, 0x0, 0x2, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0'}, 0xb) r2 = socket(0x2, 0x80805, 0x0) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000380)=0xbf9f, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="c2fb1a94", 0x4}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x23, 0x1, 0x13, 0x1, 0x0, 0x2, 0x0}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0'}, 0xb) (async) socket(0x2, 0x80805, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000380)=0xbf9f, 0x4) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) (async) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="c2fb1a94", 0x4}], 0x1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) 1m52.608927461s ago: executing program 46 (id=7753): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x9, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfe, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb1000000080088484803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 1m52.28664073s ago: executing program 9 (id=7758): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0xa8ae3399c433be75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82}) (async) r1 = fsopen(&(0x7f00000000c0)='pipefs\x00', 0x0) fsmount(r1, 0x0, 0x70) (async) r2 = add_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f6c160563de542a9a08b0443eaae0b05ffb84ffc51", 0x15, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) keyctl$unlink(0x9, r2, r2) (async) socket$nl_route(0x10, 0x3, 0x0) 1m52.285129993s ago: executing program 9 (id=7759): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @remote}, 0x14, 0x2, 0x3, 0x4}}, 0x26) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c0002"], 0x24}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = creat(&(0x7f0000000480)='./file1\x00', 0x5f) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x20000000000000d5, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) write$qrtrtun(r7, &(0x7f00000004c0)="05fd5bfcb2e8aa85dddd272ab6a487bfbd7706b9d01dd57273f9f5cd638f2ce200a7c5bcc4f99ebb29b84e8d282df920b11d60f6235dcf7c5b161cd4c3be7ae5288a466cc205a0f62023a5fd4d3a2de700000000fffffffffbca9d816e878bd73caf4e80df0000000083ac2c9b619bf5d336383ad6f8c566107122b73de4beab0715c4a67288227d47d7144e190427361c1ef4ce946a32074abc0c65987327ab4fcb2e76", 0xa4) r10 = syz_clone(0x8c611b11, 0x0, 0xfe4d, 0x0, 0x0, 0x0) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @void}, 0x10) connect$pppl2tp(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x3, 0x1, 0x1, 0x2, {0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x1800}}}, 0x3a) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x20400, &(0x7f0000000a00)=ANY=[@ANYRESDEC=r11, @ANYRESHEX=r13, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES16=r0, @ANYRES64=r9, @ANYRESHEX, @ANYRESHEX=r12, @ANYRESHEX=r9, @ANYRES32=r6]) read$FUSE(r13, &(0x7f0000004180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffde4) syz_fuse_handle_req(r7, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x4000003f, {0x5, 0x400000000000, 0xd04, 0x4, 0x101, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x82, 0x0, 0x0, 0x4, 0x6, 0x4, 0x2000, 0x101, r14, r15, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)=0x0) r17 = getuid() getegid() getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000240), &(0x7f0000000300)) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000380)=0x7c10, &(0x7f0000000340)=0xfe4b) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[@ANYRES64=r13, @ANYRES64, @ANYBLOB="02000400", @ANYRES32=r14, @ANYBLOB="02000400", @ANYRES32=r6, @ANYRESHEX=r3, @ANYRES32=r17, @ANYRES8=r18, @ANYBLOB="ebe1286ab7eee6840973b9fddc7340b72ff8d601415de5df78979a2c2d913bc5e0df8aa02f8801f21b69d9fcdbb4962e745f79e9", @ANYBLOB="08000500", @ANYRES32, @ANYRES64=r9, @ANYRES8=r4, @ANYBLOB="1000062000e5ffff1f00020000000000"], 0x5c, 0x3) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="c53b3b000000007310e55be1c196464e5367b3c74e8e66a26363cb2a91fd0200"/56, @ANYRESDEC=r16, @ANYRESHEX=r10], 0x3c}}, 0x4000050) 1m52.200310534s ago: executing program 9 (id=7760): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r5, &(0x7f0000000240)='./file0\x00') sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44020}, 0x804) r6 = open(&(0x7f0000000340)='./file0/file0\x00', 0x218000, 0x12) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r6) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000002000003080bf815220007000000000000", @ANYRES32=0x0, @ANYRES64=r1, @ANYRESOCT=r5, @ANYRES64=r5], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') 1m51.276007147s ago: executing program 9 (id=7767): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x20000010) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000080000000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="000000000000000024140002800800080088a8ffff050007000700"/44], 0x44}}, 0x4008080) 1m50.796529111s ago: executing program 9 (id=7774): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x5) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x1, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt(r5, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0xb, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x48f1b}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x20000000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r11, 0x5, &(0x7f00000005c0)='fd', 0x0, r10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x40, 0x40006}]}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x52, 0x9009, 0x2, {0x1d, 0x1}, {0x4e, 0x2}, @period={0x5b, 0x7fff, 0x8, 0x4, 0x109, {0x0, 0x6, 0x1, 0xf4a}, 0x0, 0x0}}) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) 1m50.668695669s ago: executing program 47 (id=7774): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x5) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x1, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt(r5, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0xb, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x48f1b}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x20000000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r11, 0x5, &(0x7f00000005c0)='fd', 0x0, r10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x40, 0x40006}]}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x52, 0x9009, 0x2, {0x1d, 0x1}, {0x4e, 0x2}, @period={0x5b, 0x7fff, 0x8, 0x4, 0x109, {0x0, 0x6, 0x1, 0xf4a}, 0x0, 0x0}}) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) 1m40.933141742s ago: executing program 8 (id=7846): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040), 0x4) connect$llc(r0, &(0x7f00000004c0)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x0, @remote}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b70500000000000061103000000000000fa000000000000095000000000000001f495ff727520cccddfad6fab92a770b445d05000000a768ea47c3c3d7dd236edc1b5613c5e35079725d19e88b662c2596b2f0b40aa9de45cf931a7ddaae7bdd97a9787684a5a6bbe879e1561715a194eb15d509b1837f6d317d12dd2c98f05e43c914b3655a78009367bac65148a671b0ffd1c946b31202b7c73e0f1c5df29dfde318753c358d42ba7c52b4e20bc5c0e91fbc96da558c38891cd5bc38b6db9863a1273811976d15ba39fe2700"/218], &(0x7f00000002c0)='GPL\x00', 0x805, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0x10}, 0x94) capget(&(0x7f0000000040)={0x20071026, 0xffffffffffffffff}, &(0x7f00000000c0)={0x0, 0x1, 0x887, 0x8, 0x7, 0xe393}) 1m40.847364122s ago: executing program 8 (id=7850): r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x2000000000000005, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000, {0x2, 0xd08, 0x3, 0x4, 0x0, 0xfffffffffffffffe, 0x47, 0x0, 0x126, 0x6000, 0x10000, r4, 0x0, 0x902, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x400040, 0x80, 0x2, 0xfffffffb, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x4004092b, 0x7) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xff0e, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @empty, 0x1}, 0x10) 1m40.622118924s ago: executing program 8 (id=7856): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xecf, 0xa}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x8080) (async) ptrace(0x10, r3) (async) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)) (async) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'dvmrp1\x00', 0x1000}) ptrace$cont(0x20, r3, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0x8, 0xd4, 0x0, 0x66, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee0000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8}, {0x100000, 0x10000, 0xe, 0x1, 0x3, 0x9, 0xa, 0x6, 0x5, 0x4, 0x4, 0x4b}, {0x2, 0xd000, 0x0, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0xc, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) (async, rerun: 64) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000700)=ANY=[@ANYBLOB="01000000000000001b"]) (rerun: 64) 1m40.463511056s ago: executing program 8 (id=7859): r0 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9b301a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) (async) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r0, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) (async) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$inet6_int(r5, 0x29, 0x2, 0x0, &(0x7f0000000180)) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000080)={0x48}) 1m40.448454595s ago: executing program 8 (id=7861): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003d40), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x3, "000001", "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"}}, 0x110) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, 0x0, 0x0, 0x3}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)={{0x158, 0x0, 0x37, 0x3db, 0x3e3, 0x3, 0x3, 0x200}, "f83ba1e71cd77470b8b7716a9c0f4fbfc9a6fe6d16e3613f73e4c04ba1fc99cefd7a5137dc79add0895d69879bb7fc7c4363994cdabff3f4b5e07c68de66245e1f61e46a5fb6f2b3d69409962811b532df281ef2e2c212563f82fb50ff6d3e7b1579424fe116d3c527ec31d0681bae8bde01340e64f71a5a1791fdac17fddb8a7b18e58a775f6d4ea20ec6b1c61e82fb7ca8fdbc7a55430f6a51411e96fd4310a86396aaef691c7193726bb8d5c94adc262ff7b05446046bd2f7fbc035724e1f0184aabe441819", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9e7) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1m39.927802851s ago: executing program 8 (id=7869): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r3 = socket(0x6, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x20000800) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) syz_emit_vhci(&(0x7f0000002280)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc9, 0x9b}}}}, 0x9) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="30000000190001002dbd7000f8dbdf2502200000ff02ff02002a000008000100ac1414aa0c0009000800281052"], 0x30}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003fbe501d0f8d4b7d4cd24c5a6c6de7de190b38c526b717b81a4935ba36f4fc1a309a7eb2b7ab28187d0f7af5a1a2cecad4bc5470446e1a6cbc262b88"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r7, @flow_dissector=0x11, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003fbe501d0f8d4b7d4cd24c5a6c6de7de190b38c526b717b81a4935ba36f4fc1a309a7eb2b7ab28187d0f7af5a1a2cecad4bc5470446e1a6cbc262b88"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r7, @flow_dissector=0x11, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x18000000000002a0, 0xe00, 0x0, 0x0, 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x10000, 0x1, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r11, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) io_uring_register$IORING_REGISTER_BUFFERS(r11, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0xb, 0x101, 0xffffcbef, 0x183, 0x5, 0x7, 0x1, 0x14, 0xb, 0x1a, 0x3, 0xd0b, 0x38f4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000300)={{{@in=@broadcast, @in6=@local}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000400)=0xe8) 1m39.851190727s ago: executing program 48 (id=7869): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r3 = socket(0x6, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x20000800) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) syz_emit_vhci(&(0x7f0000002280)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc9, 0x9b}}}}, 0x9) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="30000000190001002dbd7000f8dbdf2502200000ff02ff02002a000008000100ac1414aa0c0009000800281052"], 0x30}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003fbe501d0f8d4b7d4cd24c5a6c6de7de190b38c526b717b81a4935ba36f4fc1a309a7eb2b7ab28187d0f7af5a1a2cecad4bc5470446e1a6cbc262b88"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r7, @flow_dissector=0x11, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003fbe501d0f8d4b7d4cd24c5a6c6de7de190b38c526b717b81a4935ba36f4fc1a309a7eb2b7ab28187d0f7af5a1a2cecad4bc5470446e1a6cbc262b88"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r7, @flow_dissector=0x11, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x18000000000002a0, 0xe00, 0x0, 0x0, 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x10000, 0x1, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r11, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) io_uring_register$IORING_REGISTER_BUFFERS(r11, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0xb, 0x101, 0xffffcbef, 0x183, 0x5, 0x7, 0x1, 0x14, 0xb, 0x1a, 0x3, 0xd0b, 0x38f4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000300)={{{@in=@broadcast, @in6=@local}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000400)=0xe8) 48.242520286s ago: executing program 2 (id=8703): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) syz_emit_ethernet(0x76, &(0x7f0000001100)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33883", 0x3c, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "74cd7b", 0x0, 0x88, 0x0, @private1, @mcast1, [], "c6214c55d1055a616515f5a7"}}}}}}}, 0x0) ioperm(0x3, 0x4, 0x1000008) fanotify_init(0x1200, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000040)) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="4a1800000b00000081"]) 48.242287521s ago: executing program 2 (id=8704): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x280002) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = syz_io_uring_setup(0x1e1e, &(0x7f00000000c0)={0x0, 0xd8a3, 0x10100, 0x80000, 0x1bd}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mlock(&(0x7f0000327000/0x4000)=nil, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0xf4e) writev(r1, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0xfffffffc) 47.600947527s ago: executing program 2 (id=8717): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES32], 0x1c}}, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140)=0x6, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x20, 0x140e, 0x1, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x10) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x33}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x4004}, 0x4) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000004c80), 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'xfrm0\x00', &(0x7f00000000c0)=@ethtool_modinfo={0x42, 0x8, 0xb}}) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000004cc0)={0xa, @pix_mp={0x400, 0x7, 0x49433553, 0x7, 0x7, [{0xd, 0xffffffff}, {0x2, 0xf7}, {0x9f3, 0x9}, {0x400, 0xffffffff}, {0x8, 0x4}, {0xa63, 0xfffffffc}, {0xfdb, 0x5}, {0xfffffff7, 0x9}], 0x1, 0x5, 0x2, 0x0, 0x6}}) 47.523789536s ago: executing program 2 (id=8719): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setopts(0x4200, r1, 0x80e96, 0x100011) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000100)={0x10, 0xffffffda, 0x3}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_clone(0x45008600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r2], 0x1}, 0x58) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pread64(r0, &(0x7f0000000280)=""/66, 0x42, 0x3) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) setreuid(0xee01, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0xee01) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r7 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat$null(r7, &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0xc, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x3c}}, 0x0) 47.419711328s ago: executing program 2 (id=8722): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$evdev(&(0x7f00000003c0), 0x1, 0x101140) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x4, 0x2, @tid=r4}, &(0x7f0000000140)=0x0) timer_delete(r5) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000400)=""/7) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002800)=ANY=[@ANYRES8=r3, @ANYRES32=r3, @ANYRESHEX=0x0, @ANYRESOCT=r4], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) sendmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 46.971363501s ago: executing program 2 (id=8733): prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2c00, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x4c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000080)={0xc}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090200000000000000000100000006000a004e220000080008"], 0x24}}, 0x10) 46.885453722s ago: executing program 49 (id=8733): prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2c00, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x4c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000080)={0xc}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090200000000000000000100000006000a004e220000080008"], 0x24}}, 0x10) 41.216041804s ago: executing program 1 (id=8796): r0 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x182) writev(r0, &(0x7f0000000800)=[{&(0x7f00000000c0)="aca3d7c1e80216802b7505a054010789d438a506c1b1b14e9a79df9b6f16a11e528aae814ecbd39aad9958a2a10d7c9473c29899ee7ff989d673d2a7f57d38d7826cbb28466d189bd1bff87617e1b8976207cff45cef53a0b9cec4fba8897e99367461968cb0202f285384a5e3e851a0d12786de69b76ba92f3ddcd47e87daee1c748b7e1aa29020dd65d5bef890b57a4bc534591444c9251f00ea4102799aa267b56d49159e918a640f5085", 0xac}], 0x1) 41.155008184s ago: executing program 1 (id=8797): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x4000010, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000400), 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) open(0x0, 0x509042, 0x0) (async) r5 = open(0x0, 0x509042, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) sendmmsg$inet(r6, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) (async) sendmmsg$inet(r6, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) (async) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r7 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r7}, &(0x7f0000000380)) (async) timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r7}, &(0x7f0000000380)=0x0) timer_settime(r8, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r8, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r8) (async) timer_delete(r8) r9 = gettid() tkill(r9, 0x16) (async) tkill(r9, 0x16) pwritev(r5, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 41.153311537s ago: executing program 1 (id=8799): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x78477000) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x8, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00009ba000/0x1000)=nil) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x10000, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4008053, r0, 0x80000000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2002, 0x0, &(0x7f0000ffa000/0x2000)=nil) 40.8968757s ago: executing program 1 (id=8804): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x4e78, 0x4) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001080, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) close(0x3) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000000580)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x1}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000240)="f1", 0x1}], 0x1}}], 0x1, 0x2004c0d0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="020000000d800089", 0x8) 40.649910121s ago: executing program 1 (id=8811): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = msgget$private(0x0, 0x790) msgsnd(r1, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) (async, rerun: 32) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) (rerun: 32) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000340)={{0x3, r3, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x0, 0x0, 0x3b, 0x100, 0x8000000000000006, 0x8001, 0x3, 0x2, 0x9499, 0x3}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x50, r4, 0x74767d1f5949df7, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x840) 39.988337826s ago: executing program 1 (id=8829): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_usbip_server_init(0x4) (async) r2 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r3, 0x400448e7, 0x0) write$usbip_server(r2, &(0x7f0000001600)=ANY=[@ANYBLOB="0000000300"], 0x11d1) (async) write$usbip_server(r2, &(0x7f0000001600)=ANY=[@ANYBLOB="0000000300"], 0x11d1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000140)) (async) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000fdffff9400000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 39.886009975s ago: executing program 50 (id=8829): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_usbip_server_init(0x4) (async) r2 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r3, 0x400448e7, 0x0) write$usbip_server(r2, &(0x7f0000001600)=ANY=[@ANYBLOB="0000000300"], 0x11d1) (async) write$usbip_server(r2, &(0x7f0000001600)=ANY=[@ANYBLOB="0000000300"], 0x11d1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000140)) (async) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000fdffff9400000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 38.950027787s ago: executing program 0 (id=8850): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0x4004550d, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4ea3, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000040)=""/142, 0x8e}], 0x1) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xd5, &(0x7f0000000780)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x9f, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x9f, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e79dc1db6ecbf24b32e08c54a7cbee5809d8b542e7458ef7cbac933d79068a1492f809caa178afcd5c30f429764c3840100e00117dd6712781ba0385c1846e6c001eac6c71939e1d33a4b120e44584225740f0421a5ee1ae4cfc8d7acf721d5c8ee35323d6a880e43b9ac00499eee5afa3d65886ff58ccb7a62defb784e566bbf8c2320c1e4650bd339de"}}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8000, 0x40, 0x8, 0x4, {{0x10, 0x4, 0x3, 0x0, 0x40, 0x68, 0x0, 0x8, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @timestamp={0x44, 0x28, 0xd, 0x0, 0x9, [0x7fff, 0x0, 0x7, 0x6, 0x0, 0x1, 0x5, 0x8, 0x0]}]}}}}}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@delqdisc={0x124, 0x25, 0x0, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x4, 0x5}, {0xffff, 0xfff2}, {0x5, 0xfff8}}, [@TCA_STAB={0xb8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x2a6, 0x4, 0x1, 0x2, 0x1, 0x7}}, {0x12, 0x2, [0x400, 0x7, 0x5, 0xf000, 0x40, 0x2, 0x0]}}, {{0x1c, 0x1, {0x16, 0x6, 0xedb, 0x79e7, 0x2, 0x9, 0x6, 0x7}}, {0x12, 0x2, [0x0, 0x8, 0x9, 0xfff, 0x4, 0x813, 0x6]}}, {{0x1c, 0x1, {0x6, 0x0, 0x5, 0x2, 0x1, 0x4, 0x2, 0x5}}, {0xe, 0x2, [0x1, 0x3, 0x1, 0x9, 0x8]}}, {{0x1c, 0x1, {0x2, 0x6, 0xe, 0x3, 0x2, 0x5, 0x4, 0x4}}, {0xc, 0x2, [0x8, 0x6, 0x81, 0xbef9]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fffffff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10000}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffe}, @TCA_RATE={0x6, 0x5, {0x1, 