last executing test programs: 5m18.388236329s ago: executing program 32 (id=332): r0 = syz_open_dev$video4linux(&(0x7f0000000ac0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0x0, 0x0, 0x3010, 0x0, 0x0, 0x2, 0x0, 0x2}}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x5, &(0x7f00000000c0)={0x22, "af5405a7b1818f4a097d9a9f0074bf2cb6000000000000006700"}}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) socket$inet(0x2, 0x2, 0x1) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x28011, r1, 0xaae46000) syz_open_dev$video4linux(&(0x7f0000000ac0), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0x0, 0x0, 0x3010, 0x0, 0x0, 0x2, 0x0, 0x2}}) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) (async) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x5, &(0x7f00000000c0)={0x22, "af5405a7b1818f4a097d9a9f0074bf2cb6000000000000006700"}}) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) (async) socket$inet(0x2, 0x2, 0x1) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x28011, r1, 0xaae46000) (async) 5m11.121763747s ago: executing program 4 (id=507): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e80)="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", 0x1cd}, {&(0x7f0000000580)="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", 0x175}, {&(0x7f0000000740)="266a546475688763b44d30a862bc689d0b1d020dbb8656767fbd1d91637fccf4e308ae461b2548ba45299eb42928ff4ee493318ef9f71739a3f86f5193e556e085fc8c4793ffc8395e70ba93fd9e9d5f5413437784f92bb0128a9756b1c9b87c36cfe56c02568995726f7538f9ed3095531590839a2be05cf75ab02f51372bbc48c81b0283ffac37f28926e0a20a01d3ae06d03acc7095428e97af0141e80215b0823f76efad", 0xa6}], 0x3, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r0, &(0x7f0000003780)=""/4096, 0x1000) 5m11.12102385s ago: executing program 4 (id=509): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1c08060304600506040003ffffffffffffab7309fdaaaaaaaaaa41785321db4d13d9897620419862a091"], 0x0) 5m11.048076613s ago: executing program 4 (id=511): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x6, 0x0, @val=@iter={0x0}}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x6, 0x0, @val=@tracing}, 0x40) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x10000000) 5m11.046947425s ago: executing program 4 (id=513): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000280)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x9362, 0x0) 5m10.94095515s ago: executing program 4 (id=514): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_CLEAR_ACCEPT_LIST={{}, 0xe}}}, 0x7) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, 0x0, 0x40000) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @multicast1}, 0x4, 0x3, 0x0, 0x2}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2000000ece65fbcee551912fe009b67de86dd6001010000161100fe7900000000000000000000000000bbfe8000000000000000000000000000aa00030e22001690789b411a47242c79"], 0x0) 5m8.801325494s ago: executing program 4 (id=544): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socket$inet6(0xa, 0xa, 0x9) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f00000000c0)) r3 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000140)={0x0, 0x8, 0x0, [0x5, 0x0, 0x4, 0x7, 0xceee], [0x543, 0x5, 0x4, 0x1d, 0x1, 0x81, 0x2, 0x6, 0x1, 0x4, 0x7, 0x64, 0x5, 0xfffffffffffffffb, 0x9, 0x6, 0x8, 0x0, 0xba, 0x3ff, 0xa, 0x9, 0x1, 0x6, 0x100000001, 0x100000001, 0x7ff, 0x3, 0x0, 0x8000000000000000, 0x0, 0x3, 0x7, 0x8001, 0xcc20, 0x9, 0xfff, 0x1, 0x9627, 0x3, 0xd, 0x9, 0x6, 0x9, 0x7, 0xede, 0x7, 0x4, 0x5, 0xff, 0x6, 0xffffffffffffffff, 0x0, 0x7, 0x1ff, 0xfffffffffffff001, 0x3, 0x80000001, 0x1, 0x4, 0x4, 0x4, 0xb, 0xa, 0x8000000000000001, 0x1000, 0x216000, 0x8f, 0x2, 0xe52f, 0x0, 0x6, 0x8001, 0x7, 0x100000000, 0x1, 0xc50e, 0x6, 0x800, 0x7, 0x6, 0x7, 0x9, 0x6, 0x9, 0x7, 0x4, 0x7fff, 0x80000001, 0x1, 0xc13b, 0x9, 0x0, 0x0, 0x9, 0x7, 0x8000000000000, 0x162930d8, 0xf, 0x6, 0x1d40000, 0x10001, 0x79c6, 0x2, 0x7, 0xaf0a, 0x1000, 0x8, 0x6, 0x8, 0x5, 0x5, 0x10001, 0xff, 0x8, 0x4, 0x944e, 0x7ff, 0x9, 0x878]}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000580)={r4, 0x1, 0x7, 0x1}) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) fgetxattr(r3, &(0x7f00000009c0)=@random={'trusted.', '%\":y!#\x00'}, &(0x7f0000000a00)=""/31, 0x1f) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000a40)={0x0}, &(0x7f0000000a80)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000ac0)={r6, 0x1}, 0x8) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000b40)={&(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000c80)={&(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0], 0x5, 0x1, 0x5, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000d00)={r7, 0x0, r8, 0x0, 0x0, 0x2, &(0x7f0000000cc0)=[0x0, 0x0]}) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x80010, r10, 0xe5393000) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000d40), 0x200084, 0x0) close_range(r11, r0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000d80)={0x3, r9, 0x9, 0x4800000, 0x3, 0x800, 0x33e2}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000e00)={0x8, &(0x7f0000000dc0)=[{0xde, 0x0, 0x6, 0x1000}, {0x5, 0x3, 0x7, 0x1}, {0x1, 0x4, 0x4, 0x9}, {0x9f1, 0x2, 0x4, 0x9}, {0x7f, 0x1, 0xfe, 0x8000}, {0x56, 0x8, 0x6, 0x9}, {0x9, 0x7, 0x0, 0x5}, {0x4, 0x2, 0x9, 0x743}]}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000e80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f40)={'ip6gre0\x00', &(0x7f0000000ec0)={'syztnl1\x00', 0x0, 0x4, 0x10, 0x8, 0x1, 0x60, @remote, @private2, 0x80, 0x700, 0x1, 0x3}}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000f80)={@private, @broadcast, 0x0}, &(0x7f0000000fc0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)=@RTM_DELMDB={0x78, 0x55, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x1, 0x0, {@ip4=@remote, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x0, 0x2, 0x1, {@ip4=@dev={0xac, 0x14, 0x14, 0x16}, 0x1800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r14, 0x0, 0x1, 0x0, {@ip4=@multicast1}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000001140)={&(0x7f0000001100)=""/29, 0x1d, 0x8, 0xd}) r15 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCATMARK(r15, 0x8905, &(0x7f0000001180)) add_key$user(&(0x7f00000011c0), &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)="0e9e78c032", 0x5, 0xfffffffffffffffe) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f00000012c0)=0x81) 5m8.801071646s ago: executing program 33 (id=544): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socket$inet6(0xa, 0xa, 0x9) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f00000000c0)) r3 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000140)={0x0, 0x8, 0x0, [0x5, 0x0, 0x4, 0x7, 0xceee], [0x543, 0x5, 0x4, 0x1d, 0x1, 0x81, 0x2, 0x6, 0x1, 0x4, 0x7, 0x64, 0x5, 0xfffffffffffffffb, 0x9, 0x6, 0x8, 0x0, 0xba, 0x3ff, 0xa, 0x9, 0x1, 0x6, 0x100000001, 0x100000001, 0x7ff, 0x3, 0x0, 0x8000000000000000, 0x0, 0x3, 0x7, 0x8001, 0xcc20, 0x9, 0xfff, 0x1, 0x9627, 0x3, 0xd, 0x9, 0x6, 0x9, 0x7, 0xede, 0x7, 0x4, 0x5, 0xff, 0x6, 0xffffffffffffffff, 0x0, 0x7, 0x1ff, 0xfffffffffffff001, 0x3, 0x80000001, 0x1, 0x4, 0x4, 0x4, 0xb, 0xa, 0x8000000000000001, 0x1000, 0x216000, 0x8f, 0x2, 0xe52f, 0x0, 0x6, 0x8001, 0x7, 0x100000000, 0x1, 0xc50e, 0x6, 0x800, 0x7, 0x6, 0x7, 0x9, 0x6, 0x9, 0x7, 0x4, 0x7fff, 0x80000001, 0x1, 0xc13b, 0x9, 0x0, 0x0, 0x9, 0x7, 0x8000000000000, 0x162930d8, 0xf, 0x6, 0x1d40000, 0x10001, 0x79c6, 0x2, 0x7, 0xaf0a, 0x1000, 0x8, 0x6, 0x8, 0x5, 0x5, 0x10001, 0xff, 0x8, 0x4, 0x944e, 0x7ff, 0x9, 0x878]}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000580)={r4, 0x1, 0x7, 0x1}) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) fgetxattr(r3, &(0x7f00000009c0)=@random={'trusted.', '%\":y!#\x00'}, &(0x7f0000000a00)=""/31, 0x1f) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000a40)={0x0}, &(0x7f0000000a80)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000ac0)={r6, 0x1}, 0x8) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000b40)={&(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000c80)={&(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0], 0x5, 0x1, 0x5, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000d00)={r7, 0x0, r8, 0x0, 0x0, 0x2, &(0x7f0000000cc0)=[0x0, 0x0]}) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x80010, r10, 0xe5393000) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000d40), 0x200084, 0x0) close_range(r11, r0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000d80)={0x3, r9, 0x9, 0x4800000, 0x3, 0x800, 0x33e2}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000e00)={0x8, &(0x7f0000000dc0)=[{0xde, 0x0, 0x6, 0x1000}, {0x5, 0x3, 0x7, 0x1}, {0x1, 0x4, 0x4, 0x9}, {0x9f1, 0x2, 0x4, 0x9}, {0x7f, 0x1, 0xfe, 0x8000}, {0x56, 0x8, 0x6, 0x9}, {0x9, 0x7, 0x0, 0x5}, {0x4, 0x2, 0x9, 0x743}]}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000e80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f40)={'ip6gre0\x00', &(0x7f0000000ec0)={'syztnl1\x00', 0x0, 0x4, 0x10, 0x8, 0x1, 0x60, @remote, @private2, 0x80, 0x700, 0x1, 0x3}}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000f80)={@private, @broadcast, 0x0}, &(0x7f0000000fc0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)=@RTM_DELMDB={0x78, 0x55, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x1, 0x0, {@ip4=@remote, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x0, 0x2, 0x1, {@ip4=@dev={0xac, 0x14, 0x14, 0x16}, 0x1800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r14, 0x0, 0x1, 0x0, {@ip4=@multicast1}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000001140)={&(0x7f0000001100)=""/29, 0x1d, 0x8, 0xd}) r15 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCATMARK(r15, 0x8905, &(0x7f0000001180)) add_key$user(&(0x7f00000011c0), &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)="0e9e78c032", 0x5, 0xfffffffffffffffe) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f00000012c0)=0x81) 4m50.212143013s ago: executing program 0 (id=930): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e80)="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", 0x266}, {&(0x7f0000000580)="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", 0x175}, {&(0x7f0000000740)="266a546475688763b44d30a862bc689d0b1d020dbb8656767fbd1d91637fccf4e308ae461b2548ba45299eb42928ff4ee493318ef9f71739a3f86f5193e556e085fc8c4793ffc8395e70ba93fd9e9d5f5413437784f92bb0128a9756b1c9b87c36cfe56c02568995726f7538f9ed3095531590839a2be05cf75ab02f51372bbc48c81b0283ffac37f28926e0a20a01d3ae06d03acc7095428e97af0141e80215b0823f76efad", 0xa6}], 0x3, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0xd000, 0x0, 0x0}, 0x0) read$alg(r0, &(0x7f0000003780)=""/4096, 0x1000) 4m50.0721087s ago: executing program 0 (id=932): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e80)="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", 0x266}, {&(0x7f0000000580)="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", 0x175}, {&(0x7f0000000740)="266a546475688763b44d30a862bc689d0b1d020dbb8656767fbd1d91637fccf4e308ae461b2548ba45299eb42928ff4ee493318ef9f71739a3f86f5193e556e085fc8c4793ffc8395e70ba93fd9e9d5f5413437784f92bb0128a9756b1c9b87c36cfe56c02568995726f7538f9ed3095531590839a2be05cf75ab02f51372bbc48c81b0283ffac37f28926e0a20a01d3ae06d03acc7095428e97af0141e80215b0", 0xa1}], 0x3, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r0, &(0x7f0000003780)=""/4096, 0x1000) 4m50.07185145s ago: executing program 0 (id=934): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x8001) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000600", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 4m50.002243892s ago: executing program 0 (id=936): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xe3c}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f0000004140)={0x2020, 0x0, 0x0}, 0x2028) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff30000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000080)={0x29, 0x4, 0x0, {0x1, 0xa, 0x1, 0x0, [0x0]}}, 0x29) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x6000, 0x1000, &(0x7f0000fd3000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r6 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r7 = syz_open_procfs(r6, &(0x7f0000000040)='syscall\x00') pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) r8 = syz_open_dev$dri(&(0x7f00000005c0), 0x2, 0x0) ioctl$DRM_IOCTL_VERSION(r8, 0xc0406400, &(0x7f0000000040)={0x6, 0x1, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000001600)=""/4096}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r9, &(0x7f0000000100)={0x0, 0xec0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r10, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2008, &(0x7f00000007c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0, 0x853, @void, @value}, 0x94) 4m49.811462011s ago: executing program 0 (id=939): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x50, 0xda2a8e9cc7bcd9bd, 0x3}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000000000000400000017050b3af4862f990000000010000000000000002000000000000004"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) 4m49.481716403s ago: executing program 0 (id=943): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x1, 0x5) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb011a52f436dd2a", 0x2a}], 0x1) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000140)) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x10041ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x19, 0x1, 0x1, "3a8e07ca5de21f0077ab7a4d8601acc620004b5c000000000000002100", 0x3231564e}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, '\x00'}) ioctl$NBD_SET_SOCK(r4, 0xab00, r0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000001c0)={[0x7fffffffffffffff, 0x6, 0x0, 0x0, 0x10003, 0x3ff, 0x400200cc4, 0xffe, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x6a, 0x8b], 0xeeee8000, 0x201145}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x29914}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x62795}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'batadv0\x00', {0x2, 0x4e21, @private=0xa010101}}) 4m49.459185839s ago: executing program 34 (id=943): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x1, 0x5) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb011a52f436dd2a", 0x2a}], 0x1) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000140)) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x10041ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x19, 0x1, 0x1, "3a8e07ca5de21f0077ab7a4d8601acc620004b5c000000000000002100", 0x3231564e}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, '\x00'}) ioctl$NBD_SET_SOCK(r4, 0xab00, r0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000001c0)={[0x7fffffffffffffff, 0x6, 0x0, 0x0, 0x10003, 0x3ff, 0x400200cc4, 0xffe, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x6a, 0x8b], 0xeeee8000, 0x201145}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x29914}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x62795}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'batadv0\x00', {0x2, 0x4e21, @private=0xa010101}}) 3m33.258290368s ago: executing program 6 (id=1892): syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) r0 = inotify_init1(0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc4a1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r4, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c9801288763"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 3m30.846897947s ago: executing program 6 (id=1900): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {0x1, 0x1}, [], {}, [], {0x10, 0x4}, {0x20, 0x1}}, 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 3m30.729486884s ago: executing program 6 (id=1901): creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r1}, 0x20) ppoll(&(0x7f0000000100)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x2b0, 0x268, 0x300, 0x2b0, 0x268, 0x3e8, 0x460, 0x460, 0x3e8, 0x460, 0x9, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @loopback, [], [], 'veth0_to_hsr\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x9401}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "1852aa405753905554ed000600ebaf5ffbbbcc15d0abddcb5ae29b3b8f45"}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=prefer=statiF:0']) 3m30.58792186s ago: executing program 6 (id=1903): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = dup(r3) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x4, 0x2004c9, 0x8001, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4000000000000008, 0x2], 0x100000, 0x100800}) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="2d63707561636374202d70696473202d7264202b70696473202d6370757365742000696f0100667265657a6572202d6370756163637420"], 0x42) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0xfc, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0xe8, 0x1, [@m_skbedit={0xe4, 0xe, 0x0, 0x0, {{0xc}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x81, 0xffffffffffffffff, 0x2, 0x1}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x100}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x80000000}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x219c}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x81}]}, {0x55, 0x6, "e15cd8e8920ee2bf5d1841a2b53a3dcd97163dafeb5b60c8412d6d2e6b1f6d36128fa2d3ecbad013c539e2a4aefe8bb3488b42249105c33396f7579372b9573d3c9312935420497e517d952c3c8a969f23"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0xfc}}, 0x0) 3m30.425824546s ago: executing program 6 (id=1904): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x28, 0x24, 0xd0f, 0x0, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000680)={0x2d3c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xe}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_TERM_REASON={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x1b4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x3}, @NL80211_NAN_FUNC_SRF={0xb4, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x7c, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa}, {0xa}]}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0xf4, 0xd, 0x0, 0x1, [{0xee, 0x0, "c97fbbc967604e88efbc122532f4f90161c6336366c549d71475fb2124564d7122a3a106fcc6fae42802072587145db3f01c6bb16795cc90c9c0d6985c42a0efc8b179c1dab6405ba0368c23fae3dff1a3d2fc08813072e334a29355b584ed015f5ed2da91b58065005d496298a84f713eed52c0e890152d5f637a5b18131f3fd49131248c372635ee242637c2d9c5e87a4f85756602e2f45ab4583157b331fb6363ec242062ac18c58911d0e9ecd44b8cc176660db60ad09cbdcce5d99f4d583e9c77ee7e92cf88f241597fec783766c218cd3dc042a58dc5cad7b628364c91dc3f79505263ed1dc325"}]}]}, @NL80211_ATTR_NAN_FUNC={0x164, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x160, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xff}]}]}, @NL80211_ATTR_NAN_FUNC={0x364, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xa}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x340, 0xe, 0x0, 0x1, [{0x4f, 0x0, "0c2c40820fa32d6f8c1b89db9e688719d79e4c2725f1eb4fa0aaf22a5bb2145522e8e56ddeb6e3a80a4a16f03d80e9a07456b9cb188563ba4ab1b19bf82204fd7df913cf4704e49855ef95"}, {0xf8, 0x0, "fa51b4612543a9d23f43c2ffc7cb9eb781d259f825a3c5b1c15c36d12590cf92744ce6332de4411d3837d30bfd03dbb5aa0a1f0801df433000802ff2d4263470b313d80a1196c55a6470ebabf8a78f9d2eecf1e12ce53899beeb5e24991a3afe5a15479850b91692053b28e36a696e5c64a15522fb616f9834477dbe8a179535bdb5fbcfb4685814ca375444b8c729ad55d2ef1c3c1902181d80d03142b968fb56933f34a3f3a61e3679f7aff61399d33a4be4d1a1acc91ba33f39dc405a51e179bf318c910e2ea44c5fd91cd8f75d454be2fbdb7f23915fe8144695d359b33f554150eeb31f0ecab645eb960e08a3008a2cd858"}, {0x10, 0x0, "8714d660bda36190e6cfef1f"}, {0xb5, 0x0, "d2355cc23e78526564801a81ea5162a36b11ad56a3af8879b5eeb778609ea50df9b0beff0a41243d5c450fd2d13fddb7c445a864b444ffba7a8b90569443fd8b10247a13e12a84deacf8b900f61779913badc780b67ec2857e3ff058b99370323e1462760f21e430f9c941c5a1dd2823e66ad68ffe4a1c0927da4d1942b1f394ea7f66c3a5731fa49f5ad23606e08525ab866d5414214381a6a3fc21a6f113de2cc64cde68647d65d22862492597b9586d"}, {0x6e, 0x0, "8d9f7a5f679a93b75bc55163f3e3497eea071a19f92ea1ff36794a648543a7a26f9d465eb560f57f53daddafaa6ac229bc65536b172f165419a6a24daca7198bfb618f1c5e47adb99c031920217f09b08dd169de924c280031e28c719de3dc16179e8d8a7106d08afc54"}, {0xb0, 0x0, "c5986de694a49a206be8bcfe3631a79f7e97de0975cb728d1cf18f53bc67ad61323d1289c18f74efea3293c61adbdc08db7b3840d23c63d3365b3b900278653838511c7ea4e2b6097af0a70363a43109836dca6326ad82e3da15fc2fe36db245a9553c1128ba914943312287bea69b335886f8afb1f098906a5170d0a42dfdf2430e3463d28934bb65dd7103c6e186ddc27ac4fd23e179dc2bd2e13bd8647df9d20be2c176c0d732c7fed884"}, {0xa, 0x0, "33e5d7cf8152"}]}]}, @NL80211_ATTR_NAN_FUNC={0x24f8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1158, 0xe, 0x0, 0x1, [{0x1004, 0x0, "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"}, {0x4}, {0x52, 0x0, "9169d6ba4983103b1f867e879e0373d7e9fb75161241f725d8c73449b74ab6812379297294cbc565cfb0bc714b47be3fe2933c08194bcf03e953dc4f91744e2d2ba3787608f75617fea1ea7e291e"}, {0xf8, 0x0, "d020947b281edf885545825fafb6b5b9b9da468cd5640892971f1e4b4c14dc5f29a904ef50cfed727c3ebb7c5ac71d33d15ab65502ccd8854a882df82014ec3a6289bf17ea72e3501ebdcf3e41251bc9fd70ae4dd7c774e33242bee74bc08f34d623579b92210fd9fb6f6059088d08f6a9f8c8c20b6cbca015ee39dc745517aa5ac63ff16bb798986c4711c1958dfec2f0a2e8aa06b372907ebc78ab2b1332abcb741c487ffba13d9ab73e3c21040af2426f8827b88da86a0a7dac77b6f3f9d2ece66b9271d76107d07aea749876957e8f2fe1b438baf807f4b23ac0cf7d50b2e934030280e26d6892cb70f9670703491d6b6ef4"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0xd, 0xb, "5456893623cb4328f5"}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x137c, 0xd, 0x0, 0x1, [{0x103, 0x0, "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"}, {0x10, 0x0, "475febc9a77d0a6056456c58"}, {0x71, 0x0, "0036c7953d30e5af7f038d36f18ffd8cc0024d3ebc1a0e35a34907f424059826ab4ae86827843f6f6972f8c4133b6dc2afc99dd31492429b568e9abf14dc5cac1e4e0827d593d76d99cb97e17e17bb6e416cbc57048612e68318ae11b1207abd4968653858d489414424af50f7"}, {0x15, 0x0, "d7c50b32d7d7ae6e6710126ab58c453753"}, {0x50, 0x0, "1d7b315e311163c32cd432ba5e891092c649ae0f2603fd1b5fdec40b2727e1dff62e072815b7e3972ac333b5832bb43c22030b1091ee24f22afb581cc94b549089d42e9a99fb91d432c36096"}, {0xe7, 0x0, "b56ea1685ddd28b99ec62cc88478ab33a625678db74a6b9e9fd4d092b7d431af55e2e9cdf50b9eb8364cd077f8f5d4efbb02d6054a518ca6ba2ecf8af06aa67ffc543f202592000ca270b5d1878a079caa4d50118f748c5e356a87076d97961e73c74f4d4a5e3905d7bf0930f7ffc5f85692f8558ab6baac804281c3cf90b781a64992134573ee0bc2b78b1d7bea795a3b33995e09c7dc53d54057047a10d09790c1e2c763b7a63bfea73fe94e75b59b78b223d84260e5b5e3b7a0883886712e46416ed3147d6b78f1409aaffac0146478d22586f5fd969224bb5ad9ec113d711354cc"}, {0x9a, 0x0, "6984dd6062b90fb7f8b3ec070649e8610d0737a8d727aaa61e08cf500f509e9209f0a7e8eb7091ffbe054e48e72a9addebca7ead4e7219aa6413e58162d5a1e2b30c114af2658224168c0aceceb44e5e3d934f1446ec3c04c7645b7f2e76617aac7b6760c0a70ce2759a3d00015e3625fcd03df040992c2112f69412567585b8c4bda4aec067f97f3553d6ee5991bd24ce7f3c13914e"}, {0x1004, 0x0, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x98, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x90, 0xd, 0x0, 0x1, [{0x8b, 0x0, "11e971c1d3e1b85c6989cd658b944a5c3987288c99bc48cde5fd03055f92bc56389c1171be7a83e71d043a3351fc11357175ea2550514dc39d2376d49b1c27fa66543bb14359dece36edae3d5d9a77f9ce1936f0fcfe84bc5dce541afe224be7a28e252dc5445770196d3ca1616c7b74f76efa1b310154089c3b55fdc6fa3ea1d82da35a1c0f52"}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xfc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SERVICE_INFO={0xe9, 0xb, "6748e4bb2ca9c15b2f8a3396234490ecdbe5d871a524212f8b4c69e759a3094b6aca28ff01367b223273ec1b360128778d416a64c5c431ea28e21baf5efab14c387abc5bc30243c52f79f7f8d05516c44be76deb0d9b73a72ccba151eca983106a2f48af95da32d34be1dbe792981974a22bbdc826ffad4ca10ab44b7dbba0e0f335cdb8b18935804a21a35f6379781ea06faa2561a10bef5074033e495242120b0c3a8cb92244c4891a88a67221901f0e5db6a0bb88f25f5f057f9654ac4eaa02c249e6b71e2e68904b5645b082f641bacb3d6953d686d38a6514ac0eb69d148ca7736322"}]}]}, 0x2d3c}, 0x1, 0x0, 0x0, 0x4008081}, 0x24000084) sendmmsg$inet(r4, &(0x7f00000077c0), 0x0, 0x20008081) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)={0x10, 0x12, 0x10}, 0x10}], 0x1}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0x6, &(0x7f0000000100)={0x455, 0x4, 0x3, 0x5}, 0x10) io_uring_enter(r5, 0x648a, 0xef7, 0x4, &(0x7f0000000140)={[0x7]}, 0x8) 3m30.20405402s ago: executing program 6 (id=1905): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000000000080000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000300000007b2af0ff00000000d609080090000000c39af0ff10010000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000015000000760000e5be9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0xd, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x6, 0xfffffff9, 0x41595556, 0x7, 0xb, [{0x2}, {0x4, 0x9}, {0x2, 0x21}, {0x8, 0x3}, {0x8, 0xecbd}, {0x9, 0x3}, {0xc0, 0x8}, {0x10001, 0x7}], 0x2, 0x4, 0x7, 0x0, 0x4}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000bb", @ANYRES16=r4, @ANYBLOB="050004000000fdffffff2e00000008000300", @ANYRES32=r5, @ANYBLOB="05003400b90000000400fe00"], 0x28}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) 3m15.04606352s ago: executing program 35 (id=1905): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000000000080000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000300000007b2af0ff00000000d609080090000000c39af0ff10010000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000015000000760000e5be9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0xd, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x6, 0xfffffff9, 0x41595556, 0x7, 0xb, [{0x2}, {0x4, 0x9}, {0x2, 0x21}, {0x8, 0x3}, {0x8, 0xecbd}, {0x9, 0x3}, {0xc0, 0x8}, {0x10001, 0x7}], 0x2, 0x4, 0x7, 0x0, 0x4}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000bb", @ANYRES16=r4, @ANYBLOB="050004000000fdffffff2e00000008000300", @ANYRES32=r5, @ANYBLOB="05003400b90000000400fe00"], 0x28}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) 2m57.931331393s ago: executing program 2 (id=2160): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x7d}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/160, 0xa0) 2m57.49933402s ago: executing program 2 (id=2163): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@tipc=@name={0x1e, 0x2, 0x2, {{0x40, 0x1}}}, 0x80, 0x0}, 0x24048044) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x200, 0x70bd26, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x3, 0x5, @l2={'eth', 0x3a, 'dvmrp1\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x4) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x200, 0x70bd26, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x3, 0x5, @l2={'eth', 0x3a, 'dvmrp1\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x4) 2m57.348104365s ago: executing program 2 (id=2167): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={0x40, 0xa, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x0, 0x8, 0x0, 0x1, [{0x0, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x5}}, {0x0, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x0, 0x1d, 0x1, 0x0, 0xff}}, {0x0, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x0, 0x13, 'syz2\x00'}}, {0x0, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x0, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}}, {0x0, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER}, {0x0, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x0, 0x12, 'syz0\x00'}}, {0x0, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x0, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, {0x0, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffa}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0xfffffffffffffec6}, 0x1, 0x0, 0x0, 0x44040000}, 0x20000014) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000040000010000000000000001"]) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x4, 0x20000) ioctl$BLKFLSBUF(r5, 0x1261, 0x0) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r6, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000040)='.