last executing test programs: 2m11.467451346s ago: executing program 3 (id=173): mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000200)={{r1}, 0x800, 0x7, 0x3}) close(r1) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b55f706de3d5001638a1260dd8d2ad735d9ec409711851badf7e170fc50", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000880)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f5631012fa0788c5b17f98cc34720b0", 0xf3}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c18db228185e4d2fcca72d87d81df01c142428158ad7ba84dd6c65d24a8d094308", 0xed}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4a994def6599287fb0f8d61029188945e9b273cded0", 0xab}], 0x8, &(0x7f00000014c0)}}], 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x40, 0x3, 0xb, 0xb, 0x5, 0xf, 0x4, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x9, 0xf8, 0x3, 0x46, 0x3, 0xd, 0x6, 0xf3, 0x8, 0x5}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x10, 0x1, 0xfc}, {0xdddd1000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000002840)="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", 0x1a8}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x130, 0x4000000}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/81, 0x51}, {&(0x7f00000006c0)=""/73, 0x49}], 0x2}, 0x40000062) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$binfmt_register(r2, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#! ', 0x3a, '#\xa1\x11', 0x3a, './file1', 0x3a, [0x46]}, 0x2e) truncate(0x0, 0xf) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000500)={0x30, 0x5, 0x0, {0x0, 0x0, 0x1, 0x5}}, 0x30) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) 2m11.461833005s ago: executing program 3 (id=175): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@deltclass={0x94, 0x29, 0x4, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xf, 0xf}, {0xf, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x67, 0x67}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x54, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x9, 0x2, 0x3}}, @TCA_HFSC_USC={0x10, 0x3, {0xffffffcf, 0x2, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0x800, 0xa, 0x10001}}, @TCA_HFSC_RSC={0x10, 0x1, {0x9, 0x3, 0x8}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0xa, 0x6}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xb}}]}, 0x94}}, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000300)="644ee8", 0x3}], 0x1) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) (async) r3 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x7, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x0, 0x10003, 0x0, 0x0}) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x7, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x0, 0x10003, 0x0, 0x0}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000cc0)={{r4, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000c80)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r5}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r6, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x44040) 2m11.385773352s ago: executing program 3 (id=177): r0 = syz_io_uring_setup(0x7ea9, &(0x7f0000000000)={0x0, 0xed7b, 0x8000, 0x2, 0x16}, &(0x7f00000000c0), &(0x7f0000000140)) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x200, 0x0, 0x24e, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x40000600) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x100b}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000031401002abd7000ffdbdf250900020073797a3107000000080041007278650014003300626f6e643000000000000000000000000900020073797a3000000000080041007369770014003300626f6e645f736c6176655f3000000000"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0xfed4}], 0x1}, 0x40004) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="5800000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0008000008000000240061b6ba53aa8cbb77e1ff0f0000140f60fcdb9b54f6ebab2f7c39a6ea5a58eaeb2c766c616e00140002800800010004000000080009000000000014003500dfe5287a267635fee154ca442870bdce5fa62a6352c4008120b229dfe0810303551e11ebf7880e396851af"], 0x58}}, 0x8000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001680), r2) r12 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/0:0:0:0\x00', 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r12, 0x2272, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000016c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r10, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010029bd7000fddbdf251000000008000300", @ANYRES32=r13], 0x2c}}, 0x20000000) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x3, 0x1a}, &(0x7f0000000340), &(0x7f0000000600)) 2m11.258932321s ago: executing program 3 (id=178): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) wait4(r0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, &(0x7f0000000100)='barrier') 2m11.189361583s ago: executing program 3 (id=179): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xfffffff7, @remote, 0xf}, {0xa, 0x4e24, 0x9, @empty, 0x10000003}, r1, 0x170}}, 0x48) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r3 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x00\x00\x00\x80\x00\x00\x00\x00X\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc9Z\x82@\xb1=\xc4\xb6=\xed\xec\x8d\xa2lI\xffK\xfd\xbc6\x90{s\xebr=/]d;\xc4VE\xdb\t\xc0\xe1\xcc\x0e\xf6+\x16\xc2\x17\xe0\f%n\xb3u\xa2~\x86,\xdek\x05\xda\xf5\xb6!\xfc\xdbl\x96\xedm\xd9nf\x00\x00\x00M\x1c\a\x81\x1d\xa24\x8e\xe8\xf3\x9e\\\x17*Ip\xbf1\xd4\x0f\xcc\x1e\x85A\x85\tH\xc2\xe6X\xc7\xc5\v\x1cZ56Buj\x81G\xca5\xed\xda\xd9{|\x18gY\x06\x9a\xa1\x04\xbd\x85\xbaq\xb1\xaduR\f\x01\xc65\xe7\x81K\xbf\xab\xc1hUd\xb7\x8b^\x06\xdbZ\xa4>\x1dg5\x1bFFs\x1c\xf5\a\xef\x97\xa5|\x01\x9e\x13\x1e\x8a\xecY!JW\xb3\x1a\xc4\x9d\xc1\xf5\xdcU3\xee\x8ddz\x00a\x95oKc\xd6\xf4/\x9a\x9c6c\x98\bxz\x04\xf7\xecj\x99\xc1=\x01Q\xb2\xdfR\xd5\x17\x9a=\xf3s\xbc\xac\"7\xb8Z\xa4\x04\xf9\xf8\x86\x8f\xb3\x89\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\xa8\x9aJ\xc6\x03\xb4\x9b\x14\xb1+\xa1\x93\xeb/\xd3tq\x98\xd3L\x1a\xfc\xb14i_aFlb\xa3h0\xee.?\x90h\xc9\xc9m\xe1C\xe1\xa9\xf5\xf6\vf', 0x2) ftruncate(r3, 0xffff) (async) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086201, &(0x7f0000000ac0)=0x2) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dfd, 0xfffffffffffffffe}}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000500)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) (async) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) (async) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) r7 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchownat(r8, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000680)={'vcan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0x3, &(0x7f0000000140)=ANY=[@ANYRES16], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0xffffffffffffffe3, 0x0, 0x40f00, 0x12, '\x00', r9, 0x0, 0xffffffffffffffff, 0xc}, 0x94) 2m11.188748099s ago: executing program 3 (id=181): socket(0x2a, 0x800, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) (async) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) syz_usbip_server_init(0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) (async) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1) fcntl$setpipe(r6, 0x407, 0x8001a0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x8e002, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2m0.239348651s ago: executing program 2 (id=334): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = shmget$private(0x0, 0xf000, 0x54000000, &(0x7f0000ff1000/0xf000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) shmat(r0, &(0x7f0000ff8000/0x2000)=nil, 0x4000) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x3840030, &(0x7f0000000000)=ANY=[]) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) 2m0.017152763s ago: executing program 2 (id=337): r0 = socket$inet6(0xa, 0x1, 0x0) (async) syz_io_uring_setup(0xf5f, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa6426000) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001e00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r5, @ANYBLOB="0a003400020202020f780bbef6fc96a5a1d520b5c267b0020200006bff060008021100800000000800350000000000080026006c090000adf9ee752bb12a911eaf5472a3aed4cfad"], 0x44}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x48) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x8, 0x7f0dbe3ac64a03d0}, 0x9c) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async, rerun: 64) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) (async, rerun: 32) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r9 = dup3(r8, r7, 0x0) (async, rerun: 32) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_pidfd_open(r11, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r12, 0xff01, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @exit_looper], 0x0, 0x0, 0x0}) 1m59.749361777s ago: executing program 2 (id=342): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b15, &(0x7f0000000000)={'wlan0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1m59.748995675s ago: executing program 2 (id=343): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x64a602, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x2253043, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011140100daffffffffffffff08000300010000000800410000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000880}, 0x4004080) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x70bd25, 0x25dfdbf8, {0xc}}, 0x14}}, 0x4000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0x28, r3, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x20075}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x6091}, 0x40080) 1m59.677124805s ago: executing program 2 (id=344): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$instantiate(0xc, 0x0, 0xfffffffffffffffd, 0x2f, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0xfffffffffffffd07, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c08002000000000722da90efba3c74224dc4fe7ddf232c7d257ced1d65a84ecf6c659718a2007e68e32bbffe94d130607e3b730489d480d90b13fd738eca036a539506140f1114f35c6e2a87832dac2b23e19383c9b8d6671f5daf16d3531626a3d3ab559f643e4063bedd8374285caae01c9f3ea39ee9900b09633f7d0f3458e887c29e79de84d006fb3e4c8cdcc556e61d54dc7e465074fbbd0d440f44e5666d33428b354316a", @ANYRESOCT=0x0, @ANYBLOB="03000000000000000000210000000c00018008000100", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) getpid() 1m59.416151043s ago: executing program 2 (id=347): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f000009e0ff008001fffffe1ffff86dd632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) (async) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000200)=[{0x22, '\x00', @buffer={"785f629b000bc36e4c47ceeef4e988279ccb9ce37f092b150598374457bf103b", 0x20}, 0x9}, {0x5, '\x00', @data=0x5, 0xf}, {0x26, '\x00', @st={0x4, [{0x0, @svalue=0x54}, {0x2, @svalue=0x1}, {0x3, @svalue=0xffffffffffffffff}, {0x1, @svalue=0x7fffffffffffffff}]}, 0x81}, {0x1f, '\x00', @buffer={"6d7de94d25849fcfc55cb18f39dad10da05e45eba1045391fd5a846622ab6b13", 0x20}, 0x7}]}) (async) r2 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r3}, 0xc) (async) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x0, r3, 0x267a4e37}, 0xc) (async) recvmsg$unix(r2, &(0x7f00000001c0)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x138}, 0x10003) 1m59.362584072s ago: executing program 32 (id=347): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f000009e0ff008001fffffe1ffff86dd632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) (async) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000200)=[{0x22, '\x00', @buffer={"785f629b000bc36e4c47ceeef4e988279ccb9ce37f092b150598374457bf103b", 0x20}, 0x9}, {0x5, '\x00', @data=0x5, 0xf}, {0x26, '\x00', @st={0x4, [{0x0, @svalue=0x54}, {0x2, @svalue=0x1}, {0x3, @svalue=0xffffffffffffffff}, {0x1, @svalue=0x7fffffffffffffff}]}, 0x81}, {0x1f, '\x00', @buffer={"6d7de94d25849fcfc55cb18f39dad10da05e45eba1045391fd5a846622ab6b13", 0x20}, 0x7}]}) (async) r2 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r3}, 0xc) (async) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x0, r3, 0x267a4e37}, 0xc) (async) recvmsg$unix(r2, &(0x7f00000001c0)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x138}, 0x10003) 1m56.077018127s ago: executing program 33 (id=181): socket(0x2a, 0x800, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) (async) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) syz_usbip_server_init(0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) (async) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1) fcntl$setpipe(r6, 0x407, 0x8001a0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x8e002, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 37.142330242s ago: executing program 4 (id=1678): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@private1, 0x0}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@ipv6_deladdrlabel={0x2c, 0x49, 0x200, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x38, 0x0, r1, 0x7}, [@IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x2c}}, 0x0) 37.141079338s ago: executing program 4 (id=1679): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x5, [@struct={0xb, 0x6, 0x0, 0x4, 0x1, 0x100, [{0x6, 0x0, 0x54d7c1a1}, {0x6, 0x4, 0x9}, {0x10, 0x1, 0x5}, {0x1, 0x0, 0x4}, {0xf, 0x4, 0x4}, {0x2, 0x3, 0x6}]}, @float={0x6, 0x0, 0x0, 0x10, 0x2}, @typedef={0x9, 0x0, 0x0, 0x8, 0x5}, @typedef={0xd, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x2e, 0x61, 0x0]}}, &(0x7f0000000340)=""/225, 0x95, 0xe1, 0x0, 0x7}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000440)={'\x00', 0x100, 0x9, 0x2, 0x0, 0x9, 0xeeee0000, 0x2000, '\x00', 0xa21}) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f00000006c0)={0xc, 0xa, "57960805f93400dabe1e"}) 36.978395026s ago: executing program 4 (id=1682): ioctl$IOMMU_VFIO_IOAS$CLEAR(0xffffffffffffffff, 0x3b88, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000440)=r0}, 0x23) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r5, 0xaea2, 0x2) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 36.894489808s ago: executing program 4 (id=1684): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1543}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000000506010100000000000000000a0000010900020073797a31000000000900030073797a32000000000500010007"], 0x34}, 0x1, 0x0, 0x0, 0x2004c045}, 0x40004) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d5326a4df", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 36.814664235s ago: executing program 4 (id=1686): mkdir(&(0x7f0000000100)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x280800, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x188) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r0}, './file0\x00'}) r4 = socket$inet(0x2, 0x4000000000000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000280)={0x0, 0xffffff32, "85ffd0b3defe9eb6e5336a69848e066c01ea47065f670a58482da48d2f94c7a36ae9fe9fbb17b45aab4e342ffdf38ddf0852e014481364ba485eade295198bd7cd7d54bd7208b9f20497ef11cb2c5154ee069c0146285452ce4156226208dfb57ab3c2d92e683492"}, 0x0) bind$inet(r5, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r7 = socket$inet(0x2, 0x801, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r9], 0x48) 36.649175977s ago: executing program 4 (id=1692): r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x0, 0x4c59}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100002000) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x304e, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r4 = socket(0x10, 0x2, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x17, 0x0, 0xa9}) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff7, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x12, 0x2}, 0x8, 0x203ffffd, 0x300, 0x0, 0x2, 0x20000, 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0xc, @empty, @empty, 0x40, 0x20, 0x400002, 0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000100)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) r7 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x1, &(0x7f0000000200)=""/94, &(0x7f0000000300)=0x5e) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000740)={&(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, 0x0, 0x0, &(0x7f0000004680)}, 0x0) 21.344701456s ago: executing program 34 (id=1692): r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x0, 0x4c59}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100002000) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x304e, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r4 = socket(0x10, 0x2, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x17, 0x0, 0xa9}) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff7, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x12, 0x2}, 0x8, 0x203ffffd, 0x300, 0x0, 0x2, 0x20000, 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0xc, @empty, @empty, 0x40, 0x20, 0x400002, 0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000100)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) r7 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x1, &(0x7f0000000200)=""/94, &(0x7f0000000300)=0x5e) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000740)={&(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, 0x0, 0x0, &(0x7f0000004680)}, 0x0) 18.765836688s ago: executing program 0 (id=1930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0xa, 0x3, 0x87) sendto(r1, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c0002800800034000000000080001400000400208000240000000060900010073797a30000000000900020073797a32"], 0x84}}, 0x0) 18.700189772s ago: executing program 0 (id=1932): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={r1, @local, @multicast2}, 0xc) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x3, 0x6, [0xff, 0x2db, 0x7, 0x0, 0x7, 0xc]}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={r3, 0x61, "9aa6aa0bdcd23bd1929b563a37a53068933d45161391821e72ea14d8357ccd23ece5e72ececd9f874fa1d04eeb5be8afe9d63aece327c0a1d0b9d258f7a2477f9bad68fc80ddac8cc0f319b449cdcfab9e8b216a103349ce174ce85b9deb67b1df"}, &(0x7f0000000280)=0x69) r4 = socket$inet6(0xa, 0x5, 0x1) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x4e23, 0x2, 0x4e21, 0x8, 0xa, 0xa0, 0x80, 0x6c, r1, r2}, {0x1, 0x1, 0x3, 0x2, 0x0, 0x0, 0x7fffffffffffffff, 0x2400000000}, {0x3, 0xfffffffffffffffe, 0x1000, 0x100000000}, 0x7, 0x6e6bc0, 0x2, 0x1, 0x1, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d2, 0xff}, 0xa, @in=@loopback, 0x3506, 0x3, 0x2, 0x9, 0x5, 0x5, 0x400}}, 0xe8) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x8, &(0x7f00000003c0)=[{0x6, 0x1, 0x81, 0xa}, {0x5, 0x8, 0x8, 0x3}, {0x101, 0x1, 0x20, 0xfffffffc}, {0x6, 0x47, 0x10, 0x10}, {0x4, 0x2, 0x3, 0x8}, {0x1, 0xbf, 0x5, 0xfffffbff}, {0x6, 0x9, 0x3, 0x80000000}, {0x8, 0x0, 0xef, 0x1ff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000004c0)={r6, 0x2, r0, 0x5}) r7 = open(&(0x7f0000000500)='./file0\x00', 0x4000, 0x18) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000d, 0x20010, r7, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x32ac4bfab764aa9b) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000640)) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000680)) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r7, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r7, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x94, r8, 0x10, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000801) r11 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00), 0x1, 0x0) connect(r11, &(0x7f0000000a40)=@generic={0xb, "bba4e7255874012d8ab0d7dd32ac232f2322743f56288d924d2902b0be71be52802c81e6b3cc89e9f38b6b2620161c9d2c96efa28d5ae4e513be8e22129a6f39c01548955deb98321acf26d43e0463b494d69a7388f7592c2207819bc092db72ffd95ecb80edcf524a2acc402c57f321c42b8738175d4db5edbae5708479"}, 0x80) read(r5, &(0x7f0000000ac0)=""/6, 0x6) ioctl$EVIOCGPROP(r7, 0x80404509, &(0x7f0000000b00)=""/199) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000c00)={r7, 0xa, 0x6, 0xffffffffffffffff}) ioctl$F2FS_IOC_RESIZE_FS(r11, 0x4008f510, &(0x7f0000000c40)=0xfff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000d00)={0xa, &(0x7f0000000c80)=[{0x8, 0x4, 0x8, 0x9}, {0x200, 0xff, 0x0, 0x6}, {0x1, 0x6, 0x2, 0x9}, {0x4, 0x6, 0x2}, {0x40, 0x4, 0x99, 0xffff}, {0x1, 0x9, 0x5, 0xf}, {0x8, 0x40, 0x4, 0xffff}, {0x1000, 0x0, 0x2, 0x4}, {0x58, 0xcb, 0x6, 0x77d0}, {0x101, 0x40, 0x7f}]}) memfd_secret(0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000d80)={0x4, &(0x7f0000000d40)=[{0x1, 0x8, 0xff, 0xfffffffa}, {0x0, 0x0, 0x0, 0x3ff}, {0x0, 0x3, 0xc, 0x8}, {0xf3a7, 0xf, 0x4, 0x4}]}, 0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r7, 0xc0bc5351, &(0x7f0000000dc0)={0xfffeffff, 0x1, 'client1\x00', 0x4, "0d1c8920ef3f54fb", "86b34c05a9f0b183634c97a28e9f1d94a123cf474734eb9a414bf9fda566fefe", 0x8, 0xfffffffb}) ioctl$sock_inet_tcp_SIOCINQ(r12, 0x541b, &(0x7f0000000e80)) 18.541901638s ago: executing program 0 (id=1934): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x81, 0x4200) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x2) syz_io_uring_setup(0x5a4f, &(0x7f0000000380)={0x0, 0x58d5, 0x1, 0x3, 0x2cd}, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffe) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x81, 0x4200) (async) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x2) (async) syz_io_uring_setup(0x5a4f, &(0x7f0000000380)={0x0, 0x58d5, 0x1, 0x3, 0x2cd}, &(0x7f0000000400), &(0x7f0000000440)) (async) syz_io_uring_submit(r1, 0x0, 0xfffffffffffffffe) (async) 18.537153349s ago: executing program 0 (id=1935): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x51, 0x1, [{0xcfa, 0x8}]}}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x5, 0x0) move_mount(r2, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0xfffffffffffeffff, {0x20, 0x44, 0x4, 0xad, 0x3}}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000440)=@newqdisc={0xc8, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x6b, 0xdf01, 0x0, 0x2, 0x7, 