last executing test programs: 8m11.508842323s ago: executing program 32 (id=1190): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}]}}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) shutdown(r2, 0x0) r4 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$hid(r4, 0x0, 0x0) write$char_usb(r5, &(0x7f0000006800)="10", 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r6, &(0x7f00000004c0)=""/57, 0x39) syz_usb_disconnect(r4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x1a00, @loopback, 0x3}]}, &(0x7f0000000140)=0x28) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000300)={r7, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={r7, 0x2}, &(0x7f0000000240)=0x8) 8m7.324023072s ago: executing program 33 (id=1241): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async, rerun: 32) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) (rerun: 32) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}]}}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = syz_open_dev$cec(&(0x7f0000000140), 0xffffffffffffffff, 0x80243) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0xff, 0x0, 0xc, "00000000020000000000002100", "00004702", "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) (async) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x65d8551a, 0x9, 0x9, 0x7fff, "16b0bc450cfc479605002300", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) (async) r4 = mq_open(&(0x7f00000000c0)='\\/@-#', 0x2, 0x0, &(0x7f00000001c0)={0x98a0, 0x1000000000000000, 0x7, 0xfffffffffffffff0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) mq_timedreceive(r4, &(0x7f0000000200)=""/223, 0xdf, 0x6, &(0x7f0000000340)={r5, r6+60000000}) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="6403000010000104000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b0300009e06030014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c0002800500110001"], 0x364}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r7, 0x541c, &(0x7f0000000200)={0x5, 0xfffffffffffffffa, 0xbb80, 0xfffffffffffffffe, 0x8}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a00010000000100000000001c140000fe004001000000000800010000000100"], 0x24}}, 0x2000a000) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x210b00, 0x0) 7m33.425123276s ago: executing program 34 (id=1704): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000180), 0x7, 0x80) fsmount(r0, 0x0, 0x3) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='cramfs\x00', 0x204041, 0x0) r1 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000bdc000/0x3000)=nil, 0x3000}, 0x7}) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="008000"}) ioctl(r3, 0x8b2a, &(0x7f0000000040)) 7m26.254818755s ago: executing program 35 (id=1815): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 6m49.250419095s ago: executing program 6 (id=2697): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc038563b, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1}) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x9, 0x50000) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000001c0)={0x5fa, 0x3, 0x2, {0x1, @pix_mp={0xcf6, 0x101c00, 0x3432564e, 0x5, 0x8, [{0x2a302c, 0x10000}, {0x1, 0xfffffffc}, {0x5, 0x9}, {0x7fff0, 0x10001}, {0x2, 0xffffffff}, {0x6, 0x5}, {0xe, 0x8}, {0x8, 0x10000}], 0x7f, 0x6, 0x2, 0x1}}, 0x82}) (async) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000001c0)={0x5fa, 0x3, 0x2, {0x1, @pix_mp={0xcf6, 0x101c00, 0x3432564e, 0x5, 0x8, [{0x2a302c, 0x10000}, {0x1, 0xfffffffc}, {0x5, 0x9}, {0x7fff0, 0x10001}, {0x2, 0xffffffff}, {0x6, 0x5}, {0xe, 0x8}, {0x8, 0x10000}], 0x7f, 0x6, 0x2, 0x1}}, 0x82}) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000003c0)={0x3, 0x6, 0x3, {0x0, @meta={0x4d435655, 0xab7034d, 0x93fb, 0x24ae, 0x7b7de18}}, 0x8}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x1a) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x1a) ioctl$KVM_TDX_GET_CPUID(r3, 0xc008aeba, &(0x7f0000000100)={0x5, 0x0, &(0x7f00000000c0)={0x1, 0x0, [{0x40000000, 0x2, 0x5, 0x3, 0x7fffffff, 0x2, 0x401}]}}) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000080)={0x3, "d7f67c"}, 0x4) 6m49.175219056s ago: executing program 6 (id=2699): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000240)="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"}, 0x20) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000211c000008000500", @ANYRES32=r1, @ANYBLOB="140012800c0001006d6163766c616e"], 0x50}}, 0x8004042) 6m49.174968292s ago: executing program 6 (id=2700): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x22400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="410f2092b994000040b800000000ba000000800f30c461d25c971a32000066b86c000f00d866410f382a11360f01c3c7442400d86a7e6cc7442402e89e0000c7442406000000000f01142426f3400f1ef9c4e31d7de20066ba4100b082ee", 0x5e}], 0x1, 0x0, 0x0, 0x0) r2 = dup(r1) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000000)={0x0, &(0x7f0000000280)=[@wrmsr={0x65, 0x20, {0xc0010141, 0x200}}], 0x20}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000140)={0xbc, 0x0, 0x1}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r8, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) close(0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x4001, 0x0, 0xfffffff9, 0x4}, 0x10) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') ioctl$BTRFS_IOC_BALANCE(r10, 0x8008b70d, 0x200000000000000) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="40000000ff07000028bd700000000000000000000ab3228869c8a33c8c632cb77158bb4096a5", @ANYRES32=0x0, @ANYBLOB="68c5000000000000140003006e657464657673696d300000000000000a000100bd21acbe68ab0000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 6m48.875265765s ago: executing program 6 (id=2701): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a22d1, 0x0) mkdir(0x0, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x4) listen(r0, 0x5) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x1) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x20) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x18001, 0x11b) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x6, {0x6, 0x2, 0xffffffffffffeffe, 0xffffffffffbffffd, 0x400000, 0x0, {0x40, 0x8, 0xb, 0xfffc, 0x3, 0x1, 0x0, 0xfffffffd, 0x120, 0x2000, 0x0, r4, r5, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f00000001c0)='./file0\x00', r2, r5, 0x800) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="340100001700010029bd700000000000ac1414bb00000000000000000000000000000000000000002001000000000000000000000000000120010000000000000000000000000001e000000200000000000000000000000000000000000000000200008084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000200000000400000000000060000000000000000000000000000000000000000000000000000000000000000000000000009000000ba6b6e000201000000000000000400000000000000000000000000000c000800080008000101"], 0x134}}, 0x0) 6m48.781682343s ago: executing program 6 (id=2702): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x14002, 0x0) (async) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000000180)={0x1, 0x1, 0x80, 0xd, 0x40, 0x1, 0x2, 0x3, 0x20, 0x1, 0x20, 0xa, 0x0, 0x0, 0x0}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r3, 0x0, r2}) (async) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000080)={0x20, 0x0, &(0x7f0000000040)=[{0x0, 0x1}], 0xdeadbeef, 0x8, 0x1}) 6m48.535737579s ago: executing program 6 (id=2703): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x6b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, 0xfffffff7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 6m48.464735588s ago: executing program 36 (id=2703): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x6b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, 0xfffffff7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 6m35.625168628s ago: executing program 4 (id=2911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) r3 = openat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup(r3, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) openat$cgroup_ro(r6, &(0x7f0000000180)='memory.stat\x00', 0x0, 0x0) openat(r2, &(0x7f0000000100)='./file0\x00', 0x0, 0x28) write(r5, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000cee0202001a000000", 0x33a) r7 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) 6m35.448081939s ago: executing program 4 (id=2916): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) r4 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1[\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\x00\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0\xber\xa6\xec\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\x13]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\xcd\xf0\xad\x97uh\xb2\xb8\x17S~R\x19\xa9\xc3x\xb8l\xed\xbdz#6\x9f\x94\xba[xC\xed\x12}f\x0f\xc5', 0x3) fallocate(r4, 0x0, 0x0, 0x400001) close(0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYRESOCT=r3], 0x28}}, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0xb8d1}, 0x8) 6m35.340129638s ago: executing program 4 (id=2920): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000380)={{}, r1, 0xc, @inherit={0x78, &(0x7f0000000300)={0x0, 0x6, 0x100000001, 0x2, {0x7, 0x6, 0x33, 0x8, 0x8000000000000000}, [0x3, 0x4, 0x0, 0x400, 0x4, 0x8001]}}, @name="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"}) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x19, 0xa, 0x3, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20040005}, 0x4) 6m35.283874554s ago: executing program 4 (id=2924): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0205648, &(0x7f0000000040)={0xf010000, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) file_getattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x18, 0x1000) mount(&(0x7f0000000140)=@rnullb, &(0x7f0000000180)='./file2\x00', &(0x7f00000001c0)='efs\x00', 0x200000, &(0x7f0000000200)='--[,\x00') ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x1, 0x7fffffff, 0x1}) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380)={0x549000, 0x11, 0x5f11d828ae65dff2}, 0x18) r2 = openat(r1, &(0x7f000000c380)='./file0\x00', 0x4742, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000280)=0x10, 0x4) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000d59000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000a91000/0x1000)=nil) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, r6, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r7 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) ppoll(&(0x7f0000000180)=[{r7, 0x2404}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0xffff, 0x2, 0x4}) ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(r3, 0x6f50, 0x5) fcntl$setlease(r3, 0x400, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) syz_usbip_server_init(0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x2c}}, 0xea5bc50b6199d77e) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) rename(&(0x7f0000000040)='./file2\x00', &(0x7f0000000100)='./file0\x00') 6m33.844271346s ago: executing program 4 (id=2940): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x2000080, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r3, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000a40)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000a80)=[0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xbf, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x40, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000dc0)={r3, 0x58, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000010c0)={r3, 0xe0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000e00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000e40)=[0x0, 0x0], &(0x7f0000000e80)=[0x0, 0x0], 0x0, 0xe, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000f00), &(0x7f0000000f40), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000f80)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001100)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000016c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001140)={0x514, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x8, 0x0, 0x80000001}, {0x2, 0x20, 0x5, 0x73d7}, {0x81, 0x8, 0x3e, 0xd}, {0xb5d, 0x5, 0x8, 0xc}, {0x7ff, 0x6, 0x9, 0x3}]}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r4}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x237}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x96}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x514}, 0x1, 0x0, 0x0, 0x240000c0}, 0x8000) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r10}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x24}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001"], 0xa4}}, 0x40) socket$inet_udp(0x2, 0x2, 0x0) 6m32.984168472s ago: executing program 4 (id=2957): ioprio_set$pid(0x2, 0x0, 0x4000) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x4c2dc3, 0x0) (async) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x4c2dc3, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x80000001, 0x3, 0xb3}) 6m17.832233067s ago: executing program 37 (id=2957): ioprio_set$pid(0x2, 0x0, 0x4000) openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x4c2dc3, 0x0) (async) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x4c2dc3, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x80000001, 0x3, 0xb3}) 5m40.044734441s ago: executing program 9 (id=3299): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x12440, 0x0) getpeername$ax25(r1, &(0x7f0000000500)={{}, [@netrom, @rose, @netrom, @netrom, @default, @bcast, @default, @rose]}, &(0x7f0000000580)=0x48) (async) syz_emit_vhci(&(0x7f00000013c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_PAGE_SCAN_ACTIVITY={{}, 0x5}}}, 0x7) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) (async) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000200)) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000480)=0x1) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) recvmsg$kcm(r3, &(0x7f0000000440)={&(0x7f00000000c0)=@caif=@util, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)=""/67, 0x43}, {&(0x7f0000000240)=""/203, 0xcb}], 0x2, &(0x7f0000000340)=""/247, 0xf7}, 0x10040) (async) ioctl$TCSETSF2(r2, 0x89f0, &(0x7f00000194c0)={0x40, 0x4, 0x10008, 0x2, 0xf, "a533b6aaf9f659ff35036bf79d8b4c22246305", 0x9, 0x9}) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000600)={&(0x7f00000005c0)=""/53, 0x3d000, 0x1800, 0x400}, 0x20) 5m39.92295381s ago: executing program 9 (id=3300): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000080)) (async) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext4\x00', 0x200000, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x1000, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r1, &(0x7f00000002c0)="a6", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) (async) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000000)={0x486, 0x8}) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 5m39.91655348s ago: executing program 9 (id=3301): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') pread64(r1, &(0x7f0000000200)=""/237, 0xed, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000eaffffffffff930a0000000000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00'}, 0x90) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) (rerun: 32) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000004c0)={0x0, "09e6498cd7b70000b56a00000000000100000000f3ffffffffffffff0500", 0xffffffffffffffff}) ppoll(&(0x7f0000000040)=[{r4, 0x9200}], 0x1, &(0x7f0000000100), 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 5m39.864353448s ago: executing program 9 (id=3302): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1715, 0x4b7bc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) syz_emit_ethernet(0x1ba, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) write(r2, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x324, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x2}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x6}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x2bc, 0x2, [@TCA_U32_SEL={0x2a4, 0x5, {0x6, 0x3, 0x2, 0x8000, 0x34, 0x9, 0x9, 0x1, [{0x1, 0x8001, 0x7}, {0x0, 0xf, 0x4, 0x6}, {0x0, 0x1, 0x1, 0x8}, {0x276, 0x0, 0x0, 0x7ff}, {0x9, 0x3ff, 0x6, 0x1}, {0x0, 0x2, 0x101, 0x80000001}, {0x2, 0x7fffffff, 0x4693, 0x7}, {0x9, 0x1ff, 0x2, 0x10}, {0x3, 0xa, 0x4d, 0x7cb}, {0x9, 0x1, 0xd, 0x5}, {0xf, 0x1ff, 0xe3, 0xfffff5e3}, {0xd90, 0x8001, 0x5, 0x7}, {0x3, 0x4, 0x9, 0xe76}, {0xfffffffb, 0x1ff, 0x10001, 0xffff}, {0x7b9, 0xceb8, 0x9, 0x667c}, {0x6, 0x1, 0x2, 0x9}, {0x5, 0xc35f, 0x1, 0x3352}, {0x8, 0x3, 0x6, 0xe5c}, {0x400, 0x6, 0x4, 0x2}, {0x6, 0xd, 0x5, 0x10}, {0xc017, 0x9, 0xe6e, 0x7a6}, {0x5, 0x6, 0x5, 0x9}, {0x4c, 0x3, 0x8, 0xffffbd6d}, {0x80, 0x5, 0x2, 0x5}, {0x12, 0x9, 0x1, 0x4}, {0xffff, 0x10000, 0xffff, 0xffff}, {0x40, 0x6, 0x80000000, 0x6}, {0xfffffffd, 0x1, 0x602, 0x5}, {0x7, 0x2, 0x1}, {0x4, 0x0, 0x9, 0x1ffe000}, {0x3, 0x2b66, 0x8, 0x800}, {0x5, 0x1000, 0x8, 0x3ff}, {0x1b4cf69c, 0x2, 0x5, 0xfffffff7}, {0x3, 0x10, 0x4, 0xc}, {0x7, 0x3, 0x3, 0x4}, {0x6, 0xd, 0xc, 0xffffffff}, {0x7, 0x7, 0x2e800000, 0x3}, {0x10001, 0x9, 0x1, 0x3}, {0xf4, 0xa, 0x3, 0x7}, {0x9, 0x1, 0x4, 0x18}, {0x9, 0x5, 0x5, 0x3ff}]}}, @TCA_U32_INDEV={0x14, 0x8, 'syzkaller1\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x7f}}]}, 0x324}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r1, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000100)=0xbdda, 0x4) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, 0x0, &(0x7f0000000000)) openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r5, 0x31, 0x0, 0x3f, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r5, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x2d, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x98, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) setxattr$trusted_overlay_origin(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000840), 0x2, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32=r10, @ANYRES32=r8, @ANYBLOB="060000000000000005000000", @ANYRES32=r5, @ANYBLOB, @ANYRES64=r9], 0x20) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) 5m39.793391676s ago: executing program 9 (id=3303): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x3}]}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x3e}, 0x28) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff000007", @ANYRES32, @ANYBLOB="08000100ac141433080002000a010100080019"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d77e) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2, 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r5, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000440)=[r6, r6], 0x0, 0x2}) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40186f40, &(0x7f0000000440)=0x1f) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2, 0x5}) 5m39.524483044s ago: executing program 9 (id=3304): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdir(&(0x7f00000003c0)='./file0\x00', 0xff0c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 5m39.450621602s ago: executing program 38 (id=3304): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdir(&(0x7f00000003c0)='./file0\x00', 0xff0c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2m28.93193083s ago: executing program 7 (id=5748): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 64) r0 = syz_open_dev$media(&(0x7f0000000100), 0x2, 0x101000) (rerun: 64) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x1c, 0x0, &(0x7f0000000080)) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x9, 0x0, [{0x4b564dff, 0xec000000, 0x6}, {0xb40, 0x0, 0x7}, {0x222, 0x0, 0x4}, {0xb81, 0x0, 0xc7}, {0x189, 0x0, 0x9d8}, {0x87e, 0x0, 0x10}, {0xab0, 0x0, 0xf}, {0x0, 0x0, 0xfffffffffffffffd}, {0xa0f, 0x0, 0x2}]}) syz_clone(0x20000000, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) (async) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) (async) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0xc8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_udplite(0xa, 0x2, 0x88) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2m28.652501439s ago: executing program 7 (id=5751): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xc00}, 0x0) r0 = syz_io_uring_setup(0x2501, &(0x7f0000000300)={0x0, 0x3072, 0x10000, 0x3, 0x400000}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x20050004) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x80) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000040)="9b2d", 0x2}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x92, 0x0, @fd=r4, 0x1000, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x6686, 0x2936, 0x28, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xc00}, 0x0) (async) syz_io_uring_setup(0x2501, &(0x7f0000000300)={0x0, 0x3072, 0x10000, 0x3, 0x400000}, &(0x7f0000000100), &(0x7f00000002c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x20050004) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x80) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000040)="9b2d", 0x2}) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r4, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x92, 0x0, @fd=r4, 0x1000, 0x0, 0x6, 0x0, 0x1}) (async) io_uring_enter(r0, 0x6686, 0x2936, 0x28, 0x0, 0x0) (async) 2m28.637579289s ago: executing program 7 (id=5753): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 'id0\x00'}) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x100000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x66}}, './file0\x00'}) r3 = io_uring_setup(0xa69, &(0x7f0000000140)={0x0, 0xc801, 0x80, 0x0, 0x74, 0x0, r0}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r3, 0x19, &(0x7f00000001c0)={0x1, 0x4, 0x100000000}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000200)="0cad0e5c4bd10df8b2f1a492e0d2b63b", 0x10) ioctl$sock_netdev_private(r1, 0x89fc, &(0x7f0000000240)="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") ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001240)={0x0, @null, @netrom={'nr', 0x0}, 0x1ff, 'syz1\x00', @default, 0x7, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001340)={&(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80c00, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000001380)={r4}) r6 = syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f00000013c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4, 0x2, 0x20, 0x8, 0x9, 0x5}, {0x9, 0x5, 0x14, 0x2, 0x3ff, 0x5, 0x1, 0x1}, {0x9, 0x5, 0xf, 0x3, 0x10, 0xc3, 0x7f, 0x5}}}}}}]}}, 0x0) syz_usb_control_io(r6, &(0x7f0000001640)={0x2c, &(0x7f0000001400)={0x0, 0xf, 0x4d, {0x4d, 0x10, "b1830eb065725896581f6e3434a61f6d8a3676b2fde519ffbe38f490fe9eabc4ad2a94048dedd7bd2c310c29fd5a71e8fe3bfe50ddad9c60f39a5152f98b51a148b0cab9d30173c0d95efd"}}, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}, &(0x7f00000014c0)={0x0, 0xf, 0xd0, {0x5, 0xf, 0xd0, 0x2, [@generic={0xc4, 0x10, 0x1, "6ccd0a9555e1a8efab6b9e0729ae745cfa99d8912bad8ab1ac6187ec4f323c02cfcf6b95784b260190d15d784deffb827a4e091453a79d46f3801ddb9547df0708abda72cbb54ac70149d2513bdfe55d1d4242cd1e3dce26a5c3258296937093de84945edc6c21a3177b9820943d300d7bc7cc126043e09dd3a079dc19c45388bd09d7a977ff3a1c102b3ea3a1b698dac7869fb345f879583a915413bb10de2b93196151181e89ce1eaffa939192edb37e70c398a36c1be7028fa7997f856ff0d5"}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x6, 0x2, 0x81}]}}, &(0x7f00000015c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc, 0x60, 0x5, 0x9, "b809630b", "756743f7"}}, &(0x7f0000001600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x60, 0x3, 0xfc, 0x45, 0x6, 0x5}}}, &(0x7f0000001a80)={0x84, &(0x7f0000001680)={0x20, 0x31, 0x13, "0d99de2cb6c1b5a0bd050d46ee2598338b8ec3"}, &(0x7f00000016c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001700)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001740)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000001780)={0x20, 0x0, 0x4, {0x400, 0x40}}, &(0x7f00000017c0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000001800)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000001840)={0x40, 0xb, 0x2, "fe71"}, &(0x7f0000001880)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000018c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000001900)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, &(0x7f0000001940)={0x40, 0x19, 0x2, 'X-'}, &(0x7f0000001980)={0x40, 0x1a, 0x2, 0x2}, &(0x7f00000019c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001a00)={0x40, 0x1e, 0x1, 0xc}, &(0x7f0000001a40)={0x40, 0x21, 0x1, 0xf}}) syz_usb_control_io(r6, &(0x7f0000001c80)={0x2c, &(0x7f0000001b40)={0x40, 0x9, 0x8, {0x8, 0x1, "92fecfecb094"}}, &(0x7f0000001b80)={0x0, 0x3, 0x2c, @string={0x2c, 0x3, "b4096f714b519b2ad4b83bab7d63a3e8c2cd59402978d81b750025726f37e36c80fd117afc207cbab8ac"}}, &(0x7f0000001bc0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xb, 0x0, 0x5}]}}, &(0x7f0000001c00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8d, 0x60, 0x40, 