\x00', 0x24000420) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x0) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r4) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r8, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) 2m56.445666411s ago: executing program 2 (id=2175): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x101200) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x80) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000001c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x1, 0x3, 0x0, 0x4, 0x5}, 0x20) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001580), 0x40, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@bridge_dellink={0x20, 0x13, 0x1, 0x0, 0x8000000}, 0x20}}, 0x0) ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x3) 2m54.888501594s ago: executing program 2 (id=2185): unshare(0x6a040000) unshare(0x10000080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f00000003c0)=[{0x5, 0x61, 0x0, 0x0, @time, {}, {}, @result}], 0x1c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f00000052c0)={'broute\x00', 0x0, 0x0, 0x0, [0x9573, 0x1, 0x3, 0x5, 0x547, 0x1], 0x1, 0x0, 0x0, [{}]}, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffb, 0x7, 0xfee, 0x3, 0x3]}, &(0x7f0000000340)=0x78) 2m54.307629669s ago: executing program 2 (id=2196): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r3 = fanotify_init(0x200, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r4, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x25}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "77a139486b1eddaea085f11a9e"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "bf3b93206658596818a1755e0b"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x4004000) fanotify_mark(r3, 0x1, 0x40001043, r1, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r8}}) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, &(0x7f0000000540)={0x20, 0x1, 0xa, {0xa, 0xe, "14361358899d896d"}}, &(0x7f00000006c0)={0x0, 0x3, 0xbd, @string={0xbd, 0x3, "257d14e48e2403741e5bedce9cbb4f36265827a853d4b39ef92e83be480c8d63945fdea31e97c0a0098790f9160e864f56d16a8021b2a7ca5a89c91c84a84ea6380b58b29690668b3bf208726d774c9ff6ee294f6fd21b666d2bf4710b92811a451b5d60793605a4f0bd6e0c1ccfb7ba30742b4eeeabd96ae2828ade5ddf6d1d736b30546038d81de7a99f6612045b045784c6cf7e1126c2b07c226a92e9ab3bfc5e012c0b073e465d271b3424fc377ac3575d4c343a1abe3ef70b"}}, &(0x7f00000007c0)={0x0, 0xf, 0x1c, {0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "ca010c4861a14bbdce3e02cf33edb382"}]}}, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x4, 0x7f, 0xff, "64bd850b", "29711ca0"}}, &(0x7f0000000840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x2, 0x0, 0x9, 0x4, 0x78}}}, &(0x7f0000000d80)={0x84, &(0x7f00000008c0)={0x60, 0xf, 0xb0, "2d0bbdb35e91566d3ff1cb2c0ce9aa2047c1ec95615278aa343d503ca095adc464ecbaee877c4d53d9e2e92028cfa6574deb141364e638dc918a5db7d6f44f4cd623db340739546271275f9fa18b18576bebdff392ba63048acd13b718d4f758cc573fd06fcfb3ee3c9d238b77dc25bb18585520e05eb28b437d4181cc7e09e6d56a89924037cc74be15d9a483d42758c9607f7ce946b1e7d5d6f3a4cb6db6b4bca651584347c50ec3c018e2c35e0887"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x5966804c55d6de25, 0x3}}, &(0x7f0000000a80)={0x20, 0x0, 0x8, {0x300, 0x20, [0xf000]}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0xb}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "4ce3"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @local}, &(0x7f0000000c40)={0x40, 0x19, 0x2, "9c0e"}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x8}}) (async) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) (async) splice(r7, 0x0, r6, 0x0, 0xffffffffffff8000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000500)=r6, 0x4) r9 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) r10 = fanotify_init(0xf00, 0x0) fanotify_mark(r10, 0x105, 0x40009975, r9, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601036c0000000e77000000000000050005000a000000050001000600000205000400000000000900020073797a320000000013000300686173683a6e65742c6966616365000014000780080006400000000008000840"], 0x60}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2m39.297254642s ago: executing program 36 (id=2196): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r3 = fanotify_init(0x200, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r4, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x25}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "77a139486b1eddaea085f11a9e"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "bf3b93206658596818a1755e0b"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x4004000) fanotify_mark(r3, 0x1, 0x40001043, r1, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r8}}) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, &(0x7f0000000540)={0x20, 0x1, 0xa, {0xa, 0xe, "14361358899d896d"}}, &(0x7f00000006c0)={0x0, 0x3, 0xbd, @string={0xbd, 0x3, "257d14e48e2403741e5bedce9cbb4f36265827a853d4b39ef92e83be480c8d63945fdea31e97c0a0098790f9160e864f56d16a8021b2a7ca5a89c91c84a84ea6380b58b29690668b3bf208726d774c9ff6ee294f6fd21b666d2bf4710b92811a451b5d60793605a4f0bd6e0c1ccfb7ba30742b4eeeabd96ae2828ade5ddf6d1d736b30546038d81de7a99f6612045b045784c6cf7e1126c2b07c226a92e9ab3bfc5e012c0b073e465d271b3424fc377ac3575d4c343a1abe3ef70b"}}, &(0x7f00000007c0)={0x0, 0xf, 0x1c, {0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "ca010c4861a14bbdce3e02cf33edb382"}]}}, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x4, 0x7f, 0xff, "64bd850b", "29711ca0"}}, &(0x7f0000000840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x2, 0x0, 0x9, 0x4, 0x78}}}, &(0x7f0000000d80)={0x84, &(0x7f00000008c0)={0x60, 0xf, 0xb0, "2d0bbdb35e91566d3ff1cb2c0ce9aa2047c1ec95615278aa343d503ca095adc464ecbaee877c4d53d9e2e92028cfa6574deb141364e638dc918a5db7d6f44f4cd623db340739546271275f9fa18b18576bebdff392ba63048acd13b718d4f758cc573fd06fcfb3ee3c9d238b77dc25bb18585520e05eb28b437d4181cc7e09e6d56a89924037cc74be15d9a483d42758c9607f7ce946b1e7d5d6f3a4cb6db6b4bca651584347c50ec3c018e2c35e0887"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x5966804c55d6de25, 0x3}}, &(0x7f0000000a80)={0x20, 0x0, 0x8, {0x300, 0x20, [0xf000]}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0xb}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "4ce3"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @local}, &(0x7f0000000c40)={0x40, 0x19, 0x2, "9c0e"}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x8}}) (async) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) (async) splice(r7, 0x0, r6, 0x0, 0xffffffffffff8000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000500)=r6, 0x4) r9 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) r10 = fanotify_init(0xf00, 0x0) fanotify_mark(r10, 0x105, 0x40009975, r9, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601036c0000000e77000000000000050005000a000000050001000600000205000400000000000900020073797a320000000013000300686173683a6e65742c6966616365000014000780080006400000000008000840"], 0x60}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2m16.871737279s ago: executing program 8 (id=2476): flock(0xffffffffffffffff, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f00000003c0)={0x28, 0x0, 0x2710, @host}, 0x10) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0xffffffffffffff01) sendmmsg(r4, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='7', 0x1}], 0x1}}], 0x1, 0x1) socket$inet6(0x10, 0x2, 0x4) (async) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) (async) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000100)=@known='trusted.overlay.origin\x00') (async) fremovexattr(0xffffffffffffffff, &(0x7f0000000100)=@known='trusted.overlay.origin\x00') ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="410f00d766ba4200ed66baf80cb8cd3b198cef66bafc0cec40dd4002b8010000000f01c164670f013c2066b800008ec0b8010000000f01d9450f062626400fc73e", 0x41}], 0x1, 0x8, &(0x7f0000000180)=[@cr4={0x1, 0x4200}], 0x1) (async) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="410f00d766ba4200ed66baf80cb8cd3b198cef66bafc0cec40dd4002b8010000000f01c164670f013c2066b800008ec0b8010000000f01d9450f062626400fc73e", 0x41}], 0x1, 0x8, &(0x7f0000000180)=[@cr4={0x1, 0x4200}], 0x1) 2m16.643041695s ago: executing program 8 (id=2478): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x8001) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000055aa00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2m16.550392044s ago: executing program 8 (id=2479): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x100, 0x2, 0x2}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x2}) (async) r2 = dup(r0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="03150000808000e4f3b7fe91a7987a006d61637600000100000a00fb000000000800001300080001001000000008000500", @ANYRES32=r3, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x40004085}, 0x0) 2m16.430175111s ago: executing program 8 (id=2481): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfa2}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfa2}}, './file0\x00'}) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x20, 0x70bd2b, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000140), 0x100000) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000180)=0x8001) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x20}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x40) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000300)={{0xad1, 0xfffffff5}, 0x100, './file0/file0\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000440)="f85d46b0bf40bf20bc8a8d696b8afd3f85d0fbb684e0e97c6afbb740e68a0f97b3e65cbef47787d9cb9196faa66dac430207897be4ef0c16da9f0cc3ef5bae5bea679d5ab915bdd2332bc37e4b938cd8ab2bd38641fc10492f68f936b678e2a378fc5d5f0ec9d8d526664ddac0571758a5a6ba40ce7bd811ebef3ecb343cabe99b686c213f3ec88cd26df4b160b754d76ff27d051e63dcd9e22086", 0x9b, 0x84, &(0x7f0000000500)={0x2, 0x4e23, @multicast2}, 0x10) (async) sendto$inet(r3, &(0x7f0000000440)="f85d46b0bf40bf20bc8a8d696b8afd3f85d0fbb684e0e97c6afbb740e68a0f97b3e65cbef47787d9cb9196faa66dac430207897be4ef0c16da9f0cc3ef5bae5bea679d5ab915bdd2332bc37e4b938cd8ab2bd38641fc10492f68f936b678e2a378fc5d5f0ec9d8d526664ddac0571758a5a6ba40ce7bd811ebef3ecb343cabe99b686c213f3ec88cd26df4b160b754d76ff27d051e63dcd9e22086", 0x9b, 0x84, &(0x7f0000000500)={0x2, 0x4e23, @multicast2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000540)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000005c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x1, "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", 0x0, 0x7f, 0x3, 0x72, 0x80, 0x5e, 0xb, 0x1}, r4}}, 0x128) move_mount(0xffffffffffffff9c, &(0x7f0000000700)='./file0/file0\x00', r0, &(0x7f0000000740)='./file0\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x15c, r6, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_CQM={0x60, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0xd487, 0xb, 0x6, 0x8, 0xaf40, 0x3, 0x10000, 0x6, 0xf72e, 0x7]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4fd}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x39}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x292}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x8001, 0x6, 0xa, 0x3, 0x9, 0x7f]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x8, 0x1, 0x88, 0x1]}]}, @NL80211_ATTR_CQM={0x6c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x12}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x6, 0xc6]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2ae237ed}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x13}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x4, 0x9, 0x1b57, 0x6, 0x4, 0x9, 0x9]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xe2f2}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5c}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x2400c094}, 0x40) (async) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x15c, r6, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_CQM={0x60, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0xd487, 0xb, 0x6, 0x8, 0xaf40, 0x3, 0x10000, 0x6, 0xf72e, 0x7]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4fd}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x39}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x292}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x8001, 0x6, 0xa, 0x3, 0x9, 0x7f]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x8, 0x1, 0x88, 0x1]}]}, @NL80211_ATTR_CQM={0x6c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x12}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x6, 0xc6]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2ae237ed}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x13}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x4, 0x9, 0x1b57, 0x6, 0x4, 0x9, 0x9]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xe2f2}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5c}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x2400c094}, 0x40) r8 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000a40), 0x4000, 0x0) fcntl$getown(r5, 0x9) (async) r9 = fcntl$getown(r5, 0x9) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000e80)={'\x00', 0x4, 0x5b, 0x1, 0x6, 0x1, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000fc0)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) fstat(r1, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getpgid(0xffffffffffffffff) fstat(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001340)={{0x1, 0x1, 0x18, r1, {0xee01}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001340)={{0x1, 0x1, 0x18, r1, {0xee01, 0x0}}, './file0\x00'}) r17 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001380), 0x60aa42, 0x0) sendmsg$netlink(r8, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000a80)={0xbc, 0x12, 0x200, 0x70bd26, 0x25dfdbfe, "", [@generic="4627a34e312714602047120f02a4ea6bc7133394259a0d2e9d43563c35ef25c5fed2b1c56feea288385f4c54cd44258f4d48e75409f60ad6d697945b22c40736605fa18fae171e6b6af0699210ef50f803ba0efa7c6bdf0cd734d93546d95f03069f16c29ac2214d2ea14ab8642a5583f70a967e703bfe87de0d3ca2788f99fa5bc1a52ddf4c8ad8bcdd617b18d26deeb28db54016869fd0369c8ccd8317d2407a25e030bc2e41081d9af94e"]}, 0xbc}, {&(0x7f0000000b40)={0x198, 0x27, 0x800, 0x70bd2c, 0x25dfdbfb, "", [@typed={0xc, 0x8, 0x0, 0x0, @u64}, @nested={0xe7, 0xc3, 0x0, 0x1, [@nested={0x4, 0x111}, @generic="cf71dc13eae0c0bd96e18a54d9518dcccf13e1f2caec220205162d9008ce8a68ee3dce753e25240e26a784bf11df8b5c1f2f836fee865df97d7e76c2a6f53c4527e004e6d1e7eb5405d6add6fc1ec02bf31f9ab8e2ca8d5e2abbd20c310c31b5efffc3aecfcbd53c5a24f7e8f6142e1886bc887d508bd16d520b99956c077be2a29a6226719a63873752877cb0d8184d29bdbcdd0d714f1a094fb534da497c9753eaec9d236e7d91d529073532d7c68a25f4ab7ab340f0096a0de45908cc70c61ee73b780d3c72892498a4b983d6829b3a735f3ff0e077", @typed={0x8, 0x100, 0x0, 0x0, @fd=r5}]}, @generic="40c504f0311bb39f26e5adb92435d2f9521b9a9b866fb855b36485ac8cd31d65b7bf85029dd429325e6977ec186ab8abf00e370fc11d", @typed={0x8, 0x23, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3b}}, @generic="400256a4af3c8aa9e90099d3d4ef8c41d1e6b01d2ee8b358f26bcb892394a76293e9bb2688c1efd7701b4fa741bb59bb1a00f4b4defc16a311dff6e0355da13607eb9afe9ae099f01da3eb99ff0a9562d6cb5c"]}, 0x198}, {&(0x7f0000000d00)={0x180, 0x27, 0x8, 0x70bd28, 0x25dfdbff, "", [@generic="f8b38c7c4b3b8ce9fbc5929a462128bf8ddf03a5f61f20fde09ee71aa0e12c73ccbdfefe13cf5ec0b7c6e35d1eae2b0693440addaf2cdffecd0181aec31c3cfdf6a7e9bc8181212b6fb1bc959e08adb3b77de75bca26c6b5e355b1035510255b15c1669f7584f56da347862187634c22c5e8f22954c1aaaf13d4009322be2ac2b84220b35335b24ff9de7ae2c2fa17f44c07b99824430bb34e09e4c50965bacc5fc233f75ba21060ac05210177e088ec9fc5c6", @typed={0x8, 0x6c, 0x0, 0x0, @fd=r3}, @nested={0xa0, 0x116, 0x0, 0x1, [@typed={0x6, 0xcd, 0x0, 0x0, @str='-\x00'}, @typed={0x8, 0x112, 0x0, 0x0, @pid=r9}, @generic="dc7361a6e0c2ad151c895441b2bb615b472078e60df3ae89ae753aae7c165d5331c78c72097a3453211cc4ce0e2fe47099765795123f42933536fb54c44f22174fff47e84e82355cf840b490e8e2440d2aff12f65477e7ef6d6493d2a862f79b9cba2f30c3c7afbacfc6d74343513a74dce70d1905470109f709fe86962528e30acbb09df41f1f8e", @nested={0x4, 0xe3}]}, @nested={0x14, 0x9f, 0x0, 0x1, [@nested={0x4, 0x24}, @typed={0xa, 0x92, 0x0, 0x0, @str='wlan0\x00'}]}]}, 0x180}, {&(0x7f0000000f00)={0xa8, 0x3c, 0x4, 0x70bd27, 0x25dfdbfe, "", [@generic="ba638b3dcdc713370d62e13022639f8b25", @nested={0x58, 0xfa, 0x0, 0x1, [@nested={0x4, 0xd5}, @typed={0x8, 0xdf, 0x0, 0x0, @pid=r10}, @generic="b21b8c8833df97c66a61091acb25378932938dfa4af3ac43745e9048b7e90ebce7112d10952421b1ab08eeba", @nested={0x4, 0x7a}, @typed={0x4, 0xe1}, @nested={0x4, 0x130}, @typed={0x8, 0x108, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x6f, 0x0, 0x0, @u32=0xffff7fff}]}, @generic="cb0473a1a9ea05592b737c9e43ba4aebb74a3902fa6757b666dad86b442a181c9144724ee6d3f206066a45d6f1"]}, 0xa8}, {&(0x7f0000001000)={0x80, 0x36, 0x10, 0x70bd2a, 0x25dfdbfe, "", [@nested={0xc, 0x14b, 0x0, 0x1, [@nested={0x4, 0x3b}, @nested={0x4, 0x89}]}, @typed={0x8, 0x1d, 0x0, 0x0, @pid=r11}, @typed={0xc, 0x11d, 0x0, 0x0, @u64=0x2}, @generic="af164f8ba667a5d0a6b0c09ef6026a71bfa34b43a0370eff3ab5462fc18a03fe036c5fca48d3e5b1e8c39ad0bb05227cda56b378d5e2edb751d856d31801d4d2c62360020c31fc", @typed={0x8, 0x69, 0x0, 0x0, @u32=0x9}]}, 0x80}, {&(0x7f0000001080)={0x70, 0x1e, 0x4, 0x70bd27, 0x25dfdbfe, "", [@generic="a90e6be8e0d66ac73820c067beaebf2eb5ea129fc6a5a823716dd2f92b6e269e95fbfbe4c3df47a30d50c9aeab5470641568d445c402fb4b790184cc604a3fc65de797e7f01940908eda7b78cfe776b7a7cf1b8f287929c33cd8f4c9ffc1e7"]}, 0x70}], 0x6, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @rights={{0x20, 0x1, 0x1, [r17, r3, r1, r3]}}], 0x60, 0x20044000}, 0x800) (async) sendmsg$netlink(r8, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000a80)={0xbc, 0x12, 0x200, 0x70bd26, 0x25dfdbfe, "", [@generic="4627a34e312714602047120f02a4ea6bc7133394259a0d2e9d43563c35ef25c5fed2b1c56feea288385f4c54cd44258f4d48e75409f60ad6d697945b22c40736605fa18fae171e6b6af0699210ef50f803ba0efa7c6bdf0cd734d93546d95f03069f16c29ac2214d2ea14ab8642a5583f70a967e703bfe87de0d3ca2788f99fa5bc1a52ddf4c8ad8bcdd617b18d26deeb28db54016869fd0369c8ccd8317d2407a25e030bc2e41081d9af94e"]}, 0xbc}, {&(0x7f0000000b40)={0x198, 0x27, 0x800, 0x70bd2c, 0x25dfdbfb, "", [@typed={0xc, 0x8, 0x0, 0x0, @u64}, @nested={0xe7, 0xc3, 0x0, 0x1, [@nested={0x4, 0x111}, @generic="cf71dc13eae0c0bd96e18a54d9518dcccf13e1f2caec220205162d9008ce8a68ee3dce753e25240e26a784bf11df8b5c1f2f836fee865df97d7e76c2a6f53c4527e004e6d1e7eb5405d6add6fc1ec02bf31f9ab8e2ca8d5e2abbd20c310c31b5efffc3aecfcbd53c5a24f7e8f6142e1886bc887d508bd16d520b99956c077be2a29a6226719a63873752877cb0d8184d29bdbcdd0d714f1a094fb534da497c9753eaec9d236e7d91d529073532d7c68a25f4ab7ab340f0096a0de45908cc70c61ee73b780d3c72892498a4b983d6829b3a735f3ff0e077", @typed={0x8, 0x100, 0x0, 0x0, @fd=r5}]}, @generic="40c504f0311bb39f26e5adb92435d2f9521b9a9b866fb855b36485ac8cd31d65b7bf85029dd429325e6977ec186ab8abf00e370fc11d", @typed={0x8, 0x23, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3b}}, @generic="400256a4af3c8aa9e90099d3d4ef8c41d1e6b01d2ee8b358f26bcb892394a76293e9bb2688c1efd7701b4fa741bb59bb1a00f4b4defc16a311dff6e0355da13607eb9afe9ae099f01da3eb99ff0a9562d6cb5c"]}, 0x198}, {&(0x7f0000000d00)={0x180, 0x27, 0x8, 0x70bd28, 0x25dfdbff, "", [@generic="f8b38c7c4b3b8ce9fbc5929a462128bf8ddf03a5f61f20fde09ee71aa0e12c73ccbdfefe13cf5ec0b7c6e35d1eae2b0693440addaf2cdffecd0181aec31c3cfdf6a7e9bc8181212b6fb1bc959e08adb3b77de75bca26c6b5e355b1035510255b15c1669f7584f56da347862187634c22c5e8f22954c1aaaf13d4009322be2ac2b84220b35335b24ff9de7ae2c2fa17f44c07b99824430bb34e09e4c50965bacc5fc233f75ba21060ac05210177e088ec9fc5c6", @typed={0x8, 0x6c, 0x0, 0x0, @fd=r3}, @nested={0xa0, 0x116, 0x0, 0x1, [@typed={0x6, 0xcd, 0x0, 0x0, @str='-\x00'}, @typed={0x8, 0x112, 0x0, 0x0, @pid=r9}, @generic="dc7361a6e0c2ad151c895441b2bb615b472078e60df3ae89ae753aae7c165d5331c78c72097a3453211cc4ce0e2fe47099765795123f42933536fb54c44f22174fff47e84e82355cf840b490e8e2440d2aff12f65477e7ef6d6493d2a862f79b9cba2f30c3c7afbacfc6d74343513a74dce70d1905470109f709fe86962528e30acbb09df41f1f8e", @nested={0x4, 0xe3}]}, @nested={0x14, 0x9f, 0x0, 0x1, [@nested={0x4, 0x24}, @typed={0xa, 0x92, 0x0, 0x0, @str='wlan0\x00'}]}]}, 0x180}, {&(0x7f0000000f00)={0xa8, 0x3c, 0x4, 0x70bd27, 0x25dfdbfe, "", [@generic="ba638b3dcdc713370d62e13022639f8b25", @nested={0x58, 0xfa, 0x0, 0x1, [@nested={0x4, 0xd5}, @typed={0x8, 0xdf, 0x0, 0x0, @pid=r10}, @generic="b21b8c8833df97c66a61091acb25378932938dfa4af3ac43745e9048b7e90ebce7112d10952421b1ab08eeba", @nested={0x4, 0x7a}, @typed={0x4, 0xe1}, @nested={0x4, 0x130}, @typed={0x8, 0x108, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x6f, 0x0, 0x0, @u32=0xffff7fff}]}, @generic="cb0473a1a9ea05592b737c9e43ba4aebb74a3902fa6757b666dad86b442a181c9144724ee6d3f206066a45d6f1"]}, 0xa8}, {&(0x7f0000001000)={0x80, 0x36, 0x10, 0x70bd2a, 0x25dfdbfe, "", [@nested={0xc, 0x14b, 0x0, 0x1, [@nested={0x4, 0x3b}, @nested={0x4, 0x89}]}, @typed={0x8, 0x1d, 0x0, 0x0, @pid=r11}, @typed={0xc, 0x11d, 0x0, 0x0, @u64=0x2}, @generic="af164f8ba667a5d0a6b0c09ef6026a71bfa34b43a0370eff3ab5462fc18a03fe036c5fca48d3e5b1e8c39ad0bb05227cda56b378d5e2edb751d856d31801d4d2c62360020c31fc", @typed={0x8, 0x69, 0x0, 0x0, @u32=0x9}]}, 0x80}, {&(0x7f0000001080)={0x70, 0x1e, 0x4, 0x70bd27, 0x25dfdbfe, "", [@generic="a90e6be8e0d66ac73820c067beaebf2eb5ea129fc6a5a823716dd2f92b6e269e95fbfbe4c3df47a30d50c9aeab5470641568d445c402fb4b790184cc604a3fc65de797e7f01940908eda7b78cfe776b7a7cf1b8f287929c33cd8f4c9ffc1e7"]}, 0x70}], 0x6, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @rights={{0x20, 0x1, 0x1, [r17, r3, r1, r3]}}], 0x60, 0x20044000}, 0x800) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000001480)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r1, {r8}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r18, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x3c, r2, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x200}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x81}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x44080) (async) sendmsg$NL80211_CMD_SET_COALESCE(r18, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x3c, r2, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x200}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x81}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x44080) 2m16.332108249s ago: executing program 8 (id=2482): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x20000800}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$CDROMVOLREAD(0xffffffffffffffff, 