0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x75d}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xb}, @TCA_RATE={0x6, 0x5, {0x7, 0x9}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x653b}]}, 0x124}, 0x1, 0x0, 0x0, 0x4}, 0x20004030) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x7) r6 = syz_open_dev$hiddev(&(0x7f0000000380), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000400)={0x20000010}) ioctl$HIDIOCGNAME(r6, 0x80404806, &(0x7f00000003c0)) 30.062034517s ago: executing program 0 (id=9006): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x24000040) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e24, 0xfffffffb, @mcast1, 0x2}}, 0x0, 0x0, 0x48, 0x0, "602067686ae58295564ae30e31f3e1b123484136e6d8f4f7bc4d45d6b9627cd75516eef6292eb7dd2f5fa53e0f37a2cc43dca7a41a263374f78acaeea4643b7a1b3c8ef7c22176b3e2a8c78ae893c52d"}, 0xd8) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000001f0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 29.966346931s ago: executing program 0 (id=9008): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000080), &(0x7f00000000c0)=r3}, 0x20) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/2:0:0:0\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f0000000140)) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@newqdisc={0xc4, 0x24, 0xf0b, 0x70bda7, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x12}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x10}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xfffffffe}]}}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7f, 0x3, 0x5b7, 0x544aee3381d3757, 0x7, 0xf, 0x4}}, {0xc, 0x2, [0x0, 0x7, 0xffff, 0x9]}}, {{0x1c, 0x1, {0x9, 0x4, 0x6, 0x8, 0x0, 0x7, 0xd1, 0x4}}, {0xc, 0x2, [0xa, 0x100, 0x3, 0x2]}}]}]}, 0xc4}}, 0x0) 29.965673721s ago: executing program 0 (id=9009): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r1, 0x0, r0}) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 28.987605582s ago: executing program 0 (id=9022): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x2, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) chdir(&(0x7f0000000000)='./file0\x00') mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 28.729622985s ago: executing program 0 (id=9027): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) (async) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x8000) r2 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x40004000}, 0x0) (async) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}, 0x7}, {{&(0x7f0000000000)=@ax25={{0x3, @bcast}, [@default, @null, @null, @netrom, @netrom, @default, @remote, @bcast]}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/175, 0xaf}, {&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f0000000240)=""/4096, 0x1000}], 0x4, &(0x7f0000001280)=""/204, 0xcc}, 0x10000}], 0x2, 0x2, 0x0) 28.660064958s ago: executing program 51 (id=9027): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) (async) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x8000) r2 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x40004000}, 0x0) (async) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}, 0x7}, {{&(0x7f0000000000)=@ax25={{0x3, @bcast}, [@default, @null, @null, @netrom, @netrom, @default, @remote, @bcast]}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000080)=""/163, 0xa3}, {&(0x7f0000000140)=""/175, 0xaf}, {&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f0000000240)=""/4096, 0x1000}], 0x4, &(0x7f0000001280)=""/204, 0xcc}, 0x10000}], 0x2, 0x2, 0x0) 2.695678381s ago: executing program 5 (id=9258): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r0) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)="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", 0x157}, {&(0x7f0000000440)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e03267d693230fc28dbf9ba02fed773718d27fae8df05b5862b90f0f0666e8232108c04575d11f0eb87a3e2fac3e90023ff0187ba5b11a1feed1633ed84cd2045b9d6081c9b80cf1e7a2e7071385714f75b4a42285bf7289c20265ab", 0x94}], 0x2}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xcac1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) readv(r2, &(0x7f0000000e40)=[{&(0x7f0000003300)=""/4095, 0xfff}], 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000500000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000005002100030000001400350064756d6d7930"], 0x3c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10002, 0x5, 0x80a0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 2.69381179s ago: executing program 5 (id=9260): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac550000000003000600000000000200000000000000000000000000000002000100000000000000030d00000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) 2.492657987s ago: executing program 5 (id=9263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f0000000a00)=""/4096, 0x1000, 0x0, &(0x7f00000003c0)=""/111, 0x6f}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000000a000000031800078006003f404e020000090013ef000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000004c0)={0x2, 'rose0\x00', 0x3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000240), &(0x7f0000000380)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.416735137s ago: executing program 5 (id=9265): ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f00000000c0)=0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x101000, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x710, 0x1100, 0xffffffff, 0x0, {{0x13, 0x4, 0x0, 0x3, 0x4c, 0x0, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010102, @private=0xa010100, {[@generic={0xc8, 0xe, "869e54f7508e5569d8a03b1e"}, @ssrr={0x89, 0x1f, 0x86, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0xa}, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @empty]}, @noop, @ssrr={0x89, 0x7, 0x9a, [@private=0xa010100]}]}}}}}) fstat(r0, &(0x7f0000000300)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200013, 0x0) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f00000000c0)=0x4) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x101000, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x710, 0x1100, 0xffffffff, 0x0, {{0x13, 0x4, 0x0, 0x3, 0x4c, 0x0, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010102, @private=0xa010100, {[@generic={0xc8, 0xe, "869e54f7508e5569d8a03b1e"}, @ssrr={0x89, 0x1f, 0x86, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0xa}, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @empty]}, @noop, @ssrr={0x89, 0x7, 0x9a, [@private=0xa010100]}]}}}}}) (async) fstat(r0, &(0x7f0000000300)) (async) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200013, 0x0) (async) 2.177680751s ago: executing program 5 (id=9266): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.904352575s ago: executing program 5 (id=9267): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xffffffff]}, 0x8) write$sysctl(r0, &(0x7f0000000040)='6\x00', 0x2) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/7, 0x7}], 0x1, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000200)=""/129, 0x81}, {&(0x7f00000002c0)=""/95, 0x5f}, {&(0x7f0000000340)}], 0x3, &(0x7f00000003c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=""/216, 0xd8}], 0x1, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000000680), 0x6e, &(0x7f0000001880)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/104, 0x68}, {&(0x7f0000001780)=""/70, 0x46}, {&(0x7f0000001800)=""/94, 0x5e}], 0x4}}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f00000018c0)=""/50, 0x32}, {&(0x7f0000001900)=""/126, 0x7e}, {&(0x7f0000001980)=""/224, 0xe0}, {&(0x7f0000001a80)=""/1, 0x1}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x5, &(0x7f0000002b40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000002c00), 0x6e, &(0x7f0000002d00)=[{&(0x7f0000002c80)=""/123, 0x7b}], 0x1, &(0x7f0000002d40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000002e80), 0x6e, &(0x7f0000003640)=[{&(0x7f0000002f00)=""/137, 0x89}, {&(0x7f0000002fc0)=""/163, 0xa3}, {&(0x7f0000003080)=""/243, 0xf3}, {&(0x7f0000003180)=""/216, 0xd8}, {&(0x7f0000003280)=""/220, 0xdc}, {&(0x7f0000003380)=""/132, 0x84}, {&(0x7f0000003440)=""/183, 0xb7}, {&(0x7f0000003500)=""/149, 0x95}, {&(0x7f00000035c0)=""/85, 0x55}], 0x9, &(0x7f0000003700)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x7, 0x40000001, &(0x7f0000003980)={0x77359400}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000039c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x502, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0xa0, 0x80, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x35, {0x9, 0x21, 0x1, 0x5, 0x1, {0x22, 0x71f}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfb, 0x8, 0xa6}}}}}]}}]}}, &(0x7f0000003c00)={0xa, &(0x7f0000003a00)={0xa, 0x6, 0x250, 0x40, 0x9, 0x9, 0x10, 0x81}, 0x3d, &(0x7f0000003a40)={0x5, 0xf, 0x3d, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x2, 0x7800, 0xfffb, [0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "90459520a8b0bc5c5070da81d86a812f"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "4135cde983ceb03ea83e514e05c77968"}]}, 0x4, [{0x62, &(0x7f0000003a80)=@string={0x62, 0x3, "11309562e2595aff9c463616bb6189f0e6972540dfe598c41586f40ded1e3de59d8a58f3b9d810e18395bc730b1d32bef478d45e020ba666d43ac24da09f36f057ab5368a014bd1165a05eab2869239589bee12738d57e0e26052154c4718714"}}, {0x4, &(0x7f0000003b00)=@lang_id={0x4, 0x3, 0x2401}}, {0x5b, &(0x7f0000003b40)=@string={0x5b, 0x3, "c63682c08631762d3213615fb9b909fac0120e40395b81e2283294e85f19f9ed71501c70232e093b3c9b8da2ef2f7e4f5fa8d925645a871d65c450c07c268b7ac46e8d2fc8ebd6868938f180519c33eea114509ce1457f78cd"}}, {0x4, &(0x7f0000003bc0)=@lang_id={0x4, 0x3, 0x44e}}]}) r15 = openat$cgroup_pressure(r7, &(0x7f0000003c80)='cpu.pressure\x00', 0x2, 0x0) stat(&(0x7f0000003cc0)='./file0\x00', &(0x7f0000003d00)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r15, 0xffffffff80000301, r16, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r7, 0x10e, 0x8, &(0x7f0000003d80)=0xa1, 0x4) syz_open_dev$sndpcmc(&(0x7f0000003dc0), 0x0, 0x80002) openat$snapshot(0xffffffffffffff9c, &(0x7f0000003e00), 0x4000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000003e40)={0x4, 0x3, 0xbae9, 0x5, 0x5}) ioctl$VHOST_SET_VRING_ERR(r11, 0x4008af22, &(0x7f0000003e80)={0x2, r5}) openat$nci(0xffffffffffffff9c, &(0x7f0000003ec0), 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000004040)={&(0x7f0000003f00)={0x10, 0x0, 0x0, 0x102120}, 0xc, &(0x7f0000004000)={&(0x7f0000003f40)={0x9c, 0x1, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa2b}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x392}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa2f}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20040005}, 0x8000) sendmsg$IPSET_CMD_RENAME(r10, &(0x7f0000004140)={&(0x7f0000004080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004100)={&(0x7f00000040c0)={0x20, 0x5, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000004180)={0x2, [[0x3ff, 0xa, 0x1, 0x6, 0x401, 0x17c, 0x9, 0xc], [0x8000, 0x8, 0x401, 0x1000, 0x0, 0xc, 0x8989, 0x8], [0x9277, 0x2, 0x5, 0x2e, 0x5, 0x5, 0x93, 0x200]], '\x00', [{0x7fff, 0xe871, 0x1, 0x1, 0x1, 0x1}, {0x9, 0x3, 0x1, 0x1}, {0xcf, 0x4b9, 0x0, 0x1}, {0x5, 0x40, 0x0, 0x1, 0x1, 0x1}, {0x6, 0x7, 0x0, 0x0, 0x1}, {0x8, 0xf, 0x1, 0x0, 0x1}, {0xcb9, 0xa, 0x0, 0x0, 0x1}, {0x3, 0xe6d3, 0x0, 0x0, 0x0, 0x1}, {0xfffffffc, 0x2, 0x1, 0x1}, {0xff, 0x8}, {0x5, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x2, 0x7, 0x1, 0x0, 0x1, 0x1}], '\x00', 0x8}) io_uring_enter(r6, 0x31d1, 0xf48b, 0x40, &(0x7f0000004400), 0x8) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f0000004440)=0x0) connect$nfc_raw(r12, &(0x7f0000004480)={0x27, r17, 0xffffffffffffffff, 0x7}, 0x10) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000004580)={&(0x7f00000044c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004540)={&(0x7f0000004500)={0x3c, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x805}, 0x8010) bpf$LINK_DETACH(0x22, &(0x7f00000045c0)=r9, 0x4) ioctl$EVIOCSMASK(r6, 0x40104593, &(0x7f0000005600)={0x3, 0x1000, &(0x7f0000004600)="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"}) r18 = openat$uinput(0xffffffffffffff9c, &(0x7f0000005640), 0x2, 0x0) write$uinput_user_dev(r18, &(0x7f0000005680)={'syz1\x00', {0xffff, 0x0, 0xe6f, 0x4}, 0x23, [0x40, 0x9, 0xfffffffc, 0xffffff3c, 0x5, 0xfffffffa, 0x6, 0x9, 0x8, 0x0, 0x1, 0x3, 0x4, 0x2f3, 0xc, 0x8, 0x5, 0x9, 0x1, 0x7ff, 0x1, 0x1a1, 0x6, 0xf068, 0xfff, 0xc, 0x0, 0x6979, 0x9, 0xfffffff8, 0x8, 0x100, 0xffffffff, 0x9, 0x3d79, 0x1, 0x1c92, 0x2, 0x7, 0x7, 0xfffffffc, 0x7, 0x8, 0xe43f, 0x3, 0x5, 0x9, 0x81, 0xc5, 0xeedae84, 0xfffffffb, 0x3, 0x1000, 0x9, 0x80000001, 0x5, 0x94, 0xc, 0xb15, 0x3, 0x3c7, 0xb6f, 0x0, 0x4], [0x1, 0x1ff, 0x3ff, 0x8dfd, 0xfff, 0x4, 0x7fe7, 0x7fffffff, 0x693, 0x9ac0, 0xffff, 0x1, 0x5, 0x8000000, 0xb9, 0x0, 0x3, 0xffffe105, 0x3c79, 0x1ff, 0x0, 0x7, 0x862, 0x9, 0xff, 0xfffffe01, 0x39a0, 0x5, 0x9, 0x4ae2, 0x7f, 0xfffffff5, 0xd, 0x101, 0x4, 0x42e, 0x4, 0x0, 0x5, 0x100, 0x3, 0xcf80, 0x80000001, 0x200, 0x3, 0x4, 0x7, 0x1, 0x8, 0x6, 0x401, 0x2, 0x7, 0x8, 0xffffffff, 0x5, 0x8001, 0xa4, 0x1, 0xd8, 0xd, 0x8, 0xc3, 0x8], [0x2, 0x0, 0x6, 0x2, 0x5, 0x6, 0x7f, 0x9, 0x7, 0x5, 0x2, 0x1, 0x4, 0x7, 0x7, 0x6, 0x9, 0x2, 0x4, 0x10000, 0x0, 0x79ae, 0xbb21, 0x9, 0x9, 0xfffffff7, 0x5, 0x4, 0x4, 0x4, 0x7, 0xffffffff, 0x0, 0x39d, 0x6, 0x200, 0x200, 0x4, 0xb, 0xe8b, 0x5, 0x0, 0x400, 0x7fff, 0x8, 0x2, 0x81, 0xa, 0x8, 0x81, 0x10, 0x81, 0x7, 0x2, 0x6, 0x8, 0xdcd80, 0x8, 0x3, 0x959, 0x1, 0x0, 0x8, 0x2], [0x8, 0x4, 0x7fff, 0x6, 0x4, 0x1, 0x7, 0x9, 0x101, 0x4, 0x3, 0x1000, 0xffffff50, 0x9, 0x1, 0x80, 0x0, 0x8, 0x2, 0x800, 0x8, 0x81, 0x2, 0x6, 0x8001, 0x98, 0x9, 0x8, 0x67, 0x1, 0x0, 0x21a5, 0xfff, 0x9, 0x1, 0x9, 0xfffff800, 0x20, 0xfffffffe, 0x7, 0x4d566765, 0x5, 0xf3, 0x9, 0x73, 0x1000, 0x7, 0xd1, 0x80000000, 0x8, 0xcc, 0x2, 0x81, 0xc, 0x4, 0x2, 0x2, 0x5, 0x0, 0x6, 0xa5f9, 0x7ff, 0x904, 0x10000]}, 0x45c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000005b40)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000005c40)={&(0x7f0000005b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000005c00)={&(0x7f0000005b80)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xb2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r19}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffc}]}, 0x68}, 0x1, 0x0, 0x0, 0x40400}, 0x10) ioctl$EVIOCGMASK(r13, 0x80104592, &(0x7f0000005d40)={0x15, 0xa0, &(0x7f0000005c80)="74017087ece98c2e171d835c8a5c2528918f74891ef27de4d36c5064bf0a5f2ef1188ca3f22fc6c51095d38b32b2ea02163ea9f5f4bc2d6c5a29aeac4cdfff0cbbc93a04be338e987322efce2fd95f6668aa7b558df61a503c732b87de4fb34a5af4bdf4a525a173cad8d2d54414a52e44c8732ec2e04a470d73de1e12b52c598e7de49ce986fa4ca5b068924ef5cf492fc6bf460a8f2861a61c5c32b63bd27e"}) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000005d80)={0x10200, 0xdf9fde99ace66413, 0x4, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000005dc0)={0xfffffffe, 0x1, 0x3, "1d00fc1b1d4452361588f9df1667b676550c049db13f1cf865bb27aa84102253", 0x32525942}) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000005fc0)={0x14, &(0x7f0000005e40)={0x40, 0x22, 0x5c, {0x5c, 0x4, "755bfbebec1ac1f6768554befeb53f267110c5b48f25324def1564e9ab42312f1f7ff1ad1c9664edd7693081ac2816557aad239c6d4150513325b2e0800786a88e6b5c9b1b3c9057ccc9260853889156162e7f3b5e82a2fced0e"}}, &(0x7f0000005ec0)={0x0, 0x3, 0xc8, @string={0xc8, 0x3, "707b4e2028d10c6ece06fa6d7c1dd659a4f575991d05fd1f4848db0328bcdcd0e56d46c544b3afbde0b72ebca8f982b45fa4ea537575173e5441def742ff02cd8ebdd730f2b61e0f946c7a9afa23592901174e0523207ae072426bfd46f44be8e07ac97b9f169ed4df76bf1eab3932ff5bbdbc700b8a5229d8e630359f4486790a6f778aa38774e50f93fadc626ea9439c5e5bac867daa2152000e7a02bfbba1fdc80ca5cbd22b488359789c932c7d4aa8a04ebb6254979517846da0a4fa71e0c604c1c4100e"}}}, &(0x7f0000006540)={0x1c, &(0x7f0000006000)={0x40, 0xf49edcb46fb2f497, 0xa0, "332420f2e40a92afb8b3778e2006346730da7d2beb25ed3bb91ffe85307018f6843aa6cae2fcd7625bf287af70e5c40d5100fdcb6e7c0fd8c8d9fe3ee665af159d99dc5deef56d6c92937df2f8d7ab1b8e0e5a9c42f1d31e332fb56d80f00217f72f7992d80f85f9deda87cce6159d95a34c814f258cdf8cd5d21901885fb9e7e6f531efd23b54e6a29023f4037090b78da31227be2c1f8e3ad0b86d9ecff802"}, &(0x7f00000060c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000006500)}) 1.8475094s ago: executing program 52 (id=9267): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xffffffff]}, 0x8) write$sysctl(r0, &(0x7f0000000040)='6\x00', 0x2) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/7, 0x7}], 0x1, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000200)=""/129, 0x81}, {&(0x7f00000002c0)=""/95, 0x5f}, {&(0x7f0000000340)}], 0x3, &(0x7f00000003c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=""/216, 0xd8}], 0x1, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000000680), 0x6e, &(0x7f0000001880)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/104, 0x68}, {&(0x7f0000001780)=""/70, 0x46}, {&(0x7f0000001800)=""/94, 0x5e}], 0x4}}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f00000018c0)=""/50, 0x32}, {&(0x7f0000001900)=""/126, 0x7e}, {&(0x7f0000001980)=""/224, 0xe0}, {&(0x7f0000001a80)=""/1, 0x1}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x5, &(0x7f0000002b40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000002c00), 0x6e, &(0x7f0000002d00)=[{&(0x7f0000002c80)=""/123, 0x7b}], 0x1, &(0x7f0000002d40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000002e80), 0x6e, &(0x7f0000003640)=[{&(0x7f0000002f00)=""/137, 0x89}, {&(0x7f0000002fc0)=""/163, 0xa3}, {&(0x7f0000003080)=""/243, 0xf3}, {&(0x7f0000003180)=""/216, 0xd8}, {&(0x7f0000003280)=""/220, 0xdc}, {&(0x7f0000003380)=""/132, 0x84}, {&(0x7f0000003440)=""/183, 0xb7}, {&(0x7f0000003500)=""/149, 0x95}, {&(0x7f00000035c0)=""/85, 0x55}], 0x9, &(0x7f0000003700)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x7, 0x40000001, &(0x7f0000003980)={0x77359400}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000039c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x502, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0xa0, 0x80, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x35, {0x9, 0x21, 0x1, 0x5, 0x1, {0x22, 0x71f}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfb, 0x8, 0xa6}}}}}]}}]}}, &(0x7f0000003c00)={0xa, &(0x7f0000003a00)={0xa, 0x6, 0x250, 0x40, 0x9, 0x9, 0x10, 0x81}, 0x3d, &(0x7f0000003a40)={0x5, 0xf, 0x3d, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x2, 0x7800, 0xfffb, [0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "90459520a8b0bc5c5070da81d86a812f"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "4135cde983ceb03ea83e514e05c77968"}]}, 0x4, [{0x62, &(0x7f0000003a80)=@string={0x62, 0x3, "11309562e2595aff9c463616bb6189f0e6972540dfe598c41586f40ded1e3de59d8a58f3b9d810e18395bc730b1d32bef478d45e020ba666d43ac24da09f36f057ab5368a014bd1165a05eab2869239589bee12738d57e0e26052154c4718714"}}, {0x4, &(0x7f0000003b00)=@lang_id={0x4, 0x3, 0x2401}}, {0x5b, &(0x7f0000003b40)=@string={0x5b, 0x3, "c63682c08631762d3213615fb9b909fac0120e40395b81e2283294e85f19f9ed71501c70232e093b3c9b8da2ef2f7e4f5fa8d925645a871d65c450c07c268b7ac46e8d2fc8ebd6868938f180519c33eea114509ce1457f78cd"}}, {0x4, &(0x7f0000003bc0)=@lang_id={0x4, 0x3, 0x44e}}]}) r15 = openat$cgroup_pressure(r7, &(0x7f0000003c80)='cpu.pressure\x00', 0x2, 0x0) stat(&(0x7f0000003cc0)='./file0\x00', &(0x7f0000003d00)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r15, 0xffffffff80000301, r16, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r7, 0x10e, 0x8, &(0x7f0000003d80)=0xa1, 0x4) syz_open_dev$sndpcmc(&(0x7f0000003dc0), 0x0, 0x80002) openat$snapshot(0xffffffffffffff9c, &(0x7f0000003e00), 0x4000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000003e40)={0x4, 0x3, 0xbae9, 0x5, 0x5}) ioctl$VHOST_SET_VRING_ERR(r11, 0x4008af22, &(0x7f0000003e80)={0x2, r5}) openat$nci(0xffffffffffffff9c, &(0x7f0000003ec0), 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000004040)={&(0x7f0000003f00)={0x10, 0x0, 0x0, 0x102120}, 0xc, &(0x7f0000004000)={&(0x7f0000003f40)={0x9c, 0x1, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa2b}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x392}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa2f}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20040005}, 0x8000) sendmsg$IPSET_CMD_RENAME(r10, &(0x7f0000004140)={&(0x7f0000004080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004100)={&(0x7f00000040c0)={0x20, 0x5, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000004180)={0x2, [[0x3ff, 0xa, 0x1, 0x6, 0x401, 0x17c, 0x9, 0xc], [0x8000, 0x8, 0x401, 0x1000, 0x0, 0xc, 0x8989, 0x8], [0x9277, 0x2, 0x5, 0x2e, 0x5, 0x5, 0x93, 0x200]], '\x00', [{0x7fff, 0xe871, 0x1, 0x1, 0x1, 0x1}, {0x9, 0x3, 0x1, 0x1}, {0xcf, 0x4b9, 0x0, 0x1}, {0x5, 0x40, 0x0, 0x1, 0x1, 0x1}, {0x6, 0x7, 0x0, 0x0, 0x1}, {0x8, 0xf, 0x1, 0x0, 0x1}, {0xcb9, 0xa, 0x0, 0x0, 0x1}, {0x3, 0xe6d3, 0x0, 0x0, 0x0, 0x1}, {0xfffffffc, 0x2, 0x1, 0x1}, {0xff, 0x8}, {0x5, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x2, 0x7, 0x1, 0x0, 0x1, 0x1}], '\x00', 0x8}) io_uring_enter(r6, 0x31d1, 0xf48b, 0x40, &(0x7f0000004400), 0x8) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f0000004440)=0x0) connect$nfc_raw(r12, &(0x7f0000004480)={0x27, r17, 0xffffffffffffffff, 0x7}, 0x10) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000004580)={&(0x7f00000044c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004540)={&(0x7f0000004500)={0x3c, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x805}, 0x8010) bpf$LINK_DETACH(0x22, &(0x7f00000045c0)=r9, 0x4) ioctl$EVIOCSMASK(r6, 0x40104593, &(0x7f0000005600)={0x3, 0x1000, &(0x7f0000004600)="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"}) r18 = openat$uinput(0xffffffffffffff9c, &(0x7f0000005640), 0x2, 0x0) write$uinput_user_dev(r18, &(0x7f0000005680)={'syz1\x00', {0xffff, 0x0, 0xe6f, 0x4}, 0x23, [0x40, 0x9, 0xfffffffc, 0xffffff3c, 0x5, 0xfffffffa, 0x6, 0x9, 0x8, 0x0, 0x1, 0x3, 0x4, 0x2f3, 0xc, 0x8, 0x5, 0x9, 0x1, 0x7ff, 0x1, 0x1a1, 0x6, 0xf068, 0xfff, 0xc, 0x0, 0x6979, 0x9, 0xfffffff8, 0x8, 0x100, 0xffffffff, 0x9, 0x3d79, 0x1, 0x1c92, 0x2, 0x7, 0x7, 0xfffffffc, 0x7, 0x8, 0xe43f, 0x3, 0x5, 0x9, 0x81, 0xc5, 0xeedae84, 0xfffffffb, 0x3, 0x1000, 0x9, 0x80000001, 0x5, 0x94, 0xc, 0xb15, 0x3, 0x3c7, 0xb6f, 0x0, 0x4], [0x1, 0x1ff, 0x3ff, 0x8dfd, 0xfff, 0x4, 0x7fe7, 0x7fffffff, 0x693, 0x9ac0, 0xffff, 0x1, 0x5, 0x8000000, 0xb9, 0x0, 0x3, 0xffffe105, 0x3c79, 0x1ff, 0x0, 0x7, 0x862, 0x9, 0xff, 0xfffffe01, 0x39a0, 0x5, 0x9, 0x4ae2, 0x7f, 0xfffffff5, 0xd, 0x101, 0x4, 0x42e, 0x4, 0x0, 0x5, 0x100, 0x3, 0xcf80, 0x80000001, 0x200, 0x3, 0x4, 0x7, 0x1, 0x8, 0x6, 0x401, 0x2, 0x7, 0x8, 0xffffffff, 0x5, 0x8001, 0xa4, 0x1, 0xd8, 0xd, 0x8, 0xc3, 0x8], [0x2, 0x0, 0x6, 0x2, 0x5, 0x6, 0x7f, 0x9, 0x7, 0x5, 0x2, 0x1, 0x4, 0x7, 0x7, 0x6, 0x9, 0x2, 0x4, 0x10000, 0x0, 0x79ae, 0xbb21, 0x9, 0x9, 0xfffffff7, 0x5, 0x4, 0x4, 0x4, 0x7, 0xffffffff, 0x0, 0x39d, 0x6, 0x200, 0x200, 0x4, 0xb, 0xe8b, 0x5, 0x0, 0x400, 0x7fff, 0x8, 0x2, 0x81, 0xa, 0x8, 0x81, 0x10, 0x81, 0x7, 0x2, 0x6, 0x8, 0xdcd80, 0x8, 0x3, 0x959, 0x1, 0x0, 0x8, 0x2], [0x8, 0x4, 0x7fff, 0x6, 0x4, 0x1, 0x7, 0x9, 0x101, 0x4, 0x3, 0x1000, 0xffffff50, 0x9, 0x1, 0x80, 0x0, 0x8, 0x2, 0x800, 0x8, 0x81, 0x2, 0x6, 0x8001, 0x98, 0x9, 0x8, 0x67, 0x1, 0x0, 0x21a5, 0xfff, 0x9, 0x1, 0x9, 0xfffff800, 0x20, 0xfffffffe, 0x7, 0x4d566765, 0x5, 0xf3, 0x9, 0x73, 0x1000, 0x7, 0xd1, 0x80000000, 0x8, 0xcc, 0x2, 0x81, 0xc, 0x4, 0x2, 0x2, 0x5, 0x0, 0x6, 0xa5f9, 0x7ff, 0x904, 0x10000]}, 