0x6, "69681fca", "ffb83575"}}, &(0x7f0000001c40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x3, 0x4, 0xa, 0x6, 0x7, 0x3}}}, &(0x7f0000002140)={0x84, &(0x7f0000001cc0)={0x40, 0xd, 0x84, "a1fc3ade2442e78b3fbd8ec9e7ed3f9daa5cd0761b4c393115b9c0604b8a90181c3f4d1e3b99bbaee9773a9b05264bdee921d6e4b8f2b05ffb218f0d174d13817b60160251571d2b151d26316ae6ac4d78ddc0498932492b8752e53cea05bac56a84a2290d90524ba01aa47900674f67eaa48c2c7ee8734c8aa8f6bc4913e678caf89688"}, &(0x7f0000001d80)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000001dc0)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000001e00)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000001e40)={0x20, 0x0, 0x4, {0x400, 0x40}}, &(0x7f0000001e80)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000001ec0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001f00)={0x40, 0xb, 0x2, "b503"}, &(0x7f0000001f40)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000001f80)={0x40, 0x13, 0x6, @random="2b05368a32e1"}, &(0x7f0000001fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000002000)={0x40, 0x19, 0x2, "950d"}, &(0x7f0000002040)={0x40, 0x1a, 0x2, 0xa}, &(0x7f0000002080)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000020c0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000002100)={0x40, 0x21, 0x1, 0x6}}) close_range(r5, r0, 0x2) io_setup(0x5, &(0x7f0000002200)=0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000002240), 0x30b000, 0x0) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000002300), 0x201, 0x0) io_submit(r7, 0x1, &(0x7f0000002380)=[&(0x7f0000002340)={0x0, 0x0, 0x0, 0x5, 0x1ff, r8, &(0x7f0000002280)="d4209384d770292599527b9b913d71b06ace12c80e2b8727e09ded9c583f90fbff1e61f3c2296edb31ed7368fbe33bc3fd014ed731113feceaaadc946d68f9dcfda6a1824a990c37fc464a7200fc132ae6f35e6da37751b2cd1104eea162c9c189a03ab1e06a3ff3793cc985f6fc0487ac5a", 0x72, 0x3, 0x0, 0x1, r9}]) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000024c0)={&(0x7f00000023c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002400)=[0x0, 0x0, 0x0], &(0x7f0000002440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002480)=[0x0], 0x4, 0x3, 0x8, 0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002500), 0x40800, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000002540)={0xff, 0x3, 0x204, 0x7, 0x2, 0x4, 0x1, 0x3}, &(0x7f0000002580)=0x20) bind$inet(r2, &(0x7f00000025c0)={0x2, 0x4e24, @multicast2}, 0x10) close_range(r5, r1, 0x2) listen(r9, 0x8) io_uring_enter(r9, 0x5962, 0x6a0d, 0x8, &(0x7f0000002600)={[0x38bfac18]}, 0x8) syz_emit_vhci(&(0x7f0000002640)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002680), 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f00000026c0)) close_range(r10, r9, 0x0) 2m25.481193149s ago: executing program 7 (id=5775): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x48c, 0x0, 0x9}]}) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400018009000100626f6e640000000014000280050801000500000005001b000000000086c777b30094c8ae6407f62f2bf206d0fb52ce635c676d000c4da42b2004e21e22000007d274e75a1ded1a193bc1d0a8ce1adde20dca679f289d298f6b88724114e1176829a4a419c17007340d0ee2e777a070c208d506a16775e0d155a94a226672479fbe67a635aae8581e88ab9ce9a620eb5dc3694808ddb3074e0ac8961909686740ab4d00"/194], 0x44}}, 0x0) pipe2$watch_queue(&(0x7f0000001180), 0x80) (async) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0xf, 0x6, 0x75, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0x38}, 0x0, 0x700, 0x3, 0x6}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0xf, 0x6, 0x75, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0x38}, 0x0, 0x700, 0x3, 0x6}}) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x1, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x4, 0xb}, {0xd, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x1, 0x0, 0x2, @private1, @loopback, 0x10, 0x7800, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x1, 0x0, 0x2, @private1, @loopback, 0x10, 0x7800, 0x1}}) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xc8, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4040841}, 0x4000000) r10 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r2, 0x36) r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') read$FUSE(r11, &(0x7f00000041c0)={0x2020}, 0x2020) (async) read$FUSE(r11, &(0x7f00000041c0)={0x2020}, 0x2020) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r12, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) (async) setsockopt(r12, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) socket$inet_sctp(0x2, 0x1, 0x84) (async) r13 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r15 = socket$inet6_sctp(0xa, 0x1, 0x84) r16 = dup2(r12, r15) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r16, 0x84, 0x18, &(0x7f00000000c0)={r14}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f00000005c0)={r14, @in={{0x2, 0xd, @private=0xa010100}}, 0x80000000, 0x1, 0x1, 0x6, 0x40, 0x8, 0x8}, 0x9c) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r3, 0xffffffffffffffff) socket$igmp6(0xa, 0x3, 0x2) openat$cgroup_ro(r3, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) 2m25.361651602s ago: executing program 7 (id=5776): syz_open_dev$video4linux(&(0x7f0000001380), 0x2, 0x501) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @broadcast}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x325001, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x82}, 0x4800) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002040)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) openat(r1, &(0x7f0000000040)='.\x00', 0x0, 0x18) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r9, 0xc0182101, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="0000000025e77c9d340f8b15497d35b1d2b9f6d6205c33a65ec98ca0ef01a14d8d472b20a7adc4448faf5c9e546f5509b64d39fb5e984afa568b4ab5637671d6bd4183fece71bebd9ff2869834f6dcc50dbec3d90337505d8a35004b9326c18823ed62cddac26cd21f78692ed3", @ANYRES16=r2, @ANYBLOB="1709a7000000ffffff00010000000800090001004a6615c787cfe7e100000000000000000000000000011400200000000000000000000000ffff000000000500070003000000060002000100000008000a0004000000"], 0x5c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x7f, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, @in6={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x16}, 0x7}, @in6={0xa, 0x4e24, 0x200, @empty, 0xbd}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r11, 0x3}, &(0x7f0000000140)=0x8) 2m25.173529533s ago: executing program 7 (id=5777): r0 = socket$rds(0x15, 0x5, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x5, 0x191f}, 0x0, 0x0, 0x7, 0x5, 0x2, 0x4, 0x5, 0xfffffffffffffff9}}], 0x58}, 0x0) 2m10.200087869s ago: executing program 39 (id=5777): r0 = socket$rds(0x15, 0x5, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x5, 0x191f}, 0x0, 0x0, 0x7, 0x5, 0x2, 0x4, 0x5, 0xfffffffffffffff9}}], 0x58}, 0x0) 2m6.733164769s ago: executing program 8 (id=5988): r0 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x1b) io_setup(0x251, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000140)={0x25, 0x0, 0x41, 0x8, 0x0, r1, 0x0, 0x0, 0x4000, 0x0, 0x0, r1}]) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x32315852, 0x8, 0x0, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) setxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), &(0x7f0000000280)=@md5={0x1, "a71b01f4d97fe2e88e3c985098bb6ff4"}, 0x11, 0x0) 2m6.522516736s ago: executing program 8 (id=5990): prctl$PR_SET_MM(0x41555856, 0x0, &(0x7f0000ffd000/0x2000)=nil) 2m6.521401975s ago: executing program 8 (id=5992): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = getpid() r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001600010325bd70000019000015"], 0x14}, 0x1, 0x0, 0x0, 0x4010050}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x10, 0x0) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r2 = syz_pidfd_open(r0, 0x0) setns(0xffffffffffffffff, 0x80) bind$xdp(0xffffffffffffffff, 0x0, 0x4a) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000003c0)={0x100000040, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x28}, &(0x7f0000000540)=""/130, 0x82, &(0x7f0000000240)=""/238, &(0x7f0000000340)=[r3, r0, 0xffffffffffffffff, r0, r0, 0x0], 0x6, {r4}}, 0x58) r5 = getuid() getresuid(&(0x7f0000000480)=0x0, &(0x7f00000004c0), &(0x7f0000000500)) r7 = geteuid() setresuid(r5, r6, r7) mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000022c0)='nilfs2\x00', 0x10003, &(0x7f0000000000)='norecovery') mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000140)=0x7feaf, 0xfffffffffffffd05) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2m6.41183414s ago: executing program 8 (id=5994): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async, rerun: 64) syz_emit_ethernet(0x76, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x40, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) (rerun: 64) 2m6.268899008s ago: executing program 8 (id=5995): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xa00965, 0x2}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x201, 0x4000003e, r4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x8400ae8e, &(0x7f0000000140)=@x86={0xff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd8}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000200), 0x2000000f5, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xa00965, 0x2}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) (async) fanotify_init(0x200, 0x0) (async) fanotify_mark(r5, 0x201, 0x4000003e, r4, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x8400ae8e, &(0x7f0000000140)=@x86={0xff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd8}) (async) 2m6.132686757s ago: executing program 8 (id=5996): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1) ioctl$BLKPG(r0, 0xc0104d03, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002140)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2800}, 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000007, 0x204031, 0xffffffffffffffff, 0x19a54000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001cc0)={r0, 0xe0, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001a00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f0000001a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f0000001ac0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001b00), &(0x7f0000001b40), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000001b80)}}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x19}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000001f00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001d00)={0x1a8, 0x0, 0x95889a4fcc7177e6, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4044040}, 0x4000040) r17 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r17, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x31}}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:insmod_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004840}, 0x4004804) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x5c, r17, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:userio_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4040000) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000040)={r1, &(0x7f0000000640)=""/4096}) r18 = syz_open_dev$video(&(0x7f0000000180), 0x10001, 0x68e42) ioctl$VIDIOC_ENUMINPUT(r18, 0xc050561a, &(0x7f00000005c0)={0x2, "1898efe1261f264e5329ea76782a971f5a1101010020c8aa5600", 0x1, 0x2, 0x3, 0xb700, 0x40412, 0x8}) 1m51.067961954s ago: executing program 40 (id=5996): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1) ioctl$BLKPG(r0, 0xc0104d03, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002140)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2800}, 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000007, 0x204031, 0xffffffffffffffff, 0x19a54000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001cc0)={r0, 0xe0, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001a00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f0000001a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f0000001ac0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001b00), &(0x7f0000001b40), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000001b80)}}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x19}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000001f00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001d00)={0x1a8, 0x0, 0x95889a4fcc7177e6, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4044040}, 0x4000040) r17 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r17, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x31}}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:insmod_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004840}, 0x4004804) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x5c, r17, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:userio_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4040000) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000040)={r1, &(0x7f0000000640)=""/4096}) r18 = syz_open_dev$video(&(0x7f0000000180), 0x10001, 0x68e42) ioctl$VIDIOC_ENUMINPUT(r18, 0xc050561a, &(0x7f00000005c0)={0x2, "1898efe1261f264e5329ea76782a971f5a1101010020c8aa5600", 0x1, 0x2, 0x3, 0xb700, 0x40412, 0x8}) 10.161645489s ago: executing program 1 (id=7990): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r7, 0x0, &(0x7f0000000800)="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", 0x789, 0x9}) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r11, 0x0, 0x0) read$sequencer(r11, &(0x7f0000000100)=""/12, 0xc) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0) 10.161156621s ago: executing program 1 (id=7991): r0 = semget$private(0x0, 0x4000000009, 0x208) r1 = socket$key(0xf, 0x3, 0x2) semop(r0, &(0x7f0000000040)=[{0x0, 0xc, 0x1000}, {0x1, 0x6, 0x2400}, {0x4, 0x9, 0xa50a64fbacbfecc8}, {0x0, 0xfff9, 0x1800}, {0x4, 0x9, 0x1800}, {0x0, 0xffa5, 0x1000}, {0x1, 0x0, 0x1000}, {0x4, 0x2203, 0x1800}, {0x0, 0xd, 0x2000}], 0x9) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) semop(r0, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/asound/card1/oss_mixer\x00', 0x242, 0x0) writev(r2, &(0x7f0000003e80)=[{0x0}, {&(0x7f0000000b00)="3bca", 0x2}], 0x2) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00', 0x0}) openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) close(r3) semop(r0, &(0x7f0000000000)=[{0x0, 0xfffb}, {0x1, 0x0, 0x800}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x1ff]) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r6 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) clock_settime(0x8d71ca88fffffffd, &(0x7f0000000000)) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f00000000c0)={0x27, &(0x7f0000000600)=[{0x1e, '\x00', @st={0x4, [{0x1, @svalue=0xc9c}, {0x3, @uvalue=0x2}, {0x3, @svalue=0x2}]}, 0x6}]}) 9.250771292s ago: executing program 1 (id=8001): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9c6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41], 0x0, [0x5, 0x4, 0x2, 0xfffc, 0x8, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) 9.247276217s ago: executing program 1 (id=8002): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x201, 0x4000003e, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f00000001c0)=[@register_looper, @enter_looper], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) (async) fanotify_init(0x200, 0x0) (async) fanotify_mark(r2, 0x201, 0x4000003e, r1, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f00000001c0)=[@register_looper, @enter_looper], 0x0, 0x0, 0x0}) (async) 9.190928283s ago: executing program 1 (id=8003): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000420000000600000008000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@float={0xf, 0x0, 0x0, 0x10, 0x8}, @fwd={0x2}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xc}, {0x5, 0x2}, {0x6, 0x2}, {0xd, 0x3}, {0x2, 0x5}, {0x8, 0x5}]}]}, {0x0, [0x30]}}, &(0x7f0000000840)=""/4096, 0x6f, 0x1000, 0x0, 0x60, 0x10000, @value=r1}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x6, 0x1000200, 0x50ac3, r0, 0x7, '\x00', 0x0, r2, 0x3, 0x8, 0x2, 0x3, @void, @value, @value=r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r6, r7, 0x25, 0x4, @val=@tcx}, 0x1c) (async, rerun: 32) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4060015}, 0x10000) (rerun: 32) 8.671519341s ago: executing program 1 (id=8012): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 8.514335591s ago: executing program 41 (id=8012): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.061464005s ago: executing program 0 (id=8035): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x28) landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x6d, 0x0) 3.060541743s ago: executing program 0 (id=8036): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000440)=0xc00) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="41040301"], 0x4) (async) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x54, r5, 0xf22, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) (async, rerun: 64) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x44, r2, 0x15a72b68565ed5d5, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (rerun: 64) 2.969386417s ago: executing program 0 (id=8037): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0xffffffab, 0x4) lchown(&(0x7f0000000080)='./file0\x00', r1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) write$P9_RLERRORu(r0, &(0x7f0000000100)={0x13, 0x7, 0x1, {{0x6, 'wlan0\x00'}, 0x3}}, 0x13) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x248, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7e}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x20c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x36, 0x1, 0x48, 0xb, 0x4406c293aa11b22e, 0x1b, 0x1, 0x30, 0x1, 0x705cf39cabb02c46, 0x18, 0x6, 0x16, 0xc, 0x36, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8372, 0x7, 0x1, 0x81, 0x9, 0x9, 0x926, 0xfffb]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x6, 0x9, 0x0, 0x1, 0x8, 0xc, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xb, 0x7, 0x1, 0x6, 0x0, 0xa, 0x7fff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x6, 0x8}, {0x0, 0x7}, {0x1, 0x7}, {0x5, 0x8}, {0x0, 0x2}, {0x0, 0x4}, {0x6, 0x1}, {0x5, 0x2}, {0x6, 0x8}, {0x1, 0x9}, {0x3, 0xa}, {0x4, 0x8}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0xa}, {0x5}, {0x0, 0xa}, {0x6, 0x5}, {0x1, 0xa}, {0x0, 0x3}, {0x7, 0x5}, {0x4, 0x2}, {0x1, 0x7}, {0x4, 0x5}, {0x0, 0x5}, {0x6, 0x5}, {0x0, 0x6}, {0x7, 0xa}, {0x1, 0x7}, {0x1}, {0x7, 0xa}, {0x0, 0x4}, {0x5, 0x8}, {0x6, 0x2}, {0x5, 0xa}, {0x0, 0x7}, {0x0, 0xa}, {0x3, 0x8}, {0x1, 0x4}, {0x5, 0x1}, {0x7, 0x8}, {0x1, 0x7}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x7, 0x3, 0xffff, 0x8, 0xff, 0x10, 0x5]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x6, 0x7}, {0x3, 0x6}, {0x5, 0x9}, {0x0, 0x9}, {0x1, 0x8}, {0x0, 0x1}, {0x3, 0x6}, {0x0, 0x3}, {0x5, 0x9}, {0x3, 0x5}, {0x2, 0x9}, {0x7, 0x6}, {0x1, 0xa}, {0x1, 0xa}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x16, 0x3, 0x9, 0x6c, 0x3, 0x30, 0x36, 0x12, 0x48, 0x1, 0x48, 0x6, 0x5, 0x12]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x5, 0x2}, {0x4, 0x6}, {0x3, 0x5}, {}, {0x2}, {0x0, 0x1}, {0x5, 0xa}, {0x6, 0xa}, {0x2, 0x8}, {0x6, 0x8}, {0x1, 0x2}, {0x1, 0x5}, {0x5, 0x6}, {0x4, 0xa}, {0x0, 0x6}, {0x7}, {0x7, 0x5}, {0x3, 0x2}, {0x3, 0x4}, {0x5, 0x2}, {0x5, 0x5}, {0x3, 0x8}, {0x7, 0x9}, {0x4, 0x4}, {0x3, 0xa}, {0x3, 0x1}, {0x2, 0x7}, {0x7, 0x7}, {0x2, 0x8}, {0x0, 0x8}, {0x3, 0x2}, {0x5}, {0x3, 0x9}, {0x4, 0x2}, {0x2, 0x2}, {0x1, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1a40, 0x3, 0x9, 0x6, 0x7, 0x5, 0x8, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x7e1, 0x3, 0x5, 0x6, 0x8, 0x4, 0x8751]}}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x7, 0x3}, {0x1, 0x3}, {0x0, 0x1}, {0x1, 0x5}, {0x4, 0x9}, {0x4, 0x7}, {0x6, 0x4}, {0x1, 0x4}, {0x0, 0x5}, {0x4, 0x6}, {0x4, 0x9}, {0x6, 0x7}, {0x7, 0x5}, {0x5, 0x9}, {0x6, 0x5}, {0x2, 0x6}, {0x6, 0x9}, {0x1, 0x1}, {0x7, 0x5}, {0x6, 0x3}, {0x7, 0x9}, {}, {0x7, 0x8}, {0x4, 0xa}, {0x5, 0x2}, {0x7, 0x1}, {0x1, 0x5}, {0x6, 0x6}, {0x7, 0x8}, {0x4, 0xa}, {0x3, 0xa}, {0x0, 0x5}, {0x3, 0x3}, {0x6, 0x8}, {0x6, 0x3}, {}, {0x3}, {0x0, 0x1}, {0x4, 0x9}, {0x4, 0x5}, {0x0, 0x6}, {0x2, 0x7}, {0x2}, {0x4, 0x5}, {0x3, 0x3}, {0x7}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x1}, {0x6}, {0x0, 0xa}, {0x3}, {0x1, 0x2}, {0x2, 0x3}, {0x2, 0x1}, {0x7}, {0x7, 0xa}, {0x7, 0x2}, {0x2, 0x1}, {0x3, 0x2}, {0x6, 0x5}, {0x5, 0x4}]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x400, 0x0, 0x0, 0x9, 0x0, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0x1b, 0x12, 0x24, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xeea, 0xe, 0x4, 0xffff, 0x7000, 0x40, 0xc, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x40, 0x5, 0x13d9, 0x0, 0x7, 0x200]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xb, 0x6c]}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0xb, 0x24, [{0x3, 0x1}, {0x1}, {0x48}, {0x12, 0x1}, {0x24, 0x1}, {0x60, 0x1}, {0x30}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x80}, 0x4004800) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f00000004c0)) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000600)={0x1, 0xd, 0x43, &(0x7f0000000580)=""/67}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x20000000) r4 = socket$unix(0x1, 0x5, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000780), 0x7, 0x18001) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f00000007c0), &(0x7f0000000800)=0x4) chdir(&(0x7f0000000840)='./file0\x00') r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000880), 0x1500, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000940)=@get={0x1, &(0x7f00000008c0)=""/90, 0x3}) setxattr$trusted_overlay_opaque(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), &(0x7f0000000a00), 0x2, 0x2) r7 = socket$rds(0x15, 0x5, 0x0) getsockopt$SO_COOKIE(r7, 0x1, 0x39, &(0x7f0000000a40), &(0x7f0000000a80)=0x8) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000bc0)={r6, r5, 0xff, 0xfb, &(0x7f0000000ac0)="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", 0x8, 0x3, 0x8, 0x3c, 0xfffa, 0x3, 0xf5, 'syz1\x00'}) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000cc0)={0x2, &(0x7f0000000c80)=[{}, {}]}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), r5) sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x401008}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, r9, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8021}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x841f}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x14000}, 0x44) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000e80)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), r5) sendmsg$TIPC_CMD_RESET_LINK_STATS(r10, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x28, r11, 0x3bb2c8a0e20b8017, 0x70bd25, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x200400c0}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001140)=[{{&(0x7f0000001000)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001080)=""/15, 0xf}], 0x1, &(0x7f0000001100)=""/47, 0x2f}, 0xffffff8d}], 0x1, 0x40, &(0x7f00000011c0)) 2.910908504s ago: executing program 0 (id=8038): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffef9, 0x0, 0x0, 0x10, 0xff}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002500)={r4, r2, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, &(0x7f0000000140), 0x6, 0x0, 0x1}}, 0x40) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x5a930, 0x11800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0xcc}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) 2.80141622s ago: executing program 0 (id=8039): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xee01}}]}, 0x28}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x8, 0x803, 0xfffffffd) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x6, 0x8880) (async) clock_nanosleep(0x7, 0x0, &(0x7f0000000040), 0x0) 2.796612877s ago: executing program 0 (id=8040): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = syz_io_uring_setup(0x1ffc, &(0x7f00000000c0)={0x0, 0xdffd, 0xf, 0x0, 0x116, 0x0, r3}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x6, &(0x7f0000002000)={0x1}) syz_open_dev$char_usb(0xc, 0xb4, 0xf7) fcntl$lock(r7, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r7, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x7fffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x4, 0x0}) syz_usb_connect$cdc_ecm(0x5, 0x11a, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x108, 0x1, 0x1, 0xe, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0x81, {{0xa, 0x24, 0x6, 0x0, 0x0, "5809a6e4f9"}, {0x5, 0x24, 0x0, 0x2390}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x2, 0x7ff, 0xe}, [@mdlm_detail={0xbe, 0x24, 0x13, 