last executing test programs: 1m46.774842895s ago: executing program 2 (id=83): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES32=r0], 0x1c}}, 0x804) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x30, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0xd, 0x6, "310300", 0xf4e, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x5}}}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="f2000000080000005a000a"]) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xff, 0x2, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0x9, 0x8, 0x4, 0x8, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@gettaction={0x20, 0x32, 0x605, 0x70bd2a, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x850}, 0x24000800) syz_emit_ethernet(0x1e, &(0x7f0000000100)={@random="f08e66b67033", @broadcast, @void, {@can={0xc, {{0x2, 0x1, 0x1}, 0x7, 0x3, 0x0, 0x0, "edd88ff558198a51"}}}}, &(0x7f0000000180)={0x0, 0x4, [0x51d, 0x33a, 0xaf6, 0x335]}) 1m46.714550803s ago: executing program 2 (id=84): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000580)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$igmp(0x2, 0x3, 0x2) accept4$alg(r0, 0x0, 0x0, 0x800) r1 = syz_open_dev$ublk_bdev(&(0x7f00000000c0), 0x0, 0x4000) pwrite64$ublk_bdev(r1, &(0x7f0000000100)="1e5316d9b2a9a8419c01450b56371f471df9c0a33bc0d212ec6011c35d90b5", 0x1f, 0x6) setns(0xc9, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) write(r2, &(0x7f0000000200)="89", 0xffe3) r3 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x10, 0x2000008, 0x11, 0xffffffffffffffff, 0x20000000) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4d, 0x0, 0x0) syz_io_uring_setup(0x1029, &(0x7f0000000240)={0x0, 0x9036, 0x2, 0x1, 0x4d}, &(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) syz_io_uring_setup(0x4ca7, &(0x7f0000000380)={0x0, 0x81, 0x200, 0x2, 0x2c1}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r3, r5, r6, &(0x7f0000000700)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0xb6, 0x4, 0x4, 0x3, 0x1, {0x0, 0x0, r2}}) r7 = socket$inet(0x2, 0x800, 0x2000000) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x10a00, 0x0) ioctl$TIOCSWINSZ(r9, 0x5414, &(0x7f00000001c0)={0x101, 0x3a0, 0x4, 0xf788}) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000540)=""/8, 0x8}, {&(0x7f0000000600)=""/238, 0xee}], 0x2}, 0x0) 1m46.590975138s ago: executing program 2 (id=86): r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) r1 = syz_usbip_server_init(0x5) write$usbip_server(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000017f"], 0x30) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setns(0xc9, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x4, 0x1b}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) ioctl$MEMREADOOB64(r0, 0x1269, &(0x7f00000000c0)={0x1}) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x5, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESOCT=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x45e00644091d70c8}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'hsr0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) syz_emit_ethernet(0xa0, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x48, 0x11, 0x40, @remote, @local, {[], {0x1234, 0x4e20, 0x48, 0x0, @opaque="0102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f40"}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), r3) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280093d4942cccbec0f210d4320000", @ANYRES16=r10, @ANYBLOB="04002cbd7000fddbdf250200000014000c00ff020000000000000000000000000001"], 0x28}}, 0x8000) sendto$packet(r7, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x80, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x86, &(0x7f0000000180)=ANY=[@ANYBLOB="aa"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) 1m45.876411007s ago: executing program 2 (id=87): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x80, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='vers\x00', &(0x7f0000000080)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='192.0.2.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='192.0.2.1:/export\x00', 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='sec\x00', &(0x7f0000000200)='krb5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m45.800297982s ago: executing program 2 (id=88): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8}, @in={0x2, 0x4e22, @multicast1}], 0x2c) shutdown(r1, 0x0) ioctl$MEMREADOOB64(r1, 0xc0184d16, &(0x7f00000001c0)={0x3, 0x0, 0xe1, &(0x7f00000000c0)="da423f12f48e6bf2a1ec2d9c0facc6bfa5a007f3acc54ff39d6e57fa34aff78ad8b2b4309bec9d729bae16f2157a194cbd06967986d13b832e82e0f0ca2b8ecfe075792d267d5ad4af7a6bb7978aa31ed887669b38d43adc4848d012b130718f71a077f4c6bb0483ef85ed81d7bb369ab8e48c330e183f67aa59474fb11cee83c899d4076484dc5cd9ff57b499b682e991c3b04332b7433bf69f8b5bea49d372db902ed840b8b5aa60ddccc63e67d2d7e28a895acc490a9e1ab83d291f35c581456e7dc899fdf97cbc4f904b0244f44b52ab254771de2411530ee12f60a6b151ed"}) r2 = syz_open_dev$ublk_chdev(&(0x7f0000000200), 0x0, 0x49e300) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x13, r2, 0x21a52000) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000240)) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r1) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000040) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x0, [0x200, 0x7ff, 0xfffffff8]}, &(0x7f0000000440)=0x44) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000480)=0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000500)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @private=0xa010101}, 0x126, 0x0, 0x0, 0x0, 0x9, &(0x7f00000004c0)='batadv0\x00', 0x92, 0x1, 0x7fff}) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000580), &(0x7f00000005c0)=0xc) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, r4, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x40}}, 0x2000408c) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x8001, 0x2]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) shutdown(r1, 0x1) r6 = add_key$user(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x0}, &(0x7f0000000900)="677248bddae65198d4db4febc9a5f249947e17e4d687fdc569f4a4667987518d6f3e46319d795f7bbb0b599b2288d1f82b1c431011defa2d21e2f83c9ec7b3ec5cadc48abb411a7780534ab7edb94e131773d63876fcc5998fe3e83e2d353035dd62d1f01a0918577296d2f7d6e5386e03dcef76e434fc735455ab73ad54e00093eecfe7015231783b8a066edf50000abaa7bb0892c2145bb9d14683ca1fa48e2d5bcda938810ef7a7cc551f02bb687df31a930c74affb4803fbe8f7a7c875b507fa00d3c2d6684ab7523ef8d2ff52b07bded5bc69789e94920156b04d5a9d2bbf10c2e83a8d28f071629baeb6a721a03f91b4ff3b473a6c04a9f13d", 0xfc, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, r6, &(0x7f0000000a00)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', ',:', 0x20, 0x291, 0x20, [0x30, 0x33, 0x33, 0x37, 0x39, 0x63, 0x38]}, 0x35, r7) add_key$user(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, &(0x7f0000000b40)="b88bed900385fddf6d5b21bf44bdf4ed4ab2b3a69fa3350d2e1442dd17dbac68e07fb7304c662aef30f48d57580de37d25f95c65dc68eabb590171a1f9d79f731964660e1df9cd93988ad67421f32af43e81ecd3a746afe0a1a3a34e854769080358cf237554ca63e5d003a017baed42781e679ee02a3021c6d0b570b63cd443e688c3d924f48ad2a616d480e57ed7ac4726fedea3a1c365a92726f96ec1330969", 0xa1, 0xfffffffffffffff8) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000d80)={&(0x7f0000000c80), 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, 0x0, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x10}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000c1}, 0x8000) socket$kcm(0x29, 0x2, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xf8, 0xb, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x80}}]}, @IPSET_ATTR_ADT={0x5c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x290}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xfffffffffffff887}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @random="557586e89fcb"}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000805}, 0x980) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000010c0)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0xfffb}, &(0x7f0000001180)=0x90) 1m45.403555197s ago: executing program 2 (id=90): mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x20031, 0xffffffffffffffff, 0xb9dde000) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8001, &(0x7f0000000180)=0x3ff, 0xc, 0x0) (async) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8001, &(0x7f0000000180)=0x3ff, 0xc, 0x0) clock_adjtime(0x0, &(0x7f0000000380)={0x3fd, 0x80007, 0x4101, 0x4000000000000b, 0x1, 0x4, 0xfffffffffffffc01, 0x80000000000a, 0x5, 0x100, 0x7, 0x0, 0xffffffffffffffff, 0x81, 0x761c9023, 0x3ff, 0x0, 0x2, 0x8, 0x9, 0x8001, 0x7, 0x0, 0x3, 0x72a3, 0xe}) 1m45.391001084s ago: executing program 32 (id=90): mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x20031, 0xffffffffffffffff, 0xb9dde000) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8001, &(0x7f0000000180)=0x3ff, 0xc, 0x0) (async) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8001, &(0x7f0000000180)=0x3ff, 0xc, 0x0) clock_adjtime(0x0, &(0x7f0000000380)={0x3fd, 0x80007, 0x4101, 0x4000000000000b, 0x1, 0x4, 0xfffffffffffffc01, 0x80000000000a, 0x5, 0x100, 0x7, 0x0, 0xffffffffffffffff, 0x81, 0x761c9023, 0x3ff, 0x0, 0x2, 0x8, 0x9, 0x8001, 0x7, 0x0, 0x3, 0x72a3, 0xe}) 1m31.81279792s ago: executing program 4 (id=337): r0 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00x0, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x4, 0xbc1, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x133}}}, &(0x7f0000000440)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r7, 0x1, 0x10, 0x10, 0x0, @in6={0xa, 0x4e22, 0x60, @private1, 0x8}, @in={0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x2f}}}}, 0x118) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) (async) recvmsg$kcm(r0, &(0x7f0000001940)={0x0, 0xd335cd74c920a61d, &(0x7f0000000900)=[{&(0x7f0000000800)=""/197}], 0x1b}, 0x3062) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r13 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r13, 0xc08c5332, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x0, 'queue1\x00', 0x8001}) (async) writev(r13, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2) 1m31.244099608s ago: executing program 4 (id=350): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) r9 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) ioctl$CEC_ADAP_S_LOG_ADDRS(r9, 0xc05c6104, &(0x7f0000000380)={"1b8000", 0xe, 0x5, 0x2, 0x200000, 0x2, "f70000400000000019000000140040", '\x00', "03010c00", "17ff00", ["8bada940edff000a00", "155a0a1371cc54e706528660", "000000ff0000000000000020", "0000000000000000000100"]}) syz_ublk_setup_queues(r8, r7, &(0x7f0000000540)={0x0, 0x3e10, 0x0, 0x3, 0x28e, 0x0, r1}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x20000, 0x2, 0x1af, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0xffffffff, 0x21c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766f, 0x4, 0x1, 0x2db, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe, 0x0, r1}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r8, 0xc0107526, 0x0, 0x20000700, 0x0, 0x0, {0x10}, 0x0, r6, '\x00', {0x3, 0xb45, 0x100104, 0x0}}, &(0x7f0000000180)) 1m31.212752271s ago: executing program 33 (id=350): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) r9 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) ioctl$CEC_ADAP_S_LOG_ADDRS(r9, 0xc05c6104, &(0x7f0000000380)={"1b8000", 0xe, 0x5, 0x2, 0x200000, 0x2, "f70000400000000019000000140040", '\x00', "03010c00", "17ff00", ["8bada940edff000a00", "155a0a1371cc54e706528660", "000000ff0000000000000020", "0000000000000000000100"]}) syz_ublk_setup_queues(r8, r7, &(0x7f0000000540)={0x0, 0x3e10, 0x0, 0x3, 0x28e, 0x0, r1}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x20000, 0x2, 0x1af, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0xffffffff, 0x21c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766f, 0x4, 0x1, 0x2db, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe, 0x0, r1}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r8, 0xc0107526, 0x0, 0x20000700, 0x0, 0x0, {0x10}, 0x0, r6, '\x00', {0x3, 0xb45, 0x100104, 0x0}}, &(0x7f0000000180)) 1m0.313443022s ago: executing program 3 (id=761): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1m0.31297707s ago: executing program 3 (id=762): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x5, 0x4, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b5b090987f70906d038e7ff7fc6e5539b0d3d0e8b089b32356d63060890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d17c708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08cdc339081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9d6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f74a2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bcff00000000000000fec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420ae305fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42f48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fadf9ffffff238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3b99caf6b00d84a604047497022d9c30e23ef4df5c89644f48bb536f7946b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6020048cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffee738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c65a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c3329c8a6b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2d06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d2a89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d009000000c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb7847c7148b6ce431bb90e29389f22fc5b59a70efaea2bd40195af4486220d70bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24622a4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744d9b6c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de99258842cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b9906009af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) openat(r3, &(0x7f00000000c0)='./debugfs/ubifs/chk_index\x00', 0x721100, 0x90) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) mkdir(&(0x7f00000003c0)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./debugfs\x00', &(0x7f0000000480)='debugfs\x00', 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) sendto$inet(r1, &(0x7f0000000180)="d90fbb0e33c2be25ebd5d7194e57d0306e73b99052ebee8c6fc8a68693829f940968c1ca4268163cc51657e897c88df61b497e8046b9f6c319fa5cf9be377e9908062ac5d184d243da3cc0b54a3b5631deb231d89e6086cb1a91db2fd7a723fa20d12012969b1b059c", 0x69, 0x20000000, &(0x7f0000000240)={0x2, 0x4e21, @remote}, 0x10) syz_emit_ethernet(0xa0, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000481140fe8000000000000000000000000000bbfe8000000000000000000000000000aa12344e20004890960102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f40"], 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debugfs/ubifs/chk_index\x00', 0x2, 0x0) write(r5, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffea6, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x24048000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a42c0400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r6, @ANYBLOB="3df7536060da876089ef2015cb060588377f9b8eaddb"], 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x9, 0x3, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) socket(0x400000000010, 0x3, 0x0) 1m0.134040917s ago: executing program 3 (id=764): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @random="0000ea0700", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x2d, 0x44, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xf, 0xa8, [@multicast2, @local, @empty]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x4000, {[@timestamp={0x8, 0xa, 0x0, 0x2e1}]}}}}}}}, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000004c0)={0xc, @pix_mp={0x27, 0x9, 0x30324c4a, 0x0, 0x7, [{0x4, 0x7ff}, {0x8, 0xffffffff}, {0x58, 0x3ff}, {0x10dde0, 0x10}, {0x674, 0xe8aa}, {0x0, 0x2}, {0x9, 0x8}, {0x7, 0xfffff000}], 0x78, 0x5, 0x7}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$binfmt_misc(r2, &(0x7f0000000600)="566fbd", 0x3) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x6, 0x9e6, 0x3, "b2245c5eb9ae"}}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000080), 0x4) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(r10) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0xb8, 