0x45c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000005b40)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000005c40)={&(0x7f0000005b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000005c00)={&(0x7f0000005b80)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xb2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r19}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffc}]}, 0x68}, 0x1, 0x0, 0x0, 0x40400}, 0x10) ioctl$EVIOCGMASK(r13, 0x80104592, &(0x7f0000005d40)={0x15, 0xa0, &(0x7f0000005c80)="74017087ece98c2e171d835c8a5c2528918f74891ef27de4d36c5064bf0a5f2ef1188ca3f22fc6c51095d38b32b2ea02163ea9f5f4bc2d6c5a29aeac4cdfff0cbbc93a04be338e987322efce2fd95f6668aa7b558df61a503c732b87de4fb34a5af4bdf4a525a173cad8d2d54414a52e44c8732ec2e04a470d73de1e12b52c598e7de49ce986fa4ca5b068924ef5cf492fc6bf460a8f2861a61c5c32b63bd27e"}) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000005d80)={0x10200, 0xdf9fde99ace66413, 0x4, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000005dc0)={0xfffffffe, 0x1, 0x3, "1d00fc1b1d4452361588f9df1667b676550c049db13f1cf865bb27aa84102253", 0x32525942}) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000005fc0)={0x14, &(0x7f0000005e40)={0x40, 0x22, 0x5c, {0x5c, 0x4, "755bfbebec1ac1f6768554befeb53f267110c5b48f25324def1564e9ab42312f1f7ff1ad1c9664edd7693081ac2816557aad239c6d4150513325b2e0800786a88e6b5c9b1b3c9057ccc9260853889156162e7f3b5e82a2fced0e"}}, &(0x7f0000005ec0)={0x0, 0x3, 0xc8, @string={0xc8, 0x3, "707b4e2028d10c6ece06fa6d7c1dd659a4f575991d05fd1f4848db0328bcdcd0e56d46c544b3afbde0b72ebca8f982b45fa4ea537575173e5441def742ff02cd8ebdd730f2b61e0f946c7a9afa23592901174e0523207ae072426bfd46f44be8e07ac97b9f169ed4df76bf1eab3932ff5bbdbc700b8a5229d8e630359f4486790a6f778aa38774e50f93fadc626ea9439c5e5bac867daa2152000e7a02bfbba1fdc80ca5cbd22b488359789c932c7d4aa8a04ebb6254979517846da0a4fa71e0c604c1c4100e"}}}, &(0x7f0000006540)={0x1c, &(0x7f0000006000)={0x40, 0xf49edcb46fb2f497, 0xa0, "332420f2e40a92afb8b3778e2006346730da7d2beb25ed3bb91ffe85307018f6843aa6cae2fcd7625bf287af70e5c40d5100fdcb6e7c0fd8c8d9fe3ee665af159d99dc5deef56d6c92937df2f8d7ab1b8e0e5a9c42f1d31e332fb56d80f00217f72f7992d80f85f9deda87cce6159d95a34c814f258cdf8cd5d21901885fb9e7e6f531efd23b54e6a29023f4037090b78da31227be2c1f8e3ad0b86d9ecff802"}, &(0x7f00000060c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000006500)}) 1.795259063s ago: executing program 6 (id=9272): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b45, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20000) ioctl$EVIOCSABS0(r2, 0x401845c0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x6dc8}]}}}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x2, 0xa0, 0x7, {}, {r4, r5/1000+60000}, {0x3}, 0x1, @canfd={{0x3, 0x1, 0x1, 0x1}, 0x6, 0x3, 0x0, 0x0, "e98ecf731c6ec260e19ba09c7574c9f32089aeed25af66bdd091a5e3efb57aa74c0a769517c4253258e923c6015d74fff41825dd826e44f93393babec08381d1"}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4008080) 1.721605679s ago: executing program 6 (id=9274): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000006004227c183b21f842dafb48ae7ee696da1ec2081c249a47617f39229d0c748d"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x1, r3}) sendmmsg$unix(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x20040001) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000002240)=ANY=[@ANYBLOB="180000000000000000c8f98fd3000000b7080000000000007b8af8ff000000c400000000000000007b8af0ff00000000e8904c48a94f3c3f5e2aa471346854c60b866b89bc6c7bbae6bfa1000000f493be7c5002851901500000000000f8ffffff601000000000", @ANYRES32=r0, @ANYRES16=r5], &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) 1.720715777s ago: executing program 6 (id=9276): vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, r1, 0x511, 0x4}, 0x14}}, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x3fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.719923256s ago: executing program 6 (id=9277): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x401c0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r3 = socket$kcm(0x2, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x3, 0x0, 0x0, 0x100000000, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r4, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r4, r4, r4, r4, 0xffffffffffffffff, r4], 0x0, 0x10, 0xfffffffe}, 0xc3) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r4, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r4, r4, r4, r4, 0xffffffffffffffff, r4], 0x0, 0x10, 0xfffffffe}, 0xc3) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) (async) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r4, &(0x7f0000000300)="10dd83903596748658f856fe3e33473fbbe5acb55405e6d7618f6dc08fbcce95fac78aeb6866b525c79839e312c6d0b1a2a72c197fb3a52fcd1c3dcb9f1e795885d01994fd405d8e38817f7268d013061900e4ca52eab530a5e3e122b7dc7487022e37da974b455ab388738f23de", &(0x7f0000000380)=""/147}, 0x20) write$tun(r1, &(0x7f00000006c0)={@val={0x0, 0x88f7}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x66, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x8000, 0x8100, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "024b8db4b1c7b14ce17cd26fb3832d9057b9a7204f3b608d01a6eec0a2b2e872", "27186e74894a829a4a3f300b0d8fae8dbb559891a0d63cf358c04462a6f8edaeaefc1c9654b3f1a07e3906a6f03b4276", "0967fefaccff9e271477ac5294e553265f01713297afbe327e522a99", {"0e9ffaf74ee1522c311f85cf4774d625", "fe9ea905f3c34cacf84a243d4933a59c"}}}}}}}}, 0xc2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1.623233193s ago: executing program 4 (id=9281): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/uevent_helper', 0x149a82, 0x24a) write$cgroup_int(r0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x100000000) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x1000, 0x6, 0x7, 0x0, 0x6, "9d8aaea2741cd5d99a88faac859ddc7b3b05e5"}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sysfs$2(0x2, 0x0, &(0x7f0000000180)=""/222) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0xfffffffffffffffa, &(0x7f0000000000)) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000080)) 1.541548341s ago: executing program 4 (id=9282): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x905, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x1610c2, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000200001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008854) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)="ec"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x1000000, 0x0}) 417.418706ms ago: executing program 3 (id=9283): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [], {0x95, 0x0, 0x9}}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 416.904621ms ago: executing program 4 (id=9284): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000007000000000000000080000000000000", @ANYRES32], 0x50) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="df", 0x1}], 0x1}}], 0x1, 0x24088804) sendto$inet6(r2, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x7d, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300), 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r4, &(0x7f0000000040)="0717c91ca230edad3e6834d3ca83b6e118e229b4fa59ff0a5a0696310acff99656b61b84278490562de1748754da599f317e01c5e70e", 0x36, 0x4810, &(0x7f00000000c0)={0xa, 0x4e22, 0x200, @mcast1, 0xf8}, 0x1c) write$UHID_CREATE2(r3, &(0x7f0000000400)=ANY=[], 0x1df) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000, 0x0, 0x0, 0x18, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000007000000000000000080000000000000", @ANYRES32], 0x50) (async) syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet6(r2, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="df", 0x1}], 0x1}}], 0x1, 0x24088804) (async) sendto$inet6(r2, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) (async) shutdown(r2, 0x1) (async) getsockopt$bt_hci(r2, 0x84, 0x7d, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300), 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) sendto$inet6(r4, &(0x7f0000000040)="0717c91ca230edad3e6834d3ca83b6e118e229b4fa59ff0a5a0696310acff99656b61b84278490562de1748754da599f317e01c5e70e", 0x36, 0x4810, &(0x7f00000000c0)={0xa, 0x4e22, 0x200, @mcast1, 0xf8}, 0x1c) (async) write$UHID_CREATE2(r3, &(0x7f0000000400)=ANY=[], 0x1df) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000, 0x0, 0x0, 0x18, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) (async) 416.76442ms ago: executing program 6 (id=9285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYRES32=0xffffffffffffffff], 0x1c}}, 0x0) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) waitid$P_PIDFD(0x3, r4, 0x0, 0x4, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8919, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a", @ANYRES64=r4, @ANYRESDEC=r1, @ANYRESOCT=r5, @ANYRES16=r7, @ANYRES32=r6, @ANYRESOCT=r2], 0x214}], 0x1}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) 414.92405ms ago: executing program 3 (id=9286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x96, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x60, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x3c}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}]}, @srh={0x2f}, @dstopts]}}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000010000220800000018000180f9ff02008b70766c616e31000010000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) 404.583255ms ago: executing program 4 (id=9287): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x4002, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_off}]}) 333.330328ms ago: executing program 3 (id=9288): r0 = socket$kcm(0x10, 0x400000002, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x108) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x14c0348, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$sock_SIOCOUTQ(r3, 0x5425, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x4}, 0x10}, 0x94) (async) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e00ab25399cd956c07dead6a9df8cd4650000006c000000", 0x1c}], 0x1}, 0x0) 331.436115ms ago: executing program 3 (id=9289): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80000) ioctl$NBD_CLEAR_QUE(r0, 0xab05) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x94, &(0x7f0000000240)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1000}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x100}, @in6={0xa, 0x4e22, 0x2, @mcast2, 0x7}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000380)={r5, @in={{0x2, 0x4e21, @broadcast}}}, 0x84) (async) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000440)={'filter\x00', 0x96, "8fc3e9f734ebfff1b28f00c9005827035795d9730542ce335df40bcf3c1b86b490fa1fd3611da10ece083777770db25b411665ccb4f95ae2fda48579619311fc45c7953d9e6246e73b2f0b41a923788df31fea8d2cd69e87593fa6b2cf203df9b4a9c0801b18ff0684062f37cf8c39da8e8b9f6658a001b3e48f1cad7c05d6bd0e4af4cc916f9d9157263c3aa1e55c00ac3ea841e342"}, &(0x7f0000000500)=0xba) (async) ioctl$BLKCRYPTOIMPORTKEY(r0, 0xc0401289, &(0x7f0000000600)={&(0x7f0000000540)="882ce27fa73766b37a29aadaac9dd69b101c8bb156448f52aa5ae4ef3a5c770368", 0x21, &(0x7f0000000580)=""/126, 0x7e}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xe0, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc9b, 0x73}}}}, [@NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="50e5acc579be7c748739de6d58e9054c063a32a9153c8a36"}]}, @NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="91c409e2585a4f076b4332a0bf787a03d18a1f560cd391f2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c0e22d0dbae44f98cacba1a6a35c8cf4371fa89c7136380c"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="19d4ec8249a098f948bf35e290a3bcb1"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c9d7313fdc801aa58110afc47c277b41e9735b87d92b06b4"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4cbbd066d7efd9c24f787a36082edb5b5bbd6ac30afbce70"}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x2800) (async) r7 = socket$isdn(0x22, 0x3, 0x10) ioctl$IMHOLD_L1(r7, 0x80044948, &(0x7f0000000840)=0xfffffffe) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000880)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000980)={{r7}, r8, 0x0, @inherit={0x90, &(0x7f00000008c0)={0x1, 0x9, 0x4, 0x10001, {0x8, 0x31, 0x8, 0x7fff, 0x3}, [0xfdd, 0xd, 0x2, 0x0, 0x7, 0x81, 0xfffffffffffffffb, 0x50da424b, 0x6]}}, @subvolid=0x9}) (async) write(r0, &(0x7f0000001980)="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", 0x1000) (async) r9 = socket$netlink(0x10, 0x3, 0x10) fstatfs(r7, &(0x7f0000002980)=""/213) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000002a80)={'security\x00', 0x2, [{}, {}]}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002b00)) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002b40)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x5, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000002c00), r9) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x1c, r10, 0x800, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000005}, 0x800) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000002d00)={0x5, 0x0, 0xdc3, 0x88ed, 0x9, 0x7}) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r11, &(0x7f0000002d80), &(0x7f0000002dc0)=0x10, 0x100000) r12 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002e00), 0x4a82, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r12, 0x4010640d, &(0x7f0000002e40)={0x9}) 330.928853ms ago: executing program 6 (id=9290): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x80, 0x0, 0x0, 0x0}], 0x1}) creat(&(0x7f0000000140)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000), &(0x7f00000000c0)=@v2={0x6, 0x3, 0x0, 0x0, 0x1, 'b'}, 0xa, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) 325.055609ms ago: executing program 4 (id=9291): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@bridge_setlink={0x38, 0x13, 0xa2f, 0x70bd2c, 0x25cfdbfd, {0x7, 0x0, 0x68, r2, 0x16258, 0x28}, [@IFLA_LINKINFO={0x18, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x4, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x50) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r4, 0x0, 0x201f00) 184.325671ms ago: executing program 4 (id=9292): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae", @ANYRES32=r0], 0x18}, 0x1, 0x0, 0x0, 0x2004a004}, 0x722cc5abd60f28bc) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4093, 0xffd}], 0x2}, 0x101}], 0x4, 0x40000020, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x15c1, &(0x7f0000000000)={0x0, 0xa670, 0x400}, &(0x7f0000000080), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000007c0)={&(0x7f0000003000)={[{0x0}]}, 0x1, 0x1}, 0x1) io_uring_register$IORING_REGISTER_PBUF_STATUS(r1, 0x1a, &(0x7f0000000800)={0x1}, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x46, 0x0, &(0x7f0000001a80)) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x12100, &(0x7f0000000180)={0xa, 0x4e20, 0x2, @private2, 0xa5}, 0x1c) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r4 = add_key$user(&(0x7f00000002c0), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)="c2e580c47ab1f62543f7f1636dc6a62255", 0x11, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x42) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1000, &(0x7f000000f000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000300)=[{0x803, 0x8, 0x1, 0x8}]}, 0x10) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) 184.152268ms ago: executing program 3 (id=9293): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x9}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) r6 = ioctl$USERFAULTFD_IOC_NEW(r5, 0xaa00) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x100000}) 0s ago: executing program 3 (id=9294): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000000)={0x400000000000030d}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x121402, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000001200)={0x18, 0xef9, 0x1}) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x1000f0000) kernel console output (not intermixed with test programs): ontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 662.636836][ T7914] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 662.687236][ T5978] Bluetooth: hci0: Unknown advertising packet type: 0x39 [ 662.687297][ T5978] Bluetooth: hci0: Malformed LE Event: 0x0d [ 662.800205][ T7914] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 662.806384][ T7914] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 662.815049][ T7914] usb 7-1: config 0 interface 0 has no altsetting 0 [ 662.819357][ T7914] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 662.822286][ T7914] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 662.824870][ T7914] usb 7-1: Product: syz [ 662.826295][ T7914] usb 7-1: Manufacturer: syz [ 662.827801][ T7914] usb 7-1: SerialNumber: syz [ 662.831891][ T7914] usb 7-1: config 0 descriptor?? [ 662.834731][ T7914] hub 7-1:0.0: bad descriptor, ignoring hub [ 662.836595][ T7914] hub 7-1:0.0: probe with driver hub failed with error -5 [ 662.840410][ T7914] usb 7-1: selecting invalid altsetting 0 [ 662.850675][ T5978] Bluetooth: hci0: command 0x0c1a tx timeout [ 662.850705][ T5981] Bluetooth: hci1: command 0x0c1a tx timeout [ 662.989169][ T34] usb 11-1: new high-speed USB device number 59 using dummy_hcd [ 663.121685][ T3887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8067'. [ 663.164311][ T34] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 663.168503][ T34] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 663.172818][ T34] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 663.181514][ T34] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 663.185191][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.188402][ T34] usb 11-1: Product: syz [ 663.189929][ T34] usb 11-1: Manufacturer: syz [ 663.191522][ T34] usb 11-1: SerialNumber: syz [ 663.196108][ T34] hub 11-1:1.0: bad descriptor, ignoring hub [ 663.198088][ T34] hub 11-1:1.0: probe with driver hub failed with error -5 [ 663.349284][ T3903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8069'. [ 663.413766][ T34] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 59 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 663.481872][ T6058] usb 7-1: USB disconnect, device number 37 [ 663.580185][ T54] usb 11-1: USB disconnect, device number 59 [ 663.584888][ T54] usblp0: removed [ 663.641247][ T6058] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 663.803235][ T6058] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 663.805775][ T6058] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 663.809001][ T6058] usb 7-1: config 0 interface 0 has no altsetting 0 [ 663.814253][ T6058] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 663.819804][ T6058] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 663.822332][ T6058] usb 7-1: Product: syz [ 663.823828][ T6058] usb 7-1: Manufacturer: syz [ 663.825293][ T6058] usb 7-1: SerialNumber: syz [ 663.827980][ T6058] usb 7-1: config 0 descriptor?? [ 663.831573][ T6058] hub 7-1:0.0: bad descriptor, ignoring hub [ 663.834433][ T6058] hub 7-1:0.0: probe with driver hub failed with error -5 [ 663.838184][ T6058] usb 7-1: selecting invalid altsetting 0 [ 663.851356][ T3965] netlink: 'syz.1.8076': attribute type 30 has an invalid length. [ 664.165339][ T6058] usb 7-1: USB disconnect, device number 38 [ 664.295865][ T4044] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8083'. [ 664.655404][ T4125] netfs: Couldn't get user pages (rc=-14) [ 664.701176][ T4130] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8088'. [ 664.767878][ T4138] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 665.084713][ T5981] Bluetooth: hci0: command 0x0c1a tx timeout [ 665.084771][ T5978] Bluetooth: hci1: command 0x0c1a tx timeout [ 665.116912][ T7914] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 665.277650][ T7914] usb 6-1: Using ep0 maxpacket: 16 [ 665.291744][ T4170] 8021q: adding VLAN 0 to HW filter on device bond3 [ 665.293340][ T7914] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 665.297407][ T7914] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 665.309412][ T7914] usb 6-1: Product: syz [ 665.310795][ T7914] usb 6-1: Manufacturer: syz [ 665.320341][ T7914] usb 6-1: SerialNumber: syz [ 665.323800][ T7914] usb 6-1: config 0 descriptor?? [ 665.581770][ T34] usb 6-1: USB disconnect, device number 45 [ 665.627797][ T4237] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8098'. [ 665.738347][ T4243] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8100'. [ 665.829366][ T4250] overlay: Unknown parameter 'subj_type' [ 666.194132][ T4267] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 666.199551][ T4267] netlink: 284 bytes leftover after parsing attributes in process `syz.1.8106'. [ 666.230077][ T40] audit: type=1400 audit(5747349248.908:89616): avc: denied { getopt } for pid=4271 comm="syz.5.8107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 666.314576][ T54] usb 11-1: new high-speed USB device number 60 using dummy_hcd [ 666.474610][ T54] usb 11-1: Using ep0 maxpacket: 32 [ 666.478375][ T54] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 666.484283][ T54] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 666.488958][ T54] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 666.492252][ T54] usb 11-1: Product: syz [ 666.494054][ T54] usb 11-1: Manufacturer: syz [ 666.496911][ T54] usb 11-1: SerialNumber: syz [ 666.500711][ T54] usb 11-1: config 0 descriptor?? [ 666.503595][ T4261] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 666.530462][ T4300] binder: Bad value for 'max' [ 666.532271][ T4302] binder: Bad value for 'max' [ 666.778630][ T5978] Bluetooth: hci2: Malformed LE Event: 0x0d [ 666.802346][ T4314] 9p filesystem being mounted at /319/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 666.813843][ T4320] program syz.2.8115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 666.828428][ T4320] netlink: 'syz.2.8115': attribute type 21 has an invalid length. [ 666.831101][ T4320] netlink: 'syz.2.8115': attribute type 6 has an invalid length. [ 667.128444][ T4344] __nla_validate_parse: 1 callbacks suppressed [ 667.128461][ T4344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8121'. [ 667.131187][ T4345] netlink: 'syz.1.8120': attribute type 4 has an invalid length. [ 667.134815][ T4344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8121'. [ 667.141947][ T4344] netlink: 'syz.2.8121': attribute type 18 has an invalid length. [ 667.154636][ T4344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8121'. [ 667.158474][ T4344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8121'. [ 667.159307][ T6725] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.163011][ T4344] netlink: 'syz.2.8121': attribute type 18 has an invalid length. [ 667.166798][ T6725] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.171718][ T6725] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.174284][ T6725] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.198206][ T4345] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8120'. [ 667.213483][ T4359] futex_wake_op: syz.5.8123 tries to shift op by -1; fix this program [ 667.298003][ T5978] Bluetooth: hci0: command 0x0c1a tx timeout [ 667.308719][ T5978] Bluetooth: hci1: command 0x0c1a tx timeout [ 667.564329][ T5978] Bluetooth: hci1: Malformed LE Event: 0x0d [ 667.600315][ T4390] ata1.00: invalid cdb length 6 [ 667.706597][ T4399] dlm: Unknown command passed to DLM device : 255 [ 667.706597][ T4399] [ 667.737030][ T4399] netlink: 'syz.5.8133': attribute type 1 has an invalid length. [ 667.817411][ T5978] Bluetooth: hci1: Malformed LE Event: 0x0d [ 667.853414][ T40] audit: type=1400 audit(5747349250.414:89617): avc: denied { mounton } for pid=4449 comm="syz.5.8139" path="/80/file0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 