0x1, "41948e7f74d0db53d6af873e0fa07e12a1ac71231b95951ba0cee6fa25d15b9a93534611a31828e675ab639e7861a250ae8c9f0e108777771801c1ec983560fd8096d9dd38523e20b8118a172993e34d1b45628b90d668f87d710ccbbd0487dfd3c6f812b6fc38ef6b231ba7d9318cff0c36d5bd3c5a9f254b8e3961113b1c6286dbcd629287967afea4ba110ffa223d8774c7d4a0896e5c0714e764b8d0111beb17c04feb88296a072720e20bbbf83448625bc3555ed1d74df5"}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x8, 0x65}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x8, 0x1}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x5, 0x40, 0x77, 0x40}, 0x42, &(0x7f0000000180)={0x5, 0xf, 0x42, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xb, 0x9, 0x100}, @generic={0x36, 0x10, 0x2, "df613666f9893d750e2d10e52cbc1ab24c3b678d8e4751d366ddf54c83daef5d9d3edd45e7a4f0c615757d164e9b31bb9472d8"}]}, 0x6, [{0x1f, &(0x7f0000000200)=@string={0x1f, 0x3, "f02a7682a740faa4d94d756e31ce97d521d6b543c8912c90f61f62d830"}}, {0x4e, &(0x7f0000000440)=@string={0x4e, 0x3, "2338f80a3d6136294b68ee101883e745384ffa25828a887a05b6419304c28d3a4ab52fc44f903ce6cb02c4e6bb4fc2d9d67d28d1990dc5a93449debdcda72fd4c1b483860af40681865d9052"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x405}}, {0xe9, &(0x7f00000004c0)=@string={0xe9, 0x3, "2ef85438e2e01cc9f3b18256d9a1164a5eff42853cd4e508824afbf001b78cf3245ed77cb02131a86c8fb461f181a6b5d7e106dc952538c81a2d76bcb80fa08aa9c7f69be5b03d3a067b80a4d138f420849af488d0c2c99071e222f6211585ce727a4f94a549992451654fe3fdaf40cbb03868e11d005ba4ed95cb957b9ccec15972db0244bead109b4e71e92e8502a516f0c168fba820a6688b19d355cd99b3ead5ece54ad058c1b90b16414828066e2e71a0f9e872b3b5abf9078513509fecc6ffb4616c81244ea54abf2fcdec7a9c3f763ea5acb71f69676cd6b53cfa254d79406b270f75f4"}}, {0xa7, &(0x7f00000005c0)=@string={0xa7, 0x3, "afac66705831cbc4dc6187b83fcee3f20bfbd1c8a60bf4ba9866ccf95f0b067f33d32afd7eb621be3f0a00fed4afa9b79f3cfcd99fbcd11ad231e1087ba3cb88121cd72621e017abe4d02dc71e2660f4adc74493843db143ca5a24f02f954f41c1ea500c0ee94e483bcaca1715dfbbe06d7e8b969b35d0838d903b47470f06cfa7338bafc3123aa830e3f3e5992d548a72c384cc5bb14f6908f2ca2b426b91f085818f775f"}}, {0x8f, &(0x7f0000000680)=@string={0x8f, 0x3, "d6f8ebea2d162dccdad32f2f7110662e83b155ae77818d352fd01ae35e295b58fd69a7e6c731f394636dfcbcb9f2cd4e4fa9022ed3f7e3b18e7d32aea4a42781f7a264f3e6f1eb625e5335c0fc3b61b4a749e0e91317afe1d473c3e8713abfe496ca6616dd840d40a286d230612bee7ae3eddb78c7ee2f6c31fb130ffa05d21b4d1131ae062b02bd5ba40334f7"}}]}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.501614248s ago: executing program 2 (id=8046): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x13, r2, 0x9d230000) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003640)=@delchain={0x1770, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xffe0, 0x9}, {0x10, 0x3}, {0x5, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x16d8, 0x2, [@TCA_BASIC_POLICE={0x1c, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}, @TCA_BASIC_EMATCHES={0x1684, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc8}}, @TCA_EMATCH_TREE_LIST={0x1f8, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1c0, 0x1, 0x0, 0x0, {{0x30c, 0x9, 0x6}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x80}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_MATCH_DATA={0xe3, 0x5, "1c7f68b0c4443cb7707c4227b5925a6fbbae252b10419bc0b678aba0103c45ae4ccf008e55eea639da950bc7f066e4fd085bcf1a704149226884050f59d9f7c449d6026b003e067a207392f7bce63dcd1807eb5ebdf349be8fe2151296aba91a4a92c1076278727f183cf67c45795d9ad95e579328cd62934c23e10cae7c2e06bc217e7f65834739166968c1193f14da3334b7c33cd231bb36abb7da78e246b06182d695c18355c3dd813d5634cea6fd548ddd0a78d54e2d148074327d4c1886b12f4db2496eddf374ef150af48db192ec3f67d8fab52ecb36a31759a9de86"}, @TCA_EM_IPT_MATCH_DATA={0x9b, 0x5, "b02a76a192a0e00a41f052c55b90cb7738f2c796b63755048cc1a82df60cf255dd1aadae7626a8c9301678713b9e6a3cf2bef60f85e492d490717f441ca722a079aae7b7fb3125d28df2ff8e000d6b64a1197890eeeb668df35441d810affa44eaeb42bdcbec0e6cf84995d0d6432ef8b70d746b5eb227f201ab4ce4cd4f69092b4e7b893736f7523a02ddc8e67249f289e5babe6a9aab"}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xa, 0x1, 0x6c}, {0x2, 0xe5, 0x9, 0x3, 0xb, 0x2, 0x1}}}, @TCF_EM_META={0x1c, 0x3, 0x0, 0x0, {{0x1ff, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x9]}]}}]}, @TCA_EMATCH_TREE_LIST={0x268, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xd4, 0x2, 0x0, 0x0, {{0x7, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xf1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0x63, 0x5, "20d246db5dec5efece164bf9d09a07f5cdf62912772adb870694ea03a31fc90708cdb52f554bd716d32323d7468763c10267d65807642a1fd83b5a12b929b7762485dca3e6d0beee2b01365d7fef10745a8aaf3d9e1f423d9babd97f777957"}, @TCA_EM_IPT_MATCH_DATA={0x3a, 0x5, "4e310fff9748e2aaf50dcd52085fa57811cc0e55fc0812f3d1a8e990b81679d010d7d393ffb19f8f3124cfabb1e11b4b791108171ace"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2, 0x8, 0x8}, {0x4, 0x0, 0x9}}}, @TCF_EM_CONTAINER={0x54, 0x3, 0x0, 0x0, {{0xc, 0x0, 0xa3e}, "7af90ced46e3bde6d2ee7c6fc8a0f4784fdff84a7cb978175420aa447c871439e690017c797d18089314b33a9b2ef274bba718e5e76b89cb4e446d53f14695ad750702569e8d"}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x6, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}, @TCF_EM_CONTAINER={0xc8, 0x2, 0x0, 0x0, {{0xc, 0x0, 0xbb50}, "5a9a49010b725f20eebd93fc695eab4b0a5c77cf4528d1286760b8ce03e83b17500015a4a87cd0bf0aaaa6b9f3932c37517571446ee2779fa6a3dea99dea1f247b2bb309bcdc7dd7b47b358c87a7f1adfebdee054e6af092174e3e57ea549e4ced6fe5ff6a107d1ccc1d25f4dc1336a1772d3af365431e43772b63ec6851efeb40a18d1ad1d583dd67b50aee47a546fe4f0d2fd39d844103dcde0334a08ff6a517074fa22af011cb11ee29c1c819aa5ededa2c7b956fb0d264"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x3, 0x2}, {0x6, 0x1, 0x3, 0x7ff}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x3, 0x56bc}, {0x8, 0x3, 0x8000, 0x926}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x2}, {0x1, 0xf8, 0xff01, 0x5, 0xe, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x3, 0x8, 0x4000}, {0xffffffffffffffff, 0x2, 0x6}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x0, 0x1, 0x6}, {0x6, 0x7, 0x8, 0x6, 0x3, 0x1, 0x1}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x451, 0x2, 0xffff}, {0x7, 0x1, 0x2, '\b'}}}]}, @TCA_EMATCH_TREE_LIST={0x1188, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x148, 0x2, 0x0, 0x0, {{0x10}, [@TCA_EM_IPT_MATCH_DATA={0x12e, 0x5, "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"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPT={0x103c, 0x1, 0x0, 0x0, {{0x6, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "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"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x654, 0x3, 0x3}, {0x1, 0x9, 0x8, 0x3}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x200, 0x3, 0x2}, {0xf, 0x6e4844f4, 0xffff, 0x8}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5, 0x7, 0x1000}, {{0x3, 0x0, 0x1}, {0x2, 0x1, 0x1}}}}]}]}, @TCA_BASIC_POLICE={0x34, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000001}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xc1a6}, @filter_kind_options=@f_route={{0xa}, {0x40, 0x2, [@TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}, @TCA_ROUTE4_POLICE={0x18, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x81}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1ff}]}, @TCA_ROUTE4_POLICE={0xc, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xed}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x1770}, 0x1, 0x0, 0x0, 0x20044805}, 0x4000080) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) accept$ax25(r4, 0x0, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x4, 0xff, 0x8000, 0x1, 0x7fff, 0x81, 0x1000, 0xf2}, 0x20) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x4, 0xff, 0x8000, 0x1, 0x7fff, 0x81, 0x1000, 0xf2}, 0x20) r5 = socket$can_j1939(0x1d, 0x2, 0x7) readv(r5, &(0x7f0000000d80)=[{&(0x7f0000000080)=""/61, 0x3d}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6}, 0x18) (async) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6}, 0x18) sendmmsg(r5, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}, {&(0x7f0000000380)="c4be5aa278c6e9cf5a3388fec514b113ec649c1aeccf82a26664c6a0943b8f210eb492e4cad744501e19c5247ce03ffbabfe55f3fa", 0x35}], 0x2}}], 0x1, 0x20008994) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 791.113462ms ago: executing program 3 (id=8053): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) fstatfs(r2, &(0x7f0000000200)=""/170) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}}, 0x4) 786.747661ms ago: executing program 3 (id=8054): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x2020) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x100, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x28000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xfb8d14993e15ceee}, 0x1) 690.877436ms ago: executing program 3 (id=8055): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$nci(r0, &(0x7f0000000080)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x1, 0x2, 0x0, 0x4, "ebf82c0fc8f70dcd3219d9c03a14d4b7a3a6817968445fbc5a491d398c"}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) gettid() (async, rerun: 64) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_delete(r2) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x4a011, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c05}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x3}]}}}]}, 0x4c}}, 0x12) 621.970179ms ago: executing program 2 (id=8056): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x14}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003e00)={0x14, 0x14, 0x1, 0x5, 0x70bd2b, 0x25dfdbfd, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20040804) 621.451609ms ago: executing program 2 (id=8057): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x83, 0x0) mmap$fb(&(0x7f0000a73000/0x1000)=nil, 0x1000, 0x9, 0x8010, r0, 0x100000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007c9"], 0x0, 0x52, 0x0, 0x1}, 0x28) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x2a, 0x8, 0x61, 0x7, 0x4, 0x7, 0xf, 0x0, 0x64, 0x5, 0x0, 0x8000, 0x0, 0x5c, 0xa0, 0xdf5, [0x7, 0x4]}}) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000180)={0x0, 0xfb, 0xa0, 0x1, 0x6, "232f1b091d007b4f503b38c3c622c099", "456958250b8b5011e3fa18176e56248d2ac9979bd946ecbb06ced8c6c1d568037d631f6aa60a25217801d8602f5c23b1cb7bb5517d79fc3871ff381180b77212cc44630f2b74025fc4753c923a89f04cdd471b75ffede9086878bac72111cf34bcfa58610670ae8bc1128765fd4529b03afe6a71fc42ffba58ae49bf0dcaab2551cca279a20466b2f55488"}, 0xa0, 0x0) 511.613692ms ago: executing program 3 (id=8058): r0 = socket(0x10, 0x3, 0x0) (async) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x260) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0x9362, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r2, &(0x7f0000002480)={0x2020}, 0x2020) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r4, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8001, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) 501.721812ms ago: executing program 3 (id=8059): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x2d0512606aa52b80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f3048b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x64}], 0x1, 0x62, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r2, 0x20, &(0x7f0000000180)={&(0x7f0000000400)=""/144, 0x90, 0x0, &(0x7f00000004c0)=""/225, 0xe1}}, 0x10) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0x0, 0x4}, 0xc) r6 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r7 = fcntl$dupfd(r6, 0x0, r6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) write$binfmt_script(r7, &(0x7f0000000100), 0xfffffd9d) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x510, 0x1f0, 0x0, 0x148, 0x1f0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x8000000, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000040)={0x0, 0x0, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0x12, &(0x7f0000000b40)=ANY=[@ANYRES8=r3, @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000852000000200000018120000", @ANYRES32=r2, @ANYRES8=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500040086000000181200000e46d5ed99ff5cf809000000ebf40efea83e6e722b2a77017b4dae17b2e6", @ANYRES32=r2, @ANYRES64=r2, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000080)='syzkaller\x00', 0xfffffffb, 0xc1, &(0x7f0000000c00)=""/193, 0x41100, 0x1, '\x00', 0x0, @flow_dissector=0x11, r2, 0x8, &(0x7f00000000c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xf, 0x7, 0x9}, 0x10, r4, r3, 0x0, &(0x7f0000000640)=[r2, r5, r2, r5, r7], 0x0, 0x10, 0xdf0d}, 0x94) 491.853586ms ago: executing program 2 (id=8060): futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') move_pages(0x0, 0x2, &(0x7f00000017c0)=[&(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil], &(0x7f0000002140)=[0x1], &(0x7f0000001840), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(0x0, 0x18b, 0x0, 0x0, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x40046103, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x40046103, 0x0) userfaultfd(0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0xe5}, 0x2) 361.713384ms ago: executing program 5 (id=8061): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f00000000c0)={0x7, 'pimreg1\x00', {0xffffff80}, 0x2}) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000180)={0x7, 0x7, 0x4}, &(0x7f0000000200)=0x28) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x70, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x6558}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @multicast1}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x7}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x7f}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 299.33686ms ago: executing program 5 (id=8062): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @empty}, 0x800, 0x0, 0xff, 0x1, 0x0, 0xfffd}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'pimreg1\x00'}) r1 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x400, 0x0, 0xfffffffc}, &(0x7f00000001c0), &(0x7f00000005c0)) syz_io_uring_setup(0xbbd, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0xe3, 0x0, r1}, 0x0, 0x0) 294.813565ms ago: executing program 5 (id=8063): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$selinux_access(r2, 0x0, 0x56) pread64(r2, 0x0, 0x0, 0x9) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%+9llu \x00'}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0xb7}}, @union={0xc, 0x8, 0x0, 0x5, 0x0, 0x7, [{0xc, 0x4, 0x7fff}, {0xc, 0x5}, {0xf, 0x5, 0x4}, {0x5, 0x3, 0x94}, {0x10, 0x5, 0x28e}, {0xe, 0x3, 0x70}, {0x4, 0x1, 0xa}, {0x0, 0x2, 0x4}]}]}, {0x0, [0x0, 0x0, 0x5f, 0x5f, 0x61, 0x30]}}, &(0x7f0000000280)=""/46, 0xa4, 0x2e, 0x0, 0xfcf}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x80000001, 0x40, 0x4, 0x22058, r3, 0x6, '\x00', r1, r4, 0x4, 0x3, 0x5, 0x9}, 0x50) sendmmsg(r0, &(0x7f00000014c0)=[{{&(0x7f0000000040)=@can={0x1d, r1}, 0x80, 0x0}}], 0x1, 0xf5) 231.453081ms ago: executing program 3 (id=8064): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000008c0)=0x400002) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x26, 0xd, 0x4}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 229.489885ms ago: executing program 5 (id=8065): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = socket(0xa, 0x801, 0x0) getsockopt(r0, 0x29, 0x40, &(0x7f0000000000)=""/84, &(0x7f0000001ffc)=0x54) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0xff, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000200)={'xfrm0\x00', 0x3}) socket(0x200000000000011, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) set_mempolicy(0x4, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000700)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000780)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r4}}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) open(&(0x7f0000000000)='./file0\x00', 0x38000, 0x30) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r6, r5, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1001, 0x1}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) 228.31944ms ago: executing program 2 (id=8066): r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) (async, rerun: 32) r1 = getuid() (rerun: 32) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async, rerun: 64) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 64) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff92806dc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) (async) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r2, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x150, 0x0, 0xfffffffffffffff9, [{{0x2, 0x2, 0x31a6, 0x3, 0x8c, 0x2, {0x4, 0x7fff, 0x9, 0x1000, 0x8, 0x7f, 0x40, 0xc4, 0x4, 0x2000, 0x9, r4, 0x0, 0x7b, 0x9}}, {0x4, 0x5, 0x2, 0x3, 'fd'}}, {{0x4, 0x8000000000000000, 0x7, 0x1, 0x2, 0x5ae, {0x2, 0x7, 0x81, 0xe12b, 0x10001, 0xa000000000, 0x4, 0x8000, 0x0, 0xa000, 0x10000, r4, r5, 0x7, 0x3}}, {0x4, 0x8, 0x2, 0xc, 'fd'}}]}, 0x0, 0x0, 0x0}) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r6, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x6, {0x6, 0x2, 0xffffffffffffeffe, 0xffffffffffbffffd, 0x400000, 0x0, {0x40, 0x8, 0xb, 0xfffc, 0x3, 0x1, 0x0, 0xfffffffd, 0x120, 0x2000, 0x0, r7, r8, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) getresgid(0x0, &(0x7f0000000000)=0x0, 0x0) (rerun: 32) setregid(0x0, r9) (async, rerun: 32) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) setpgid(r10, r10) (async) setpgid(0x0, r10) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x0, r1, r5, r7, r9, 0x83, 0x1a76}, 0xba, 0xfffffffffffffffe, 0x2, 0x4, 0xffffffffffffffff, r10, 0x7}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = socket(0x40000000015, 0x5, 0x0) connect$inet(r11, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) bind$inet(r11, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async, rerun: 32) sendmsg$xdp(r11, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240448d0}, 0x0) (rerun: 32) pselect6(0x40, &(0x7f00000019c0)={0x3, 0x3, 0x6, 0x3bb, 0x9, 0xea, 0xfffffffffffffff7, 0x5}, &(0x7f0000001a00)={0x2, 0x7, 0x800, 0x7, 0xdd3, 0x40, 0x100000000, 0xa}, &(0x7f0000001a40)={0x8, 0x8, 0xffffffffffffffff, 0x7, 0xee, 0x3ff, 0x2, 0x5}, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x0, 0x0) 108.763399ms ago: executing program 5 (id=8067): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x44000, 0x0) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000080)=""/207) 420.733µs ago: executing program 5 (id=8068): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x51848a8190276d07, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)={0x0, 0x0}, 0x10) ftruncate(0xffffffffffffffff, 0x800799c) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r2, &(0x7f0000006240)='-1\x00', 0x3) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e33, 0xffffffff, @mcast2, 0x5}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfeff) r3 = syz_io_uring_setup(0x476b, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3c1}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'batadv_slave_1\x00', &(0x7f0000000540)=@ethtool_cmd={0x1e, 0xdd, 0x8394, 0xfa0d, 0x6, 0xfc, 0x2, 0xa, 0x5, 0x11, 0x5, 0x2, 0xb49d, 0xfa, 0x0, 0x10, [0x5, 0x8]}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) shutdown(r1, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x3}]}}]}, 0x3c}}, 0x2000400c) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21ac6, 0x51a23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 0s ago: executing program 2 (id=8069): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x60) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000480)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x70, 0x78]}}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@appraise}, {@hash}, {@smackfsdef={'smackfsdef', 0x3d, 'lowerdir'}}, {@obj_role={'obj_role', 0x3d, 'upperdir'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '@{#/\\/-'}}, {@uid_eq}, {@appraise}]}) clock_gettime(0x0, &(0x7f000000af40)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f000000ad00)=[{{&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f00000001c0)}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000000640)=""/70, 0x46}, {&(0x7f00000006c0)=""/246, 0xf6}, {&(0x7f00000007c0)=""/237, 0xed}, {&(0x7f00000008c0)=""/163, 0xa3}, {&(0x7f0000000a40)=""/146, 0x92}], 0x7, &(0x7f0000000b00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000c00)=""/75, 0x4b}, {&(0x7f0000000c80)=""/29, 0x1d}, {&(0x7f0000000cc0)=""/90, 0x5a}, {&(0x7f0000000d40)}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000d80)=""/64, 0x40}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/252, 0xfc}], 0x8, &(0x7f0000000f40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000000f80), 0x6e, &(0x7f00000044c0)=[{&(0x7f0000001000)=""/225, 0xe1}, {&(0x7f0000001100)=""/30, 0x1e}, {&(0x7f0000001140)=""/97, 0x61}, {&(0x7f00000011c0)=""/71, 0x47}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000001240)=""/167, 0xa7}, {&(0x7f0000001300)=""/166, 0xa6}, {&(0x7f0000004400)=""/64, 0x40}, {&(0x7f0000004440)=""/65, 0x41}], 0x9, &(0x7f0000004580)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x138}}, {{&(0x7f00000046c0), 0x6e, &(0x7f0000004900)=[{&(0x7f0000004740)=""/1, 0x1}, {&(0x7f0000004780)=""/16, 0x10}, {&(0x7f00000047c0)=""/126, 0x7e}, {&(0x7f0000004840)=""/138, 0x8a}], 0x4, &(0x7f0000004940)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000004a00)=@abs, 0x6e, &(0x7f0000004b80)=[{&(0x7f0000004a80)=""/10, 0xa}, {&(0x7f0000004ac0)=""/190, 0xbe}], 0x2}}, {{&(0x7f0000004bc0), 0x6e, &(0x7f0000005000)=[{&(0x7f0000004c40)=""/233, 0xe9}, {&(0x7f0000004d40)=""/169, 0xa9}, {&(0x7f0000004e00)=""/101, 0x65}, {&(0x7f0000004e80)=""/75, 0x4b}, {&(0x7f0000004f00)=""/18, 0x12}, {&(0x7f0000004f40)=""/176, 0xb0}], 0x6}}, {{&(0x7f0000005080)=@abs, 0x6e, &(0x7f00000083c0)=[{&(0x7f0000005100)=""/198, 0xc6}, {&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000006200)=""/74, 0x4a}, {&(0x7f0000006280)=""/47, 0x2f}, {&(0x7f00000062c0)=""/39, 0x27}, {&(0x7f0000006300)=""/54, 0x36}, {&(0x7f0000006340)=""/25, 0x19}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000007380)=""/5, 0x5}, {&(0x7f00000073c0)=""/4096, 0x1000}], 0xa, &(0x7f0000008480)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000084c0), 0x6e, &(0x7f0000008700)=[{&(0x7f0000008540)=""/225, 0xe1}, {&(0x7f0000008640)=""/147, 0x93}], 0x2, &(0x7f0000008740)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60}}, {{&(0x7f00000087c0)=@abs, 0x6e, &(0x7f000000abc0)=[{&(0x7f0000008840)=""/61, 0x3d}, {&(0x7f0000008880)=""/182, 0xb6}, {&(0x7f0000008940)=""/118, 0x76}, {&(0x7f00000089c0)=""/159, 0x9f}, {&(0x7f0000008a80)=""/4096, 0x1000}, {&(0x7f0000009a80)=""/4096, 0x1000}, {&(0x7f000000aa80)=""/24, 0x18}, {&(0x7f000000aac0)=""/122, 0x7a}, {&(0x7f000000ab40)=""/71, 0x47}], 0x9, &(0x7f000000ac80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}], 0x9, 0x40000000, &(0x7f000000af80)={r1, r2+60000000}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@verity_on}]}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r4, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r5 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000180), 0x43) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') kernel console output (not intermixed with test programs): 2052 sclass=netlink_route_socket pid=27648 comm=syz.2.6235 [ 557.412378][T27661] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 557.782397][T27674] PKCS7: Unknown OID: [4] 0.38.35.36.951720.33.17 [ 557.784523][T27674] PKCS7: Only support pkcs7_signedData type [ 557.957103][T27692] fuse: Unknown parameter 'fd<0x0000000000000003' [ 557.957357][T27693] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 558.069961][T27703] netlink: 'syz.0.6256': attribute type 1 has an invalid length. [ 558.094615][T27703] 8021q: adding VLAN 0 to HW filter on device bond1 [ 558.104538][T27705] mac80211_hwsim hwsim49 wlan0: entered allmulticast mode [ 558.119867][T27705] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 558.171337][T27723] bridge_slave_1: left promiscuous mode [ 558.174007][T27723] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.253420][T27734] trusted_key: encrypted_key: insufficient parameters specified [ 558.254491][T27732] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 558.258777][T27734] trusted_key: encrypted_key: insufficient parameters specified [ 558.262518][T27735] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 558.266192][ T5931] Bluetooth: hci6: command tx timeout [ 558.271927][T27732] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 558.369206][ T10] IPVS: starting estimator thread 0... [ 558.465686][T27750] IPVS: using max 43 ests per chain, 103200 per kthread [ 558.605814][T27763] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 558.608388][T27763] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 558.611010][T27763] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 558.613472][T27763] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 559.316420][T27781] __nla_validate_parse: 63 callbacks suppressed [ 559.316433][T27781] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6279'. [ 559.353863][T27784] netlink: 'syz.0.6280': attribute type 3 has an invalid length. N [5„&¬¸÷–O]È…!