0xfffffffc, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x4, 0x7, 0x9, 0x3, 0x3, 0x1, 0x100, 0x1}}, {0x6, 0x2, [0xc]}}, {{0x1c, 0x1, {0x7, 0x75, 0x78, 0x7a4, 0x2, 0x6, 0x8, 0x5}}, {0xe, 0x2, [0xfffe, 0xfe01, 0x9, 0xe, 0x8]}}, {{0x1c, 0x1, {0x3, 0x81, 0x2, 0x0, 0x1, 0x300000, 0x1, 0x5}}, {0xe, 0x2, [0x9, 0x0, 0xb78, 0xc, 0x9]}}]}]}, 0xc8}}, 0x2000400c) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 15.408447102s ago: executing program 0 (id=1967): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 15.075748781s ago: executing program 0 (id=1972): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x7, 0x3a, ')', 0x3a, '', 0x3a, './file0', 0x3a, [0x43]}, 0x29) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffffffffffffff, 0x70bd25, 0x2fdfdbfd, {0x0, 0x0, 0x0, 0x0, 0x35a31}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 15.01329597s ago: executing program 35 (id=1972): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x7, 0x3a, ')', 0x3a, '', 0x3a, './file0', 0x3a, [0x43]}, 0x29) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffffffffffffff, 0x70bd25, 0x2fdfdbfd, {0x0, 0x0, 0x0, 0x0, 0x35a31}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 1.109534665s ago: executing program 6 (id=2115): syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0xc000) 1.039680037s ago: executing program 5 (id=2118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r2}, 0x38) r3 = dup(r1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86dd606712e9000d118db0049d90491c3248040000db", 0x26}, {&(0x7f0000000080)="b00c7037e07686acd2c8dd812560e8ae4712639d", 0x14}, {&(0x7f0000000180)="dbcaa81aa9dd539fbdeb08b07c", 0xd}], 0x3) 1.038837783s ago: executing program 6 (id=2119): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) 950.543983ms ago: executing program 6 (id=2120): syz_init_net_socket$x25(0x9, 0x5, 0x0) 892.761572ms ago: executing program 6 (id=2123): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x800bcbf, 0x80, 0x3, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x3516, 0x3e44, 0x8, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) 828.030745ms ago: executing program 6 (id=2124): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00'}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x5) (async) accept(r2, 0x0, 0x0) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) (async) syz_clone3(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r4, 0x1, r3, 0x4}) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46022d01ce0100000000000000030006000800000041030000380000006c"], 0xfb) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000140)=@arm64={0xe7, 0xe, 0x3, '\x00', 0xb44b}) (async) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000002c0)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x5, 0x6, 0x1}, {0x8000000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0x7, 0x3, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xeeef0000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x44, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fcffffff89061818001d8014000080060005006300000005000800ea00000005b15b4b33b304ebed7ca94515ce63a653402f37a0a26f92faab98e808c10390520c1ec79855c633d1711b00f32d8ec6de559bc247892aa90ccff92e13a2e5855d8bc093f463967cd5148d8129f52f73848a4cb7f9700c"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 758.322353ms ago: executing program 5 (id=2127): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000580)={'comedi_parport\x00', [0x8001, 0x6, 0x2, 0x4, 0x1, 0xcc7, 0x8008, 0x7, 0x4, 0x7fff, 0x60, 0x1, 0x8, 0x40000002, 0x6, 0x9, 0x5, 0x9, 0x43, 0x40000003, 0x89, 0x10d, 0xf27, 0x4, 0xc, 0x8, 0x5, 0x40000006, 0x6, 0x10000, 0xfffffff4]}) 753.898691ms ago: executing program 1 (id=2128): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66, 0xf5ffffff}, 0x0) r2 = semget$private(0x0, 0x6, 0x3b1) semop(r2, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}], 0x1) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)}, 0x4044000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008040) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @sint={0x5, 0x21}}]}) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) ioctl$IOCTL_GET_NUM_DEVICES(r3, 0x40046104, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66, 0xf5ffffff}, 0x0) (async) semget$private(0x0, 0x6, 0x3b1) (async) semop(r2, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}], 0x1) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)}, 0x4044000) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008040) (async) pipe(&(0x7f0000000500)) (async) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) (async) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @sint={0x5, 0x21}}]}) (async) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) (async) ioctl$IOCTL_GET_NUM_DEVICES(r3, 0x40046104, &(0x7f00000000c0)) (async) 750.481494ms ago: executing program 6 (id=2129): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYBLOB="b70795"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4cc6, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 647.019148ms ago: executing program 5 (id=2130): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f00000005c0), 0x8040, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x3f}]) sendmmsg$alg(r1, &(0x7f0000001780)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="00c91082813ea5b87f3fdac78c3971ee5e", 0x11}], 0x1, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x84, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xb, 0x1, @dev}]}, 0x40}}, 0x0) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x9, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x0, 0x8000, 0xfffffffc, r5, r6, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r8, &(0x7f0000002380)={0x2020}, 0x206e) 611.054697ms ago: executing program 7 (id=2132): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, [], "8029335287b7a081"}}}}}}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{}, 0x4}}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20040889) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @private=0xa010102}, @in6={0xa, 0x4e20, 0x800, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xba9b}, @in6={0xa, 0x4e24, 0x7fffffff, @local, 0x6}], 0x48) 536.075307ms ago: executing program 1 (id=2133): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file2'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r0 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) fcntl$dupfd(r0, 0x404, 0xffffffffffffffff) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)=""/207, 0xcf) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) read$FUSE(r1, &(0x7f0000000c40)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file2'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f0000000440)='./bus\x00') (async) syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) (async) fcntl$dupfd(r0, 0x404, 0xffffffffffffffff) (async) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)=""/207, 0xcf) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) (async) read$FUSE(r1, &(0x7f0000000c40)={0x2020}, 0x2020) (async) 477.529643ms ago: executing program 1 (id=2134): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1000000001b) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = dup(r3) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r4, 0x46c1c000) (async) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r4, 0x46c1c000) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000200)="420f01c90f013fd35a00460f00921ea100000f09400f01df66b892000f00d8ffe66736260f74dc6466460f0b", 0x2c}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 416.505021ms ago: executing program 5 (id=2135): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)={{r0}, {@val, @max}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @union={0x6, 0x1, 0x0, 0x5, 0x0, 0x10001, [{0x4, 0x2, 0x1}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x5}]}]}, {0x0, [0x61, 0x61, 0x0, 0x61, 0x30, 0x5f, 0x5f, 0x5f, 0x5f]}}, &(0x7f0000000300)=""/18, 0x5b, 0x12, 0x1, 0x8}, 0x28) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x3, [@datasec={0x10, 0x6, 0x0, 0xf, 0x1, [{0x5, 0xea, 0x7fff}, {0x2, 0x4, 0x400}, {0x4, 0x2, 0xc}, {0x2, 0x186, 0x8000}, {0x5, 0x1, 0x8}, {0x2, 0x3, 0xfe}], "e4"}, @fwd={0x6}, @fwd={0x9}, @union={0xa, 0x1, 0x0, 0x5, 0x0, 0x1, [{0x3, 0x5, 0x8}]}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x3, 0xa}, @union={0xb, 0x5, 0x0, 0x5, 0x0, 0x44, [{0x4, 0x1, 0x6}, {0x1, 0x3, 0x2}, {0xf, 0x5, 0xd926}, {0xb, 0x2, 0x3}, {0x7, 0x5, 0x5}]}]}, {0x0, [0x0]}}, &(0x7f0000000500)=""/163, 0xfb, 0xa3, 0x0, 0xb}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1e, 0x1, 0x8000, 0x9, 0x1d024, r2, 0xf46b, '\x00', r1, r4, 0x3, 0x3, 0x4, 0x0, @value=r5}, 0x50) readlinkat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=""/80, 0x50) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xa8, r6, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x91, 0x45, "df4b3d322e60416afddfdb7ffcefa581ef34f83396358338fe60a9a9345335060b76b02c2403572faa5689d9abc3a3f5a77f4105c83c75842a22e4f59c95177216b1bad3f8af957bde091c3b875d542b6b5390fcca37d3d99c9d9c477db300769525918622f78a3c0f67d4f74618d4d7201aeed7200a46cd4fb12d3edd9b803281c453192b5f5fac0f3c9d3367"}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) r7 = syz_open_dev$hiddev(&(0x7f0000000880), 0xffffffffffffffff, 0x181301) read$hiddev(r7, &(0x7f00000008c0)=""/135, 0x87) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000d80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000a00)={0x310, r8, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x50, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc0}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x12c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb0, 0x4, "1f2cf77ea162ca8bf2ae5b3e071a6c95b8bf49f8bd8e532a004a68427959354f00a60f5e6d7409d30f1a32f590772c5cb0a3d907c443b02ab5ff015999f865ca844a64f56617361cc1a0dfb17f5772178e2914b283758b5b9fb58710a93656850253c9ffab71272f0b2782bb6a7988baaa8e983820a51dd1c54b4dc06cce246a7a92a66a2173b3ff25906443903e373426dfab51fbc81a3f9ce768a5f5894a311ba82f753b623b857394d5f9"}, @ETHTOOL_A_BITSET_VALUE={0x6f, 0x4, "dd56c55a5dd785a34b0783d95e839eae7d333c3700cec4295df4161ac5c09eaf71bd9c2b53fbd4ebceedf211bfdac4f32f26a6a9d71dda1c235dc73e13735ffeb9610ad57991d7d2c698ebddb89667eec8c56e2363339e07bc500925bbec35f8d7bb2196094accf77798b3"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x88, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-,#$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'max'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}]}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '0000:00:10.0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x310}}, 0x2400c804) write$sndseq(r4, &(0x7f0000000dc0)=[{0x3, 0x8, 0x4c, 0x5, @time={0x1580, 0x9}, {0x8, 0x7}, {0x7f, 0x5}, @addr={0x1, 0x3}}, {0x2c, 0xc7, 0x2, 0x4, @tick=0x3c0, {0x4f, 0x88}, {0x1, 0xe1}, @queue={0xa4, {0x1, 0x2a259255}}}, {0x0, 0x7, 0x78, 0xea, @tick=0x3, {0x6, 0x8}, {0x58, 0x8}, @result={0x6, 0x5}}, {0x2, 0x5, 0x0, 0x2, @tick=0x8, {0x22}, {0x0, 0x8}, @result={0x7ff, 0x7}}, {0x0, 0xff, 0xce, 0x1, @tick=0xfffffffd, {0x6, 0x78}, {0x2, 0x4}, @raw8={"46d51ed4befeabf2e3e10a2f"}}], 0x8c) r9 = open_tree(0xffffffffffffffff, &(0x7f0000000e80)='./file0\x00', 0x100) ioctl$FE_READ_SNR(r9, 0x80026f48, &(0x7f0000000ec0)) setsockopt$RDS_RECVERR(r9, 0x114, 0x5, &(0x7f0000000f00), 0x4) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001140)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000f80)={0x158, r8, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$DVB_DEMUX_DMX_EXPBUF(r9, 0xc00c6f3e, &(0x7f0000001180)={0xc, 0x80000, r0}) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001200), r2) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000003280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003240)={&(0x7f0000001240)={0x1ffc, r11, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x480}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x6dc, 0x8, 0x0, 0x1, [{0x2b4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x248, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x4}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x424, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_ALLOWEDIPS={0x3c8, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "88425f4f4694667cbafd17447c6a0efd88f1ecc92a084dd739d37fe5693dbc65"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PEERS={0x2c0, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3170ef1a6b959124ca482097f7a7abec1d553ef48379d8b8c322b58532d48796"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8001}]}, {0x210, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1b0, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x101, @rand_addr=' \x01\x00', 0x9}}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x162c, 0x8, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x6, @remote, 0x8}}]}, {0x2b0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_ALLOWEDIPS={0x248, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x5, @local, 0x5}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x39}}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x7ac, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ALLOWEDIPS={0x230, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x560, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x26}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x11}}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5}}]}]}]}, {0x4e4, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "03da1be46ff4c4bdf058ec14ed0e26695452caac44661343793eb6f12023c2f9"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7e91f005a9320fe91bf668ce13759e73925b285e6535489d1de99264f2091531"}, @WGPEER_A_ALLOWEDIPS={0x438, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "20e3fcc1cb3f77c149d91451d02b32be711e0682c5a74cf1ed5025a1d90ca7c8"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x4e8, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x2ec, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0xe}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x7}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x8}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x1c0, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff9}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x889, @private2, 0x4}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_ALLOWEDIPS={0x44, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}]}]}, {0xf8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x2, @remote, 0x6}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x457, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xa1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x1ffc}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) r12 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000032c0), 0x454100, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r12, 0x8008af73, &(0x7f0000003300)={0x0, 0x27, ""/39}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000003340)) lsetxattr$security_evm(&(0x7f0000003380)='./file0\x00', &(0x7f00000033c0), &(0x7f0000003400)=@ng={0x4, 0x8, "522e25266d78c2"}, 0x9, 0x1) sendmsg$nl_route(r9, &(0x7f0000003540)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003500)={&(0x7f0000003480)=@ipmr_delroute={0x4c, 0x19, 0x800, 0x70bd29, 0x25dfdbfc, {0x80, 0x0, 0x14, 0xc, 0xff, 0x2, 0x0, 0x3, 0x200}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_TABLE={0x8, 0xf, 0x6}, @RTA_GATEWAY={0x8, 0x5, @multicast2}, @RTA_DPORT={0x6, 0x1d, 0x4e21}, @RTA_DPORT={0x6, 0x1d, 0x4e24}, @RTA_NH_ID={0x8, 0x1e, 0x100000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004080}, 0x8800) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000003680)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003640)={&(0x7f0000003600)={0x40, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20000041) 415.008887ms ago: executing program 7 (id=2136): r0 = socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0x41}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000a8, &(0x7f0000000400)=ANY=[@ANYBLOB='max=00000000000010000000,']) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x20000090) setsockopt(r0, 0x9, 0x5, &(0x7f0000000000)="02d1bcac7df22b07cdfd9aa913a62a843728e81a31d09443b687e66bc7914205c244236e2037ddbdf8a18afb382c85f5faddf5c60d1ba3a5eaf4eb26452cc37a4d574409e14571ffbeff46db005b9c519f4c5b582d61cf5855c334784028f361bfecab8ccb5d652e8ee1a81815aa172c2e2759bbf8067a88f79a5ba584c61152158151701a955ce9313f9340f916741e6933336214faced0a4eb3c72a481f1b46aa19ad4bb20b49b93c8d5689e47", 0xae) 335.807384ms ago: executing program 7 (id=2137): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) (async, rerun: 64) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async, rerun: 64) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x2) (async, rerun: 64) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000000)={0x0, 0x1, @stop_pts=0x5}) (async, rerun: 64) write$sequencer(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="810100"], 0x8) (rerun: 64) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) (async, rerun: 32) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) (async, rerun: 32) sendmmsg$inet6(r3, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x1, 0x0, @loopback, 0x7}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000240)="8f", 0x1}], 0x1}}], 0x1, 0x24044004) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32=r2, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) (async) ioctl$CDROMVOLCTRL(r2, 0x31e, &(0x7f0000000080)={0xa1, 0x2, 0x5, 0x5}) 334.269035ms ago: executing program 5 (id=2138): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x101, 0x1}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60fca33f80083c00fe0000000000000000000000fe8000000000000000000000000000aa0000fd0066000000"], 0x0) 236.247198ms ago: executing program 1 (id=2139): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x143, 0x0) ioctl$I2C_TIMEOUT(r0, 0x702, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0600000000000000bd7000e2ffffff000003e4", @ANYRES32=0x0, @ANYBLOB="43020000cb1d07001c001280080001006772650010000280040012000600030084000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x8804) (async) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) (async) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) (async) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000040)={r7, 0x80000}) (async, rerun: 32) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f00000002c0)={0x3, 0x2, 0x0, 0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000300)={0x5, 0x3, 0x0, 0x0}) (async, rerun: 64) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) (async, rerun: 64) r12 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r12, 0xc0184800, &(0x7f0000000100)={0x20004, r11, 0x2}) (async) r14 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r14, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r13}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r14, 0xc00c642d, &(0x7f0000000040)={r15}) ioctl$DRM_IOCTL_PANTHOR_BO_SYNC(0xffffffffffffffff, 0xc010644f, &(0x7f0000000440)={{0x18, 0x7, &(0x7f0000000340)=[{0x0, 0x0, 0x80, 0x401}, {0x0, 0x0, 0x0, 0xb77e}, {0x0, 0x1, 0x400, 0x9}, {r7, 0x0, 0x6, 0x2}, {r9, 0x1, 0x10000, 0x401}, {r10, 0x0, 0x7780000000000, 0x5}, {r15, 0x1, 0x1000, 0xb}]}}) r16 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r16, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000001c0)={0x4000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x8, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 32) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) (rerun: 32) 235.519133ms ago: executing program 7 (id=2140): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async, rerun: 32) recvfrom$l2tp(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async, rerun: 32) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async, rerun: 64) timer_create(0x0, 0x0, &(0x7f0000000000)) (async, rerun: 64) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x1f, &(0x7f0000000f80)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000003424203"], 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) (async, rerun: 32) r3 = socket$rxrpc(0x21, 0x2, 0xa) (rerun: 32) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000140)='\')\x00', 0x3) mmap(&(0x7f000097b000/0x2000)=nil, 0x2000, 0xb, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0x40043d14, &(0x7f0000000500)={0x15}) (async) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)) (async) r5 = syz_open_procfs(0x0, 0x0) getdents(r5, 0x0, 0x0) (async) getdents64(r5, 0x0, 0x0) syz_clone3(&(0x7f00000009c0)={0x0, &(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000200), {0x11}, &(0x7f0000000240)=""/67, 0x43, &(0x7f0000000340)=""/135, &(0x7f00000002c0), 0x0, {r5}}, 0x58) syz_emit_ethernet(0x4c, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60010100001611fffe800000000000000035d40000a9de0c98050e00000000bbfe8000000000000000000000000000aa00000e22001690780103000000000000"], 0x0) 145.746286ms ago: executing program 7 (id=2141): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x7, 0x8, 0x2, 0x5, {{0x2b, 0x4, 0x0, 0x24, 0xac, 0x66, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x2b, 0x7c, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @remote, @multicast1, @rand_addr=0x64010100, @multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x1c, 0x3c, 0x0, 0x2, [0x33e0, 0x12, 0x5, 0x0, 0x8, 0x121]}, @lsrr={0x83, 0x17, 0xa, [@local, @rand_addr=0x64010101, @multicast2, @loopback, @local]}, @timestamp_addr={0x44, 0xc, 0x96, 0x1, 0x5, [{@multicast1, 0x9}]}, @timestamp={0x44, 0xc, 0xb2, 0x0, 0x8, [0x9, 0x3ff]}, @end, @cipso={0x86, 0x1f, 0xffffffffffffffff, [{0x1, 0x11, "abef4203957aeb2a87d60bfa7d4e03"}, {0x0, 0x8, "9023031571f8"}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000100)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b2a, &(0x7f0000000040)) 95.332536ms ago: executing program 1 (id=2142): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) (async) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmmsg$alg(r5, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x895}], 0x1, 0x24002894) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) (async) close(r5) (async) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x14, 0x0, 0x10, 0x70bd26, 0x25dfdbfc}, 0x14}}, 0x20000000) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x10, 0xfff3}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x40040) (async) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 1.408985ms ago: executing program 5 (id=2143): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x6e3, 0x100) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000080)=0x9) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f00000000c0)={0x3, 0x342, 0x8}) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xffffffff80000000, 0x0) read$msr(r2, &(0x7f0000000140)=""/4096, 0x1000) ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000001140)) syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000001180)=""/163) r3 = dup(r2) syz_genetlink_get_family_id$gtp(&(0x7f0000001240), r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r3) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x50, r4, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'team_slave_0\x00'}]}, 0x50}}, 0x4000800) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001440), r3) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f00000016c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001680)={&(0x7f0000001480)={0x200, r5, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x56}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @local, 0x4cd6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x10, @dev={0xfe, 0x80, '\x00', 0x41}, 0x5}}}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xeefa}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3bcd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa51d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x90}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x20004014}, 0x80) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001700)={0x3, 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000001740), 0x40000, 0x0) write$tun(r6, &(0x7f0000001780)={@void, @val={0x1, 0x4, 0x8001, 0x7, 0x8, 0x5}, @llc={@snap={0xaa, 0xab, "8509", "8366c5", 0xb, "c4a5f42d91a35b944da02941fd516a28b79ec4c90bfea244828398ec8a72b8f681ab4070fff9d0ff1511adc3347e5689bdd817f7728455f3eca2fb6cbbf1bd630800764b03e03a"}}}, 0x5a) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001a80)={0x0, &(0x7f0000001800)=[@nested_load_syzos={0x136, 0x122, {0x2, 0xdf34, [@in_dx={0x69, 0x20, {0xb299, 0x1}}, @enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0x3633, 0x1}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @code={0xa, 0x42, {"408b9e62fc000066ba2000ecc4e2052d07440f3066b897000f00d826450fc71a0f01de0f08660f3881a80c4fba8d8a6a0f"}}, @nested_amd_invlpga={0x17d, 0x20, {0xeeee0000, 0xd605}}, @nested_amd_vmsave={0x183, 0x18, 0x2}]}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest64=0x2811, 0x6, 0x101, 0xbd00000000000000}}, @cpuid={0x64, 0x18, {0x0, 0x1}}, @set_irq_handler={0xc8, 0x20, {0xa7}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x33, 0x4c, 0x1, 0xfffffffffffffb21}}, @out_dx={0x6a, 0x28, {0x5258, 0xe, 0x7fff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest16=0x808, 0xcb0, 0x9}}], 0x242}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r7, 0x4018aee2, &(0x7f0000001b00)=@attr_other={0x0, 0x7, 0x3, &(0x7f0000001ac0)=0x10000}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b80), r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001bc0)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001f00)={r3, 0xe0, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001c00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000001c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001cc0)=[0x0, 0x0], 0x0, 0xfb, &(0x7f0000001d00)=[{}], 0x8, 0x10, &(0x7f0000001d40), &(0x7f0000001d80), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000001dc0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000002080)={'gretap0\x00', &(0x7f0000001f40)={'gre0\x00', 0x0, 0xc009, 0x10, 0x9, 0x1, {{0x41, 0x4, 0x1, 0x38, 0x104, 0x65, 0x0, 0x1, 0x2f, 0x0, @multicast2, @empty, {[@lsrr={0x83, 0x7, 0x35, [@rand_addr=0x64010101]}, @ssrr={0x89, 0x2b, 0x67, [@rand_addr=0x64010102, @remote, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x21}, @local, @private=0xa010102, @local, @local, @remote]}, @cipso={0x86, 0x3e, 0x2, [{0x1, 0xa, "1e05541f82b64bab"}, {0x2, 0xb, "e1547bca1b3c146191"}, {0x2, 0x5, "11b3ba"}, {0x7, 0x9, "c09d83351fd983"}, {0x1, 0x4, "180b"}, {0x2, 0x11, "9a20ff4ff50d0affecb3c62fc8236e"}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x5f, 0x2, [{0x2, 0x6, "088c65a4"}, {0x2, 0xa, "15e9ea8f7669024e"}, {0x1, 0x8, "5506b82411f9"}, {0x7, 0x11, "5ffbb29c0bab9af7b9dd09e5905d99"}, {0x2, 0xa, "dbe9ebd917ffd42e"}, {0x0, 0x8, "84b4c9a045e9"}, {0x5, 0xa, "22de3e57cc097af2"}, {0x6, 0xc, "701b4d088adf2f57d11b"}, {0x1, 0x8, "88ffcb40ac7b"}]}, @rr={0x7, 0x7, 0xec, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0xc, 0xb2, 0x1, 0x3, [{@loopback, 0x7}]}, @ssrr={0x89, 0x7, 0xc2, [@remote]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000002140)={'syztnl2\x00', &(0x7f00000020c0)={'syztnl0\x00', 0x0, 0x80, 0x20, 0x80000000, 0x0, {{0xc, 0x4, 0x2, 0x1d, 0x30, 0x66, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@noop, @noop, @timestamp={0x44, 0x18, 0xd2, 0x0, 0x7, [0x2, 0x4, 0xb, 0x8, 0x101]}]}}}}}) getsockname$packet(r3, &(0x7f0000002180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000021c0)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000002300)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000022c0)={&(0x7f0000002200)={0x8c, r8, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4044001}, 0x4000000) sendmsg$nl_generic(r3, &(0x7f0000003580)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003540)={&(0x7f0000002380)={0x11ac, 0x2f, 0x300, 0x70bd2b, 0x25dfdbfb, {0x1}, [@generic="dc79474935ff4a329412aee51d1add5d90bd48d550be92dcadb42b33aaa71bcc5248a7176f00d4d29ceae43858dbb7240445de36f3", @generic="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", @nested={0x1c, 0x3a, 0x0, 0x1, [@nested={0x4, 0xff}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@mcast2}]}, @generic, @nested={0xe6, 0x6c, 0x0, 0x1, [@nested={0x4, 0xae}, @nested={0x4, 0xc}, @nested={0x4, 0x14e}, @generic="5be94b004c8091f38bd366dd0f7c3ec457543a41874f2fb7c0a31b2ce37fa5ed8ba49b55a0846b5c0e7154cbe0f56a049effa72e59a4efe37459593076b7bf8a6dcba04658fe35bef7a1b158fcab8e84aad28cdddd3de4dc3d1c5bbe3ced9f6b4fda563f34ba0f3d6de048cd006f6459a6e9b9782bceb9d2f5f8997c5707247d94f33d862d6c75bc7e35bf4632b25fccbbe95a14caf967c302dc7555c18abba1a8160bf5d8b1147970176792fe321025e8ccf19cfc9e07bc4bd2c73555f4a6accfcebb14cae985ffadb9e826ce4bd4a8e037f60fd3c4"]}, @generic="f540347a20a3bda8cb73605ecebcb2dac01ac107ea333bfd4a6000ce9027dcae8149e8ecf1e571d04bb95dd4651174fe31c292467a400caadaf4f548359eacff2b2389d67be8304a3abc5f1d", @typed={0x5, 0xbe, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x98, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3f}}]}, 0x11ac}, 0x1, 0x0, 0x0, 0x840}, 0x10) 1.116212ms ago: executing program 7 (id=2144): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}}, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$OCFS2_IOC_UNRESVSP64(r1, 0x4030582b, &(0x7f0000000000)={0x2, 0x2, 0x401, 0x3, 0xa60, 0x9}) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000040)="b9879cb6d9e81c415ad3965fe29771c54b3b6c22cd7f007a82059403a079266305e19bdd7afec1400c2bdffb52631bed1656c939b1") 0s ago: executing program 1 (id=2145): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x47b, 0x2) syz_io_uring_setup(0x5c26, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440), &(0x7f0000000080)) (async) readv(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/179, 0xb3}], 0x1) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@multiplanar_mmap={0x7, 0x1, 0x4, 0x100, 0x10000, {0x0, 0xea60}, {0x1, 0x1, 0xa, 0xb2, 0x0, 0x3, "62aa962a"}, 0x2, 0x1, {0x0}, 0x3}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}, {@in=@empty=0xe00, 0x0, 0x3c}, @in=@loopback, {0x0, 0x0, 0x0, 0x80000000005}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x60}, [@coaddr={0x14, 0xe, @in6=@private2}]}, 0x104}}, 0x0) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x200) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x0, 0x6042c, 0x0, 0xfffffffb, 0x20000006, 0xfffffffc, 0x2, 0x0, 0x1}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x7f}, 'port1\x00', 0x80, 0x14, 0x4, 0xfffffeff, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) (async) r4 = signalfd4(r0, &(0x7f0000000040)={[0x3]}, 0x8, 0x80400) ioctl$VIDIOC_G_EDID(r4, 0xc0285628, &(0x7f0000000100)={0x0, 0x9, 0x3, '\x00', &(0x7f0000000080)=0x7}) sendfile(r1, r1, &(0x7f0000000000)=0x2eb4, 0x2000007ff) (async) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): invalid origin (0000) [ 142.131001][ T9772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.136040][ T9772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.141819][ T9772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.147472][ T9772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.152827][ T9771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.155768][ T9771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.242664][ T9785] pimreg: entered allmulticast mode [ 142.253785][ T9785] pimreg: left allmulticast mode [ 142.254861][ T9787] binder: BINDER_SET_CONTEXT_MGR already set [ 142.258886][ T9787] binder: 9786:9787 ioctl 4018620d 200000000040 returned -16 [ 142.520918][ T9797] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.1063'. [ 142.524909][ T9797] netlink: Unknown conntrack attr (type=2304, max=9) [ 142.582571][ T9806] netlink: 'syz.0.1064': attribute type 3 has an invalid length. [ 142.803614][ T9832] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 142.808293][ T8418] Bluetooth: hci5: Frame reassembly failed (-84) [ 142.857691][ T9837] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 142.861952][ T9837] NILFS (nbd4): device size too small [ 142.925749][ T9841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9841 comm=syz.0.1074 [ 142.954805][ T9843] openvswitch: netlink: Duplicate or invalid key (type 0). [ 142.958200][ T9843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.000536][ T40] audit: type=1400 audit(1774626938.810:11088): avc: denied { map } for pid=9848 comm="syz.4.1076" path="socket:[34903]" dev="sockfs" ino=34903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.093489][ T9858] netlink: 'syz.0.1080': attribute type 12 has an invalid length. [ 144.392252][ T40] audit: type=1400 audit(1774626940.200:11089): avc: denied { setopt } for pid=9899 comm="syz.4.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 144.450361][ T9909] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 144.453232][ T9909] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 144.458249][ T9909] vhci_hcd vhci_hcd.0: Device attached [ 144.487769][ T9911] vhci_hcd: connection closed [ 144.490371][ T8417] vhci_hcd vhci_hcd.5: stop threads [ 144.493762][ T8417] vhci_hcd vhci_hcd.5: release socket [ 144.495547][ T8417] vhci_hcd vhci_hcd.5: disconnect device [ 144.527893][ T9924] binder: 9922:9924 ioctl 4018620d 0 returned -22 [ 144.568385][ T9928] 9pnet_fd: Insufficient options for proto=fd [ 144.816472][ T40] audit: type=1400 audit(1774626940.620:11090): avc: denied { write } for pid=9950 comm="syz.5.1103" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 144.816944][ T9951] autofs4:pid:9951:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 144.876925][ T5943] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 144.878068][ T63] Bluetooth: hci5: command 0x1003 tx timeout [ 144.943010][ T9953] syzkaller0: entered promiscuous mode [ 144.945419][ T9953] syzkaller0: entered allmulticast mode [ 144.961268][ T9955] misc userio: Begin command sent, but we're already running [ 144.976671][ T40] audit: type=1400 audit(1774626940.780:11091): avc: denied { write } for pid=9952 comm="syz.1.1104" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 144.978081][ T9953] IPVS: set_ctl: invalid protocol: 94 100.1.1.1:20003 [ 144.990648][ T50] IPVS: starting estimator thread 0... [ 145.077884][ T9956] IPVS: using max 42 ests per chain, 100800 per kthread [ 145.112008][ T40] audit: type=1400 audit(1774626940.920:11092): avc: denied { watch } for pid=9964 comm="syz.1.1107" path="/286/file0" dev="tmpfs" ino=1552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 145.120984][ T40] audit: type=1400 audit(1774626940.920:11093): avc: denied { watch_sb watch_reads } for pid=9964 comm="syz.1.1107" path="/286/file0" dev="tmpfs" ino=1552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 145.356963][ T9980] IPVS: length: 120 != 24 [ 145.359269][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 145.502955][ T9982] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1113'. [ 145.511409][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1113'. [ 145.515797][ T9995] netlink: 'syz.1.1117': attribute type 39 has an invalid length. [ 145.635748][T10007] cgroup: Name too long [ 145.693651][T10009] netlink: 'syz.0.1122': attribute type 7 has an invalid length. [ 145.721821][T10009] netlink: 'syz.0.1122': attribute type 7 has an invalid length. [ 145.725294][ T101] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.730170][ T101] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.742102][ T101] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.759447][ T101] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.878510][ T40] audit: type=1326 audit(1774626941.680:11094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10029 comm="syz.0.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21539c799 code=0x7ffc0000 [ 145.902353][ T40] audit: type=1326 audit(1774626941.700:11095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10029 comm="syz.0.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fd21539c799 code=0x7ffc0000 [ 146.029148][T10042] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1132'. [ 146.111455][T10047] qrtr: Invalid version 39 [ 146.367002][ T7283] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 146.377286][T10064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.377564][T10065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.540096][ T7283] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 146.543144][ T7283] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.545714][ T7283] usb 9-1: Product: syz [ 146.547483][ T7283] usb 9-1: Manufacturer: syz [ 146.548992][ T7283] usb 9-1: SerialNumber: syz [ 146.560665][ T7283] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 146.574975][T10075] qnx6: unable to read the first superblock [ 146.578941][T10075] qnx6: unable to read the first superblock [ 146.581249][T10075] qnx6: unable to read the first superblock [ 146.583896][T10075] qnx6: unable to read the first superblock [ 146.585917][T10075] qnx6: unable to read the first superblock [ 146.589290][ T7283] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 146.589625][T10075] qnx6: unable to read the first superblock [ 146.594893][T10075] qnx6: unable to read the first superblock [ 146.597393][T10075] qnx6: unable to read the first superblock [ 146.599296][T10075] qnx6: unable to read the first superblock [ 146.602318][T10075] qnx6: unable to read the first superblock [ 146.604422][T10075] qnx6: unable to read the first superblock [ 146.606925][T10075] qnx6: unable to read the first superblock [ 146.610086][T10075] qnx6: unable to read the first superblock [ 146.612397][T10075] qnx6: unable to read the first superblock [ 146.614926][T10075] qnx6: unable to read the first superblock [ 146.618717][T10075] qnx6: unable to read the first superblock [ 146.621177][T10075] qnx6: unable to read the first superblock [ 146.623919][T10075] qnx6: unable to read the first superblock [ 146.627151][T10075] qnx6: unable to read the first superblock [ 146.629354][T10075] qnx6: unable to read the first superblock [ 146.631335][T10075] qnx6: unable to read the first superblock [ 146.634132][T10075] qnx6: unable to read the first superblock [ 146.636119][T10075] qnx6: unable to read the first superblock [ 146.638348][T10075] qnx6: unable to read the first superblock [ 146.641039][T10075] qnx6: unable to read the first superblock [ 146.643107][T10075] qnx6: unable to read the first superblock [ 146.645007][T10075] qnx6: unable to read the first superblock [ 146.647890][T10075] qnx6: unable to read the first superblock [ 146.650144][T10075] qnx6: unable to read the first superblock [ 146.652028][T10081] ip6gre1: entered promiscuous mode [ 146.652254][T10075] qnx6: unable to read the first superblock [ 146.653007][T10075] qnx6: unable to read the first superblock [ 146.654330][T10081] ip6gre1: entered allmulticast mode [ 146.656511][T10075] qnx6: unable to read the first superblock [ 146.663069][T10075] qnx6: unable to read the first superblock [ 146.666312][T10075] qnx6: unable to read the first superblock [ 146.667118][T10081] /dev/nullb0: Can't lookup blockdev [ 146.669428][T10075] qnx6: unable to read the first superblock [ 146.673423][T10075] qnx6: unable to read the first superblock [ 146.677502][T10075] qnx6: unable to read the first superblock [ 146.680349][T10075] qnx6: unable to read the first superblock [ 146.683031][T10075] qnx6: unable to read the first superblock [ 146.687346][T10075] qnx6: unable to read the first superblock [ 146.690301][T10075] qnx6: unable to read the first superblock [ 146.692910][T10075] qnx6: unable to read the first superblock [ 146.698337][T10075] qnx6: unable to read the first superblock [ 146.701095][T10075] qnx6: unable to read the first superblock [ 146.703665][T10075] qnx6: unable to read the first superblock [ 146.708293][T10075] qnx6: unable to read the first superblock [ 146.711268][T10075] qnx6: unable to read the first superblock [ 146.715574][T10075] qnx6: unable to read the first superblock [ 146.720358][T10075] qnx6: unable to read the first superblock [ 146.722978][T10075] qnx6: unable to read the first superblock [ 146.725537][T10075] qnx6: unable to read the first superblock [ 146.732027][T10075] qnx6: unable to read the first superblock [ 146.734878][T10075] qnx6: unable to read the first superblock [ 146.737611][T10075] qnx6: unable to read the first superblock [ 146.741271][T10075] qnx6: unable to read the first superblock [ 146.744015][T10085] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1145'. [ 146.749716][T10075] qnx6: unable to read the first superblock [ 146.752376][T10075] qnx6: unable to read the first superblock [ 146.755450][T10075] qnx6: unable to read the first superblock [ 146.757770][T10087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1146'. [ 146.763409][T10075] qnx6: unable to read the first superblock [ 146.766067][T10075] qnx6: unable to read the first superblock [ 146.769237][T10075] qnx6: unable to read the first superblock [ 146.771796][T10075] qnx6: unable to read the first superblock [ 146.774266][T10075] qnx6: unable to read the first superblock [ 146.777531][T10075] qnx6: unable to read the first superblock [ 146.780264][T10075] qnx6: unable to read the first superblock [ 146.782839][T10075] qnx6: unable to read the first superblock [ 146.786211][T10075] qnx6: unable to read the first superblock [ 146.788972][T10075] qnx6: unable to read the first superblock [ 146.791298][T10075] qnx6: unable to read the first superblock [ 146.794296][T10075] qnx6: unable to read the first superblock [ 146.797526][T10075] qnx6: unable to read the first superblock [ 146.799881][T10075] qnx6: unable to read the first superblock [ 146.803177][T10075] qnx6: unable to read the first superblock [ 146.806023][T10075] qnx6: unable to read the first superblock [ 146.806474][ T6000] usb 9-1: USB disconnect, device number 11 [ 146.808942][T10075] qnx6: unable to read the first superblock [ 146.815575][T10075] qnx6: unable to read the first superblock [ 146.817921][T10075] qnx6: unable to read the first superblock [ 146.820351][T10075] qnx6: unable to read the first superblock [ 146.823694][T10075] qnx6: unable to read the first superblock [ 146.826185][T10075] qnx6: unable to read the first superblock [ 146.829088][T10075] qnx6: unable to read the first superblock [ 146.833178][T10075] qnx6: unable to read the first superblock [ 146.835885][T10075] qnx6: unable to read the first superblock [ 146.838850][T10075] qnx6: unable to read the first superblock [ 146.842842][T10075] qnx6: unable to read the first superblock [ 146.845519][T10075] qnx6: unable to read the first superblock [ 146.848221][T10075] qnx6: unable to read the first superblock [ 146.851746][T10075] qnx6: unable to read the first superblock [ 146.854448][T10075] qnx6: unable to read the first superblock [ 146.861973][T10075] qnx6: unable to read the first superblock [ 146.865203][T10075] qnx6: unable to read the first superblock [ 146.867834][T10075] qnx6: unable to read the first superblock [ 146.869931][T10075] qnx6: unable to read the first superblock [ 146.872822][T10075] qnx6: unable to read the first superblock [ 146.875011][T10075] qnx6: unable to read the first superblock [ 146.880634][T10075] qnx6: unable to read the first superblock [ 146.886190][T10075] qnx6: unable to read the first superblock [ 146.893991][T10075] qnx6: unable to read the first superblock [ 146.896460][T10075] qnx6: unable to read the first superblock [ 147.074452][T10104] __nla_validate_parse: 3 callbacks suppressed [ 147.074468][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1152'. [ 147.220974][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 147.220992][ T40] audit: type=1400 audit(1774626943.030:11115): avc: denied { bind } for pid=10112 comm="syz.5.