0x5, {0x20000, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 57.073552307s ago: executing program 3 (id=805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, r1, 0x10, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xba}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x2000c850}, 0x20000080) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) (async) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x124, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x46, 0xa8, @random="3d0bd0a66ca8a43a05046675120460174c20b9e9f1987624154c5f113810d62cedcef310f1b60fe0a75f5f8ef308d10e289eaed7a7d1830d43ba39c32ec2e45c6042"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0x56, 0xa8, @random="8e36cd623bbca5bed01e40611f1a4224a9b1047af45fd194d0adb4aece0d5d439d18f0d133909f6211f6322432e4de7f84d14778e5558ddf7f838382011104ffbb98f4c29901f4759099e929445df6c53d92"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x124}, 0x1, 0x0, 0x0, 0x24048000}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000480)=[{{0x1}, {0x4, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x2, 0x1}}, {{0x2, 0x1}, {0x3}}, {{0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x2, 0x1}}, {{0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x2, 0x1}, {0x3, 0x0, 0x0, 0x1}}], 0x48) (async) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000480)=[{{0x1}, {0x4, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x2, 0x1}}, {{0x2, 0x1}, {0x3}}, {{0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x2, 0x1}}, {{0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x2, 0x1}, {0x3, 0x0, 0x0, 0x1}}], 0x48) r5 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000540)={0x1000, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0106438, &(0x7f0000000580)={0x4d, r6}) fstat(r4, &(0x7f0000000600)) (async) fstat(r4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000005c0)=@nullb, r7, &(0x7f0000000680)) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000006c0), &(0x7f0000000700)={0x0, 0xfb, 0x9c, 0x5, 0x4, "95eb056bf75d07aada4bbd032e22d74a", "f25618bd6e6e8718e8ff929cef8efa40f9ad8030d4a6fa20df4570ddea4363492cae7e5dfa28cb11494672aa2384e35be6db484334ffbf52bc26dfd4cb7ffacd5ccea0789606725d5af99c1eea9fe568275ba885c8ef20057ac71d9f8d6db0a54b4ba31875e1f87e834d27d69b0ba6aa8492a5a690a90300634dc2ba108b0f289de5cb425523a7"}, 0x9c, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x67, 0x67, 0x9, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x7}, {0x2, 0x2}, {0x2, 0x5}, {0x7}, {0x2, 0x2}, {0x8, 0x3}, {0xa}, {0xd, 0x1}]}, @datasec={0x7, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x0, 0x3}], "aed648"}]}, {0x0, [0x0, 0x51, 0x0, 0x30, 0x5f, 0x0, 0x0]}}, &(0x7f0000000880)=""/4096, 0x89, 0x1000, 0x1, 0x8, 0x10000}, 0x28) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x67, 0x67, 0x9, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x7}, {0x2, 0x2}, {0x2, 0x5}, {0x7}, {0x2, 0x2}, {0x8, 0x3}, {0xa}, {0xd, 0x1}]}, @datasec={0x7, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x0, 0x3}], "aed648"}]}, {0x0, [0x0, 0x51, 0x0, 0x30, 0x5f, 0x0, 0x0]}}, &(0x7f0000000880)=""/4096, 0x89, 0x1000, 0x1, 0x8, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000029c0)={r8, 0x20, &(0x7f0000002980)={&(0x7f00000018c0)=""/131, 0x83, 0x0, &(0x7f0000001980)=""/4096, 0x1000}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000029c0)={r8, 0x20, &(0x7f0000002980)={&(0x7f00000018c0)=""/131, 0x83, 0x0, &(0x7f0000001980)=""/4096, 0x1000}}, 0x10) openat$mice(0xffffffffffffff9c, &(0x7f0000002a00), 0xa002) (async) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000002a00), 0xa002) setsockopt$packet_int(r9, 0x107, 0x3, &(0x7f0000002a40)=0x101, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000002a80)={0x8, 'veth1_to_bridge\x00', {'vcan0\x00'}, 0x7}) getuid() utime(&(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)={0x1, 0xa8}) sendto(r4, &(0x7f0000002b40)="642064fc7fc84e6c6b885dd5f0ba0554c9729238dbac6fe46107e5b2c02f256212b7a100639b640f02fe3edde129135e88e4e00985f9b334bb47c8ce7b891fb3aabdd7a144801bee7533f9cca126fc84d7e1d74b9d0d9a846b151e48ef1ad53ff6c68607e8a7823be1dc86bd777dde9ed361a8e1b77acd656a66622878c4cdcf5e4853bb7fc00ae32ae9a2c89d448ea8acb3e49b72ec7c3d2c9e2c7e21586fa1dad6cbf5a85937c35da96159c86725fe8291a478b7c88c453379ad14a18cd56918612128f02fd6b803ad289aa18e69296a656200613fef9d8561a3993eb35b401adc3de967ba5c6cb32ede9d167d2f231ed8902e978c09c57a567eb63c3c", 0xfe, 0x0, &(0x7f0000002c40)=@isdn={0x22, 0x10, 0x7, 0xfa, 0x1}, 0x80) (async) sendto(r4, &(0x7f0000002b40)="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", 0xfe, 0x0, &(0x7f0000002c40)=@isdn={0x22, 0x10, 0x7, 0xfa, 0x1}, 0x80) read(r5, &(0x7f0000002cc0)=""/170, 0xaa) madvise(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x15) (async) madvise(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x15) getsockopt$PNPIPE_HANDLE(r9, 0x113, 0x3, &(0x7f0000002d80), &(0x7f0000002dc0)=0x4) fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000002e00), &(0x7f0000002e40), 0x2, 0x3) (async) fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000002e00), &(0x7f0000002e40), 0x2, 0x3) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r9, 0x80489439, &(0x7f0000002e80)) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r9, 0x80489439, &(0x7f0000002e80)) chdir(&(0x7f0000002f00)='./file0\x00') io_uring_register$IORING_REGISTER_FILES(r9, 0x2, &(0x7f0000002f40)=[r4], 0x1) 56.853760277s ago: executing program 3 (id=809): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write(r0, &(0x7f0000000400)="5708ebd45691c95e1e0d4a130b40e457e668b0452d38b2d127b714e8353b3b15a03c6d3870bd9defe0bfdd0a70f2517eddd4f8181d6177c54e431950948c760829deb0bf7de657892d801172ce7d7a8f9114b29811abc490f44de21fe80af39bf3f1569cd8454495afe759639a86d7380dae1ffd9ecdd4dfa1d916cd61c9c4e3187d9453e11069efa726437922b48ee11c69115470f5f1772fa07265a1f48c00e0d4e4800850744df866a56652d563007caec97439362ea6e99615bbe14e9b19adee13b2c31eedc4f9cfde14d830a92e781999f5ec3e12397c46e5de9749f8fefbc57ed2793d751f", 0xe8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000540)={0x5, 0x6dff, 0x3fb, 0x0, 0x12}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) r2 = signalfd(r1, &(0x7f0000000140)={[0x8]}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x7, 0x700, 0xe592, 0xa4, {{0x16, 0x4, 0x0, 0x0, 0x58, 0x66, 0x0, 0x7, 0x0, 0x0, @loopback, @multicast1, {[@timestamp_addr={0x44, 0xc, 0xf7, 0x1, 0xc, [{@rand_addr=0x64010102, 0xffff8000}]}, @timestamp={0x44, 0xc, 0x2a, 0x0, 0x2, [0x200, 0xc]}, @end, @timestamp_addr={0x44, 0x14, 0x26, 0x1, 0x9, [{@multicast2, 0x4}, {@multicast2, 0x3}]}, @ssrr={0x89, 0x13, 0xdd, [@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @noop]}}}}}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r3, 0x25, 0x2, @val=@uprobe_multi={&(0x7f0000000240)='./proc/net/rpc/auth.rpcsec.context/channel\x00', &(0x7f0000000280)=[0x6], &(0x7f00000002c0)=[0x2, 0x3, 0x5, 0x1], 0x44f08208, 0x1, 0x1, r4}}, 0x40) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x18, &(0x7f0000000000)=0xc, 0x4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000100), 0xfffffffffffffeda, 0x400c885, &(0x7f00000003c0)={0x11, 0x11, r7, 0x1, 0xe8, 0x6, @random="c0f424a1f50d"}, 0x14) write(r1, &(0x7f0000000100)='\\x 1', 0x4) write$cgroup_pid(r2, &(0x7f0000000340)=r4, 0x12) 56.641300775s ago: executing program 3 (id=810): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) fchdir(r0) (async) fchdir(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0e0002006e657464fcffffff000000000f0002006e657464657673696d3000000800030000f10000"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 47.444139677s ago: executing program 1 (id=907): capset(&(0x7f0000001680)={0x20071026}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x10001, 0xf}) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400df03", 0x2c}], 0x1) 47.252274041s ago: executing program 1 (id=909): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x5a100, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x40000) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000180)={r1, &(0x7f0000000080)='}}([%@\x00', 0x4c002, &(0x7f00000000c0)={@align=0x95, {0x5, 0x4, 0x7, 0x68}}, 0x100, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x6}) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x2, 0x400000) ioctl$MEMLOCK(r2, 0x40084d05, &(0x7f0000000200)={0x1, 0xc}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000240)={0x5, [[0x7, 0xfffffffb, 0xffffffeb, 0x10, 0x7, 0x0, 0x200, 0xffff], [0x10000, 0x3, 0x2, 0xf, 0x6, 0x40, 0x6, 0x5], [0xf8e, 0x6, 0x7, 0xb, 0x3, 0x200, 0x224e, 0x3]], '\x00', [{0x8, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x8, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x4, 0x0, 0x1, 0x1, 0x1}, {0xfffffff9, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x2, 0x17, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xfffffff7, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x9, 0x1, 0x0, 0x0, 0x1}, {0x2, 0xe, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1, 0x1}, {0x87c, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x5, 0x1, 0x1, 0x1, 0x1}, {0x0, 0x4, 0x1, 0x1}], '\x00', 0xcffb}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f00000004c0)={{r0}, "a6042c2f5863bde98ad800c43aa91728bf53ea740473e97d4e58e2f2d6984579f84f7871beccfacaf83918e9dd1bd77eeee0342cfb02e87e567ff3efd4025ec174ca12a4a1a4abec191856b1f038933e9e5e30d210aedcf49408e47260f48c31f8a2a67b82cfa75a0575306cd639aaab4e81eeb7073874d709f40c8aed35f6393b822bc3f2828a1c08eb1ce4fac603fd32f429f7b9333c81f328d424591eb802c3a6bd9a4d066bc38c90d6c91c0ddbb5f2e8a0d22d5a6f3bdf4136e47811c52622b1db6681be25508500065310415a7ce803a4853dab3bb67482176bfaf7d89ad9c5d5496b97cddbafa9d29fbcbaf14ac3b4ac116332be14db013c1101c20c69b1b5ec9b9267f1b6e3442fa7a7f589391fa62c89e3b1d8b0e96ef381e59cd300fe31ba02323a9599420ba29dd7e3faa623810cc1fa3a545af2d596908cf64038dd98f6ef2c6a4d5ed57ea6872cce87204593243070056175d04147e43fec4a74de7825f5c0efac13635ace6df795662c5b43ceecb0fecda921a5ef21419f0a72a2e3a2498c116df90e6d9c1a3acc4dfd53d48cbfb023eb5bdb0a104162d72e0ff3eb1c560fed47b402b7a062160593885b33cd58b93bbb406c77cc801874ed83cc2024d32693fb6f655cc48745fd267ed0ee0879191d59dd21b20cecfa5932bf2c328c99365d829b91e78665e89310cb6556572d5aa2cab8ebf0267e5527703eb56d429cda57178bd6a45ac462ab3ba9363bd3ab2233e543f7b6b6b3eca9628b1239a1cd0bdf95fb88a70748db106097f847c886b9949488879693ea6f52a32ad990c4462b4d83bd4a31db7130296fea8f808341ee2e599c55e5524c8eb3662d2572c37d942defeb4ed006818d57140ac8c8ed2a68a96cfa6c464ca5063c0f5f7cd3b58db8abc8c5e23a8fcc3d191ef852d60f9d4c758fc379025d711c988ec1c765782d645b0f047331bc0079f515cc6d23bd2c05ece2dbbce7290057a2378c2b01ae50276196c1b69ce3a3bac21f3b05bbd82c0b9b6b056472e6b2bc3c366101fcb2fbfba43961c93d9607b2fd5665b3552a46cc72df76c3650cdf84a095d37122f0a433c6655749c1ba428c30dc6226553f6ff74a92f6cd0c89d3d628d25e5a12a1556947846a43fe09c7f447264b8eb6bfdf784795097ea0130240b3aa395cce90341e866f433159354fa4609c66de85a12878ea615fbe8642dc333d93209f7c1b16a9dfe53de1848df94118ec85d451fba72e6dded95a4152eb1e6157123b82cb1f64fd43ae050fe3248901e233e08894afc70c06ba9a79ca1cc27d51fb9149c53c0899d365411f898940a4b9d455ec96e933c5d0e046ba15fbedc36af44593187e1cb10046368b552196bdcf92cff9ed5f4ef40ab866a6be2543c435c11ea805643d79947a73018d217f09398a358dbc621ee6ff156cd97ff8dee10c4950d0ac3a331426e22d63c723e51729f0073f7aaae0ef07d2ce1542d2b679b4a9834b286503f3baf8539193ced0fca6a34d638bbb72c325a51c50eb03202706527d1b50f53cfbe226f10405fb95517f0f90b3fbebd6e93e5b3458d88a76149f51d320227c7f90763803194ba4886fe6c95b73273d4a8e22dcf398377aa3a4a3ffbf761e0786c368678062892dfb7ef85059040984b3f986ca4499f952772c2bbbc3a5cec0fd4bca50ec75eafb453267e17c148bb46a6236284a946c183da6d2df4619692a1622b11fb14c3ca35301cd33bd32bd812888ac6c8c83315c5da61c4b668486a60a17baedf2f673fb3e61bc88982e4651d9cd3c0d7dd072aab90dcb00efaebb20bd2eeb734628daf8eef3ad7a6d0efdb12615efe3ca57641ec61ca455f2b690a20c76b0be6eb1b9fc95d6b5b9655b7834006ef81e6a3a44500b075da79fff5e865fac25eee3b2579e01778cb9a8a7611c671b71a58cfde48a9c2b24f13280582fb13c40881cee9b65bb5377c6a7139019c6128643448ced21cd5acd41dbfcc89185cef866dafd5f2cc1c9ef32b67e55974e1ccce6079464cae1a6b8551eea39280b233cb7237ae89eb213930a4165cd47aa5eaa88d72e521e39d952075d972b34944f9f18add88eae31292ca73042c09897f5fb0c6003385a04aa1309b68852217e6b37b17b6fa8bb5d40d9fdd3fb344eb311d25566bd1236798f5d4dd15e6a4eebad337e2d065ab24e73e121ed8697eee68e0e312e5c24c7bc58e8f30d858d1962265b266f1f78fadc95af744ee015df97162f17642cd6fdc0ca98d4626abfb6ad95e96b1ff75bc359449293355c617d6d5fc191c762ab357f0dc1dd8955e195308efe9f095421c9a2c51c2c31ac2b381eb80e0f9e5ec051de6ffdfa11d079930d800adad4d85bbe1d73fd1aa467b73a54aa7314b6c5018053c71c6d4e067392933143bdea0d90fa1b61b6480919d50f114a7e7010fc055fb35265672b64e14cd72096aea222d3da8d20a2ae7a85d575c2b72c93b0e4523152d429eb1d4f49475b005c7c6eea3034d9fcfb6d0ebf0d051a04357b4b75c21fe789fc9da2a2bb319a7d62becb50b95768e071d9625c12d4b022d57e129a1f97592152283a56b1ae1097adbf7e6aff77c88a8ca525ca06b5a10e92e7a9a17bd6a0f9e015f9d58620f65104210dd828145e7d523002a8bc9983eaa3663c92a115d125448142f07c1fab59d307baa15b99292c872eec860608aa2072c8f66d73e7e6461a0ee2c14f37afcf777cc0575b55289429625589057901059f7414192866c57b1b9c1a02ed17e6799957c70d6302f8e081c415af23dbae04d7cfbbcf972c254052e8c96148874b52d29b5fab61c0b32a180c7abb7ea85e5e63db3b8f43a0345b617eab42165a43ba1d06910f1113fb4207e06973e7986428e76411d3b412da9151195747e8182857bc59f6341375327a943d0270e96590450639ec1d6ff231bbe8ce708e90a724503a8356a14850c185c8836afbee49a30ca40ec2b6c50322dc94422e78ec8520d8c00e57515cd9167af6b4102e243a32c8a66bde200ea1a4bbcb238f6df6a747b768d16d9745f089b2463108d9df62adba8b0164de6818f2111f95b4799f692e0546e1e76f68507d96ba69eef8a0e64edee7dba997541c20c0688bcd153fb20eeb71be6c70dc82ab580f51f97b805b77a70b61ba7242e20fb9be0b19f745536aaca3e024dd993af2416c8395f49967405a6170fa20fd402fb02529dcf34f8b29693838b4974d6114317606e5637d6b05b7cfd3cc929065db17b055e6dd057ac9a7e6d172a1cdd07390da5a332d57f962a7c8cd56fb94c7c798e2bfa2e4bcc08627f3a85bbff8fc12d46962544503535e50e3ea68a8d29b24eb70e6d2b4434a49008912f9f3ea9e001d49a2023b7d078a56540b841971436312179956cc60beb7948672bb9878778215952e80a242a7c91c357b6b8c2f9e11dbdb8188b988f0fa5b79096b635631a37eb6455fbb2f4178c1edf083634509495eabb43f7519973852fff4b4d2acb39a73f16b3389afc39db251ae510e86ada7efda5142759a2cb54aafc603150b6b0f97e8aa9120ffef73dd749a4e98c47f800c504f45e42b4836b7d721c8557625d458137bb3e16d5191c8dd4d51dcfd13dd30ce9009d37b63e59e0e96e12f9488455cdbc60509b9b47ea077a2a10acdf210c679a4bc7bb4a34b34422778b7bc47f2dfa45c7b208d1b1ee9022e389f602c58745215a56ba0460e7b5775fa79bccdde2ccbda59ba4ca77230659ae6ae06c5305237a1eaea54a65e47b04b40978ea4bef75019094032f003bdcd738f2a8aa9326ae405bc114966f7049f8c1cb4dcf023da5e457d77022bfc9e6a3cc03067780d37c1e5bd4b41501a39cf4442df3d5c833f12bce264af4b5fdfbdde14c373516f659780d92a31f67a0683be4596fe0f60ee21e22b21d848e6404c13a56c2efe7d2f2c9c24318a2df5babf5c09b6e841153b763e48e6ca7a261d9381b91d7196e53de4e091f3947c3c02874abd2e5fa96cec81c70c892ff20bf1ffc8092312a3420367f5bd4a5d246022819c7f3a44bf347d4a0e9855e3f4fdaca53c4775f8ecf817098150caabb6845722b6c58601745ece7a387822d6a5fddd4f23078bde97e48f81b2b85f34164e5902d73bb37e79550bac6acf41e3b64d27140646d45f553ca0b7f2fec601b818f766293387279d7d9ccd394bc064a7b7dbee0834ef5001dc94c031f9c0c14c2c85b1632faacf679657dac3203b52cba66f45535db322a06e9ad96988422366dfe65179768c3af667049417221bd1fb13b081ee4b743410ea3b70aa9bb311d3a36049b777fb9dd17d34748c58537302efe2aa42c04fc031a0c1efb6b4617d03cc2612475365d00b09d6a9186941b7322e8eb1d85844db0799463ec43da7b5e43dbbb703de158f213b2aaef916bd39d001d5bdcf3444bac5cc84cc90f2c49e19abd5ce6d91bd9acd440b92bc63be1b3c7f62a47393c39adea52d5f830cf386bc430c7430539b1324f4c05587bb7213b3b7c6fba3e209a68e40cfaf68e583e52feb8f4e8cbe031b5135e1fd32128be11fa11a259fc993b48012d0b272a4eb0673230e50e981f1bd2e2da76f19eb4667347c922097113570ffb9cdf9c4ad75e1b11256ba85ebeb57e197bfb4e2aaba322724ad59e0a401366d604c0a50296c81c9ffb33c9ea2276558ea4981ed219edf0e720d9c0ae8de74ab093e1932d799a38d3cbe26ed21feab4371b27ed11a63acdde28a05270ac7b64071a05782429b373138b14df66e57533cf5ba2869e516ef9b2489cf5c6f0c130c5167c7d22ba0eb2e8bc032c6861c86d00043c31476bd3ec5373e56878a03547f0b29ec24b0f73a583f06ad62a1f26c06cb27f56b0d3ce691ad43d47d54653f55275cb613d1189674d638627ade26c9db0c8bdd48bec878e2db90cc9601b6ef14683e624efdbe426677c3d1eb26ca08134f8d082a957a900451723157746089a2bdaf5927781f5cb68d7f6a5c4b90afc60b6637c906902b2fd8265c01594b4194824eb1b2a8ab734a1e8bd78c68cc9fb30a2d8556108d1438a4eebb718df22841ecaa7a7aade3ea0b932371cbb5b8460b03e301396e2a644afc811284a1439e1ade4a1c07133dca8cc333037bb445bd1e4505b87a9d14964be2baa0986ba3673e786565c41cf6e993fb6e4146580cde9041c6f41f269ea2da113602f316464d2691f0f97776f4c00beb4a85a9ed5b0f5d56b5415565672968e6f0df05a77dfa054c09eb3312c220244c6446b292e3877a7fd655ccd00be9974a930896be98eb955fd81bd00c5de223b8aafd5d549c84341ffbfbc50c19fbc1c81c3765afc0a9ad40ae11151e1b36d411c5a384f288847d62133615998cd3137c88224c65f11ff095bacf1d4cecbf17bf27b31b04759c77757f81c43e8aca1565442ba0201d4cb183bca0294217013846f4d73d624b2156e95cc466c11517679db4bb830125b8ffd8fca8aeae50db77a0b707fe6ff92536d9932cc6c14664ef3a1d14a87deab21e6a4f56e1e61fdd95ff1e5842bfd1fb5288f9528662fb055ba098782a24cdb7e7cf5af8cbb9c92cde99372323f1c28abed90fc114da22d1a295f1729071a49b81fead3784f19d98621a33e74e5cfbbaefc07573d149025e45ad1bc1b5bfa6f0d8e247a9816cbb3a75587c5a8eb24568ecd923ed918d4b221a620e328861a81c8f5d0b20abbd46713bc8767ed8581cc775d4361a1e5104ade418e543f7ea32ddacd91926072e3000a94cdf0301722ecc2b7b72028de6c4cf9ba88bbdb5"}) ioctl$KVM_GET_DEVICE_ATTR_vm(r2, 