Ùš™KÞqÖ¤¥®1¹à¯à þ±¦é[ 559.782685][T27816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6288'. [ 559.858063][T27821] kvm: user requested TSC rate below hardware speed [ 560.189946][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 560.189960][ T40] audit: type=1326 audit(2000000571.804:19046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27834 comm="syz.1.6294" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4a39c629 code=0x7ffc0000 [ 560.209708][ T40] audit: type=1326 audit(2000000571.804:19047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27834 comm="syz.1.6294" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e4a35cece code=0x7ffc0000 [ 560.227540][ T40] audit: type=1326 audit(2000000571.804:19048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27834 comm="syz.1.6294" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4a39c629 code=0x7ffc0000 [ 560.232672][T27836] 9p: Could not find request transport: vie=)@) [ 560.246474][ T40] audit: type=1326 audit(2000000571.804:19049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27834 comm="syz.1.6294" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e4a39c629 code=0x7ffc0000 [ 560.255405][ T40] audit: type=1326 audit(2000000571.804:19050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27834 comm="syz.1.6294" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4a39c629 code=0x7ffc0000 [ 560.263533][ T40] audit: type=1326 audit(2000000571.804:19051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27834 comm="syz.1.6294" exe="/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5e4a39c629 code=0x7ffc0000 [ 560.272172][ T40] audit: type=1326 audit(2000000571.854:19052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27834 comm="syz.1.6294" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4a39c629 code=0x7ffc0000 [ 560.281166][ T40] audit: type=1326 audit(2000000571.854:19053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27834 comm="syz.1.6294" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e4a35cece code=0x7ffc0000 [ 560.295710][ T40] audit: type=1326 audit(2000000571.854:19054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27834 comm="syz.1.6294" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4a39c629 code=0x7ffc0000 [ 560.303410][ T40] audit: type=1326 audit(2000000571.854:19055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27834 comm="syz.1.6294" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4a39c629 code=0x7ffc0000 [ 560.309342][T27841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6295'. [ 560.463634][T27844] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6296'. [ 560.468431][T27848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6296'. [ 560.471426][T27848] netlink: 'syz.1.6296': attribute type 5 has an invalid length. [ 560.473997][T27848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6296'. [ 560.492192][T25814] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.496047][T25814] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.499770][T25814] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.503407][T25814] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.604910][T27853] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6298'. [ 560.717092][T27861] use of bytesused == 0 is deprecated and will be removed in the future, [ 560.720181][T27861] use the actual size instead. [ 561.067217][T27877] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 561.189806][T27890] tmpfs: Bad value for 'mpol' [ 561.250790][T27895] netlink: 'syz.1.6308': attribute type 15 has an invalid length. [ 561.341108][T27898] netlink: 'syz.1.6309': attribute type 1 has an invalid length. [ 561.344076][T27898] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6309'. [ 561.347779][T27898] netlink: 658 bytes leftover after parsing attributes in process `syz.1.6309'. [ 561.350866][T27898] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6309'. [ 561.512057][T27907] fuse: Bad value for 'fd' [ 561.811124][T27921] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=27921 comm=syz.1.6317 [ 562.592516][T27959] new mount options do not match the existing superblock, will be ignored [ 562.711467][T27969] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 562.725334][T27969] overlayfs: missing 'lowerdir' [ 562.789637][T27972] fuse: Bad value for 'fd' [ 562.865857][T27983] tipc: Started in network mode [ 562.868158][T27983] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 562.871947][T27983] tipc: Enabling of bearer rejected, failed to enable media [ 562.913968][T27986] netlink: 'syz.1.6336': attribute type 1 has an invalid length. [ 563.165147][T27996] IPv6: syztnl0: Disabled Multicast RS [ 563.563773][T28010] orangefs_mount: mount request failed with -4 [ 563.910099][T28034] netlink: 'syz.2.6351': attribute type 21 has an invalid length. [ 564.739626][T28051] overlayfs: failed to resolve './file1': -2 [ 565.188177][T28056] lo speed is unknown, defaulting to 1000 [ 565.291460][T28056] lo speed is unknown, defaulting to 1000 [ 565.387435][T28062] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.410620][T28062] 8021q: adding VLAN 0 to HW filter on device bond1 [ 565.417966][T28062] __nla_validate_parse: 135 callbacks suppressed [ 565.417984][T28062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6359'. [ 565.424470][T28062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6359'. [ 565.645400][T28074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6363'. [ 565.652438][T28075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6363'. [ 565.655965][T28076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6363'. [ 565.671730][T28078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6364'. [ 565.714946][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 565.714965][ T40] audit: type=1400 audit(2000000577.324:19079): avc: denied { ioctl } for pid=28073 comm="syz.0.6363" path="socket:[135133]" dev="sockfs" ino=135133 ioctlcmd=0x54a5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 565.729343][T28082] /dev/sg0: Can't lookup blockdev [ 565.828885][T28094] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 565.831513][T28094] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 565.834179][T28094] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 565.913612][T28106] lo speed is unknown, defaulting to 1000 [ 566.036617][T28108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53843 sclass=netlink_route_socket pid=28108 comm=syz.3.6372 [ 566.049744][T28125] team0 (unregistering): Port device team_slave_0 removed [ 566.055671][T28125] team0 (unregistering): Port device team_slave_1 removed [ 566.062621][T28106] lo speed is unknown, defaulting to 1000 [ 566.141898][ T40] audit: type=1400 audit(2000000577.754:19080): avc: denied { accept } for pid=28129 comm="syz.2.6380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 566.231313][T28134] overlayfs: failed to clone upperpath [ 566.324385][ T40] audit: type=1400 audit(2000000577.934:19081): avc: denied { ioctl } for pid=28152 comm="syz.0.6388" path="socket:[139267]" dev="sockfs" ino=139267 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 566.493719][T28161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6391'. [ 566.794860][ T40] audit: type=1400 audit(2000000578.404:19082): avc: denied { write } for pid=28164 comm="syz.3.6392" path="socket:[138290]" dev="sockfs" ino=138290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 566.820096][ T40] audit: type=1400 audit(2000000578.434:19083): avc: denied { unmount } for pid=26529 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 566.932672][T28177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6396'. [ 566.951038][T28172] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.986794][ T5931] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 567.033676][ T5931] Bluetooth: hci6: Injecting HCI hardware error event [ 567.049467][ T5931] Bluetooth: hci6: hardware error 0x00 [ 567.184715][T28190] lo speed is unknown, defaulting to 1000 [ 567.234910][T28191] netlink: 45 bytes leftover after parsing attributes in process `syz.1.6399'. [ 567.278042][T28190] lo speed is unknown, defaulting to 1000 [ 567.393830][T28194] overlayfs: failed to clone upperpath [ 567.936866][T28213] netlink: 'syz.1.6406': attribute type 10 has an invalid length. [ 567.993697][T28213] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 568.041491][T28216] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.045130][T28216] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.048061][T28216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.055045][T28216] bridge_slave_0: left allmulticast mode [ 568.057309][T28216] bridge_slave_0: left promiscuous mode [ 568.059734][T28216] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.071676][T28216] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 568.138268][T28222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6408'. [ 568.207831][ T40] audit: type=1400 audit(2000000579.824:19084): avc: denied { ioctl } for pid=28224 comm="syz.1.6410" path="socket:[136079]" dev="sockfs" ino=136079 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 568.296656][T28234] sctp: [Deprecated]: syz.0.6413 (pid 28234) Use of int in maxseg socket option. [ 568.296656][T28234] Use struct sctp_assoc_value instead [ 568.994535][T28272] netlink: 'syz.0.6424': attribute type 10 has an invalid length. [ 568.997877][T28272] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 569.001109][T28272] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 569.121222][T28276] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 569.146221][ T5931] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 569.158401][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.412575][ T40] audit: type=1400 audit(2000000581.024:19085): avc: denied { name_bind } for pid=28296 comm="syz.0.6433" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 569.424265][ T40] audit: type=1400 audit(2000000581.024:19086): avc: denied { name_bind } for pid=28296 comm="syz.0.6433" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 569.459565][T28300] netlink: 'syz.3.6434': attribute type 9 has an invalid length. [ 569.538291][T28314] overlayfs: failed to clone upperpath [ 569.576794][ T40] audit: type=1400 audit(2000000581.184:19087): avc: denied { write } for pid=28315 comm="syz.1.6439" lport=43272 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 569.607555][T28322] netlink: 'syz.3.6438': attribute type 3 has an invalid length. [ 569.914580][T28335] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 569.973295][ T40] audit: type=1400 audit(2000000581.584:19088): avc: denied { ioctl } for pid=28341 comm="syz.0.6448" path="socket:[138391]" dev="sockfs" ino=138391 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 569.980469][T28346] bond0: (slave sit0): Error: Device type is different from other slaves [ 570.028806][T28349] overlayfs: failed to clone upperpath [ 570.233041][ T10] IPVS: starting estimator thread 0... [ 570.323399][T28377] ip6tnl1: entered promiscuous mode [ 570.325919][T28375] IPVS: using max 43 ests per chain, 103200 per kthread [ 570.482385][T28383] overlayfs: failed to clone upperpath [ 570.713546][T28390] netlink: 'syz.0.6461': attribute type 1 has an invalid length. [ 570.717850][T28390] netlink: 'syz.0.6461': attribute type 2 has an invalid length. [ 570.767005][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 570.767018][ T40] audit: type=1400 audit(2000000582.384:19090): avc: denied { create } for pid=28384 comm="syz.1.6460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 570.780289][T28392] mac80211_hwsim hwsim50 wlan1: entered allmulticast mode [ 570.784419][T28394] IPVS: length: 24 != 122818596504 [ 571.036290][T28406] netlink: 'syz.0.6466': attribute type 2 has an invalid length. [ 571.133343][T28411] overlayfs: failed to clone upperpath [ 571.273625][T28418] lo speed is unknown, defaulting to 1000 [ 571.419393][T28418] lo speed is unknown, defaulting to 1000 [ 571.875909][ T40] audit: type=1400 audit(2000000583.494:19091): avc: denied { read write } for pid=28439 comm="syz.0.6477" name="file0" dev="tmpfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 571.888225][ T40] audit: type=1400 audit(2000000583.494:19092): avc: denied { open } for pid=28439 comm="syz.0.6477" path="/186/file0" dev="tmpfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 571.935652][ T40] audit: type=1400 audit(2000000583.554:19093): avc: denied { cmd } for pid=28439 comm="syz.0.6477" path="/186/file0" dev="tmpfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 572.105308][T28453] overlayfs: failed to resolve './file0': -2 [ 572.163050][ T40] audit: type=1400 audit(2000000583.774:19094): avc: denied { ioctl } for pid=28454 comm="syz.1.6481" path="socket:[139627]" dev="sockfs" ino=139627 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 572.276638][ T5931] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 572.503770][T28470] hub 6-0:1.0: USB hub found [ 572.507392][T28470] hub 6-0:1.0: 1 port detected [ 572.550484][ T40] audit: type=1400 audit(2000000584.164:19095): avc: denied { accept } for pid=28471 comm="syz.3.6487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 572.766599][T28481] 8021q: adding VLAN 0 to HW filter on device bond2 [ 572.773186][T28481] __nla_validate_parse: 9 callbacks suppressed [ 572.773200][T28481] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6490'. [ 572.853550][ T40] audit: type=1400 audit(2000000584.464:19096): avc: denied { create } for pid=28487 comm="syz.3.6493" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 572.854505][T28488] (syz.3.6493,28488,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 573.019937][T28483] syz.2.6491 (28483): drop_caches: 1 [ 573.156982][T28506] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 573.159751][T28506] cramfs: wrong magic [ 573.221446][T28515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6501'. [ 573.227398][T28515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6501'. [ 573.232864][ T40] audit: type=1400 audit(2000000584.844:19097): avc: denied { create } for pid=28511 comm="syz.2.6502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 573.243286][ T40] audit: type=1400 audit(2000000584.844:19098): avc: denied { create } for pid=28511 comm="syz.2.6502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 573.372749][ T40] audit: type=1400 audit(2000000584.984:19099): avc: granted { setsecparam } for pid=28525 comm="syz.2.6506" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 573.495684][T28535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6509'. [ 573.539650][T28539] overlayfs: failed to resolve './file1': -2 [ 573.569440][T28543] input: syz0 as /devices/virtual/input/input57 [ 573.582536][T28545] fuse: Bad value for 'fd' [ 573.717609][T28554] netlink: 27 bytes leftover after parsing attributes in process `syz.1.6516'. [ 573.717630][T28555] netlink: 27 bytes leftover after parsing attributes in process `syz.1.6516'. [ 573.730266][T28554] 9p: Bad value for 'wfdno' [ 573.749226][T28557] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 574.035757][T28571] overlayfs: failed to resolve './file1': -2 [ 574.100016][T28582] trusted_key: encrypted_key: master key parameter is missing [ 574.151628][T28586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6524'. [ 574.163579][T28589] openvswitch: netlink: Flow actions attr not present in new flow. [ 574.219579][T28591] fuse: Bad value for 'fd' [ 574.309471][T28605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6532'. [ 574.347101][T28608] overlayfs: failed to resolve './file1': -2 [ 574.364548][T28611] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6533'. [ 574.523704][T28618] vlan0: entered promiscuous mode [ 574.535364][T28618] bridge0: entered promiscuous mode [ 574.622435][T28635] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 574.741179][T28644] qnx6: unable to set blocksize [ 574.932381][T28658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6546'. [ 575.189879][T28688] netlink: 'syz.1.6554': attribute type 10 has an invalid length. [ 575.207181][T28688] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 575.261475][T28690] syz.3.6556: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 575.269283][T28688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.277114][T28688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.284539][T28688] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 575.294981][T28688] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 575.300449][T28688] bond0 (unregistering): Released all slaves [ 575.395793][T28697] overlay: filesystem on ./bus not supported [ 575.473272][T28699] can: request_module (can-proto-0) failed. [ 575.599542][T28711] netlink: 'syz.0.6563': attribute type 1 has an invalid length. [ 575.602464][T28711] netlink: 'syz.0.6563': attribute type 4 has an invalid length. [ 575.762332][T28730] lo speed is unknown, defaulting to 1000 [ 575.893109][T28730] lo speed is unknown, defaulting to 1000 [ 575.980672][T28734] netlink: 'syz.1.6570': attribute type 13 has an invalid length. [ 576.006970][T28734] gretap0: refused to change device tx_queue_len [ 576.009685][T28734] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 576.079197][T28736] ip6gre1: entered promiscuous mode [ 576.081384][T28736] ip6gre1: entered allmulticast mode [ 576.350908][T28746] netlink: 'syz.0.6574': attribute type 30 has an invalid length. [ 576.461207][T28753] netlink: 'syz.0.6576': attribute type 13 has an invalid length. [ 576.475383][T25791] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.479488][T25791] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.483715][T25791] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.486260][T28753] netlink: 'syz.0.6576': attribute type 13 has an invalid length. [ 576.491817][T25791] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.807792][T28761] overlay: Unknown parameter 'dont_hash' [ 577.475654][T28794] overlayfs: failed to clone upperpath [ 577.513087][T28796] overlayfs: failed to clone upperpath [ 577.586806][T28801] netlink: 'syz.1.6591': attribute type 3 has an invalid length. [ 577.950845][T28817] __nla_validate_parse: 9 callbacks suppressed [ 577.950867][T28817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6597'. [ 577.963880][T28815] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6596'. [ 577.969502][T28817] syzkaller0: entered promiscuous mode [ 577.971958][T28817] syzkaller0: entered allmulticast mode [ 577.987219][T28820] fuse: Bad value for 'fd' [ 578.046831][T28820] netlink: 'syz.0.6598': attribute type 4 has an invalid length. [ 578.113356][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 578.113376][ T40] audit: type=1400 audit(2000000589.724:19108): avc: denied { accept } for pid=28827 comm="syz.0.6600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 578.163237][T28835] overlayfs: failed to clone lowerpath [ 578.167211][T21031] udevd[21031]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 578.307078][T28842] tmpfs: Bad value for 'mpol' [ 578.329100][T28849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6607'. [ 578.393291][ T40] audit: type=1400 audit(2000000590.004:19109): avc: denied { lock } for pid=28852 comm="syz.3.6609" path="socket:[141460]" dev="sockfs" ino=141460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 578.454868][ T40] audit: type=1400 audit(2000000590.064:19110): avc: denied { bind } for pid=28856 comm="syz.3.6610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 578.466230][T28851] kvm: kvm [28850]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 578.469575][T28851] kvm: kvm [28850]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 578.483965][ T40] audit: type=1400 audit(2000000590.094:19111): avc: denied { execute } for pid=28850 comm="syz.2.6608" path="/selinux/avc/cache_stats" dev="selinuxfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 578.497078][T28851] kvm: kvm [28850]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 578.526970][T28862] lo speed is unknown, defaulting to 1000 [ 578.529361][T28851] kvm: kvm [28850]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0xfffffc18 [ 578.533783][T28851] kvm: kvm [28850]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0xfffffc18 [ 578.555596][T28865] netlink: 'syz.2.6608': attribute type 8 has an invalid length. [ 578.579564][ T5931] Bluetooth: hci3: unexpected event 0x04 length: 7 < 10 [ 578.581171][T28851] netlink: 165 bytes leftover after parsing attributes in process `syz.2.6608'. [ 578.640457][T28862] lo speed is unknown, defaulting to 1000 [ 578.703125][T28867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6612'. [ 578.811182][T28881] openvswitch: netlink: Duplicate key (type 6). [ 578.934127][T28895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=28895 comm=syz.1.6619 [ 578.942006][T28896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6618'. [ 578.943526][T28897] kAFS: No cell specified [ 578.955533][ T40] audit: type=1400 audit(2000000590.564:19112): avc: denied { ioctl } for pid=28892 comm="syz.3.6618" path="socket:[139116]" dev="sockfs" ino=139116 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 579.026230][T28905] 8021q: adding VLAN 0 to HW filter on device bond2 [ 579.039238][T28905] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6622'. [ 579.046244][T28905] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28905 comm=syz.3.6622 [ 579.121653][T28913] random: crng reseeded on system resumption [ 579.133145][T28916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6626'. [ 579.193839][ T40] audit: type=1400 audit(2000000590.804:19113): avc: denied { ioctl } for pid=28912 comm="syz.3.6625" path="/136/file0/file0" dev="fuse" ino=67 ioctlcmd=0x542d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 579.548104][T28950] lo speed is unknown, defaulting to 1000 [ 579.565435][T28953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6637'. [ 579.630469][T28956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6637'. [ 579.701071][T28950] lo speed is unknown, defaulting to 1000 [ 579.752900][T28956] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28956 comm=syz.0.6637 [ 579.798924][T28972] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 579.910219][T28995] i2c i2c-1: dvb_frontend_start: failed to start kthread (-4) [ 579.915667][ T40] audit: type=1400 audit(2000000591.534:19114): avc: denied { ioctl } for pid=28985 comm="syz.1.6646" path="socket:[141607]" dev="sockfs" ino=141607 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 580.013859][T29008] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 580.036121][T29008] bond0 (unregistering): Released all slaves [ 580.117627][ T40] audit: type=1400 audit(2000000591.734:19115): avc: denied { watch } for pid=29014 comm="syz.3.6652" path="/150/file0" dev="tmpfs" ino=827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 580.383470][T29036] validate_nla: 3 callbacks suppressed [ 580.383489][T29036] netlink: 'syz.1.6654': attribute type 10 has an invalid length. [ 580.419085][ T40] audit: type=1804 audit(2000000592.034:19116): pid=29038 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.6656" name="/newroot/190/file1" dev="tmpfs" ino=1082 res=1 errno=0 [ 580.483599][T29042] netlink: 'syz.2.6658': attribute type 1 has an invalid length. [ 580.598222][T29047] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 580.669209][T29052] overlayfs: failed to clone upperpath [ 580.836966][T29072] netlink: 'syz.1.6669': attribute type 1 has an invalid length. [ 580.852993][T29072] bond0: entered promiscuous mode [ 580.858471][T29072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.866187][T29072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=29072 comm=syz.1.6669 [ 581.091309][T29082] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 581.095914][T29082] futex_wake_op: syz.2.6673 tries to shift op by -1; fix this program [ 581.196201][T29091] syz.2.6675 (29091): /proc/29090/oom_adj is deprecated, please use /proc/29090/oom_score_adj instead. [ 581.246081][T29092] netlink: 'syz.3.6674': attribute type 1 has an invalid length. [ 581.283747][T29092] bond3: (slave bridge1): Enslaving as a backup interface with an up link [ 581.289134][T25791] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 581.296644][T29092] 8021q: adding VLAN 0 to HW filter on device bond3 [ 581.303686][T29092] hpfs: hpfs_map_sector(): read error [ 581.319092][ T40] audit: type=1400 audit(2000000592.934:19117): avc: denied { setattr } for pid=29094 comm="syz.2.6676" name="sequencer2" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 581.350919][T29097] kAFS: No cell specified [ 581.415341][T25789] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 581.432022][T29101] netlink: 'syz.0.6679': attribute type 7 has an invalid length. [ 581.628791][T29125] trusted_key: encrypted_key: hex blob is missing [ 581.712729][T29131] random: crng reseeded on system resumption [ 581.722349][T29131] Restarting kernel threads ... [ 581.724993][T29131] Done restarting kernel threads. [ 581.780616][T29138] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 581.954641][T29152] batadv_slave_1: entered promiscuous mode [ 581.970745][T29151] batadv_slave_1: left promiscuous mode [ 581.974563][T29161] netlink: 'syz.0.6698': attribute type 1 has an invalid length. [ 582.034390][T29172] netlink: 'syz.3.6700': attribute type 1 has an invalid length. [ 582.059023][T29172] bond4: entered promiscuous mode [ 582.062551][T29172] 8021q: adding VLAN 0 to HW filter on device bond4 [ 582.080594][T29172] 8021q: adding VLAN 0 to HW filter on device bond4 [ 582.083080][T29172] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 582.091610][T29172] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 582.100227][T29172] bond4: (slave vti0): making interface the new active one [ 582.103536][T29172] vti0: entered promiscuous mode [ 582.108867][T29172] bond4: (slave vti0): Enslaving as an active interface with an up link [ 582.135051][T29182] kAFS: No cell specified [ 582.434495][T29199] bridge2: port 1(veth5) entered blocking state [ 582.437169][T29199] bridge2: port 1(veth5) entered disabled state [ 582.439431][T29199] veth5: entered allmulticast mode [ 582.442106][T29199] veth5: entered promiscuous mode [ 582.455738][T29199] xfrm1: entered allmulticast mode [ 582.742784][T29230] netlink: 'syz.0.6722': attribute type 1 has an invalid length. [ 582.775267][T29230] 8021q: adding VLAN 0 to HW filter on device bond3 [ 582.788005][T29230] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 582.791786][T29230] overlayfs: missing 'lowerdir' [ 582.815721][T29230] netlink: 'syz.0.6722': attribute type 10 has an invalid length. [ 582.815990][T29230] dummy0: entered promiscuous mode [ 582.870735][T29240] dvmrp0: entered allmulticast mode [ 583.017449][T29252] overlayfs: failed to clone upperpath [ 583.045166][T29258] trusted_key: encrypted_key: keyword 'dctcpefault' not recognized [ 583.149716][T29272] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 583.153603][T29273] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 583.208150][T29277] kAFS: No cell specified [ 583.213168][T29277] overlayfs: failed to clone upperpath [ 583.310123][T29290] geneve2: entered promiscuous mode [ 583.311833][T29290] geneve2: entered allmulticast mode [ 583.323179][T29291] geneve2: entered promiscuous mode [ 583.325025][T29291] geneve2: entered allmulticast mode [ 583.351091][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 583.351108][ T40] audit: type=1400 audit(2000000594.964:19119): avc: denied { ioctl } for pid=29281 comm="syz.2.6739" path="socket:[141209]" dev="sockfs" ino=141209 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 583.757937][T29316] __nla_validate_parse: 12 callbacks suppressed [ 583.757959][T29316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6747'. [ 583.766702][T29316] netlink: 'syz.3.6747': attribute type 2 has an invalid length. [ 583.769668][T29316] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6747'. [ 583.877418][ T40] audit: type=1400 audit(2000000595.494:19120): avc: denied { ioctl } for pid=29318 comm="syz.3.6748" path="socket:[142579]" dev="sockfs" ino=142579 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 583.996228][ T40] audit: type=1400 audit(2000000595.614:19121): avc: denied { accept } for pid=29323 comm="syz.3.6750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 584.004010][ T40] audit: type=1400 audit(2000000595.614:19122): avc: denied { connect } for pid=29323 comm="syz.3.6750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 584.348025][T29333] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 584.351716][ T40] audit: type=1400 audit(2000000595.964:19123): avc: denied { relabelto } for pid=29331 comm="syz.2.6753" name="216" dev="tmpfs" ino=1222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 584.361572][ T40] audit: type=1400 audit(2000000595.964:19124): avc: denied { associate } for pid=29331 comm="syz.2.6753" name="216" dev="tmpfs" ino=1222 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 584.364704][ T53] IPVS: starting estimator thread 0... [ 584.410348][T29345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6757'. [ 584.452804][ T40] audit: type=1400 audit(2000000596.064:19125): avc: denied { remove_name } for pid=25867 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 584.466193][T29340] IPVS: using max 43 ests per chain, 103200 per kthread [ 584.469739][ T40] audit: type=1400 audit(2000000596.074:19126): avc: denied { rmdir } for pid=25867 comm="syz-executor" name="216" dev="tmpfs" ino=1222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 584.639749][T29372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=29372 comm=syz.1.6765 [ 584.711183][T29379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6768'. [ 584.714387][T29378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6768'. [ 584.716055][T29382] vcan0: tx address claim with dlc 0 [ 584.782736][T29388] lo speed is unknown, defaulting to 1000 [ 584.888867][T29388] lo speed is unknown, defaulting to 1000 [ 584.900695][ T40] audit: type=1400 audit(583.853:19127): avc: denied { getopt } for pid=29399 comm="syz.3.6777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 584.910498][ T40] audit: type=1400 audit(583.853:19128): avc: denied { getopt } for pid=29399 comm="syz.3.6777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 585.017869][T29402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6777'. [ 585.030727][T29402] macsec1: entered promiscuous mode [ 585.120678][T29422] hfsplus: unable to find HFS+ superblock [ 585.255001][T29435] lo speed is unknown, defaulting to 1000 [ 585.347699][T29435] lo speed is unknown, defaulting to 1000 [ 585.550793][T29455] fuse: Bad value for 'fd' [ 585.733639][T29470] all: renamed from bridge_slave_0 [ 585.829033][T29481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6802'. [ 586.071404][T29477] validate_nla: 4 callbacks suppressed [ 586.071424][T29477] netlink: 'syz.3.6800': attribute type 1 has an invalid length. [ 586.154396][T29511] devpts: Bad value for 'max' [ 586.414872][T29541] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 586.421128][T29541] comedi comedi1: comedi_config --init_data is deprecated [ 586.472681][T29519] overlayfs: failed to clone upperpath [ 586.569121][T29557] program syz.2.6812 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 586.701422][T29567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=71 sclass=netlink_route_socket pid=29567 comm=syz.0.6814 [ 586.703757][T29564] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.735081][T29567] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 586.744026][T29567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=71 sclass=netlink_route_socket pid=29567 comm=syz.0.6814 [ 586.783493][T29573] delete_channel: no stack [ 586.837328][T29564] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.948959][T29564] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.019653][T29587] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6821'. [ 587.048920][T29564] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.160468][T25798] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.172217][T29601] netlink: 'syz.1.6826': attribute type 1 has an invalid length. [ 587.175045][T25786] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.193547][T25799] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.206621][T25799] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.236685][T29610] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6829'. [ 587.249612][T29610] gtp2: entered promiscuous mode [ 587.293156][T29617] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6831'. [ 587.344082][T29622] overlayfs: failed to clone upperpath [ 587.507309][T29637] netlink: 'syz.2.6837': attribute type 11 has an invalid length. [ 587.583509][T29644] lo speed is unknown, defaulting to 1000 [ 587.723151][T29644] lo speed is unknown, defaulting to 1000 [ 587.794842][T29661] overlayfs: missing 'lowerdir' [ 588.168063][T29683] ref_ctr increment failed for inode: 0x493 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802d4ea4c0 [ 588.172760][T29681] uprobe: syz.1.6855:29681 failed to unregister, leaking uprobe [ 588.247995][T29693] openvswitch: netlink: IP tunnel dst address not specified [ 588.281319][T29698] ipvlan0: entered promiscuous mode [ 588.283319][T29698] ipvlan0: entered allmulticast mode [ 588.285051][T29698] veth0_vlan: entered allmulticast mode [ 588.491641][T29717] can0: slcan on ttyS3. [ 588.566127][T29716] can0 (unregistered): slcan off ttyS3. [ 588.609679][ T1326] IPVS: starting estimator thread 0... [ 588.612809][T29719] vxcan1: entered allmulticast mode [ 588.618708][T29719] IPVS: set_ctl: invalid protocol: 255 10.1.1.2:20000 [ 588.622624][T29719] IPVS: fo: FWM 3 0x00000003 - no destination available [ 588.725660][T29720] IPVS: using max 31 ests per chain, 74400 per kthread [ 588.807159][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 588.807179][ T40] audit: type=1400 audit(2000000001.470:19141): avc: denied { setopt } for pid=29727 comm="syz.2.6870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 588.820906][ T40] audit: type=1400 audit(2000000001.470:19142): avc: denied { ioctl } for pid=29727 comm="syz.2.6870" path="socket:[143039]" dev="sockfs" ino=143039 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 589.217434][ T40] audit: type=1400 audit(2000000001.880:19143): avc: denied { map } for pid=29753 comm="syz.2.6879" path="socket:[145581]" dev="sockfs" ino=145581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 589.262347][T29760] __nla_validate_parse: 4 callbacks suppressed [ 589.262367][T29760] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6880'. [ 589.270554][T29760] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6880'. [ 589.578263][T29787] netlink: 'syz.2.6887': attribute type 11 has an invalid length. [ 589.581799][T29787] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6887'. [ 589.789438][T29797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6891'. [ 589.850369][T29805] trusted_key: encrypted_key: insufficient parameters specified [ 589.860660][T29809] overlayfs: missing 'lowerdir' [ 589.900510][T29813] Cannot find add_set index 65532 as target [ 589.904382][T29813] Cannot find del_set index 4 as target [ 589.928237][ T40] audit: type=1400 audit(2000000002.590:19144): avc: denied { map } for pid=29814 comm="syz.2.6897" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 590.050377][T29831] netlink: 'syz.0.6902': attribute type 17 has an invalid length. [ 590.053813][T29831] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6902'. [ 590.058791][T29831] macvtap0: entered allmulticast mode [ 590.061300][T29831] veth0_macvtap: entered allmulticast mode [ 590.065069][T29831] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 590.122122][T29838] overlayfs: missing 'lowerdir' [ 590.158719][ T40] audit: type=1400 audit(2000000002.820:19145): avc: denied { append } for pid=29833 comm="syz.3.6903" path="/200/file0/blkio.bfq.io_serviced_recursive" dev="9p" ino=72613969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 590.182139][T29849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6908'. [ 590.188097][ T40] audit: type=1400 audit(2000000002.850:19146): avc: denied { ioctl } for pid=29850 comm="syz.0.6909" path="socket:[143276]" dev="sockfs" ino=143276 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 590.189794][T29849] openvswitch: netlink: Flow actions attr not present in new flow. [ 590.205761][T29854] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 590.208834][T29855] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 590.241259][T29854] syzkaller0: entered promiscuous mode [ 590.243413][T29854] syzkaller0: entered allmulticast mode [ 590.250280][T29854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6910'. [ 590.301988][T29855] syzkaller0: tun_net_xmit 3 [ 590.451307][T29880] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6916'. [ 590.505108][T29866] kvm: kvm [29864]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xff [ 590.549675][T29866] kvm: kvm [29864]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1000000ff [ 591.340206][T29903] dlm: non-version read from control device 0 [ 591.493809][T29905] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6921'. [ 593.153552][T29912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6922'. [ 593.226932][T29919] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 593.227036][T29917] hsr_slave_0: left promiscuous mode [ 593.233973][T29917] hsr_slave_1: left promiscuous mode [ 593.314213][T29936] program syz.2.6929 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 593.335133][T29936] binder: 29932:29936 ioctl c0306201 200000000180 returned -14 [ 593.363832][T29936] bond1: option downdelay: invalid value (18446744073709551615) [ 593.367339][T29936] bond1: option downdelay: allowed values 0 - 2147483647 [ 593.375668][T29936] bond1 (unregistering): Released all slaves [ 593.375865][T29943] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=49 sclass=netlink_xfrm_socket pid=29943 comm=syz.1.6931 [ 593.570667][ T40] audit: type=1400 audit(2000000006.230:19147): avc: denied { getopt } for pid=29952 comm="syz.0.6936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 593.849852][T29967] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 593.855751][T29967] batman_adv: batadv0: Adding interface: gretap1 [ 593.858511][T29967] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.868664][T29967] batman_adv: batadv0: Interface activated: gretap1 [ 594.357557][T29988] fuse: Bad value for 'fd' [ 595.213369][T30011] netlink: 'syz.1.6956': attribute type 39 has an invalid length. [ 595.217966][T30011] veth0_macvtap: left promiscuous mode [ 595.427718][T30021] __nla_validate_parse: 5 callbacks suppressed [ 595.427736][T30021] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6960'. [ 595.735817][T30030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6963'. [ 595.738731][T30030] openvswitch: netlink: Flow actions attr not present in new flow. [ 595.808422][T30032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6964'. [ 595.812408][T30032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6964'. [ 595.824066][T30032] geneve2: entered promiscuous mode [ 595.826524][T30032] geneve2: entered allmulticast mode [ 595.921774][ T40] audit: type=1400 audit(2000000008.580:19148): avc: denied { read } for pid=30035 comm="syz.1.6966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 596.350104][T30043] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 596.431029][T25798] Bluetooth: hci1: Frame reassembly failed (-84) [ 596.433633][T25798] Bluetooth: hci1: Frame reassembly failed (-84) [ 596.587847][T30055] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 596.674219][T30056] overlayfs: empty lowerdir [ 597.348079][T30067] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 597.473531][T30072] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 597.482281][T30074] team_slave_0: entered promiscuous mode [ 597.485426][T30074] team_slave_1: entered promiscuous mode [ 597.496980][T30074] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 597.531564][ T40] audit: type=1400 audit(2000000010.190:19149): avc: denied { write } for pid=30075 comm="syz.3.6980" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 597.687618][T30083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6982'. [ 598.114555][T30103] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6986'. [ 598.214240][T30106] netlink: 'syz.2.6987': attribute type 13 has an invalid length. [ 598.402859][T30109] overlayfs: failed to clone upperpath [ 598.454948][T30116] bond0: entered allmulticast mode [ 598.458388][T30115] bond0: left allmulticast mode [ 598.505530][ T5931] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 598.505774][ T5285] Bluetooth: hci1: command 0xfc11 tx timeout [ 598.742428][T30148] lo speed is unknown, defaulting to 1000 [ 598.826555][T30153] overlayfs: failed to clone upperpath [ 598.898394][T30150] lo speed is unknown, defaulting to 1000 [ 598.898634][T30148] lo speed is unknown, defaulting to 1000 [ 599.017957][T30150] lo speed is unknown, defaulting to 1000 [ 599.593478][ T40] audit: type=1400 audit(2000000012.250:19150): avc: denied { mount } for pid=30175 comm="syz.1.7007" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 599.602455][ T40] audit: type=1400 audit(2000000012.260:19151): avc: denied { search } for pid=30175 comm="syz.1.7007" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 599.610308][ T40] audit: type=1400 audit(2000000012.260:19152): avc: denied { search } for pid=30175 comm="syz.1.7007" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 599.618338][ T40] audit: type=1400 audit(2000000012.260:19153): avc: denied { search } for pid=30175 comm="syz.1.7007" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 599.627078][ T40] audit: type=1400 audit(2000000012.260:19154): avc: denied { search } for pid=30175 comm="syz.1.7007" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 599.634735][ T40] audit: type=1400 audit(2000000012.260:19155): avc: denied { search } for pid=30175 comm="syz.1.7007" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 599.753995][T30180] netlink: 'syz.1.7008': attribute type 23 has an invalid length. [ 599.844226][T30191] overlayfs: failed to clone upperpath [ 599.881093][T30192] netlink: 'syz.0.7010': attribute type 39 has an invalid length. [ 600.265511][ T5285] Bluetooth: hci7: command 0xfc11 tx timeout [ 600.265557][ T5929] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 600.718268][T30235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7024'. [ 600.737062][T30239] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 600.783860][T30243] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7026'. [ 600.986221][ T5929] Bluetooth: hci4: command 0x0406 tx timeout [ 601.829244][ T40] audit: type=1326 audit(2000000014.490:19156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30271 comm="syz.0.7035" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe6f399c629 code=0x0 [ 602.145680][T30283] team0 (unregistering): Port device team_slave_0 removed [ 602.153628][T30283] team0 (unregistering): Port device team_slave_1 removed [ 602.461543][ T40] audit: type=1400 audit(2000000015.120:19157): avc: denied { listen } for pid=30286 comm="syz.3.7040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 602.830466][ T40] audit: type=1400 audit(2000000015.490:19158): avc: denied { getopt } for pid=30299 comm="syz.0.7044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 603.636138][T30311] tipc: Failed to obtain node identity [ 603.638493][T30311] tipc: Enabling of bearer rejected, failed to enable media [ 603.647120][T30313] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.7048'. [ 603.683184][T30318] overlayfs: failed to resolve './bus': -2 [ 603.688261][T30318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=30318 comm=syz.3.7050 [ 603.696618][T30318] Mount JFS Failure: -22 [ 603.728517][ T40] audit: type=1326 audit(2000000016.390:19159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30322 comm="syz.0.7051" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f399c629 code=0x7ffc0000 [ 603.740652][ T40] audit: type=1326 audit(2000000016.390:19160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30322 comm="syz.0.7051" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f399c629 code=0x7ffc0000 [ 603.741293][T30323] fuse: Bad value for 'fd' [ 603.760397][T30326] netlink: 'syz.3.7052': attribute type 1 has an invalid length. [ 603.760575][T30323] overlayfs: failed to clone upperpath [ 603.763547][T30326] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7052'. [ 603.765766][ T40] audit: type=1326 audit(2000000016.400:19161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30322 comm="syz.0.7051" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe6f395cece code=0x7ffc0000 [ 603.765842][ T40] audit: type=1326 audit(2000000016.400:19162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30322 comm="syz.0.7051" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f399c629 code=0x7ffc0000 [ 603.765886][ T40] audit: type=1326 audit(2000000016.400:19163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30322 comm="syz.0.7051" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f399c629 code=0x7ffc0000 [ 603.765927][ T40] audit: type=1326 audit(2000000016.400:19164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30322 comm="syz.0.7051" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe6f399c629 code=0x7ffc0000 [ 603.765966][ T40] audit: type=1326 audit(2000000016.400:19165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30322 comm="syz.0.7051" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f399c629 code=0x7ffc0000 [ 603.792084][T30328] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7053'. [ 603.884541][T30337] netlink: 348 bytes leftover after parsing attributes in process `syz.1.7058'. [ 603.926109][T30342] netlink: 'syz.0.7055': attribute type 1 has an invalid length. [ 604.130694][T30346] syz.2.7060 (30346): drop_caches: 2 [ 604.278359][T30353] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7062'. [ 604.731523][T30368] xt_nfacct: accounting object `syz0' does not exist [ 604.781263][T30370] overlayfs: failed to clone upperpath [ 604.866460][T30380] netlink: 'syz.0.7070': attribute type 21 has an invalid length. [ 604.869011][T30380] IPv6: NLM_F_CREATE should be specified when creating new route [ 604.917628][T30384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7072'. [ 604.927537][T30384] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 604.991034][T30394] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7074'. [ 605.228894][T30408] lo speed is unknown, defaulting to 1000 [ 605.383915][T30408] lo speed is unknown, defaulting to 1000 [ 605.479367][T30426] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 605.506221][T30428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7086'. [ 605.510229][T30428] netlink: 'syz.1.7086': attribute type 11 has an invalid length. [ 605.513102][T30428] netlink: 'syz.1.7086': attribute type 7 has an invalid length. [ 605.676722][T30444] overlay: Bad value for 'workdir' [ 605.707965][ T4846] delete_channel: no stack [ 605.711810][T30446] binder: 30445:30446 ioctl ab00 6 returned -22 [ 605.767152][T30442] team0 (unregistering): Port device team_slave_0 removed [ 605.782880][T30442] team0 (unregistering): Port device team_slave_1 removed [ 605.819820][T30450] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 605.825892][T30450] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 606.183928][ T5931] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 606.218160][T30479] overlayfs: failed to clone upperpath [ 606.268144][T30480] __nla_validate_parse: 1 callbacks suppressed [ 606.268170][T30480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7103'. [ 606.451821][T30485] afs: Unknown parameter 'gµËs]&—k3~ç\¦IŽ(lƒkh<’æâq¤üÉýÛ«ÄÅ˵«HEÿ7œ¯' [ 606.457459][T30485] overlayfs: failed to clone upperpath [ 606.483501][T30489] netlink: zone id is out of range [ 606.487187][T30489] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 606.597309][T30506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7110'. [ 606.600826][T30506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7110'. [ 606.603938][T30506] netlink: 'syz.0.7110': attribute type 15 has an invalid length. [ 606.680151][T30515] xt_hashlimit: size too large, truncated to 1048576 [ 606.766744][T30520] overlayfs: failed to clone upperpath [ 606.799528][T30530] fuse: Unknown parameter 'rootmod ¢ñ.