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 147.249014][T10115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1157'. [ 147.264860][T10118] netlink: 'syz.5.1158': attribute type 1 has an invalid length. [ 147.268785][T10115] 8021q: adding VLAN 0 to HW filter on device bond10 [ 147.274800][T10119] netlink: 'syz.5.1158': attribute type 1 has an invalid length. [ 147.279444][T10118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=10118 comm=syz.5.1158 [ 147.279488][T10115] bond10: entered promiscuous mode [ 147.286367][T10115] bond10: entered allmulticast mode [ 147.289872][T10115] 8021q: adding VLAN 0 to HW filter on device bond10 [ 147.293006][T10115] team0: Port device bond10 added [ 147.382025][ T40] audit: type=1400 audit(1774626943.190:11116): avc: denied { connect } for pid=10134 comm="syz.5.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.385250][T10135] netlink: 'syz.5.1163': attribute type 1 has an invalid length. [ 147.385847][T10136] netlink: 'syz.5.1163': attribute type 1 has an invalid length. [ 147.389349][ T40] audit: type=1400 audit(1774626943.190:11117): avc: denied { accept } for pid=10132 comm="syz.0.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 147.417688][T10136] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.450831][T10136] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.453293][T10136] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 147.457153][T10136] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 147.482646][T10135] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 147.490581][T10135] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 147.502677][ T40] audit: type=1400 audit(1774626943.310:11118): avc: denied { map } for pid=10145 comm="syz.4.1166" path="socket:[36925]" dev="sockfs" ino=36925 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 147.508747][T10144] netlink: 'syz.0.1165': attribute type 1 has an invalid length. [ 147.524562][T10144] bond11: entered promiscuous mode [ 147.526615][T10144] 8021q: adding VLAN 0 to HW filter on device bond11 [ 147.568861][T10154] overlayfs: failed to clone upperpath [ 147.583111][T10154] Illegal XDP return value 268435456 on prog (id 279) dev syz_tun, expect packet loss! [ 147.590821][T10154] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1168'. [ 147.606955][ T7283] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 147.610297][ T7283] ath9k_htc: Failed to initialize the device [ 147.625975][ T6000] usb 9-1: ath9k_htc: USB layer deinitialized [ 147.808718][T10176] xt_hashlimit: size too large, truncated to 1048576 [ 147.834091][T10177] netlink: 'syz.0.1177': attribute type 1 has an invalid length. [ 148.132939][T10209] netlink: 'syz.5.1188': attribute type 4 has an invalid length. [ 148.353664][ T210] Bluetooth: hci5: Frame reassembly failed (-84) [ 148.462485][ T40] audit: type=1400 audit(1774626944.270:11119): avc: denied { getopt } for pid=10221 comm="syz.4.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 148.519910][T10228] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1197'. [ 148.575887][T10230] can: request_module (can-proto-5) failed. [ 148.676252][T10239] gfs2: error -5 reading superblock [ 148.747374][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1204'. [ 148.750718][T10250] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1204'. [ 148.788748][T10248] 9p: Bad value for 'rq' [ 148.859844][T10260] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1206'. [ 149.048664][ T40] audit: type=1400 audit(1774626944.860:11120): avc: denied { connect } for pid=10262 comm="syz.5.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 149.154365][T10277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1211'. [ 149.161646][T10277] hsr_slave_0: left promiscuous mode [ 149.166989][T10277] hsr_slave_1: left promiscuous mode [ 149.197133][T10282] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.239634][T10293] fuse: Bad value for 'fd' [ 149.305711][T10294] fuse: Bad value for 'fd' [ 149.409771][ T40] audit: type=1400 audit(1774626945.220:11121): avc: denied { bind } for pid=10298 comm="syz.5.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 149.419458][ T40] audit: type=1400 audit(1774626945.230:11122): avc: denied { mount } for pid=10304 comm="syz.4.1218" name="/" dev="autofs" ino=36465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 149.430908][T10305] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1218'. [ 149.874348][T10321] i2c i2c-1: Invalid block write size 34 [ 149.889550][T10321] overlayfs: regular lower layers cannot follow data lower layers [ 149.941414][T10323] can0: slcan on ttyS3. [ 150.017226][T10323] can0 (unregistered): slcan off ttyS3. [ 150.056904][T10326] --map-set only usable from mangle table [ 150.081972][T10326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1225'. [ 150.096044][T10329] overlayfs: failed to resolve './file0': -2 [ 150.225462][ T40] audit: type=1400 audit(1774626946.030:11123): avc: denied { cmd } for pid=10336 comm="syz.4.1229" path="socket:[37317]" dev="sockfs" ino=37317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 150.235640][ T40] audit: type=1804 audit(1774626946.040:11124): pid=10339 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1230" name="bus" dev="ramfs" ino=34626 res=1 errno=0 [ 150.345103][T10346] ieee802154 phy0 wpan0: encryption failed: -22 [ 150.406878][ T5943] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 150.410218][ T63] Bluetooth: hci5: command 0x1003 tx timeout [ 151.098884][T10377] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 151.420207][T10395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10395 comm=syz.1.1246 [ 151.564526][T10406] tipc: Enabling not permitted [ 151.566438][T10406] tipc: Enabling of bearer rejected, failed to enable media [ 151.922978][T10435] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.928234][T10440] fuse: Bad value for 'group_id' [ 151.930043][T10440] fuse: Bad value for 'group_id' [ 152.283182][T10469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.287355][T10469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.293556][T10469] __nla_validate_parse: 5 callbacks suppressed [ 152.293572][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1268'. [ 152.305340][T10469] bond0: entered promiscuous mode [ 152.307515][T10469] bond_slave_0: entered promiscuous mode [ 152.312515][T10469] bond_slave_1: entered promiscuous mode [ 152.317518][T10469] gretap0: entered promiscuous mode [ 152.320194][T10469] hsr2: entered promiscuous mode [ 152.872276][T10481] random: crng reseeded on system resumption [ 152.880906][T10481] PM: hibernation: Image mismatch: memory size [ 153.002671][T10496] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.007237][T10496] bridge_slave_1: left allmulticast mode [ 153.009643][T10496] bridge_slave_1: left promiscuous mode [ 153.011933][T10496] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.018169][T10496] bridge_slave_1: entered allmulticast mode [ 153.021196][T10496] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 153.145668][T10511] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 153.151350][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 153.151361][ T40] audit: type=1400 audit(1774626948.960:11133): avc: denied { relabelto } for pid=10495 comm="syz.5.1278" name="cgroup.procs" dev="cgroup" ino=352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 153.162931][ T40] audit: type=1400 audit(1774626948.960:11134): avc: denied { associate } for pid=10495 comm="syz.5.1278" name="cgroup.procs" dev="cgroup" ino=352 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 153.170934][T10513] fuse: Bad value for 'fd' [ 153.700935][T10517] IPVS: Scheduler module ip_vs_sip not found [ 154.331702][ T40] audit: type=1400 audit(1774626950.140:11135): avc: denied { create } for pid=10572 comm="syz.4.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 154.366457][ T40] audit: type=1400 audit(1774626950.140:11136): avc: denied { bind } for pid=10572 comm="syz.4.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 154.378317][ T40] audit: type=1400 audit(1774626950.140:11137): avc: denied { setopt } for pid=10572 comm="syz.4.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 154.386152][ T40] audit: type=1400 audit(1774626950.140:11138): avc: denied { accept } for pid=10572 comm="syz.4.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 154.427328][T10573] ./cgroup: Can't lookup blockdev [ 154.428127][ T40] audit: type=1400 audit(1774626950.140:11139): avc: denied { write } for pid=10572 comm="syz.4.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 154.447289][ T40] audit: type=1400 audit(1774626950.150:11140): avc: denied { write } for pid=10567 comm="syz.1.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 154.455455][ T40] audit: type=1800 audit(1774626950.150:11141): pid=10555 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1296" name="nullb0" dev="tmpfs" ino=1278 res=0 errno=0 [ 154.477468][ T40] audit: type=1400 audit(1774626950.160:11142): avc: denied { read } for pid=10572 comm="syz.4.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 154.637254][T10597] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1305'. [ 154.640298][T10597] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1305'. [ 154.768171][T10619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1314'. [ 154.772338][T10619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1314'. [ 154.890075][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1313'. [ 154.972492][T10632] netlink: 'syz.5.1319': attribute type 11 has an invalid length. [ 154.975721][T10632] fuse: Unknown parameter 'ŠªI©Ÿõ†AcŽ—]SÉR2¥2T+Z"H¤°n' [ 155.451692][T10662] ntfs3(sr0): Primary boot signature is not NTFS. [ 155.467681][T10662] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 155.474303][T10666] wireguard0: entered allmulticast mode [ 155.613672][T10676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1331'. [ 155.643922][T10676] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10676 comm=syz.0.1331 [ 155.827095][T10697] IPv6: sit1: Disabled Multicast RS [ 155.830509][T10697] sit1: entered allmulticast mode [ 155.889133][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1340'. [ 155.973756][T10701] fuse: Bad value for 'fd' [ 156.695094][T10766] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1350'. [ 156.782572][T10773] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1352'. [ 156.865451][T10775] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 156.906883][T10775] File: /dev/nullb0 PID: 10775 Comm: syz.4.1349 [ 157.176946][ T1028] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 157.338288][ T1028] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.342891][ T1028] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.348418][ T1028] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 157.354287][ T1028] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 157.360358][ T1028] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.365897][ T1028] usb 10-1: config 0 descriptor?? [ 157.395310][T10801] netlink: 'syz.1.1360': attribute type 21 has an invalid length. [ 157.449604][T10801] netlink: 'syz.1.1360': attribute type 21 has an invalid length. [ 157.578405][T10804] netlink: 'syz.1.1361': attribute type 64 has an invalid length. [ 157.772448][ T1028] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x4 [ 157.788888][ T1028] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 157.991072][T10842] /dev/nullb0: Can't open blockdev [ 158.057923][T10848] __nla_validate_parse: 1 callbacks suppressed [ 158.057944][T10848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1368'. [ 158.175239][T10856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1371'. [ 158.196458][T10858] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1372'. [ 158.228557][T10861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1374'. [ 158.231208][T10862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1373'. [ 158.234083][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 158.234099][ T40] audit: type=1400 audit(1774626954.040:11152): avc: denied { create } for pid=10860 comm="syz.1.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 158.387685][ T40] audit: type=1400 audit(1774626954.200:11153): avc: denied { setopt } for pid=10873 comm="syz.0.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 158.493066][T10903] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 158.508910][T10903] syzkaller0: entered promiscuous mode [ 158.511816][T10903] syzkaller0: entered allmulticast mode [ 158.518687][ T40] audit: type=1400 audit(1774626954.330:11154): avc: denied { relabelfrom } for pid=10902 comm="syz.1.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 158.528878][ T40] audit: type=1400 audit(1774626954.330:11155): avc: denied { relabelto } for pid=10902 comm="syz.1.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 158.579737][T10909] sch_tbf: burst 545 is lower than device lo mtu (65550) ! [ 158.585113][ T40] audit: type=1400 audit(1774626954.390:11156): avc: denied { connect } for pid=10907 comm="syz.0.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 158.804945][T10927] fuse: Bad value for 'fd' [ 158.807424][T10927] fuse: Bad value for 'fd' [ 159.044825][T10943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1399'. [ 159.109819][T10947] netlink: 'syz.0.1401': attribute type 10 has an invalid length. [ 159.112630][T10947] macvlan0: entered allmulticast mode [ 159.118829][T10947] veth1_vlan: entered allmulticast mode [ 159.122905][T10947] team0: Port device macvlan0 added [ 159.131020][T10947] tipc: Enabling of bearer rejected, failed to enable media [ 159.259376][T10951] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 159.330359][ T40] audit: type=1400 audit(1774626955.140:11157): avc: denied { listen } for pid=10952 comm="syz.4.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 159.336663][ T40] audit: type=1400 audit(1774626955.140:11158): avc: denied { accept } for pid=10952 comm="syz.4.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 159.395243][ T40] audit: type=1326 audit(1774626955.200:11159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.0.1405" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd21539c799 code=0x0 [ 159.565745][T10963] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1407'. [ 159.778088][T10979] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 159.783456][ T1028] usb 10-1: USB disconnect, device number 5 [ 159.891479][T10986] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1415'. [ 159.892104][ T40] audit: type=1400 audit(1774626955.700:11160): avc: denied { append } for pid=10985 comm="syz.5.1415" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 159.932951][ T40] audit: type=1400 audit(1774626955.740:11161): avc: denied { read } for pid=10983 comm="syz.1.1414" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 160.025116][T10999] /dev/nullb0: Can't open blockdev [ 160.111276][T11006] overlayfs: conflicting options: userxattr,metacopy=on [ 160.254850][T11015] netlink: 'syz.0.1425': attribute type 1 has an invalid length. [ 160.273549][T11015] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 160.399360][T11031] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 161.034708][T11067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=11067 comm=syz.1.1442 [ 161.399787][T11104] netlink: 'syz.5.1449': attribute type 1 has an invalid length. [ 161.415358][T11104] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 161.802903][T11140] 9pnet_virtio: no channels available for device syz [ 161.820947][T11140] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 162.087570][ T5928] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 162.189119][T11182] netlink: 'syz.4.1466': attribute type 4 has an invalid length. [ 162.241009][ T5928] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 162.244248][ T5928] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.247923][T11187] netlink: 'syz.1.1468': attribute type 11 has an invalid length. [ 162.251482][T11187] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1468'. [ 162.254171][T11190] netlink: 'syz.4.1469': attribute type 1 has an invalid length. [ 162.256937][ T5928] usb 10-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 162.256962][ T5928] usb 10-1: config 0 interface 0 has no altsetting 0 [ 162.258837][ T5928] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 162.267203][ T5928] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 162.269834][ T5928] usb 10-1: Product: syz [ 162.271193][ T5928] usb 10-1: Manufacturer: syz [ 162.272687][ T5928] usb 10-1: SerialNumber: syz [ 162.280262][ T5928] usb 10-1: config 0 descriptor?? [ 162.286404][ T5928] hub 10-1:0.0: bad descriptor, ignoring hub [ 162.287752][T11190] 8021q: adding VLAN 0 to HW filter on device bond4 [ 162.289351][ T5928] hub 10-1:0.0: probe with driver hub failed with error -5 [ 162.307650][T11190] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11190 comm=syz.4.1469 [ 162.342136][ T5928] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 162.362442][ T7628] udevd[7628]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.570243][T11214] overlayfs: failed to clone upperpath [ 162.680673][T11222] TCP: TCP_TX_DELAY enabled [ 162.718173][ T29] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 162.758546][ T59] usb 10-1: reset high-speed USB device number 6 using dummy_hcd [ 162.856018][T11233] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1480'. [ 162.878043][ T29] usb 9-1: not running at top speed; connect to a high speed hub [ 162.882396][ T29] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 162.890167][ T29] usb 9-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 162.894593][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.898033][ T29] usb 9-1: Product: syz [ 162.899899][ T29] usb 9-1: Manufacturer: syz [ 162.901992][ T29] usb 9-1: SerialNumber: syz [ 163.123911][ T29] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.126323][ T29] usb 9-1: MIDIStreaming interface descriptor not found [ 163.132672][ T59] usb 10-1: failed to restore interface 0 altsetting 251 (error=-71) [ 163.139116][ T59] usb 10-1: USB disconnect, device number 6 [ 163.164795][ T29] usb 9-1: USB disconnect, device number 12 [ 163.581916][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 163.581929][ T40] audit: type=1400 audit(1774626959.390:11165): avc: denied { mount } for pid=11253 comm="syz.0.1484" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 163.587645][T11254] overlayfs: failed to clone lowerpath [ 163.600396][T11254] overlayfs: failed to clone lowerpath [ 163.790439][ T40] audit: type=1400 audit(1774626959.600:11166): avc: denied { read write } for pid=11255 comm="syz.4.1485" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 163.809033][ T40] audit: type=1400 audit(1774626959.600:11167): avc: denied { open } for pid=11255 comm="syz.4.1485" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 163.818534][ T40] audit: type=1400 audit(1774626959.600:11168): avc: denied { ioctl } for pid=11255 comm="syz.4.1485" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 163.966844][ T1028] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 164.128877][ T1028] usb 10-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 164.132331][ T1028] usb 10-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 164.137802][ T1028] usb 10-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 164.140792][ T1028] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=183 [ 164.143415][ T1028] usb 10-1: Product: syz [ 164.145167][ T1028] usb 10-1: Manufacturer: syz [ 164.147805][ T1028] usb 10-1: SerialNumber: syz [ 164.357826][T11277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.362356][T11277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.367940][ T1028] usb 10-1: USB disconnect, device number 7 [ 164.654625][ T40] audit: type=1400 audit(1774626960.460:11169): avc: denied { map } for pid=11293 comm="syz.0.1496" path="socket:[38617]" dev="sockfs" ino=38617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 164.695021][ T40] audit: type=1400 audit(1774626960.500:11170): avc: denied { read } for pid=11295 comm="syz.0.1497" path="socket:[42059]" dev="sockfs" ino=42059 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 164.815979][T11298] fuse: Bad value for 'fd' [ 164.925040][T11306] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1500'. [ 164.941278][T11306] 8021q: adding VLAN 0 to HW filter on device bond4 [ 164.949197][T11306] bond4: entered promiscuous mode [ 164.951298][T11306] bond4: entered allmulticast mode [ 164.954057][T11306] 8021q: adding VLAN 0 to HW filter on device bond4 [ 164.957441][T11306] team0: Port device bond4 added [ 164.960458][T11306] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1500'. [ 165.023932][T11315] befs: (nbd5): unable to read superblock [ 165.275521][T11327] could not allocate digest TFM handle cryptd(blake2b-160) [ 165.310114][ T40] audit: type=1400 audit(1774626961.120:11171): avc: denied { create } for pid=11340 comm="syz.1.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 165.367036][ T40] audit: type=1400 audit(1774626961.170:11172): avc: denied { connect } for pid=11340 comm="syz.1.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 165.386293][ T40] audit: type=1400 audit(1774626961.170:11173): avc: denied { bind } for pid=11340 comm="syz.1.