0x4018aee2, &(0x7f0000001500)=@attr_other={0x0, 0x0, 0x1, &(0x7f00000014c0)=0x2}) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000001540)=0xfffffffe) r4 = openat$panthor(0xffffffffffffff9c, &(0x7f0000001580), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000001600)={&(0x7f00000015c0)=[0x0, 0x0], 0x2}) syz_genetlink_get_family_id$ethtool(&(0x7f0000001680), r2) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000016c0)=0x0) r6 = syz_open_procfs(r5, &(0x7f0000001700)='net/sockstat6\x00') ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000001740)={0x1, 0x2, 0x8}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r6, 0x4144, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r6) sendmsg$NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x34, r7, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3c}}}}, [@NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f00000018c0)=@t={0x0, 0x6, 0x80, 0x0, @generic=0x5}) ioctl$XFS_IOC_FSGEOMETRY(r6, 0x8100587e, &(0x7f0000001900)) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f0000001a00)=@in6={0xa, 0x4e21, 0x0, @loopback, 0x80}, 0x1c, &(0x7f0000002ac0)=[{&(0x7f0000001a40)="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", 0x1000}, {&(0x7f0000002a40)="0cbc41063e49417e4bb09e009159922c4e2c9ad0251e65731caf995d0e2a6f367a5ddab1f5501d9e9ea6878123f3bfc81d42491c467ccd09d47a0424621c315cf7c92d5580c4a857af1e7c265b9abfa5b3613b1a5f18b680057fe45f2ce8fb7815805f4c79e525b80a59be64f229526d1f30700c", 0x74}], 0x2, &(0x7f0000002b00)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}], 0x20, 0x8000}, 0x20004010) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000002c40)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x1c, 0xc, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002cc0)={0x58, 0x1, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x117}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xddbc}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000004) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r6, 0x4112, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000002dc0), 0x802, 0x0) fadvise64(r2, 0x4, 0x0, 0x2) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000002e00)) socket$rds(0x15, 0x5, 0x0) read(r0, &(0x7f0000002e40)=""/191, 0xbf) 47.143736677s ago: executing program 1 (id=910): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00'}, 0x18) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x100, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1104}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000580)=0x1, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000080)={'veth0_macvtap\x00', {0x2, 0x4e24, @remote}}) 47.072670422s ago: executing program 1 (id=913): bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, 0x0) 46.034416611s ago: executing program 1 (id=932): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x81f, 0x0, 0x2}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="9f003257ffc290c90324effcffffff000c02000000000000000100000d00"/42], 0x0, 0x3c}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="00f80000e6ffffff0000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f0000000240)={0x4, 0x6}) writev(r4, &(0x7f0000001540)=[{&(0x7f0000000140)="45fc338e4b649a6d75be54ddc6979f7c0cd5f0551cdf822973a9284d7dd8a271879e44ccd9991ed333b57985ea4742fb3dd0c2", 0x33}, {&(0x7f0000000380)="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", 0xfb}, {&(0x7f0000000480)="4b788d635cc8abc1fffa66a021558865298901405bf66a1af675c823397eff9971ad8e7b046ee7fbe5c90999cba8b05876b826435d3c97c593143bfc59ffb81183e425adebf36ddc5f85f357d60765836c57840acf25bea8e5ca047842952f19e6fe7e18538395cabd98572fd81cbd3b3a8ae5f51b6f6103f99842182fdc32b559e232f287f1374a4f04f23a119e0c6be0574f068bd506b7d4f88f3a151f15fdf43134579b63c8162c0dd5e32f052fc86a", 0xb1}, {&(0x7f0000000540)="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", 0x1000}], 0x4) unlink(&(0x7f0000000040)='./file0\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x201, 0x4000003e, r5, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60b80000", @ANYRES32=0x0, @ANYRESHEX, @ANYRES32, @ANYRES64], 0x60}, 0x1, 0x0, 0x0, 0x4008481}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001d80)="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", 0x105}, {&(0x7f0000001640)="b7449b4759b0a86deb091d05e23c76114cffba5939a6f1e145de26a78ddcbfb72f6c3a11ac9f9def342081a0079a2e70b7ab6b34ee845ac24e5bd7f8db746b7c4e12755bf8a203623c59561065e8b8e9affb6b8a5d04107d9550d32467316420896891f1e7069712c4e2d0423f71f324b0ef5271d28010f5687bcd9667a57cb03f5eed8f914d4953bc947a13cb7fd1654cb80d6a710d4cc374de0ed8582203910c0363135c342648faa2f3874384fb7bd625", 0xb2}, {&(0x7f0000001700)="0982cbde15fbf94bb478ee22f589d00c326c0053c1e97d592f0da7de92cc88053de6a1707bbd815ff56ec6540efbff5a30a778a108c2b680b9757c375b4fd593dab385cfe18cac1a5d7c700abd2ed1127fc47689ae30b85434eb914aac32c6dce5799bd68b9a1bb6ee8753495d92af8c7ba71c1d10e7efe0ef2765c3f28cc4e91e40116e9dcefe91f557d3cb", 0x8c}, {&(0x7f00000017c0)="6cb25cf0902e130f575f8fee9928a908fbc3fa1d6d0df6486da0eb88b9a302aa5cd584074dd2c792733d41f28a59342f932a381dbc755dc681c032b45bf12faa129d35c780f28bc6286e50739fcf988c81e3394109a5f036fc62c5cc0df75ea4e865c0c7276c71bee7c1bab748f2d4c7ea0b6570a6abf042a9cee044004d8fbf69d4fa170976758cb1a34c091a91569b966464c106b32a00259e960a834e24d376c59147654c73e4434c9e047c3dba22b39acc2258aa4ea6f1ac1b0accc76e31d64c", 0xc2}], 0x4, &(0x7f0000001900)=[{0xc8, 0x104, 0x3, "c8e38950e5a7b3e0c3b5f5a44ef6f7cd1c7f8787347af91e67c109685e6e82ac7bd643fbb8afb183c0366b16ac8f7a13b1095718a144e5ce9288f5dfbc012f8435dcb4b17392317d501171124732357002b9a330e6268a12d985e3b2388773fc3b504db6cae67479556f33f5705ec56be0ce31196d3e3d166561af30ea60c7261e2e6d5f832357eb673a94eb9e85152b912f8445769b60b5561eb54b75c77882bba8f9e25617fa90d9ef4ce14420dae4bccd821d29"}], 0xc8}}, {{&(0x7f0000001a00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0xfffffff2, @empty, 0xb}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001a80)="2d548b680820e7e8dfb8215581c7f580f703e2c391b895e0c28806257425cc0647deab07df511657dae2c7c54c31922aec27", 0x32}], 0x1, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x1b8}}], 0x2, 0x200408c1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 46.033400206s ago: executing program 1 (id=935): r0 = socket$inet6(0xa, 0xa, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xff03, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r2) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000000540)=ANY=[@ANYBLOB="a41305efaf1b418c8cc25f96548e528b8a9a3b884a9d6fe1c6359bd16f98b9d6cda91650afcd1058dfbf49a704a7a7a4e1128fef90ba5cb070e59b83ea54378eb672a7dcff766d6dc71878320fbc2f49fdae8f23618d5c4ec7729d0ef7e796e40816a31d9de9248d231c152315fc1141112588a85b0f29d07b83dee78d63c161f116f03eeb98f5eaeef795d3a93284031a26a9b615fe375eb9ffa2cca05f3b", @ANYRES16=r3, @ANYBLOB="010325bd700800dcdf2502000000"], 0x14}}, 0x24008040) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4f43c1005f9bffb20578d4d4f1405d65e49e90213d5561b82ab25c0b30a57320212758b6fa12aac9b96f340d6b32c620ff6916261b8c6b244ae6056eec0042412fbdcb588af471817de73595", @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf250100000008001900ac1414aa06001a004e23000008001900e000000108001800ac1414bb06000300070000000500220001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r7, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8000000001000001, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0xf9, &(0x7f0000000400)={@multicast, @multicast, @void, {@ipv4={0x800, @tipc={{0x30, 0x4, 0x3, 0x5, 0xeb, 0x66, 0x0, 0x7f, 0x6, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x31}, {[@ssrr={0x89, 0xb, 0x96, [@multicast2, @rand_addr=0x64010100]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0x6d, 0x3, 0x6, [{@multicast2, 0x6}, {@multicast2, 0x7}, {@rand_addr=0x64010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x7f}]}, @generic={0x86, 0xd, "932e685f7be64b99b17606"}, @end, @ssrr={0x89, 0x1b, 0xe1, [@broadcast, @dev={0xac, 0x14, 0x14, 0x1a}, @empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_addr={0x44, 0x3c, 0x3a, 0x1, 0xe, [{@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@empty, 0xe5f}, {@broadcast, 0x1}, {@local, 0x6bb2}, {@private=0xa010101, 0x5}, {@empty, 0x9}]}, @timestamp_prespec={0x44, 0x14, 0xff, 0x3, 0x8, [{@remote, 0xfff}, {@local}]}]}}, @payload_named={{{{{0x2b, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2, 0x8, 0x0, 0x3, 0x4, 0x2, 0x2, 0x0, 0x2, 0x2, 0x4e23, 0x4e24}, 0x1}, 0x2, 0x4}}, [0x0, 0x0, 0x0]}}}}}, 0x0) syz_emit_ethernet(0x21, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@generic={0xdada, "3c324be412e72eb116a19c7c5124ac0bc0d006"}}}, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{}, "f20edc6f30d556c4", "b407a80d7192def19cc8d8ca67ebed42", "edd3fcfe", "b69f4ef343ed236e"}, 0x28) 41.292708766s ago: executing program 34 (id=810): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) fchdir(r0) (async) fchdir(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0e0002006e657464fcffffff000000000f0002006e657464657673696d3000000800030000f10000"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 30.485521421s ago: executing program 35 (id=935): r0 = socket$inet6(0xa, 0xa, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xff03, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r2) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000000540)=ANY=[@ANYBLOB="a41305efaf1b418c8cc25f96548e528b8a9a3b884a9d6fe1c6359bd16f98b9d6cda91650afcd1058dfbf49a704a7a7a4e1128fef90ba5cb070e59b83ea54378eb672a7dcff766d6dc71878320fbc2f49fdae8f23618d5c4ec7729d0ef7e796e40816a31d9de9248d231c152315fc1141112588a85b0f29d07b83dee78d63c161f116f03eeb98f5eaeef795d3a93284031a26a9b615fe375eb9ffa2cca05f3b", @ANYRES16=r3, @ANYBLOB="010325bd700800dcdf2502000000"], 0x14}}, 0x24008040) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4f43c1005f9bffb20578d4d4f1405d65e49e90213d5561b82ab25c0b30a57320212758b6fa12aac9b96f340d6b32c620ff6916261b8c6b244ae6056eec0042412fbdcb588af471817de73595", @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf250100000008001900ac1414aa06001a004e23000008001900e000000108001800ac1414bb06000300070000000500220001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r7, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8000000001000001, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0xf9, &(0x7f0000000400)={@multicast, @multicast, @void, {@ipv4={0x800, @tipc={{0x30, 0x4, 0x3, 0x5, 0xeb, 0x66, 0x0, 0x7f, 0x6, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x31}, {[@ssrr={0x89, 0xb, 0x96, [@multicast2, @rand_addr=0x64010100]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0x6d, 0x3, 0x6, [{@multicast2, 0x6}, {@multicast2, 0x7}, {@rand_addr=0x64010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x7f}]}, @generic={0x86, 0xd, "932e685f7be64b99b17606"}, @end, @ssrr={0x89, 0x1b, 0xe1, [@broadcast, @dev={0xac, 0x14, 0x14, 0x1a}, @empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_addr={0x44, 0x3c, 0x3a, 0x1, 0xe, [{@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@empty, 0xe5f}, {@broadcast, 0x1}, {@local, 0x6bb2}, {@private=0xa010101, 0x5}, {@empty, 0x9}]}, @timestamp_prespec={0x44, 0x14, 0xff, 0x3, 0x8, [{@remote, 0xfff}, {@local}]}]}}, @payload_named={{{{{0x2b, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2, 0x8, 0x0, 0x3, 0x4, 0x2, 0x2, 0x0, 0x2, 0x2, 0x4e23, 0x4e24}, 0x1}, 0x2, 0x4}}, [0x0, 0x0, 0x0]}}}}}, 0x0) syz_emit_ethernet(0x21, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@generic={0xdada, "3c324be412e72eb116a19c7c5124ac0bc0d006"}}}, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{}, "f20edc6f30d556c4", "b407a80d7192def19cc8d8ca67ebed42", "edd3fcfe", "b69f4ef343ed236e"}, 0x28) 26.081165177s ago: executing program 7 (id=1062): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r2, @ANYBLOB='.'], 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), &(0x7f0000000280)='./bus\x00', 0x6, 0x1) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mount$binder(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x8000, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYRES64=r3, @ANYRES32=r7, @ANYBLOB="05005b"], 0x24}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x70, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x51, 0x5b, "35794856a0e9d0355e5ddf0745b8eb4645eee66a2531078e442c7132ff5da67b4a84acab604eb27f73173d9fb608e3626f844fe134540c557c80d3e55ccbd50900000031359dbee90d3b7fd57b"}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001840)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0x1, 0x1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x8, 0xef, &(0x7f0000000000)=""/239, 0x40f00, 0x40}, 0x94) r11 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r11, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './sys/bus/pci/drivers/ehci-pci/bind\x00'}) 25.988310267s ago: executing program 7 (id=1118): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000040)}, 0x20) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xc9d3, 0x0, 0x0, 0x2}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r2, r7, &(0x7f0000000740)={0x0, 0x4fc4, 0x420, 0x1, 0xb2, 0x0, r2}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x181c, 0x4000, 0x80, 0x2a9, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd576, 0x20, 0x1009, 0x27f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x100, 0xffffffff, 0xed}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8a5a, 0x1001, 0x2000003, 0x2a3, 0x0, r2}}], 0x4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r6, '\x00', {0x1, 0x487, 0x0, 0x0}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @private2, 0x3e}}, 0x7, 0x3, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000240), &(0x7f0000000300)=""/234}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r11 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r11, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r10, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r12, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) close_range(r9, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@metacopy_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 24.48093949s ago: executing program 7 (id=1149): syz_emit_vhci(&(0x7f0000000880)=ANY=[@ANYBLOB="82384342c53531df5804040aff"], 0xd) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) fchmodat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x39) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4044000) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="4a96060000000005001305020001008102750206d54998ad17baf6e2af25585613627bf6a4b92394dd90e3c1f76ac9ac5f743e7e063fe9814c868d6176a908e9a74f004f33896ac5c5"], 0xf) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4, 0x8], 0x0, 0x0, 0x12, 0x1}}, 0x40) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x2000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = syz_io_uring_setup(0x645f, &(0x7f00000005c0)={0x0, 0xa674, 0x10100, 0x0, 0x4001be}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000640)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x8010) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 