0x5313, &(0x7f00000000c0)) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="f8010000100001000000000000000000fc010000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000"], 0x1f8}}, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) getsockname(r2, 0x0, &(0x7f00000002c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) r5 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x9, 0x200) close_range(r5, r0, 0x2) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) syz_genetlink_get_family_id$nbd(&(0x7f0000002200), 0xffffffffffffffff) 2m15.83327988s ago: executing program 8 (id=2487): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x36) 2m3.758013014s ago: executing program 5 (id=2553): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x14, 0x5}}}, 0x24}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) 2m3.642412283s ago: executing program 5 (id=2611): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000a00)={0x8, {"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", 0x1000}}, 0x1006) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x24041005}, 0x2c77edc509eea7a8) 2m3.501083799s ago: executing program 5 (id=2614): syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103, 0x28820}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x48000) add_key(0x0, 0x0, &(0x7f0000000100)="305c0605e182d1447ad1ad", 0xb, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) (async) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xffffffffffffff02, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (async) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r4, &(0x7f00000010c0)=[{&(0x7f0000001800)=""/245, 0xf5}], 0x1, 0x40000004, 0x6) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000340)="66b9800000c00f326635000800000f3066b9ea0a000066b84d00000066ba000000000f300f20d86635200000000f22d8f3263c0866b9800000c00f326635002000000f300fd9ec0f01cfbaf80c66b830af5f8366efbafc0c66b80400000066ef66b9800000c00f326635002000000f300f01bce92a", 0x75}], 0x1, 0xa, &(0x7f0000000240)=[@efer={0x2, 0x8000}, @cstype0={0x4, 0xe}], 0x2) (async) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = dup(r5) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='cramfs\x00', 0x204001, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2m3.051734241s ago: executing program 5 (id=2618): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001f40), r2) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x65) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r4, 0x200, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000}) symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00') chmod(&(0x7f0000000000)='./file0\x00', 0x9) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x4000000, 0x2000008, 0x0, 0x80000001}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r5, &(0x7f0000000340)='ns/pid_for_children\x00') socket$nl_netfilter(0x10, 0x3, 0xc) 2m1.866545319s ago: executing program 5 (id=2631): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x8001) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000900", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2m1.052469843s ago: executing program 5 (id=2640): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x0, 0x5, 0x7, 0x8}, 0xc) r1 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r1, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa08004700003000000000000690780a010102ac1414aa07060441b613a300"/46, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80000) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) r5 = fsopen(&(0x7f00000003c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)={0x40, r6, 0x801, 0xfffffffd, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee3b90807eef16f162471f4"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x40}}, 0x0) prctl$PR_MCE_KILL_GET(0x22) r9 = fsmount(r5, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r9, &(0x7f00000000c0)='./file0\x00') sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000160001040000000000000000ac1414aa000000000000000000000000ff01000000000000000000000000000100000fd100040002020000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc02000000000000000000000000000000000000330000000000000000000000000000000000000100000000000000000000000000000000000000080000000000000000000000000000000000000080010000800000000000000400004000000000160e00000000010100000000000000000000000004000000000000000000001700000000060000000004000000000000000000000a000000940000000000000000000000ad0400000c0008000800080001b2000000000000000077abc984e6a376457aa485680214211d36aee3950f12a8e0"], 0x104}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x3, 0x8, 0x7, 0x6, 0x9, 0x10, 0x9, 0x2, 0xf3, 0x11ae000, 0x29, 0x8000, 0x100, 0x8, 0x80000001, 0x6e], 0xeeee0000, 0x300000}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl(r5, 0x5, &(0x7f0000000440)="3a9cfc1da9a3c8e5c21ef68852158fcd6784016de4da6afa97ee5c7d8a02b8b6ef852bc99aaba6d30b1688151b219a6bbb1d239b55ce78a62acf08f4f4d059fd89c7556bd96df17f85f137f2d901492aa313c731b7226a44b19366d3af32e6676208b32bde0979326788f51304fe2c3c1bf107e20c8970523d88c377a5efdc2e353ccad27e9fd22753c448dae90e25eea8cbf42342d9fd759ad9d218c9305964f66fa63ef97622c64dfd82f7f57f12812208ecf96462ae6c9d1257ea303f413b3a05ae37fe1006") r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000010428bd7000feffffff00000000aaf7e1", @ANYRES32=0x0, @ANYBLOB="4605000001a0010014000300776c616e3100000000000000000000000a0001000180c20000010000"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) dup(r10) 2m1.023518363s ago: executing program 37 (id=2640): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x0, 0x5, 0x7, 0x8}, 0xc) r1 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r1, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa08004700003000000000000690780a010102ac1414aa07060441b613a300"/46, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80000) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) r5 = fsopen(&(0x7f00000003c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)={0x40, r6, 0x801, 0xfffffffd, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee3b90807eef16f162471f4"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x40}}, 0x0) prctl$PR_MCE_KILL_GET(0x22) r9 = fsmount(r5, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r9, &(0x7f00000000c0)='./file0\x00') sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000160001040000000000000000ac1414aa000000000000000000000000ff01000000000000000000000000000100000fd100040002020000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc02000000000000000000000000000000000000330000000000000000000000000000000000000100000000000000000000000000000000000000080000000000000000000000000000000000000080010000800000000000000400004000000000160e00000000010100000000000000000000000004000000000000000000001700000000060000000004000000000000000000000a000000940000000000000000000000ad0400000c0008000800080001b2000000000000000077abc984e6a376457aa485680214211d36aee3950f12a8e0"], 0x104}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x3, 0x8, 0x7, 0x6, 0x9, 0x10, 0x9, 0x2, 0xf3, 0x11ae000, 0x29, 0x8000, 0x100, 0x8, 0x80000001, 0x6e], 0xeeee0000, 0x300000}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl(r5, 0x5, &(0x7f0000000440)="3a9cfc1da9a3c8e5c21ef68852158fcd6784016de4da6afa97ee5c7d8a02b8b6ef852bc99aaba6d30b1688151b219a6bbb1d239b55ce78a62acf08f4f4d059fd89c7556bd96df17f85f137f2d901492aa313c731b7226a44b19366d3af32e6676208b32bde0979326788f51304fe2c3c1bf107e20c8970523d88c377a5efdc2e353ccad27e9fd22753c448dae90e25eea8cbf42342d9fd759ad9d218c9305964f66fa63ef97622c64dfd82f7f57f12812208ecf96462ae6c9d1257ea303f413b3a05ae37fe1006") r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000010428bd7000feffffff00000000aaf7e1", @ANYRES32=0x0, @ANYBLOB="4605000001a0010014000300776c616e3100000000000000000000000a0001000180c20000010000"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) dup(r10) 1m59.991364726s ago: executing program 38 (id=2487): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x36) 45.888637613s ago: executing program 7 (id=2763): syz_open_dev$video4linux(&(0x7f0000000080), 0xae, 0xa82) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000000c0)) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d160b2d, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8, 0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xe93}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xab}, {}, {}, {}, {0x2}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2a6}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x6}], [{}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x804) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, 0x0, &(0x7f0000000100)) bind$alg(r1, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f0000000040)="fcff45c2", 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@printk={@lx={0x18, 0x1, 0x0, 0xd0}, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x500}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 38.204112403s ago: executing program 7 (id=2763): syz_open_dev$video4linux(&(0x7f0000000080), 0xae, 0xa82) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000000c0)) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d160b2d, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8, 0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xe93}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xab}, {}, {}, {}, {0x2}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2a6}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x6}], [{}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x804) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, 0x0, &(0x7f0000000100)) bind$alg(r1, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f0000000040)="fcff45c2", 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@printk={@lx={0x18, 0x1, 0x0, 0xd0}, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x500}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 30.338904263s ago: executing program 7 (id=2763): syz_open_dev$video4linux(&(0x7f0000000080), 0xae, 0xa82) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000000c0)) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d160b2d, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8, 0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xe93}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xab}, {}, {}, {}, {0x2}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2a6}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x6}], [{}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x804) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, 0x0, &(0x7f0000000100)) bind$alg(r1, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f0000000040)="fcff45c2", 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@printk={@lx={0x18, 0x1, 0x0, 0xd0}, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x500}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 22.94154402s ago: executing program 7 (id=2763): syz_open_dev$video4linux(&(0x7f0000000080), 0xae, 0xa82) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000000c0)) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d160b2d, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8, 0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xe93}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xab}, {}, {}, {}, {0x2}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2a6}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x6}], [{}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x804) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, 0x0, &(0x7f0000000100)) bind$alg(r1, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f0000000040)="fcff45c2", 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@printk={@lx={0x18, 0x1, 0x0, 0xd0}, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x500}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 14.770651307s ago: executing program 7 (id=2763): syz_open_dev$video4linux(&(0x7f0000000080), 0xae, 0xa82) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000000c0)) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d160b2d, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8, 0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xe93}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xab}, {}, {}, {}, {0x2}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2a6}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x6}], [{}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x804) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, 0x0, &(0x7f0000000100)) bind$alg(r1, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f0000000040)="fcff45c2", 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@printk={@lx={0x18, 0x1, 0x0, 0xd0}, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x500}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 6.549255743s ago: executing program 7 (id=2763): syz_open_dev$video4linux(&(0x7f0000000080), 0xae, 0xa82) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000000c0)) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d160b2d, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8, 0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xe93}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xab}, {}, {}, {}, {0x2}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2a6}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x6}], [{}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x804) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, 0x0, &(0x7f0000000100)) bind$alg(r1, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f0000000040)="fcff45c2", 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@printk={@lx={0x18, 0x1, 0x0, 0xd0}, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x500}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.056448065s ago: executing program 1 (id=3773): personality(0x4000005) uname(&(0x7f0000000640)=""/4096) uname(&(0x7f0000000080)=""/20) r0 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000240)={0x0, 0x9, 0x9c01, 0xd1c7, 0x8, 0x6, 0x5}) 1.999610265s ago: executing program 1 (id=3775): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x8001) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000ffffffffffffaa5500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.900149694s ago: executing program 1 (id=3777): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) sendmmsg(r0, &(0x7f00000063c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004010) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r3, 0x3) r4 = accept4(r3, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000540)=""/234, 0xea, 0x40000182, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=@delqdisc={0x370, 0x25, 0x300, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x7}, {0xfff3, 0x3}, {0xf, 0xf}}, [@TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0xf, 0x8, 0x2, 0x1, 0x1, 0x81, 0x8}}, {0x0, 0x2, [0x2]}}, {{0x0, 0x1, {0xfb, 0xff, 0x4, 0xfff, 0x1, 0x0, 0x4}}, {0x0, 0x2, [0xfff, 0xc2de, 0xffff, 0x8000]}}, {{0x0, 0x1, {0x4, 0x62, 0xbf, 0xccc, 0x2, 0xffff, 0xb}}, {0x0, 0x2, [0x5, 0x1, 0x8, 0x3, 0x101, 0x5, 0x3, 0x1]}}, {{0x0, 0x1, {0x1, 0x2, 0x5, 0x0, 0x0, 0x7, 0x1}}, {0x0, 0x2, [0x8, 0x8, 0x3, 0x5, 0x6]}}, {{0x0, 0x1, {0x98, 0x7, 0x6, 0x9, 0x0, 0x3, 0x6}}, {0x0, 0x2, [0x7]}}, {{0x0, 0x1, {0x7, 0x6, 0x9, 0x2, 0x2, 0xfffffff2, 0x400}}, {0x0, 0x2, [0x2, 0xc46, 0xb, 0xd106]}}, {{0x0, 0x1, {0xe, 0x3, 0x3, 0x5, 0x0, 0xfffffe00, 0x3c52}}, {0x0, 0x2, [0x6, 0x1c90, 0xe143, 0x7, 0x7659, 0x5, 0x1, 0x37f0, 0x7f84, 0x3]}}, {{0x0, 0x1, {0x0, 0xb, 0x7f, 0x4, 0x0, 0x40000, 0x6}}, {0x0, 0x2, [0x1, 0xfff9, 0x8, 0x492a, 0x2, 0x0, 0x5, 0xdae, 0x6, 0x5]}}]}, @TCA_STAB={0xec, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x0, 0x2, 0x5, 0x1, 0x0, 0x1, 0x2}}, {0x8, 0x2, [0x240, 0x4]}}, {{0x1c, 0x1, {0x6, 0xb1, 0x4, 0x7f, 0x0, 0x7, 0x80, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x2, 0xf, 0xfff, 0x9, 0x0, 0x592a7714, 0x3ff, 0x2}}, {0x8, 0x2, [0x4, 0x8]}}, {{0x1c, 0x1, {0x3, 0xf5, 0x101, 0xff, 0x0, 0x8, 0x3ff, 0x7}}, {0x12, 0x2, [0x81, 0x9, 0x2c, 0x2, 0x5, 0x5, 0x3]}}, {{0x1c, 0x1, {0x3, 0x5, 0x9, 0x5, 0x2, 0x6, 0x9, 0x1}}, {0x6, 0x2, [0xfc00]}}, {{0x1c, 0x1, {0x9, 0x8, 0x13, 0x4, 0x0, 0x9, 0x8, 0x3}}, {0xa, 0x2, [0x4193, 0xdef, 0x1000]}}]}, @qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0xffff, 0x3, 0x7, 0x1, 0x7}, [@TCA_NETEM_RATE={0x14, 0x6, {0xffff8000, 0x1, 0x2, 0x8001}}, @TCA_NETEM_CORR={0x10, 0x1, {0x0, 0x4}}, @TCA_NETEM_CORR={0x10, 0x1, {0xff, 0x7a76f88d, 0xed}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xb8e5033d10a9a83d}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa8bc}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_STAB={0x148, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x4f, 0xf, 0x80000001, 0x2, 0xfffffffd, 0x40, 0x2}}, {0x8, 0x2, [0x1, 0x50]}}, {{0x1c, 0x1, {0x7, 0x18, 0x5, 0x0, 0x1, 0xffffffff, 0x3ff, 0x3}}, {0xa, 0x2, [0x7, 0xb6, 0x8]}}, {{0x1c, 0x1, {0x9, 0x9, 0x6, 0x9, 0x2, 0x6, 0xd, 0x9}}, {0x16, 0x2, [0x3, 0x89, 0x9, 0xfc01, 0x2, 0x5, 0x5, 0x2, 0x5]}}, {{0x1c, 0x1, {0x1, 0x6, 0x6, 0x6, 0x0, 0x3, 0x2, 0x7}}, {0x12, 0x2, [0xa56c, 0x2c2e, 0xff, 0x9, 0xc, 0x3, 0x5e]}}, {{0xfffffe7c, 0x1, {0x1, 0x4, 0x9, 0x9b, 0x1, 0x5, 0x200, 0x7}}, {0x12, 0x2, [0x1ff, 0x5, 0x7ff, 0xffff, 0x4, 0x7, 0x47]}}, {{0x1c, 0x1, {0x7, 0x2, 0xd, 0x53f, 0x0, 0x2, 0x80000000, 0xa}}, {0x18, 0x2, [0x7ff, 0x1, 0x3ff, 0x4, 0x9, 0x9, 0x6, 0x2, 0x7508, 0x1]}}, {{0x1c, 0x1, {0x5, 0x7, 0x6, 0x9, 0x2, 0xfffffff7, 0x9, 0x8}}, {0x14, 0x2, [0x8, 0x0, 0x800, 0x15c, 0x7f, 0x9, 0x401, 0x9d28]}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x54, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x5}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0xb}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xc}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xc}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x5}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x1ff, "2561eb965f1f71472a3604fb7effc061"}}}]}, 0x370}, 0x1, 0x0, 0x0, 0x2000040}, 0x4004815) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$SIOCX25GSUBSCRIP(r2, 0x5411, &(0x7f0000000100)={'erspan0\x00', 0xfffffffffffffffc, 0x2}) 1.236613993s ago: executing program 3 (id=3783): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2c, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8081}}], 0x1, 0x800) 1.130768502s ago: executing program 3 (id=3784): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403, 0xe7}}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x2f0, 0xffffffff, 0x110, 0x110, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @private=0xa010102, 0xffffffff, 0xff000000, 'bond_slave_1\x00', 'pimreg0\x00', {}, {}, 0x5c, 0x3, 0x4}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x3ac8, 0x0, 0x667f, 0x10b11, 0x81, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x2, 0x3ff]}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ip={@remote, @private=0xa010102, 0xffffff00, 0xff, 'veth0_to_batadv\x00', 'bridge0\x00', {0xff}, {0xff}, 0x88, 0x6, 0x29}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0xd}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) shutdown(r0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x3004002, &(0x7f0000000400)={[{@max={'max', 0x3d, 0x2b034a0f}}]}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000500)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100013d0d00e10000000000000000e8"], 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.000171671s ago: executing program 9 (id=3786): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="500100001000132d00000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001210002020000003b0000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000fe80000000000000000000000000001b0000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000001c0000000043050000000000000400000000000000ffffffffffffff7f0000000000000000000000000000000000000000000000000000000028bd7000003500000a000400000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) 999.83365ms ago: executing program 1 (id=3787): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) (async) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700e, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x2) (async) umount2(&(0x7f0000000480)='./file0\x00', 0x2) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000001c0)=[r2, r2], 0x0, 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000001c0)=[r2, r2], 0x0, 0x2}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x9) (async) ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x9) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000080)={r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000080)={r2}) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x2, 0x0, &(0x7f0000000040)) close(r5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f000009de00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00777fe66901002abd7000000000000a000000", @ANYRES32=0x0, @ANYBLOB="14000200fe8000000000000000000000000000aa"], 0x2c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f000009de00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00777fe66901002abd7000000000000a000000", @ANYRES32=0x0, @ANYBLOB="14000200fe8000000000000000000000000000aa"], 0x2c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d80)=@security={'security\x00', 0x44, 0x4, 0x458, 0xffffffff, 0x0, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x388, 0x388, 0x388, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0xa8, 0x1d0, 0x8502}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xab, 0x24, "aeaebfccef9bce1fd124c2479745f617049cd64b82629795273b1b27fa25"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) getpid() (async) getpid() 899.817194ms ago: executing program 9 (id=3788): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "dc2ea151f362d8cc6bbf48ffee1fa5a83d1f357942cd254a9f10890ed33d38a1f0ac73ad6bcdaec7b6be065fd79fd766a9ab97ce0defeb6bd22948bceb142284", 0x40}, 0x48, 0xfffffffffffffff8) keyctl$negate(0xd, r0, 0x5, r1) keyctl$reject(0x13, r1, 0x2, 0x1800, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r1) r3 = request_key(&(0x7f0000000200)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='$\x00', 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r3, &(0x7f00000002c0)='trusted\x00', &(0x7f0000000300)='^^$\\{*\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r5, r8) keyctl$unlink(0x9, r1, r1) keyctl$assume_authority(0x10, r1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000480)=[@window={0x3, 0x7f}, @sack_perm, @sack_perm, @window={0x3, 0x5, 0x9}, @window={0x3, 0x400, 0x8000}, @timestamp, @sack_perm, @sack_perm, @sack_perm], 0x9) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r10, 0x84, 0x12, &(0x7f0000000500), &(0x7f0000000540)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e22, @empty}}, [0x2, 0x8, 0x1, 0xfffffffffffffffb, 0x3, 0x8000000000000001, 0x7f, 0x2, 0xd, 0x80000001, 0x7, 0x100000001, 0x5f6e, 0x8000000000000001, 0x817]}, &(0x7f0000000680)=0x100) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r10, 0x84, 0x19, &(0x7f00000006c0)={r11, 0x3ff}, 0x8) r12 = syz_open_dev$usbfs(&(0x7f0000000700), 0x4, 0x40000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r12, 0x8108551b, &(0x7f0000000740)={0x9, 0x2, "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"}) r13 = syz_open_procfs$namespace(r4, &(0x7f0000000880)='ns/user\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000900)={{0x1, 0x1, 0x18, r10, {r5, r6}}, './file1\x00'}) r16 = getgid() fsetxattr$system_posix_acl(r13, &(0x7f00000008c0)='system.posix_acl_default\x00', &(0x7f0000000940)={{}, {0x1, 0x4}, [{0x2, 0xc, r7}], {0x4, 0x5}, [{0x8, 0x3, r6}, {0x8, 0x0, r15}, {0x8, 0x4, r16}], {0x10, 0x1}, {0x20, 0x2}}, 0x44, 0x3) ioctl$SCSI_IOCTL_GET_PCI(r14, 0x5387, &(0x7f00000009c0)) keyctl$assume_authority(0x10, r0) r17 = getuid() mount$fuse(0x0, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), 0x30008, &(0x7f0000000a80)={{'fd', 0x3d, r14}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@allow_other}], [{@flag='nolazytime'}, {@uid_lt={'uid<', r17}}]}}) ioctl$SG_GET_SG_TABLESIZE(r14, 0x227f, &(0x7f0000000b40)) add_key$fscrypt_v1(&(0x7f0000000b80), &(0x7f0000000bc0)={'fscrypt:', @desc4}, &(0x7f0000000c00)={0x0, "ed5b6becf9dab4a05966d0fa8346487a019ceef0551bd7628986b52830cd036d73dccf0da60d0a20ed1b74f2a70820a06553a3a965075bf35b848d23443e47d6", 0x2b}, 0x48, r2) 899.633564ms ago: executing program 1 (id=3789): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb4cd}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r5, 0xdfd2c0ff079d97f5}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004044}, 0x20008044) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) r9 = accept4$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x800) connect$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r10, 0x40046208, 0x0) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000140)=ANY=[], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x10c0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',posixacl']) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000000c0)='dvmrp1\x00', 0x10) pipe(&(0x7f0000000340)) 780.368399ms ago: executing program 9 (id=3790): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000004c0)={0x1, 0x0, &(0x7f0000000380)=""/226, &(0x7f0000000900)=""/88, &(0x7f0000000880)=""/67, 