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 165.410843][T11351] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1512'. [ 165.421474][T11352] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 165.460042][T11355] tipc: Failed to obtain node identity [ 165.462831][T11355] tipc: Enabling of bearer rejected, failed to enable media [ 165.466619][ T40] audit: type=1400 audit(1774626961.270:11174): avc: denied { ioctl } for pid=11354 comm="syz.4.1514" path="socket:[38671]" dev="sockfs" ino=38671 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 165.524113][T11359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.575661][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1517'. [ 165.695709][T11373] MINIX-fs: blocksize too small for device [ 165.903446][T11384] sctp: [Deprecated]: syz.4.1523 (pid 11384) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.903446][T11384] Use struct sctp_sack_info instead [ 166.129243][T11388] input: syz0 as /devices/virtual/input/input18 [ 166.251001][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1525'. [ 166.255925][T11392] veth0: entered promiscuous mode [ 166.259575][T11392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1525'. [ 166.368707][T11398] input: syz0 as /devices/virtual/input/input19 [ 166.508065][T11402] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1528'. [ 166.519959][ T7250] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 166.576853][ T7250] CPU: 0 UID: 0 PID: 7250 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 166.576881][ T7250] Tainted: [L]=SOFTLOCKUP [ 166.576887][ T7250] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.576896][ T7250] Call Trace: [ 166.576903][ T7250] [ 166.576909][ T7250] dump_stack_lvl+0x100/0x190 [ 166.576954][ T7250] dump_header+0xfb/0x606 [ 166.576977][ T7250] oom_kill_process.cold+0xd/0x330 [ 166.577004][ T7250] out_of_memory+0x340/0x14f0 [ 166.577032][ T7250] ? __pfx_out_of_memory+0x10/0x10 [ 166.577060][ T7250] mem_cgroup_out_of_memory+0xc6/0x130 [ 166.577081][ T7250] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 166.577101][ T7250] ? find_held_lock+0x2b/0x80 [ 166.577131][ T7250] ? do_raw_spin_unlock+0x145/0x1e0 [ 166.577153][ T7250] ? _raw_spin_unlock+0x28/0x50 [ 166.577182][ T7250] try_charge_memcg+0x652/0xc90 [ 166.577204][ T7250] ? __pfx_try_charge_memcg+0x10/0x10 [ 166.577224][ T7250] ? find_held_lock+0x2b/0x80 [ 166.577243][ T7250] ? rcu_read_unlock+0x17/0x60 [ 166.577261][ T7250] ? rcu_read_unlock+0x17/0x60 [ 166.577284][ T7250] charge_memcg+0xa6/0x280 [ 166.577303][ T7250] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 166.577325][ T7250] __swap_cache_prepare_and_add+0x528/0x9e0 [ 166.577357][ T7250] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 166.577378][ T7250] ? __pfx_swap_entry_swapped+0x10/0x10 [ 166.577400][ T7250] swap_cache_alloc_folio+0x1cb/0x300 [ 166.577426][ T7250] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 166.577455][ T7250] ? update_se+0x94/0x760 [ 166.577482][ T7250] swap_cluster_readahead+0x411/0x770 [ 166.577510][ T7250] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 166.577546][ T7250] ? get_vma_policy+0x23f/0x3b0 [ 166.577567][ T7250] swapin_readahead+0x160/0x12c0 [ 166.577601][ T7250] ? __pfx_swapin_readahead+0x10/0x10 [ 166.577622][ T7250] ? find_held_lock+0x2b/0x80 [ 166.577641][ T7250] ? swap_table_get+0x103/0x2c0 [ 166.577660][ T7250] ? swap_table_get+0x103/0x2c0 [ 166.577683][ T7250] ? swap_table_get+0x10d/0x2c0 [ 166.577703][ T7250] ? swap_cache_get_folio+0x1ae/0x600 [ 166.577727][ T7250] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 166.577750][ T7250] ? __pfx_get_swap_device+0x10/0x10 [ 166.577773][ T7250] ? do_swap_page+0xb2e/0x6900 [ 166.577793][ T7250] do_swap_page+0xb2e/0x6900 [ 166.577825][ T7250] ? __pfx_do_swap_page+0x10/0x10 [ 166.577846][ T7250] ? __free_object+0x2a8/0x400 [ 166.577876][ T7250] ? lockdep_hardirqs_on+0x78/0x100 [ 166.577905][ T7250] ? rcu_is_watching+0x12/0xc0 [ 166.577926][ T7250] ? __pte_offset_map+0x179/0x310 [ 166.577944][ T7250] __handle_mm_fault+0x18c1/0x2b60 [ 166.577970][ T7250] ? reacquire_held_locks+0xce/0x1e0 [ 166.577991][ T7250] ? __pfx___handle_mm_fault+0x10/0x10 [ 166.578015][ T7250] ? lock_vma_under_rcu+0x17c/0x590 [ 166.578055][ T7250] handle_mm_fault+0x36d/0xa20 [ 166.578096][ T7250] do_user_addr_fault+0x5a3/0x12f0 [ 166.578122][ T7250] exc_page_fault+0x6f/0xd0 [ 166.578145][ T7250] asm_exc_page_fault+0x26/0x30 [ 166.578160][ T7250] RIP: 0033:0x7f934115cfce [ 166.578175][ T7250] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 166.578193][ T7250] RSP: 002b:00007fffcaf25198 EFLAGS: 00010246 [ 166.578212][ T7250] RAX: 0000000000000000 RBX: 00005555909c9500 RCX: 00007f934115cfce [ 166.578223][ T7250] RDX: 00007fffcaf251f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 166.578232][ T7250] RBP: 00007fffcaf2525c R08: 0000000000000000 R09: 0000000000000000 [ 166.578241][ T7250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 166.578250][ T7250] R13: 00000000000927c0 R14: 00000000000287c1 R15: 00007fffcaf252b0 [ 166.578273][ T7250] [ 166.578364][ T7250] memory: usage 303300kB, limit 307200kB, failcnt 1954 [ 166.836937][ T7250] memory+swap: usage 287004kB, limit 9007199254740988kB, failcnt 0 [ 166.840600][ T7250] kmem: usage 284840kB, limit 9007199254740988kB, failcnt 0 [ 166.846233][ T7250] Memory cgroup stats for /syz4: [ 166.846555][ T7250] cache 102400 [ 166.852508][ T7250] rss 45056 [ 166.855231][ T7250] rss_huge 0 [ 166.860435][ T7250] shmem 0 [ 166.864013][ T7250] mapped_file 102400 [ 166.868211][ T7250] dirty 0 [ 166.871796][ T7250] writeback 0 [ 166.875772][ T7250] workingset_refault_anon 601 [ 166.893875][ T7250] workingset_refault_file 0 [ 166.897014][ T7250] swap 352256 [ 166.898521][ T7250] swapcached 17182720 [ 166.899821][ T7250] pgpgin 49608 [ 166.901089][ T7250] pgpgout 50322 [ 166.902508][ T7250] pgfault 71659 [ 166.903991][ T7250] pgmajfault 152 [ 166.905504][ T7250] inactive_anon 0 [ 166.920172][ T7250] active_anon 53248 [ 166.921773][ T7250] inactive_file 0 [ 166.923144][ T7250] active_file 102400 [ 166.924808][ T7250] unevictable 0 [ 166.926213][ T7250] hierarchical_memory_limit 314572800 [ 166.940371][ T7250] hierarchical_memsw_limit 9223372036854771712 [ 166.942520][ T7250] total_cache 102400 [ 166.943828][ T7250] total_rss 45056 [ 166.945091][ T7250] total_rss_huge 0 [ 166.946392][ T7250] total_shmem 0 [ 166.953828][ T7250] total_mapped_file 102400 [ 166.955477][ T7250] total_dirty 0 [ 166.959448][ T7250] total_writeback 0 [ 166.960850][ T7250] total_workingset_refault_anon 601 [ 166.963086][ T7250] total_workingset_refault_file 0 [ 166.964785][ T7250] total_swap 352256 [ 166.966158][ T7250] total_swapcached 17182720 [ 166.989212][ T7250] total_pgpgin 49608 [ 166.990849][ T7250] total_pgpgout 50322 [ 166.992250][ T7250] total_pgfault 71659 [ 166.993676][ T7250] total_pgmajfault 152 [ 166.995139][ T7250] total_inactive_anon 0 [ 167.005207][ T7250] total_active_anon 53248 [ 167.007559][ T7250] total_inactive_file 0 [ 167.011558][ T7250] total_active_file 102400 [ 167.013801][ T7250] total_unevictable 0 [ 167.015960][ T7250] anon_cost 0 [ 167.022237][ T7250] file_cost 0 [ 167.023414][ T7250] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1523,pid=11383,uid=0 [ 167.032365][T11411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1530'. [ 167.041683][ T7250] Memory cgroup out of memory: Killed process 11383 (syz.4.1523) total-vm:98652kB, anon-rss:1268kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 167.051381][T11411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1530'. [ 167.140498][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1531'. [ 167.365543][T11433] gfs2: gfs2 mount does not exist [ 167.552382][T11439] netlink: 'syz.1.1541': attribute type 3 has an invalid length. [ 168.926978][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 168.926997][ T40] audit: type=1400 audit(1774626964.730:11185): avc: denied { lock } for pid=11520 comm="syz.5.1563" path="socket:[42592]" dev="sockfs" ino=42592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 168.927582][T11521] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved [ 169.352374][T11547] netlink: 'syz.5.1568': attribute type 9 has an invalid length. [ 169.384313][T11546] netlink: 'syz.4.1569': attribute type 1 has an invalid length. [ 169.732395][T11569] fuse: Bad value for 'fd' [ 169.737816][T11570] fuse: Bad value for 'fd' [ 169.986984][ T5928] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 170.157643][ T5928] usb 9-1: Using ep0 maxpacket: 8 [ 170.161737][ T5928] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 170.166411][ T5928] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 170.170322][ T5928] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.175681][ T5928] usb 9-1: config 0 descriptor?? [ 170.388727][T11568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.392494][T11568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.414990][ T5928] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 170.422468][ T5928] usb 9-1: USB disconnect, device number 13 [ 171.095923][T11586] /dev/nullb0: Can't open blockdev [ 171.225783][T11590] ptrace attach of "/syz-executor exec"[7250] was attempted by "/syz-executor exec"[11590] [ 171.239171][T11590] ptrace attach of "/syz-executor exec"[7250] was attempted by "/syz-executor exec"[11590] [ 171.306833][T11595] pimreg9: entered allmulticast mode [ 171.449609][T11603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11603 comm=syz.4.1584 [ 171.509814][T11604] netlink: 'syz.4.1584': attribute type 2 has an invalid length. [ 171.520888][T11604] !: entered promiscuous mode [ 171.525303][T11604] netlink: 'syz.4.1584': attribute type 2 has an invalid length. [ 171.528729][T11604] !: left promiscuous mode [ 172.528869][T11555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.718802][ T40] audit: type=1400 audit(1775151256.457:11186): avc: denied { nlmsg_tty_audit } for pid=11635 comm="syz.0.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 172.779481][T11638] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 172.786467][T11638] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 173.112625][T11655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11655 comm=syz.0.1600 [ 173.188824][T11663] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 173.647276][ T1028] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 173.800926][ T1028] usb 9-1: Using ep0 maxpacket: 8 [ 173.804562][ T1028] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 173.808331][ T1028] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.813827][ T1028] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 173.818204][ T1028] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.822703][ T1028] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.827977][ T1028] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 173.832150][ T1028] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.211549][ T59] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 174.262188][T11672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=11672 comm=syz.4.1605 [ 174.269461][T11671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=11671 comm=syz.4.1605 [ 174.277945][ T1028] usb 9-1: USB disconnect, device number 14 [ 174.367630][ T59] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 174.371213][ T59] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 174.375468][ T59] usb 10-1: config 0 interface 0 has no altsetting 0 [ 174.382190][ T59] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 174.385699][ T59] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 174.388903][ T59] usb 10-1: Product: syz [ 174.390403][ T59] usb 10-1: Manufacturer: syz [ 174.392164][ T59] usb 10-1: SerialNumber: syz [ 174.397117][ T59] usb 10-1: config 0 descriptor?? [ 174.401884][ T59] hub 10-1:0.0: bad descriptor, ignoring hub [ 174.404928][ T59] hub 10-1:0.0: probe with driver hub failed with error -5 [ 174.412482][ T59] usb 10-1: selecting invalid altsetting 0 [ 174.458506][T11717] netlink: 'syz.0.1621': attribute type 64 has an invalid length. [ 174.462986][T11717] netlink: 'syz.0.1621': attribute type 4 has an invalid length. [ 174.466843][T11717] __nla_validate_parse: 10 callbacks suppressed [ 174.466861][T11717] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1621'. [ 174.703589][T11723] overlayfs: failed to clone upperpath [ 174.706721][T11723] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 174.710041][ T40] audit: type=1400 audit(1775151258.396:11187): avc: denied { relabelto } for pid=11722 comm="syz.0.1623" name="file0" dev="tmpfs" ino=2603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 174.719160][ T40] audit: type=1400 audit(1775151258.405:11188): avc: denied { associate } for pid=11722 comm="syz.0.1623" name="file0" dev="tmpfs" ino=2603 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 174.721740][ T59] usb 10-1: USB disconnect, device number 8 [ 174.728483][ T40] audit: type=1400 audit(1775151258.405:11189): avc: denied { add_name } for pid=11722 comm="syz.0.1623" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 174.739676][ T40] audit: type=1400 audit(1775151258.405:11190): avc: denied { associate } for pid=11722 comm="syz.0.1623" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 174.748297][ T40] audit: type=1400 audit(1775151258.405:11191): avc: denied { write open } for pid=11722 comm="syz.0.1623" path="/482/file0/file1" dev="tmpfs" ino=2604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 174.756773][ T40] audit: type=1400 audit(1775151258.435:11192): avc: denied { remove_name } for pid=5927 comm="syz-executor" name="file1" dev="tmpfs" ino=2604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 174.768268][ T40] audit: type=1400 audit(1775151258.435:11193): avc: denied { unlink } for pid=5927 comm="syz-executor" name="file1" dev="tmpfs" ino=2604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 174.776847][ T40] audit: type=1400 audit(1775151258.444:11194): avc: denied { rmdir } for pid=5927 comm="syz-executor" name="file0" dev="tmpfs" ino=2603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 174.839072][T11733] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 174.936963][ T40] audit: type=1400 audit(1775151258.610:11195): avc: denied { ioctl } for pid=11688 comm="syz.5.1612" path="socket:[43223]" dev="sockfs" ino=43223 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 174.962987][ T40] audit: type=1400 audit(1775151258.640:11196): avc: denied { name_bind 0x1000000 } for pid=11740 comm="syz.1.1629" path="socket:[41843]" dev="sockfs" ino=41843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 174.972265][T11738] netlink: 'syz.0.1628': attribute type 33 has an invalid length. [ 174.975671][T11738] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1628'. [ 174.984986][T11741] xfrm1: entered allmulticast mode [ 175.029743][T11748] netlink: 'syz.1.1630': attribute type 32 has an invalid length. [ 175.082835][T11752] xt_SECMARK: invalid mode: 2 [ 175.099451][T11752] bridge_slave_0: left allmulticast mode [ 175.102447][T11752] bridge_slave_0: left promiscuous mode [ 175.105360][T11752] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.112594][T11752] bridge_slave_1: left allmulticast mode [ 175.117477][T11752] bridge_slave_1: left promiscuous mode [ 175.119952][T11752] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.126622][T11752] bond0: (slave bond_slave_0): Releasing backup interface [ 175.137843][T11752] bond0: (slave bond_slave_1): Releasing backup interface [ 175.153826][T11752] team0: Port device team_slave_0 removed [ 175.165816][T11752] team0: Port device team_slave_1 removed [ 175.169120][T11752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.172227][T11752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.182983][T11752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.188645][T11752] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 175.241278][T11761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1635'. [ 175.277030][T11763] /dev/nullb0: Can't open blockdev [ 175.365559][T11773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1641'. [ 175.369348][T11773] openvswitch: netlink: Flow key attr not present in new flow. [ 175.770384][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1649'. [ 175.811250][T11798] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 175.829002][T11800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1650'. [ 175.833300][T11800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1650'. [ 175.859963][T11803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.872306][T11803] macsec2: entered promiscuous mode [ 175.875046][T11803] macsec2: entered allmulticast mode [ 175.950335][T11805] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 175.953890][T11805] overlayfs: failed to set xattr on upper [ 175.956342][T11805] overlayfs: ...falling back to redirect_dir=nofollow. [ 175.959742][T11805] overlayfs: ...falling back to index=off. [ 175.962571][T11805] overlayfs: ...falling back to uuid=null. [ 175.973238][ T6021] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 175.992554][T11808] netlink: 'syz.1.1653': attribute type 33 has an invalid length. [ 175.997710][T11808] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1653'. [ 176.021977][T11811] tipc: Enabling of bearer rejected, media not registered [ 176.071653][T11813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1655'. [ 176.126689][ T6021] usb 9-1: Using ep0 maxpacket: 16 [ 176.131997][ T6021] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 176.134966][ T6021] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 176.138930][ T6021] usb 9-1: Product: syz [ 176.140292][ T6021] usb 9-1: Manufacturer: syz [ 176.141868][ T6021] usb 9-1: SerialNumber: syz [ 176.144855][ T6021] usb 9-1: config 0 descriptor?? [ 176.340260][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1660'. [ 176.354397][ T7396] usb 9-1: USB disconnect, device number 15 [ 176.661320][T11835] bridge6: port 1(veth0_to_bond) entered blocking state [ 176.663761][T11835] bridge6: port 1(veth0_to_bond) entered disabled state [ 176.666225][T11835] veth0_to_bond: entered allmulticast mode [ 176.670061][T11835] veth0_to_bond: entered promiscuous mode [ 176.715637][T11846] kAFS: unable to lookup cell '(,c¾ûL' [ 176.718801][T11846] kAFS: unable to lookup cell '(,c¾ûL' [ 177.455137][ T6021] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 177.605446][T11876] bond0: entered promiscuous mode [ 177.610004][ T6021] usb 10-1: config 0 has no interfaces? [ 177.610520][T11876] batadv0: entered promiscuous mode [ 177.613032][ T6021] usb 10-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 177.615155][T11876] debugfs: 'hsr1' already exists in 'hsr' [ 177.618886][ T6021] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.623793][ T6021] usb 10-1: config 0 descriptor?? [ 177.625593][T11876] Cannot create hsr debugfs directory [ 177.715906][T11886] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 177.719268][T11886] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 177.953569][T11898] netlink: zone id is out of range [ 177.955911][T11898] netlink: zone id is out of range [ 177.958470][T11898] netlink: set zone limit has 8 unknown bytes [ 178.019199][T11902] kvm: user requested TSC rate below hardware speed [ 178.135753][T11914] bridge0: entered promiscuous mode [ 178.138572][T11914] macvlan0: entered promiscuous mode [ 178.376570][T11937] overlayfs: failed to clone upperpath [ 178.647097][T11946] overlayfs: failed to clone upperpath [ 178.849399][T11960] openvswitch: netlink: Message has 72 unknown bytes. [ 178.913027][T11964] bond0: (slave caif0): Error: Device type is different from other slaves [ 179.113459][T11979] fuse: Unknown parameter ' ' [ 179.123049][T11979] 9p: Bad value for 'wfdno' [ 179.327972][T12001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12001 comm=syz.0.1711 [ 179.611472][T12014] x_tables: duplicate underflow at hook 1 [ 179.658330][T12017] xt_SECMARK: invalid mode: 2 [ 179.863975][T12019] netlink: 'syz.1.1717': attribute type 4 has an invalid length. [ 179.909795][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 179.909810][ T40] audit: type=1400 audit(1775151263.488:11211): avc: denied { setopt } for pid=12023 comm="syz.1.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 179.931848][ T40] audit: type=1400 audit(1775151263.508:11212): avc: denied { read } for pid=12023 comm="syz.1.1718" dev="sockfs" ino=43762 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 180.252361][ T7283] usb 10-1: USB disconnect, device number 9 [ 180.278619][T12028] netlink: 'syz.5.1719': attribute type 10 has an invalid length. [ 180.281560][T12028] __nla_validate_parse: 6 callbacks suppressed [ 180.281572][T12028] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1719'. [ 180.322917][T12032] syz_tun: entered allmulticast mode [ 180.330943][T12033] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 180.335486][T12031] syz_tun: left allmulticast mode [ 180.350930][T12035] IPVS: set_ctl: invalid protocol: 43 172.20.20.31:20000 [ 180.513518][T12043] veth1_vlan (unregistering): left allmulticast mode [ 180.526896][T12043] team0: Port device macvlan0 removed [ 180.797148][T12058] use of bytesused == 0 is deprecated and will be removed in the future, [ 180.800429][T12058] use the actual size instead. [ 180.803485][T12058] overlayfs: failed to resolve 'yœŸ"|WàFsóž%³P¶çjá°&': -2 [ 180.946936][T12069] tipc: Started in network mode [ 180.948558][T12069] tipc: Node identity 4, cluster identity 4711 [ 180.950719][T12069] tipc: Node number set to 4 [ 180.974021][T12072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35088 sclass=netlink_route_socket pid=12072 comm=syz.1.1733 [ 181.028932][T12079] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1735'. [ 181.053711][T12077] SELinux: failed to load policy [ 181.332290][T12100] netlink: 304 bytes leftover after parsing attributes in process `syz.0.1742'. [ 181.371488][T12089] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 181.413107][T12105] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12105 comm=syz.5.1743 [ 181.597203][T12109] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 181.697763][T12121] overlayfs: failed to resolve './file0': -2 [ 181.849920][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1751'. [ 181.871660][T12127] hsr_slave_1 (unregistering): left promiscuous mode [ 182.025664][ T40] audit: type=1400 audit(1775151265.563:11213): avc: denied { read } for pid=12137 comm="syz.0.