24.392385618s ago: executing program 36 (id=1149): syz_emit_vhci(&(0x7f0000000880)=ANY=[@ANYBLOB="82384342c53531df5804040aff"], 0xd) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) fchmodat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x39) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4044000) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="4a96060000000005001305020001008102750206d54998ad17baf6e2af25585613627bf6a4b92394dd90e3c1f76ac9ac5f743e7e063fe9814c868d6176a908e9a74f004f33896ac5c5"], 0xf) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4, 0x8], 0x0, 0x0, 0x12, 0x1}}, 0x40) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x2000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = syz_io_uring_setup(0x645f, &(0x7f00000005c0)={0x0, 0xa674, 0x10100, 0x0, 0x4001be}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000640)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="08002cbd7000fddbdf253d0000000c009900ff0100000400000008005d000100000008005d000100000008005d000100000008005d000100000008005d000100000008005d000100000008005d000000000008005d000100000008005d000100000008005d0001000000393cf14ff55e1d32d590dc3ecddd92d11852b04dcd8d20b9b4ed79fb1b8da00095f7e4c37e28ecae1b6fdba52d056d78f44af84ca53448b940fe00c103778bfa4e1de539f1224eaff8d8616f927680a4f1ef5dee75db2d54272d3fd0c2a910aa276970353cef2e7ca6acfb2d822cfaf13e9ea2d353aa4cd45a4f2e778fa9129acafe6a0dca0314435aaf3a7a2d69e9424dbe905b6dbc44d3b341f61c66cc7e795a5b83c77140906b20a0bf69c1c6f4a9c98cbecd43bd293aa74289e28f674ad6b3389b4c6548810aa4"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x8010) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 11.54623415s ago: executing program 5 (id=1321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000340000000100900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x40880) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0xfdcd, 0x0, @wg=@data}}}}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x6000, 0x0) ioctl$CDROMPLAYMSF(r5, 0x5303, &(0x7f0000000180)={0x4, 0xf4, 0x4, 0xd, 0x4, 0x8}) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x11}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r8, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r4, 0x300, 0x70bd26, 0x25dfdbf9, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x8040) 10.931495978s ago: executing program 5 (id=1326): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40010, 0xffffffffffffffff, 0x7542d000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000100), 0x640, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) ptrace$pokeuser(0x6, r3, 0x388, 0x6) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000140)={'\x00', 0x9, 0x4, 0x80000001, 0x4, 0x7, r3}) 10.619861917s ago: executing program 5 (id=1330): r0 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)="653a6d795f726561645f6d7372314a012e1ddded220c18", 0x17) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x114) ioctl$BLKCRYPTOGENERATEKEY(r2, 0xc030128a, &(0x7f00000001c0)={&(0x7f0000000140)=""/69, 0x45}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read$FUSE(r3, &(0x7f0000001280)={0x2020}, 0x2020) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000200)={0x1, 0x0, 0x3, 0x2, {0x1, 0x6, 0x400, 0x5}}) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r8) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc03, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = socket$kcm(0x11, 0x3, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 10.397314418s ago: executing program 5 (id=1334): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f000000040000000800000004"], 0x50) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x808e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000700), &(0x7f0000000100)=r3}, 0x20) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000740)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="27031c00160014", 0x7}, {&(0x7f00000008c0)="7d3ed2ea1f2f210c0784b2ce65c9e34b11", 0x11}], 0x2}, 0x40000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r1, &(0x7f0000000040), 0x0}, 0x20) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)) 10.372577555s ago: executing program 5 (id=1336): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x80, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x29, 0x0, @empty, @private}}}}) close_range(r1, r0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp\x00') (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x80, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x29, 0x0, @empty, @private}}}}) (async) close_range(r1, r0, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp\x00') (async) 10.290931563s ago: executing program 5 (id=1338): r0 = creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', &(0x7f0000000340)={0x200, 0x120, 0x1}, 0x18) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000480)={@desc={0x1, 0x0, @desc1}}) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='cifs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='3\n', 0x2) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\r\x00'/20, @ANYRES32=0x0, @ANYBLOB="8c45040000000000140012800900010076657468000000000400028008001300", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) accept$unix(r1, &(0x7f0000000280)=@abs, &(0x7f0000000140)=0x6e) sendmsg$nl_xfrm(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="cc00000021000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000100000000ffffffff0000000000000000000000000000000000000000000000002c004f60385ef3aad044a0123e6e521300ac1414bb000000000000000000000000fe800000000000000000000000000028000000000a000000567eaec0856f89e2fa"], 0xcc}}, 0x0) flock(r1, 0x2) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') setns(r0, 0x2000000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000004c0)={0x0, @local, @private}, &(0x7f0000000500)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r7, 0x2f, 0x0, 0x4, 0xfff, 0x10, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x0, 0x6, 0x1}}) 1.132918081s ago: executing program 6 (id=1451): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1f, 0x0, 0x1000000}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x1, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x3, &(0x7f00000000c0), 0x0, 0x8e, 0x14, 0x52, 0x2d, 0x18}) 1.132552281s ago: executing program 0 (id=1452): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0fc5:1227:b', 0xb) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={@null, 0xa, 'lo\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) (async) write(r0, &(0x7f0000000140)='0fc5:1227:b', 0xb) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={@null, 0xa, 'lo\x00'}) (async) 1.131537167s ago: executing program 6 (id=1453): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0xfffffffffffffddf, 0x2f, 0x9, 0x70bc2a, 0x0, {0x4}, [@nested={0x24, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9"]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4002844}, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x3a, 0x1, 0xf4, 0x4, 0x11, @mcast2, @private0, 0x1, 0x700, 0x81, 0x2}}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x1, {0x2, 0xff, 0x2}, 0x2}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r2, &(0x7f0000000240)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.131386522s ago: executing program 0 (id=1454): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80a0}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:00.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='cdns2-pci\n\x00', 0xb) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/cdns2-pci/bind\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='0000:00:00.0\n\x00', 0xd) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001200370d0000"], 0x3c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001180)={0x1, &(0x7f00000011c0)=[{0x6, 0x0, 0x0, 0x4}]}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="1401000020000100"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.068695279s ago: executing program 6 (id=1455): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001300f5d10300"/20, @ANYBLOB="ce3fc9a98d59e45404fd258f6c17023ec40a4588c1ec8ddf47c5d9ce161d6521066e00afdbe0b5bc2bb42b8b0956def695e53e8d97199098f79ca31f2f5a6a7068036186921afd43dd3ce9a1c2ff448918706a7a", @ANYBLOB="000000cb2b239fa3c3b5e0df000000"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.06759622s ago: executing program 6 (id=1457): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2be27de13db01225280012800b0001006d616373656300001800028005000f00020000000c000600000000000000000008000500", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 926.583071ms ago: executing program 6 (id=1458): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 925.832372ms ago: executing program 6 (id=1460): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x400, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20e400, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r6, {0x7, 0x7}, {0x7, 0x5}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x5}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff3, 0x8}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x71b0}, @TCA_FLOW_RSHIFT={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e23, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r7], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000076b9bc97ebd3768dd345401916514ac0e3a257c9df27566ee7b001bdfb60bdb7f2ad453669ec5e3dfc223ed2260634403821ec10cd94f65b135c7300eaba71c0ee3"], 0x50) syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000002030144b4740000102030109022e00010118100409040000020103000609058e0b20000fd702052501012709058c0200066df780052501013a"], &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x9, 0xe, 0x40, 0x40}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x60}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) 925.705203ms ago: executing program 8 (id=1461): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @lsm=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 854.965638ms ago: executing program 8 (id=1462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006001700800a000014000280"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x9, 0xfffffffffffffffd, 0x71, 0x101, 0x7f, 0x2d7, 0x7d, 0x8000000000000000, 0x3, 0x0, 0x9, 0x401, 0x2, 0x2, 0x8d], 0xeeee8000, 0x201e87}) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x10002, 0x1, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0xff, 0xffffffffffffffff, 'id0\x00'}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="944cf7", 0x3}], 0x1}, 0x20000010) ioctl$KVM_TDX_CAPABILITIES(r1, 0xc008aeba, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x4, 0x0, [{}, {}, {}, {}]}}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) readv(r9, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/53, 0x35}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) 170.16496ms ago: executing program 0 (id=1463): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)={0x20, 0x2, 0x2, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x20000810) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x3}}, './cgroup\x00'}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, r5, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000800) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, r3, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040851}, 0x44001) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000006111680000000000950000000000000068dd253aa0e2332c817c5e9376eaf9"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, &(0x7f0000000100)='barrier') sendto$inet6(r4, &(0x7f0000000800)="5b3b8aa1c9167c4be7fbb654cd00004e529290346e99f5ed8fe7cb4359d27555366f485e49eabc814fbaa57d469c37326bfd905d5d6e28efe3a25e9dd6e4838e123a650cc1b0e74b84d611773eca85ab8e665a1e5d64cce9cecacda906327245605d823ee29b8d1532400afafaceee75b2bd1490e5c25b3a9f86c4ee5b496fd880a596da011bc7ca10c37fc7d0618a3f247adb853ff2278df7b3e5a5bbc29c694347f0ee12e79883bd8af91c7f4b807439754ff1a723caa22921fe389aa0a15206e5ef1777fc8cf90f3b8dac03b829bb41e070a122fb6703ced480a2cd0730887552d908f206d4828d3c30e226c34a04531d3ca6b2c147b38e1e739c1dac83d095a09dd23da361155efe21f43c9810c2012b32888840bc109538a7156db093a1de20fcf155063f220c1055bbce9f364a75097f9cd189ae94f271c63bb75a4ac32386742f2d0000000000000000612860a93e86f503c5e66500000000000000", 0x15f, 0x4000800, &(0x7f0000000440)={0xa, 0x4e23, 0x1c, @local, 0x1}, 0x1c) r6 = socket(0x400000000010, 0x3, 0x0) bind$rxrpc(r6, &(0x7f0000000200)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x1, @private0, 0x6}}, 0xfffffffffffffcc1) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000200)="1c0000001a009b8a070000003b9b701f400004000000eb3f7a7f1de2", 0x1c) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}}) sendmmsg$sock(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) 90.418054ms ago: executing program 8 (id=1464): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)) 90.122659ms ago: executing program 0 (id=1465): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc, r1}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f0000000180)='-:s/p ./file0:', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000006f40)='./file0\x00', 0x140) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000440)={0x8, r1}) 89.474071ms ago: executing program 8 (id=1466): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x40000, 0x4) 89.165336ms ago: executing program 0 (id=1467): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000080), 0x10) close_range(r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x7) (async) listen(r1, 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042, 0x64081, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042, 0x64081, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50) r2 = accept4(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)='w', 0xfd8a}], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x8) close(r2) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x1, 0x0) (async) r3 = socket$kcm(0x10, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 84.580352ms ago: executing program 8 (id=1468): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000025000200091b00003d0300001b0a00008701000000000000bc26000000000000bf67000000000000340300000ee600f0670200000f00000016030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 162.433µs ago: executing program 8 (id=1469): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x10, 0x7800, 0x101, 0x4, {{0x8, 0x4, 0x0, 0x9, 0x20, 0x68, 0x0, 0x81, 0x0, 0x0, @multicast2, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x29, 0x1, 0x3, [{@empty}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x80, 0x700, 0x6, 0x8, {{0x1b, 0x4, 0x3, 0x6, 0x6c, 0x65, 0x0, 0x1d, 0x4, 0x0, @remote, @multicast1, {[@rr={0x7, 0x17, 0x89, [@multicast2, @multicast1, @multicast2, @local, @multicast1]}, @cipso={0x86, 0x18, 0x0, [{0x0, 0x4, "ac93"}, {0x5, 0x7, "db56f94f79"}, {0x5, 0x2}, {0x1, 0x5, "4312f2"}]}, @timestamp={0x44, 0x1c, 0xc6, 0x0, 0x5, [0x2, 0x7ff, 0x2, 0x100, 0x3, 0x1]}, @noop, @generic={0x44, 0xa, "7d1376f9335db3b5"}]}}}}}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r6], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'bond_slave_0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000580), 0x8, 0x95, 0x8, 0xfffffffffffffe9e, &(0x7f0000000540)}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'ip_vti0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x1, 0x8, 0x6, 0x4d8, {{0xf, 0x4, 0x3, 0x4, 0x3c, 0x65, 0x0, 0x80, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x27, 0x11, [@multicast2, @broadcast, @broadcast, @remote, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010100, @multicast1]}]}}}}}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x1000}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x0, 0x2, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x64}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r14 = socket$packet(0x11, 0x3, 0x300) bind$packet(r14, &(0x7f0000000300)={0x11, 0x0, r13}, 0x14) setsockopt$sock_int(r14, 0x1, 0xc, &(0x7f0000000500)=0x10000001, 0x4) sendto(r14, &(0x7f0000000400)="00112233445566778899aabbccdd", 0xe, 0x0, &(0x7f0000000300)=@ll={0x11, 0x0, r13}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000009c0)={'syztnl0\x00', &(0x7f0000000940)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x4, 