0xeeee8000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x3, 0x0, 0x0, 0x100000000, 0x0, 0x0}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r5) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x645}, 0x53) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000080)={0x0, 0x51, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r7) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x1, 0x8, 0x0, 0x9, {{0x36, 0x4, 0x1, 0x2, 0xd8, 0x66, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @loopback, {[@rr={0x7, 0x1b, 0xc0, [@multicast2, @loopback, @local, @private=0xa010101, @broadcast, @remote]}, @noop, @cipso={0x86, 0x53, 0xffffffffffffffff, [{0x2, 0x2}, {0x7, 0xa, "31a9ee818e2edbad"}, {0x5, 0x12, "d27d8da1feefafc2d6308c8aadbe2c29"}, {0x7, 0xf, "65d2ca3f7dc24814911d8e9ffe"}, {0x1, 0xd, "d9825e3741038d9f767311"}, {0x0, 0xa, "b24753c65f926642"}, {0x2, 0x6, "5f28eaef"}, {0x6, 0x3, "d3"}]}, @noop, @ssrr={0x89, 0x27, 0x7f, [@remote, @dev={0xac, 0x14, 0x14, 0x11}, @loopback, @remote, @rand_addr=0x64010100, @local, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0xb, 0x8a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @timestamp={0x44, 0x20, 0x4f, 0x0, 0x5, [0x7, 0x7, 0x5, 0x0, 0x7a, 0x7ff, 0x0]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x808001}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)={0x60, r8, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbf}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x0) 710.364873ms ago: executing program 1 (id=3791): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b408000000000000691028ec08f779c32cd60000000000de0800000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = syz_clone(0x9000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026, r0}, &(0x7f00000001c0)={0x2, 0x667, 0xc, 0x0, 0x0, 0xeac}) socket$netlink(0x10, 0x3, 0x4) mlock2(&(0x7f0000153000/0x3000)=nil, 0x3000, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 657.658692ms ago: executing program 39 (id=3791): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b408000000000000691028ec08f779c32cd60000000000de0800000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = syz_clone(0x9000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026, r0}, &(0x7f00000001c0)={0x2, 0x667, 0xc, 0x0, 0x0, 0xeac}) socket$netlink(0x10, 0x3, 0x4) mlock2(&(0x7f0000153000/0x3000)=nil, 0x3000, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 609.964971ms ago: executing program 9 (id=3793): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000180)="9e36d448b388dd96bd4c2487ae5f", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$vim2m(&(0x7f0000000680), 0x7ff, 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x400, 0x50, 0x46}, 0x18) r5 = openat(r4, 0xffffffffffffffff, 0x4400, 0xb4) accept4$bt_l2cap(r5, 0x0, &(0x7f0000000000), 0x800) bind$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x0, @none, 0x7, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000040)={0xca60, 0x5, 0x7, 0x8}, 0xc) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000340)={0x0, 0x4002, 0x2, {0x3, @sdr={0x3132564e, 0x800}}}) 422.900413ms ago: executing program 9 (id=3794): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000e00600"]) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000000)=0x10000, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4008053, r4, 0x80000000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2002, 0x0, &(0x7f0000ffa000/0x2000)=nil) r5 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BLKRRPART(r5, 0x125f, 0x0) readv(r5, &(0x7f00000025c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/239, 0xffffffda}, {&(0x7f00000013c0)=""/195, 0xc3}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f00000024c0)=""/251, 0xfb}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000240)=""/56, 0x38}], 0x9) 201.332934ms ago: executing program 3 (id=3795): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)=0x200004c) 150.776915ms ago: executing program 3 (id=3796): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="500100001000132d00000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001210002020000003b0000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000fe80000000000000000000000000001b0000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000ff800000000043050000000000000400000000000000ffffffffffffff7f0000000000000000000000000000000000000000000000000000000028bd7000003500000a000400000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) 69.815784ms ago: executing program 3 (id=3797): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) (async) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="0b24646c519cd3d936eeef82f3454872b61820f8266279d77e420396071f911d26a2496601f6b0c4d3ee637af92983a72e1d88381b886e476c19b32db54fb37d5fe1a75ae05da01381d069e3a2eb3f0508e191fd4a9ca17f9ae6b5", 0x5b, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, r1, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) (async) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r3, &(0x7f0000000000)="822a0a80a7f95359135a934b33fe802f446de497df88237d", 0x18) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c1bbdbe3160578f5aa421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e6405c0cf5329cb7f1821ec7ecca1d3ffb2d7144f29af11fe6557f8a74d923d12c43bc0000004d0012"], 0xb4}}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x3ff) dup3(r5, r4, 0x0) (async) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') close(0x3) (async) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) (async) r8 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x4) (async) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 352.512µs ago: executing program 3 (id=3798): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001002f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001000088be"], 0xfdef) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {0xfff2, 0x4}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xb5d, 0x1, 0x32}, {0x1, 0x81, 0x400, 0x5, 0x6, 0x1, 0x1}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404c021}, 0x20040054) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 9 (id=3799): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x2, 0x7, 0xa8, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x4025}, 0x60) (async) close(r1) kernel console output (not intermixed with test programs): egistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.347946][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.457155][T16281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.466293][T16284] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3226'. [ 317.468921][T16281] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3225'. [ 317.580113][T11532] bridge_slave_1: left allmulticast mode [ 317.581987][T11532] bridge_slave_1: left promiscuous mode [ 317.583470][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 317.587478][T11532] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.589184][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 317.593750][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 317.597436][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 317.600339][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 317.601026][T11532] bridge_slave_0: left allmulticast mode [ 317.604479][T11532] bridge_slave_0: left promiscuous mode [ 317.606305][T11532] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.772843][ T6033] usb 6-1: new low-speed USB device number 50 using dummy_hcd [ 317.929157][ T6033] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.933471][ T6033] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 317.936368][ T6033] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 317.939197][ T6033] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.944597][ T6033] usb 6-1: config 0 descriptor?? [ 317.983098][ C3] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 318.022015][T16304] 9pnet_fd: Insufficient options for proto=fd [ 318.028236][T11532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.034717][T11532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.044528][T11532] bond0 (unregistering): Released all slaves [ 318.102542][T16292] xfrm0 speed is unknown, defaulting to 1000 [ 318.107137][T16292] lo speed is unknown, defaulting to 1000 [ 318.221676][T16309] netlink: 'syz.9.3231': attribute type 2 has an invalid length. [ 318.227231][T16312] 9pnet_fd: Insufficient options for proto=fd [ 318.235778][T16312] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3227'. [ 318.465490][ T9] usb 6-1: USB disconnect, device number 50 [ 318.505484][T11532] hsr_slave_0: left promiscuous mode [ 318.511124][T11532] hsr_slave_1: left promiscuous mode [ 318.513321][T11532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.515810][T11532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.523650][T11532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.526717][T11532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.586797][T11532] veth1_macvtap: left promiscuous mode [ 318.588607][T11532] veth0_macvtap: left promiscuous mode [ 318.590418][T11532] veth1_vlan: left promiscuous mode [ 318.592099][T11532] veth0_vlan: left promiscuous mode [ 318.637377][T16321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3234'. [ 319.047282][T16327] input input69: cannot allocate more than FF_MAX_EFFECTS effects [ 319.396734][T11532] team0 (unregistering): Port device team_slave_1 removed [ 319.499868][T11532] team0 (unregistering): Port device team_slave_0 removed [ 319.676284][ T5946] Bluetooth: hci0: command tx timeout [ 320.129747][T16322] nr0: entered promiscuous mode [ 320.233136][T16292] chnl_net:caif_netlink_parms(): no params data found [ 320.370917][T16292] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.373973][T16292] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.376333][T16292] bridge_slave_0: entered allmulticast mode [ 320.379006][T16292] bridge_slave_0: entered promiscuous mode [ 320.389975][T16292] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.392365][T16292] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.396623][T16292] bridge_slave_1: entered allmulticast mode [ 320.401697][T16292] bridge_slave_1: entered promiscuous mode [ 320.437451][T16338] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3238'. [ 320.440521][T16336] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3238'. [ 320.504383][T16292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.510501][T16292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.548213][T16292] team0: Port device team_slave_0 added [ 320.553960][T16292] team0: Port device team_slave_1 added [ 320.565636][T16344] kvm: pic: non byte write [ 320.620060][T16292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.622264][T16292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.630361][T16292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.646189][T16292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.648405][T16292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.657313][T16292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.737768][T16292] hsr_slave_0: entered promiscuous mode [ 320.740188][T16292] hsr_slave_1: entered promiscuous mode [ 320.742246][T16292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.746632][T16292] Cannot create hsr debugfs directory [ 321.016228][T16365] "syz.1.3245" (16365) uses obsolete ecb(arc4) skcipher [ 321.095010][ T40] kauditd_printk_skb: 411 callbacks suppressed [ 321.095027][ T40] audit: type=1400 audit(1750895037.076:130483): avc: denied { create } for pid=16389 comm="syz.1.3252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 321.110213][ T40] audit: type=1400 audit(1750895037.076:130484): avc: denied { create } for pid=16389 comm="syz.1.3252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 321.117900][ T40] audit: type=1400 audit(1750895037.086:130485): avc: denied { write } for pid=16389 comm="syz.1.3252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 321.124502][ T40] audit: type=1400 audit(1750895037.086:130486): avc: denied { create } for pid=16389 comm="syz.1.3252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 321.130626][ T40] audit: type=1400 audit(1750895037.086:130487): avc: denied { write } for pid=16389 comm="syz.1.3252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 321.138265][ T40] audit: type=1400 audit(1750895037.086:130488): avc: denied { create } for pid=16389 comm="syz.1.3252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 321.146574][ T40] audit: type=1400 audit(1750895037.086:130489): avc: denied { write } for pid=16389 comm="syz.1.3252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 321.155801][ T40] audit: type=1400 audit(1750895037.096:130490): avc: denied { ioctl } for pid=16389 comm="syz.1.3252" path="socket:[76986]" dev="sockfs" ino=76986 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 321.167317][ T40] audit: type=1400 audit(1750895037.106:130491): avc: denied { create } for pid=16395 comm="syz.9.3253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 321.176367][ T40] audit: type=1400 audit(1750895037.136:130492): avc: denied { read write } for pid=14283 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 321.304243][T16406] loop6: detected capacity change from 0 to 7 [ 321.312961][T16406] Dev loop6: unable to read RDB block 7 [ 321.317117][T16406] loop6: unable to read partition table [ 321.319781][T16406] loop6: partition table beyond EOD, truncated [ 321.322493][T16406] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 321.374415][T16292] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 321.395142][T16292] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 321.406686][T16292] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 321.416611][T16292] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 321.546909][T16422] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 321.549334][T16422] IPv6: NLM_F_CREATE should be set when creating new route [ 321.559313][T16292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.581196][T16292] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.590042][T11534] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.592725][T11534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.608125][T11534] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.610883][T11534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.689716][T16424] netlink: 'syz.1.3260': attribute type 11 has an invalid length. [ 321.692281][T16424] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3260'. [ 321.742958][ T5946] Bluetooth: hci0: command tx timeout [ 321.796476][T16430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3262'. [ 321.801408][T16429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3262'. [ 321.802885][T16430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3262'. [ 321.805301][T16429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3262'. [ 321.809000][T16430] netlink: 'syz.1.3262': attribute type 19 has an invalid length. [ 321.812421][T16429] netlink: 'syz.1.3262': attribute type 19 has an invalid length. [ 321.878476][T16429] block nbd0: not configured, cannot reconfigure [ 322.166375][T16292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.480439][T16471] netlink: 'syz.3.3273': attribute type 4 has an invalid length. [ 322.493080][T16464] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3272'. [ 322.628571][T16478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16478 comm=syz.1.3274 [ 322.731018][T16292] veth0_vlan: entered promiscuous mode [ 322.749579][T16292] veth1_vlan: entered promiscuous mode [ 322.804512][T16292] veth0_macvtap: entered promiscuous mode [ 322.811924][T16292] veth1_macvtap: entered promiscuous mode [ 322.840587][T16292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.859630][T16292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.871268][T16292] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.874019][T16292] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.876651][T16292] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.879381][T16292] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.887360][T16499] o2cb: This node has not been configured. [ 322.889319][T16499] o2cb: Cluster check failed. Fix errors before retrying. [ 322.891466][T16499] (syz.1.3279,16499,0):user_dlm_register:674 ERROR: status = -22 [ 322.895161][T16499] (syz.1.3279,16499,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 322.975876][T11530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.978679][T11530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.988959][T16502] batadv_slave_1: entered promiscuous mode [ 322.993270][T16502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3281'. [ 323.005792][T16502] team0 (unregistering): Port device team_slave_0 removed [ 323.009655][T16502] team0 (unregistering): Port device team_slave_1 removed [ 323.040122][T11498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.051295][T11498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.076671][T16501] batadv_slave_1: left promiscuous mode [ 323.099197][T16504] xfrm0 speed is unknown, defaulting to 1000 [ 323.101897][T16504] lo speed is unknown, defaulting to 1000 [ 323.649997][T16544] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3293'. [ 323.842883][T16559] loop6: detected capacity change from 0 to 7 [ 323.848461][ T8742] Dev loop6: unable to read RDB block 7 [ 323.850359][ T8742] loop6: unable to read partition table [ 323.852244][ T8742] loop6: partition table beyond EOD, truncated [ 323.853137][ T10] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 323.861175][T16559] Dev loop6: unable to read RDB block 7 [ 323.863122][T16559] loop6: unable to read partition table [ 323.864977][T16559] loop6: partition table beyond EOD, truncated [ 323.866943][T16559] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 324.003011][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 324.018964][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 324.030892][ T10] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 324.039122][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.041618][ T10] usb 6-1: Product: syz [ 324.046199][ T10] usb 6-1: Manufacturer: syz [ 324.047760][ T10] usb 6-1: SerialNumber: syz [ 324.051904][ T10] usb 6-1: config 0 descriptor?? [ 324.062381][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 324.067832][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 324.083654][ T10] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input70 [ 324.371038][T16579] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 324.544240][T11530] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.591711][T16596] veth5: entered promiscuous mode [ 325.066864][ T10] usb 6-1: USB disconnect, device number 51 [ 325.461662][T16602] x_tables: duplicate underflow at hook 3 [ 325.634736][ T5303] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 325.641571][ T5303] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 325.646800][ T5303] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 325.655625][ T5303] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 325.659063][ T5303] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 325.697676][T16610] loop6: detected capacity change from 0 to 7 [ 325.700998][T16610] Dev loop6: unable to read RDB block 7 [ 325.704841][T16610] loop6: unable to read partition table [ 325.706812][T16610] loop6: partition table beyond EOD, truncated [ 325.722860][T16610] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 325.724583][T16607] xfrm0 speed is unknown, defaulting to 1000 [ 325.728801][T16607] lo speed is unknown, defaulting to 1000 [ 325.830786][T11530] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.948124][T11530] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.990347][T16607] chnl_net:caif_netlink_parms(): no params data found [ 326.070957][T11530] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.102416][T16607] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.104404][ T40] kauditd_printk_skb: 1042 callbacks suppressed [ 326.104413][ T40] audit: type=1400 audit(1750895042.086:131535): avc: denied { bpf } for pid=16633 comm="syz.1.3320" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 326.105969][T16607] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.112658][ T40] audit: type=1400 audit(1750895042.086:131536): avc: denied { perfmon } for pid=16633 comm="syz.1.3320" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 326.115120][T16607] bridge_slave_0: entered allmulticast mode [ 326.117723][ T40] audit: type=1400 audit(1750895042.086:131537): avc: denied { perfmon } for pid=16633 comm="syz.1.3320" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 326.127326][T16607] bridge_slave_0: entered promiscuous mode [ 326.137711][ T40] audit: type=1400 audit(1750895042.086:131538): avc: denied { perfmon } for pid=16633 comm="syz.1.3320" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 326.144584][T16607] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.146684][ T40] audit: type=1400 audit(1750895042.086:131539): avc: denied { perfmon } for pid=16633 comm="syz.1.3320" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 326.150545][T16607] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.155919][ T40] audit: type=1400 audit(1750895042.086:131540): avc: denied { bpf } for pid=16633 comm="syz.1.3320" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 326.155946][ T40] audit: type=1400 audit(1750895042.086:131541): avc: denied { bpf } for pid=16633 comm="syz.1.3320" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 326.155970][ T40] audit: type=1400 audit(1750895042.086:131542): avc: denied { prog_run } for pid=16633 comm="syz.1.3320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 326.155995][ T40] audit: type=1400 audit(1750895042.116:131543): avc: denied { create } for pid=16633 comm="syz.1.3320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 326.156017][ T40] audit: type=1400 audit(1750895042.116:131544): avc: denied { write } for pid=16633 comm="syz.1.3320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 326.196186][T16607] bridge_slave_1: entered allmulticast mode [ 326.199216][T16607] bridge_slave_1: entered promiscuous mode [ 326.249030][T16607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.255731][T16643] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 326.256483][T16607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.387988][T16649] loop6: detected capacity change from 0 to 7 [ 326.391875][T16649] Dev loop6: unable to read RDB block 7 [ 326.395528][T16649] loop6: unable to read partition table [ 326.397365][T16649] loop6: partition table beyond EOD, truncated [ 326.399291][T16649] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 326.410773][T16607] team0: Port device team_slave_0 added [ 326.425494][T16607] team0: Port device team_slave_1 added [ 326.477170][T11530] bridge_slave_1: left allmulticast mode [ 326.478997][T11530] bridge_slave_1: left promiscuous mode [ 326.480871][T11530] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.496030][T11530] bridge_slave_0: left allmulticast mode [ 326.497845][T11530] bridge_slave_0: left promiscuous mode [ 326.499693][T11530] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.653146][T16657] __nla_validate_parse: 2 callbacks suppressed [ 326.653162][T16657] netlink: 165 bytes leftover after parsing attributes in process `syz.9.3327'. [ 326.840050][T11530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.846015][T11530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.849844][T11530] bond0 (unregistering): Released all slaves [ 326.898672][T16607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.900886][T16607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.908729][T16607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.915225][T16607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.917403][T16607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.925282][T16607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.028707][T16607] hsr_slave_0: entered promiscuous mode [ 327.030954][T16607] hsr_slave_1: entered promiscuous mode [ 327.034974][T16607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.037253][T16607] Cannot create hsr debugfs directory [ 327.267950][T11530] hsr_slave_0: left promiscuous mode [ 327.277198][T11530] hsr_slave_1: left promiscuous mode [ 327.279728][T11530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.282518][T11530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.293518][T11530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.296012][T11530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.356320][T16694] loop6: detected capacity change from 0 to 7 [ 327.359276][T16694] Dev loop6: unable to read RDB block 7 [ 327.360467][T11530] veth1_macvtap: left promiscuous mode [ 327.361061][T16694] loop6: unable to read partition table [ 327.370864][T11530] veth0_macvtap: left promiscuous mode [ 327.373424][T11530] veth1_vlan: left promiscuous mode [ 327.375771][T11530] veth0_vlan: left promiscuous mode [ 327.379283][T16694] loop6: partition table beyond EOD, truncated [ 