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 182.531947][ T40] audit: type=1400 audit(1775151266.066:11214): avc: denied { setattr } for pid=12187 comm="syz.1.1760" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 183.067036][T12195] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 183.246731][T12200] lo: entered promiscuous mode [ 183.280817][ T40] audit: type=1400 audit(1775151266.805:11215): avc: denied { setattr } for pid=12202 comm="syz.1.1765" name="KCM" dev="sockfs" ino=46479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 183.370561][T12212] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 183.379460][ T40] audit: type=1400 audit(1775151266.903:11216): avc: denied { write } for pid=12211 comm="syz.5.1768" name="file1" dev="overlay" ino=76283927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 183.389949][ T40] audit: type=1400 audit(1775151266.903:11217): avc: denied { setattr } for pid=12211 comm="syz.5.1768" name="file1" dev="overlay" ino=76283927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 183.514087][T12224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1770'. [ 183.521226][T12224] overlayfs: failed to clone upperpath [ 183.543327][T12226] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.1773'. [ 183.579432][T12228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1774'. [ 183.583354][T12228] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1774'. [ 183.587479][T12228] netlink: 'syz.1.1774': attribute type 3 has an invalid length. [ 183.591701][T12228] netlink: 'syz.1.1774': attribute type 2 has an invalid length. [ 183.595320][T12228] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1774'. [ 183.664343][ T40] audit: type=1400 audit(1775151267.179:11218): avc: denied { setopt } for pid=12229 comm="syz.1.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 183.793737][T12234] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 183.802118][T12234] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 183.893168][ T7283] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 183.952494][ T40] audit: type=1400 audit(1775151267.465:11219): avc: denied { setopt } for pid=12238 comm="syz.1.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 184.045111][ T7283] usb 10-1: Using ep0 maxpacket: 16 [ 184.049278][ T7283] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 16 [ 184.053574][ T7283] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 184.058051][ T7283] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 184.065199][ T7283] usb 10-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 184.069362][ T7283] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.072533][ T7283] usb 10-1: Product: 胅붺׬ê»å‹Ÿï¸ŽêªŽë¾¥ä…¬è“‡íƒ»æ­ªã°àªŸï®¶ä”¢æ±îœ¨è…žäŸ æ» æžïŠè£«ë‰ é”›å¼ã‹’Å袼ã•བྷ츿ㄶ颅༤〩笙魈áˆá£¨î¬£î´–⨘ç¯éˆ¶î›‘ç™éˆ¼êš¼áº¢ç‚®êº²ã³‰â¯¤ï“ࢶᎫꙄ塹껅॑崭䞓ᜓ稔쇂ﭦ냛ã¥í—±ë¡¬ê‰™ã©„쑔ꛇᶧé†ï°Žâ›©í€³â†“믂냉ê»ä…‚ï€èŽ£é¹¯ï¬™ë¿«ï·™Ï乞ɲ䇑è…駫‰⪩䔩ߓꜙ쉄 [ 184.086941][ T7283] usb 10-1: Manufacturer: à § [ 184.088968][ T7283] usb 10-1: SerialNumber: syz [ 184.095171][T12232] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 184.331272][ T7283] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 184.334520][ T7283] usb 10-1: MIDIStreaming interface descriptor not found [ 184.381689][ T7283] usb 10-1: USB disconnect, device number 10 [ 184.430556][ T5934] udevd[5934]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.455292][T12245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1780'. [ 185.051923][T12262] binder: BINDER_SET_CONTEXT_MGR already set [ 185.054627][T12262] binder: 12255:12262 ioctl 4018620d 200000004a80 returned -16 [ 185.220197][ T40] audit: type=1400 audit(1775151268.709:11220): avc: denied { getopt } for pid=12267 comm="syz.0.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 185.234262][T12268] libceph: resolve '0' (ret=-3): failed [ 185.323123][T12277] netlink: 'syz.1.1789': attribute type 2 has an invalid length. [ 185.751201][T12288] nbd: couldn't find a device at index 0 [ 185.754241][T12288] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1793'. [ 185.770842][T12288] bridge4: entered promiscuous mode [ 185.811920][T12296] FAULT_INJECTION: forcing a failure. [ 185.811920][T12296] name failslab, interval 1, probability 0, space 0, times 1 [ 185.819287][T12296] CPU: 2 UID: 0 PID: 12296 Comm: syz.5.1794 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.819314][T12296] Tainted: [L]=SOFTLOCKUP [ 185.819320][T12296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.819330][T12296] Call Trace: [ 185.819336][T12296] [ 185.819343][T12296] dump_stack_lvl+0x100/0x190 [ 185.819387][T12296] should_fail_ex.cold+0x5/0xa [ 185.819411][T12296] should_failslab+0xc2/0x120 [ 185.819430][T12296] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 185.819456][T12296] ? __alloc_skb+0x140/0x710 [ 185.819490][T12296] __alloc_skb+0x140/0x710 [ 185.819509][T12296] ? __alloc_skb+0x5b7/0x710 [ 185.819529][T12296] ? __pfx___alloc_skb+0x10/0x10 [ 185.819558][T12296] mgmt_cmd_status+0x42/0x530 [ 185.819582][T12296] set_dev_class+0x471/0x5f0 [ 185.819608][T12296] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 185.819632][T12296] hci_sock_sendmsg+0x154e/0x2620 [ 185.819659][T12296] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 185.819689][T12296] sock_write_iter+0x524/0x5a0 [ 185.819705][T12296] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 185.819727][T12296] ? __pfx_sock_write_iter+0x10/0x10 [ 185.819753][T12296] ? bpf_lsm_file_permission+0x9/0x10 [ 185.819778][T12296] ? security_file_permission+0x76/0x210 [ 185.819812][T12296] ? rw_verify_area+0xce/0x6d0 [ 185.819839][T12296] vfs_write+0x6ac/0x1070 [ 185.819856][T12296] ? __pfx_sock_write_iter+0x10/0x10 [ 185.819875][T12296] ? __pfx_vfs_write+0x10/0x10 [ 185.819889][T12296] ? find_held_lock+0x2b/0x80 [ 185.819933][T12296] ksys_write+0x1f8/0x250 [ 185.819949][T12296] ? __pfx_ksys_write+0x10/0x10 [ 185.819972][T12296] do_syscall_64+0x106/0xf80 [ 185.819996][T12296] ? clear_bhb_loop+0x40/0x90 [ 185.820017][T12296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.820035][T12296] RIP: 0033:0x7fe983d9c799 [ 185.820050][T12296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.820065][T12296] RSP: 002b:00007fe984d41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 185.820082][T12296] RAX: ffffffffffffffda RBX: 00007fe984015fa0 RCX: 00007fe983d9c799 [ 185.820093][T12296] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000004 [ 185.820103][T12296] RBP: 00007fe984d41090 R08: 0000000000000000 R09: 0000000000000000 [ 185.820114][T12296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.820123][T12296] R13: 00007fe984016038 R14: 00007fe984015fa0 R15: 00007fff1b17c518 [ 185.820148][T12296] [ 185.997500][T12311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1798'. [ 186.035326][T12315] ip6t_rpfilter: unknown options [ 186.040921][T12315] netlink: 'syz.1.1800': attribute type 1 has an invalid length. [ 186.044303][T12315] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1800'. [ 186.430908][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1808'. [ 186.434554][T12341] netlink: 'syz.5.1808': attribute type 6 has an invalid length. [ 186.437687][T12341] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1808'. [ 186.449014][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1808'. [ 186.449696][ T8409] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.455787][T12341] netlink: 'syz.5.1808': attribute type 6 has an invalid length. [ 186.457460][ T8409] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.460661][T12341] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1808'. [ 186.465339][ T8409] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.476649][ T8409] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.521721][T12352] overlayfs: failed to clone upperpath [ 186.942973][T12380] netlink: 'syz.0.1818': attribute type 10 has an invalid length. [ 187.070697][T12385] [U]  [ 187.083744][T12388] 9p: Bad value for 'rfdno' [ 187.273081][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1826'. [ 187.279174][T12406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1826'. [ 187.336882][T12415] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1828'. [ 187.607236][ T40] audit: type=1400 audit(1775675559.060:11221): avc: denied { getopt } for pid=12446 comm="syz.0.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 187.614883][T12447] tmpfs: Bad value for 'mpol' [ 187.671362][T12451] dlm: no local IP address has been set [ 187.673944][T12451] dlm: cannot start dlm midcomms -107 [ 187.738069][ T40] audit: type=1400 audit(1775675559.186:11222): avc: denied { ioctl } for pid=12460 comm="syz.0.1842" path="socket:[44965]" dev="sockfs" ino=44965 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 187.989279][ T40] audit: type=1400 audit(1775675559.438:11223): avc: denied { map } for pid=12491 comm="syz.0.1848" path="socket:[48195]" dev="sockfs" ino=48195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 188.364546][T12516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12516 comm=syz.5.1854 [ 188.373398][T12516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=12516 comm=syz.5.1854 [ 188.442790][T12523] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 188.636363][T12538] netlink: 'syz.1.1861': attribute type 11 has an invalid length. [ 188.639455][T12538] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 188.639455][T12538] program syz.1.1861 not setting count and/or reply_len properly [ 188.743114][T12547] sctp: [Deprecated]: syz.1.1863 (pid 12547) Use of int in maxseg socket option. [ 188.743114][T12547] Use struct sctp_assoc_value instead [ 188.748826][T12547] netlink: 'syz.1.1863': attribute type 8 has an invalid length. [ 189.076847][T12571] overlayfs: failed to clone upperpath [ 189.368422][T12588] ip6gre2: entered promiscuous mode [ 189.370707][T12588] ip6gre2: entered allmulticast mode [ 189.382554][T12588] netlink: 'syz.0.1877': attribute type 6 has an invalid length. [ 189.419622][ T40] audit: type=1400 audit(1775675560.827:11224): avc: denied { ioctl } for pid=12591 comm="syz.1.1879" path="socket:[47650]" dev="sockfs" ino=47650 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 189.643584][T12609] netlink: 'syz.0.1886': attribute type 1 has an invalid length. [ 189.662270][T12609] 8021q: adding VLAN 0 to HW filter on device bond13 [ 189.895848][ T40] audit: type=1400 audit(1775675561.285:11225): avc: denied { listen } for pid=12619 comm="syz.0.1888" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.901492][T12627] fuse: Bad value for 'fd' [ 189.959746][T12629] netlink: 'syz.5.1891': attribute type 39 has an invalid length. [ 190.139052][T12632] program syz.5.1892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.987252][ T40] audit: type=1400 audit(1775675562.347:11226): avc: denied { map } for pid=12670 comm="syz.0.1899" path="socket:[50220]" dev="sockfs" ino=50220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 191.125382][ T63] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 191.131388][ T63] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 191.134750][ T63] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 191.138605][ T63] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 191.144163][ T63] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 191.224578][T12686] __nla_validate_parse: 11 callbacks suppressed [ 191.224598][T12686] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1902'. [ 191.457929][T12676] chnl_net:caif_netlink_parms(): no params data found [ 191.516307][T12676] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.518722][T12676] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.521361][T12676] bridge_slave_0: entered allmulticast mode [ 191.524064][T12676] bridge_slave_0: entered promiscuous mode [ 191.531914][T12676] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.534686][T12676] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.537292][T12676] bridge_slave_1: entered allmulticast mode [ 191.539865][T12676] bridge_slave_1: entered promiscuous mode [ 191.573163][T12676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.591065][T12676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.655278][T12676] team0: Port device team_slave_0 added [ 191.658551][T12676] team0: Port device team_slave_1 added [ 191.681228][T12676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.684398][T12676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.696065][T12676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.702706][T12676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.706463][T12676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.718055][T12676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.802845][T12676] hsr_slave_0: entered promiscuous mode [ 191.805666][T12676] hsr_slave_1: entered promiscuous mode [ 191.808164][T12676] debugfs: 'hsr0' already exists in 'hsr' [ 191.810004][T12676] Cannot create hsr debugfs directory [ 192.014811][T12676] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.018291][T12676] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.183205][T12676] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.186639][T12676] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.251360][T12676] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.254723][T12676] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.315667][T12676] team0: Port device netdevsim0 removed [ 192.318503][T12676] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.322173][T12676] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.406010][T12699] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1904'. [ 192.491226][T12705] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1906'. [ 192.496866][ T40] audit: type=1400 audit(1775675563.821:11227): avc: denied { execmod } for pid=12704 comm="syz.5.1906" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=47921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 192.523772][T12676] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 192.531323][T12676] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 192.541578][T12676] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 192.548251][T12676] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 192.550555][T12708] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1907'. [ 192.625156][T12676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.640561][T12676] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.648089][ T8418] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.650404][ T8418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.662267][ T8418] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.665965][ T8418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.822821][T12676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.858028][T12676] veth0_vlan: entered promiscuous mode [ 192.868235][T12676] veth1_vlan: entered promiscuous mode [ 192.893462][T12676] veth0_macvtap: entered promiscuous mode [ 192.900168][T12676] veth1_macvtap: entered promiscuous mode [ 192.916632][T12676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.927154][T12676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.936726][T12156] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.940822][T12156] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.946627][T12156] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.950288][T12156] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.017758][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.022818][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.047334][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.050641][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.059393][ T40] audit: type=1400 audit(1775675564.378:11228): avc: denied { mounton } for pid=12676 comm="syz-executor" path="/syzkaller.r7GVcy/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 193.219863][ T63] Bluetooth: hci5: command tx timeout [ 193.457366][ T40] audit: type=1400 audit(1775675564.760:11229): avc: denied { getopt } for pid=12733 comm="syz.5.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.494434][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1911'. [ 193.571270][T12743] sctp: [Deprecated]: syz.5.1914 (pid 12743) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.571270][T12743] Use struct sctp_sack_info instead [ 193.577935][T12744] sctp: [Deprecated]: syz.5.1914 (pid 12744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.577935][T12744] Use struct sctp_sack_info instead [ 193.619734][T12747] trusted_key: encrypted_key: keyword 'u' not recognized [ 193.744614][ T5943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 193.752391][ T5943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 193.757354][ T5943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 193.761367][ T5943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 193.764584][ T5943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 193.945258][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 194.009354][T12752] chnl_net:caif_netlink_parms(): no params data found [ 194.099432][ T9] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 194.103009][T12752] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.104607][ T9] usb 5-1: config 0 has no interfaces? [ 194.106362][T12752] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.110226][ T9] usb 5-1: config 0 has no interfaces? [ 194.112098][T12752] bridge_slave_0: entered allmulticast mode [ 194.114993][ T9] usb 5-1: config 0 has no interfaces? [ 194.117836][T12752] bridge_slave_0: entered promiscuous mode [ 194.124766][T12752] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.127610][T12752] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.130317][ T9] usb 5-1: config 0 has no interfaces? [ 194.131229][T12752] bridge_slave_1: entered allmulticast mode [ 194.133887][ T9] usb 5-1: config 0 has no interfaces? [ 194.136862][T12752] bridge_slave_1: entered promiscuous mode [ 194.138715][ T9] usb 5-1: config 0 has no interfaces? [ 194.154590][ T9] usb 5-1: config 0 has no interfaces? [ 194.158431][ T9] usb 5-1: config 0 has no interfaces? [ 194.172131][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 194.176527][ T9] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 194.180504][ T9] usb 5-1: Product: syz [ 194.182623][ T9] usb 5-1: Manufacturer: syz [ 194.184269][ T9] usb 5-1: SerialNumber: syz [ 194.187440][ T9] usb 5-1: config 0 descriptor?? [ 194.209116][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.231730][T12752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.236801][T12752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.257252][T12752] team0: Port device team_slave_0 added [ 194.261122][T12752] team0: Port device team_slave_1 added [ 194.279410][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.294941][T12752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.297461][T12752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.307402][T12752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.312387][T12752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.314888][T12752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.323140][T12752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.351085][T12752] hsr_slave_0: entered promiscuous mode [ 194.353644][T12752] hsr_slave_1: entered promiscuous mode [ 194.355833][T12752] debugfs: 'hsr0' already exists in 'hsr' [ 194.357715][T12752] Cannot create hsr debugfs directory [ 194.370776][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.406553][ T5983] usb 5-1: USB disconnect, device number 10 [ 194.481597][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.598840][T12752] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 194.606355][T12752] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 194.613334][T12752] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 194.619993][T12752] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 195.011018][ T12] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 195.014569][ T12] bridge3 (unregistering): left promiscuous mode [ 195.051763][ T40] audit: type=1400 audit(1775675566.327:11230): avc: denied { read } for pid=12794 comm="syz.0.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 195.174534][ T12] bond0 (unregistering): Released all slaves [ 195.180586][ T12] bond1 (unregistering): Released all slaves [ 195.188624][ T12] bond2 (unregistering): Released all slaves [ 195.197168][ T12] bond3 (unregistering): Released all slaves [ 195.205208][ T12] bond4 (unregistering): Released all slaves [ 195.257413][T12752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.268241][T12752] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.273418][ T8418] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.275805][ T8418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.286748][T12143] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.290071][T12143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.358954][ T63] Bluetooth: hci5: command tx timeout [ 195.374362][ T12] IPVS: stopping master sync thread 11733 ... [ 195.463028][T12806] xt_hashlimit: max too large, truncated to 1048576 [ 195.470571][T12806] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 195.477250][T12806] netlink: 'syz.5.1920': attribute type 27 has an invalid length. [ 195.480396][T12806] lo: left promiscuous mode [ 195.535057][T12806] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.609687][T12806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.619314][T12806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.734795][T12806] macvlan2: left promiscuous mode [ 195.737192][T12806] vlan2: left allmulticast mode [ 195.739260][T12806] bond0: left allmulticast mode [ 195.744334][T12806] bond_slave_0: left allmulticast mode [ 195.747045][T12806] bond_slave_1: left allmulticast mode [ 195.749723][T12806] bridge_slave_1: left allmulticast mode [ 195.754974][T12806] wireguard0: left allmulticast mode [ 195.759164][T12806] bond4: left promiscuous mode [ 195.761623][T12806] bond4: left allmulticast mode [ 195.765387][T12806] bridge4: left promiscuous mode [ 195.817947][T12810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.824496][T12810] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.831603][T12810] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.839793][ T8411] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.842443][ T63] Bluetooth: hci0: command tx timeout [ 195.844616][ T8411] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.851884][ T8411] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.856735][ T8411] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.860043][ T8411] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.864107][ T8411] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.894413][ T8411] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.898093][ T8411] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.922287][T12752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.223812][ T40] audit: type=1400 audit(1775675567.475:11231): avc: denied { connect } for pid=12850 comm="syz.5.