668.263904][ T4476] program syz.2.8145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 668.267167][ T4476] ata1.00: invalid service action 31 [ 668.555425][ T4516] debugfs: 'ttyS3' already exists in 'caif_serial' [ 668.605395][ T40] audit: type=1400 audit(5747349251.124:89618): avc: denied { connect } for pid=4525 comm="syz.5.8154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 668.607241][ T5978] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 668.649061][ T40] audit: type=1400 audit(5747349251.162:89619): avc: denied { connect } for pid=4537 comm="syz.1.8157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 668.687938][ T4541] hfs: can't find a HFS filesystem on dev sr0 [ 669.075326][ T40] audit: type=1400 audit(5747349251.555:89620): avc: denied { override_creds } for pid=4568 comm="syz.2.8162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 669.114507][ T40] audit: type=1400 audit(5747349251.592:89621): avc: denied { ioctl } for pid=4571 comm="syz.2.8163" path="socket:[188207]" dev="sockfs" ino=188207 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 669.223129][T15275] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 669.296496][ T4582] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8166'. [ 669.404685][ T34] usb 11-1: USB disconnect, device number 60 [ 669.407791][T15275] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 669.411308][T15275] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 669.416249][T15275] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 669.420516][T15275] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 669.424450][T15275] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 669.429545][T15275] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.433105][T15275] usb 6-1: config 0 descriptor?? [ 669.435417][ T4563] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 669.521361][ T4622] block nbd2: Dead connection, failed to find a fallback [ 669.526068][ T4622] block nbd2: shutting down sockets [ 669.527873][ T4622] I/O error, dev nbd2, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 669.531214][ T4622] gfs2: error -5 reading superblock [ 669.581592][ T4625] loop4: detected capacity change from 0 to 2560 [ 669.585131][ T4625] buffer_io_error: 6 callbacks suppressed [ 669.585140][ T4625] Buffer I/O error on dev loop4, logical block 0, async page read [ 669.591152][ T4625] Buffer I/O error on dev loop4, logical block 0, async page read [ 669.593761][ T4625] Buffer I/O error on dev loop4, logical block 0, async page read [ 669.596256][ T4625] Buffer I/O error on dev loop4, logical block 0, async page read [ 669.598989][ T4625] Buffer I/O error on dev loop4, logical block 0, async page read [ 669.601582][ T4625] Buffer I/O error on dev loop4, logical block 0, async page read [ 669.604150][ T4625] Buffer I/O error on dev loop4, logical block 0, async page read [ 669.606878][ T4625] Buffer I/O error on dev loop4, logical block 0, async page read [ 669.610467][ T4625] ldm_validate_partition_table(): Disk read failed. [ 669.613259][ T4625] Buffer I/O error on dev loop4, logical block 0, async page read [ 669.615876][ T4631] overlayfs: statfs failed on './file0' [ 669.617000][ T4625] Buffer I/O error on dev loop4, logical block 0, async page read [ 669.623342][ T4625] Dev loop4: unable to read RDB block 0 [ 669.626000][ T4625] loop4: unable to read partition table [ 669.628321][ T40] audit: type=1400 audit(5747349252.078:89622): avc: denied { bind } for pid=4630 comm="syz.5.8171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 669.629640][ T4625] loop_reread_partitions: partition scan of loop4 (3ź ľ‚ł) failed (rc=-5) [ 669.687597][ T4636] Invalid option length (189) for dns_resolver key [ 669.691658][ T4636] block nbd2: Cannot use ioctl interface on a netlink controlled device. [ 669.697689][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.831767][ T40] audit: type=1400 audit(5747349252.265:89623): avc: denied { remount } for pid=4647 comm="syz.5.8175" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 669.887477][T15275] usbhid 6-1:0.0: can't add hid device: -71 [ 669.889453][T15275] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 669.893740][ T4657] netlink: 'syz.6.8176': attribute type 4 has an invalid length. [ 669.902627][T15275] usb 6-1: USB disconnect, device number 46 [ 669.933327][ T4666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=4666 comm=syz.2.8178 [ 669.947787][ T4669] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8179'. [ 669.964203][ T4671] ipvlan2: entered promiscuous mode [ 669.977782][ T4671] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 669.981219][ T4671] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 670.007518][ T40] audit: type=1400 audit(5747349252.434:89624): avc: denied { watch } for pid=4667 comm="syz.6.8179" path="/syzcgroup/unified/syz6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 670.009300][ T4679] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 670.022633][ T4675] sp0: Synchronizing with TNC [ 670.046771][ T40] audit: type=1400 audit(5747349252.481:89625): avc: denied { setattr } for pid=4667 comm="syz.6.8179" name="radio4" dev="devtmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 670.168236][ T4690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8183'. [ 670.173010][ T4690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8183'. [ 670.191320][ T4693] netlink: 'syz.5.8184': attribute type 29 has an invalid length. [ 670.194231][ T4693] netlink: 'syz.5.8184': attribute type 29 has an invalid length. [ 670.245442][ T4699] tmpfs: Invalid gid '0x00000000ffffffff' [ 670.246051][ T5978] Bluetooth: hci2: Malformed LE Event: 0x0d [ 670.412033][ T4715] block nbd2: Cannot use ioctl interface on a netlink controlled device. [ 670.432898][ T4717] futex_wake_op: syz.6.8185 tries to shift op by 32; fix this program [ 670.785455][ T4747] fuse: Bad value for 'fd' [ 670.822034][ T4755] xt_socket: unknown flags 0x20 [ 671.121421][ T4773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8202'. [ 671.197419][ T4779] openvswitch: netlink: Message has 89 unknown bytes. [ 671.231281][ T5978] Bluetooth: hci2: Malformed LE Event: 0x0d [ 671.598073][ T5978] Bluetooth: hci1: Malformed LE Event: 0x0d [ 671.663106][ T4965] tmpfs: Bad value for 'mpol' [ 671.687648][ T4967] overlayfs: failed to clone lowerpath [ 671.758442][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 671.758459][ T40] audit: type=1400 audit(5747349254.080:89627): avc: denied { map } for pid=4975 comm="syz.2.8225" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 671.771771][ T6725] team0: left promiscuous mode [ 671.776825][ T6725] team_slave_0: left promiscuous mode [ 671.781747][ T6725] team_slave_1: left promiscuous mode [ 671.794655][ T4982] bond0: entered allmulticast mode [ 671.796397][ T4982] bond_slave_0: entered allmulticast mode [ 671.798325][ T4982] bond_slave_1: entered allmulticast mode [ 671.835828][ T4986] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 672.030393][ T5019] netlink: 'syz.2.8238': attribute type 1 has an invalid length. [ 672.067149][ T5978] Bluetooth: hci2: Unknown advertising packet type: 0x39 [ 672.067179][ T5978] Bluetooth: hci2: Malformed LE Event: 0x0d [ 672.216169][ T24] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 672.321993][ T5072] bond5: entered promiscuous mode [ 672.387378][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 672.392125][ T24] usb 6-1: config 1 has an invalid interface number: 169 but max is 0 [ 672.395895][ T24] usb 6-1: config 1 has no interface number 0 [ 672.399295][ T24] usb 6-1: config 1 interface 169 has no altsetting 0 [ 672.404165][ T24] usb 6-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=f4.76 [ 672.407822][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.411383][ T24] usb 6-1: Product: syz [ 672.413085][ T24] usb 6-1: Manufacturer: syz [ 672.415046][ T24] usb 6-1: SerialNumber: syz [ 672.462304][ T6058] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 672.556213][ T5121] netlink: 'syz.6.8252': attribute type 4 has an invalid length. [ 672.559418][ T5121] __nla_validate_parse: 4 callbacks suppressed [ 672.559430][ T5121] netlink: 17 bytes leftover after parsing attributes in process `syz.6.8252'. [ 672.622442][ T6058] usb 7-1: Using ep0 maxpacket: 16 [ 672.626047][ T6058] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.630306][ T6058] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.634448][ T6058] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 672.639434][ T6058] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 672.643083][ T6058] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.650316][ T6058] usb 7-1: config 0 descriptor?? [ 672.720559][ T5137] overlayfs: statfs failed on './file0' [ 672.777637][ T24] em28xx 6-1:1.169: New device syz syz @ 480 Mbps (2304:021a, interface 169, class 169) [ 672.780670][ T24] em28xx 6-1:1.169: Video interface 169 found: [ 672.805934][ T5144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8260'. [ 672.847244][ T24] em28xx 6-1:1.169: unknown em28xx chip ID (0) [ 672.918646][ T24] em28xx 6-1:1.169: reading from i2c device at 0xa0 failed (error=-5) [ 672.924033][ T24] em28xx 6-1:1.169: board has no eeprom [ 672.946731][ T5157] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8262'. [ 672.951399][ T5157] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8262'. [ 673.008380][ T24] em28xx 6-1:1.169: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 673.015041][ T24] em28xx 6-1:1.169: analog set to bulk mode. [ 673.017758][ T54] em28xx 6-1:1.169: Registering V4L2 extension [ 673.025907][ T24] usb 6-1: USB disconnect, device number 47 [ 673.029621][ T24] em28xx 6-1:1.169: Disconnecting em28xx [ 673.042559][ T54] em28xx 6-1:1.169: Config register raw data: 0xffffffed [ 673.045533][ T54] em28xx 6-1:1.169: AC97 chip type couldn't be determined [ 673.048628][ T54] em28xx 6-1:1.169: No AC97 audio processor [ 673.053910][ T54] usb 6-1: Decoder not found [ 673.055902][ T54] em28xx 6-1:1.169: failed to create media graph [ 673.058215][ T54] em28xx 6-1:1.169: V4L2 device video103 deregistered [ 673.068839][ T54] em28xx 6-1:1.169: Remote control support is not available for this card. [ 673.072062][ T24] em28xx 6-1:1.169: Closing input extension [ 673.081325][ T24] em28xx 6-1:1.169: Freeing device [ 673.099505][ T6058] microsoft 0003:045E:07DA.002B: item fetching failed at offset 31/34 [ 673.103328][ T6058] microsoft 0003:045E:07DA.002B: parse failed [ 673.106884][ T6058] microsoft 0003:045E:07DA.002B: probe with driver microsoft failed with error -22 [ 673.273779][ T5189] unknown channel width for channel at 909000KHz? [ 673.281648][ T5189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5189 comm=syz.5.8266 [ 673.374338][ T5198] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8244'. [ 673.578399][ T40] audit: type=1400 audit(5747349255.773:89628): avc: denied { kexec_image_load } for pid=5219 comm="syz.6.8270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 673.612142][T15275] usb 7-1: USB disconnect, device number 39 [ 673.626637][ T5204] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8268'. [ 673.776297][ T5978] Bluetooth: hci0: Unknown advertising packet type: 0x39 [ 673.776329][ T5978] Bluetooth: hci0: Malformed LE Event: 0x0d [ 673.830031][ T5254] kvm: user requested TSC rate below hardware speed [ 673.834205][ T5254] kvm: user requested TSC rate below hardware speed [ 673.848800][ T5258] : entered promiscuous mode [ 673.857094][ T5261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 673.860675][ T5261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 673.882125][ T5267] loop6: detected capacity change from 0 to 7 [ 673.897292][ T5267] Dev loop6: unable to read RDB block 7 [ 673.899696][ T5267] loop6: unable to read partition table [ 673.902310][ T5267] loop6: partition table beyond EOD, truncated [ 673.905016][ T5267] loop_reread_partitions: partition scan of loop6 (úů塙‰üŤľCęjĚ–ă˘P=Ă˝?ă}X‹şĐ śëÜ%ő«`ÉćÖ€ů…{í©Öȵ4FLQkÝŠ) failed (rc=-5) [ 673.922275][ T40] audit: type=1804 audit(5747349256.100:89629): pid=5267 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.8279" name="/newroot/349/file0" dev="tmpfs" ino=1918 res=1 errno=0 [ 673.929799][ T40] audit: type=1800 audit(5747349256.100:89630): pid=5267 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.8279" name="file0" dev="tmpfs" ino=1918 res=0 errno=0 [ 673.966250][ T5274] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 674.176759][ T5283] devtmpfs: Unknown parameter 'usrquota_block_harddimit' [ 675.391467][ T5371] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8291'. [ 675.508466][ T5377] I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.514360][ T5377] qnx6: unable to read the first superblock [ 675.517194][ T5377] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.521655][ T5377] qnx6: unable to read the first superblock [ 675.524217][ T5377] qnx6: unable to read the first superblock [ 675.966267][ T5413] sp0: Synchronizing with TNC [ 676.032092][ T5425] xt_l2tp: unknown flags: 51 [ 676.053694][ T5424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8301'. [ 676.057175][ T5424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8301'. [ 677.178456][ T5475] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8311'. [ 677.309793][ T40] audit: type=1400 audit(5747349259.271:89631): avc: denied { listen } for pid=5486 comm="syz.2.8315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 677.312588][ T5488] netlink: 'syz.5.8313': attribute type 1 has an invalid length. [ 677.369003][ T5488] bond6: (slave bridge1): making interface the new active one [ 677.372124][ T5488] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 677.701738][ T5544] netlink: 'syz.6.8321': attribute type 13 has an invalid length. [ 678.140380][ T5554] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 678.144054][ T34] IPVS: starting estimator thread 0... [ 678.216006][ T40] audit: type=1400 audit(5747349260.112:89632): avc: denied { write } for pid=5553 comm="syz.6.8324" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 678.224046][ T5566] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 678.228894][ T5566] block device autoloading is deprecated and will be removed. [ 678.235762][ T5559] IPVS: using max 28 ests per chain, 67200 per kthread [ 678.310136][ T5580] openvswitch: netlink: IPv4 frag type 36 is out of range max 2 [ 678.560140][ T40] audit: type=1400 audit(5747349260.440:89633): avc: denied { append } for pid=5603 comm="syz.6.8336" name="pfkey" dev="proc" ino=4026534578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 678.570210][ T40] audit: type=1400 audit(5747349260.440:89634): avc: denied { map } for pid=5603 comm="syz.6.8336" path="/proc/194/net/pfkey" dev="proc" ino=4026534578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 678.603585][ T5607] __nla_validate_parse: 2 callbacks suppressed [ 678.603597][ T5607] netlink: 216 bytes leftover after parsing attributes in process `syz.6.8337'. [ 678.632158][ T5607] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8337'. [ 678.636558][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.797069][ T5611] netlink: 'syz.6.8338': attribute type 4 has an invalid length. [ 678.808800][ T5611] netlink: 'syz.6.8338': attribute type 4 has an invalid length. [ 678.900467][ T5617] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8340'. [ 678.946184][ T40] audit: type=1400 audit(5747349260.795:89635): avc: denied { module_load } for pid=5619 comm="syz.6.8341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 679.352751][ T5639] overlayfs: conflicting options: userxattr,metacopy=on [ 679.355603][ T5639] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 679.446598][ T24] usb 11-1: new high-speed USB device number 61 using dummy_hcd [ 679.544720][ T5981] Bluetooth: hci1: command 0x0c1a tx timeout [ 679.619200][ T24] usb 11-1: config index 0 descriptor too short (expected 8192, got 36) [ 679.622764][ T24] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.627323][ T24] usb 11-1: config 0 has no interfaces? [ 679.629739][ T24] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 679.633778][ T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.639891][ T24] usb 11-1: config 0 descriptor?? [ 679.704579][ T5656] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 679.793436][ T5667] overlayfs: failed to clone upperpath [ 679.846939][ T5674] netlink: 'syz.1.8349': attribute type 2 has an invalid length. [ 679.849464][ T5674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 679.860343][ T34] usb 11-1: USB disconnect, device number 61 [ 679.892188][ T5681] overlayfs: failed to clone upperpath [ 679.910770][ T5684] netlink: 'syz.1.8350': attribute type 12 has an invalid length. [ 679.914040][ T5684] netlink: 'syz.1.8350': attribute type 29 has an invalid length. [ 679.917111][ T5684] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8350'. [ 679.920997][ T5684] netlink: 59 bytes leftover after parsing attributes in process `syz.1.8350'. [ 679.925898][ T5686] netlink: 'syz.5.8351': attribute type 2 has an invalid length. [ 679.930296][ T5686] overlayfs: failed to clone lowerpath [ 679.942298][ T5686] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8351'. [ 679.954074][ T5686] bridge0: entered promiscuous mode [ 679.958702][ T5686] bridge0: port 3(macvlan2) entered blocking state [ 679.961502][ T5686] bridge0: port 3(macvlan2) entered disabled state [ 679.964357][ T5686] macvlan2: entered allmulticast mode [ 679.966624][ T5686] bridge0: entered allmulticast mode [ 679.975316][ T5686] macvlan2: left allmulticast mode [ 679.977457][ T5686] bridge0: left allmulticast mode [ 679.981267][ T5686] bridge0: left promiscuous mode [ 680.077241][ T5706] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 680.553260][ T5735] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8360'. [ 680.605611][ T5740] binder: BINDER_SET_CONTEXT_MGR already set [ 680.608205][ T5740] binder: 5738:5740 ioctl 4018620d 2000000002c0 returned -16 [ 681.078944][ T5781] netlink: 'syz.5.8371': attribute type 13 has an invalid length. [ 681.214623][ T5798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8376'. [ 681.225316][ T5798] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 681.369948][ T40] audit: type=1400 audit(5747349263.068:89636): avc: denied { mount } for pid=5810 comm="syz.5.8379" name="/" dev="configfs" ino=2156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 681.378935][ T40] audit: type=1400 audit(5747349263.068:89637): avc: denied { search } for pid=5810 comm="syz.5.8379" name="/" dev="configfs" ino=2156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 681.388168][ T40] audit: type=1400 audit(5747349263.068:89638): avc: denied { search } for pid=5810 comm="syz.5.8379" name="/" dev="configfs" ino=2156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 681.397081][ T40] audit: type=1400 audit(5747349263.068:89639): avc: denied { read open } for pid=5810 comm="syz.5.8379" path="/" dev="configfs" ino=2156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 681.406205][ T40] audit: type=1400 audit(5747349263.068:89640): avc: denied { search } for pid=5810 comm="syz.5.8379" name="/" dev="configfs" ino=2156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 681.499830][ T5821] binder: BC_ATTEMPT_ACQUIRE not supported [ 681.502199][ T5821] binder: 5820:5821 ioctl c0306201 200000000300 returned -22 [ 681.718789][ T5836] netlink: 'syz.1.8386': attribute type 2 has an invalid length. [ 681.782750][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8387'. [ 681.785899][ T5840] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 681.789547][ T5840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.856753][ T5840] /dev/nullb0: Can't open blockdev [ 681.859966][ T5848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8387'. [ 681.864027][ T5848] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 681.867687][ T5848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 682.309362][T15275] usb 11-1: new low-speed USB device number 62 using dummy_hcd [ 682.469818][T15275] usb 11-1: Invalid ep0 maxpacket: 16 [ 682.565121][ T5872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 682.597682][ T5875] netlink: 'syz.5.8396': attribute type 1 has an invalid length. [ 682.608764][T15275] usb 11-1: new low-speed USB device number 63 using dummy_hcd [ 682.631855][ T5877] 9p filesystem being mounted at /163/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 682.686114][ T5882] overlayfs: failed to clone upperpath [ 682.714540][ T5884] cgroup: subsys name conflicts with all [ 682.769079][T15275] usb 11-1: Invalid ep0 maxpacket: 16 [ 682.771098][T15275] usb usb11-port1: attempt power cycle [ 682.957598][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 682.957611][ T40] audit: type=1400 audit(5747349264.546:89648): avc: granted { setsecparam } for pid=5897 comm="syz.2.8402" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 683.029793][ T5981] Bluetooth: hci2: Malformed LE Event: 0x1b [ 683.032532][ T5981] Bluetooth: hci2: Malformed LE Event: 0x1b [ 683.118839][ T5916] ubi31: attaching mtd0 [ 683.123326][ T5916] ubi31: scanning is finished [ 683.144882][T15275] usb 11-1: new low-speed USB device number 64 using dummy_hcd [ 683.165494][T15275] usb 11-1: Invalid ep0 maxpacket: 16 [ 683.208968][ T5916] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 683.211597][ T5916] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 683.213877][ T5916] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 683.216154][ T5916] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 683.218549][ T5916] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 683.220678][ T5916] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 683.223149][ T5916] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 474558678 [ 683.226203][ T5916] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 683.229387][ T5919] ubi31: background thread "ubi_bgt31d" started, PID 5919 [ 683.303946][T15275] usb 11-1: new low-speed USB device number 65 using dummy_hcd [ 683.327294][T15275] usb 11-1: Invalid ep0 maxpacket: 16 [ 683.329234][T15275] usb usb11-port1: unable to enumerate USB device [ 683.379180][ T7914] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 683.550044][ T7914] usb 6-1: Using ep0 maxpacket: 8 [ 683.553049][ T7914] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 683.555425][ T7914] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 683.558949][ T7914] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x2A, changing to 0xA [ 683.563090][ T7914] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 21, changing to 8 [ 683.566624][ T7914] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 50475, setting to 1024 [ 683.571067][ T7914] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 683.573478][ T7914] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 683.577195][ T7914] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x2A, changing to 0xA [ 683.580805][ T7914] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 21, changing to 8 [ 683.584281][ T7914] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 50475, setting to 1024 [ 683.589144][ T7914] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 683.591574][ T7914] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 683.595840][ T7914] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x2A, changing to 0xA [ 683.599456][ T7914] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 