0x8, 0x8, @rand_addr=' \x01\x00', @mcast2, 0x700, 0x80, 0x8000, 0x5}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d80)={0x178, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x4, 0x3, 0x1}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4}, 0x84) syz_usbip_server_init(0x5) r16 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@dellink={0x28, 0x11, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x8509, 0x40120}, [@IFLA_NET_NS_FD={0x8, 0x1c, r16}]}, 0x28}}, 0x46008040) 0s ago: executing program 0 (id=1470): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) (async, rerun: 64) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x8000000000000001, 0x2) ioctl$HIDIOCGCOLLECTIONINFO(r2, 0xc0104811, &(0x7f0000000140)={0x684d1096, 0xe, 0x400, 0x3a49}) (async) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000080)={'vlan1\x00', &(0x7f00000000c0)=@ethtool_channels={0x1, 0x0, 0x0, 0x4, 0x3, 0x0, 0x88, 0x2000000}}) mount$afs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x202202d, &(0x7f0000000180)=ANY=[@ANYRES64=r3]) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='efs\x00', 0x1214891, 0x0) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x200, r4}, 0x38) fanotify_mark(r1, 0x1, 0x40000020, r0, &(0x7f00000000c0)='./file0\x00') kernel console output (not intermixed with test programs): udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 109.537291][ T42] audit: type=1800 audit(1785773778.821:1480): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 109.628714][ T42] audit: type=1800 audit(1785773778.921:1481): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 109.640207][ T9005] netlink: 132 bytes leftover after parsing attributes in process `syz.1.835'. [ 109.674476][ T42] audit: type=1800 audit(1785773778.961:1482): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 109.688855][ T42] audit: type=1400 audit(1785773778.981:1483): avc: denied { ioctl } for pid=9006 comm="syz.5.836" path="/dev/usbmon0" dev="devtmpfs" ino=738 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 109.696703][ T42] audit: type=1800 audit(1785773778.981:1484): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 109.744656][ T42] audit: type=1800 audit(1785773779.031:1485): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 109.761004][ T42] audit: type=1400 audit(1785773779.041:1486): avc: denied { mounton } for pid=9006 comm="syz.5.836" path="/proc/260/task" dev="proc" ino=31578 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 109.796709][ T9014] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 109.862534][ T9021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.904530][ T9024] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 109.913518][ T9023] IPVS: stopping backup sync thread 9024 ... [ 110.249129][ T9036] overlayfs: missing 'lowerdir' [ 110.389664][ T37] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 110.515178][ T5750] Bluetooth: hci0: Zero size dump init pkt [ 110.555779][ T9049] syzkaller0: entered promiscuous mode [ 110.557704][ T9049] syzkaller0: entered allmulticast mode [ 110.769410][ T9061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9061 comm=syz.1.856 [ 110.790457][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.856'. [ 110.807719][ T9060] bridge: RTM_NEWNEIGH with invalid ether address [ 110.810134][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.856'. [ 110.815870][ T9060] bridge: RTM_NEWNEIGH with invalid ether address [ 110.821904][ T9061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.856'. [ 110.829428][ T9061] bridge: RTM_NEWNEIGH with invalid ether address [ 110.839126][ T9060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9060 comm=syz.1.856 [ 110.848371][ T9060] netlink: 'syz.1.856': attribute type 1 has an invalid length. [ 111.104892][ T9071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=9071 comm=syz.1.860 [ 111.117669][ T9071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=9071 comm=syz.1.860 [ 111.129967][ T9071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9071 comm=syz.1.860 [ 111.147600][ T9071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=9071 comm=syz.1.860 [ 111.151444][ T9071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=9071 comm=syz.1.860 [ 111.155202][ T9071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=9071 comm=syz.1.860 [ 111.169844][ T9071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=9071 comm=syz.1.860 [ 111.618786][ T9096] netlink: 'syz.0.868': attribute type 6 has an invalid length. [ 111.730411][ T9100] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 111.758209][ T9097] FAULT_INJECTION: forcing a failure. [ 111.758209][ T9097] name fail_futex, interval 1, probability 0, space 0, times 1 [ 111.775633][ T9097] CPU: 3 UID: 0 PID: 9097 Comm: syz.5.869 Not tainted syzkaller #0 PREEMPT(full) [ 111.775651][ T9097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.775657][ T9097] Call Trace: [ 111.775662][ T9097] [ 111.775667][ T9097] dump_stack_lvl+0x100/0x190 [ 111.775729][ T9097] should_fail_ex.cold+0x5/0xa [ 111.775751][ T9097] should_fail_futex+0x4c/0x60 [ 111.775778][ T9097] __x64_sys_futex+0x1f0/0x4d0 [ 111.775795][ T9097] ? exc_page_fault+0x6f/0xd0 [ 111.775811][ T9097] ? __pfx___x64_sys_futex+0x10/0x10 [ 111.775832][ T9097] do_syscall_64+0x115/0x870 [ 111.775844][ T9097] ? clear_bhb_loop+0x40/0x90 [ 111.775858][ T9097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.775869][ T9097] RIP: 0033:0x7feacdd9e019 [ 111.775878][ T9097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.775889][ T9097] RSP: 002b:00007fff97115d68 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.775900][ T9097] RAX: ffffffffffffffda RBX: 000000000001b422 RCX: 00007feacdd9e019 [ 111.775907][ T9097] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007feace02609c [ 111.775913][ T9097] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 111.775919][ T9097] R10: 00007fff97115e70 R11: 0000000000000246 R12: 00007fff97115e90 [ 111.775925][ T9097] R13: 00007feace02609c R14: 000000000001b454 R15: 00007fff97115e70 [ 111.775939][ T9097] [ 111.776203][ T9097] FAULT_INJECTION: forcing a failure. [ 111.776203][ T9097] name fail_futex, interval 1, probability 0, space 0, times 0 [ 111.847727][ T9097] CPU: 1 UID: 0 PID: 9097 Comm: syz.5.869 Not tainted syzkaller #0 PREEMPT(full) [ 111.847753][ T9097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.847764][ T9097] Call Trace: [ 111.847771][ T9097] [ 111.847778][ T9097] dump_stack_lvl+0x100/0x190 [ 111.847807][ T9097] should_fail_ex.cold+0x5/0xa [ 111.847830][ T9097] get_futex_key+0x1d2/0x14f0 [ 111.847858][ T9097] ? __pfx_get_futex_key+0x10/0x10 [ 111.847890][ T9097] futex_wake+0xf4/0x5e0 [ 111.847906][ T9097] ? futex_wait+0x11e/0x370 [ 111.847932][ T9097] ? __pfx_futex_wake+0x10/0x10 [ 111.847961][ T9097] do_futex+0x2b2/0x440 [ 111.847985][ T9097] ? __pfx_do_futex+0x10/0x10 [ 111.848010][ T9097] ? ktime_get+0x22c/0x320 [ 111.848030][ T9097] ? lockdep_hardirqs_on+0x78/0x100 [ 111.848056][ T9097] __x64_sys_futex+0x34f/0x4d0 [ 111.848085][ T9097] ? __pfx___x64_sys_futex+0x10/0x10 [ 111.848119][ T9097] do_syscall_64+0x115/0x870 [ 111.848140][ T9097] ? clear_bhb_loop+0x40/0x90 [ 111.848161][ T9097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.848178][ T9097] RIP: 0033:0x7feacdd9e019 [ 111.848194][ T9097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.848211][ T9097] RSP: 002b:00007fff97115d68 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.848228][ T9097] RAX: ffffffffffffffda RBX: 00000000000000f0 RCX: 00007feacdd9e019 [ 111.848239][ T9097] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feace026098 [ 111.848250][ T9097] RBP: 0000000000001ec8 R08: 0000000000000004 R09: 0000000000000000 [ 111.848259][ T9097] R10: 00007feace025fa0 R11: 0000000000000246 R12: 0000000000000001 [ 111.848269][ T9097] R13: 00007feace02609c R14: 00007feace026098 R15: 00007feace026090 [ 111.848293][ T9097] [ 111.856071][ T9107] netlink: 'syz.0.872': attribute type 3 has an invalid length. [ 111.941031][ T9097] FAULT_INJECTION: forcing a failure. [ 111.941031][ T9097] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.950974][ T9097] CPU: 1 UID: 0 PID: 9097 Comm: syz.5.869 Not tainted syzkaller #0 PREEMPT(full) [ 111.950999][ T9097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.951009][ T9097] Call Trace: [ 111.951015][ T9097] [ 111.951022][ T9097] dump_stack_lvl+0x100/0x190 [ 111.951051][ T9097] should_fail_ex.cold+0x5/0xa [ 111.951075][ T9097] _copy_from_user+0x2e/0xd0 [ 111.951171][ T9097] get_timespec64+0x8d/0x240 [ 111.951196][ T9097] ? __pfx_get_timespec64+0x10/0x10 [ 111.951217][ T9097] ? lockdep_hardirqs_on+0x78/0x100 [ 111.951245][ T9097] __x64_sys_futex+0x21a/0x4d0 [ 111.951276][ T9097] ? __pfx___x64_sys_futex+0x10/0x10 [ 111.951311][ T9097] do_syscall_64+0x115/0x870 [ 111.951331][ T9097] ? clear_bhb_loop+0x40/0x90 [ 111.951354][ T9097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.951372][ T9097] RIP: 0033:0x7feacdd9e019 [ 111.951386][ T9097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.951403][ T9097] RSP: 002b:00007fff97115d68 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.951421][ T9097] RAX: ffffffffffffffda RBX: 000000000001b4d9 RCX: 00007feacdd9e019 [ 111.951432][ T9097] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007feace02618c [ 111.951443][ T9097] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 111.951454][ T9097] R10: 00007fff97115e70 R11: 0000000000000246 R12: 00007fff97115e90 [ 111.951465][ T9097] R13: 00007feace02618c R14: 000000000001b50b R15: 00007fff97115e70 [ 111.951489][ T9097] [ 112.145248][ T9116] netlink: 36 bytes leftover after parsing attributes in process `syz.1.875'. [ 112.552673][ T9123] binder_alloc: 9122: binder_alloc_buf size 24560 failed, no address space [ 112.563500][ T9123] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 112.692985][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.879'. [ 112.821584][ T9136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.882'. [ 113.101429][ T9141] netlink: 'syz.0.883': attribute type 6 has an invalid length. [ 113.467698][ T847] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 113.601942][ T847] usb 5-1: device descriptor read/64, error -71 [ 113.840176][ T847] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 113.967704][ T847] usb 5-1: device descriptor read/64, error -71 [ 114.080262][ T847] usb usb5-port1: attempt power cycle [ 114.388661][ T42] kauditd_printk_skb: 67 callbacks suppressed [ 114.388679][ T42] audit: type=1800 audit(1785773783.681:1554): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 114.427646][ T847] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 114.448260][ T847] usb 5-1: device descriptor read/8, error -71 [ 114.540301][ T42] audit: type=1800 audit(1785773783.831:1555): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 114.626330][ T42] audit: type=1400 audit(1785773783.911:1556): avc: denied { append } for pid=9162 comm="syz.5.891" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 114.637696][ T9163] program syz.5.891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.641532][ T42] audit: type=1800 audit(1785773783.911:1557): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 114.687655][ T847] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 114.703429][ T42] audit: type=1800 audit(1785773783.991:1558): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 114.721750][ T847] usb 5-1: device descriptor read/8, error -71 [ 114.828040][ T847] usb usb5-port1: unable to enumerate USB device [ 114.997651][ T5739] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 115.147757][ T5739] usb 10-1: Using ep0 maxpacket: 32 [ 115.150773][ T5739] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 115.153606][ T5739] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 115.156426][ T5739] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 115.159559][ T5739] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 115.163520][ T5739] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 115.166939][ T5739] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 115.174657][ T5739] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 115.184362][ T5739] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.189610][ T5739] usb 10-1: config 0 descriptor?? [ 115.192440][ T42] audit: type=1800 audit(1785773784.481:1559): pid=8158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=151153 res=0 errno=0 [ 115.206396][ T42] audit: type=1800 audit(1785773784.481:1560): pid=8158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=151182 res=0 errno=0 [ 115.213357][ T42] audit: type=1800 audit(1785773784.481:1561): pid=8158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=151160 res=0 errno=0 [ 115.221543][ T42] audit: type=1800 audit(1785773784.481:1562): pid=8158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=151161 res=0 errno=0 [ 115.228881][ T42] audit: type=1800 audit(1785773784.491:1563): pid=8158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=151162 res=0 errno=0 [ 115.446016][ T5739] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 115.701272][ T5739] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 115.792287][ T5887] usb 10-1: USB disconnect, device number 4 [ 115.817437][ T5887] usblp0: removed [ 115.961205][ T5739] libceph: mon0 (1)[c::]:6789 socket error on write [ 116.001837][ T9190] overlayfs: failed to resolve './file2': -2 [ 116.431679][ T9177] ceph: No mds server is up or the cluster is laggy [ 116.469872][ T5887] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 116.676855][ T9214] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 116.975998][ T9225] netlink: 72 bytes leftover after parsing attributes in process `syz.5.911'. [ 116.987696][ T9225] netlink: 72 bytes leftover after parsing attributes in process `syz.5.911'. [ 117.033164][ T9225] netlink: 72 bytes leftover after parsing attributes in process `syz.5.911'. [ 117.036052][ T9225] netlink: 72 bytes leftover after parsing attributes in process `syz.5.911'. [ 117.091242][ T9225] netlink: 72 bytes leftover after parsing attributes in process `syz.5.911'. [ 117.094131][ T9225] netlink: 72 bytes leftover after parsing attributes in process `syz.5.911'. [ 117.391036][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.5.925'. [ 117.393932][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.5.925'. [ 117.503344][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.924'. [ 117.508325][ T9279] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.664210][ T9300] netlink: 28 bytes leftover after parsing attributes in process `syz.5.928'. [ 117.667307][ T9300] netlink: 'syz.5.928': attribute type 7 has an invalid length. [ 117.670200][ T9300] netlink: 'syz.5.928': attribute type 8 has an invalid length. [ 117.675707][ T9300] ip6gretap0: entered promiscuous mode [ 117.680352][ T9300] ip6gretap0: left promiscuous mode [ 117.797691][ T9304] Mount JFS Failure: -5 [ 117.800601][ T9304] jfs_mount failed w/return code = -5 [ 117.900795][ T9311] netlink: 'syz.5.930': attribute type 11 has an invalid length. [ 117.981913][ T9318] tmpfs: Bad value for 'mpol' [ 119.136893][ T9342] binder: BINDER_SET_CONTEXT_MGR already set [ 119.149579][ T9342] binder: 9341:9342 ioctl 4018620d 200000004a80 returned -16 [ 119.517058][ T42] kauditd_printk_skb: 70 callbacks suppressed [ 119.517084][ T42] audit: type=1800 audit(1785773788.781:1634): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 119.539601][ T9357] xt_hl: Unknown TTL match mode: 255 [ 119.609861][ T42] audit: type=1800 audit(1785773788.891:1635): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 119.707898][ T42] audit: type=1800 audit(1785773788.981:1636): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 119.844715][ T42] audit: type=1800 audit(1785773789.131:1637): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 119.914610][ T42] audit: type=1400 audit(1785773789.201:1638): avc: denied { listen } for pid=9365 comm="syz.0.950" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.961484][ T42] audit: type=1800 audit(1785773789.241:1639): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 119.996938][ T9368] netlink: 'syz.0.951': attribute type 2 has an invalid length. [ 120.015945][ T9368] netlink: 'syz.0.951': attribute type 2 has an invalid length. [ 120.060692][ T42] audit: type=1800 audit(1785773789.351:1640): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 120.210615][ T42] audit: type=1800 audit(1785773789.491:1641): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 120.269087][ T42] audit: type=1800 audit(1785773789.561:1642): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 120.415157][ T42] audit: type=1800 audit(1785773789.701:1643): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 120.824026][ T9377] TCP: TCP_TX_DELAY enabled [ 120.947448][ T9387] team0: entered allmulticast mode [ 120.960102][ T9387] team_slave_0: entered allmulticast mode [ 120.967241][ T9387] team_slave_1: entered allmulticast mode [ 121.518650][ T9411] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 121.686683][ T9415] Bluetooth: hci4: Frame reassembly failed (-84) [ 121.730908][ T1023] Bluetooth: hci4: Frame reassembly failed (-84) [ 122.911407][ T5741] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 122.921494][ T5741] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 122.925131][ T5741] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 122.928174][ T5741] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 122.932229][ T5741] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.077807][ T7482] team0: Port device syz_tun removed [ 123.339663][ T5550] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.473820][ T5550] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.698091][ T5750] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 123.863553][ T9421] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.868998][ T9421] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.874331][ T9421] bridge_slave_0: entered allmulticast mode [ 123.887861][ T9421] bridge_slave_0: entered promiscuous mode [ 123.898022][ T9421] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.903577][ T9421] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.909860][ T9421] bridge_slave_1: entered allmulticast mode [ 123.917691][ T9421] bridge_slave_1: entered promiscuous mode [ 123.962416][ T5550] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.008079][ T9421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.024697][ T9421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.152284][ T5550] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.164125][ T9421] team0: Port device team_slave_0 added [ 124.172409][ T9421] team0: Port device team_slave_1 added [ 124.223332][ T9421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.225541][ T9421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.247624][ T9421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.252072][ T9421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.254305][ T9421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.263775][ T9421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.307725][ T2113] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 124.318451][ T9421] hsr_slave_0: entered promiscuous mode [ 124.320997][ T9421] hsr_slave_1: entered promiscuous mode [ 124.323628][ T9421] debugfs: 'hsr0' already exists in 'hsr' [ 124.325567][ T9421] Cannot create hsr debugfs directory [ 124.467655][ T2113] usb 10-1: Using ep0 maxpacket: 8 [ 124.474152][ T2113] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.489237][ T2113] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.507958][ T2113] usb 10-1: config 0 interface 0 has no altsetting 0 [ 124.514429][ T2113] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 124.518577][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 124.518587][ T42] audit: type=1800 audit(1785773793.811:1681): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157306 res=0 errno=0 [ 124.536238][ T42] audit: type=1800 audit(1785773793.821:1682): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=157311 res=0 errno=0 [ 124.549837][ T42] audit: type=1800 audit(1785773793.841:1683): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=157315 res=0 errno=0 [ 124.557983][ T2113] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.567132][ T42] audit: type=1800 audit(1785773793.841:1684): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=157314 res=0 errno=0 [ 124.578870][ T2113] usb 10-1: config 0 descriptor?? [ 124.583565][ T42] audit: type=1800 audit(1785773793.841:1685): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=157317 res=0 errno=0 [ 124.610217][ T42] audit: type=1800 audit(1785773793.861:1686): pid=8158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157744 res=0 errno=0 [ 124.626378][ T42] audit: type=1800 audit(1785773793.861:1687): pid=8158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=157809 res=0 errno=0 [ 124.633360][ T5550] bridge_slave_1: left promiscuous mode [ 124.635270][ T5550] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.639770][ T42] audit: type=1800 audit(1785773793.861:1688): pid=8158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=157762 res=0 errno=0 [ 124.646210][ T42] audit: type=1800 audit(1785773793.861:1689): pid=8158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=157763 res=0 errno=0 [ 124.653118][ T42] audit: type=1800 audit(1785773793.861:1690): pid=8158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=157764 res=0 errno=0 [ 124.661087][ T5550] bridge_slave_0: left allmulticast mode [ 124.662896][ T5550] bridge_slave_0: left promiscuous mode [ 124.664762][ T5550] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.676209][ T5550] dvmrp0: left allmulticast mode [ 124.818786][ T5550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.900643][ T5550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.912021][ T5550] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 124.923488][ T5550] bond0 (unregistering): Released all slaves [ 124.939139][ T5550] bond1 (unregistering): Released all slaves [ 124.978218][ T5750] Bluetooth: hci5: command tx timeout [ 124.984603][ T5550] bond2 (unregistering): Released all slaves [ 124.995896][ T2113] hid_parser_main: 7 callbacks suppressed [ 124.995924][ T2113] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 125.002200][ T2113] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 125.005182][ T2113] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 125.008480][ T2113] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 125.011461][ T2113] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 125.014969][ T2113] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 125.510400][ T2113] usb 10-1: USB disconnect, device number 5 [ 125.660561][ T9463] batman_adv: batadv0: Adding interface: macvtap1 [ 125.667662][ T9463] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.675332][ T9463] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 125.724865][ T9421] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 125.729423][ T9421] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 125.737160][ T9421] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 125.756066][ T9421] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.764366][ T9421] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 125.769276][ T9421] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.772817][ T9421] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 125.778103][ T9467] __nla_validate_parse: 7 callbacks suppressed [ 125.778118][ T9467] netlink: 48 bytes leftover after parsing attributes in process `syz.0.976'. [ 125.778996][ T9421] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.874823][ T5451] 8021q: adding VLAN 0 to HW filter on device eth1 [ 125.996451][ T9421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.006562][ T9421] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.013437][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.015751][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.041602][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.043869][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.182887][ T5887] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 126.306624][ T5451] 8021q: adding VLAN 0 to HW filter on device eth6 [ 126.338852][ T5550] hsr_slave_0: left promiscuous mode [ 126.342112][ T5550] hsr_slave_1: left promiscuous mode [ 126.344328][ T5550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.346814][ T5550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.351393][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 126.355717][ T5887] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 126.356323][ T5550] veth1_macvtap: left promiscuous mode [ 126.361863][ T5887] usb 5-1: config 0 has no interface number 0 [ 126.362030][ T5550] veth0_macvtap: left promiscuous mode [ 126.363907][ T5887] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 126.365793][ T5550] veth1_vlan: left promiscuous mode [ 126.368612][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.370742][ T5550] veth0_vlan: left promiscuous mode [ 126.376845][ T5887] usb 5-1: config 0 descriptor?? [ 126.490613][ T5887] viperboard 5-1:0.143: version 0.00 found at bus 005 address 010 [ 126.525705][ T5887] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 126.528858][ T5887] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5 [ 126.595974][ T5550] team0 (unregistering): Port device team_slave_1 removed [ 126.598778][ T9482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.607262][ T9482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.613038][ T5550] team0 (unregistering): Port device team_slave_0 removed [ 126.761667][ T9497] bridge1: entered allmulticast mode [ 126.797146][ T5817] usb 5-1: USB disconnect, device number 10 [ 126.903900][ T9507] netlink: 48 bytes leftover after parsing attributes in process `syz.5.984'. [ 127.121329][ T5750] Bluetooth: hci5: command tx timeout [ 127.158603][ T9421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.204054][ T5451] 8021q: adding VLAN 0 to HW filter on device eth7 [ 127.323932][ T5550] IPVS: stop unused estimator thread 0... [ 127.413679][ T9538] tipc: Started in network mode [ 127.415367][ T9538] tipc: Node identity 62ba69f828eb, cluster identity 4711 [ 127.420458][ T9538] tipc: Enabled bearer , priority 10 [ 127.467823][ T9421] veth0_vlan: entered promiscuous mode [ 127.485264][ T9421] veth1_vlan: entered promiscuous mode [ 127.526861][ T9421] veth0_macvtap: entered promiscuous mode [ 127.538281][ T9421] veth1_macvtap: entered promiscuous mode [ 127.564851][ T9421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.601478][ T9552] FAULT_INJECTION: forcing a failure. [ 127.601478][ T9552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.605784][ T9552] CPU: 3 UID: 0 PID: 9552 Comm: syz.0.991 Not tainted syzkaller #0 PREEMPT(full) [ 127.605798][ T9552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.605805][ T9552] Call Trace: [ 127.605810][ T9552] [ 127.605814][ T9552] dump_stack_lvl+0x100/0x190 [ 127.605905][ T9552] should_fail_ex.cold+0x5/0xa [ 127.605925][ T9552] _copy_from_iter+0x1f4/0x1690 [ 127.605968][ T9552] ? __asan_memset+0x23/0x50 [ 127.605994][ T9552] ? __pfx__copy_from_iter+0x10/0x10 [ 127.606010][ T9552] ? __pfx___alloc_skb+0x10/0x10 [ 127.606043][ T9552] netlink_sendmsg+0x808/0xda0 [ 127.606057][ T9552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.606070][ T9552] ? selinux_socket_sendmsg+0x198/0x2f0 [ 127.606099][ T9552] sock_write_iter+0x53a/0x5b0 [ 127.606116][ T9552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.606127][ T9552] ? __pfx_sock_write_iter+0x10/0x10 [ 127.606148][ T9552] ? __pfx___file_has_perm+0x10/0x10 [ 127.606165][ T9552] do_iter_readv_writev+0x6f7/0x930 [ 127.606184][ T9552] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 127.606199][ T9552] ? selinux_file_permission+0x8f/0x6d0 [ 127.606217][ T9552] ? bpf_lsm_file_permission+0x9/0x10 [ 127.606235][ T9552] ? security_file_permission+0x76/0x210 [ 127.606253][ T9552] ? rw_verify_area+0xce/0x6d0 [ 127.606268][ T9552] vfs_writev+0x360/0xdd0 [ 127.606287][ T9552] ? __pfx_vfs_writev+0x10/0x10 [ 127.606304][ T9552] ? rcu_read_lock_any_held+0x6a/0xa0 [ 127.606336][ T9552] ? __fget_files+0x21f/0x3d0 [ 127.606358][ T9552] ? do_writev+0x28a/0x340 [ 127.606373][ T9552] do_writev+0x28a/0x340 [ 127.606389][ T9552] ? __pfx_do_writev+0x10/0x10 [ 127.606407][ T9552] do_syscall_64+0x115/0x870 [ 127.606435][ T9552] ? clear_bhb_loop+0x40/0x90 [ 127.606449][ T9552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.606460][ T9552] RIP: 0033:0x7ff50d59e019 [ 127.606470][ T9552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.606481][ T9552] RSP: 002b:00007ff50e413028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 127.606492][ T9552] RAX: ffffffffffffffda RBX: 00007ff50d825fa0 RCX: 00007ff50d59e019 [ 127.606499][ T9552] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 127.606505][ T9552] RBP: 00007ff50e413090 R08: 0000000000000000 R09: 0000000000000000 [ 127.606512][ T9552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.606517][ T9552] R13: 00007ff50d826038 R14: 00007ff50d825fa0 R15: 00007ffe0b1f37e8 [ 127.606531][ T9552] [ 127.610537][ T5451] 8021q: adding VLAN 0 to HW filter on device eth8 [ 127.682432][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.994'. [ 127.701700][ T9421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.705363][ T9561] netlink: 80 bytes leftover after parsing attributes in process `syz.0.994'. [ 127.741862][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.869233][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.872050][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.898378][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.906693][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.911547][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.957214][ T219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.959828][ T219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.059347][ T9583] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 128.129957][ T9585] FAULT_INJECTION: forcing a failure. [ 128.129957][ T9585] name failslab, interval 1, probability 0, space 0, times 0 [ 128.138055][ T9585] CPU: 2 UID: 0 PID: 9585 Comm: syz.6.1000 Not tainted syzkaller #0 PREEMPT(full) [ 128.138072][ T9585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.138080][ T9585] Call Trace: [ 128.138084][ T9585] [ 128.138089][ T9585] dump_stack_lvl+0x100/0x190 [ 128.138107][ T9585] should_fail_ex.cold+0x5/0xa [ 128.138122][ T9585] should_failslab+0xc2/0x120 [ 128.138138][ T9585] __kmalloc_cache_noprof+0x91/0x6c0 [ 128.138156][ T9585] ? __inet_diag_dump_start+0x8e/0x8f0 [ 128.138184][ T9585] __inet_diag_dump_start+0x8e/0x8f0 [ 128.138198][ T9585] __netlink_dump_start+0x60e/0x990 [ 128.138211][ T9585] inet_diag_handler_cmd+0x282/0x2e0 [ 128.138223][ T9585] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 128.138235][ T9585] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 128.138245][ T9585] ? __pfx_inet_diag_dump+0x10/0x10 [ 128.138255][ T9585] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 128.138267][ T9585] ? sock_diag_lock_handler+0x10f/0x2e0 [ 128.138285][ T9585] sock_diag_rcv_msg+0x431/0x7a0 [ 128.138299][ T9585] netlink_rcv_skb+0x159/0x420 [ 128.138311][ T9585] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 128.138325][ T9585] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 128.138344][ T9585] ? netlink_deliver_tap+0x1ae/0xcc0 [ 128.138358][ T9585] netlink_unicast+0x585/0x850 [ 128.138371][ T9585] ? __pfx_netlink_unicast+0x10/0x10 [ 128.138386][ T9585] netlink_sendmsg+0x8b0/0xda0 [ 128.138399][ T9585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.138412][ T9585] ? selinux_socket_sendmsg+0x198/0x2f0 [ 128.138432][ T9585] sock_write_iter+0x53a/0x5b0 [ 128.138449][ T9585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.138460][ T9585] ? __pfx_sock_write_iter+0x10/0x10 [ 128.138481][ T9585] ? __pfx___file_has_perm+0x10/0x10 [ 128.138499][ T9585] do_iter_readv_writev+0x6f7/0x930 [ 128.138517][ T9585] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 128.138532][ T9585] ? selinux_file_permission+0x8f/0x6d0 [ 128.138550][ T9585] ? bpf_lsm_file_permission+0x9/0x10 [ 128.138566][ T9585] ? security_file_permission+0x76/0x210 [ 128.138578][ T9585] ? rw_verify_area+0xce/0x6d0 [ 128.138594][ T9585] vfs_writev+0x360/0xdd0 [ 128.138616][ T9585] ? __pfx_vfs_writev+0x10/0x10 [ 128.138632][ T9585] ? rcu_read_lock_any_held+0x6a/0xa0 [ 128.138652][ T9585] ? __fget_files+0x21f/0x3d0 [ 128.138666][ T9585] ? do_writev+0x28a/0x340 [ 128.138680][ T9585] do_writev+0x28a/0x340 [ 128.138696][ T9585] ? __pfx_do_writev+0x10/0x10 [ 128.138715][ T9585] do_syscall_64+0x115/0x870 [ 128.138729][ T9585] ? clear_bhb_loop+0x40/0x90 [ 128.138764][ T9585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.138775][ T9585] RIP: 0033:0x7f94a1d9e019 [ 128.138786][ T9585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.138797][ T9585] RSP: 002b:00007f94a2ba3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 128.138808][ T9585] RAX: ffffffffffffffda RBX: 00007f94a2025fa0 RCX: 00007f94a1d9e019 [ 128.138815][ T9585] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 128.138822][ T9585] RBP: 00007f94a2ba3090 R08: 0000000000000000 R09: 0000000000000000 [ 128.138828][ T9585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.138834][ T9585] R13: 00007f94a2026038 R14: 00007f94a2025fa0 R15: 00007ffe074fee98 [ 128.138848][ T9585] [ 128.360181][ T29] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 128.546179][ T29] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 128.549615][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.553824][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 128.557421][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.570642][ T29] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 128.577636][ T29] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 128.581438][ T29] usb 5-1: Product: syz [ 128.583004][ T29] usb 5-1: Manufacturer: syz [ 128.593150][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 128.597555][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 128.610293][ T6738] tipc: Node number set to 1246849528 [ 128.613971][ T29] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 128.619188][ T29] cdc_wdm 5-1:1.0: Unknown control protocol [ 128.812127][ T29] usb 5-1: USB disconnect, device number 11 [ 128.945508][ T9594] unsupported nla_type 4111 [ 129.279208][ T6738] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 129.353938][ T5750] Bluetooth: hci5: command tx timeout [ 129.440938][ T6738] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 129.445166][ T6738] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.449919][ T6738] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 129.454134][ T6738] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.460468][ T6738] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 129.464372][ T6738] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 129.467762][ T6738] usb 5-1: Product: syz [ 129.469582][ T6738] usb 5-1: Manufacturer: syz [ 129.480288][ T6738] cdc_wdm 5-1:1.0: skipping garbage [ 129.486063][ T6738] cdc_wdm 5-1:1.0: skipping garbage [ 129.494308][ T6738] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 129.496871][ T6738] cdc_wdm 5-1:1.0: Unknown control protocol [ 129.746641][ T9606] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 129.756240][ T9606] VFS: Can't find a romfs filesystem on dev nullb0. [ 129.756240][ T9606] [ 129.784236][ T42] kauditd_printk_skb: 114 callbacks suppressed [ 129.784249][ T42] audit: type=1800 audit(1785773798.838:1805): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 129.835716][ T42] audit: type=1800 audit(1785773798.875:1806): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 129.927684][ T42] audit: type=1800 audit(1785773798.969:1807): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 129.949666][ T42] audit: type=1800 audit(1785773798.988:1808): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159641 res=0 errno=0 [ 129.958050][ T42] audit: type=1400 audit(1785773798.988:1809): avc: denied { write } for pid=9615 comm="syz.6.1011" name="/" dev="9p" ino=79953961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.966254][ T42] audit: type=1400 audit(1785773798.997:1810): avc: denied { append } for pid=9615 comm="syz.6.1011" path="/12/file0/cpuset.effective_cpus" dev="9p" ino=79954055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 130.147622][ T42] audit: type=1800 audit(1785773799.175:1811): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 130.165299][ T42] audit: type=1400 audit(1785773799.194:1812): avc: denied { getopt } for pid=9618 comm="syz.6.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 130.172459][ T9620] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1012'. [ 130.203436][ T42] audit: type=1800 audit(1785773799.222:1813): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 130.263439][ T42] audit: type=1800 audit(1785773799.278:1814): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 130.288928][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 130.291389][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 130.293956][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 130.296014][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 130.298307][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 130.300886][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 130.303006][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 130.305266][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 130.308039][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 130.310042][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 130.312861][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 130.315159][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 130.317337][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 130.319935][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 130.322169][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 130.324481][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 130.327328][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 130.329692][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 130.331703][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 130.334310][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 130.347053][ T5817] usb 5-1: USB disconnect, device number 12 [ 130.348754][ T9626] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 130.349086][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 130.359111][ T9626] CIFS mount error: No usable UNC path provided in device string! [ 130.359111][ T9626] [ 130.370138][ T9626] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 130.384518][ T9626] netlink: 'syz.6.1014': attribute type 23 has an invalid length. [ 130.471307][ T9626] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1014'. [ 130.697554][ T9642] loop8: detected capacity change from 0 to 7 [ 130.755651][ T9642] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 130.759039][ T9642] loop8: partition table partially beyond EOD, truncated [ 130.771910][ T9642] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 130.783902][ T9642] loop8: p2 start 121280928 is beyond EOD, truncated [ 130.838676][ T8158] udevd[8158]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 131.112361][ T9671] trusted_key: encrypted_key: master key parameter is missing [ 131.287323][ T9684] FAULT_INJECTION: forcing a failure. [ 131.287323][ T9684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.293646][ T9684] CPU: 1 UID: 0 PID: 9684 Comm: syz.6.1031 Not tainted syzkaller #0 PREEMPT(full) [ 131.293670][ T9684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.293682][ T9684] Call Trace: [ 131.293688][ T9684] [ 131.293695][ T9684] dump_stack_lvl+0x100/0x190 [ 131.293724][ T9684] should_fail_ex.cold+0x5/0xa [ 131.293747][ T9684] _copy_to_user+0x32/0xd0 [ 131.293775][ T9684] simple_read_from_buffer+0xcb/0x170 [ 131.293797][ T9684] proc_fail_nth_read+0x1af/0x230 [ 131.293826][ T9684] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.293853][ T9684] ? rw_verify_area+0xce/0x6d0 [ 131.293877][ T9684] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.293901][ T9684] vfs_read+0x1e4/0xb40 [ 131.293931][ T9684] ? __pfx_vfs_read+0x10/0x10 [ 131.293958][ T9684] ? __fget_files+0x215/0x3d0 [ 131.293982][ T9684] ? __fget_files+0x21f/0x3d0 [ 131.294006][ T9684] ksys_read+0x12a/0x250 [ 131.294032][ T9684] ? __pfx_ksys_read+0x10/0x10 [ 131.294068][ T9684] do_syscall_64+0x115/0x870 [ 131.294091][ T9684] ? clear_bhb_loop+0x40/0x90 [ 131.294113][ T9684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.294131][ T9684] RIP: 0033:0x7f94a1d5e84e [ 131.294148][ T9684] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 131.294165][ T9684] RSP: 002b:00007f94a2ba2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 131.294184][ T9684] RAX: ffffffffffffffda RBX: 00007f94a2ba36c0 RCX: 00007f94a1d5e84e [ 131.294196][ T9684] RDX: 000000000000000f RSI: 00007f94a2ba30a0 RDI: 0000000000000004 [ 131.294208][ T9684] RBP: 00007f94a2ba3090 R08: 0000000000000000 R09: 0000000000000000 [ 131.294219][ T9684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.294230][ T9684] R13: 00007f94a2026038 R14: 00007f94a2025fa0 R15: 00007ffe074fee98 [ 131.294256][ T9684] [ 131.569964][ T5750] Bluetooth: hci5: command tx timeout [ 131.745819][ T9720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1042'. [ 131.746613][ T9719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1042'. [ 131.783224][ T5550] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.789841][ T5550] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.804122][ T5550] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.805897][ T9725] x_tables: duplicate underflow at hook 1 [ 131.813141][ T5550] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.833243][ T9715] loop5: detected capacity change from 0 to 7 [ 131.841455][ T9715] loop5: p3 p4 [ 131.850069][ T9715] loop5: partition table partially beyond EOD, truncated [ 131.968145][ T8158] udevd[8158]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 131.974858][ T8156] udevd[8156]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 132.241991][ T9754] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.388477][ T9764] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.444002][ T9768] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1050'. [ 132.460879][ T9768] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.467579][ T9768] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.535640][ T9776] program syz.5.1052 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.649881][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1051'. [ 132.740785][ T9801] lo: entered promiscuous mode [ 132.749794][ T9801] tunl0: entered promiscuous mode [ 132.756459][ T9801] gre0: entered promiscuous mode [ 132.761589][ T9801] gretap0: entered promiscuous mode [ 132.769971][ T9801] erspan0: entered promiscuous mode [ 132.772635][ T9801] ip_vti0: entered promiscuous mode [ 132.776750][ T9801] ip6_vti0: entered promiscuous mode [ 132.778728][ T9801] sit0: entered promiscuous mode [ 132.780610][ T9801] ip6tnl0: entered promiscuous mode [ 132.782535][ T9801] ip6gre0: entered promiscuous mode [ 132.786919][ T9801] syz_tun: entered promiscuous mode [ 132.789030][ T9801] ip6gretap0: entered promiscuous mode [ 132.792370][ T9801] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.794630][ T9801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.797134][ T9801] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.799369][ T9801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.809930][ T9801] bridge0: entered promiscuous mode [ 132.813150][ T9801] vcan0: entered promiscuous mode [ 132.815252][ T9801] bond0: entered promiscuous mode [ 132.829935][ T9801] bond_slave_0: entered promiscuous mode [ 132.832912][ T9801] bond_slave_1: entered promiscuous mode [ 132.835820][ T9801] team0: entered promiscuous mode [ 132.837348][ T9801] team_slave_0: entered promiscuous mode [ 132.840349][ T9801] team_slave_1: entered promiscuous mode [ 132.843032][ T9801] dummy0: entered promiscuous mode [ 132.845004][ T9801] nlmon0: entered promiscuous mode [ 132.848703][ T9801] batadv0: entered promiscuous mode [ 132.853786][ T9801] veth0: entered promiscuous mode [ 132.857469][ T9801] veth1: entered promiscuous mode [ 132.860189][ T9801] wg0: entered promiscuous mode [ 132.862035][ T9801] wg1: entered promiscuous mode [ 132.863885][ T9801] wg2: entered promiscuous mode [ 132.865824][ T9801] veth0_to_bridge: entered promiscuous mode [ 132.868827][ T9801] veth1_to_bridge: entered promiscuous mode [ 132.875201][ T9801] veth0_to_bond: entered promiscuous mode [ 132.877994][ T9801] veth1_to_bond: entered promiscuous mode [ 132.880843][ T9801] veth0_to_team: entered promiscuous mode [ 132.883654][ T9801] veth1_to_team: entered promiscuous mode [ 132.886344][ T9801] veth0_to_batadv: entered promiscuous mode [ 132.889053][ T9801] batadv_slave_0: entered promiscuous mode [ 132.894623][ T9801] veth1_to_batadv: entered promiscuous mode [ 132.897112][ T9801] batadv_slave_1: entered promiscuous mode [ 132.900155][ T9801] xfrm0: entered promiscuous mode [ 132.904839][ T9801] veth0_to_hsr: entered promiscuous mode [ 132.908252][ T9801] veth1_to_hsr: entered promiscuous mode [ 132.911728][ T9801] hsr0: entered promiscuous mode [ 132.915233][ T9801] veth1_virt_wifi: entered promiscuous mode [ 132.917706][ T9801] veth0_virt_wifi: entered promiscuous mode [ 132.920359][ T9801] virt_wifi0: entered promiscuous mode [ 132.926576][ T9801] vlan0: entered promiscuous mode [ 132.929353][ T9801] macvlan0: entered promiscuous mode [ 132.931747][ T9801] macvlan1: entered promiscuous mode [ 132.935981][ T9801] ipvlan0: entered promiscuous mode [ 132.940191][ T9801] ipvlan1: entered promiscuous mode [ 132.943602][ T9801] macvtap0: entered promiscuous mode [ 132.947503][ T9801] macsec0: entered promiscuous mode [ 132.949991][ T9801] geneve0: entered promiscuous mode [ 132.952257][ T9801] geneve1: entered promiscuous mode [ 132.954779][ T9801] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 132.962784][ T9801] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 132.967518][ T9801] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 132.970827][ T9801] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 132.973755][ T9801] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 132.977666][ T9801] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode [ 132.982181][ T9801] vxlan0: entered promiscuous mode [ 132.985277][ T9801] bond1: entered promiscuous mode [ 132.986909][ T9801] bond2: entered promiscuous mode [ 132.991606][ T9801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.994668][ T9801] ip6_vti1: entered promiscuous mode [ 132.997103][ T9801] bridge1: entered promiscuous mode [ 133.000485][ T9801] bridge1: left allmulticast mode [ 133.032170][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.035602][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.038683][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.049220][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.216906][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.627140][ T9825] loop8: detected capacity change from 0 to 7 [ 133.654014][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.657136][ T5741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 133.657925][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 133.667174][ T5741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 133.669904][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.669987][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 133.670505][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.675017][ T5741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 133.676199][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 133.684101][ T5741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 133.686877][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.690138][ T5741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 133.690206][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 133.698020][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.701794][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 133.710401][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.713461][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 