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 196.274738][T12752] veth0_vlan: entered promiscuous mode [ 196.303507][T12752] veth1_vlan: entered promiscuous mode [ 196.320344][ T12] hsr_slave_0: left promiscuous mode [ 196.333809][ T12] hsr_slave_1: left promiscuous mode [ 196.342840][ T12] veth1_macvtap: left promiscuous mode [ 196.345379][ T12] veth0_macvtap: left promiscuous mode [ 196.397295][ T12] pimreg9 (unregistering): left allmulticast mode [ 196.568905][T12876] IPv6: NLM_F_CREATE should be specified when creating new route [ 196.572141][T12876] netlink: 'syz.0.1935': attribute type 1 has an invalid length. [ 196.610673][T12752] veth0_macvtap: entered promiscuous mode [ 196.615345][T12752] veth1_macvtap: entered promiscuous mode [ 196.625377][T12752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.632918][T12752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.643132][T12156] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.654484][T12156] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.657613][T12156] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.675112][T12881] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1936'. [ 196.676112][T12156] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.693197][ T40] audit: type=1400 audit(1775675567.937:11232): avc: denied { getopt } for pid=12880 comm="syz.5.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 196.783391][T12156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.786807][T12156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.808052][T12143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.812988][T12143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.848038][T12897] xt_CT: No such helper "snmp_trap" [ 196.903079][ T40] audit: type=1400 audit(1775675568.143:11233): avc: denied { mounton } for pid=12901 comm="syz.6.1916" path="/0/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=sock_file permissive=1 [ 196.922836][T12903] fuse: Unknown parameter 'uid<00000000000000000000' [ 196.991105][ T12] IPVS: stop unused estimator thread 0... [ 197.005216][T12909] erspan1: entered promiscuous mode [ 197.082134][T12918] syzkaller0: entered promiscuous mode [ 197.084655][T12918] syzkaller0: entered allmulticast mode [ 197.350622][T12932] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1944'. [ 197.388260][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1945'. [ 197.431506][T12937] usb usb8: usbfs: process 12937 (syz.6.1946) did not claim interface 0 before use [ 197.431625][ T40] audit: type=1400 audit(1775675568.664:11234): avc: denied { execstack } for pid=12936 comm="syz.6.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 197.460694][ T63] Bluetooth: hci5: command tx timeout [ 197.751625][T12939] XFS (nbd5): SB validate failed with error -5. [ 197.822520][T12948] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 198.779668][T12971] netlink: 'syz.6.1954': attribute type 1 has an invalid length. [ 198.789134][T12971] netlink: 'syz.6.1954': attribute type 1 has an invalid length. [ 198.982015][T12977] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1956'. [ 198.987114][T12977] CUSE: unknown device info "" [ 198.988739][T12977] CUSE: zero length info key specified [ 198.990981][T12977] bpf: Bad value for 'uid' [ 198.993069][T12977] overlayfs: conflicting options: nfs_export=on,index=off [ 199.073868][T12982] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1958'. [ 199.269241][T12989] ªªªªª<Â_å4Ôä: renamed from lo (while UP) [ 199.321144][ T24] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 199.472159][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 199.475543][ T24] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 199.479400][ T24] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 199.483205][ T24] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 199.487495][ T24] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.493728][ T24] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 199.497342][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.573751][ T63] Bluetooth: hci5: command tx timeout [ 199.611651][T13002] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 199.626294][T13004] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 199.630874][T13004] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 199.642082][T13004] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 199.649248][T13004] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 199.652097][T13004] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 199.658881][T13004] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 199.707953][ T24] usb 10-1: GET_CAPABILITIES returned 0 [ 199.709878][ T24] usbtmc 10-1:16.0: can't read capabilities [ 199.760491][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1969'. [ 199.841851][T13013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.844784][T13013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.849472][T13013] nbd: socks must be embedded in a SOCK_ITEM attr [ 199.911817][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.942453][T12156] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.061617][T12156] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.090762][T13022] JFS: discard option not supported on device [ 200.099498][ T5943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 200.100079][T13022] Mount JFS Failure: -5 [ 200.109895][ T5943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 200.113303][ T5943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 200.116734][ T5943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 200.119676][ T5943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 200.139971][ T24] usb 10-1: USB disconnect, device number 11 [ 200.154721][T12156] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.251194][T12156] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.510037][T12156] bridge_slave_1: left allmulticast mode [ 200.511929][T12156] bridge_slave_1: left promiscuous mode [ 200.513988][T12156] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.528560][T12156] bridge_slave_0: left allmulticast mode [ 200.530352][T12156] bridge_slave_0: left promiscuous mode [ 200.532236][T12156] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.540694][T13038] netlink: 'syz.1.1981': attribute type 1 has an invalid length. [ 200.688064][T13045] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1983'. [ 200.692008][T13045] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1983'. [ 200.715242][T12156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.722051][T12156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.725853][T12156] bond0 (unregistering): Released all slaves [ 200.748154][T13038] bond3: entered promiscuous mode [ 200.750017][T13038] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.761496][T13043] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.763898][T13043] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 200.767419][T13043] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 200.776009][T13043] bond3: (slave vxcan3): making interface the new active one [ 200.778878][T13043] vxcan3: entered promiscuous mode [ 200.782836][T13043] vxcan3: left promiscuous mode [ 200.889816][T13023] chnl_net:caif_netlink_parms(): no params data found [ 201.021936][T13068] syzkaller0: entered promiscuous mode [ 201.024535][T13068] syzkaller0: entered allmulticast mode [ 201.054413][ T1028] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 201.072485][T13023] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.075910][T13023] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.078539][T13023] bridge_slave_0: entered allmulticast mode [ 201.082101][T13023] bridge_slave_0: entered promiscuous mode [ 201.103384][T13023] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.107046][T13023] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.109783][T13023] bridge_slave_1: entered allmulticast mode [ 201.113340][T13023] bridge_slave_1: entered promiscuous mode [ 201.137524][T13023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.143671][T13023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.178292][T13079] BIDI support in bsg has been removed. [ 201.179737][T13023] team0: Port device team_slave_0 added [ 201.184777][T13023] team0: Port device team_slave_1 added [ 201.216788][ T1028] usb 10-1: Using ep0 maxpacket: 16 [ 201.220524][ T1028] usb 10-1: config index 0 descriptor too short (expected 65, got 36) [ 201.224146][ T1028] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 201.238749][ T1028] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 201.243138][ T1028] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.251773][T13079] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 201.254814][T13079] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 201.255033][ T1028] usb 10-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 201.261264][ T1028] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.267056][ T1028] usb 10-1: config 0 descriptor?? [ 201.278721][ T1028] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input25 [ 201.328568][T12156] hsr_slave_0: left promiscuous mode [ 201.331928][T12156] hsr_slave_1: left promiscuous mode [ 201.339255][T12156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.342443][T12156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.348057][T12156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.352076][T12156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.365028][T12156] veth1_macvtap: left promiscuous mode [ 201.366811][T12156] veth0_macvtap: left promiscuous mode [ 201.371364][T12156] veth1_vlan: left promiscuous mode [ 201.373724][T12156] veth0_vlan: left promiscuous mode [ 201.447099][T13089] netlink: 308 bytes leftover after parsing attributes in process `syz.6.1992'. [ 201.452151][T13089] openvswitch: netlink: Flow actions attr not present in new flow. [ 201.488236][ T7396] usb 10-1: USB disconnect, device number 12 [ 201.655441][T12156] team0 (unregistering): Port device team_slave_1 removed [ 201.667501][T12156] team0 (unregistering): Port device team_slave_0 removed [ 201.682799][ T5943] Bluetooth: hci4: command 0x0c1a tx timeout [ 201.684941][ T5943] Bluetooth: hci0: command 0x040f tx timeout [ 201.769028][T13023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.771509][T13023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.781064][T13023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.789268][T13023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.791849][T13023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.802004][T13023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.853920][T13023] hsr_slave_0: entered promiscuous mode [ 201.856643][T13023] hsr_slave_1: entered promiscuous mode [ 201.858924][T13023] debugfs: 'hsr0' already exists in 'hsr' [ 201.860731][T13023] Cannot create hsr debugfs directory [ 201.912878][ T40] audit: type=1400 audit(1775675573.079:11235): avc: denied { setattr } for pid=13093 comm="syz.1.1993" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 201.961779][T13100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=13100 comm=syz.6.1994 [ 202.115917][T13023] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 202.130769][T13023] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 202.137295][T13023] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 202.151765][T13023] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 202.168892][ T63] Bluetooth: hci2: command tx timeout [ 202.228685][T13023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.253651][T13023] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.260001][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.262108][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.274159][T12143] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.277033][T12143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.429520][ T40] audit: type=1400 audit(1775675573.582:11236): avc: denied { setopt } for pid=13148 comm="syz.6.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 202.432428][T13023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.475567][T13154] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2003'. [ 202.610566][T13166] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 202.614327][ T40] audit: type=1400 audit(1775675573.760:11237): avc: denied { read } for pid=13168 comm="syz.6.2007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 202.624326][T13169] netlink: 'syz.6.2007': attribute type 4 has an invalid length. [ 202.633594][ T40] audit: type=1400 audit(1775675573.780:11238): avc: denied { map } for pid=13168 comm="syz.6.2007" path="/dev/ptyr0" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 202.648288][T13023] veth0_vlan: entered promiscuous mode [ 202.648590][ T40] audit: type=1400 audit(1775675573.800:11239): avc: denied { execute } for pid=13168 comm="syz.6.2007" path="/dev/ptyr0" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 202.662433][ T40] audit: type=1400 audit(1775675573.809:11240): avc: denied { setattr } for pid=13171 comm="syz.5.2008" name="" dev="pipefs" ino=53071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 202.666822][T13023] veth1_vlan: entered promiscuous mode [ 202.698591][T13023] veth0_macvtap: entered promiscuous mode [ 202.711946][T13023] veth1_macvtap: entered promiscuous mode [ 202.717544][ T40] audit: type=1326 audit(1775675573.879:11241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13177 comm="syz.6.2010" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d459c799 code=0x50000 [ 202.727846][T13023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.728073][ T40] audit: type=1326 audit(1775675573.879:11242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13177 comm="syz.6.2010" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d459c799 code=0x50000 [ 202.734321][T13023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.749658][ T40] audit: type=1326 audit(1775675573.879:11243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13177 comm="syz.6.2010" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d459c799 code=0x50000 [ 202.758266][ T40] audit: type=1326 audit(1775675573.879:11244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13177 comm="syz.6.2010" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d459c799 code=0x50000 [ 202.768939][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.775568][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.780586][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.783656][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.862291][T13182] tmpfs: Unknown parameter 'mpoaf%r:' [ 202.888150][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.891765][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.927921][ T8411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.938751][ T8411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.023488][T13187] netlink: 'syz.7.2013': attribute type 2 has an invalid length. [ 203.113076][T13194] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 203.287834][T13207] usb usb7: usbfs: process 13207 (syz.7.2020) did not claim interface 0 before use [ 203.316479][T13208] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2018'. [ 203.333864][T13210] usb usb7: usbfs: process 13210 (syz.7.2020) did not claim interface 0 before use [ 203.434952][T13213] i2c i2c-1: dtv_property_process_set: SET cmd 0x05f10003 undefined [ 203.439619][T13213] i2c i2c-1: dtv_property_process_set: SET cmd 0x05f10003 undefined [ 203.581071][T13219] bond1: option primary: mode dependency failed, not supported in mode broadcast(3) [ 203.588780][T13219] bond1 (unregistering): Released all slaves [ 203.803957][ T63] Bluetooth: hci0: command 0x040f tx timeout [ 203.805029][ T5943] Bluetooth: hci4: command 0x0c1a tx timeout [ 203.861548][T13233] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2027'. [ 203.868569][T13233] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2027'. [ 203.925155][T13235] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2028'. [ 204.094761][T13250] overlay: Unknown parameter 'uid<00000000000000000000' [ 204.161095][T13254] netlink: 'syz.5.2033': attribute type 1 has an invalid length. [ 204.174334][T13254] 8021q: adding VLAN 0 to HW filter on device bond5 [ 204.185810][T13254] bond5: (slave geneve2): making interface the new active one [ 204.189272][T13254] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 204.192133][ T61] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.197176][ T61] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.209385][ T61] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.212498][ T61] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.274644][ T5943] Bluetooth: hci2: command tx timeout [ 205.890668][ T63] Bluetooth: hci4: command 0x0c1a tx timeout [ 205.892523][ T5939] Bluetooth: hci0: command 0x040f tx timeout [ 206.042014][ T7283] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 206.203586][ T7283] usb 11-1: Using ep0 maxpacket: 16 [ 206.209433][ T7283] usb 11-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 206.213454][ T7283] usb 11-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 206.217230][ T7283] usb 11-1: Product: syz [ 206.219091][ T7283] usb 11-1: Manufacturer: syz [ 206.221175][ T7283] usb 11-1: SerialNumber: syz [ 206.226155][ T7283] usb 11-1: config 0 descriptor?? [ 206.375570][ T5939] Bluetooth: hci2: command 0x040f tx timeout [ 206.990481][T13239] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 207.009171][ T6000] usb 11-1: USB disconnect, device number 2 [ 207.054375][T13272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2038'. [ 207.071517][T13276] netlink: 'syz.7.2040': attribute type 1 has an invalid length. [ 207.075926][T13272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2038'. [ 207.077816][T13278] netlink: 'syz.7.2040': attribute type 1 has an invalid length. [ 207.106073][T13276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.129039][T13278] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.156606][T13287] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2042'. [ 207.181133][T13287] block device autoloading is deprecated and will be removed. [ 207.247912][T13295] netlink: 'syz.7.2043': attribute type 5 has an invalid length. [ 207.252429][T13295] Bluetooth: MGMT ver 1.23 [ 207.341940][ T40] kauditd_printk_skb: 21106 callbacks suppressed [ 207.341957][ T40] audit: type=1400 audit(1775675578.440:32351): avc: denied { create } for pid=13307 comm="syz.7.2046" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 207.377414][T13310] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 207.552778][T13308] veth0: entered promiscuous mode [ 207.588812][ T59] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 207.605654][T13308] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2046'. [ 207.752252][ T40] audit: type=1400 audit(1775675578.856:32352): avc: denied { accept } for pid=13326 comm="syz.6.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 207.788412][ T59] usb 10-1: Using ep0 maxpacket: 16 [ 207.792722][ T59] usb 10-1: config index 0 descriptor too short (expected 65, got 36) [ 207.796409][ T59] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.801290][ T59] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 207.807302][ T59] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.812400][ T59] usb 10-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 207.815745][ T59] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.820313][ T59] usb 10-1: config 0 descriptor?? [ 207.827420][ T59] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input27 [ 207.885152][T13331] netlink: 190972 bytes leftover after parsing attributes in process `syz.6.2052'. [ 207.889838][T13331] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 207.990604][ T5943] Bluetooth: hci0: command 0x040f tx timeout [ 208.026990][ T5996] usb 10-1: USB disconnect, device number 13 [ 208.350159][ T40] audit: type=1400 audit(1775675579.441:32353): avc: denied { ioctl } for pid=13339 comm="syz.7.2053" path="pid:[4026532882]" dev="nsfs" ino=4026532882 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 208.474362][ T5943] Bluetooth: hci2: command 0x040f tx timeout [ 209.613983][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 210.087636][ T5943] Bluetooth: hci0: command 0x040f tx timeout [ 210.448239][T13313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 210.553272][ T40] audit: type=1400 audit(1775675581.633:32354): avc: denied { unmount } for pid=12752 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 210.560574][T13377] syzkaller0: entered promiscuous mode [ 210.567532][T13377] syzkaller0: entered allmulticast mode [ 210.571952][ T5943] Bluetooth: hci2: command 0x040f tx timeout [ 210.585776][T13377] bridge0: port 2(ipvlan2) entered blocking state [ 210.588920][T13377] bridge0: port 2(ipvlan2) entered disabled state [ 210.594936][T13377] ipvlan2: entered allmulticast mode [ 210.600724][T13377] bridge0: entered allmulticast mode [ 210.606325][T13377] ipvlan2: left allmulticast mode [ 210.608554][T13377] bridge0: left allmulticast mode [ 210.627414][T13379] tmpfs: Bad value for 'mpol' [ 210.632030][ T40] audit: type=1400 audit(1775675581.713:32355): avc: denied { getopt } for pid=13378 comm="syz.6.