327.382887][T16694] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 327.547802][T16696] binder: 16695:16696 ioctl c0306201 200000000640 returned -22 [ 327.752895][ T5303] Bluetooth: hci0: command tx timeout [ 328.360869][T11530] team0 (unregistering): Port device team_slave_1 removed [ 328.446349][T11530] team0 (unregistering): Port device team_slave_0 removed [ 329.131807][T16704] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3340'. [ 329.134746][T16704] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3340'. [ 329.490506][T16607] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 329.501090][T16607] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 329.515083][T16607] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 329.530130][T16607] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 329.579109][T16724] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3345'. [ 329.582645][T16723] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3345'. [ 329.707325][T16607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.726320][T16607] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.735210][T11536] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.738150][T11536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.754713][T11530] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.756973][T11530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.814931][T16734] loop6: detected capacity change from 0 to 7 [ 329.817899][T16734] Dev loop6: unable to read RDB block 7 [ 329.819702][T16734] loop6: unable to read partition table [ 329.822052][T16734] loop6: partition table beyond EOD, truncated [ 329.825088][ T5303] Bluetooth: hci0: command tx timeout [ 329.840795][T16734] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 329.843279][ T1024] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 329.993673][ T1024] usb 14-1: Using ep0 maxpacket: 16 [ 330.000835][ T1024] usb 14-1: config 0 has an invalid interface number: 8 but max is 0 [ 330.004867][ T1024] usb 14-1: config 0 has no interface number 0 [ 330.007001][ T1024] usb 14-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 330.010523][ T1024] usb 14-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 330.021182][ T1024] usb 14-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 330.026144][ T1024] usb 14-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 330.028657][ T1024] usb 14-1: Product: syz [ 330.029995][ T1024] usb 14-1: SerialNumber: syz [ 330.036592][ T1024] usb 14-1: config 0 descriptor?? [ 330.043949][ T1024] cm109 14-1:0.8: invalid payload size 0, expected 4 [ 330.046984][ T1024] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.8/input/input72 [ 330.244747][T16607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.324633][T16725] dlm: no local IP address has been set [ 330.327247][T16725] dlm: cannot start dlm midcomms -107 [ 330.341529][T16754] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 330.354116][T16754] cramfs: wrong magic [ 330.637373][T16607] veth0_vlan: entered promiscuous mode [ 330.650003][T16607] veth1_vlan: entered promiscuous mode [ 330.686782][T16607] veth0_macvtap: entered promiscuous mode [ 330.697956][T16607] veth1_macvtap: entered promiscuous mode [ 330.720040][T16607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.734367][T16607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.742087][T16607] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.745075][T16607] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.747799][T16607] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.750439][T16607] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.838257][T11534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.840914][T11534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.865047][T11536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.868754][T11536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.028255][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3356'. [ 331.029769][T16772] loop6: detected capacity change from 0 to 7 [ 331.031075][T16771] netlink: 'syz.3.3356': attribute type 30 has an invalid length. [ 331.038356][T16772] Dev loop6: unable to read RDB block 7 [ 331.040821][T16772] loop6: unable to read partition table [ 331.043166][T16772] loop6: partition table beyond EOD, truncated [ 331.045565][T16772] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 331.051247][T16771] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.054085][T16771] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.056717][T16771] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.059343][T16771] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.125033][ T40] kauditd_printk_skb: 440 callbacks suppressed [ 331.125045][ T40] audit: type=1400 audit(1750895047.106:131985): avc: denied { name_bind } for pid=16773 comm="syz.1.3358" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 331.136845][ T40] audit: type=1400 audit(1750895047.106:131986): avc: denied { create } for pid=16773 comm="syz.1.3358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 331.148198][ T40] audit: type=1400 audit(1750895047.116:131987): avc: denied { prog_load } for pid=16775 comm="syz.3.3359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 331.157059][ T40] audit: type=1400 audit(1750895047.116:131988): avc: denied { bpf } for pid=16775 comm="syz.3.3359" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 331.166174][ T40] audit: type=1400 audit(1750895047.116:131989): avc: denied { perfmon } for pid=16775 comm="syz.3.3359" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 331.175302][ T40] audit: type=1400 audit(1750895047.126:131990): avc: denied { perfmon } for pid=16775 comm="syz.3.3359" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 331.182270][ T40] audit: type=1400 audit(1750895047.126:131991): avc: denied { perfmon } for pid=16775 comm="syz.3.3359" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 331.190600][ T40] audit: type=1400 audit(1750895047.126:131992): avc: denied { perfmon } for pid=16775 comm="syz.3.3359" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 331.199639][ T40] audit: type=1400 audit(1750895047.126:131993): avc: denied { bpf } for pid=16775 comm="syz.3.3359" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 331.208251][ T40] audit: type=1400 audit(1750895047.126:131994): avc: denied { bpf } for pid=16775 comm="syz.3.3359" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 331.210630][T16779] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 331.218796][T16779] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 331.223909][T16779] vhci_hcd vhci_hcd.0: Device attached [ 331.231608][T16780] vhci_hcd: cannot find the pending unlink 2048 [ 331.256669][T16780] vhci_hcd: connection closed [ 331.256954][T11532] vhci_hcd: stop threads [ 331.259694][T11532] vhci_hcd: release socket [ 331.261126][T11532] vhci_hcd: disconnect device [ 331.358307][T16783] netlink: 6336 bytes leftover after parsing attributes in process `syz.3.3361'. [ 331.817138][T11536] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.574137][ C1] cm109 14-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 332.574237][ T6008] usb 14-1: USB disconnect, device number 10 [ 332.576266][ C1] cm109 14-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 332.589831][ T6008] cm109 14-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 332.662045][T11536] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.713407][ C3] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 332.885381][T16805] loop6: detected capacity change from 0 to 7 [ 332.892292][T16805] Dev loop6: unable to read RDB block 7 [ 332.894806][T16805] loop6: unable to read partition table [ 332.897271][T16805] loop6: partition table beyond EOD, truncated [ 332.903170][T16805] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 332.996819][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.007182][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.014102][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.017575][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.020434][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 333.095902][T16809] xfrm0 speed is unknown, defaulting to 1000 [ 333.098441][T16809] lo speed is unknown, defaulting to 1000 [ 333.255496][T16809] chnl_net:caif_netlink_parms(): no params data found [ 333.369479][T16809] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.371885][T16809] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.374501][T16809] bridge_slave_0: entered allmulticast mode [ 333.377449][T16809] bridge_slave_0: entered promiscuous mode [ 333.382550][T16809] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.384928][T16809] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.387340][T16809] bridge_slave_1: entered allmulticast mode [ 333.389957][T16809] bridge_slave_1: entered promiscuous mode [ 333.432097][T16809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.441464][T16809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.442271][T16832] random: crng reseeded on system resumption [ 333.504991][T16835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3378'. [ 333.508487][T16835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3378'. [ 333.509293][T11536] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.511554][T16835] netlink: 'syz.3.3378': attribute type 7 has an invalid length. [ 333.545721][T16809] team0: Port device team_slave_0 added [ 333.550936][T16809] team0: Port device team_slave_1 added [ 333.595599][T11536] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.618926][T16809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.621189][T16809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.628931][T16809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.630409][T16841] /dev/sg0: Can't lookup blockdev [ 333.635473][T16809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.640311][T16809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.649656][T16809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.737217][T16809] hsr_slave_0: entered promiscuous mode [ 333.741190][T16809] hsr_slave_1: entered promiscuous mode [ 333.743032][ T5303] Bluetooth: hci4: command tx timeout [ 333.745840][T16809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.752828][T16809] Cannot create hsr debugfs directory [ 333.777002][T16845] netlink: 'syz.3.3382': attribute type 10 has an invalid length. [ 333.800297][T16845] hsr0: entered promiscuous mode [ 333.801923][T16845] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 333.809515][T16845] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 333.814060][T16845] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 333.819244][T11536] bridge_slave_1: left allmulticast mode [ 333.820967][T11536] bridge_slave_1: left promiscuous mode [ 333.822732][T11536] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.832633][T16845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3382'. [ 333.847199][T16847] loop2: detected capacity change from 0 to 7 [ 333.851744][T16847] loop2: [ 333.852683][T16847] loop2: partition table partially beyond EOD, truncated [ 333.853525][T11536] bridge_slave_0: left allmulticast mode [ 333.856803][T11536] bridge_slave_0: left promiscuous mode [ 333.859330][T11536] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.182580][T11536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.188040][T11536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.193593][T11536] bond0 (unregistering): Released all slaves [ 334.441980][T16860] fuse: Bad value for 'group_id' [ 334.444028][T16860] fuse: Bad value for 'group_id' [ 334.561114][T16869] netlink: 'syz.9.3390': attribute type 1 has an invalid length. [ 334.566974][T16869] netlink: 'syz.9.3390': attribute type 4 has an invalid length. [ 334.569330][T16869] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.3390'. [ 334.581370][T16871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.597749][T11536] hsr_slave_0: left promiscuous mode [ 334.603001][T11536] hsr_slave_1: left promiscuous mode [ 334.604973][T11536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.607211][T11536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.613017][T11536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.617774][T11536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.648711][T16874] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3392'. [ 334.666591][T11536] veth1_macvtap: left promiscuous mode [ 334.668300][T11536] veth0_macvtap: left promiscuous mode [ 334.670029][T11536] veth1_vlan: left promiscuous mode [ 334.671676][T11536] veth0_vlan: left promiscuous mode [ 334.740209][T16876] netfs: Couldn't get user pages (rc=-14) [ 335.113539][ T5303] Bluetooth: hci0: command tx timeout [ 335.443490][T11536] team0 (unregistering): Port device team_slave_1 removed [ 335.550193][T11536] team0 (unregistering): Port device team_slave_0 removed [ 336.301806][ T40] kauditd_printk_skb: 431 callbacks suppressed [ 336.301823][ T40] audit: type=1400 audit(1750895052.276:132426): avc: denied { unmount } for pid=14283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 336.335069][ T40] audit: type=1400 audit(1750895052.316:132427): avc: denied { execmem } for pid=16891 comm="syz.1.3399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 336.347838][ T40] audit: type=1400 audit(1750895052.326:132428): avc: denied { read } for pid=16891 comm="syz.1.3399" dev="nsfs" ino=4026533193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 336.357342][ T40] audit: type=1400 audit(1750895052.326:132429): avc: denied { read open } for pid=16891 comm="syz.1.3399" path="net:[4026533193]" dev="nsfs" ino=4026533193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 336.367834][ T40] audit: type=1400 audit(1750895052.326:132430): avc: denied { create } for pid=16891 comm="syz.1.3399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 336.377191][ T40] audit: type=1400 audit(1750895052.326:132431): avc: denied { create } for pid=16891 comm="syz.1.3399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 336.389750][ T40] audit: type=1400 audit(1750895052.336:132432): avc: denied { write } for pid=16891 comm="syz.1.3399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 336.397878][ T40] audit: type=1400 audit(1750895052.336:132433): avc: denied { module_request } for pid=16891 comm="syz.1.3399" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 336.410001][ T40] audit: type=1400 audit(1750895052.396:132434): avc: denied { write } for pid=16891 comm="syz.1.3399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 336.468840][ T40] audit: type=1400 audit(1750895052.446:132435): avc: denied { read } for pid=16891 comm="syz.1.3399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 336.627912][T16809] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 336.634279][T16809] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 336.647886][T16809] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 336.654328][T16809] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 336.662112][T16904] kAFS: unparsable volume name [ 336.672758][T16905] loop6: detected capacity change from 0 to 7 [ 336.679324][T16905] Dev loop6: unable to read RDB block 7 [ 336.681634][T16905] loop6: unable to read partition table [ 336.685404][T16905] loop6: partition table beyond EOD, truncated [ 336.688073][T16905] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 336.776840][T16904] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.868024][T16904] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.936211][T16904] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.011161][T16904] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.029649][T16809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.055675][T16809] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.066144][T11536] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.068510][T11536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.079138][T11498] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.082120][T11498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.147664][T16904] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.169300][T16904] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.185208][T16904] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.193007][ T5303] Bluetooth: hci0: command tx timeout [ 337.199833][T16904] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.223131][ T6189] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 337.393953][ T6189] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 337.397526][ T6189] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 337.400560][ T6189] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 337.415437][ T6189] usb 14-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 337.418207][ T6189] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.420822][ T6189] usb 14-1: Product: syz [ 337.422263][ T6189] usb 14-1: Manufacturer: syz [ 337.424135][ T6189] usb 14-1: SerialNumber: syz [ 337.428353][ T6189] usb 14-1: config 0 descriptor?? [ 337.668983][ T6189] adutux 14-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 337.680243][ T6189] usb 14-1: USB disconnect, device number 11 [ 337.713344][T16943] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.716718][T16943] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.720097][T16943] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.725137][T16943] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.776258][T16809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.167020][T16976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3419'. [ 338.170690][T16976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3419'. [ 338.312271][T16809] veth0_vlan: entered promiscuous mode [ 338.335906][T16809] veth1_vlan: entered promiscuous mode [ 338.398727][T16809] veth0_macvtap: entered promiscuous mode [ 338.418998][T16809] veth1_macvtap: entered promiscuous mode [ 338.462303][T16809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.475014][T16809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.484666][T16809] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.488176][T16809] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.491643][T16809] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.495532][T16809] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.589360][T11532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.592563][T11532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.624476][T11535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.628463][T11535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.789458][T16991] ata3.00: invalid multi_count 1 ignored [ 338.828989][T16991] ata3.00: invalid multi_count 1 ignored [ 338.897548][T16994] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 338.915131][T16991] ata3.00: invalid multi_count 1 ignored [ 338.964292][T16991] ata3.00: invalid multi_count 1 ignored [ 339.007134][T16991] ata3.00: invalid multi_count 1 ignored [ 339.054057][T16991] ata3.00: invalid multi_count 1 ignored [ 339.081699][T16998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3427'. [ 339.114932][T16991] ata3.00: invalid multi_count 1 ignored [ 339.204862][T16991] ata3.00: invalid multi_count 1 ignored [ 339.265154][T16991] ata3.00: invalid multi_count 1 ignored [ 339.324879][T16991] ata3.00: invalid multi_count 1 ignored [ 339.385355][T16991] ata3.00: invalid multi_count 1 ignored [ 339.456233][T16991] ata3.00: invalid multi_count 1 ignored [ 339.479672][T17013] loop6: detected capacity change from 0 to 7 [ 339.482118][T17013] Dev loop6: unable to read RDB block 7 [ 339.484827][T17013] loop6: unable to read partition table [ 339.487310][T17013] loop6: partition table beyond EOD, truncated [ 339.489236][T17013] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 339.501938][T16991] ata3.00: invalid multi_count 1 ignored [ 339.506494][T11536] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.554763][T16991] ata3.00: invalid multi_count 1 ignored [ 339.594949][T16991] ata3.00: invalid multi_count 1 ignored [ 340.068289][T11536] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.425118][T11536] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.764696][T11536] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.814834][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.818920][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.822646][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.825698][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.829194][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.863931][T17030] loop6: detected capacity change from 0 to 7 [ 340.873169][T17030] Dev loop6: unable to read RDB block 7 [ 340.875237][T17030] loop6: unable to read partition table [ 340.879652][T17030] loop6: partition table beyond EOD, truncated [ 340.881754][T17030] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 340.906100][T11536] bridge_slave_1: left allmulticast mode [ 340.907756][T11536] bridge_slave_1: left promiscuous mode [ 340.909683][T11536] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.925068][T11536] bridge_slave_0: left allmulticast mode [ 340.926639][T11536] bridge_slave_0: left promiscuous mode [ 340.928264][T11536] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.980488][T17036] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.3438'. [ 341.259448][T11536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.265576][T11536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.270751][T11536] bond0 (unregistering): Released all slaves [ 341.281788][T17028] xfrm0 speed is unknown, defaulting to 1000 [ 341.287508][T17028] lo speed is unknown, defaulting to 1000 [ 341.419860][ T40] kauditd_printk_skb: 558 callbacks suppressed [ 341.419875][ T40] audit: type=1400 audit(1750895057.396:132994): avc: denied { create } for pid=17044 comm="syz.3.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.431136][ T40] audit: type=1400 audit(1750895057.396:132995): avc: denied { create } for pid=17044 comm="syz.3.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.439193][ T40] audit: type=1400 audit(1750895057.396:132996): avc: denied { write } for pid=17044 comm="syz.3.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.447344][ T40] audit: type=1400 audit(1750895057.396:132997): avc: denied { read } for pid=17044 comm="syz.3.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.455294][ T40] audit: type=1400 audit(1750895057.396:132998): avc: denied { read } for pid=17044 comm="syz.3.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.467462][ T40] audit: type=1400 audit(1750895057.396:132999): avc: denied { write } for pid=17044 comm="syz.3.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.476109][ T40] audit: type=1400 audit(1750895057.396:133000): avc: denied { create } for pid=17044 comm="syz.3.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.484954][ T40] audit: type=1400 audit(1750895057.396:133001): avc: denied { create } for pid=17044 comm="syz.3.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.492075][ T40] audit: type=1400 audit(1750895057.396:133002): avc: denied { write } for pid=17044 comm="syz.3.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.500014][ T40] audit: type=1400 audit(1750895057.396:133003): avc: denied { read } for pid=17044 comm="syz.3.