21, changing to 8 [ 683.602852][ T7914] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 50475, setting to 1024 [ 683.609413][ T7914] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 683.613024][ T7914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.616291][ T7914] usb 6-1: Product: syz [ 683.618094][ T7914] usb 6-1: Manufacturer: syz [ 683.620065][ T7914] usb 6-1: SerialNumber: syz [ 683.843116][ T5910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.846027][ T5910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.860294][ T7914] adutux 6-1:168.0: interrupt endpoints not found [ 683.865079][ T7914] usb 6-1: USB disconnect, device number 48 [ 683.901869][ T5958] 9pnet_fd: Insufficient options for proto=fd [ 684.743954][ T5979] __nla_validate_parse: 3 callbacks suppressed [ 684.743966][ T5979] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.8418'. [ 684.813518][ T5988] openvswitch: netlink: Duplicate or invalid key (type 0). [ 684.816576][ T5988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 685.016540][ T6010] netlink: 'syz.1.8424': attribute type 6 has an invalid length. [ 685.019063][ T6010] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8424'. [ 685.023645][ T6010] bridge0: port 3(syz_tun) entered disabled state [ 685.026241][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.028816][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.353974][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8430'. [ 685.359967][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8430'. [ 685.364369][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8430'. [ 685.368424][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8430'. [ 685.483057][ T6044] netlink: 'syz.1.8432': attribute type 2 has an invalid length. [ 685.486653][ T6044] netlink: 'syz.1.8432': attribute type 1 has an invalid length. [ 685.489863][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8432'. [ 685.510034][ T6044] syzkaller1: entered promiscuous mode [ 685.512354][ T6044] syzkaller1: entered allmulticast mode [ 686.178388][ T6093] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 686.226295][ T6098] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 686.242004][ T6099] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 686.282737][ T6103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8442'. [ 686.321196][ T6103] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 686.328370][ T6105] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 686.397924][ T6105] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 686.420423][ T5981] Bluetooth: hci1: unexpected event for opcode 0x0c46 [ 687.241050][ T6144] netlink: 'syz.5.8448': attribute type 10 has an invalid length. [ 687.244286][ T6138] netlink: 'syz.5.8448': attribute type 10 has an invalid length. [ 687.246818][ T6138] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8448'. [ 687.249591][ T6144] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8448'. [ 687.252942][ T6144] dummy0: entered promiscuous mode [ 687.255374][ T6144] bridge0: port 3(dummy0) entered blocking state [ 687.257576][ T6144] bridge0: port 3(dummy0) entered disabled state [ 687.260038][ T6144] dummy0: entered allmulticast mode [ 687.262880][ T6144] bridge0: port 3(dummy0) entered blocking state [ 687.265240][ T6144] bridge0: port 3(dummy0) entered forwarding state [ 687.309809][ T6153] pim6reg: entered allmulticast mode [ 688.147399][ T1148] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 688.150850][ T1148] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 688.170889][ T6020] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 688.190050][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 688.371854][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 688.391631][ T5981] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 688.394508][ T5981] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 688.540614][ T61] libceph: connect (1)[c::]:6789 error -101 [ 688.542941][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 688.548987][ T6219] ceph: No mds server is up or the cluster is laggy [ 688.587859][ T6228] netlink: 'syz.2.8470': attribute type 1 has an invalid length. [ 688.616499][ T6228] 8021q: adding VLAN 0 to HW filter on device bond4 [ 688.627704][ T6228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6228 comm=syz.2.8470 [ 688.654045][ T6288] CIFS mount error: No usable UNC path provided in device string! [ 688.654045][ T6288] [ 688.658866][ T6288] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 688.667922][ T6228] veth3: entered promiscuous mode [ 688.668493][ T6288] netlink: 'syz.5.8473': attribute type 39 has an invalid length. [ 688.676595][ T6228] bond4: (slave veth3): Enslaving as an active interface with a down link [ 688.709512][ T6228] vlan1: entered allmulticast mode [ 688.712002][ T6228] bond4: entered allmulticast mode [ 688.717256][ T6228] bond4: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 689.025143][ T6358] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 689.028480][ T6358] SELinux: failed to load policy [ 689.350082][ T6432] 9p filesystem being mounted at /91/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 689.560859][ T6444] loop6: detected capacity change from 0 to 7 [ 689.564002][ T6444] Dev loop6: unable to read RDB block 7 [ 689.565772][ T6444] loop6: unable to read partition table [ 689.567655][ T6444] loop6: partition table beyond EOD, truncated [ 689.575889][ T6444] loop_reread_partitions: partition scan of loop6 (ţ被xü—źŃŕ– ) failed (rc=-5) [ 689.592597][ T6453] bond0: Caught tx_queue_len zero misconfig [ 689.660464][ T6465] fuse: Bad value for 'fd' [ 690.000725][ T6539] geneve2: entered promiscuous mode [ 690.002438][ T6539] geneve2: entered allmulticast mode [ 690.011963][ T6539] openvswitch: netlink: IP tunnel dst address not specified [ 690.028595][ T6534] orangefs: client-core tried to read wrong size [ 690.188622][ T6582] __nla_validate_parse: 7 callbacks suppressed [ 690.188633][ T6582] netlink: 536 bytes leftover after parsing attributes in process `syz.5.8523'. [ 690.193737][ T6582] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8523'. [ 690.224425][ T5981] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 690.403262][T15275] usb 11-1: new high-speed USB device number 66 using dummy_hcd [ 690.462048][ T40] audit: type=1400 audit(5747349271.570:89649): avc: denied { accept } for pid=6588 comm="syz.5.8525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 690.507542][ T40] audit: type=1400 audit(5747349271.607:89650): avc: denied { write } for pid=6594 comm="syz.5.8526" path="socket:[196667]" dev="sockfs" ino=196667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 690.574261][T15275] usb 11-1: Using ep0 maxpacket: 16 [ 690.583342][T15275] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.587081][T15275] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.591206][T15275] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 690.595719][T15275] usb 11-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 690.606406][T15275] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.610313][T15275] usb 11-1: config 0 descriptor?? [ 690.927463][ T34] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 691.059231][T15275] hid_parser_main: 73 callbacks suppressed [ 691.059253][T15275] shield 0003:0955:7214.002C: unknown main item tag 0x0 [ 691.063456][T15275] shield 0003:0955:7214.002C: unknown main item tag 0x0 [ 691.067051][T15275] shield 0003:0955:7214.002C: unknown main item tag 0x0 [ 691.069956][T15275] shield 0003:0955:7214.002C: unknown main item tag 0x0 [ 691.072453][T15275] shield 0003:0955:7214.002C: unknown main item tag 0x0 [ 691.086760][T15275] input: HID 0955:7214 Haptics as /devices/virtual/input/input93 [ 691.099409][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 691.102295][ T34] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 691.112369][ T34] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 691.116120][ T34] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 691.127913][ T34] usb 6-1: Product: syz [ 691.129548][ T34] usb 6-1: Manufacturer: syz [ 691.131542][T15275] shield 0003:0955:7214.002C: Registered Thunderstrike controller [ 691.134192][T15275] shield 0003:0955:7214.002C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 691.137937][ T34] usb 6-1: SerialNumber: syz [ 691.141024][ T34] usb 6-1: config 0 descriptor?? [ 691.144223][ T6603] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 691.200173][ T5978] Bluetooth: hci2: Malformed LE Event: 0x1d [ 691.272358][ T6574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.275438][ T6574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.279548][ T6574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.283012][ T6574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.298441][ T34] shield 0003:0955:7214.002C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 691.298559][ T61] usb 11-1: USB disconnect, device number 66 [ 691.307572][ T34] shield 0003:0955:7214.002C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 691.313775][ T34] shield 0003:0955:7214.002C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 691.372048][ T9] usb 6-1: USB disconnect, device number 49 [ 691.392414][ T40] audit: type=1400 audit(5747349272.439:89651): avc: denied { setattr } for pid=6681 comm="syz.2.8535" name="SCTPv6" dev="sockfs" ino=196726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 691.499010][ T5978] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 691.700540][ T61] usb 11-1: new high-speed USB device number 67 using dummy_hcd [ 691.891152][ T61] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 691.895372][ T61] usb 11-1: config 0 interface 0 has no altsetting 0 [ 691.900876][ T61] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 691.904712][ T61] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 691.908464][ T61] usb 11-1: Product: syz [ 691.910352][ T61] usb 11-1: Manufacturer: syz [ 691.913036][ T61] usb 11-1: SerialNumber: syz [ 691.916101][ T61] usb 11-1: config 0 descriptor?? [ 691.925869][ T61] usb 11-1: selecting invalid altsetting 0 [ 692.143956][ T6670] sp0: Synchronizing with TNC [ 692.151366][ T6670] binder: 6669:6670 ioctl c0306201 2000000003c0 returned -14 [ 692.154602][ T6670] binder: BINDER_SET_CONTEXT_MGR already set [ 692.159278][ T6670] binder: 6669:6670 ioctl 4018620d 200000000100 returned -16 [ 692.165355][ T6670] binder: BINDER_SET_CONTEXT_MGR already set [ 692.167560][ T6670] binder: 6669:6670 ioctl 4018620d 2000000002c0 returned -16 [ 692.194465][ T61] Process accounting resumed [ 692.214250][ T6777] Process accounting resumed [ 692.274861][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 692.303976][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8543'. [ 692.341769][ T6786] netlink: 'syz.5.8544': attribute type 3 has an invalid length. [ 692.462155][ T6793] : entered promiscuous mode [ 692.465323][ T6793] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8547'. [ 692.470089][ T6793] trusted_key: encrypted_key: insufficient parameters specified [ 692.507405][ T6798] netlink: 'syz.5.8548': attribute type 2 has an invalid length. [ 692.516164][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.519407][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.522886][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.526028][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.529152][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.532545][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.535927][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.539091][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.543768][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.545717][ T6669] [U] č [ 692.546870][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.551065][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.558017][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.561092][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.564311][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.567291][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.570515][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.574936][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.578195][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.581391][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.584767][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.590041][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.592419][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.595298][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.598810][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.604718][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.608362][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.611551][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.616545][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.619719][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.622904][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.628038][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.631344][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.634678][ T5978] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 692.636059][ T1461] usb 11-1: USB disconnect, device number 67 [ 692.718981][ T6830] xfs: Unknown parameter 'usrquota' [ 692.720948][ T6831] xfs: Unknown parameter 'usrquota' [ 693.037096][ T6858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=6858 comm=syz.2.8560 [ 693.364893][ T1461] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 693.538993][ T1461] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.543290][ T1461] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.547062][ T1461] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 693.551884][ T1461] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 693.555412][ T1461] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.562137][ T1461] usb 6-1: config 0 descriptor?? [ 694.002132][ T1461] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 694.116383][ T6918] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8573'. [ 694.275079][ T6877] comedi comedi2: reset error (fatal) [ 694.280011][ T1461] usb 6-1: USB disconnect, device number 50 [ 695.079970][ T7041] cgroup: Need name or subsystem set [ 695.224305][ T7054] openvswitch: netlink: Key type 16144 is out of range max 32 [ 695.268559][ T7054] alle: renamed from lo (while UP) [ 695.308712][ T7059] random: crng reseeded on system resumption [ 695.376830][ T7063] ip6tnl0: Caught tx_queue_len zero misconfig [ 695.583552][ T1487] IPVS: starting estimator thread 0... [ 695.646864][ T7078] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8597'. [ 695.675664][ T7080] IPVS: using max 42 ests per chain, 100800 per kthread [ 695.691438][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8598'. [ 695.947584][ T40] audit: type=1400 audit(5747349276.695:89652): avc: denied { write } for pid=7094 comm="syz.1.8600" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 696.068194][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801b500000: rx timeout, send abort [ 696.074555][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801b500c00: rx timeout, send abort [ 696.079136][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801b500000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 696.088420][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801b500c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 696.255320][ T7123] bad cache= option: none [ 696.255320][ T7123] [ 696.258058][ T7123] CIFS: VFS: bad cache= option: none [ 696.437764][ T7138] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 696.478773][ T40] audit: type=1400 audit(5747349277.200:89653): avc: denied { execute } for pid=7145 comm="syz.2.8616" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 696.496708][ T7150] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8617'. [ 696.558122][ T7153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8616'. [ 696.757687][ T7161] overlayfs: failed to clone upperpath [ 696.900553][ T7168] program syz.2.8621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 696.965243][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8622'. [ 696.976899][ T5978] Bluetooth: hci2: Unknown advertising packet type: 0x39 [ 696.976925][ T5978] Bluetooth: hci2: adv larger than maximum supported [ 696.980964][ T5978] Bluetooth: hci2: Malformed LE Event: 0x0d [ 697.038173][ T7186] 9p: Unknown access argument 18446744073709551615: -34 [ 697.338653][ T7200] mac80211_hwsim hwsim72 wlan1: entered allmulticast mode [ 697.354892][ T7200] bridge_slave_0: left allmulticast mode [ 697.356689][ T7200] bridge_slave_0: left promiscuous mode [ 697.358799][ T7200] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.364976][ T7200] bridge_slave_1: left allmulticast mode [ 697.367325][ T7200] bridge_slave_1: left promiscuous mode [ 697.369800][ T7200] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.385865][ T7200] bond0: (slave bond_slave_0): Releasing backup interface [ 697.431335][ T7200] bond_slave_0: left allmulticast mode [ 697.436958][ T7209] netlink: zone id is out of range [ 697.437043][ T7200] bond0: (slave bond_slave_1): Releasing backup interface [ 697.439551][ T7209] netlink: zone id is out of range [ 697.443251][ T7209] netlink: zone id is out of range [ 697.445319][ T7209] netlink: zone id is out of range [ 697.447426][ T7209] netlink: zone id is out of range [ 697.449791][ T7209] netlink: zone id is out of range [ 697.451829][ T7209] netlink: zone id is out of range [ 697.453760][ T7209] netlink: zone id is out of range [ 697.455592][ T7209] netlink: del zone limit has 4 unknown bytes [ 697.458426][ T7209] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8630'. [ 697.482498][ T7200] bond_slave_1: left allmulticast mode [ 697.490364][ T7200] team0: Port device team_slave_1 removed [ 697.493629][ T7200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 697.496052][ T7200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 697.499342][ T7200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.501379][ T7200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 697.511603][ T7200] bond4: (slave veth3): Releasing active interface [ 698.252633][ T7267] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -6992, delta: 1 [ 698.255476][ T7267] ref_ctr increment failed for inode: 0x978 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888029d9eb80 [ 698.280380][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8634'. [ 698.295756][ T7270] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8635'. [ 698.345727][ T7276] 9p filesystem being mounted at /241/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 698.377019][ T7281] batman_adv: batadv0: Adding interface: dummy0 [ 698.379175][ T7281] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.387569][ T7281] batman_adv: batadv0: Interface activated: dummy0 [ 698.571441][ T7301] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8641'. [ 698.660492][ T7316] overlayfs: failed to clone upperpath [ 698.712638][ T40] audit: type=1400 audit(5747349279.276:89654): avc: denied { associate } for pid=7298 comm="syz.5.8640" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 698.735592][ T7311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8643'. [ 698.796968][ T7311] 9p filesystem being mounted at /307/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 698.803263][ T7311] "syz.2.8643" (7311) uses obsolete ecb(arc4) skcipher [ 699.065437][ T7362] 9pnet: p9_errstr2errno: server reported unknown error ?ăŘnŞ [ 699.065437][ T7362] k‡l [ 699.178281][ T6733] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 699.181098][ T40] audit: type=1400 audit(5747349279.716:89655): avc: denied { bind } for pid=7373 comm="syz.1.8664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 699.184033][ T6733] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 699.197418][ T7381] geneve2: entered promiscuous mode [ 699.199323][ T7381] geneve2: entered allmulticast mode [ 699.203030][ T34] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 699.267953][ T7397] fuse: Bad value for 'fd' [ 699.270520][ T7397] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 699.396101][ T34] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 699.562860][ T7427] netlink: 'syz.5.8680': attribute type 3 has an invalid length. [ 699.569674][ T7429] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$űĚĚULŮvy¸Úآ…DŁřUDŚw}ťzR' [ 699.573398][ T7429] CPU: 1 UID: 0 PID: 7429 Comm: syz.2.8681 Not tainted syzkaller #0 PREEMPT(full) [ 699.573415][ T7429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 699.573422][ T7429] Call Trace: [ 699.573427][ T7429] [ 699.573433][ T7429] dump_stack_lvl+0x16c/0x1f0 [ 699.573468][ T7429] sysfs_warn_dup+0x7f/0xa0 [ 699.573491][ T7429] sysfs_do_create_link_sd+0x124/0x140 [ 699.573508][ T7429] sysfs_create_link+0x61/0xc0 [ 699.573524][ T7429] device_add+0x62c/0x1aa0 [ 699.573544][ T7429] ? __pfx_device_add+0x10/0x10 [ 699.573562][ T7429] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 699.573578][ T7429] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 699.573597][ T7429] wiphy_register+0x1df4/0x29f0 [ 699.573613][ T7429] ? netdev_run_todo+0x864/0x1320 [ 699.573628][ T7429] ? __dev_printk+0x1d0/0x270 [ 699.573646][ T7429] ? __pfx_wiphy_register+0x10/0x10 [ 699.573667][ T7429] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 699.573686][ T7429] ieee80211_register_hw+0x2546/0x4120 [ 699.573708][ T7429] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 699.573726][ T7429] ? find_held_lock+0x2b/0x80 [ 699.573741][ T7429] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 699.573754][ T7429] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 699.573768][ T7429] ? __hrtimer_setup+0x176/0x280 [ 699.573783][ T7429] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 699.573809][ T7429] ? trace_kmalloc+0x2b/0xd0 [ 699.573823][ T7429] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 699.573836][ T7429] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 699.573852][ T7429] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 699.573870][ T7429] ? __asan_memcpy+0x3c/0x60 [ 699.573890][ T7429] hwsim_new_radio_nl+0xb51/0x12c0 [ 699.573909][ T7429] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 699.573933][ T7429] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 699.573951][ T7429] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 699.573973][ T7429] genl_family_rcv_msg_doit+0x209/0x2f0 [ 699.573992][ T7429] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 699.574014][ T7429] ? bpf_lsm_capable+0x9/0x10 [ 699.574031][ T7429] ? security_capable+0x7e/0x260 [ 699.574046][ T7429] ? ns_capable+0xd7/0x110 [ 699.574061][ T7429] genl_rcv_msg+0x55c/0x800 [ 699.574080][ T7429] ? __pfx_genl_rcv_msg+0x10/0x10 [ 699.574098][ T7429] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 699.574117][ T7429] ? __lock_acquire+0x62e/0x1ce0 [ 699.574137][ T7429] netlink_rcv_skb+0x155/0x420 [ 699.574153][ T7429] ? __pfx_genl_rcv_msg+0x10/0x10 [ 699.574170][ T7429] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 699.574192][ T7429] ? netlink_deliver_tap+0x1ae/0xd30 [ 699.574204][ T7429] ? selinux_netlink_send+0x578/0x830 [ 699.574220][ T7429] ? is_vmalloc_addr+0x86/0xa0 [ 699.574233][ T7429] genl_rcv+0x28/0x40 [ 699.574248][ T7429] netlink_unicast+0x5aa/0x870 [ 699.574271][ T7429] ? __pfx_netlink_unicast+0x10/0x10 [ 699.574289][ T7429] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 699.574310][ T7429] netlink_sendmsg+0x8d1/0xdd0 [ 699.574329][ T7429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.574352][ T7429] ____sys_sendmsg+0xa98/0xc70 [ 699.574371][ T7429] ? copy_msghdr_from_user+0x10a/0x160 [ 699.574386][ T7429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 699.574407][ T7429] ? __pfx_futex_wake_mark+0x10/0x10 [ 699.574422][ T7429] ___sys_sendmsg+0x134/0x1d0 [ 699.574438][ T7429] ? __pfx____sys_sendmsg+0x10/0x10 [ 699.574472][ T7429] __sys_sendmsg+0x16d/0x220 [ 699.574486][ T7429] ? __pfx___sys_sendmsg+0x10/0x10 [ 699.574500][ T7429] ? __x64_sys_futex+0x1e0/0x4c0 [ 699.574519][ T7429] do_syscall_64+0xcd/0x4e0 [ 699.574541][ T7429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.574590][ T7429] RIP: 0033:0x7faf7fb8eba9 [ 699.574605][ T7429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 699.574617][ T7429] RSP: 002b:00007faf80ab9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 699.574630][ T7429] RAX: ffffffffffffffda RBX: 00007faf7fdd5fa0 RCX: 00007faf7fb8eba9 [ 699.574638][ T7429] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 699.574646][ T7429] RBP: 00007faf7fc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 699.574654][ T7429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.574661][ T7429] R13: 00007faf7fdd6038 R14: 00007faf7fdd5fa0 R15: 00007ffec75c7e98 [ 699.574677][ T7429] [ 699.629717][ T40] audit: type=1400 audit(5747349280.137:89656): avc: denied { mounton } for pid=7428 comm="syz.2.8681" path="/309/file0" dev="tmpfs" ino=1661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 699.629837][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.632284][ T7435] fuse: Unknown parameter '' [ 699.706335][ T1461] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 699.708762][ T34] usb 6-1: new low-speed USB device number 51 using dummy_hcd [ 699.732306][ T40] audit: type=1400 audit(5747349280.240:89657): avc: denied { append } for pid=7428 comm="syz.2.8681" name="file0" dev="tmpfs" ino=1661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 699.876560][ T34] usb 6-1: device descriptor read/64, error -71 [ 700.143630][ T34] usb 6-1: new low-speed USB device number 52 using dummy_hcd [ 700.157265][ T7477] netlink: 'syz.6.8694': attribute type 1 has an invalid length. [ 700.291390][ T7483] netlink: 'syz.2.8697': attribute type 1 has an invalid length. [ 700.295405][ T34] usb 6-1: device descriptor read/64, error -71 [ 700.411672][ T34] usb usb6-port1: attempt power cycle [ 700.523300][ T5978] Bluetooth: hci0: Unknown advertising packet type: 0x39 [ 700.523329][ T5978] Bluetooth: hci0: Malformed LE Event: 0x0d [ 700.573924][ T7501] fuse: Bad value for 'fd' [ 700.575786][ T40] audit: type=1326 audit(5747349281.025:89658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.6.8702" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242f58eba9 code=0x50000 [ 700.585550][ T40] audit: type=1326 audit(5747349281.025:89659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.6.8702" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242f58eba9 code=0x50000 [ 700.596430][ T40] audit: type=1326 audit(5747349281.025:89660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.6.8702" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242f58eba9 code=0x50000 [ 700.604789][ T40] audit: type=1326 audit(5747349281.025:89661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.6.8702" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242f58eba9 code=0x50000 [ 700.679726][ T7514] net_ratelimit: 20 callbacks suppressed [ 700.679738][ T7514] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 700.796096][ T34] usb 6-1: new low-speed USB device number 53 using dummy_hcd [ 700.818039][ T34] usb 6-1: device descriptor read/8, error -71 [ 700.868099][ T5978] Bluetooth: hci1: Unknown advertising packet type: 0x39 [ 700.868130][ T5978] Bluetooth: hci1: Malformed LE Event: 0x0d [ 700.986711][ T7532] netlink: 'syz.5.8712': attribute type 1 has an invalid length. [ 701.095358][ T34] usb 6-1: new low-speed USB device number 54 using dummy_hcd [ 701.117665][ T34] usb 6-1: device descriptor read/8, error -71 [ 701.170165][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 701.235368][ T34] usb usb6-port1: unable to enumerate USB device [ 701.236189][ T7549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=7549 comm=syz.2.8717 [ 701.291183][ T7558] openvswitch: netlink: IPv4 tunnel dst address is zero [ 701.353951][ T7567] __nla_validate_parse: 17 callbacks suppressed [ 701.353962][ T7567] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8721'. [ 701.518133][ T7602] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 701.555830][ T7605] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 701.558799][ T7605] overlayfs: failed to set xattr on upper [ 701.561242][ T7605] overlayfs: ...falling back to redirect_dir=nofollow. [ 701.564158][ T7605] overlayfs: ...falling back to metacopy=off. [ 701.567000][ T7605] overlayfs: ...falling back to index=off. [ 701.569660][ T7605] overlayfs: ...falling back to uuid=null. [ 701.618404][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 701.618424][ T40] audit: type=1400 audit(5747349281.998:89678): avc: denied { setopt } for pid=7606 comm="syz.5.8727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 701.862693][ T7627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 701.909969][ T1148] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 701.913431][ T1148] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.002008][ T1148] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.006290][ T1148] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.075273][ T1148] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.078628][ T1148] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.147034][ T7641] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8740'. [ 702.163147][ T1148] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.166515][ T1148] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.174391][ T5981] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 702.182195][ T5981] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 702.187538][ T5981] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 702.191993][ T5981] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 702.195531][ T5981] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 702.364084][ T7642] chnl_net:caif_netlink_parms(): no params data found [ 702.464415][ T5978] Bluetooth: hci1: unexpected event for opcode 0x1804 [ 702.613259][ T7850] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.8746'. [ 702.616533][ T7850] netlink: zone id is out of range [ 702.618573][ T7850] netlink: get zone limit has 8 unknown bytes [ 702.815364][ T5978] Bluetooth: hci1: Unknown advertising packet type: 0x39 [ 702.815384][ T5978] Bluetooth: hci1: Malformed LE Event: 0x0d [ 702.967531][ T7882] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8752'. [ 703.140507][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 703.170774][ T1148] bond0 (unregistering): left allmulticast mode [ 703.174690][ T1148] bond0 (unregistering): Released all slaves [ 703.183222][ T1148] bond1 (unregistering): Released all slaves [ 703.189618][ T1148] bond2 (unregistering): Released all slaves [ 703.308795][ T1148] bond3 (unregistering): Released all slaves [ 703.441080][ T1148] bond4 (unregistering): Released all slaves [ 703.513992][ T7642] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.517206][ T7642] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.520062][ T7642] bridge_slave_0: entered allmulticast mode [ 703.524057][ T7642] bridge_slave_0: entered promiscuous mode [ 703.527983][ T7642] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.530775][ T7642] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.540633][ T7642] bridge_slave_1: entered allmulticast mode [ 703.545501][ T7642] bridge_slave_1: entered promiscuous mode [ 703.605672][T10392] IPVS: starting estimator thread 0... [ 703.639143][ T7642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.647196][ T7642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.727005][ T8101] IPVS: using max 26 ests per chain, 62400 per kthread [ 703.735830][ T7642] team0: Port device team_slave_0 added [ 703.741283][ T7642] team0: Port device team_slave_1 added [ 703.808617][ T8376] fuse: Bad value for 'group_id' [ 703.811887][ T8376] fuse: Bad value for 'group_id' [ 703.846659][ T7642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.849658][ T7642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.861184][ T7642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.867699][ T7642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.870749][ T7642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.882683][ T7642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.969183][ T7642] hsr_slave_0: entered promiscuous mode [ 703.972929][ T7642] hsr_slave_1: entered promiscuous mode [ 703.975209][ T7642] debugfs: 'hsr0' already exists in 'hsr' [ 703.977079][ T7642] Cannot create hsr debugfs directory [ 704.063037][ T8552] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8760'. [ 704.069496][ T8552] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.106304][ T8682] netlink: 'syz.1.8761': attribute type 3 has an invalid length. [ 704.162452][ T8747] netlink: 'syz.1.8762': attribute type 6 has an invalid length. [ 704.165583][ T8747] netlink: 'syz.1.8762': attribute type 7 has an invalid length. [ 704.168821][ T8747] netlink: 'syz.1.8762': attribute type 8 has an invalid length. [ 704.212669][ T1148] hsr_slave_0: left promiscuous mode [ 704.216234][ T1148] hsr_slave_1: left promiscuous mode [ 704.219128][ T1148] batman_adv: batadv0: Interface deactivated: dummy0 [ 704.221832][ T1148] batman_adv: batadv0: Removing interface: dummy0 [ 704.276346][ T1148] veth1_macvtap: left promiscuous mode [ 704.278210][ T1148] veth0_macvtap: left promiscuous mode [ 704.280464][ T1148] veth1_vlan: left promiscuous mode [ 704.282620][ T1148] veth0_vlan: left promiscuous mode [ 704.370730][ T8767] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 704.414141][ T1148] pim6reg (unregistering): left allmulticast mode [ 704.439149][ T5978] Bluetooth: hci2: command tx timeout [ 704.893598][ T8785] netlink: 'syz.6.8767': attribute type 10 has an invalid length. [ 704.893808][ T8786] netlink: 'syz.6.8767': attribute type 10 has an invalid length. [ 706.356341][ T8785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.361151][ T8785] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 706.413406][ T40] audit: type=1326 audit(5747349286.487:89679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.5.8771" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07bd58eba9 code=0x0 [ 706.644622][ T5978] Bluetooth: hci2: command tx timeout [ 706.684894][ T8830] Bluetooth: MGMT ver 1.23 [ 706.957373][ T1148] IPVS: stop unused estimator thread 0... [ 706.991669][ T8864] IPv6: sit1: Disabled Multicast RS [ 706.993840][ T8864] sit1: entered allmulticast mode [ 707.060502][ T7642] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 707.068715][ T7642] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 707.076036][ T7642] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 707.082257][ T7642] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 707.135085][ T7642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.146239][ T7642] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.157104][ T6712] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.160398][ T6712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.175948][T17452] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.179076][T17452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.362156][ T7642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 707.396896][ T7642] veth0_vlan: entered promiscuous mode [ 707.402751][ T7642] veth1_vlan: entered promiscuous mode [ 707.423514][ T7642] veth0_macvtap: entered promiscuous mode [ 707.434469][ T7642] veth1_macvtap: entered promiscuous mode [ 707.444811][ T7642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.454099][ T7642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.466897][ T6733] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.471309][ T8904] could not allocate digest TFM handle cryptd(blake2b-160) [ 707.472315][ T8922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8789'. [ 707.476949][ T8922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8789'. [ 707.481586][ T6733] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.485148][ T6733] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.492578][T17439] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.496015][ T8922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8789'. [ 707.501941][ T8922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8789'. [ 707.515599][ T5978] Bluetooth: hci0: Unknown advertising packet type: 0x39 [ 707.515618][ T5978] Bluetooth: hci0: Malformed LE Event: 0x0d [ 707.549816][ T8938] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8793'. [ 707.560045][ T40] audit: type=1400 audit(5747349287.553:89680): avc: denied { setattr } for pid=8937 comm="syz.6.8793" path="socket:[199999]" dev="sockfs" ino=199999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 707.583187][ T8981] 9p filesystem being mounted at /308/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 707.583874][T17452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.590763][T17452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.616348][T17452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.619292][T17452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.636450][ T8995] "syz.5.8794" (8995) uses obsolete ecb(arc4) skcipher [ 707.679155][ T9001] bond0: (slave batadv0): Releasing backup interface [ 707.699338][ T8981] sctp: [Deprecated]: syz.5.8794 (pid 8981) Use of int in max_burst socket option. [ 707.699338][ T8981] Use struct sctp_assoc_value instead [ 707.713599][ T9006] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.8735'. [ 707.717357][ T9001] bridge_slave_0: left allmulticast mode [ 707.720507][ T9001] bridge_slave_0: left promiscuous mode [ 707.722931][ T9001] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.731564][ T9001] bridge_slave_1: left allmulticast mode [ 707.733963][ T9001] bridge_slave_1: left promiscuous mode [ 707.737586][ T9001] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.748003][ T9001] bond0: (slave bond_slave_0): Releasing backup interface [ 707.779310][ T9001] bond0: (slave bond_slave_1): Releasing backup interface [ 707.804667][ T9015] devpts: Bad value for 'max' [ 707.819074][ T9001] team0: Port device team_slave_0 removed [ 707.826164][ T9001] team0: Port device team_slave_1 removed [ 707.829601][ T9001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.833107][ T9001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.837575][ T9001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.840737][ T9001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.862807][ T9013] team0: Mode changed to "broadcast" [ 707.868313][ T9007] vlan0: entered promiscuous mode [ 707.882420][ T9007] team0: Port device vlan0 added [ 707.887648][ T61] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 707.894464][ T9001] tipc: Started in network mode [ 707.899573][ T9001] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 707.902689][ T9001] tipc: Enabled bearer , priority 0 [ 707.947558][ T9020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 707.955686][ T5978] Bluetooth: hci0: Malformed LE Event: 0x0b [ 708.166541][ T5978] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 708.250083][ T9086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48656 sclass=netlink_route_socket pid=9086 comm=syz.6.8813 [ 708.312058][ T9093] [U] ^R [ 708.331703][ T9095] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 708.339169][ T9095] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 708.414967][ T9097] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 708.419725][ T9097] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 708.500666][ T5978] Bluetooth: hci2: Unknown advertising packet type: 0x39 [ 708.500714][ T5978] Bluetooth: hci2: Malformed LE Event: 0x0d [ 708.502916][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8822'. [ 708.517348][ T9111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8822'. [ 708.519579][ T9112] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 708.571905][T23449] syz_tun (unregistering): left allmulticast mode [ 708.573984][T23449] syz_tun (unregistering): left promiscuous mode [ 708.576029][T23449] bridge0: port 3(syz_tun) entered disabled state [ 708.661392][ T9133] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8827'. [ 708.678018][ T9131] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 708.824030][ T9145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8830'. [ 708.872220][ T9145] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 708.880663][ T5978] Bluetooth: hci2: command tx timeout [ 708.965079][T10392] tipc: Node number set to 11578026 [ 708.966343][ T6058] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 708.987121][ T9248] 9p filesystem being mounted at /313/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 709.109668][ T5981] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 709.115909][ T5981] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 709.121819][ T5981] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 709.128139][ T5981] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 709.132037][ T5981] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 709.357029][ T9291] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 709.359236][ T9291] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 709.377708][ T9291] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 709.379852][ T9291] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 709.382724][ T9291] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 709.395668][ T9291] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 709.400404][ T9291] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 709.402696][ T9291] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 709.406551][ T9291] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 709.423498][ T9305] netlink: 'syz.0.8837': attribute type 178 has an invalid length. [ 709.500120][ T9301] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 709.508190][ T9301] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 709.512166][ T9301] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 709.522060][ T9301] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 709.528794][ T9255] chnl_net:caif_netlink_parms(): no params data found [ 709.804775][ T9255] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.807530][ T9255] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.814279][ T9255] bridge_slave_0: entered allmulticast mode [ 709.818902][ T9255] bridge_slave_0: entered promiscuous mode [ 709.828615][ T9580] 8021q: VLANs not supported on ip_vti0 [ 709.836422][ T9255] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.838742][ T9255] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.861689][ T9255] bridge_slave_1: entered allmulticast mode [ 709.875227][ T9255] bridge_slave_1: entered promiscuous mode [ 709.995095][ T9255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.000779][ T9255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.007075][ T9708] mac80211_hwsim hwsim81 wlan1: entered promiscuous mode [ 710.009294][ T9708] mac80211_hwsim hwsim81 wlan1: entered allmulticast mode [ 710.092988][ T9708] netlink: 'syz.6.8852': attribute type 10 has an invalid length. [ 710.094976][ T9255] team0: Port device team_slave_0 added [ 710.145180][ T9708] mac80211_hwsim hwsim81 wlan1: left promiscuous mode [ 710.147424][ T9708] mac80211_hwsim hwsim81 wlan1: left allmulticast mode [ 710.156283][ T9708] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 710.160299][ T9255] team0: Port device team_slave_1 added [ 710.244449][ T9255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.246792][ T9255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.254982][ T9255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.260681][ T9255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.263205][ T9255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.274234][ T9255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.288155][T10002] wg1: entered promiscuous mode [ 710.291030][T10002] wg1: entered allmulticast mode [ 710.332749][T10088] kAFS: No cell specified [ 710.371177][ T9255] hsr_slave_0: entered promiscuous mode [ 710.374388][ T9255] hsr_slave_1: entered promiscuous mode [ 710.380748][ T9255] debugfs: 'hsr0' already exists in 'hsr' [ 710.384760][ T9255] Cannot create hsr debugfs directory [ 710.443143][T10234] F2FS-fs: Conflicting test_dummy_encryption options [ 710.486407][T10288] netlink: 'syz.6.8860': attribute type 10 has an invalid length. [ 710.492459][T10288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.497680][T10288] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 710.500818][T10288] netlink: 'syz.6.8860': attribute type 10 has an invalid length. [ 710.533003][T10288] batadv0: entered promiscuous mode [ 710.535309][T10288] batadv0: entered allmulticast mode [ 710.540938][T10288] bond0: (slave batadv0): Releasing backup interface [ 710.563503][T10288] bridge0: port 1(batadv0) entered blocking state [ 710.566309][T10288] bridge0: port 1(batadv0) entered disabled state [ 710.751046][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 710.857377][T17457] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 710.860612][T17457] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 711.026934][ T9255] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 711.034006][ T9255] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 711.040978][ T9255] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 711.048693][ T9255] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 711.102061][ T9255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.119033][ T9255] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.127595][T17439] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.130681][T17439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.144757][T17457] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.147827][T17457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.332829][ T9255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.535535][ T9255] veth0_vlan: entered promiscuous mode [ 711.544108][ T9255] veth1_vlan: entered promiscuous mode [ 711.550509][T10465] netlink: 'syz.6.8872': attribute type 10 has an invalid length. [ 711.555089][T10465] team0: Device dummy0 is up. Set it down before adding it as a team port [ 711.568427][ T9255] veth0_macvtap: entered promiscuous mode [ 711.572463][ T9255] veth1_macvtap: entered promiscuous mode [ 711.582772][ T9255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.589408][ T9255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.596595][T17457] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.599766][T17457] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.606511][T17457] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.609706][T17457] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.636019][T10471] 9p filesystem being mounted at /191/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 711.653562][T17461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.656063][T17461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.677132][T17461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.680072][T17461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.692118][ T5978] Bluetooth: hci3: command 0x041b tx timeout [ 711.692189][ T5981] Bluetooth: hci2: command 0x0c1a tx timeout [ 711.692281][T32717] Bluetooth: hci1: command 0x0c1a tx timeout [ 711.879380][T10499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10499 comm=syz.6.8878 [ 712.128598][T10513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10513 comm=syz.6.8880 [ 712.222563][T10520] tunl0: Caught tx_queue_len zero misconfig [ 712.236495][ T1487] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 712.299086][T10529] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 712.305165][T10522] overlayfs: failed to clone upperpath [ 713.093782][T10556] __nla_validate_parse: 10 callbacks suppressed [ 713.093793][T10556] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8889'. [ 713.205674][T10573] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8894'. [ 713.215857][T10573] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8894'. [ 713.218976][T10573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.301108][T10573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.490761][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 713.535898][T10585] overlayfs: conflicting options: nfs_export=on,index=off [ 713.618923][T10591] netlink: 'syz.5.8898': attribute type 1 has an invalid length. [ 713.634515][T10591] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10591 comm=syz.5.8898 [ 713.665391][T10628] netlink: 'syz.5.8899': attribute type 4 has an invalid length. [ 713.666034][T10629] netlink: 'syz.5.8899': attribute type 4 has an invalid length. [ 713.915579][T32717] Bluetooth: hci2: command 0x0c1a tx timeout [ 713.926456][T32717] Bluetooth: hci3: command 0x041b tx timeout [ 714.246721][T10657] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8906'. [ 714.287978][T10660] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 714.410529][T10670] fuse: Bad value for 'fd' [ 714.428237][T10504] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 714.428412][T32717] Bluetooth: hci1: command 0x0c1a tx timeout [ 714.463893][T10673] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 714.474084][ T40] audit: type=1400 audit(5747349294.026:89681): avc: denied { mount } for pid=10671 comm="syz.6.8910" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 714.631097][T10679] ./bus: Can't lookup blockdev [ 714.727218][T10687] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8915'. [ 714.999984][ T40] audit: type=1804 audit(5747349294.512:89682): pid=10705 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.8921" name="file0" dev="tmpfs" ino=1965 res=1 errno=0 [ 715.008271][ T40] audit: type=1800 audit(5747349294.512:89683): pid=10705 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.8921" name="file0" dev="tmpfs" ino=1965 res=0 errno=0 [ 715.175821][T10504] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 715.178052][T10504] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 715.180155][T10504] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 715.320377][ T40] audit: type=1400 audit(5747349294.821:89684): avc: denied { bind } for pid=10725 comm="syz.4.8926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 715.364857][T32717] Bluetooth: hci3: unexpected event for opcode 0x0c7d [ 715.813387][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8940'. [ 715.823344][T10784] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 715.879032][T10792] bond3: (slave team0): Releasing active interface [ 715.919313][T10792] dummy0: left allmulticast mode [ 715.921401][T10792] bridge0: port 3(dummy0) entered disabled state [ 715.935364][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8943'. [ 715.936312][T10792] bridge_slave_0: left allmulticast mode [ 715.940244][T10792] bridge_slave_0: left promiscuous mode [ 715.942641][T10792] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.956618][T10792] bridge_slave_1: left allmulticast mode [ 715.959604][T10792] bridge_slave_1: left promiscuous mode [ 715.961461][T10792] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.968560][T10792] bond0: (slave bond_slave_0): Releasing backup interface [ 716.015375][T10792] bond0: (slave bond_slave_1): Releasing backup interface [ 716.075989][T10792] team0: Port device team_slave_0 removed [ 716.085239][T10792] team0: Port device team_slave_1 removed [ 716.088015][T10792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.090606][T10792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.101591][T10792] bond0: (slave wlan1): Releasing backup interface [ 716.131505][T10792] bond3: (slave veth3): Releasing active interface [ 716.132979][T10818] overlay: Unknown parameter 'fsname' [ 716.188298][T10792] bond6: (slave bridge1): Releasing active interface [ 716.267305][ T54] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 716.271274][T10805] team0: Mode changed to "random" [ 716.278867][T10801] bridge0: port 1(batadv0) entered disabled state [ 716.296725][T10801] team0: Port device vlan0 removed [ 716.304513][T10801] bond0: (slave wlan1): Releasing backup interface [ 716.400490][T10810] vlan0: entered promiscuous mode [ 716.404193][T10819] tipc: Enabled bearer , priority 0 [ 716.408468][T17461] tipc: Resetting bearer [ 716.436171][T10832] gfs2: gfs2 mount does not exist [ 716.440267][T10392] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 716.466216][T10832] 9pnet: Could not find request transport: virtioóWA*¨( §—ˇ [ 716.556101][T17447] Bluetooth: hci4: Frame reassembly failed (-84) [ 716.583602][ T40] audit: type=1400 audit(5747349295.999:89685): avc: denied { read } for pid=10846 comm="syz.5.8957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 716.584621][T10848] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 716.595048][T10848] IPv6: NLM_F_CREATE should be set when creating new route [ 716.631597][T10867] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8960'. [ 716.666598][ T5978] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 716.832965][T10892] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8967'. [ 716.993997][T10910] netlink: 'syz.5.8971': attribute type 3 has an invalid length. [ 716.997592][T10910] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.8971'. [ 717.082035][T10922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3350 sclass=netlink_route_socket pid=10922 comm=syz.6.8975 [ 717.091127][T10926] overlayfs: failed to clone upperpath [ 717.189209][ T7560] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 717.280126][T10947] netlink: 'syz.5.8982': attribute type 1 has an invalid length. [ 717.298570][T10947] 8021q: adding VLAN 0 to HW filter on device bond8 [ 717.314161][T10947] bond8: entered allmulticast mode [ 717.336480][ T5978] Bluetooth: hci2: command 0x0c1a tx timeout [ 717.508717][ T55] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 717.591340][T10999] netlink: 'syz.5.8987': attribute type 10 has an invalid length. [ 717.595177][ T5975] tipc: Node number set to 373116199 [ 717.605344][T10999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.610566][T10999] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 717.938895][T16369] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 718.000863][T11020] netlink: 'syz.5.8993': attribute type 1 has an invalid length. [ 718.004204][T11020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.277341][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 718.294931][T11041] netlink: 'syz.6.9000': attribute type 5 has an invalid length. [ 718.461215][T11059] netlink: 'syz.5.9002': attribute type 3 has an invalid length. [ 718.464832][T11060] netlink: 'syz.5.9002': attribute type 3 has an invalid length. [ 718.581618][T11066] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.686929][T11066] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.705131][T32717] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 718.741967][T11068] netlink: 'syz.5.9004': attribute type 4 has an invalid length. [ 718.751672][T11078] __nla_validate_parse: 36 callbacks suppressed [ 718.751691][T11078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9006'. [ 718.752370][T11079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9006'. [ 718.790123][T11066] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.809217][T11079] 8021q: VLANs not supported on gre0 [ 718.905088][T11066] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.088535][T17447] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.098258][ T6714] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.108970][T17447] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.123907][ T6714] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.375445][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9012'. [ 719.574708][T11126] overlayfs: failed to resolve './file0': -2 [ 719.773015][T11141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9020'. [ 719.787360][ T40] audit: type=1326 audit(5747349298.992:89686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.0.9009" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08e38eba9 code=0x7fc00000 [ 719.796692][ T40] audit: type=1326 audit(5747349298.992:89687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.0.9009" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa08e38eba9 code=0x7fc00000 [ 719.805214][ T40] audit: type=1326 audit(5747349298.992:89688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.0.9009" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08e38eba9 code=0x7fc00000 [ 719.812785][ T40] audit: type=1326 audit(5747349298.992:89689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.0.9009" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08e38eba9 code=0x7fc00000 [ 719.817577][ T7642] overlayfs: failed lookup in lower (newroot/20, name='bus', err=-40): overlapping layers [ 719.821169][ T40] audit: type=1326 audit(5747349298.992:89690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.0.9009" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08e38eba9 code=0x7fc00000 [ 719.826403][ T7642] overlayfs: failed lookup in lower (newroot/20, name='bus', err=-40): overlapping layers [ 719.831771][ T40] audit: type=1326 audit(5747349298.992:89691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.0.9009" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08e38eba9 code=0x7fc00000 [ 719.831813][ T40] audit: type=1326 audit(5747349298.992:89692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.0.9009" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08e38eba9 code=0x7fc00000 [ 720.046128][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9025'. [ 720.314022][T11176] bridge2: entered allmulticast mode [ 720.327011][ T5978] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 720.335950][ T5978] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 720.347524][ T5978] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 720.351106][ T5978] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 720.359034][ T5978] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 720.394253][ T6720] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.411487][T11202] 9p filesystem being mounted at /24 supports timestamps until 2106-02-07 (0xffffffff) [ 720.413864][T11204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11204 comm=syz.5.9035 [ 720.424974][T11204] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9035'. [ 720.516311][ T6720] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.641875][ T6720] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.657729][T11187] chnl_net:caif_netlink_parms(): no params data found [ 720.710664][T11442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=11442 comm=syz.4.9044 [ 720.752247][ T6720] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.784450][T11520] gfs2: not a GFS2 filesystem [ 720.810334][T11187] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.812752][T11187] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.815107][T11187] bridge_slave_0: entered allmulticast mode [ 720.817910][T11187] bridge_slave_0: entered promiscuous mode [ 720.824216][T11187] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.826485][T11187] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.828738][T11187] bridge_slave_1: entered allmulticast mode [ 720.832249][T11187] bridge_slave_1: entered promiscuous mode [ 720.917814][T11187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.926867][T11187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.992046][T11187] team0: Port device team_slave_0 added [ 721.002855][T11187] team0: Port device team_slave_1 added [ 721.057926][T32717] Bluetooth: hci1: unexpected event for opcode 0x200c [ 721.117399][T11187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.120504][T11187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.131866][T11187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.148187][T11187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.150551][T11187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.160414][T11187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.177824][T11974] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 721.180727][T11974] overlayfs: missing 'lowerdir' [ 721.250091][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9056'. [ 721.270241][T11187] hsr_slave_0: entered promiscuous mode [ 721.273789][T11187] hsr_slave_1: entered promiscuous mode [ 721.276756][T11187] debugfs: 'hsr0' already exists in 'hsr' [ 721.279144][T11187] Cannot create hsr debugfs directory [ 721.293502][T12123] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.309475][ T6720] bridge_slave_1: left allmulticast mode [ 721.311928][ T6720] bridge_slave_1: left promiscuous mode [ 721.314907][ T6720] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.318680][ T6720] bridge_slave_0: left allmulticast mode [ 721.320442][ T6720] bridge_slave_0: left promiscuous mode [ 721.322252][ T6720] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.392835][ T6720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.418365][ T6720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 722.439456][ T6720] bond0 (unregistering): Released all slaves [ 722.555469][T32717] Bluetooth: hci2: command tx timeout [ 722.569791][ T6720] bond1 (unregistering): Released all slaves [ 722.620438][T12123] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.750012][T12123] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.833290][T12278] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 722.844807][T12123] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.114919][T12412] overlayfs: missing 'lowerdir' [ 723.186584][ T6720] hsr_slave_0: left promiscuous mode [ 723.189579][ T6720] hsr_slave_1: left promiscuous mode [ 723.192434][ T6720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 723.196592][ T6720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.200251][ T6720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 723.203360][ T6720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 723.266121][ T6720] veth1_macvtap: left promiscuous mode [ 723.268071][ T6720] veth0_macvtap: left promiscuous mode [ 723.269929][ T6720] veth1_vlan: left promiscuous mode [ 723.272439][ T6720] veth0_vlan: left promiscuous mode [ 724.388961][ T6720] team0 (unregistering): Port device team_slave_1 removed [ 724.509577][ T6720] team0 (unregistering): Port device team_slave_0 removed [ 724.778176][T32717] Bluetooth: hci2: command tx timeout [ 725.455337][T17437] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.466881][ T1145] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.498701][ T1145] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.505802][ T1145] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.992282][T11187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 726.052647][T11187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 726.057490][T11187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 726.062012][T11187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 726.102226][T11187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.115946][T11187] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.121019][T17442] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.123421][T17442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.130183][T17442] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.132869][T17442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.292758][T11187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.322034][T11187] veth0_vlan: entered promiscuous mode [ 726.327370][T11187] veth1_vlan: entered promiscuous mode [ 726.344692][T11187] veth0_macvtap: entered promiscuous mode [ 726.349133][T11187] veth1_macvtap: entered promiscuous mode [ 726.390412][T11187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.398115][T11187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.407362][T17442] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.410803][T17442] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.414172][T17442] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.418204][T17442] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.457968][T17447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.462410][T17447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.477158][ T6720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.480192][ T6720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.491282][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 727.002194][T32717] Bluetooth: hci2: command tx timeout [ 729.225906][T32717] Bluetooth: hci2: command tx timeout [ 738.105065][T12615] hfs: unable to load iocharset "io#harset" [ 738.183908][T12634] bond0: entered allmulticast mode [ 738.401867][ T40] audit: type=1400 audit(5747349316.407:89693): avc: denied { remount } for pid=12661 comm="syz.5.9084" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 738.418528][T12671] program syz.3.9086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 738.481010][T12679] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 738.483810][T12679] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 738.493965][T12679] vhci_hcd vhci_hcd.0: Device attached [ 738.497011][T12679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9088'. [ 738.502153][T12680] vhci_hcd: connection closed [ 738.502302][T17442] vhci_hcd: stop threads [ 738.506183][T17442] vhci_hcd: release socket [ 738.511080][T17442] vhci_hcd: disconnect device [ 738.556981][T12686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12686 comm=syz.6.9089 [ 738.677049][T12693] overlayfs: failed to clone upperpath [ 738.785419][T12695] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.9091'. [ 739.409759][ T40] audit: type=1400 audit(5747349317.342:89694): avc: denied { ioctl } for pid=12726 comm="syz.3.9099" path="socket:[204515]" dev="sockfs" ino=204515 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 739.502739][ C2] vcan0: j1939_tp_rxtimer: 0xffff88803fbf4c00: rx timeout, send abort [ 739.505451][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88803fbf4c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 739.509341][T12746] netlink: 'syz.5.9104': attribute type 29 has an invalid length. [ 739.556585][T12745] netlink: 248 bytes leftover after parsing attributes in process `syz.3.9103'. [ 739.656063][T12779] netlink: 'syz.6.9112': attribute type 8 has an invalid length. [ 739.851078][T12804] netlink: 'syz.3.9116': attribute type 10 has an invalid length. [ 739.863609][T12804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.868097][T12804] team0: Port device bond0 added [ 739.876687][T12804] batman_adv: batadv0: Adding interface: gretap1 [ 739.878674][T12804] batman_adv: batadv0: Interface activated: gretap1 [ 739.931187][T12814] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 739.933683][T12814] SELinux: failed to load policy [ 740.117818][T12833] netlink: 108 bytes leftover after parsing attributes in process `syz.5.9121'. [ 740.322214][T12849] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.9124'. [ 740.348688][T32717] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 740.716711][T12865] binder: 12864:12865 ioctl c00c620f 2000000004c0 returned -22 [ 740.871666][ T40] audit: type=1400 audit(5747349318.717:89695): avc: denied { setattr } for pid=12877 comm="syz.3.9131" name="SCO" dev="sockfs" ino=203522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 741.368622][T12916] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9141'. [ 741.372537][T12916] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9141'. [ 741.519817][ T40] audit: type=1400 audit(5747349319.316:89696): avc: denied { execute } for pid=12918 comm="syz.5.9142" name="file1" dev="ramfs" ino=203535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 741.529948][ T40] audit: type=1400 audit(5747349319.316:89697): avc: denied { execute_no_trans } for pid=12918 comm="syz.5.9142" path="/file1" dev="ramfs" ino=203535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 741.616679][ T40] audit: type=1400 audit(5747349319.409:89698): avc: denied { accept } for pid=12941 comm="syz.5.9147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 741.642022][T32717] Bluetooth: hci3: unexpected event for opcode 0x2007 [ 741.666658][T12949] netlink: 'syz.4.9150': attribute type 1 has an invalid length. [ 741.750054][T12952] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9151'. [ 741.766411][T12952] : entered promiscuous mode [ 741.861411][T12981] tmpfs: Bad value for 'mpol' [ 741.864286][T12981] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9159'. [ 741.901142][T12986] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9162'. [ 741.937078][T12990] 9pnet_fd: Insufficient options for proto=fd [ 741.977600][T12996] overlayfs: failed to resolve './bus': -2 [ 742.159982][T13021] No control pipe specified [ 742.165158][T13021] overlayfs: failed to clone lowerpath [ 742.232796][T13025] lo: Caught tx_queue_len zero misconfig [ 742.235929][T13025] netlink: 'syz.6.9174': attribute type 1 has an invalid length. [ 742.241227][T13025] netlink: 'syz.6.9174': attribute type 1 has an invalid length. [ 742.273580][T13030] sctp: [Deprecated]: syz.6.9176 (pid 13030) Use of int in max_burst socket option. [ 742.273580][T13030] Use struct sctp_assoc_value instead [ 