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 210.656616][T13383] 9pnet_virtio: no channels available for device syz [ 210.940443][T13394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2066'. [ 210.981123][T13396] ip6tnl0: entered promiscuous mode [ 210.985826][T13396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2064'. [ 211.152877][T13403] xt_hashlimit: size too large, truncated to 1048576 [ 211.723233][ T40] audit: type=1400 audit(1775675582.795:32356): avc: denied { module_load } for pid=13427 comm="syz.7.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 211.732567][T13428] Invalid ELF header type: 2 != 1 [ 211.793989][T13423] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2074'. [ 211.840284][T13435] netlink: 'syz.5.2078': attribute type 12 has an invalid length. [ 211.843552][T13435] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2078'. [ 212.050373][T13451] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 212.195497][T13458] tmpfs: Unknown parameter 'ÅDd¯¿ÐºÆ¬ÚÂL»÷Ɇ©ñ‡Œ´$ Òréḻ&½Œêé_j'سÈßP"J^†òüöôÑ }¬µyõt“-Äóèc´sÒ¼å0' [ 212.249312][T13463] binder: BINDER_SET_CONTEXT_MGR already set [ 212.251227][T13463] binder: 13462:13463 ioctl 4018620d 200000000340 returned -16 [ 212.309053][T13471] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2090'. [ 212.318657][T13472] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 212.388257][T13471] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13471 comm=syz.5.2090 [ 212.412303][T13471] SELinux: failed to load policy [ 212.423151][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2090'. [ 212.692807][T13500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2098'. [ 212.700411][T13500] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2098'. [ 212.710829][T13500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2098'. [ 212.714757][T13500] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2098'. [ 212.739288][T13500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2098'. [ 212.743174][T13500] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2098'. [ 212.749319][T13500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2098'. [ 212.750932][T13507] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2099'. [ 212.753170][T13500] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2098'. [ 212.779887][T13500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2098'. [ 212.818750][T13507] bridge1: port 1(veth1) entered blocking state [ 212.821825][T13507] bridge1: port 1(veth1) entered disabled state [ 212.827570][T13507] veth1: entered allmulticast mode [ 212.831347][T13507] veth1: entered promiscuous mode [ 212.847707][T13508] bridge1: port 2(veth0_to_bond) entered blocking state [ 212.850933][T13508] bridge1: port 2(veth0_to_bond) entered disabled state [ 212.857805][T13508] veth0_to_bond: entered allmulticast mode [ 212.861338][T13508] veth0_to_bond: entered promiscuous mode [ 212.870687][T13511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.873784][T13511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.018257][T13517] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 213.020589][T13517] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 213.026173][T13517] vhci_hcd vhci_hcd.0: Device attached [ 213.040679][T13519] usbip_core: unknown command [ 213.042317][T13519] vhci_hcd: unknown pdu 0 [ 213.043716][T13519] usbip_core: unknown command [ 213.045640][ T8417] vhci_hcd vhci_hcd.6: stop threads [ 213.047422][ T8417] vhci_hcd vhci_hcd.6: release socket [ 213.050897][T13517] ip6tnl1: entered promiscuous mode [ 213.058493][ T8417] vhci_hcd vhci_hcd.6: disconnect device [ 213.078135][ T40] audit: type=1326 audit(1775675584.136:32357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13521 comm="syz.7.2104" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b18b9c799 code=0x0 [ 213.455779][T13534] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 213.683223][T13557] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.687137][T13557] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.747005][T13557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.754349][T13557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.841274][T13561] netem: unknown loss type 13 [ 213.843948][T13561] netem: change failed [ 213.846252][ T8420] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.849842][ T8420] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.853990][ T8420] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.864559][ T8420] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.931586][T13568] binder: 13567:13568 ioctl 80605414 200000000080 returned -22 [ 213.986468][T13568] vxfs: unable to read disk superblock at 1 [ 213.989235][T13568] vxfs: unable to read disk superblock at 8 [ 213.991770][T13568] vxfs: can't find superblock. [ 214.099673][T13584] SET target dimension over the limit! [ 214.354329][T13616] overlayfs: conflicting lowerdir path [ 214.442329][T13621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.449505][T13621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.455343][T13621] bond0 (unregistering): Released all slaves [ 214.460648][T13623] overlayfs: failed to resolve './file2': -2 [ 214.468217][T13625] 9pnet_virtio: no channels available for device syz [ 214.557935][ T59] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 214.610506][ T40] audit: type=1400 audit(1775675585.666:32358): avc: denied { mount } for pid=13636 comm="syz.7.2136" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 214.618703][T13637] max out of range [ 214.621587][ T40] audit: type=1400 audit(1775675585.666:32359): avc: denied { remount } for pid=13636 comm="syz.7.2136" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 214.644873][ T40] audit: type=1400 audit(1775675585.696:32360): avc: denied { unmount } for pid=13023 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 214.729453][ T59] usb 11-1: Using ep0 maxpacket: 32 [ 214.736861][ T59] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 214.742840][ T59] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 214.746972][ T59] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 214.752908][ T59] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 214.760706][ T59] usb 11-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 214.765080][ T59] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.769135][ T59] usb 11-1: Product: syz [ 214.771421][ T59] usb 11-1: Manufacturer: syz [ 214.773723][ T59] usb 11-1: SerialNumber: syz [ 214.778301][ T59] usb 11-1: config 0 descriptor?? [ 214.792105][ T59] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input28 [ 214.793246][ T40] audit: type=1400 audit(1775675585.845:32361): avc: denied { read } for pid=13655 comm="syz.7.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 214.799818][ T5321] xpad 11-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 214.930707][ T5321] xpad 11-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 214.938469][ T5321] xpad 11-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 214.959309][ T5321] xpad 11-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 214.994229][ T24] usb 11-1: USB disconnect, device number 3 [ 215.051513][ C3] ------------[ cut here ]------------ [ 215.054465][ C3] sk->sk_forward_alloc [ 215.054477][ C3] WARNING: net/ipv4/af_inet.c:163 at inet_sock_destruct+0x653/0x800, CPU#3: udevd/5336 [ 215.059896][ C3] Modules linked in: [ 215.061809][ C3] CPU: 3 UID: 0 PID: 5336 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 215.066531][ C3] Tainted: [L]=SOFTLOCKUP [ 215.068905][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 215.073551][ C3] RIP: 0010:inet_sock_destruct+0x653/0x800 [ 215.076378][ C3] Code: e3 4e ff e9 06 fd ff ff e8 ba 62 ff f7 90 0f 0b 90 e9 35 fe ff ff e8 ac 62 ff f7 90 0f 0b 90 e9 c5 fe ff ff e8 9e 62 ff f7 90 <0f> 0b 90 e9 04 ff ff ff e8 90 62 ff f7 90 0f 0b 90 e9 65 fe ff ff [ 215.084665][ C3] RSP: 0018:ffffc900006f8d98 EFLAGS: 00010246 [ 215.087255][ C3] RAX: 0000000000000000 RBX: ffff888058b1f700 RCX: ffffffff8a099427 [ 215.090948][ C3] RDX: ffff88802df48000 RSI: ffffffff8a099522 RDI: ffff88802df48000 [ 215.094910][ C3] RBP: 0000000000000090 R08: 0000000000000005 R09: 0000000000000000 [ 215.096025][ T40] audit: type=1400 audit(1775675586.143:32362): avc: denied { write } for pid=5914 comm="syz-executor" path="pipe:[8213]" dev="pipefs" ino=8213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 215.098608][ C3] R10: 0000000000000090 R11: 0000000000000000 R12: ffff888058b1f700 [ 215.098628][ C3] R13: ffff888058b1f790 R14: ffffffff81eebbdd R15: 0000000000000003 [ 215.098642][ C3] FS: 00007f32e99e5880(0000) GS:ffff8880d663e000(0000) knlGS:0000000000000000 [ 215.098677][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.098692][ C3] CR2: 0000000000000000 CR3: 0000000034a78000 CR4: 0000000000352ef0 [ 215.098705][ C3] Call Trace: [ 215.098714][ C3] [ 215.098726][ C3] ? __pfx_udp_destruct_sock+0x10/0x10 [ 215.098757][ C3] ? rcu_core+0x59d/0x10d0 [ 215.098778][ C3] __sk_destruct+0x85/0xbb0 [ 215.098803][ C3] ? rcu_core+0x59d/0x10d0 [ 215.098824][ C3] rcu_core+0x5a2/0x10d0 [ 215.098852][ C3] ? __pfx_rcu_core+0x10/0x10 [ 215.098875][ C3] ? run_timer_base+0x121/0x190 [ 215.098903][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 215.098935][ C3] handle_softirqs+0x1eb/0x9e0 [ 215.098965][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 215.098994][ C3] __irq_exit_rcu+0xef/0x150 [ 215.099025][ C3] irq_exit_rcu+0x9/0x30 [ 215.099048][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 215.099075][ C3] [ 215.099083][ C3] [ 215.099092][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 215.099114][ C3] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 215.099141][ C3] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 16 5d 51 f6 48 89 df e8 fe ac 51 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 b5 cd 41 f6 65 8b 05 5e 6e 7a 08 85 c0 74 16 5b [ 215.099160][ C3] RSP: 0018:ffffc900037bf478 EFLAGS: 00000246 [ 215.099178][ C3] RAX: 0000000000000002 RBX: ffffffff9b48bc00 RCX: 0000000000000000 [ 215.099190][ C3] RDX: 0000000000000000 RSI: ffffffff8de7920a RDI: ffffffff8c1b14a0 [ 215.099203][ C3] RBP: 0000000000000206 R08: 0000000000000001 R09: 0000000000000000 [ 215.099216][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 215.099227][ C3] R13: dffffc0000000000 R14: ffff88801fcb3888 R15: 1ffff920006f7e96 [ 215.099255][ C3] debug_object_active_state+0x2ea/0x3f0 [ 215.099297][ C3] ? __pfx_debug_object_active_state+0x10/0x10 [ 215.099331][ C3] ? __pfx_fsnotify_destroy_marks+0x10/0x10 [ 215.200303][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 215.202676][ C3] ? preempt_count_add+0x76/0x150 [ 215.204994][ C3] ? __pfx_i_callback+0x10/0x10 [ 215.207244][ C3] __call_rcu_common.constprop.0+0x4e/0x9b0 [ 215.209988][ C3] ? __destroy_inode+0x2ed/0x740 [ 215.212632][ C3] destroy_inode+0x134/0x1c0 [ 215.214511][ C3] evict+0x599/0xad0 [ 215.216237][ C3] ? __pfx_evict+0x10/0x10 [ 215.218191][ C3] ? iput.part.0+0x5fd/0xf50 [ 215.220196][ C3] iput.part.0+0x605/0xf50 [ 215.222216][ C3] ? __pfx_inode_just_drop+0x10/0x10 [ 215.224497][ C3] iput+0x35/0x40 [ 215.226132][ C3] dentry_unlink_inode+0x2a1/0x490 [ 215.228366][ C3] __dentry_kill+0x1d0/0x600 [ 215.230448][ C3] ? shrink_dentry_list+0x10e/0x5e0 [ 215.232991][ C3] shrink_dentry_list+0x180/0x5e0 [ 215.235433][ C3] ? shrink_dcache_tree+0x98/0x570 [ 215.237664][ C3] ? __pfx_select_collect_umount+0x10/0x10 [ 215.239555][ C3] shrink_dcache_tree+0x100/0x570 [ 215.241510][ C3] ? __pfx_select_collect+0x10/0x10 [ 215.243735][ C3] ? __pfx_shrink_dcache_tree+0x10/0x10 [ 215.245940][ C3] ? do_raw_spin_lock+0x128/0x260 [ 215.247717][ C3] ? d_invalidate+0xfd/0x290 [ 215.249449][ C3] d_invalidate+0x13a/0x290 [ 215.251137][ C3] ? __pfx_d_invalidate+0x10/0x10 [ 215.253101][ C3] lookup_fast+0x3f4/0x600 [ 215.254599][ C3] ? inode_permission+0x374/0x620 [ 215.256250][ C3] link_path_walk+0x7d4/0x1cc0 [ 215.257786][ C3] path_openat+0x1be/0x31a0 [ 215.259233][ C3] ? kasan_save_stack+0x3f/0x50 [ 215.260858][ C3] ? kasan_save_stack+0x30/0x50 [ 215.262529][ C3] ? kasan_save_track+0x14/0x30 [ 215.264755][ C3] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 215.266921][ C3] ? __pfx_path_openat+0x10/0x10 [ 215.268729][ C3] do_file_open+0x20e/0x430 [ 215.270395][ C3] ? __pfx_do_file_open+0x10/0x10 [ 215.272216][ C3] ? alloc_fd+0x476/0x790 [ 215.273622][ C3] ? do_getname+0x191/0x390 [ 215.275155][ C3] do_sys_openat2+0x10d/0x1e0 [ 215.276776][ C3] ? __pfx_do_sys_openat2+0x10/0x10 [ 215.278839][ C3] ? __sys_recvmsg+0x18c/0x220 [ 215.280958][ C3] ? __pfx___sys_recvmsg+0x10/0x10 [ 215.282772][ C3] __x64_sys_openat+0x12d/0x210 [ 215.284642][ C3] ? __pfx___x64_sys_openat+0x10/0x10 [ 215.286601][ C3] do_syscall_64+0x106/0xf80 [ 215.288375][ C3] ? clear_bhb_loop+0x40/0x90 [ 215.289921][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.292280][ C3] RIP: 0033:0x7f32e92a7407 [ 215.294131][ C3] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 215.302828][ C3] RSP: 002b:00007fff5ce370e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 215.306553][ C3] RAX: ffffffffffffffda RBX: 00007f32e99e5880 RCX: 00007f32e92a7407 [ 215.309886][ C3] RDX: 0000000000080000 RSI: 00007fff5ce37260 RDI: ffffffffffffff9c [ 215.313357][ C3] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 215.316566][ C3] R10: 0000000000000000 R11: 0000000000000202 R12: 00005617333577f5 [ 215.319827][ C3] R13: 00005617333577f5 R14: 0000000000000001 R15: 0000000000000000 [ 215.323262][ C3] [ 215.324600][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 215.327487][ C3] CPU: 3 UID: 0 PID: 5336 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 215.331657][ C3] Tainted: [L]=SOFTLOCKUP [ 215.333404][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 215.337681][ C3] Call Trace: [ 215.339156][ C3] [ 215.340449][ C3] dump_stack_lvl+0x100/0x190 [ 215.342453][ C3] vpanic+0x552/0x970 [ 215.344126][ C3] ? __pfx_vpanic+0x10/0x10 [ 215.346076][ C3] panic+0xd1/0xe0 [ 215.347659][ C3] ? __pfx_panic+0x10/0x10 [ 215.349518][ C3] ? check_panic_on_warn+0x1f/0x90 [ 215.351475][ C3] check_panic_on_warn.cold+0x19/0x34 [ 215.353662][ C3] ? inet_sock_destruct+0x653/0x800 [ 215.355864][ C3] __warn.cold+0x191/0x348 [ 215.357787][ C3] __report_bug+0x296/0x3d0 [ 215.359844][ C3] ? inet_sock_destruct+0x653/0x800 [ 215.362348][ C3] ? __pfx___report_bug+0x10/0x10 [ 215.364572][ C3] ? iput.part.0+0x605/0xf50 [ 215.366599][ C3] ? iput+0x35/0x40 [ 215.368286][ C3] ? dentry_unlink_inode+0x2a1/0x490 [ 215.370526][ C3] ? __dentry_kill+0x1d0/0x600 [ 215.372840][ C3] ? shrink_dentry_list+0x180/0x5e0 [ 215.375438][ C3] ? shrink_dcache_tree+0x100/0x570 [ 215.377605][ C3] ? d_invalidate+0x13a/0x290 [ 215.379444][ C3] ? lookup_fast+0x3f4/0x600 [ 215.381151][ C3] ? link_path_walk+0x7d4/0x1cc0 [ 215.382728][ C3] ? path_openat+0x1be/0x31a0 [ 215.384361][ C3] ? do_file_open+0x20e/0x430 [ 215.386170][ C3] ? do_sys_openat2+0x10d/0x1e0 [ 215.388010][ C3] ? __x64_sys_openat+0x12d/0x210 [ 215.389932][ C3] ? do_syscall_64+0x106/0xf80 [ 215.391579][ C3] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.393526][ C3] ? inet_sock_destruct+0x653/0x800 [ 215.395218][ C3] report_bug+0xb2/0x220 [ 215.396820][ C3] ? inet_sock_destruct+0x653/0x800 [ 215.398846][ C3] handle_bug+0x16a/0x2a0 [ 215.400494][ C3] exc_invalid_op+0x17/0x50 [ 215.402136][ C3] asm_exc_invalid_op+0x1a/0x20 [ 215.403673][ C3] RIP: 0010:inet_sock_destruct+0x653/0x800 [ 215.405637][ C3] Code: e3 4e ff e9 06 fd ff ff e8 ba 62 ff f7 90 0f 0b 90 e9 35 fe ff ff e8 ac 62 ff f7 90 0f 0b 90 e9 c5 fe ff ff e8 9e 62 ff f7 90 <0f> 0b 90 e9 04 ff ff ff e8 90 62 ff f7 90 0f 0b 90 e9 65 fe ff ff [ 215.411669][ C3] RSP: 0018:ffffc900006f8d98 EFLAGS: 00010246 [ 215.413613][ C3] RAX: 0000000000000000 RBX: ffff888058b1f700 RCX: ffffffff8a099427 [ 215.416243][ C3] RDX: ffff88802df48000 RSI: ffffffff8a099522 RDI: ffff88802df48000 [ 215.419204][ C3] RBP: 0000000000000090 R08: 0000000000000005 R09: 0000000000000000 [ 215.422319][ C3] R10: 0000000000000090 R11: 0000000000000000 R12: ffff888058b1f700 [ 215.425028][ C3] R13: ffff888058b1f790 R14: ffffffff81eebbdd R15: 0000000000000003 [ 215.427494][ C3] ? rcu_core+0x59d/0x10d0 [ 215.428942][ C3] ? inet_sock_destruct+0x557/0x800 [ 215.430601][ C3] ? inet_sock_destruct+0x652/0x800 [ 215.432286][ C3] ? inet_sock_destruct+0x652/0x800 [ 215.433939][ C3] ? __pfx_udp_destruct_sock+0x10/0x10 [ 215.435665][ C3] ? rcu_core+0x59d/0x10d0 [ 215.437045][ C3] __sk_destruct+0x85/0xbb0 [ 215.438445][ C3] ? rcu_core+0x59d/0x10d0 [ 215.439818][ C3] rcu_core+0x5a2/0x10d0 [ 215.441164][ C3] ? __pfx_rcu_core+0x10/0x10 [ 215.442730][ C3] ? run_timer_base+0x121/0x190 [ 215.444338][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 215.446160][ C3] handle_softirqs+0x1eb/0x9e0 [ 215.447877][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 215.449627][ C3] __irq_exit_rcu+0xef/0x150 [ 215.451105][ C3] irq_exit_rcu+0x9/0x30 [ 215.452477][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 215.454058][ C3] [ 215.454897][ C3] [ 215.455764][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 215.457660][ C3] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 215.459698][ C3] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 16 5d 51 f6 48 89 df e8 fe ac 51 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 b5 cd 41 f6 65 8b 05 5e 6e 7a 08 85 c0 74 16 5b [ 215.465790][ C3] RSP: 0018:ffffc900037bf478 EFLAGS: 00000246 [ 215.467889][ C3] RAX: 0000000000000002 RBX: ffffffff9b48bc00 RCX: 0000000000000000 [ 215.470454][ C3] RDX: 0000000000000000 RSI: ffffffff8de7920a RDI: ffffffff8c1b14a0 [ 215.472874][ C3] RBP: 0000000000000206 R08: 0000000000000001 R09: 0000000000000000 [ 215.475359][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 215.477840][ C3] R13: dffffc0000000000 R14: ffff88801fcb3888 R15: 1ffff920006f7e96 [ 215.480430][ C3] debug_object_active_state+0x2ea/0x3f0 [ 215.482230][ C3] ? __pfx_debug_object_active_state+0x10/0x10 [ 215.484279][ C3] ? __pfx_fsnotify_destroy_marks+0x10/0x10 [ 215.486213][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 215.487899][ C3] ? preempt_count_add+0x76/0x150 [ 215.489513][ C3] ? __pfx_i_callback+0x10/0x10 [ 215.491203][ C3] __call_rcu_common.constprop.0+0x4e/0x9b0 [ 215.493291][ C3] ? __destroy_inode+0x2ed/0x740 [ 215.494938][ C3] destroy_inode+0x134/0x1c0 [ 215.496424][ C3] evict+0x599/0xad0 [ 215.497676][ C3] ? __pfx_evict+0x10/0x10 [ 215.499096][ C3] ? iput.part.0+0x5fd/0xf50 [ 215.500569][ C3] iput.part.0+0x605/0xf50 [ 215.501980][ C3] ? __pfx_inode_just_drop+0x10/0x10 [ 215.503661][ C3] iput+0x35/0x40 [ 215.504882][ C3] dentry_unlink_inode+0x2a1/0x490 [ 215.506512][ C3] __dentry_kill+0x1d0/0x600 [ 215.508007][ C3] ? shrink_dentry_list+0x10e/0x5e0 [ 215.509662][ C3] shrink_dentry_list+0x180/0x5e0 [ 215.511209][ C3] ? shrink_dcache_tree+0x98/0x570 [ 215.512816][ C3] ? __pfx_select_collect_umount+0x10/0x10 [ 215.514639][ C3] shrink_dcache_tree+0x100/0x570 [ 215.516306][ C3] ? __pfx_select_collect+0x10/0x10 [ 215.518019][ C3] ? __pfx_shrink_dcache_tree+0x10/0x10 [ 215.519788][ C3] ? do_raw_spin_lock+0x128/0x260 [ 215.521451][ C3] ? d_invalidate+0xfd/0x290 [ 215.522961][ C3] d_invalidate+0x13a/0x290 [ 215.524466][ C3] ? __pfx_d_invalidate+0x10/0x10 [ 215.526079][ C3] lookup_fast+0x3f4/0x600 [ 215.527512][ C3] ? inode_permission+0x374/0x620 [ 215.529115][ C3] link_path_walk+0x7d4/0x1cc0 [ 215.530601][ C3] path_openat+0x1be/0x31a0 [ 215.532046][ C3] ? kasan_save_stack+0x3f/0x50 [ 215.533600][ C3] ? kasan_save_stack+0x30/0x50 [ 215.535174][ C3] ? kasan_save_track+0x14/0x30 [ 215.536734][ C3] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 215.538511][ C3] ? __pfx_path_openat+0x10/0x10 [ 215.540098][ C3] do_file_open+0x20e/0x430 [ 215.541558][ C3] ? __pfx_do_file_open+0x10/0x10 [ 215.543200][ C3] ? alloc_fd+0x476/0x790 [ 215.545066][ C3] ? do_getname+0x191/0x390 [ 215.546528][ C3] do_sys_openat2+0x10d/0x1e0 [ 215.548132][ C3] ? __pfx_do_sys_openat2+0x10/0x10 [ 215.549844][ C3] ? __sys_recvmsg+0x18c/0x220 [ 215.551383][ C3] ? __pfx___sys_recvmsg+0x10/0x10 [ 215.553037][ C3] __x64_sys_openat+0x12d/0x210 [ 215.554790][ C3] ? __pfx___x64_sys_openat+0x10/0x10 [ 215.556522][ C3] do_syscall_64+0x106/0xf80 [ 215.557999][ C3] ? clear_bhb_loop+0x40/0x90 [ 215.559767][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.561640][ C3] RIP: 0033:0x7f32e92a7407 [ 215.563094][ C3] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 215.569321][ C3] RSP: 002b:00007fff5ce370e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 215.571912][ C3] RAX: ffffffffffffffda RBX: 00007f32e99e5880 RCX: 00007f32e92a7407 [ 215.574401][ C3] RDX: 0000000000080000 RSI: 00007fff5ce37260 RDI: ffffffffffffff9c [ 215.576932][ C3] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 215.579419][ C3] R10: 0000000000000000 R11: 0000000000000202 R12: 00005617333577f5 [ 215.582331][ C3] R13: 00005617333577f5 R14: 0000000000000001 R15: 0000000000000000 [ 215.584970][ C3] [ 215.586882][ C3] Kernel Offset: disabled [ 215.588433][ C3] Rebooting in 86400 seconds..