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.530747][T17028] chnl_net:caif_netlink_parms(): no params data found [ 341.588897][T11536] hsr_slave_0: left promiscuous mode [ 341.591665][T11536] hsr_slave_1: left promiscuous mode [ 341.593708][T11536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.595998][T11536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.601782][T11536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.606430][T11536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.666082][T11536] veth1_macvtap: left promiscuous mode [ 341.668384][T11536] veth0_macvtap: left promiscuous mode [ 341.670770][T11536] veth1_vlan: left promiscuous mode [ 341.672615][T11536] veth0_vlan: left promiscuous mode [ 341.700113][T17060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3443'. [ 341.845336][T17072] fuse: Bad value for 'fd' [ 341.971968][T17084] loop6: detected capacity change from 0 to 7 [ 341.982464][T17084] Dev loop6: unable to read RDB block 7 [ 341.987051][T17084] loop6: unable to read partition table [ 341.989536][T17084] loop6: partition table beyond EOD, truncated [ 341.992088][T17084] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 342.572775][T11536] team0 (unregistering): Port device team_slave_1 removed [ 342.658021][T11536] team0 (unregistering): Port device team_slave_0 removed [ 342.866907][ T5946] Bluetooth: hci0: command tx timeout [ 343.399031][T17090] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3450'. [ 343.402019][T17090] netem: invalid attributes len -17 [ 343.405092][T17090] netem: change failed [ 343.467394][T17028] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.470834][T17028] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.474030][T17028] bridge_slave_0: entered allmulticast mode [ 343.476704][T17028] bridge_slave_0: entered promiscuous mode [ 343.481411][T17028] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.483891][T17028] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.486136][T17028] bridge_slave_1: entered allmulticast mode [ 343.488762][T17028] bridge_slave_1: entered promiscuous mode [ 343.534298][T17028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.546087][T17028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.556960][T17097] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3452'. [ 343.559151][T17100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3453'. [ 343.603799][T17028] team0: Port device team_slave_0 added [ 343.615718][T17028] team0: Port device team_slave_1 added [ 343.623409][T17100] bridge5: port 1(ip6gretap1) entered blocking state [ 343.626118][T17100] bridge5: port 1(ip6gretap1) entered disabled state [ 343.628473][T17100] ip6gretap1: entered allmulticast mode [ 343.631678][T17100] ip6gretap1: entered promiscuous mode [ 343.707180][T17100] veth3: entered promiscuous mode [ 343.708914][T17100] bridge5: port 2(veth3) entered blocking state [ 343.711025][T17100] bridge5: port 2(veth3) entered disabled state [ 343.715210][T17100] veth3: entered allmulticast mode [ 343.719464][T17028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.722178][T17028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.732956][T17028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.739293][T17028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.741537][T17028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.752669][T17028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.844753][T17028] hsr_slave_0: entered promiscuous mode [ 343.847029][T17028] hsr_slave_1: entered promiscuous mode [ 343.849142][T17028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.851664][T17028] Cannot create hsr debugfs directory [ 344.293029][ T1024] usb 14-1: new full-speed USB device number 12 using dummy_hcd [ 344.406061][T17028] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 344.417003][T17028] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 344.427159][T17028] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 344.436228][T17028] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 344.461070][ T1024] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.468102][ T1024] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 344.480877][ T1024] usb 14-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 344.488732][ T1024] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.492120][ T1024] usb 14-1: Product: syz [ 344.495978][ T1024] usb 14-1: Manufacturer: syz [ 344.497523][ T1024] usb 14-1: SerialNumber: syz [ 344.560043][T17028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.580276][T17028] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.590787][T11533] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.593880][T11533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.604218][T11533] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.607270][T11533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.929462][T17028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.952961][ T5946] Bluetooth: hci0: command tx timeout [ 345.107450][T17161] kAFS: Can only specify source 'none' with -o dyn [ 345.274875][ T1024] usb 14-1: 0:2 : does not exist [ 345.305943][ T1024] usb 14-1: USB disconnect, device number 12 [ 345.343943][ T8742] udevd[8742]: setting owner of /dev/bus/usb/014/012 to uid=0, gid=0 failed: No such file or directory [ 345.397245][ T8742] udevd[8742]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.591775][T17028] veth0_vlan: entered promiscuous mode [ 345.607046][T17028] veth1_vlan: entered promiscuous mode [ 345.641222][T17028] veth0_macvtap: entered promiscuous mode [ 345.649571][T17028] veth1_macvtap: entered promiscuous mode [ 345.680107][T17028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.691353][T17028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.699889][T17028] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.702736][T17028] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.706380][T17028] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.709062][T17028] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.778677][T11532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.781214][T11532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.809850][T11536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.815434][T11536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.075496][T17189] overlayfs: missing 'lowerdir' [ 346.429454][ T40] kauditd_printk_skb: 570 callbacks suppressed [ 346.429455][T17207] binder: 17205:17207 ioctl c0306201 200000000640 returned -22 [ 346.429466][ T40] audit: type=1400 audit(1750895062.406:133574): avc: denied { ioctl } for pid=17205 comm="syz.9.3484" path="/dev/binderfs/binder0" dev="binder" ino=12 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 346.434969][ T40] audit: type=1400 audit(1750895062.416:133575): avc: denied { create } for pid=17212 comm="syz.3.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 346.449506][ T40] audit: type=1400 audit(1750895062.416:133576): avc: denied { bind } for pid=17212 comm="syz.3.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 346.455626][ T40] audit: type=1400 audit(1750895062.416:133577): avc: denied { setopt } for pid=17212 comm="syz.3.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 346.461700][ T40] audit: type=1400 audit(1750895062.416:133578): avc: denied { accept } for pid=17212 comm="syz.3.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 346.471039][ T40] audit: type=1400 audit(1750895062.416:133579): avc: denied { write } for pid=17212 comm="syz.3.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 346.478437][ T40] audit: type=1400 audit(1750895062.416:133580): avc: denied { write } for pid=17212 comm="syz.3.3487" path="socket:[82272]" dev="sockfs" ino=82272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 346.487150][ T40] audit: type=1400 audit(1750895062.416:133581): avc: denied { write } for pid=17212 comm="syz.3.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 346.494529][ T40] audit: type=1400 audit(1750895062.426:133582): avc: denied { read } for pid=17212 comm="syz.3.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 347.162831][ T40] audit: type=1400 audit(1750895063.136:133583): avc: denied { read write } for pid=14283 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 347.386666][T17231] netlink: 9 bytes leftover after parsing attributes in process `syz.9.3494'. [ 347.389035][T11533] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.430686][T17231] 0: renamed from hsr0 (while UP) [ 347.449661][T17231] 0: entered allmulticast mode [ 347.451373][T17231] hsr_slave_0: entered allmulticast mode [ 347.455909][T17231] hsr_slave_1: entered allmulticast mode [ 347.458518][T17231] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 347.932096][T11533] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.361168][T11533] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.491422][T11533] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.658616][T11533] bridge_slave_1: left allmulticast mode [ 348.661004][T11533] bridge_slave_1: left promiscuous mode [ 348.668102][T11533] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.686738][T11533] bridge_slave_0: left allmulticast mode [ 348.692291][T11533] bridge_slave_0: left promiscuous mode [ 348.695113][T11533] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.803026][T17241] SELinux: failed to load policy [ 348.865689][ T5303] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 348.872131][ T5303] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 348.885555][ T5303] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 348.888984][ T5303] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 348.893923][ T5303] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 348.904621][T17245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3498'. [ 348.908806][T17246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3498'. [ 349.060989][T11533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.067265][T11533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.072981][T11533] bond0 (unregistering): Released all slaves [ 349.126823][T17242] xfrm0 speed is unknown, defaulting to 1000 [ 349.130400][T17242] lo speed is unknown, defaulting to 1000 [ 349.405983][T11533] hsr_slave_0: left promiscuous mode [ 349.414555][T11533] hsr_slave_1: left promiscuous mode [ 349.419262][T11533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.422531][T11533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.427910][T11533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.430639][T11533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.477661][T11533] veth1_macvtap: left promiscuous mode [ 349.480091][T11533] veth0_macvtap: left promiscuous mode [ 349.482484][T11533] veth1_vlan: left promiscuous mode [ 349.485200][T11533] veth0_vlan: left promiscuous mode [ 349.689484][T17271] loop6: detected capacity change from 0 to 7 [ 349.699277][T17271] Dev loop6: unable to read RDB block 7 [ 349.701176][T17271] loop6: unable to read partition table [ 349.703192][T17271] loop6: partition table beyond EOD, truncated [ 349.705362][T17271] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 349.731199][T17272] tmpfs: Bad value for 'mpol' [ 349.967035][T17286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3508'. [ 350.510233][T11533] team0 (unregistering): Port device team_slave_1 removed [ 350.602502][T11533] team0 (unregistering): Port device team_slave_0 removed [ 350.943518][ T5303] Bluetooth: hci0: command tx timeout [ 351.303845][T17242] chnl_net:caif_netlink_parms(): no params data found [ 351.460138][ T40] kauditd_printk_skb: 191 callbacks suppressed [ 351.460154][ T40] audit: type=1400 audit(1750895067.436:133775): avc: denied { create } for pid=17294 comm="syz.1.3511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 351.471829][ T40] audit: type=1400 audit(1750895067.436:133776): avc: denied { bpf } for pid=17294 comm="syz.1.3511" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 351.481484][ T40] audit: type=1400 audit(1750895067.446:133777): avc: denied { write } for pid=17294 comm="syz.1.3511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 351.497181][ T40] audit: type=1400 audit(1750895067.446:133778): avc: denied { read } for pid=17294 comm="syz.1.3511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 351.505244][ T40] audit: type=1400 audit(1750895067.446:133779): avc: denied { read } for pid=17294 comm="syz.1.3511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 351.516774][ T40] audit: type=1400 audit(1750895067.446:133780): avc: denied { prog_load } for pid=17295 comm="syz.9.3510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 351.526355][ T40] audit: type=1400 audit(1750895067.446:133781): avc: denied { bpf } for pid=17295 comm="syz.9.3510" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 351.535394][ T40] audit: type=1400 audit(1750895067.446:133782): avc: denied { perfmon } for pid=17295 comm="syz.9.3510" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 351.537678][T17299] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 351.544540][ T40] audit: type=1400 audit(1750895067.446:133783): avc: denied { perfmon } for pid=17295 comm="syz.9.3510" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 351.546101][T17299] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 351.549299][T17299] vhci_hcd vhci_hcd.0: Device attached [ 351.555076][ T40] audit: type=1400 audit(1750895067.446:133784): avc: denied { create } for pid=17294 comm="syz.1.3511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 351.567571][T17242] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.573027][T17242] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.590616][T17242] bridge_slave_0: entered allmulticast mode [ 351.597265][T17242] bridge_slave_0: entered promiscuous mode [ 351.602309][T17299] netlink: 'syz.9.3510': attribute type 10 has an invalid length. [ 351.611396][T17299] bridge_slave_1: left allmulticast mode [ 351.614968][T17299] bridge_slave_1: left promiscuous mode [ 351.616877][T17299] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.621694][T17299] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 351.633779][T17242] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.636859][T17242] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.639806][T17242] bridge_slave_1: entered allmulticast mode [ 351.649646][T17242] bridge_slave_1: entered promiscuous mode [ 351.652515][T17303] vhci_hcd: connection closed [ 351.655799][T11535] vhci_hcd: stop threads [ 351.658658][T11535] vhci_hcd: release socket [ 351.661570][T11535] vhci_hcd: disconnect device [ 351.687900][T17312] netlink: 'syz.1.3514': attribute type 10 has an invalid length. [ 351.708101][T17242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.718148][T17242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.723040][ T1024] vhci_hcd: vhci_device speed not set [ 351.758825][T17242] team0: Port device team_slave_0 added [ 351.765115][T17242] team0: Port device team_slave_1 added [ 351.807031][T17242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.809310][T17242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.817532][T17242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.823272][T17242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.825512][T17242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.834259][T17242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.864673][T17320] overlayfs: failed to clone upperpath [ 351.878327][T17242] hsr_slave_0: entered promiscuous mode [ 351.880717][T17242] hsr_slave_1: entered promiscuous mode [ 352.461019][T17242] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 352.476221][T17242] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 352.489920][T17242] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 352.500623][T17242] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 352.633466][T17242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.652429][T17242] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.661738][T11532] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.664052][T11532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.671650][T17371] overlayfs: failed to clone lowerpath [ 352.671857][T11530] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.673853][T17372] overlayfs: failed to clone lowerpath [ 352.675856][T11530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.684860][T17372] overlayfs: failed to clone lowerpath [ 352.911371][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 352.933917][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 352.941143][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 352.945126][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 352.949780][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 352.953025][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 352.957442][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 352.962035][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 352.966995][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 352.971646][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 352.976462][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 352.981186][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 352.985964][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 352.990616][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 352.995300][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 352.999767][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 353.005092][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 353.008526][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 353.011666][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 353.014864][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 353.018014][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 353.021213][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 353.022958][ T5303] Bluetooth: hci0: command tx timeout [ 353.024576][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 353.028724][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 353.031562][T17242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.031868][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 353.038853][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 353.043649][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 353.048280][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 353.053284][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 353.057818][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 353.062238][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 353.067215][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 353.071625][T17379] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 353.452650][T17398] program syz.1.3534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 353.461909][T17398] netlink: 'syz.1.3534': attribute type 10 has an invalid length. [ 353.466280][T17398] ipvlan0: entered promiscuous mode [ 353.469613][T17398] ipvlan0: entered allmulticast mode [ 353.471383][T17398] veth0_vlan: entered allmulticast mode [ 353.476483][T17398] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 353.480430][T17398] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 353.485178][T17398] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 353.556088][T17242] veth0_vlan: entered promiscuous mode [ 353.560104][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3537'. [ 353.563406][T17402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3537'. [ 353.578809][T17242] veth1_vlan: entered promiscuous mode [ 353.622516][T17242] veth0_macvtap: entered promiscuous mode [ 353.636737][T17242] veth1_macvtap: entered promiscuous mode [ 353.661288][T17242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.669542][T17242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.682450][T17242] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.685829][T17242] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.689196][T17242] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.692585][T17242] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.794450][T11530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.796922][T11530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.817624][T11535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.820765][T11535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.018233][T17427] netlink: 'syz.9.3545': attribute type 1 has an invalid length. [ 354.049825][T17428] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3543'. [ 354.440725][T17444] xt_hashlimit: invalid interval [ 354.773953][T11532] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.694884][T11532] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.037004][T17456] netlink: 9072 bytes leftover after parsing attributes in process `syz.3.3554'. [ 356.155889][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.160500][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.171777][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.175784][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.178399][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.224929][T17468] xfrm0 speed is unknown, defaulting to 1000 [ 356.258593][T11532] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.267306][T17468] lo speed is unknown, defaulting to 1000 [ 356.289165][T17476] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3559'. [ 356.292029][T17476] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3559'. [ 356.392485][T11532] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.406712][T17487] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 356.409453][T17487] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 356.412410][T17487] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 356.416184][T17487] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 356.418859][T17487] geneve2: entered promiscuous mode [ 356.420974][T17487] geneve2: entered allmulticast mode [ 356.501374][ T40] kauditd_printk_skb: 999 callbacks suppressed [ 356.501385][ T40] audit: type=1400 audit(1750895072.476:134784): avc: denied { mounton } for pid=17488 comm="syz.1.3564" path="/357/file0" dev="tmpfs" ino=2001 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 356.514864][ T40] audit: type=1400 audit(1750895072.486:134785): avc: denied { mount } for pid=17488 comm="syz.1.3564" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 356.521643][ T40] audit: type=1400 audit(1750895072.496:134786): avc: denied { prog_load } for pid=17494 comm="syz.3.3565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 356.529384][ T40] audit: type=1400 audit(1750895072.496:134787): avc: denied { bpf } for pid=17494 comm="syz.3.3565" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 356.530941][T17468] chnl_net:caif_netlink_parms(): no params data found [ 356.538510][ T40] audit: type=1400 audit(1750895072.506:134788): avc: denied { prog_load } for pid=17494 comm="syz.3.3565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 356.546462][ T40] audit: type=1400 audit(1750895072.506:134789): avc: denied { bpf } for pid=17494 comm="syz.3.3565" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 356.552939][ T40] audit: type=1400 audit(1750895072.506:134790): avc: denied { perfmon } for pid=17494 comm="syz.3.3565" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 356.554374][T11532] bridge_slave_1: left allmulticast mode [ 356.559425][ T40] audit: type=1400 audit(1750895072.506:134791): avc: denied { perfmon } for pid=17494 comm="syz.3.3565" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 356.563480][T11532] bridge_slave_1: left promiscuous mode [ 356.567660][ T40] audit: type=1400 audit(1750895072.506:134792): avc: denied { perfmon } for pid=17494 comm="syz.3.3565" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 356.569473][T11532] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.575826][ T40] audit: type=1400 audit(1750895072.516:134793): avc: denied { perfmon } for pid=17494 comm="syz.3.3565" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 356.586948][T11532] bridge_slave_0: left allmulticast mode [ 356.588777][T11532] bridge_slave_0: left promiscuous mode [ 356.590671][T11532] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.946126][T11532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.955642][T11532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.965044][T11532] bond0 (unregistering): Released all slaves [ 357.082267][T17521] loop6: detected capacity change from 0 to 7 [ 357.086480][T17521] Dev loop6: unable to read RDB block 7 [ 357.088340][T17521] loop6: unable to read partition table [ 357.090678][T17521] loop6: partition table beyond EOD, truncated [ 357.102558][T17521] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 357.223606][T17468] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.225857][T17468] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.228244][T17468] bridge_slave_0: entered allmulticast mode [ 357.231097][T17468] bridge_slave_0: entered promiscuous mode [ 357.240685][T17468] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.244331][T17468] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.246510][T17468] bridge_slave_1: entered allmulticast mode [ 357.248991][T17468] bridge_slave_1: entered promiscuous mode [ 357.373866][T17468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.429183][T17468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.520439][T17468] team0: Port device team_slave_0 added [ 357.537886][T17468] team0: Port device team_slave_1 added [ 357.558063][T11532] hsr_slave_0: left promiscuous mode [ 357.560173][T11532] hsr_slave_1: left promiscuous mode [ 357.562174][T11532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.567020][T11532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.569720][T11532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.571978][T11532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.604089][T11532] veth1_macvtap: left promiscuous mode [ 357.605961][T11532] veth0_macvtap: left promiscuous mode [ 357.607754][T11532] veth1_vlan: left promiscuous mode [ 357.609477][T11532] veth0_vlan: left promiscuous mode [ 358.009740][T17557] loop6: detected capacity change from 0 to 7 [ 358.023680][T17557] Dev loop6: unable to read RDB block 7 [ 358.025842][T17557] loop6: unable to read partition table [ 358.027766][T17557] loop6: partition table beyond EOD, truncated [ 358.030308][T17557] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 358.225694][ T5303] Bluetooth: hci0: command tx timeout [ 358.279860][T17562] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3585'. [ 358.386718][T17566] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3586'. [ 358.463014][ T5303] Bluetooth: hci1: command tx timeout [ 358.607873][T11532] team0 (unregistering): Port device team_slave_1 removed [ 358.691020][T11532] team0 (unregistering): Port device team_slave_0 removed [ 358.699757][T17581] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3591'. [ 358.784063][T17582] ceph: No mds server is up or the cluster is laggy [ 358.789252][ T34] libceph: connect (1)[c::]:6789 error -101 [ 358.791947][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 359.470086][T17468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.472356][T17468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.480940][T17468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.487003][T17468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.489210][T17468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.497264][T17468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.548710][T17588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3592'. [ 359.551497][T17468] hsr_slave_0: entered promiscuous mode [ 359.551518][T17588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3592'. [ 359.554071][T17468] hsr_slave_1: entered promiscuous mode [ 359.556157][T17588] netlink: 'syz.1.3592': attribute type 12 has an invalid length. [ 359.598842][T17591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3594'. [ 359.653533][T17598] loop6: detected capacity change from 0 to 7 [ 359.659548][T17598] Dev loop6: unable to read RDB block 7 [ 359.661315][T17598] loop6: unable to read partition table [ 359.664753][T17598] loop6: partition table beyond EOD, truncated [ 359.670080][T17598] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 359.916885][T17609] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 359.919055][T17609] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 359.935311][T17609] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 359.938799][T17609] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 359.940765][T17609] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 359.956798][T17609] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 359.964664][T17609] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 359.970188][T17609] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 359.974772][T17609] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 359.982548][T17609] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 359.986766][T17609] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 360.003700][T17609] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 360.090318][T17618] fuse: Bad value for 'fd' [ 360.120821][T17468] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 360.138091][T17468] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 360.144684][T17468] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 360.149980][T17468] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 360.249187][T17468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.273360][T17468] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.284940][T11532] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.287199][T11532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.299283][T11532] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.301589][T11532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.468148][ T5303] Bluetooth: hci4: unexpected event for opcode 0x080e [ 360.575175][T17640] loop6: detected capacity change from 0 to 7 [ 360.577599][T17640] Dev loop6: unable to read RDB block 7 [ 360.579411][T17640] loop6: unable to read partition table [ 360.581305][T17640] loop6: partition table beyond EOD, truncated [ 360.583326][T17640] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 360.697470][T17468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.771852][T17658] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3613'. [ 360.777036][T17658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5132 sclass=netlink_route_socket pid=17658 comm=syz.3.3613 [ 360.792446][T17658] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3613'. [ 360.804118][T17658] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3613'. [ 360.817218][T17665] netlink: 'syz.1.3614': attribute type 5 has an invalid length. [ 360.859241][T17670] syz.9.3615 uses old SIOCAX25GETINFO [ 360.926729][T17676] QAT: Stopping all acceleration devices. [ 360.983659][T17677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3617'. [ 361.177761][T17699] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3623'. [ 361.231025][T17468] veth0_vlan: entered promiscuous mode [ 361.248183][T17468] veth1_vlan: entered promiscuous mode [ 361.269261][T17706] xt_cgroup: path and classid specified [ 361.292402][T17468] veth0_macvtap: entered promiscuous mode [ 361.309048][T17468] veth1_macvtap: entered promiscuous mode [ 361.334950][T17468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.343600][T17468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.354568][T17468] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.357833][T17468] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.360630][T17468] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.363828][T17468] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.489529][T11535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.492436][T11535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.505912][ T40] kauditd_printk_skb: 794 callbacks suppressed [ 361.505922][ T40] audit: type=1400 audit(1750895077.486:135588): avc: denied { mounton } for pid=17723 comm="syz.9.3632" path="/264/bus" dev="tmpfs" ino=1510 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 361.516759][ T40] audit: type=1400 audit(1750895077.486:135589): avc: denied { read } for pid=17468 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 361.525837][T11533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.528343][T11533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.535238][ T40] audit: type=1400 audit(1750895077.486:135590): avc: denied { write } for pid=17468 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 361.541975][ T40] audit: type=1400 audit(1750895077.496:135591): avc: denied { unlink } for pid=17723 comm="syz.9.3632" name="#1bc" dev="tmpfs" ino=1515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 361.549321][ T40] audit: type=1400 audit(1750895077.496:135592): avc: denied { read } for pid=17468 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 361.555780][ T40] audit: type=1400 audit(1750895077.506:135593): avc: denied { write } for pid=17468 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 361.562179][ T40] audit: type=1400 audit(1750895077.506:135594): avc: denied { read } for pid=17468 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 361.568682][ T40] audit: type=1400 audit(1750895077.506:135595): avc: denied { create } for pid=17729 comm="syz.1.3634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 361.574833][ T40] audit: type=1400 audit(1750895077.506:135596): avc: denied { module_request } for pid=17729 comm="syz.1.3634" kmod="net-pf-10-proto-3-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 361.581961][ T40] audit: type=1400 audit(1750895077.516:135597): avc: denied { mount } for pid=17723 comm="syz.9.3632" name="/" dev="overlay" ino=1511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 361.607958][T17732] x_tables: duplicate underflow at hook 1 [ 361.960943][T17748] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3640'. [ 361.992938][ T5303] Bluetooth: hci1: command 0x0c1a tx timeout [ 361.992952][ T5946] Bluetooth: hci2: command 0x0405 tx timeout [ 362.064905][T17761] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 362.068003][T17761] overlayfs: failed to set xattr on upper [ 362.069902][T17761] overlayfs: ...falling back to redirect_dir=nofollow. [ 362.072034][T17761] overlayfs: ...falling back to index=off. [ 362.074761][T17761] overlayfs: ...falling back to uuid=null. [ 362.115866][ T5946] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 362.296583][T17787] netlink: 'syz.9.3650': attribute type 12 has an invalid length. [ 362.477821][T17803] tipc: Started in network mode [ 362.479536][T17803] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 362.482388][T17803] tipc: Enabling of bearer rejected, failed to enable media [ 362.844856][T17814] 9pnet_virtio: no channels available for device syz [ 362.914540][T11535] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.232935][ T1024] usb 14-1: new high-speed USB device number 13 using dummy_hcd [ 363.363186][ T1024] usb 14-1: device descriptor read/64, error -71 [ 363.602938][ T1024] usb 14-1: new high-speed USB device number 14 using dummy_hcd [ 363.732957][ T1024] usb 14-1: device descriptor read/64, error -71 [ 363.853160][ T1024] usb usb14-port1: attempt power cycle [ 364.072922][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 364.196742][T11535] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.212882][ T1024] usb 14-1: new high-speed USB device number 15 using dummy_hcd [ 364.244840][ T1024] usb 14-1: device descriptor read/8, error -71 [ 364.325309][T17823] __nla_validate_parse: 1 callbacks suppressed [ 364.325321][T17823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3661'. [ 364.436711][ T5303] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.442411][ T5303] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.446474][ T5303] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.450039][ T5303] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.453134][ T5303] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.479554][T11535] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.483163][ T1024] usb 14-1: new high-speed USB device number 16 using dummy_hcd [ 364.504436][ T1024] usb 14-1: device descriptor read/8, error -71 [ 364.508658][T17826] xfrm0 speed is unknown, defaulting to 1000 [ 364.511275][T17826] lo speed is unknown, defaulting to 1000 [ 364.548610][T11535] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.629673][ T1024] usb usb14-port1: unable to enumerate USB device [ 364.666521][T17826] chnl_net:caif_netlink_parms(): no params data found [ 364.757880][T11535] bridge_slave_1: left allmulticast mode [ 364.759739][T11535] bridge_slave_1: left promiscuous mode [ 364.761585][T11535] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.768713][T11535] bridge_slave_0: left allmulticast mode [ 364.770585][T11535] bridge_slave_0: left promiscuous mode [ 364.772458][T11535] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.884651][T17844] loop6: detected capacity change from 0 to 7 [ 364.889349][ T8742] Dev loop6: unable to read RDB block 7 [ 364.891231][ T8742] loop6: unable to read partition table [ 364.894163][ T8742] loop6: partition table beyond EOD, truncated [ 364.901064][T17844] Dev loop6: unable to read RDB block 7 [ 364.904159][T17844] loop6: unable to read partition table [ 364.906164][T17844] loop6: partition table beyond EOD, truncated [ 364.913092][T17844] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 365.097355][T11535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.102068][T11535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.106640][T11535] bond0 (unregistering): Released all slaves [ 365.158002][T17826] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.160891][T17826] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.163778][T17826] bridge_slave_0: entered allmulticast mode [ 365.166814][T17826] bridge_slave_0: entered promiscuous mode [ 365.178289][T17826] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.181357][T17826] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.184419][T17826] bridge_slave_1: entered allmulticast mode [ 365.187352][T17826] bridge_slave_1: entered promiscuous mode [ 365.248960][T17858] overlayfs: failed to resolve './file2': -2 [ 365.277796][T17826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.284738][T17826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.323770][T17858] can: request_module (can-proto-0) failed. [ 365.326758][T17826] team0: Port device team_slave_0 added [ 365.333175][T17826] team0: Port device team_slave_1 added [ 365.397326][T17826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.399707][T17826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.411513][T17826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.420001][T17826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.422352][T17826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.431160][T17826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.500753][T17826] hsr_slave_0: entered promiscuous mode [ 365.505425][T17826] hsr_slave_1: entered promiscuous mode [ 365.507750][T17826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.510181][T17826] Cannot create hsr debugfs directory [ 365.515975][T17877] loop6: detected capacity change from 0 to 7 [ 365.520634][T11535] hsr_slave_0: left promiscuous mode [ 365.521363][T17877] Dev loop6: unable to read RDB block 7 [ 365.524400][T17877] loop6: unable to read partition table [ 365.524426][T11535] hsr_slave_1: left promiscuous mode [ 365.526239][T17877] loop6: partition table beyond EOD, truncated [ 365.528325][T11535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.529908][T17877] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 365.532218][T11535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.541496][T11535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.544813][T11535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.579703][T11535] veth1_macvtap: left promiscuous mode [ 365.581495][T11535] veth0_macvtap: left promiscuous mode [ 365.583557][T11535] veth1_vlan: left promiscuous mode [ 365.585257][T11535] veth0_vlan: left promiscuous mode [ 365.672727][T17885] nfs4: Unknown parameter '' [ 366.144598][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 366.477382][T11535] team0 (unregistering): Port device team_slave_1 removed [ 366.527196][ T40] kauditd_printk_skb: 645 callbacks suppressed [ 366.527238][ T40] audit: type=1400 audit(1750895082.506:136243): avc: denied { read } for pid=17901 comm="syz.9.3686" dev="nsfs" ino=4026533660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 366.536363][ T40] audit: type=1400 audit(1750895082.506:136244): avc: denied { setopt } for pid=17901 comm="syz.9.3686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 366.542453][ T40] audit: type=1400 audit(1750895082.506:136245): avc: denied { read open } for pid=17901 comm="syz.9.3686" path="net:[4026533660]" dev="nsfs" ino=4026533660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 366.549901][ T40] audit: type=1400 audit(1750895082.506:136246): avc: denied { create } for pid=17901 comm="syz.9.3686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 366.553382][ T5946] Bluetooth: hci0: command tx timeout [ 366.595502][T11535] team0 (unregistering): Port device team_slave_0 removed [ 367.255146][ T40] audit: type=1400 audit(1750895083.236:136247): avc: denied { read write } for pid=14283 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 367.272939][ T40] audit: type=1400 audit(1750895083.246:136248): avc: denied { read write open } for pid=14283 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 367.287959][ T40] audit: type=1400 audit(1750895083.246:136249): avc: denied { ioctl } for pid=14283 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 367.299249][ T40] audit: type=1400 audit(1750895083.266:136250): avc: denied { create } for pid=17906 comm="syz.3.3687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 367.309324][ T40] audit: type=1400 audit(1750895083.276:136251): avc: denied { write } for pid=17906 comm="syz.3.3687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 367.317068][ T40] audit: type=1400 audit(1750895083.276:136252): avc: denied { create } for pid=17906 comm="syz.3.3687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 367.320004][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3688'. [ 367.472984][T17910] team0 (unregistering): Port device team_slave_0 removed [ 367.496905][T17910] team0 (unregistering): Port device team_slave_1 removed [ 367.536883][T17923] netlink: 'syz.1.3691': attribute type 3 has an invalid length. [ 367.622902][T17925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3691'. [ 367.687783][T17923] affs: No valid root block on device nullb0 [ 367.829567][T17931] Bluetooth: MGMT ver 1.23 [ 367.836965][T17929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3693'. [ 367.839998][T17929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3693'. [ 367.946527][T17935] netlink: 136 bytes leftover after parsing attributes in process `syz.9.3694'. [ 368.092526][T17826] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 368.107009][T17826] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 368.115739][T17826] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 368.124280][T17826] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 368.223633][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 368.242870][ T6026] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 368.275510][T17826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.295860][T17826] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.305470][T11530] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.308524][T11530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.320339][T11530] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.322670][T11530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.393167][ T6026] usb 6-1: Using ep0 maxpacket: 16 [ 368.420716][ T6026] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 368.423507][ T6026] usb 6-1: config 0 has no interface number 0 [ 368.425723][ T6026] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 368.429102][ T6026] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 368.449257][ T6026] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 368.463646][ T6026] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 368.466787][ T6026] usb 6-1: Product: syz [ 368.468516][ T6026] usb 6-1: SerialNumber: syz [ 368.481453][ T6026] usb 6-1: config 0 descriptor?? [ 368.489425][ T6026] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 368.492682][ T6026] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input73 [ 368.633070][ T5946] Bluetooth: hci0: command tx timeout [ 368.682915][T17977] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3706'. [ 368.709780][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 368.739079][T17980] overlayfs: failed to clone upperpath [ 368.764088][T17826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.918011][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 368.922383][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 368.927776][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 368.930984][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 368.934121][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 368.937230][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 368.939644][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 368.941858][ T1024] usb 6-1: USB disconnect, device number 52 [ 368.944116][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 368.944142][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 368.959206][ T1024] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 369.179713][T17826] veth0_vlan: entered promiscuous mode [ 369.191426][T17826] veth1_vlan: entered promiscuous mode [ 369.227814][T17826] veth0_macvtap: entered promiscuous mode [ 369.235618][T17826] veth1_macvtap: entered promiscuous mode [ 369.255887][T17826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.265292][T17826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.272662][T17826] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.276112][T17826] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.278834][T17826] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.281529][T17826] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.339159][T11530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.342520][T11530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.374779][T11528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.377190][T11528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.436401][T18006] /dev/sg0: Can't lookup blockdev [ 369.755940][T18023] loop6: detected capacity change from 0 to 7 [ 369.762535][T18023] Dev loop6: unable to read RDB block 7 [ 369.766681][T18023] loop6: unable to read partition table [ 369.768581][T18023] loop6: partition table beyond EOD, truncated [ 369.770566][T18023] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 369.790124][T18025] netlink: 'syz.3.3724': attribute type 32 has an invalid length. [ 369.793502][T18025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3724'. [ 369.797776][T18025] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 369.886224][T18030] program syz.9.3726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 369.975932][T18036] xt_CONNSECMARK: invalid mode: 0 [ 369.979844][T18034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3727'. [ 369.987268][T18036] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 369.989814][T18036] PKCS7: Only support pkcs7_signedData type [ 370.141076][T18050] netlink: 'syz.1.3734': attribute type 32 has an invalid length. [ 370.144288][T18050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3734'. [ 370.147429][T18050] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 370.178178][T18053] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3736'. [ 370.181122][T18055] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3736'. [ 370.195965][T18055] netlink: 14560 bytes leftover after parsing attributes in process `syz.9.3736'. [ 370.271705][T18061] netlink: 108 bytes leftover after parsing attributes in process `syz.9.3738'. [ 370.275290][T18061] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3738'. [ 370.476325][T18069] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3741'. [ 370.842907][ T1024] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 370.912284][T18076] IPv6: sit1: Disabled Multicast RS [ 370.914809][T18076] sit1: entered allmulticast mode [ 371.000953][ T1024] usb 6-1: not running at top speed; connect to a high speed hub [ 371.008667][ T1024] usb 6-1: config 1 has an invalid interface number: 60 but max is 2 [ 371.011459][ T1024] usb 6-1: config 1 has an invalid interface number: 118 but max is 2 [ 371.014875][ T1024] usb 6-1: config 1 has an invalid interface number: 88 but max is 2 [ 371.017372][ T1024] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.020449][ T1024] usb 6-1: config 1 has no interface number 0 [ 371.022369][ T1024] usb 6-1: config 1 has no interface number 1 [ 371.025813][ T1024] usb 6-1: config 1 has no interface number 2 [ 371.027778][ T1024] usb 6-1: config 1 interface 60 altsetting 5 endpoint 0x9 has invalid maxpacket 72, setting to 64 [ 371.031001][ T1024] usb 6-1: config 1 interface 60 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 371.038949][ T1024] usb 6-1: config 1 interface 118 altsetting 2 endpoint 0x8 has an invalid bInterval 180, changing to 4 [ 371.045004][ T1024] usb 6-1: config 1 interface 118 altsetting 2 endpoint 0x8 has invalid maxpacket 1024, setting to 1023 [ 371.048428][ T1024] usb 6-1: config 1 interface 118 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 371.051689][ T1024] usb 6-1: config 1 interface 118 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 371.057711][ T1024] usb 6-1: config 1 interface 118 altsetting 2 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 371.061463][ T1024] usb 6-1: config 1 interface 88 altsetting 129 endpoint 0x2 has invalid maxpacket 61173, setting to 64 [ 371.066567][ T1024] usb 6-1: config 1 interface 88 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 371.070617][ T1024] usb 6-1: config 1 interface 60 has no altsetting 0 [ 371.072737][ T1024] usb 6-1: config 1 interface 118 has no altsetting 0 [ 371.077370][ T1024] usb 6-1: config 1 interface 88 has no altsetting 0 [ 371.086752][ T1024] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=e7.03 [ 371.089529][ T1024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.091952][ T1024] usb 6-1: Product: 驚벨᤿濵࿵ຄ蟠霩웱⽽ͭ앚ᒒ幁嚸푷짡אּ흋䯐뭿蚫㰓ᓆˍ뻌Ϸ㰏⤖캨㫒ᝫ嶇㕁跱髙遮싆悸땧⎉탧ꤊ檪﵍媕瞸哉쭇诳Ǻ㇊ꩭ别웞瀴暸ᮝ꺄黣ほ쟌랼颵㲒쥰궨梠 [ 371.099668][ T1024] usb 6-1: Manufacturer: ꙽ꯣ诳釳෴∰‘ꢁ摸펒펨㮁᭫꾝琼ঀꖱ輁샽ᓥꈸঀ梷㹖犠服᷻獐笝ⅼ훦៘੷鯬릎娔嚱ㅅ熛蘰謢᧿鳌ᖞ槀兓玐独홿ຸⲟ馣㛌ಇｓힳ㶬䚰ꚕ퍪ￆ䓱翹餪嘃쁴ꓧ眛૲뎝䂶폘潍梖蓜楈⑄걭ᮙ䄠唦Ȼvᒈፍ棽ꬷᩨ [ 371.108989][ T1024] usb 6-1: SerialNumber: syz [ 371.137235][T18083] mmap: syz.9.3746 (18083): VmData 37462016 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 371.175577][T11532] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.532293][ T1024] ftdi_sio 6-1:1.60: FTDI USB Serial Device converter detected [ 371.535752][ T1024] ftdi_sio ttyUSB0: unknown device type: 0xe703 [ 371.541976][ T1024] ftdi_sio 6-1:1.118: FTDI USB Serial Device converter detected [ 371.545761][ T1024] ftdi_sio ttyUSB1: unknown device type: 0xe703 [ 371.549659][ T1024] ftdi_sio 6-1:1.88: FTDI USB Serial Device converter detected [ 371.552466][ T1024] ftdi_sio ttyUSB2: unknown device type: 0xe703 [ 371.563116][ T1024] usb 6-1: USB disconnect, device number 53 [ 371.567786][ T1024] ftdi_sio 6-1:1.60: device disconnected [ 371.572388][ T1024] ftdi_sio 6-1:1.118: device disconnected [ 371.575781][ T1024] ftdi_sio 6-1:1.88: device disconnected [ 