742.333116][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.335790][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.338079][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.340320][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.342599][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.344964][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.347164][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.349421][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.351621][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.353903][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.356577][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.358759][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.361506][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.363930][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.368638][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.370917][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.373145][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.375451][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.378416][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.381076][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.383564][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.386047][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.389159][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.392195][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.394710][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.397022][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.399690][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.401756][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.403811][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.405903][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.408134][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.411060][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.413108][T13049] smb3: Unknown parameter './binderfs/binder0' [ 742.746479][T32717] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 743.182428][T13141] IPv6: NLM_F_REPLACE set, but no existing node found! [ 743.358642][ T40] audit: type=1400 audit(5747351899.041:89699): avc: denied { getopt } for pid=13144 comm="syz.3.9199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 743.461183][ T40] audit: type=1326 audit(5747351899.134:89700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13148 comm="syz.3.9200" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39e2f8eba9 code=0x0 [ 743.494579][T13163] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13163 comm=syz.6.9204 [ 743.498665][T13163] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=13163 comm=syz.6.9204 [ 743.507763][T13163] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13163 comm=syz.6.9204 [ 743.670813][T13201] overlayfs: failed to clone upperpath [ 743.671524][T13174] netlink: 'syz.3.9206': attribute type 1 has an invalid length. [ 743.674978][T13174] netlink: 'syz.3.9206': attribute type 1 has an invalid length. [ 743.677378][T13174] netlink: 'syz.3.9206': attribute type 4 has an invalid length. [ 743.749001][T13216] ipvlan2: entered promiscuous mode [ 743.752061][T13216] bridge0: port 1(ipvlan2) entered blocking state [ 743.754777][T13216] bridge0: port 1(ipvlan2) entered disabled state [ 743.759275][T13216] ipvlan2: entered allmulticast mode [ 743.761066][T13216] bridge0: entered allmulticast mode [ 743.764387][T13216] ipvlan2: left allmulticast mode [ 743.766422][T13216] bridge0: left allmulticast mode [ 743.857867][T13226] netlink: 'syz.6.9213': attribute type 10 has an invalid length. [ 743.872613][T13226] team0: Device hsr_slave_0 failed to register rx_handler [ 743.929835][T13242] batman_adv: batadv0: Adding interface: dummy0 [ 743.933104][T13242] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.944805][T13242] batman_adv: batadv0: Interface activated: dummy0 [ 743.947238][ T40] audit: type=1400 audit(5747351899.583:89701): avc: denied { setopt } for pid=13244 comm="syz.4.9216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 743.947812][T32717] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 744.066778][T13266] __nla_validate_parse: 10 callbacks suppressed [ 744.066805][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9223'. [ 744.076112][T13266] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 744.082753][T13266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 744.200170][T13279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9226'. [ 744.203508][T13279] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9226'. [ 744.297962][T13290] jfs: Unknown parameter 'usrquota' [ 744.916728][T13317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 744.920425][T13318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 745.000269][ T40] audit: type=1400 audit(5747351900.575:89702): avc: denied { shutdown } for pid=13323 comm="syz.5.9240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 745.204236][ T40] audit: type=1326 audit(5747351900.762:89703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13335 comm="syz.5.9243" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07bd58eba9 code=0x0 [ 745.210253][T13338] netlink: 666 bytes leftover after parsing attributes in process `syz.3.9244'. [ 745.314807][T13352] fuse: Bad value for 'fd' [ 745.319858][ T40] audit: type=1400 audit(5747351900.874:89704): avc: denied { read } for pid=13349 comm="syz.4.9248" name="file0" dev="tmpfs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 745.445205][T13362] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 745.644061][ T40] audit: type=1400 audit(5747351901.174:89705): avc: denied { lock } for pid=13366 comm="syz.6.9251" path="socket:[203772]" dev="sockfs" ino=203772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 745.775420][T13374] netlink: 72 bytes leftover after parsing attributes in process `syz.6.9253'. [ 745.779702][T13374] netlink: 96 bytes leftover after parsing attributes in process `syz.6.9253'. [ 745.848150][T13384] openvswitch: netlink: Missing key (keys=100040, expected=80) [ 745.900393][T13390] netlink: 'syz.6.9256': attribute type 10 has an invalid length. [ 745.912442][T13390] batadv_slave_0: entered allmulticast mode [ 745.928216][T13390] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 746.325538][T13426] IPVS: Unknown mcast interface: rose0 [ 746.663632][ T6720] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.758721][ T6720] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.879377][ T6720] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.970852][ T6720] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.065005][T13460] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9273'. [ 747.142277][T13469] bond1: entered promiscuous mode [ 747.185913][ T5978] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 747.197247][ T5978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 747.207741][ T5978] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 747.210711][ T6720] bridge_slave_1: left allmulticast mode [ 747.212679][ T6720] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.214756][ T5978] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 747.217888][ T5978] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 747.228852][ T40] audit: type=1400 audit(5747351902.661:89706): avc: denied { map } for pid=13527 comm="syz.3.9280" path="/proc/196/pagemap" dev="proc" ino=207927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 747.241031][ T6720] bridge_slave_0: left allmulticast mode [ 747.246145][ T6720] bridge_slave_0: left promiscuous mode [ 747.248547][ T6720] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.275932][T13535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9282'. [ 748.084898][ T6720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.120343][ T6720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.162795][ T6720] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 748.204979][ T6720] bond0 (unregistering): Released all slaves [ 748.344672][ T6720] bond1 (unregistering): Released all slaves [ 748.351606][ T6720] bond2 (unregistering): Released all slaves [ 748.393361][T13556] tls_set_device_offload_rx: netdev not found [ 748.445097][ T6720] : left promiscuous mode [ 748.445620][T13576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9286'. [ 748.468982][T13584] overlayfs: failed to clone upperpath [ 748.551847][ T6720] tipc: Disabling bearer [ 748.572697][ T6720] tipc: Left network mode [ 748.576946][T13508] chnl_net:caif_netlink_parms(): no params data found [ 748.651466][ T40] audit: type=1800 audit(5747351903.989:89707): pid=13637 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.6.9290" name="/newroot/305/file0" dev="tmpfs" ino=1661 res=0 errno=0 [ 748.757533][T13508] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.761619][ T6720] IPVS: stopping master sync thread 6093 ... [ 748.762695][T13508] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.768005][ T6720] IPVS: stopping backup sync thread 29287 ... [ 748.768039][T13508] bridge_slave_0: entered allmulticast mode [ 748.775112][T13508] bridge_slave_0: entered promiscuous mode [ 748.778592][T13508] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.782787][T13508] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.785956][T13508] bridge_slave_1: entered allmulticast mode [ 748.789381][T13508] bridge_slave_1: entered promiscuous mode [ 748.842169][ T6720] ------------[ cut here ]------------ [ 748.844424][ T6720] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 748.848634][ T6720] WARNING: CPU: 0 PID: 6720 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x247/0x850 [ 748.853017][ T6720] Modules linked in: [ 748.857542][ T6720] CPU: 0 UID: 0 PID: 6720 Comm: kworker/u32:29 Not tainted syzkaller #0 PREEMPT(full) [ 748.861932][ T6720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 748.866472][ T6720] Workqueue: netns cleanup_net [ 748.868004][ T6720] RIP: 0010:drv_unassign_vif_chanctx+0x247/0x850 [ 748.870150][ T6720] Code: 74 24 10 48 81 c6 20 01 00 00 48 89 74 24 10 e8 cf cd b9 f6 8b 54 24 04 48 8b 74 24 10 48 c7 c7 c0 aa 08 8d e8 2a 72 78 f6 90 <0f> 0b 90 90 e8 b0 cd b9 f6 4c 89 f2 48 b8 00 00 00 00 00 fc ff df [ 748.878399][ T40] audit: type=1400 audit(5747351904.204:89708): avc: denied { write } for pid=5935 comm="syz-executor" path="pipe:[7198]" dev="pipefs" ino=7198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 748.886773][ T6720] RSP: 0018:ffffc900061275f0 EFLAGS: 00010286 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 748.889399][ T6720] RAX: 0000000000000000 RBX: ffff88803b478d80 RCX: ffffffff817a4388 [ 748.891858][ T6720] RDX: ffff888027d20000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 748.894240][ T6720] RBP: ffff88806a748e40 R08: 0000000000000001 R09: 0000000000000000 [ 748.896699][ T6720] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88803b47aa28 [ 748.899395][ T6720] R13: 0000000000000000 R14: ffff88803b479728 R15: ffff88803b47a9d0 [ 748.902198][ T6720] FS: 0000000000000000(0000) GS:ffff8880d66b2000(0000) knlGS:0000000000000000 [ 748.904990][ T6720] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 748.907093][ T6720] CR2: 0000001b2f063fff CR3: 000000003257a000 CR4: 0000000000352ef0 [ 748.910160][ T6720] Call Trace: [ 748.911273][ T6720] [ 748.912219][ T6720] ieee80211_assign_link_chanctx+0x3f1/0xf00 [ 748.914145][ T6720] __ieee80211_link_release_channel+0x273/0x4b0 [ 748.916107][ T6720] ieee80211_link_release_channel+0x128/0x200 [ 748.917995][ T6720] ? __pfx_ieee80211_uninit+0x10/0x10 [ 748.920267][ T6720] unregister_netdevice_many_notify+0x141c/0x24c0 [ 748.922306][ T6720] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 748.924407][ T6720] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 748.926355][ T6720] ? find_held_lock+0x2b/0x80 [ 748.927840][ T6720] unregister_netdevice_queue+0x305/0x3f0 [ 748.929702][ T6720] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 748.931731][ T6720] _cfg80211_unregister_wdev+0x64b/0x830 [ 748.933482][ T6720] ieee80211_remove_interfaces+0x34e/0x740 [ 748.935327][ T6720] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 748.937295][ T6720] ieee80211_unregister_hw+0x55/0x3a0 [ 748.939040][ T6720] hwsim_exit_net+0x3ac/0x7d0 [ 748.940647][ T6720] ? __pfx_hwsim_exit_net+0x10/0x10 [ 748.942377][ T6720] ? ip_vs_sync_net_cleanup+0x5d/0xb0 [ 748.944064][ T6720] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 748.945923][ T6720] ? __pfx_hwsim_exit_net+0x10/0x10 [ 748.947595][ T6720] ops_undo_list+0x2eb/0xab0 [ 748.949073][ T6720] ? __pfx_ops_undo_list+0x10/0x10 [ 748.950950][ T6720] ? cleanup_net+0x334/0x890 [ 748.953221][ T6720] ? idr_destroy+0x62/0x2e0 [ 748.954724][ T6720] cleanup_net+0x408/0x890 [ 748.956155][ T6720] ? __pfx_cleanup_net+0x10/0x10 [ 748.957747][ T6720] ? rcu_is_watching+0x12/0xc0 [ 748.959299][ T6720] process_one_work+0x9cc/0x1b70 [ 748.960939][ T6720] ? __pfx_process_one_work+0x10/0x10 [ 748.962880][ T6720] ? assign_work+0x1a0/0x250 [ 748.964440][ T6720] worker_thread+0x6c8/0xf10 [ 748.965887][ T6720] ? __pfx_worker_thread+0x10/0x10 [ 748.967440][ T6720] kthread+0x3c2/0x780 [ 748.968789][ T6720] ? __pfx_kthread+0x10/0x10 [ 748.970307][ T6720] ? rcu_is_watching+0x12/0xc0 [ 748.971825][ T6720] ? __pfx_kthread+0x10/0x10 [ 748.973374][ T6720] ret_from_fork+0x56a/0x730 [ 748.974860][ T6720] ? __pfx_kthread+0x10/0x10 [ 748.976672][ T6720] ret_from_fork_asm+0x1a/0x30 [ 748.978770][ T6720] [ 748.979961][ T6720] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 748.982605][ T6720] CPU: 0 UID: 0 PID: 6720 Comm: kworker/u32:29 Not tainted syzkaller #0 PREEMPT(full) [ 748.985764][ T6720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 748.989149][ T6720] Workqueue: netns cleanup_net [ 748.990749][ T6720] Call Trace: [ 748.991801][ T6720] [ 748.992737][ T6720] dump_stack_lvl+0x3d/0x1f0 [ 748.994232][ T6720] vpanic+0x6e8/0x7a0 [ 748.995585][ T6720] ? __pfx_vpanic+0x10/0x10 [ 748.997098][ T6720] ? drv_unassign_vif_chanctx+0x247/0x850 [ 748.998892][ T6720] panic+0xca/0xd0 [ 749.000103][ T6720] ? __pfx_panic+0x10/0x10 [ 749.001504][ T6720] ? check_panic_on_warn+0x1f/0xb0 [ 749.003169][ T6720] check_panic_on_warn+0xab/0xb0 [ 749.004836][ T6720] __warn+0xf6/0x3c0 [ 749.006145][ T6720] ? preempt_schedule_notrace+0x62/0xe0 [ 749.007893][ T6720] ? drv_unassign_vif_chanctx+0x247/0x850 [ 749.009715][ T6720] report_bug+0x3c3/0x580 [ 749.011097][ T6720] ? drv_unassign_vif_chanctx+0x247/0x850 [ 749.012956][ T6720] handle_bug+0x184/0x210 [ 749.014331][ T6720] exc_invalid_op+0x17/0x50 [ 749.015776][ T6720] asm_exc_invalid_op+0x1a/0x20 [ 749.017294][ T6720] RIP: 0010:drv_unassign_vif_chanctx+0x247/0x850 [ 749.019364][ T6720] Code: 74 24 10 48 81 c6 20 01 00 00 48 89 74 24 10 e8 cf cd b9 f6 8b 54 24 04 48 8b 74 24 10 48 c7 c7 c0 aa 08 8d e8 2a 72 78 f6 90 <0f> 0b 90 90 e8 b0 cd b9 f6 4c 89 f2 48 b8 00 00 00 00 00 fc ff df [ 749.025427][ T6720] RSP: 0018:ffffc900061275f0 EFLAGS: 00010286 [ 749.027408][ T6720] RAX: 0000000000000000 RBX: ffff88803b478d80 RCX: ffffffff817a4388 [ 749.029976][ T6720] RDX: ffff888027d20000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 749.032432][ T6720] RBP: ffff88806a748e40 R08: 0000000000000001 R09: 0000000000000000 [ 749.035039][ T6720] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88803b47aa28 [ 749.037601][ T6720] R13: 0000000000000000 R14: ffff88803b479728 R15: ffff88803b47a9d0 [ 749.040277][ T6720] ? __warn_printk+0x198/0x350 [ 749.041864][ T6720] ? __warn_printk+0x1a5/0x350 [ 749.043397][ T6720] ieee80211_assign_link_chanctx+0x3f1/0xf00 [ 749.045281][ T6720] __ieee80211_link_release_channel+0x273/0x4b0 [ 749.047356][ T6720] ieee80211_link_release_channel+0x128/0x200 [ 749.049264][ T6720] ? __pfx_ieee80211_uninit+0x10/0x10 [ 749.051053][ T6720] unregister_netdevice_many_notify+0x141c/0x24c0 [ 749.053074][ T6720] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 749.055175][ T6720] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 749.057222][ T6720] ? find_held_lock+0x2b/0x80 [ 749.058741][ T6720] unregister_netdevice_queue+0x305/0x3f0 [ 749.060869][ T6720] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 749.063076][ T6720] _cfg80211_unregister_wdev+0x64b/0x830 [ 749.064835][ T6720] ieee80211_remove_interfaces+0x34e/0x740 [ 749.066914][ T6720] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 749.069603][ T6720] ieee80211_unregister_hw+0x55/0x3a0 [ 749.071884][ T6720] hwsim_exit_net+0x3ac/0x7d0 [ 749.073888][ T6720] ? __pfx_hwsim_exit_net+0x10/0x10 [ 749.076003][ T6720] ? ip_vs_sync_net_cleanup+0x5d/0xb0 [ 749.077662][ T6720] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 749.079477][ T6720] ? __pfx_hwsim_exit_net+0x10/0x10 [ 749.081358][ T6720] ops_undo_list+0x2eb/0xab0 [ 749.082859][ T6720] ? __pfx_ops_undo_list+0x10/0x10 [ 749.084456][ T6720] ? cleanup_net+0x334/0x890 [ 749.085953][ T6720] ? idr_destroy+0x62/0x2e0 [ 749.087518][ T6720] cleanup_net+0x408/0x890 [ 749.088940][ T6720] ? __pfx_cleanup_net+0x10/0x10 [ 749.090769][ T6720] ? rcu_is_watching+0x12/0xc0 [ 749.092494][ T6720] process_one_work+0x9cc/0x1b70 [ 749.094044][ T6720] ? __pfx_process_one_work+0x10/0x10 [ 749.095762][ T6720] ? assign_work+0x1a0/0x250 [ 749.097230][ T6720] worker_thread+0x6c8/0xf10 [ 749.098799][ T6720] ? __pfx_worker_thread+0x10/0x10 [ 749.100435][ T6720] kthread+0x3c2/0x780 [ 749.101785][ T6720] ? __pfx_kthread+0x10/0x10 [ 749.103274][ T6720] ? rcu_is_watching+0x12/0xc0 [ 749.104746][ T6720] ? __pfx_kthread+0x10/0x10 [ 749.106273][ T6720] ret_from_fork+0x56a/0x730 [ 749.107677][ T6720] ? __pfx_kthread+0x10/0x10 [ 749.109152][ T6720] ret_from_fork_asm+0x1a/0x30 [ 749.110988][ T6720] [ 749.112731][ T6720] Kernel Offset: disabled [ 749.114237][ T6720] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:36:05 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff977040e8 RBX=0000000000000153 RCX=00000000000001a3 RDX=0000000000000114 RSI=00000000000001a3 RDI=ffffffff9774f718 RBP=0000000000000030 RSP=ffffc90006126d90 R8 =ffffffff95e36bc8 R9 =0000000000000051 R10=ffffc90006126f28 R11=0000000000000000 R12=ffffffff81975ec0 R13=ffffc90006126e30 R14=ffffffff819769d0 R15=ffffffff9774f718 RIP=ffffffff81977f7a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2f063fff CR3=000000003257a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=6261e9e137a93c08 b68974d8d05de6b3 6261e9e137a93c08 b68974d8d05de6b3 6261e9e137a93c08 b68974d8d05de6b3 6261e9e137a93c08 b68974d8d05de6b3 ZMM18=1637b95397c5fc9d 3a7a3d4381394adb 1637b95397c5fc9d 3a7a3d4381394adb 1637b95397c5fc9d 3a7a3d4381394adb 1637b95397c5fc9d 3a7a3d4381394adb ZMM19=382c000000000000 0000000000000005 382c000000000000 0000000000000004 382c000000000000 0000000000000003 382c000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000030000000000 0008ffffff0e0000 03e6000000080004 0000000800080000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0014000000280000 0040000000540000 0068000000800000 0098000000ac0000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00c0000000d40000 00e8000000fc0000 0120000001440000 000e000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000003000000 00000008ffffffaa 0000000003000000 00000008ffffff9a ZMM25=38776b6b38776b6b 38776b6b38776b6b 38776b6b38776b6b 38776b6b38776b6b 38776b6b38776b6b 38776b6b38776b6b 38776b6b38776b6b 38776b6b38776b6b ZMM26=7becf9667becf966 7becf9667becf966 7becf9667becf966 7becf9667becf966 7becf9667becf966 7becf9667becf966 7becf9667becf966 7becf9667becf966 ZMM27=bcd327a7bcd327a7 bcd327a7bcd327a7 bcd327a7bcd327a7 bcd327a7bcd327a7 bcd327a7bcd327a7 bcd327a7bcd327a7 bcd327a7bcd327a7 bcd327a7bcd327a7 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=cb270000cb270000 cb270000cb270000 cb270000cb270000 cb270000cb270000 cb270000cb270000 cb270000cb270000 cb270000cb270000 cb270000cb270000 info registers vcpu 1 CPU#1 RAX=0000000080000001 RBX=0000000000000001 RCX=0000000000000000 RDX=0000000000000001 RSI=ffffffff8de2d758 RDI=0000000000000001 RBP=ffff88807ffd6580 RSP=ffffc9000353f548 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000008 R14=ffffea000198d4c0 R15=ffff888025696388 RIP=ffffffff818823b4 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb0c339c300 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056322d57bf40 CR3=000000003257a000 CR4=00352ef0 DR0=fffffffffffffff8 DR1=0000000000000006 DR2=0200000000000000 DR3=0000000000000003 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=1292aaeef72f926d 54bec26665618cdf 1292aaeef72f926d 54bec26665618cdf 1292aaeef72f926d 54bec26665618cdf 1292aaeef72f926d 54bec26665618cdf ZMM18=bcd327a77becf966 38776b6b1c068cfc bcd327a77becf966 38776b6b1c068cfc bcd327a77becf966 38776b6b1c068cfc bcd327a77becf966 38776b6b1c068cfc ZMM19=cd27000000000000 0000000000000004 cd27000000000000 0000000000000003 cd27000000000000 0000000000000002 cd27000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 68d6000800600300 100050030fffffff ffffff0440030210 00300304a810006b ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9003010000001006 02a4030000000000 000000000000d005 00000c04c6240802 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80030280046b8003 6b80042003000800 10030fffffffffff ff04000320100006 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000003000000 00000008ffffffaa 0000000003000000 00000008ffffff9a ZMM25=38776b6b38776b6b 38776b6b38776b6b 38776b6b38776b6b 38776b6b38776b6b 38776b6b38776b6b 38776b6b38776b6b 38776b6b38776b6b 38776b6b38776b6b ZMM26=7becf9667becf966 7becf9667becf966 7becf9667becf966 7becf9667becf966 7becf9667becf966 7becf9667becf966 7becf9667becf966 7becf9667becf966 ZMM27=bcd327a7bcd327a7 bcd327a7bcd327a7 bcd327a7bcd327a7 bcd327a7bcd327a7 bcd327a7bcd327a7 bcd327a7bcd327a7 bcd327a7bcd327a7 bcd327a7bcd327a7 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=cb270000cb270000 cb270000cb270000 cb270000cb270000 cb270000cb270000 cb270000cb270000 cb270000cb270000 cb270000cb270000 cb270000cb270000 info registers vcpu 2 CPU#2 RAX=ffffc9000013d000 RBX=ffff8880293dc400 RCX=ffffffff819bfc67 RDX=1ffff1100527b807 RSI=ffffffff866dd2a4 RDI=ffff8880293dc038 RBP=0000000000000001 RSP=ffffc90000648ea0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffc9000013d008 R13=ffff8880293dc028 R14=ffff888106207800 R15=0000000000000000 RIP=ffffffff866dd2f2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc31efa8f70 CR3=0000000048e48000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5522a6c66d63f1f7 4325f6b17ac480e5 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff89d8eb76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff89d8eb76 00007fff89d8eb7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc31e212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc31e212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc31e212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc31e212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc31e212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc31e212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc31ef0d100 00007fc31e3a7460 00007fc31e3a0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc31e3a74b8 00007fc31e3a74b0 00007fc31e3a74a8 00007fc31e3a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000005 RBX=ffff88801ead2f58 RCX=ffffc900006cfaec RDX=0000000000000002 RSI=ffff88806a73b780 RDI=ffff88801ead2f58 RBP=0000000000000001 RSP=ffffc900006cfaa0 R8 =0000000000000005 R9 =0000000000000000 R10=ffff88806a73b780 R11=0000000000000000 R12=ffff88806a73b780 R13=ffffc900006cfaec R14=0000000000000002 R15=0000000000000002 RIP=ffffffff8b94be8f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001200 CR3=0000000048e48000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5522a6c66d63f1f7 4325f6b17ac480e5 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff89d8eb76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff89d8eb76 00007fff89d8eb7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc31e212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc31e212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc31e212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc31e212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc31e212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc31e212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc31ef0d100 00007fc31e3a7460 00007fc31e3a0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc31e3a74b8 00007fc31e3a74b0 00007fc31e3a74a8 00007fc31e3a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000