„æéb¼Çâ/˜|Üd‚©YO×#dzýÝwÔsòe' [ 606.869048][ T6013] libceph: connect (1)[c::]:6789 error -101 [ 606.872100][ T6013] libceph: mon0 (1)[c::]:6789 connect error [ 606.876716][T30536] ceph: No mds server is up or the cluster is laggy [ 607.117325][T30564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7126'. [ 607.123814][T30564] afs: Unknown parameter '¼' [ 607.127024][T30564] overlayfs: failed to clone upperpath [ 607.881232][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 607.881255][ T40] audit: type=1400 audit(2000000020.540:19215): avc: denied { watch_mount } for pid=30581 comm="syz.0.7132" path="/343" dev="tmpfs" ino=1913 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 608.009406][T30594] comedi comedi1: s526: I/O port conflict (0x4,64) [ 608.011807][T30599] comedi comedi1: s526: I/O port conflict (0x4,64) [ 608.029271][T30600] overlayfs: failed to clone upperpath [ 608.171501][T30612] netlink: 'syz.3.7140': attribute type 1 has an invalid length. [ 608.189543][T30612] 8021q: adding VLAN 0 to HW filter on device bond5 [ 608.443303][T30634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7146'. [ 608.500606][ T40] audit: type=1400 audit(2000000021.160:19216): avc: denied { getopt } for pid=30640 comm="syz.0.7148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 608.561440][T30647] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7151'. [ 608.568763][T30649] IPVS: sync thread started: state = MASTER, mcast_ifn = bond0, syncid = -2, id = 0 [ 608.644938][T30651] netlink: 'syz.0.7152': attribute type 30 has an invalid length. [ 608.656176][ T40] audit: type=1326 audit(2000000021.300:19217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30653 comm="syz.3.7153" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a6a19c629 code=0x0 [ 608.669575][T30651] bond4: option arp_missed_max: invalid value (0) [ 608.672552][T30651] bond4: option arp_missed_max: allowed values 1 - 255 [ 608.683619][T30651] bond4 (unregistering): Released all slaves [ 608.707936][T30658] binder: BINDER_SET_CONTEXT_MGR already set [ 608.712871][T30658] binder: 30653:30658 ioctl 4018620d 200000004a80 returned -16 [ 608.717944][ T40] audit: type=1400 audit(2000000021.370:19218): avc: denied { watch watch_reads } for pid=30650 comm="syz.0.7152" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 608.927352][ T40] audit: type=1400 audit(2000000021.590:19219): avc: denied { map } for pid=30670 comm="syz.2.7156" path="socket:[147168]" dev="sockfs" ino=147168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 608.940867][ T40] audit: type=1400 audit(2000000021.600:19220): avc: denied { getopt } for pid=30670 comm="syz.2.7156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 608.955347][ T40] audit: type=1400 audit(2000000021.600:19221): avc: denied { getopt } for pid=30670 comm="syz.2.7156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 609.021891][T30678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7160'. [ 609.103148][T30684] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 609.110512][T30685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30685 comm=syz.0.7161 [ 609.121244][ T40] audit: type=1400 audit(2000000021.780:19222): avc: denied { mounton } for pid=30683 comm="syz.2.7162" path="/300/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 609.135920][ T40] audit: type=1400 audit(2000000021.790:19223): avc: denied { mounton } for pid=30683 comm="syz.2.7162" path="/300/file0" dev="proc" ino=4026535311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 609.572093][T30703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7167'. [ 609.575990][T30703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7167'. [ 609.579126][T30703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7167'. [ 609.689635][ T40] audit: type=1326 audit(2000000022.350:19224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30714 comm="syz.2.7172" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea85b9c629 code=0x0 [ 609.711344][T30706] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 609.744073][T30715] xt_SECMARK: invalid mode: 2 [ 609.800725][T30729] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 610.144946][T30781] block nbd2: Unsupported socket: should be TCP or UNIX. [ 610.179380][T30788] trusted_key: encrypted_key: keylen parameter is missing [ 610.384231][T30781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.401132][T30781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.540683][T30781] batman_adv: batadv0: Interface deactivated: gretap1 [ 610.547673][T25792] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.550706][T25792] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.553553][T25792] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.557464][T25792] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.643807][T30805] tmpfs: Bad value for 'mpol' [ 610.699473][T30808] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 610.702901][T30808] overlayfs: failed to set xattr on upper [ 610.704971][T30808] overlayfs: ...falling back to redirect_dir=nofollow. [ 610.708460][T30808] overlayfs: ...falling back to metacopy=off. [ 610.710630][T30808] overlayfs: ...falling back to index=off. [ 610.712700][T30808] overlayfs: ...falling back to uuid=null. [ 610.818019][T30817] netlink: zone id is out of range [ 610.819728][T30817] netlink: zone id is out of range [ 610.821655][T30817] netlink: set zone limit has 8 unknown bytes [ 611.019775][T30842] xt_ecn: cannot match TCP bits for non-tcp packets [ 611.023261][T30837] comedi comedi2: c6xdigio: a I/O base address must be specified [ 611.062650][T30847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=30847 comm=syz.3.7210 [ 611.081550][T30851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 611.162001][T30863] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 611.164226][T30863] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 611.169831][T30863] vhci_hcd vhci_hcd.0: Device attached [ 611.178114][T30863] rdma_rxe: rxe_newlink: failed to add lo [ 611.181489][T30864] vhci_hcd: unknown pdu 2 [ 611.183506][ T8545] vhci_hcd vhci_hcd.2: stop threads [ 611.186172][ T8545] vhci_hcd vhci_hcd.2: release socket [ 611.188092][ T8545] vhci_hcd vhci_hcd.2: disconnect device [ 611.648058][T30890] fuse: Bad value for 'fd' [ 611.703577][T30896] netlink: 'syz.0.7225': attribute type 10 has an invalid length. [ 611.722187][T30897] cgroup: Need name or subsystem set [ 611.860674][T30908] overlayfs: failed to clone upperpath [ 611.899313][T30912] overlayfs: failed to clone upperpath [ 611.904384][T30912] __nla_validate_parse: 11 callbacks suppressed [ 611.904410][T30912] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.7232'. [ 611.913902][T30912] netlink: ct family unspecified [ 612.081175][T30921] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 612.254635][T30934] afs: Unknown parameter 'dynÃ>féˆÍBÖ$W‰9' [ 612.259354][T30934] overlayfs: workdir and upperdir must be separate subtrees [ 612.278464][T30940] overlayfs: failed to clone upperpath [ 612.334078][T30949] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7245'. [ 612.339367][T30951] fuse: Bad value for 'fd' [ 612.367919][T30949] bond4 (unregistering): Released all slaves [ 612.626300][T30971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7251'. [ 612.633053][T30971] ªªªªªªir=.,uppe: renamed from lo [ 612.646810][T30971] fuse: Unknown parameter 'g1Y÷ºaÉçC00000000000000000000' [ 612.920944][T30995] comedi comedi3: multiq3: I/O port conflict (0x7fff,16) [ 612.928812][T30994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7258'. [ 613.135504][T31011] netlink: 'syz.3.7262': attribute type 30 has an invalid length. [ 613.266878][T31019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7265'. [ 613.355061][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 613.355082][ T40] audit: type=1400 audit(2000000026.010:19234): avc: denied { setattr } for pid=31020 comm="syz.3.7266" name="PPPOE" dev="sockfs" ino=149836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 613.595816][T31023] overlayfs: failed to clone upperpath [ 613.600058][T31025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31025 comm=syz.1.7268 [ 613.611847][T31025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7268'. [ 613.655639][T31029] netlink: 'syz.0.7269': attribute type 29 has an invalid length. [ 613.709426][T31038] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=31038 comm=syz.0.7272 [ 613.719741][T31038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7272'. [ 613.747755][T31040] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7273'. [ 613.753077][T31040] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.768180][T31040] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7273'. [ 613.772427][T31040] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.775702][T31040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.782518][T31040] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7273'. [ 613.789140][T31040] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.898473][ T40] audit: type=1400 audit(2000000026.560:19235): avc: denied { unmount } for pid=25867 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 613.914180][T31058] overlay: Unknown parameter 'euid' [ 613.955310][ T40] audit: type=1400 audit(2000000026.610:19236): avc: denied { write } for pid=31062 comm="syz.0.7279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 614.235641][T31089] netlink: 'syz.1.7287': attribute type 1 has an invalid length. [ 614.296638][ T40] audit: type=1400 audit(2000000026.960:19237): avc: denied { getopt } for pid=31100 comm="syz.2.7290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 614.304641][ T40] audit: type=1400 audit(2000000026.960:19238): avc: denied { connect } for pid=31100 comm="syz.2.7290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 614.363940][ T40] audit: type=1400 audit(2000000027.020:19239): avc: denied { listen } for pid=31107 comm="syz.2.7292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 614.486709][T31122] fuse: Invalid rootmode [ 614.560610][T31126] lo speed is unknown, defaulting to 1000 [ 614.593853][T31132] 8021q: adding VLAN 0 to HW filter on device bond4 [ 614.683300][T31126] lo speed is unknown, defaulting to 1000 [ 614.790756][T31144] netlink: 'syz.2.7300': attribute type 30 has an invalid length. [ 614.794296][T31144] netlink: 'syz.2.7300': attribute type 30 has an invalid length. [ 614.802310][T31144] netlink: 'syz.2.7300': attribute type 30 has an invalid length. [ 614.808179][T31144] netlink: 'syz.2.7300': attribute type 30 has an invalid length. [ 614.812293][T31144] netlink: 'syz.2.7300': attribute type 30 has an invalid length. [ 614.818253][T31144] netlink: 'syz.2.7300': attribute type 30 has an invalid length. [ 614.859257][T31154] SET target dimension over the limit! [ 614.968697][T31159] program syz.2.7304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 615.235537][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 615.368193][T31180] tmpfs: Unknown parameter 'fsname' [ 615.582210][T31198] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 615.809553][ T40] audit: type=1326 audit(2000000028.470:19240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31215 comm="syz.1.7319" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e4a39c629 code=0x0 [ 615.960491][ T40] audit: type=1400 audit(2000000028.620:19241): avc: denied { accept } for pid=31226 comm="syz.0.7323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 616.080143][ T5931] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 616.299036][ T40] audit: type=1400 audit(2000000028.960:19242): avc: denied { execute } for pid=31251 comm="syz.2.7333" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 616.543937][ T40] audit: type=1400 audit(2000000029.200:19243): avc: denied { watch } for pid=31267 comm="syz.2.7338" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 616.783354][T31287] x_tables: duplicate underflow at hook 1 [ 616.788004][T31288] cgroup: none used incorrectly [ 616.834938][T31288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31288 comm=syz.2.7345 [ 616.845391][T31288] validate_nla: 47 callbacks suppressed [ 616.845408][T31288] netlink: 'syz.2.7345': attribute type 1 has an invalid length. [ 616.969187][T31306] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 616.980437][T31306] batman_adv: batadv0: Adding interface: gretap1 [ 616.982604][T31306] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 616.991364][T31306] batman_adv: batadv0: Interface activated: gretap1 [ 617.166042][T31325] netlink: 'syz.0.7354': attribute type 5 has an invalid length. [ 617.661107][T31358] __nla_validate_parse: 108 callbacks suppressed [ 617.661121][T31358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7362'. [ 620.213398][T31369] overlayfs: statfs failed on './file0' [ 620.283291][T31380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7371'. [ 620.293307][T31380] netlink: 'syz.0.7371': attribute type 21 has an invalid length. [ 620.416300][T31393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7376'. [ 620.419681][T31393] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7376'. [ 620.564516][T31411] fuse: Unknown parameter 'ÿ0x00000000000000060000000000000000000601777777777777777777777' [ 620.567336][T31409] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 620.572715][T31411] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 620.619145][T31416] /dev/nullb0: Can't lookup blockdev [ 620.766768][T31435] netlink: 'syz.1.7392': attribute type 1 has an invalid length. [ 620.778557][T31433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7392'. [ 620.819069][T31435] bond5: entered promiscuous mode [ 620.821842][T31435] 8021q: adding VLAN 0 to HW filter on device bond5 [ 621.012132][T31446] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 621.083322][T31452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7397'. [ 621.086709][T31452] hsr_slave_0: left promiscuous mode [ 621.096721][T31452] hsr_slave_1: left promiscuous mode [ 621.157810][T31458] batman_adv: batadv0: Adding interface: dummy0 [ 621.160060][T31458] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.170236][T31458] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 621.242145][T31467] netlink: 4376 bytes leftover after parsing attributes in process `syz.2.7401'. [ 621.247815][T31467] netlink: 4376 bytes leftover after parsing attributes in process `syz.2.7401'. [ 621.249977][T31470] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7401'. [ 621.274626][T31471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7402'. [ 621.387327][T31483] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 621.502223][T31495] fuse: Bad value for 'fd' [ 621.661016][T31505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31505 comm=syz.3.7412 [ 621.719380][T31506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31506 comm=syz.3.7412 [ 621.750772][T31506] xt_CT: No such helper "snmp_trap" [ 624.494306][T31495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 624.563134][T31524] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 624.612131][T31531] veth0_to_team: entered promiscuous mode [ 624.615428][T31531] gretap0: entered promiscuous mode [ 624.618488][T31531] debugfs: 'hsr1' already exists in 'hsr' [ 624.620709][T31531] Cannot create hsr debugfs directory [ 624.719482][T31536] __nla_validate_parse: 4 callbacks suppressed [ 624.719496][T31536] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7422'. [ 624.945034][T31556] overlayfs: failed to clone upperpath [ 625.207694][T31572] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7434'. [ 625.267427][T31580] overlayfs: failed to clone upperpath [ 625.308071][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 625.308088][ T40] audit: type=1400 audit(2000000037.970:19247): avc: denied { map } for pid=31581 comm="syz.0.7438" path="socket:[150520]" dev="sockfs" ino=150520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 625.652169][T31610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7447'. [ 625.758139][T31618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7448'. [ 626.654035][T31681] overlayfs: failed to clone upperpath [ 626.787820][T31694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7467'. [ 626.796890][T31697] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 626.830619][T31702] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.7470'. [ 626.834654][T31701] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.7470'. [ 626.883206][T31707] hfs: can't find a HFS filesystem on dev sr0 [ 627.054361][ T40] audit: type=1400 audit(2000000039.710:19248): avc: denied { read } for pid=31717 comm="syz.0.7474" path="socket:[153774]" dev="sockfs" ino=153774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 627.130327][T31724] overlayfs: failed to resolve '/Ñ<¶«Åà+‘': -2 [ 627.134226][ T40] audit: type=1400 audit(2000000039.790:19249): avc: denied { mounton } for pid=31723 comm="syz.3.7477" path="/290/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 627.269943][T31741] netlink: 'syz.0.7483': attribute type 1 has an invalid length. [ 627.302587][ T40] audit: type=1400 audit(2000000039.960:19250): avc: denied { unmount } for pid=26529 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 627.324884][T31741] bond5: (slave bridge3): making interface the new active one [ 627.328886][T31741] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 627.451838][T31758] geneve3: entered promiscuous mode [ 627.454705][T31758] geneve3: entered allmulticast mode [ 627.516838][T31769] wg1: entered promiscuous mode [ 627.518659][T31769] wg1: entered allmulticast mode [ 627.580617][T31775] mac80211_hwsim hwsim51 wlan0: entered promiscuous mode [ 627.590564][T31777] overlayfs: failed to clone upperpath [ 627.651587][T31775] vlan2: entered promiscuous mode [ 627.653894][T31775] bridge0: entered promiscuous mode [ 627.682228][T31787] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7499'. [ 628.013245][ T40] audit: type=1400 audit(2000000040.670:19251): avc: denied { create } for pid=31803 comm="syz.1.7505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 628.092164][ T40] audit: type=1400 audit(2000000040.750:19252): avc: denied { ioctl } for pid=31811 comm="syz.1.7508" path="socket:[152370]" dev="sockfs" ino=152370 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 628.098425][T31810] erspan0: entered promiscuous mode [ 628.178661][T31818] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7510'. [ 628.335340][T31826] netlink: 'syz.1.7513': attribute type 1 has an invalid length. [ 628.341865][T31826] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 628.371016][ T40] audit: type=1800 audit(2000000041.030:19253): pid=31832 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.7514" name="nullb0" dev="tmpfs" ino=1651 res=0 errno=0 [ 628.432271][T31835] netlink: 'syz.1.7515': attribute type 1 has an invalid length. [ 628.453893][T31835] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 628.460929][T31835] bond6: (slave vxcan5): Error -95 calling set_mac_address [ 628.502792][T31836] gretap1: entered promiscuous mode [ 628.507110][T31836] bond6: (slave gretap1): making interface the new active one [ 628.509992][T31836] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 628.761111][T31845] sock: sock_timestamping_bind_phc: sock not bind to device [ 628.942798][ T40] audit: type=1400 audit(2000000041.600:19254): avc: denied { mounton } for pid=31852 comm="syz.0.7521" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 628.995378][T31854] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7521'. [ 628.999629][T31854] SET target dimension over the limit! [ 629.161305][T31856] veth1_macvtap: default FDB implementation only supports local addresses [ 629.202783][T31859] overlayfs: failed to clone upperpath [ 629.248097][ T40] audit: type=1800 audit(2000000041.910:19255): pid=31861 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.7524" name="nullb0" dev="tmpfs" ino=2108 res=0 errno=0 [ 629.453924][T31872] netlink: 'syz.1.7528': attribute type 2 has an invalid length. [ 629.558669][T31883] overlayfs: failed to clone upperpath [ 629.601916][T31890] tc_dump_action: action bad kind [ 629.604415][T31891] netlink: 'syz.1.7535': attribute type 30 has an invalid length. [ 629.730784][T31904] __nla_validate_parse: 8 callbacks suppressed [ 629.730797][T31904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7538'. [ 629.792463][T31909] openvswitch: netlink: IP tunnel dst address not specified [ 629.854535][T31913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7540'. [ 629.865563][T31913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7540'. [ 629.921813][T25808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.925770][T25808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.163050][T31922] overlayfs: failed to clone upperpath [ 630.311919][T31932] /dev/nullb0: Can't lookup blockdev [ 630.588847][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.719125][ T5931] Bluetooth: hci5: connection err: -111 [ 630.858655][T31951] tipc: Cannot configure node identity twice [ 630.878306][T31952] dlm: no local IP address has been set [ 630.880515][T31952] dlm: cannot start dlm midcomms -107 [ 630.888173][T31954] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 631.048030][T31971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7556'. [ 631.191482][T31983] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7559'. [ 631.197479][T31983] syz.2.7559 (31983): attempted to duplicate a private mapping with mremap. This is not supported. [ 631.278617][T31989] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 631.431991][T31997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7562'. [ 631.489453][ T40] audit: type=1326 audit(2000000044.150:19256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32004 comm="syz.2.7565" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea85b9c629 code=0x7ffc0000 [ 631.506909][ T40] audit: type=1326 audit(2000000044.150:19257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32004 comm="syz.2.7565" exe="/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fea85b593fb code=0x7ffc0000 [ 631.526509][ T40] audit: type=1326 audit(2000000044.150:19259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32004 comm="syz.2.7565" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea85b9c629 code=0x7ffc0000 [ 631.546898][ T40] audit: type=1326 audit(2000000044.150:19258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32004 comm="syz.2.7565" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea85b9c629 code=0x7ffc0000 [ 631.557189][ T40] audit: type=1326 audit(2000000044.150:19261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32004 comm="syz.2.7565" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea85b9c629 code=0x7ffc0000 [ 631.566753][ T40] audit: type=1326 audit(2000000044.150:19260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32004 comm="syz.2.7565" exe="/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fea85b58aec code=0x7ffc0000 [ 631.574684][ T40] audit: type=1326 audit(2000000044.150:19263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32004 comm="syz.2.7565" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea85b9c629 code=0x7ffc0000 [ 631.595283][ T40] audit: type=1326 audit(2000000044.150:19262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32004 comm="syz.2.7565" exe="/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fea85b58b4e code=0x7ffc0000 [ 631.603877][ T40] audit: type=1326 audit(2000000044.150:19265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32004 comm="syz.2.7565" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fea85b9c392 code=0x7ffc0000 [ 631.611743][ T40] audit: type=1326 audit(2000000044.150:19266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32004 comm="syz.2.7565" exe="/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fea85b9c629 code=0x7ffc0000 [ 631.678897][T32013] netlink: 'syz.2.7567': attribute type 1 has an invalid length. [ 631.706872][T32013] 8021q: adding VLAN 0 to HW filter on device bond3 [ 631.713685][T32013] bond2: (slave bond3): making interface the new active one [ 631.716979][T32013] bond2: (slave bond3): Enslaving as an active interface with an up link [ 631.721392][T32019] netlink: 124 bytes leftover after parsing attributes in process `syz.0.7566'. [ 632.155076][T32062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7579'. [ 632.188978][T32062] 8021q: adding VLAN 0 to HW filter on device bond7 [ 632.374069][T32086] overlay: Unknown parameter 'volatile:permit_directio' [ 632.636553][T32108] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 632.653830][T32110] macsec3: entered promiscuous mode [ 632.788779][T32122] netlink: 'syz.3.7598': attribute type 3 has an invalid length. [ 632.795993][T32127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32127 comm=syz.0.7597 [ 632.861841][T32134] netlink: 'syz.0.7601': attribute type 1 has an invalid length. [ 633.193090][T32149] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 