371.738729][ T40] kauditd_printk_skb: 616 callbacks suppressed [ 371.738745][ T40] audit: type=1400 audit(1750895087.716:136869): avc: denied { read write } for pid=18073 comm="syz.1.3742" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 371.751045][ T40] audit: type=1400 audit(1750895087.716:136870): avc: denied { read write open } for pid=18073 comm="syz.1.3742" path="/dev/raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 371.759070][ T40] audit: type=1400 audit(1750895087.716:136871): avc: denied { ioctl } for pid=18073 comm="syz.1.3742" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 371.767298][ T40] audit: type=1400 audit(1750895087.716:136872): avc: denied { ioctl } for pid=18073 comm="syz.1.3742" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 371.775561][ T40] audit: type=1400 audit(1750895087.726:136873): avc: denied { ioctl } for pid=18073 comm="syz.1.3742" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 371.784149][ T40] audit: type=1400 audit(1750895087.726:136874): avc: denied { ioctl } for pid=18073 comm="syz.1.3742" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 371.924589][ T40] audit: type=1400 audit(1750895087.906:136875): avc: denied { ioctl } for pid=18073 comm="syz.1.3742" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 371.994160][ T40] audit: type=1400 audit(1750895087.976:136876): avc: denied { ioctl } for pid=18073 comm="syz.1.3742" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 372.052975][ T1024] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 372.056612][ T40] audit: type=1400 audit(1750895088.036:136877): avc: denied { ioctl } for pid=18073 comm="syz.1.3742" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 372.065896][ T40] audit: type=1400 audit(1750895088.046:136878): avc: denied { ioctl } for pid=18073 comm="syz.1.3742" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 372.213031][ T1024] usb 6-1: Using ep0 maxpacket: 8 [ 372.242992][T18074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.249746][T18074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.266959][T18074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.269785][T18074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.279826][ T1024] usb 6-1: unable to get BOS descriptor or descriptor too short [ 372.285863][ T1024] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 372.288351][ T1024] usb 6-1: can't read configurations, error -71 [ 372.415022][T11532] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.498270][T11532] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.570948][T11532] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.692621][T18090] ip6t_srh: unknown srh match flags B153 [ 372.697345][T18090] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3747'. [ 372.743501][T11532] bridge_slave_1: left allmulticast mode [ 372.751706][T11532] bridge_slave_1: left promiscuous mode [ 372.753704][T11532] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.768361][T11532] bridge_slave_0: left allmulticast mode [ 372.770520][T11532] bridge_slave_0: left promiscuous mode [ 372.772483][T11532] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.850369][ T5303] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 372.855876][ T5303] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 372.865388][ T5303] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 372.873501][ T5303] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 372.878519][ T5303] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 373.189021][T11532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.194770][T11532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.199838][T11532] bond0 (unregistering): Released all slaves [ 373.244854][T18094] xfrm0 speed is unknown, defaulting to 1000 [ 373.248550][T18094] lo speed is unknown, defaulting to 1000 [ 373.489219][T18094] chnl_net:caif_netlink_parms(): no params data found [ 373.598313][T11532] hsr_slave_0: left promiscuous mode [ 373.600451][T11532] hsr_slave_1: left promiscuous mode [ 373.602890][T11532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.605191][T11532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.609282][T11532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.611710][T11532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.638343][T11532] veth1_macvtap: left promiscuous mode [ 373.641011][T11532] veth0_macvtap: left promiscuous mode [ 373.644309][T11532] veth1_vlan: left promiscuous mode [ 373.646041][T11532] veth0_vlan: left promiscuous mode [ 374.545317][T11532] team0 (unregistering): Port device team_slave_1 removed [ 374.661190][T11532] team0 (unregistering): Port device team_slave_0 removed [ 374.942950][ T5946] Bluetooth: hci0: command tx timeout [ 375.327632][T18094] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.330651][T18094] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.333895][T18094] bridge_slave_0: entered allmulticast mode [ 375.337648][T18094] bridge_slave_0: entered promiscuous mode [ 375.345809][T18094] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.348845][T18094] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.351933][T18094] bridge_slave_1: entered allmulticast mode [ 375.363216][T18094] bridge_slave_1: entered promiscuous mode [ 375.416686][T18094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.425231][T18094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.532049][T18171] __nla_validate_parse: 3 callbacks suppressed [ 375.532060][T18171] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3771'. [ 375.550258][T18094] team0: Port device team_slave_0 added [ 375.571639][T18094] team0: Port device team_slave_1 added [ 375.604622][T18094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.606887][T18094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.615311][T18094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.621612][T18094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.623820][T18094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.631398][T18094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.681161][T18094] hsr_slave_0: entered promiscuous mode [ 375.683751][T18094] hsr_slave_1: entered promiscuous mode [ 375.709972][T18180] loop6: detected capacity change from 0 to 7 [ 375.714897][T18180] Dev loop6: unable to read RDB block 7 [ 375.717288][T18180] loop6: unable to read partition table [ 375.719843][T18180] loop6: partition table beyond EOD, truncated [ 375.722352][T18180] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 376.166314][T18094] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 376.171553][T18094] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 376.183645][T18094] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 376.188775][T18094] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 376.337713][T18094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.389654][T18094] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.402164][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.405210][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.417644][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.419964][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.590833][T18222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3784'. [ 376.751100][ T40] kauditd_printk_skb: 446 callbacks suppressed [ 376.751111][ T40] audit: type=1400 audit(1750895092.726:137325): avc: denied { unmount } for pid=13339 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 376.763242][ T40] audit: type=1400 audit(1750895092.736:137326): avc: denied { sys_module } for pid=18094 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 376.778379][ T40] audit: type=1400 audit(1750895092.736:137327): avc: denied { module_request } for pid=18094 comm="syz-executor" kmod="nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 376.793441][ T40] audit: type=1400 audit(1750895092.736:137328): avc: denied { unmount } for pid=13339 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 376.805508][ T40] audit: type=1400 audit(1750895092.736:137329): avc: denied { unmount } for pid=13339 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 376.816918][ T40] audit: type=1400 audit(1750895092.746:137330): avc: denied { unmount } for pid=13339 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 376.824385][ T40] audit: type=1400 audit(1750895092.786:137331): avc: denied { create } for pid=18234 comm="syz.9.3788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 376.834643][ T40] audit: type=1400 audit(1750895092.786:137332): avc: denied { getopt } for pid=18234 comm="syz.9.3788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 376.841217][ T40] audit: type=1400 audit(1750895092.786:137333): avc: denied { setopt } for pid=18234 comm="syz.9.3788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 376.849733][ T40] audit: type=1400 audit(1750895092.796:137334): avc: denied { read } for pid=18234 comm="syz.9.3788" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 376.886855][T18094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.022891][ T5946] Bluetooth: hci0: command tx timeout [ 377.159946][ T5303] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 377.163923][ T5303] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 377.169371][ T5303] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 377.173386][ T5303] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 377.176647][ T5303] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 377.224777][T18246] xfrm0 speed is unknown, defaulting to 1000 [ 377.227403][T18246] lo speed is unknown, defaulting to 1000 [ 377.380267][T18094] veth0_vlan: entered promiscuous mode [ 377.397147][T18094] veth1_vlan: entered promiscuous mode [ 377.400130][T18246] chnl_net:caif_netlink_parms(): no params data found [ 377.508910][T18246] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.511467][T18246] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.514911][T18246] bridge_slave_0: entered allmulticast mode [ 377.517945][T18246] bridge_slave_0: entered promiscuous mode [ 377.524595][T18246] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.526919][T18246] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.529192][T18246] bridge_slave_1: entered allmulticast mode [ 377.532075][T18246] bridge_slave_1: entered promiscuous mode [ 377.592513][T18246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.603959][T18246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.656646][T18246] team0: Port device team_slave_0 added [ 377.661555][T18094] veth0_macvtap: entered promiscuous mode [ 377.667809][T18246] team0: Port device team_slave_1 added [ 377.703211][T18094] veth1_macvtap: entered promiscuous mode [ 377.758966][T18246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.761819][T18246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.767782][T18274] ================================================================== [ 377.774769][T18246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.774774][T18274] BUG: KASAN: slab-out-of-bounds in _raw_spin_lock+0x2e/0x40 [ 377.781502][T18274] Read of size 1 at addr ffff888057b85960 by task syz.9.3799/18274 [ 377.785085][T18274] [ 377.786701][T18274] CPU: 0 UID: 0 PID: 18274 Comm: syz.9.3799 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 377.786717][T18274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 377.786725][T18274] Call Trace: [ 377.786729][T18274] [ 377.786734][T18274] dump_stack_lvl+0x116/0x1f0 [ 377.786754][T18274] print_report+0xcd/0x680 [ 377.786770][T18274] ? __virt_addr_valid+0x81/0x610 [ 377.786782][T18274] ? __phys_addr+0xe8/0x180 [ 377.786794][T18274] ? _raw_spin_lock+0x2e/0x40 [ 377.786807][T18274] kasan_report+0xe0/0x110 [ 377.786822][T18274] ? _raw_spin_lock+0x2e/0x40 [ 377.786836][T18274] ? _raw_spin_lock+0x2e/0x40 [ 377.786849][T18274] __kasan_check_byte+0x36/0x50 [ 377.786864][T18274] lock_acquire+0xfc/0x350 [ 377.786882][T18274] ? __pfx___mutex_lock+0x10/0x10 [ 377.786910][T18274] _raw_spin_lock+0x2e/0x40 [ 377.786924][T18274] ? __futex_pivot_hash+0x1dd/0x540 [ 377.786940][T18274] __futex_pivot_hash+0x1dd/0x540 [ 377.786963][T18274] futex_hash_allocate+0xad1/0xf00 [ 377.786978][T18274] ? __pfx_futex_hash_allocate+0x10/0x10 [ 377.786993][T18274] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 377.787006][T18274] ? cap_task_prctl+0x2af/0xa80 [ 377.787020][T18274] ? static_key_count+0x5a/0x70 [ 377.787032][T18274] futex_hash_prctl+0x1f4/0x650 [ 377.787048][T18274] __do_sys_prctl+0x171f/0x24c0 [ 377.787066][T18274] ? __pfx___do_sys_prctl+0x10/0x10 [ 377.787081][T18274] ? xfd_validate_state+0x61/0x180 [ 377.787099][T18274] do_syscall_64+0xcd/0x4c0 [ 377.787116][T18274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.787127][T18274] RIP: 0033:0x7f1e8418e929 [ 377.787138][T18274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.787149][T18274] RSP: 002b:00007f1e8507b038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 377.787160][T18274] RAX: ffffffffffffffda RBX: 00007f1e843b6080 RCX: 00007f1e8418e929 [ 377.787167][T18274] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 377.787174][T18274] RBP: 00007f1e84210b39 R08: 0000000000000000 R09: 0000000000000000 [ 377.787181][T18274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.787187][T18274] R13: 0000000000000000 R14: 00007f1e843b6080 R15: 00007ffcad666828 [ 377.787198][T18274] [ 377.787202][T18274] [ 377.796521][T18246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.796766][T18274] Allocated by task 18273: [ 377.796776][T18274] kasan_save_stack+0x33/0x60 [ 377.798610][T18246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.799917][T18274] kasan_save_track+0x14/0x30 [ 377.801871][T18246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.803243][T18274] __kasan_kmalloc+0xaa/0xb0 [ 377.803260][T18274] __kvmalloc_node_noprof+0x27b/0x620 [ 377.803273][T18274] futex_hash_allocate+0x49d/0xf00 [ 377.803286][T18274] futex_hash_prctl+0x1f4/0x650 [ 377.813751][T18094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.814141][T18274] __do_sys_prctl+0x171f/0x24c0 [ 377.837693][T18273] syz.9.3799: attempt to access beyond end of device [ 377.837693][T18273] nbd9: rw=0, sector=64, nr_sectors = 1 limit=0 [ 377.837814][T18274] do_syscall_64+0xcd/0x4c0 [ 377.837835][T18274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.837865][T18274] [ 377.837870][T18274] The buggy address belongs to the object at ffff888057b85900 [ 377.837870][T18274] which belongs to the cache kmalloc-cg-64 of size 64 [ 377.840182][T18273] syz.9.3799: attempt to access beyond end of device [ 377.840182][T18273] nbd9: rw=0, sector=256, nr_sectors = 1 limit=0 [ 377.846123][T18274] The buggy address is located 32 bytes to the right of [ 377.846123][T18274] allocated 64-byte region [ffff888057b85900, ffff888057b85940) [ 377.846139][T18274] [ 377.846142][T18274] The buggy address belongs to the physical page: [ 377.846147][T18274] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888057b85a00 pfn:0x57b85 [ 377.846157][T18274] memcg:ffff88803387e201 [ 377.846162][T18274] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 377.846172][T18274] page_type: f5(slab) [ 377.846181][T18274] raw: 00fff00000000000 ffff88801b849a40 0000000000000000 dead000000000001 [ 377.846191][T18274] raw: ffff888057b85a00 000000008020001e 00000000f5000000 ffff88803387e201 [ 377.846198][T18274] page dumped because: kasan: bad access detected [ 377.846203][T18274] page_owner tracks the page as allocated [ 377.846206][T18274] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6207, tgid 6206 (syz.2.66), ts 50711008925, free_ts 50684804676 [ 377.846224][T18274] post_alloc_hook+0x1c0/0x230 [ 377.846239][T18274] get_page_from_freelist+0x1321/0x3890 [ 377.846252][T18274] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 377.846265][T18274] alloc_pages_mpol+0x1fb/0x550 [ 377.846279][T18274] new_slab+0x23b/0x330 [ 377.846289][T18274] ___slab_alloc+0xd9c/0x1940 [ 377.846300][T18274] __slab_alloc.constprop.0+0x56/0xb0 [ 377.846311][T18274] __kmalloc_cache_noprof+0xfb/0x3e0 [ 377.846322][T18274] ovs_ct_limit_cmd_set+0x30a/0xa90 [ 377.846334][T18274] genl_family_rcv_msg_doit+0x206/0x2f0 [ 377.846348][T18274] genl_rcv_msg+0x55c/0x800 [ 377.846360][T18274] netlink_rcv_skb+0x155/0x420 [ 377.846370][T18274] genl_rcv+0x28/0x40 [ 377.846380][T18274] netlink_unicast+0x53d/0x7f0 [ 377.846394][T18274] netlink_sendmsg+0x8d1/0xdd0 [ 377.846404][T18274] ____sys_sendmsg+0xa95/0xc70 [ 377.855481][T18273] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 377.857177][T18274] page last free pid 9 tgid 9 stack trace: [ 377.857186][T18274] __free_frozen_pages+0x7fe/0x1180 [ 377.860572][T18273] syz.9.3799: attempt to access beyond end of device [ 377.860572][T18273] nbd9: rw=0, sector=512, nr_sectors = 1 limit=0 [ 377.862822][T18274] vfree+0x1fd/0xb50 [ 377.862835][T18274] delayed_vfree_work+0x56/0x70 [ 377.862845][T18274] process_one_work+0x9cc/0x1b70 [ 377.862856][T18274] worker_thread+0x6c8/0xf10 [ 377.862865][T18274] kthread+0x3c2/0x780 [ 377.862873][T18274] ret_from_fork+0x5d4/0x6f0 [ 377.862888][T18274] ret_from_fork_asm+0x1a/0x30 [ 377.862899][T18274] [ 377.862901][T18274] Memory state around the buggy address: [ 377.862907][T18274] ffff888057b85800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 377.862915][T18274] ffff888057b85880: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 377.862923][T18274] >ffff888057b85900: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 377.862929][T18274] ^ [ 377.862935][T18274] ffff888057b85980: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 377.864660][T18273] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 377.864973][T18274] ffff888057b85a00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 378.017529][T18274] ================================================================== [ 378.021090][T18274] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 378.023988][T18274] CPU: 0 UID: 0 PID: 18274 Comm: syz.9.3799 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 378.028711][T18274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 378.032746][T18274] Call Trace: [ 378.034048][T18274] [ 378.035225][T18274] dump_stack_lvl+0x3d/0x1f0 [ 378.037036][T18274] panic+0x71c/0x800 [ 378.038662][T18274] ? __pfx_panic+0x10/0x10 [ 378.040485][T18274] ? irqentry_exit+0x3b/0x90 [ 378.042392][T18274] ? lockdep_hardirqs_on+0x7c/0x110 [ 378.044076][T18274] ? _raw_spin_lock+0x2e/0x40 [ 378.045729][T18274] ? check_panic_on_warn+0x1f/0xb0 [ 378.047781][T18274] ? _raw_spin_lock+0x2e/0x40 [ 378.049652][T18274] check_panic_on_warn+0xab/0xb0 [ 378.051395][T18274] end_report+0x107/0x170 [ 378.052769][T18274] kasan_report+0xee/0x110 [ 378.054481][T18274] ? _raw_spin_lock+0x2e/0x40 [ 378.056330][T18274] ? _raw_spin_lock+0x2e/0x40 [ 378.058048][T18274] __kasan_check_byte+0x36/0x50 [ 378.059798][T18274] lock_acquire+0xfc/0x350 [ 378.061572][T18274] ? __pfx___mutex_lock+0x10/0x10 [ 378.063444][T18274] _raw_spin_lock+0x2e/0x40 [ 378.065086][T18274] ? __futex_pivot_hash+0x1dd/0x540 [ 378.067083][T18274] __futex_pivot_hash+0x1dd/0x540 [ 378.068901][T18274] futex_hash_allocate+0xad1/0xf00 [ 378.070760][T18274] ? __pfx_futex_hash_allocate+0x10/0x10 [ 378.072556][T18274] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 378.074443][T18274] ? cap_task_prctl+0x2af/0xa80 [ 378.075983][T18274] ? static_key_count+0x5a/0x70 [ 378.077477][T18274] futex_hash_prctl+0x1f4/0x650 [ 378.078974][T18274] __do_sys_prctl+0x171f/0x24c0 [ 378.080518][T18274] ? __pfx___do_sys_prctl+0x10/0x10 [ 378.082153][T18274] ? xfd_validate_state+0x61/0x180 [ 378.083749][T18274] do_syscall_64+0xcd/0x4c0 [ 378.085179][T18274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.087051][T18274] RIP: 0033:0x7f1e8418e929 [ 378.088468][T18274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.094427][T18274] RSP: 002b:00007f1e8507b038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 378.097037][T18274] RAX: ffffffffffffffda RBX: 00007f1e843b6080 RCX: 00007f1e8418e929 [ 378.099492][T18274] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 378.101906][T18274] RBP: 00007f1e84210b39 R08: 0000000000000000 R09: 0000000000000000 [ 378.104344][T18274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.106774][T18274] R13: 0000000000000000 R14: 00007f1e843b6080 R15: 00007ffcad666828 [ 378.109276][T18274] [ 378.111113][T18274] Kernel Offset: disabled [ 378.112497][T18274] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:06:46 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b8a55 RDI=ffffffff9b089360 RBP=ffffffff9b089320 RSP=ffffc90005def6a8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3530383838666666 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b089320 R15=ffffffff855b89f0 RIP=ffffffff855b8a7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1e8507b6c0 ffffffff 00c00000 GS =0000 ffff8880d6753000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1e8507af98 CR3=00000000603c8000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000004e6a DR2=0000000000000007 DR3=00000000000002d5 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e84211b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e84211b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e84211b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e84211b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e84211bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e84211c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e84384488 00007f1e84384480 00007f1e84384478 00007f1e84384450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e84eed100 00007f1e84384440 00007f1e84384458 00007f1e843844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e84384498 00007f1e84384490 00007f1e84384488 00007f1e84384480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffffff9af2f2c8 RCX=ffffffff8198c900 RDX=0000000000000001 RSI=0000000000000004 RDI=ffffc9000c4a7510 RBP=1ffff92001894e9e RSP=ffffc9000c4a74f0 R8 =0000000000000001 R9 =fffff52001894ea2 R10=0000000000000003 R11=0000000000000001 R12=dffffc0000000000 R13=ffffffff9af2f2c8 R14=00000000000001b7 R15=0000000000000200 RIP=ffffffff8198c90d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6853000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffbe12c6000 CR3=0000000047a9f000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000004e6a DR2=0000000000000007 DR3=00000000000002d5 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f732e6d61706269 6c2f343662696c2f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000610 000000000000f9f0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=dffffc0000000000 RCX=ffffffff848f8570 RDX=fffffbfff35e6dba RSI=0000000000000004 RDI=ffffffff9af36dc8 RBP=0000000000000001 RSP=ffffc900040b7920 R8 =0000000000000001 R9 =fffffbfff35e6db9 R10=ffffffff9af36dcb R11=0000000000000001 R12=000000001f372453 R13=ffffffff9af30208 R14=0000000000000178 R15=0000000000000001 RIP=ffffffff848f8579 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555556a6b500 ffffffff 00c00000 GS =0000 ffff8880d6953000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f793d1726e0 CR3=000000004ac36000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040008000 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000001 0000002a00000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d36811ae7 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d36811adf ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d36811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d36811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d36811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d36811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d36811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1d36811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 732500316576656e 656700306576656e 656700315f657661 6c735f7664617461 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6200305f6576616c 735f766461746162 007664617461625f 6f745f3168746576 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88801f286a00 RCX=ffff88801f286a00 RDX=ffffea0001335200 RSI=ffffffff816c9838 RDI=0000000000000007 RBP=ffff88804cd48780 RSP=ffffc900059bfc60 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff888057250180 R13=0000000000000000 R14=ffffc900059bfc98 R15=ffff888048cb4000 RIP=ffffffff822306f8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1e8505a6c0 ffffffff 00c00000 GS =0000 ffff8880d6a53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1e85059f98 CR3=00000000603c8000 CR4=00352ef0 DR0=ffffffffffffffff DR1=0000000000000047 DR2=0000000000000005 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffe00 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e84211b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e84211b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e84211b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e84211b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e84211bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1e84211c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000039 64626e2f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000001a 47414d0c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000