633.315822][T32166] /dev/sg0: Can't lookup blockdev [ 633.320015][T32166] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.7608'. [ 633.323617][T32166] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 633.333300][T32166] xt_limit: Overflow, try lower: 271964/0 [ 633.398945][T32170] IPVS: set_ctl: invalid protocol: 25647 47.109.105.120:25970 [ 633.439882][T32173] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 633.443258][T32173] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7611'. [ 633.600708][T32181] overlayfs: failed to clone upperpath [ 633.697501][T32191] netlink: 'syz.3.7618': attribute type 2 has an invalid length. [ 634.016599][T32197] netlink: 'syz.0.7619': attribute type 1 has an invalid length. [ 634.031981][T32197] 8021q: adding VLAN 0 to HW filter on device bond7 [ 634.085680][T32197] bond7: (slave veth5): Enslaving as an active interface with a down link [ 634.103156][T32212] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 634.253731][T32197] vlan2: entered allmulticast mode [ 634.256198][T32197] bond7: entered allmulticast mode [ 634.259634][T32197] bond7: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 634.577807][T32241] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 634.595371][T32248] netlink: 'syz.1.7635': attribute type 32 has an invalid length. [ 634.757741][ T6013] page_pool_release_retry() stalled pool shutdown: id 169, 1 inflight 60 sec [ 634.771405][T32271] __nla_validate_parse: 7 callbacks suppressed [ 634.771425][T32271] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7642'. [ 634.839404][T32282] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7645'. [ 634.993630][T32298] netlink: 'syz.0.7651': attribute type 28 has an invalid length. [ 634.996655][T32298] netlink: 'syz.0.7651': attribute type 3 has an invalid length. [ 634.999233][T32298] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7651'. [ 635.006284][T32299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7651'. [ 635.009553][T32299] netlink: 'syz.0.7651': attribute type 30 has an invalid length. [ 635.012183][T32299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7651'. [ 635.016689][T32299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7651'. [ 635.019631][T32299] netlink: 'syz.0.7651': attribute type 30 has an invalid length. [ 635.022180][T32299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7651'. [ 635.027521][T32299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7651'. [ 635.031297][T32299] netlink: 'syz.0.7651': attribute type 30 has an invalid length. [ 635.034752][T32299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7651'. [ 635.041064][T32299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7651'. [ 635.138207][T32308] overlayfs: failed to clone upperpath [ 635.607994][T32325] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4567 sclass=netlink_xfrm_socket pid=32325 comm=syz.1.7660 [ 635.613743][T32325] IPVS: Unknown mcast interface: nr0 [ 636.040480][T32346] kAFS: unable to lookup cell 'syz1' [ 636.451387][T32387] ntfs3(loop2): try to read out of volume at offset 0x0 [ 637.017691][T32405] IPVS: length: 120 != 24 [ 637.069274][T32407] (syz.0.7685,32407,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 637.322512][ T40] kauditd_printk_skb: 312 callbacks suppressed [ 637.322532][ T40] audit: type=1400 audit(2000000049.980:19578): avc: denied { shutdown } for pid=32414 comm="syz.0.7688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 637.453880][T32420] overlayfs: failed to clone upperpath [ 637.459426][T32420] overlayfs: failed to clone upperpath [ 637.642610][T32439] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 637.909885][T32480] lo speed is unknown, defaulting to 1000 [ 638.049626][T32480] lo speed is unknown, defaulting to 1000 [ 638.275118][T32526] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 638.746538][T32567] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 639.219483][T32583] validate_nla: 67 callbacks suppressed [ 639.219499][T32583] netlink: 'syz.2.7737': attribute type 27 has an invalid length. [ 639.226213][T32583] bridge_slave_1: left allmulticast mode [ 639.448881][ T5931] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 639.480024][T32603] o2cb: This node has not been configured. [ 639.484515][T32603] o2cb: Cluster check failed. Fix errors before retrying. [ 639.487122][T32603] (syz.0.7744,32603,2):user_dlm_register:674 ERROR: status = -22 [ 639.489642][T32603] (syz.0.7744,32603,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 639.526617][T32608] netlink: 'syz.1.7747': attribute type 1 has an invalid length. [ 639.566550][T32614] 9pnet_fd: p9_fd_create_unix (32614): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 639.608269][T32620] netlink: 'syz.2.7751': attribute type 10 has an invalid length. [ 639.652905][T32620] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 639.729039][T32634] overlayfs: failed to resolve './file0': -2 [ 639.788751][T32640] program syz.2.7757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 639.792875][T32640] ata1.00: invalid command format 0 [ 639.831295][T32642] __nla_validate_parse: 134 callbacks suppressed [ 639.831310][T32642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7758'. [ 639.938719][T32644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7759'. [ 639.947143][T32644] bond0: entered promiscuous mode [ 639.949352][T32644] bond_slave_0: entered promiscuous mode [ 639.951402][T32644] bond_slave_1: entered promiscuous mode [ 639.953433][T32644] mac80211_hwsim hwsim45 wlan1: entered promiscuous mode [ 639.958447][T32644] batadv_slave_0: entered promiscuous mode [ 639.960623][T32644] batadv_slave_0: left promiscuous mode [ 639.963471][T32644] bond0: left promiscuous mode [ 639.966816][T32644] bond_slave_0: left promiscuous mode [ 639.968754][T32644] bond_slave_1: left promiscuous mode [ 639.970613][T32644] mac80211_hwsim hwsim45 wlan1: left promiscuous mode [ 640.099682][T32648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7761'. [ 640.551143][ T40] audit: type=1400 audit(6000000154.141:19579): avc: denied { getopt } for pid=32674 comm="syz.3.7770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 640.560283][ T5931] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 640.606556][T32682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7772'. [ 640.618414][T32679] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7768'. [ 640.683696][T32682] bridge5: port 1(veth7) entered blocking state [ 640.695697][T32682] bridge5: port 1(veth7) entered disabled state [ 640.699314][T32682] veth7: entered allmulticast mode [ 640.704504][T32682] veth7: entered promiscuous mode [ 640.763090][T32690] vlan2: entered allmulticast mode [ 640.766328][T32690] batadv_slave_1: entered allmulticast mode [ 640.769189][T32690] bridge5: port 2(vlan2) entered blocking state [ 640.772079][T32690] bridge5: port 2(vlan2) entered disabled state [ 640.777218][T32690] vlan2: entered promiscuous mode [ 640.779522][T32690] batadv_slave_1: entered promiscuous mode [ 640.894627][T32708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7781'. [ 640.901727][T32708] netlink: 'syz.3.7781': attribute type 26 has an invalid length. [ 641.010869][T32732] netlink: 'syz.1.7788': attribute type 4 has an invalid length. [ 641.041505][T32736] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7789'. [ 641.246913][T32754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7796'. [ 641.285464][T32757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7795'. [ 641.299090][T32759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7797'. [ 641.398359][ T301] lo speed is unknown, defaulting to 1000 [ 641.424495][ T40] audit: type=1400 audit(6000000155.011:19580): avc: denied { setattr } for pid=32767 comm="syz.3.7800" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 641.503856][ T301] lo speed is unknown, defaulting to 1000 [ 641.524711][ T40] audit: type=1400 audit(6000000155.111:19581): avc: denied { setopt } for pid=303 comm="syz.2.7802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 641.587715][ T313] netlink: 'syz.0.7803': attribute type 21 has an invalid length. [ 641.605681][ T316] tmpfs: Bad value for 'mpol' [ 641.624484][ T40] audit: type=1800 audit(6000000155.211:19582): pid=323 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.7806" name="nullb0" dev="tmpfs" ino=2108 res=0 errno=0 [ 641.718064][ T330] overlayfs: missing 'lowerdir' [ 641.728311][ T318] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.731951][ T318] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.794462][ T334] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=334 comm=syz.0.7810 [ 641.814994][ T336] syzkaller1: entered allmulticast mode [ 641.851862][ T318] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.856073][ T318] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.951604][ T340] 9p filesystem being mounted at /442/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 641.992158][ T318] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.997166][ T318] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.075765][ T318] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.080298][ T318] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.189507][ T347] delete_channel: no stack [ 642.283798][ T60] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.295273][ T60] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.313069][ T8545] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.317690][ T8545] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.332288][ T8545] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.334977][ T8545] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.355418][T25799] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.358878][T25799] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.511928][ T384] veth1_to_batadv: entered promiscuous mode [ 642.531756][ T40] audit: type=1400 audit(6000000156.121:19583): avc: denied { map } for pid=388 comm="syz.1.7828" path="socket:[159094]" dev="sockfs" ino=159094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 642.568924][ T40] audit: type=1804 audit(6000000156.161:19584): pid=396 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.7826" name="file0" dev="tmpfs" ino=3073 res=1 errno=0 [ 642.670357][ T412] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 642.789247][ T426] xt_l2tp: v2 doesn't support IP mode [ 642.837624][ T432] : entered promiscuous mode [ 642.889539][ T40] audit: type=1400 audit(6000000156.481:19585): avc: denied { relabelto } for pid=442 comm="syz.2.7844" name="file0" dev="tmpfs" ino=2548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dhcpd_initrc_exec_t:s0" [ 642.900312][ T443] usb usb7: usbfs: process 443 (syz.2.7844) did not claim interface 0 before use [ 642.955152][ T40] audit: type=1400 audit(6000000156.541:19586): avc: denied { rmdir } for pid=25867 comm="syz-executor" name="file0" dev="tmpfs" ino=2548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dhcpd_initrc_exec_t:s0" [ 642.965871][ T40] audit: type=1800 audit(6000000156.541:19587): pid=447 uid=60929 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.7845" name="nullb0" dev="tmpfs" ino=1651 res=0 errno=0 [ 643.090029][ T463] bond8: entered promiscuous mode [ 643.092365][ T463] 8021q: adding VLAN 0 to HW filter on device bond8 [ 643.111255][ T463] 8021q: adding VLAN 0 to HW filter on device bond8 [ 643.114477][ T463] bond8: (slave sit3): The slave device specified does not support setting the MAC address [ 643.121336][ T463] bond8: (slave sit3): Error -95 calling set_mac_address [ 643.215624][ T469] lo speed is unknown, defaulting to 1000 [ 643.298368][ T469] lo speed is unknown, defaulting to 1000 [ 643.619124][ T40] audit: type=1400 audit(6000000157.211:19588): avc: denied { lock } for pid=479 comm="syz.3.7855" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 643.639856][ T40] audit: type=1400 audit(6000000157.221:19589): avc: denied { setattr } for pid=479 comm="syz.3.7855" name="video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 643.898185][ T496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.947443][ T40] audit: type=1400 audit(6000000157.531:19590): avc: denied { map } for pid=499 comm="syz.2.7862" path="/dev/vcs" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 644.742194][ T40] audit: type=1400 audit(6000000158.331:19591): avc: denied { setopt } for pid=507 comm="syz.3.7864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 644.806419][ T513] tls_set_device_offload_rx: netdev not found [ 644.900423][ T524] __nla_validate_parse: 7 callbacks suppressed [ 644.900436][ T524] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7869'. [ 645.024561][ T538] delete_channel: no stack [ 645.069870][ T544] hfs: unable to load iocharset "io#harset" [ 645.074432][ T544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7877'. [ 645.074456][ T546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7877'. [ 645.077887][ T544] netlink: 'syz.2.7877': attribute type 30 has an invalid length. [ 645.081625][ T546] netlink: 'syz.2.7877': attribute type 30 has an invalid length. [ 645.083975][ T544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7877'. [ 645.092832][ T546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7877'. [ 645.288221][ T564] netlink: 'syz.2.7882': attribute type 1 has an invalid length. [ 645.291117][ T564] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7882'. [ 645.294152][ T564] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7882'. [ 645.297730][ T564] netlink: 'syz.2.7882': attribute type 1 has an invalid length. [ 645.300280][ T564] netlink: 634 bytes leftover after parsing attributes in process `syz.2.7882'. [ 645.327427][ T565] IPVS: fo: FWM 3 0x00000003 - no destination available [ 645.330750][ T565] random: crng reseeded on system resumption [ 645.353194][ T565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7880'. [ 645.357064][ T565] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 646.238549][ T605] QAT: failed to copy from user cfg_data. [ 646.252650][ T605] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 646.256807][ T605] overlayfs: missing 'lowerdir' [ 646.367528][ T616] IPv6: NLM_F_REPLACE set, but no existing node found! [ 646.523274][ C0] sr 2:0:0:0: [sr0] tag#7 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 646.528547][ C0] sr 2:0:0:0: [sr0] tag#7 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 646.530476][ T641] 9p filesystem being mounted at /557/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 646.584000][ T5992] hid-generic 0005:000B:0009.000E: unknown main item tag 0x0 [ 646.593213][ T5992] hid-generic 0005:000B:0009.000E: unknown main item tag 0x0 [ 646.595978][ T5992] hid-generic 0005:000B:0009.000E: unknown main item tag 0x0 [ 646.596052][ T648] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7908'. [ 646.599041][ T5992] hid-generic 0005:000B:0009.000E: unknown main item tag 0x0 [ 646.599065][ T5992] hid-generic 0005:000B:0009.000E: unknown main item tag 0x0 [ 646.610772][ T5992] hid-generic 0005:000B:0009.000E: unknown main item tag 0x0 [ 646.613945][ T5992] hid-generic 0005:000B:0009.000E: unknown main item tag 0x0 [ 646.617832][ T5992] hid-generic 0005:000B:0009.000E: unknown main item tag 0x0 [ 646.623301][ T5992] hid-generic 0005:000B:0009.000E: unknown main item tag 0x0 [ 646.633128][ T5992] hid-generic 0005:000B:0009.000E: unknown main item tag 0x0 [ 646.664550][ T650] bond9: option downdelay: invalid value (18446744073709551615) [ 646.669245][ T5992] hid-generic 0005:000B:0009.000E: hidraw1: BLUETOOTH HID v0.01 Device [syz0] on syz1 [ 646.670114][ T650] bond9: option downdelay: allowed values 0 - 2147483647 [ 646.690470][ T650] bond9 (unregistering): Released all slaves [ 646.707081][ T655] overlayfs: failed to clone upperpath [ 646.730640][ T657] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 646.748887][ T654] fido_id[654]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 646.766426][ T40] audit: type=1400 audit(6000000160.361:19592): avc: denied { write } for pid=662 comm="syz.3.7913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 647.061726][ T692] raw_sendmsg: syz.2.7921 forgot to set AF_INET. Fix it! [ 647.260861][ T698] wg1: entered promiscuous mode [ 647.262608][ T698] wg1: entered allmulticast mode [ 647.798620][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 647.798667][ T40] audit: type=1400 audit(6000000161.391:19596): avc: denied { mounton } for pid=730 comm="syz.2.7932" path="/proc/1430/task" dev="proc" ino=160271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 647.812667][ T40] audit: type=1400 audit(6000000161.401:19597): avc: denied { associate } for pid=739 comm="syz.2.7932" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 647.904933][ T40] audit: type=1400 audit(6000000161.491:19598): avc: denied { map } for pid=749 comm="syz.2.7938" path="socket:[159470]" dev="sockfs" ino=159470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 647.974833][ T761] overlayfs: failed to clone upperpath [ 648.309167][ T783] dummy0: entered allmulticast mode [ 648.311340][ T783] batman_adv: batadv0: Interface activated: dummy0 [ 648.314050][ T783] batadv0: mtu less than device minimum [ 648.317798][ T783] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 648.321756][ T783] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 648.325556][ T783] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 648.329466][ T783] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 648.333239][ T783] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 648.337262][ T783] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 649.003460][ T835] ptrace attach of "/syz-executor exec"[836] was attempted by "/syz-executor exec"[835] [ 649.190332][ T5931] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 649.227337][ T852] 9p: Bad value for 'rfdno' [ 649.317052][ T857] overlayfs: failed to resolve './file1': -2 [ 649.432414][ T871] netlink: 'syz.1.7963': attribute type 7 has an invalid length. [ 649.435033][ T871] netlink: 'syz.1.7963': attribute type 8 has an invalid length. [ 649.498586][ T40] audit: type=1400 audit(6000000163.091:19599): avc: denied { getopt } for pid=881 comm="syz.1.7966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 649.506934][ T882] tmpfs: Invalid uid '0x00000000ffffffff' [ 649.536675][ T884] netlink: 'syz.2.7967': attribute type 1 has an invalid length. [ 649.538912][ T886] netlink: 'syz.1.7968': attribute type 10 has an invalid length. [ 649.541440][ T884] sch_fq: defrate 0 ignored. [ 649.564542][ T886] veth0_vlan: left promiscuous mode [ 649.568089][ T886] veth0_vlan: entered promiscuous mode [ 649.572576][ T886] team0: Device veth0_vlan failed to register rx_handler [ 649.586086][ T40] audit: type=1400 audit(6000000163.181:19600): avc: denied { bind } for pid=887 comm="syz.2.7969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 649.695046][ T905] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 649.724691][ T907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.735530][ T907] batadv_slave_0: entered promiscuous mode [ 649.737528][ T907] batadv_slave_0: entered allmulticast mode [ 649.996605][ T947] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=43 sclass=netlink_tcpdiag_socket pid=947 comm=syz.0.7985 [ 651.021694][ T1013] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 651.023925][ T1013] overlayfs: failed to set xattr on upper [ 651.025914][ T1013] overlayfs: ...falling back to redirect_dir=nofollow. [ 651.028623][ T1013] overlayfs: ...falling back to index=off. [ 651.030492][ T1013] overlayfs: ...falling back to uuid=null. [ 651.034970][ T1013] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 651.039932][ T40] audit: type=1400 audit(6000000164.631:19601): avc: denied { getattr } for pid=1018 comm="syz.0.7993" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=161970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 651.050986][ T40] audit: type=1400 audit(6000000164.631:19602): avc: denied { getopt } for pid=1018 comm="syz.0.7993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 651.126240][ T40] audit: type=1400 audit(6000000164.721:19603): avc: denied { nlmsg_read } for pid=1024 comm="syz.0.7995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 651.126306][ T1025] __nla_validate_parse: 22 callbacks suppressed [ 651.126317][ T1025] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7995'. [ 651.142735][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.177623][ T1030] overlayfs: failed to resolve './file0': -2 [ 651.283768][ T1035] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7998'. [ 651.816342][ T1052] fuse: Unknown parameter '' [ 651.941315][ T1064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8006'. [ 652.008816][T25803] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.015869][T25803] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.050006][ T1076] trusted_key: encrypted_key: insufficient parameters specified [ 652.117283][T25803] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.121844][T25803] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.156069][ T1077] trusted_key: encrypted_key: master key parameter 'aller0' is invalid [ 652.254690][T25803] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.259052][T25803] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.313324][T25803] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.325340][T25803] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.488849][T25803] bridge_slave_0: left allmulticast mode [ 652.490731][T25803] bridge_slave_0: left promiscuous mode [ 652.492730][T25803] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.609846][ T5285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 652.620562][ T5285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 652.628543][ T5285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 652.632541][ T5285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 652.637215][ T5285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 652.683289][ T1097] x_tables: duplicate underflow at hook 2 [ 652.742084][T25803] bond6 (unregistering): (slave gretap1): Releasing active interface [ 653.003674][ T1109] 9p filesystem being mounted at /507/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 653.145393][ T5929] Bluetooth: hci5: command 0x0406 tx timeout [ 653.223273][ T1112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8018'. [ 653.230275][ T1112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8018'. [ 654.665587][ T5931] Bluetooth: hci1: command tx timeout [ 656.249172][T25803] bond1 (unregistering): Released all slaves [ 656.257857][T25803] bond2 (unregistering): Released all slaves [ 656.266173][T25803] bond0 (unregistering): Released all slaves [ 656.276507][T25803] bond3 (unregistering): Released all slaves [ 656.284198][T25803] bond4 (unregistering): Released all slaves [ 656.293709][T25803] bond5 (unregistering): Released all slaves [ 656.304226][T25803] bond6 (unregistering): Released all slaves [ 656.311231][T25803] bond7 (unregistering): Released all slaves [ 656.319213][T25803] bond8 (unregistering): Released all slaves [ 656.359391][ T1112] erspan1: entered promiscuous mode [ 656.361439][ T1112] erspan1: entered allmulticast mode [ 656.370954][ T1121] net_ratelimit: 13 callbacks suppressed [ 656.370977][ T1121] openvswitch: netlink: Invalid VLAN frame [ 656.380381][ T1092] lo speed is unknown, defaulting to 1000 [ 656.447886][ T1130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=1130 comm=syz.2.8020 [ 656.515694][T25803] tipc: Left network mode [ 656.611844][ T1149] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(1) [ 656.614354][ T1149] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 656.616318][ T1092] lo speed is unknown, defaulting to 1000 [ 656.647146][ T1149] vhci_hcd vhci_hcd.0: Device attached [ 656.656446][ T1158] xt_connbytes: Forcing CT accounting to be enabled [ 656.659371][ T1158] set match dimension is over the limit! [ 656.663498][ T40] audit: type=1400 audit(6000000170.251:19604): avc: denied { connect } for pid=1147 comm="syz.2.8023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 656.730241][ T1150] vhci_hcd: connection closed [ 656.731681][ T7916] vhci_hcd vhci_hcd.2: stop threads [ 656.740692][ T7916] vhci_hcd vhci_hcd.2: release socket [ 656.742934][ T7916] vhci_hcd vhci_hcd.2: disconnect device [ 656.758712][ T5931] Bluetooth: hci1: command tx timeout [ 656.769596][ T1135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8021'. [ 656.769803][ T40] audit: type=1400 audit(6000000170.361:19605): avc: denied { bind } for pid=1165 comm="syz.2.8024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 656.779599][ T1135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8021'. [ 656.781590][ T8545] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.787816][ T1167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8024'. [ 656.793843][ T8545] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.803027][ T8545] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.838013][ T8545] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.861440][ T1092] chnl_net:caif_netlink_parms(): no params data found [ 656.957606][ T1177] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 657.011606][ T1176] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 657.038913][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.041668][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.044183][ T1092] bridge_slave_0: entered allmulticast mode [ 657.051037][ T1092] bridge_slave_0: entered promiscuous mode [ 657.055113][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.059615][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.062463][ T1092] bridge_slave_1: entered allmulticast mode [ 657.066409][ T1092] bridge_slave_1: entered promiscuous mode [ 657.089189][ T1092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.099015][ T1092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.169799][ T1092] team0: Port device team_slave_0 added [ 657.173970][ T1092] team0: Port device team_slave_1 added [ 657.191425][ T1092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.193827][ T1092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.203575][ T1092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.211202][ T1092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.214410][ T1092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.232202][ T1092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.282552][ T1092] hsr_slave_0: entered promiscuous mode [ 657.284168][ T1092] hsr_slave_1: entered promiscuous mode [ 657.287804][ T1092] debugfs: 'hsr0' already exists in 'hsr' [ 657.287818][ T1092] Cannot create hsr debugfs directory [ 657.426241][T25803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.442387][T25803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.445771][T25803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.451693][T25803] team_slave_0: left promiscuous mode [ 657.453834][T25803] team_slave_1: left promiscuous mode [ 657.455937][T25803] veth1_macvtap: left promiscuous mode [ 657.458083][T25803] veth1_vlan: left promiscuous mode [ 657.575674][ T1212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=1212 comm=syz.0.8032 [ 657.581235][ T1212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=1212 comm=syz.0.8032 [ 657.679511][T25803] team0 (unregistering): Port device team_slave_1 removed [ 657.697952][T25803] team0 (unregistering): Port device team_slave_0 removed [ 658.293386][T25803] IPVS: stop unused estimator thread 0... [ 658.401913][ T1255] overlayfs: missing 'workdir' [ 658.422761][ T1092] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 658.433876][ T1092] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 658.441421][ T1092] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 658.457819][ T1092] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 658.532590][ T1092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.549277][ T1092] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.557102][T25792] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.560241][T25792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.568161][ T40] audit: type=1400 audit(6000000172.161:19606): avc: denied { name_bind } for pid=1258 comm="syz.2.8043" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 658.570406][T25803] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.578607][T25803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.711288][ T1092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.835589][ T5931] Bluetooth: hci1: command tx timeout [ 658.909619][ T1092] veth0_vlan: entered promiscuous mode [ 658.917830][ T1092] veth1_vlan: entered promiscuous mode [ 658.939351][ T1092] veth0_macvtap: entered promiscuous mode [ 658.946646][ T1092] veth1_macvtap: entered promiscuous mode [ 658.960281][ T1092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.972739][ T1092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.982138][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.993412][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.995679][ T5931] Bluetooth: hci5: command 0x0406 tx timeout [ 658.998495][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.019620][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.071525][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.074679][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.093466][T25808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.096896][T25808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.153747][ T1304] overlayfs: upper fs does not support file handles, falling back to index=off. [ 659.370179][ T1315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8044'. [ 659.373593][ T1315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8044'. [ 659.376773][ T1315] netlink: 'syz.5.8044': attribute type 12 has an invalid length. [ 659.398306][ T1315] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8044'. [ 659.398835][ T1318] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 659.401925][ T1315] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8044'. [ 659.442357][ T1318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8045'. [ 659.448052][ T1318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8045'. [ 659.511345][ T1328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8046'. [ 659.523613][ T40] audit: type=1400 audit(6000000173.111:19607): avc: denied { accept } for pid=1325 comm="syz.2.8046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 659.782926][ T40] audit: type=1326 audit(6000000173.371:19608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1360 comm="syz.5.8051" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29df99c629 code=0x0 [ 660.042805][ T5992] libceph: connect (1)[c::]:6789 error -13 [ 660.046041][ T5992] libceph: mon0 (1)[c::]:6789 connect error [ 660.140743][ T1369] ceph: No mds server is up or the cluster is laggy [ 660.253079][ T40] audit: type=1400 audit(6000000173.841:19609): avc: denied { map } for pid=1376 comm="syz.3.8054" path="/390/file0/cgroup.kill" dev="9p" ino=72614223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 660.253685][ T1377] netfs: Couldn't get user pages (rc=-14) [ 660.264156][ T1377] netfs: Zero-sized read [R=39] [ 660.469296][ T40] audit: type=1400 audit(6000000174.061:19610): avc: denied { map } for pid=1380 comm="syz.2.8057" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 660.529713][ T1396] futex_wake_op: syz.2.8060 tries to shift op by -1; fix this program [ 660.542326][ T1395] lo speed is unknown, defaulting to 1000 [ 660.549964][ T1397] QAT: failed to copy from user. [ 660.551854][ T1398] QAT: failed to copy from user. [ 660.589708][ T1399] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 660.642633][ T1395] lo speed is unknown, defaulting to 1000 [ 660.906001][ T5931] Bluetooth: hci1: command tx timeout [ 661.010167][ T1437] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 661.038538][ T40] audit: type=1404 audit(6000000174.621:19611): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 661.062097][ T40] audit: type=1400 audit(6000000174.651:19612): avc: denied { setopt } for pid=1411 comm="syz.3.8064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 661.070720][ T40] audit: type=1400 audit(6000000174.651:19613): avc: denied { read } for pid=1411 comm="syz.3.8064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 661.092965][ T1439] ip6gre1: entered allmulticast mode [ 661.107435][ T1439] team0: Device ip6gre1 is of different type [ 661.361647][ T1215] ================================================================== [ 661.364313][ T1215] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 661.367648][ T1215] Read of size 8 at addr ffff8880220f4cf8 by task syz.0.8032/1215 [ 661.370574][ T1215] [ 661.372285][ T1215] CPU: 1 UID: 0 PID: 1215 Comm: syz.0.8032 Tainted: G L syzkaller #0 PREEMPT(full) [ 661.372303][ T1215] Tainted: [L]=SOFTLOCKUP [ 661.372308][ T1215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 661.372315][ T1215] Call Trace: [ 661.372321][ T1215] [ 661.372326][ T1215] dump_stack_lvl+0x100/0x190 [ 661.372438][ T1215] print_report+0x156/0x4c9 [ 661.372528][ T1215] ? __virt_addr_valid+0x81/0x620 [ 661.372563][ T1215] ? __phys_addr+0xe8/0x180 [ 661.372578][ T1215] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 661.372591][ T1215] kasan_report+0xdf/0x1e0 [ 661.372663][ T1215] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 661.372678][ T1215] __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 661.372691][ T1215] bulk_make_private+0xd8/0x720 [ 661.372729][ T1215] umount_tree+0x3fb/0xec0 [ 661.372764][ T1215] ? lock_acquire+0x1cf/0x380 [ 661.372781][ T1215] ? __pfx_umount_tree+0x10/0x10 [ 661.372796][ T1215] ? switch_task_namespaces+0x89/0x2c0 [ 661.372836][ T1215] put_mnt_ns+0x267/0x300 [ 661.372849][ T1215] switch_task_namespaces+0x133/0x2c0 [ 661.372865][ T1215] do_exit+0x824/0x2aa0 [ 661.372900][ T1215] ? __pfx_do_exit+0x10/0x10 [ 661.372914][ T1215] ? cgroup_update_frozen_flag+0x107/0x210 [ 661.372930][ T1215] ? find_held_lock+0x2b/0x80 [ 661.372945][ T1215] ? get_signal+0x184f/0x21e0 [ 661.372964][ T1215] do_group_exit+0xd5/0x2a0 [ 661.372986][ T1215] get_signal+0x1ec7/0x21e0 [ 661.373003][ T1215] ? __asan_memset+0x23/0x50 [ 661.373026][ T1215] ? __pfx_get_signal+0x10/0x10 [ 661.373045][ T1215] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 661.373063][ T1215] arch_do_signal_or_restart+0x91/0x7a0 [ 661.373112][ T1215] ? __pfx_get_timespec64+0x10/0x10 [ 661.373159][ T1215] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 661.373190][ T1215] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 661.373213][ T1215] exit_to_user_mode_loop+0x86/0x4a0 [ 661.373234][ T1215] do_syscall_64+0x67c/0xf80 [ 661.373290][ T1215] ? clear_bhb_loop+0x40/0x90 [ 661.373336][ T1215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.373348][ T1215] RIP: 0033:0x7fe6f395cece [ 661.373357][ T1215] Code: Unable to access opcode bytes at 0x7fe6f395cea4. [ 661.373362][ T1215] RSP: 002b:00007fe6f48d2f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 661.373373][ T1215] RAX: fffffffffffffdfc RBX: 00007fe6f48d36c0 RCX: 00007fe6f395cece [ 661.373400][ T1215] RDX: 00007fe6f48d2fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 661.373407][ T1215] RBP: 00007fe6f3a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 661.373414][ T1215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.373420][ T1215] R13: 00007fe6f3c16128 R14: 00007fe6f3c16090 R15: 00007ffce8ad5228 [ 661.373431][ T1215] [ 661.373436][ T1215] [ 661.478991][ T1215] Allocated by task 937: [ 661.480758][ T1215] kasan_save_stack+0x30/0x50 [ 661.482697][ T1215] kasan_save_track+0x14/0x30 [ 661.484713][ T1215] __kasan_slab_alloc+0x89/0x90 [ 661.486878][ T1215] kmem_cache_alloc_noprof+0x241/0x6e0 [ 661.489088][ T1215] alloc_vfsmnt+0x23/0x6a0 [ 661.490866][ T1215] clone_mnt+0x4b/0x930 [ 661.492589][ T1215] vfs_open_tree+0xb02/0x1500 [ 661.494517][ T1215] __x64_sys_open_tree+0xa3/0x150 [ 661.496597][ T1215] do_syscall_64+0x106/0xf80 [ 661.498444][ T1215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.500868][ T1215] [ 661.501927][ T1215] Freed by task 28: [ 661.503556][ T1215] kasan_save_stack+0x30/0x50 [ 661.505586][ T1215] kasan_save_track+0x14/0x30 [ 661.507605][ T1215] kasan_save_free_info+0x3b/0x70 [ 661.509735][ T1215] __kasan_slab_free+0x5f/0x80 [ 661.511764][ T1215] kmem_cache_free+0x124/0x6a0 [ 661.513812][ T1215] rcu_core+0x5a2/0x10d0 [ 661.515634][ T1215] handle_softirqs+0x1eb/0x9e0 [ 661.517710][ T1215] run_ksoftirqd+0x38/0x60 [ 661.519603][ T1215] smpboot_thread_fn+0x3d3/0xaa0 [ 661.522499][ T1215] kthread+0x370/0x450 [ 661.524253][ T1215] ret_from_fork+0x754/0xd80 [ 661.526041][ T1215] ret_from_fork_asm+0x1a/0x30 [ 661.527601][ T1215] [ 661.528440][ T1215] Last potentially related work creation: [ 661.530307][ T1215] kasan_save_stack+0x30/0x50 [ 661.531856][ T1215] kasan_record_aux_stack+0xa7/0xc0 [ 661.533603][ T1215] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 661.535552][ T1215] task_work_run+0x150/0x240 [ 661.537112][ T1215] exit_to_user_mode_loop+0x100/0x4a0 [ 661.538903][ T1215] do_syscall_64+0x67c/0xf80 [ 661.540427][ T1215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.542326][ T1215] [ 661.543131][ T1215] Second to last potentially related work creation: [ 661.545407][ T1215] kasan_save_stack+0x30/0x50 [ 661.547041][ T1215] kasan_record_aux_stack+0xa7/0xc0 [ 661.548763][ T1215] task_work_add+0x28b/0x3b0 [ 661.550288][ T1215] mntput_no_expire_slowpath+0x3da/0xb00 [ 661.552118][ T1215] mntput_no_expire+0x1fd/0x220 [ 661.553703][ T1215] mntput+0x6b/0xa0 [ 661.554955][ T1215] vfs_open_tree+0x1235/0x1500 [ 661.557053][ T1215] __x64_sys_open_tree+0xa3/0x150 [ 661.558924][ T1215] do_syscall_64+0x106/0xf80 [ 661.560585][ T1215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.562698][ T1215] [ 661.563584][ T1215] The buggy address belongs to the object at ffff8880220f4c40 [ 661.563584][ T1215] which belongs to the cache mnt_cache of size 352 [ 661.576060][ T1215] The buggy address is located 184 bytes inside of [ 661.576060][ T1215] freed 352-byte region [ffff8880220f4c40, ffff8880220f4da0) [ 661.580432][ T1215] [ 661.581225][ T1215] The buggy address belongs to the physical page: [ 661.583281][ T1215] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880220f4c40 pfn:0x220f4 [ 661.586994][ T1215] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 661.589744][ T1215] memcg:ffff88803599e601 [ 661.591146][ T1215] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 661.593913][ T1215] page_type: f5(slab) [ 661.595210][ T1215] raw: 00fff00000000240 ffff88801d6ac280 ffffea0001181d10 ffffea000075ac90 [ 661.597938][ T1215] raw: ffff8880220f4c40 0000000800120011 00000000f5000000 ffff88803599e601 [ 661.600626][ T1215] head: 00fff00000000240 ffff88801d6ac280 ffffea0001181d10 ffffea000075ac90 [ 661.603429][ T1215] head: ffff8880220f4c40 0000000800120011 00000000f5000000 ffff88803599e601 [ 661.606201][ T1215] head: 00fff00000000001 ffffea0000883d01 00000000ffffffff 00000000ffffffff [ 661.608920][ T1215] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 661.611668][ T1215] page dumped because: kasan: bad access detected [ 661.613789][ T1215] page_owner tracks the page as allocated [ 661.615601][ T1215] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 4787161750, free_ts 0 [ 661.621767][ T1215] post_alloc_hook+0x153/0x170 [ 661.623308][ T1215] get_page_from_freelist+0x111d/0x3140 [ 661.625077][ T1215] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 661.627035][ T1215] new_slab+0xa6/0x6d0 [ 661.628359][ T1215] refill_objects+0x26b/0x400 [ 661.629928][ T1215] __pcs_replace_empty_main+0x19f/0x600 [ 661.631730][ T1215] kmem_cache_alloc_noprof+0x480/0x6e0 [ 661.633499][ T1215] alloc_vfsmnt+0x23/0x6a0 [ 661.634944][ T1215] fc_mount+0x105/0x220 [ 661.636342][ T1215] vfs_kern_mount.part.0+0x10e/0x120 [ 661.638073][ T1215] vfs_kern_mount+0x3f/0x60 [ 661.639586][ T1215] simple_pin_fs+0xf2/0x190 [ 661.641058][ T1215] iomem_init_inode+0x24/0xe0 [ 661.642768][ T1215] do_one_initcall+0x11d/0x760 [ 661.644315][ T1215] kernel_init_freeable+0x6e5/0x7a0 [ 661.646013][ T1215] kernel_init+0x1f/0x1e0 [ 661.647456][ T1215] page_owner free stack trace missing [ 661.649203][ T1215] [ 661.650505][ T1215] Memory state around the buggy address: [ 661.652301][ T1215] ffff8880220f4b80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 661.654846][ T1215] ffff8880220f4c00: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 661.657419][ T1215] >ffff8880220f4c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 661.659965][ T1215] ^ [ 661.662508][ T1215] ffff8880220f4d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 661.665046][ T1215] ffff8880220f4d80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 661.667613][ T1215] ================================================================== [ 661.671352][ T1215] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 661.673689][ T1215] CPU: 1 UID: 0 PID: 1215 Comm: syz.0.8032 Tainted: G L syzkaller #0 PREEMPT(full) [ 661.677117][ T1215] Tainted: [L]=SOFTLOCKUP [ 661.678527][ T1215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 661.681728][ T1215] Call Trace: [ 661.682809][ T1215] [ 661.683779][ T1215] dump_stack_lvl+0x100/0x190 [ 661.685320][ T1215] vpanic+0x552/0x970 [ 661.686669][ T1215] ? __pfx_vpanic+0x10/0x10 [ 661.688202][ T1215] ? mark_held_locks+0x40/0x70 [ 661.689826][ T1215] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 661.691879][ T1215] panic+0xd1/0xe0 [ 661.693098][ T1215] ? __pfx_panic+0x10/0x10 [ 661.694553][ T1215] ? check_panic_on_warn+0x1f/0x90 [ 661.696226][ T1215] check_panic_on_warn.cold+0x19/0x34 [ 661.697952][ T1215] end_report.part.0+0x3a/0x90 [ 661.699504][ T1215] kasan_report.cold+0xe/0x18 [ 661.701031][ T1215] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 661.703092][ T1215] __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 661.705095][ T1215] bulk_make_private+0xd8/0x720 [ 661.706694][ T1215] umount_tree+0x3fb/0xec0 [ 661.708167][ T1215] ? lock_acquire+0x1cf/0x380 [ 661.710796][ T1215] ? __pfx_umount_tree+0x10/0x10 [ 661.712422][ T1215] ? switch_task_namespaces+0x89/0x2c0 [ 661.714200][ T1215] put_mnt_ns+0x267/0x300 [ 661.716043][ T1215] switch_task_namespaces+0x133/0x2c0 [ 661.717787][ T1215] do_exit+0x824/0x2aa0 [ 661.719153][ T1215] ? __pfx_do_exit+0x10/0x10 [ 661.720662][ T1215] ? cgroup_update_frozen_flag+0x107/0x210 [ 661.722551][ T1215] ? find_held_lock+0x2b/0x80 [ 661.724068][ T1215] ? get_signal+0x184f/0x21e0 [ 661.725943][ T1215] do_group_exit+0xd5/0x2a0 [ 661.727685][ T1215] get_signal+0x1ec7/0x21e0 [ 661.729209][ T1215] ? __asan_memset+0x23/0x50 [ 661.730761][ T1215] ? __pfx_get_signal+0x10/0x10 [ 661.732363][ T1215] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 661.734069][ T1215] arch_do_signal_or_restart+0x91/0x7a0 [ 661.735864][ T1215] ? __pfx_get_timespec64+0x10/0x10 [ 661.737661][ T1215] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 661.739661][ T1215] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 661.741559][ T1215] exit_to_user_mode_loop+0x86/0x4a0 [ 661.743274][ T1215] do_syscall_64+0x67c/0xf80 [ 661.744755][ T1215] ? clear_bhb_loop+0x40/0x90 [ 661.746312][ T1215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.748750][ T1215] RIP: 0033:0x7fe6f395cece [ 661.750697][ T1215] Code: Unable to access opcode bytes at 0x7fe6f395cea4. [ 661.753162][ T1215] RSP: 002b:00007fe6f48d2f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 661.755829][ T1215] RAX: fffffffffffffdfc RBX: 00007fe6f48d36c0 RCX: 00007fe6f395cece [ 661.758449][ T1215] RDX: 00007fe6f48d2fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 661.760969][ T1215] RBP: 00007fe6f3a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 661.763509][ T1215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.766059][ T1215] R13: 00007fe6f3c16128 R14: 00007fe6f3c16090 R15: 00007ffce8ad5228 [ 661.768709][ T1215] [ 661.770490][ T1215] Kernel Offset: disabled [ 661.772147][ T1215] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:16:42 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000003 RBX=ffff88806a433ca8 RCX=ffffffff9178d401 RDX=0000000000000000 RSI=ffffffff8c1aef20 RDI=ffffffff8e1238e0 RBP=0000000000000000 RSP=ffffc90007c4f850 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=000000000000c891 R12=ffffc90007c4f970 R13=ffffc90007c4f920 R14=ffffc90007c4fef0 R15=ffffc90007c4f954 RIP=ffffffff81ed26fd RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d634a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdc9cd47e20 CR3=0000000026669000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc9c1eb823 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc9c1eb823 00007fdc9c1eb823 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc9c1ebe80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc9c1ebe80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555577d21c78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1e80040100000608 0606017ba0000800 1ea8030100000023 061ea00300000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030fffffffffffff 040aa0030008000a 90030fff00000024 ff040a8000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69622f73667265 646e69622f2e01ff ffffffffffffffd9 0803800300000027 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8080100000000000 45aa0030656c6966 2f2e01ffffffffff ffffffef00000026 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8088100000000000 000004080606016a c80008000ae00300 10000ad000000025 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0ac0030200000000 030fffffffffffff 040aa0030008000a 90030fff00000024 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8578f2b5 RDI=ffffffff9b49b940 RBP=ffffffff9b49b900 RSP=ffffc90020a87430 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000031323154 R12=0000000000000000 R13=000000000000005d R14=0000000000000010 R15=ffffffff8578f250 RIP=ffffffff8578f2df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d644a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe6f3be6158 CR3=000000000e598000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000fefcf800 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 67c41da003a0861b d5209deec5d32dbb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3189f582d93635c5 4e2bad999b4c2029 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1e123fc25d6ccfa0 abce49549a4b3164 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9e9c79ab7ca64973 715fa175f5a00a14 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006200 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 009917b8b56fbeaa 0000019100000191 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b553dd1ab6134c40 0012d148b98067d4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 038764e600000000 0000019100000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000191 000d01ee00000191 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0ccb1d6eb316af4a 98655f2f1aa24185 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b3b670651a5d606b 60de03357a63897e ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffff88802acf4900 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff827f5358 RDI=fffffbfff1cfd27c RBP=ffffffff8e7e93e0 RSP=ffffc90007106b20 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e4ca3c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d654a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f29df9e9d40 CR3=0000000054fac000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000800 DR2=0000000000000024 DR3=0000000000000005 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c00000000000000 0009210052000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4211f826 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4211f826 00007ffd4211f82c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29dfa3319f ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29dfa331df ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29dfa33343 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29dfa331d1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29dfbeb600 00007f29dfbeb5e0 00007f29dfbeb5e8 00007f29dfbeb618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29dfbeb5f8 00007f29dfbeb5c8 00007f29dfbeb600 00007f29dfbeb5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=fffff52000809fb1 RBX=ffffc9000404fd58 RCX=ffffc9000404fd90 RDX=ffff888051a58000 RSI=ffffffff81f482a3 RDI=ffffc9000404fd58 RBP=ffffc9000404fd10 RSP=ffffc9000404fba8 R8 =0000000000000000 R9 =fffffbfff21b2c82 R10=ffffffff90d96417 R11=0000000000000000 R12=ffffc9000404fd58 R13=fffff52000809fb3 R14=dffffc0000000000 R15=0000000000000001 RIP=ffffffff81f482aa RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558919f500 ffffffff 00c00000 GS =0000 ffff8880d664a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f29e08b2fa8 CR3=0000000058210000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29e074d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4211f826 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4211f826 00007ffd4211f82c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29dfa3319f ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29dfa331df ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29dfa33343 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29dfa331d1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000