133.716694][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.719989][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 133.726224][ T9825] ldm_validate_partition_table(): Disk read failed. [ 133.729758][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.732783][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 133.741233][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.744269][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 133.752710][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.755564][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 133.771997][ T9825] Dev loop8: unable to read RDB block 0 [ 133.779666][ T9825] loop8: unable to read partition table [ 133.784351][ T9825] loop8: partition table beyond EOD, truncated [ 133.792149][ T9825] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 133.828262][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1064'. [ 133.832484][ T9834] netlink: 'syz.6.1064': attribute type 6 has an invalid length. [ 133.995422][ T9848] 9pnet_virtio: no channels available for device syz [ 134.058897][ T5816] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.215375][ T9859] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1071'. [ 134.270659][ T5816] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.293346][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1072'. [ 134.296213][ T9864] netlink: 'syz.0.1072': attribute type 6 has an invalid length. [ 134.395942][ T9868] use of bytesused == 0 is deprecated and will be removed in the future, [ 134.411169][ T9868] use the actual size instead. [ 134.569047][ T9889] selinux_netlink_send: 3 callbacks suppressed [ 134.569061][ T9889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=9889 comm=syz.5.1077 [ 134.570446][ T5816] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.607605][ T9890] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1077'. [ 134.798433][ T9904] netlink: 'syz.0.1081': attribute type 62 has an invalid length. [ 134.840258][ T5816] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.907518][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1082'. [ 134.912311][ T9910] netlink: 'syz.5.1082': attribute type 6 has an invalid length. [ 134.930728][ T9827] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.933583][ T9827] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.936135][ T9827] bridge_slave_0: entered allmulticast mode [ 134.939028][ T9827] bridge_slave_0: entered promiscuous mode [ 134.943966][ T9827] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.946254][ T9827] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.948735][ T9827] bridge_slave_1: entered allmulticast mode [ 134.957081][ T9827] bridge_slave_1: entered promiscuous mode [ 134.988341][ T9827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.995981][ T9827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.019765][ T9916] Invalid ELF header type: 0 != 1 [ 135.037059][ T9918] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9918 comm=syz.0.1085 [ 135.044602][ T9918] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=9918 comm=syz.0.1085 [ 135.056726][ T5741] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 135.141009][ T42] kauditd_printk_skb: 100 callbacks suppressed [ 135.141026][ T42] audit: type=1800 audit(1785773803.835:1915): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 135.152990][ T42] audit: type=1800 audit(1785773803.835:1916): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164098 res=0 errno=0 [ 135.161924][ T42] audit: type=1800 audit(1785773803.845:1917): pid=8156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=164103 res=0 errno=0 [ 135.162954][ T9918] syzkaller1: entered promiscuous mode [ 135.171138][ T42] audit: type=1800 audit(1785773803.845:1918): pid=8156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=164107 res=0 errno=0 [ 135.171180][ T42] audit: type=1800 audit(1785773803.845:1919): pid=8156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=164106 res=0 errno=0 [ 135.171217][ T42] audit: type=1800 audit(1785773803.845:1920): pid=8156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=164109 res=0 errno=0 [ 135.171258][ T42] audit: type=1800 audit(1785773803.863:1921): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164184 res=0 errno=0 [ 135.171292][ T42] audit: type=1800 audit(1785773803.873:1922): pid=8156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=164189 res=0 errno=0 [ 135.171327][ T42] audit: type=1800 audit(1785773803.873:1923): pid=8156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=164193 res=0 errno=0 [ 135.171363][ T42] audit: type=1800 audit(1785773803.873:1924): pid=8156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=164192 res=0 errno=0 [ 135.224055][ T9918] syzkaller1: entered allmulticast mode [ 135.229685][ T9827] team0: Port device team_slave_0 added [ 135.233864][ T9920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1085'. [ 135.246674][ T9827] team0: Port device team_slave_1 added [ 135.306522][ T5816] bridge_slave_1: left allmulticast mode [ 135.308519][ T5816] bridge_slave_1: left promiscuous mode [ 135.312183][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.329167][ T5816] bridge_slave_0: left allmulticast mode [ 135.331304][ T5816] bridge_slave_0: left promiscuous mode [ 135.333423][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.600152][ T5816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.612734][ T5816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.616805][ T5816] bond0 (unregistering): Released all slaves [ 135.621738][ T5816] bond1 (unregistering): Released all slaves [ 135.630121][ T5816] bond2 (unregistering): Released all slaves [ 135.646419][ T5816] bond3 (unregistering): Released all slaves [ 135.654851][ T9827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.657641][ T9827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.666748][ T9827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.672375][ T9827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.674997][ T9827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.686307][ T9827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.699164][ T5451] 8021q: adding VLAN 0 to HW filter on device eth9 [ 135.758762][ T5816] tipc: Left network mode [ 135.763869][ T9827] hsr_slave_0: entered promiscuous mode [ 135.767546][ T9827] hsr_slave_1: entered promiscuous mode [ 135.926159][ T5741] Bluetooth: hci0: command tx timeout [ 136.049367][ T5451] 8021q: adding VLAN 0 to HW filter on device eth10 [ 136.266728][ T9961] bond0: invalid NS target ff00:0:1:100:300:0:bf01:4000 specified for addition [ 136.270581][ T9961] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 136.288374][ T9827] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 136.309557][ T9827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 136.313388][ T9827] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 136.320177][ T9827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 136.336161][ T9969] 9pnet_fd: p9_fd_create_tcp (9969): problem binding to privport [ 136.366418][ T5816] hsr_slave_0: left promiscuous mode [ 136.369389][ T5816] hsr_slave_1: left promiscuous mode [ 136.372231][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.381177][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.385146][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.388469][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.405802][ T5816] veth1_macvtap: left promiscuous mode [ 136.408237][ T5816] veth0_macvtap: left promiscuous mode [ 136.410533][ T5816] veth1_vlan: left promiscuous mode [ 136.412708][ T5816] veth0_vlan: left promiscuous mode [ 136.643842][ T5816] team0 (unregistering): Port device team_slave_1 removed [ 136.713037][ T5816] team0 (unregistering): Port device veth0 removed [ 136.759000][ T9827] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 136.768460][ T9827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 136.785619][ T5451] 8021q: adding VLAN 0 to HW filter on device eth11 [ 136.822402][ T9977] dummy0: left promiscuous mode [ 136.844355][ T9827] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 136.850592][ T9827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 136.930866][ T9827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.945775][ T9827] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.953959][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.956288][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.964177][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.966354][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.101734][ T5451] 8021q: adding VLAN 0 to HW filter on device eth12 [ 137.240305][ T5887] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 137.253569][T10022] __nla_validate_parse: 1 callbacks suppressed [ 137.253581][T10022] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1105'. [ 137.262421][T10022] xt_connbytes: Forcing CT accounting to be enabled [ 137.272288][T10022] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.275746][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1105'. [ 137.352981][ T9827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.359331][T10033] selinuxfs: Unknown parameter '!/-{}' [ 137.411323][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 137.416276][ T5887] usb 5-1: unable to get BOS descriptor or descriptor too short [ 137.422442][ T5887] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 137.425491][ T5887] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 137.428114][ T5887] usb 5-1: config 14 has no interface number 0 [ 137.430046][ T5887] usb 5-1: config 14 has no interface number 1 [ 137.432015][ T5887] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 137.436778][ T5887] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 137.440498][ T5887] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 137.445281][ T5887] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 137.449470][ T5887] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 137.453198][ T5887] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.458309][ T5887] usb 5-1: config 14 interface 57 has no altsetting 0 [ 137.460537][ T5887] usb 5-1: config 14 interface 228 has no altsetting 0 [ 137.465764][ T5887] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 137.468543][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.470978][ T5887] usb 5-1: Product: syz [ 137.472306][ T5887] usb 5-1: Manufacturer: syz [ 137.474077][ T5887] usb 5-1: SerialNumber: syz [ 137.474400][T10033] IPv6: NLM_F_CREATE should be specified when creating new route [ 137.601144][T10057] macsec1: entered allmulticast mode [ 137.603228][T10057] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 137.608887][T10057] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 137.613530][ T9827] veth0_vlan: entered promiscuous mode [ 137.618392][T10057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.635023][T10057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.648270][ T9827] veth1_vlan: entered promiscuous mode [ 137.676384][ T9827] veth0_macvtap: entered promiscuous mode [ 137.683293][ T9827] veth1_macvtap: entered promiscuous mode [ 137.696992][ T9827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.707672][ T9827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.707990][ T5887] legousbtower 5-1:14.57: interrupt endpoints not found [ 137.735910][ T5550] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.740653][ T5550] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.774701][ T5816] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.782564][ T5816] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.801889][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.802961][T10065] syzkaller0: entered promiscuous mode [ 137.805186][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.807560][T10065] syzkaller0: entered allmulticast mode [ 137.862362][T10070] devtmpfs: Cannot change global quota limit on remount [ 137.866297][T10071] devtmpfs: Cannot change global quota limit on remount [ 137.886986][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.891195][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.941158][T10075] openvswitch: netlink: IP tunnel dst address not specified [ 137.949441][T10076] overlayfs: invalid redirect (./bus) [ 138.016513][ T9827] overlayfs: failed lookup in lower (newroot/0, name='bus', err=-40): overlapping layers [ 138.019622][ T9827] overlayfs: failed lookup in lower (newroot/0, name='bus', err=-40): overlapping layers [ 138.131470][ T5887] legousbtower 5-1:14.228: get version request failed: -32 [ 138.133863][ T5887] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -32 [ 138.172610][T10089] xt_hashlimit: size too large, truncated to 1048576 [ 138.618015][T10127] ima: policy update failed [ 138.879994][ T9] usb 5-1: USB disconnect, device number 13 [ 139.090853][ T5887] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 139.145375][T10157] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 139.178820][T10159] netlink: 'syz.5.1144': attribute type 5 has an invalid length. [ 139.212751][T10162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10162 comm=syz.5.1145 [ 139.274133][ T5887] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 139.279442][ T5887] usb 11-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 139.283072][ T5887] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.304484][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1145'. [ 139.349182][ T5741] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 139.354903][ T5741] Bluetooth: hci1: Injecting HCI hardware error event [ 139.358117][ T5741] Bluetooth: hci1: hardware error 0x00 [ 139.366833][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 139.507812][T10171] kvm: pic: level sensitive irq not supported [ 139.527039][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 139.528282][ T5887] qmi_wwan 11-1:1.0: cdc-wdm0: USB WDM device [ 139.530061][T10171] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1148'. [ 139.539481][ T9] usb 5-1: config 139 has an invalid interface number: 49 but max is 0 [ 139.543012][ T9] usb 5-1: config 139 has no interface number 0 [ 139.545697][ T9] usb 5-1: config 139 interface 49 has no altsetting 0 [ 139.555947][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 139.559334][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.561714][ T5887] wwan wwan0: port wwan0qmi0 attached [ 139.561955][ T9] usb 5-1: Product: syz [ 139.567178][ T9] usb 5-1: Manufacturer: syz [ 139.570286][ T9] usb 5-1: SerialNumber: syz [ 139.618416][ T5816] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.734813][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 139.739382][ T5887] qmi_wwan 11-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.6-1, WWAN/QMI device, 22:86:3e:bd:ac:22 [ 139.752729][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 139.756141][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 139.759742][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 139.763057][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 139.797061][ T5750] Bluetooth: hci1: unexpected event for opcode 0x080c [ 140.332208][T10177] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.341399][T10177] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.344462][T10177] bridge_slave_0: entered allmulticast mode [ 140.348316][T10177] bridge_slave_0: entered promiscuous mode [ 140.360120][T10177] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.376472][T10177] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.383135][T10177] bridge_slave_1: entered allmulticast mode [ 140.388181][T10177] bridge_slave_1: entered promiscuous mode [ 140.437926][T10177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.444037][T10177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.477665][T10177] team0: Port device team_slave_0 added [ 140.483382][T10177] team0: Port device team_slave_1 added [ 140.516206][T10177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.519096][T10177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.529170][ T42] kauditd_printk_skb: 145 callbacks suppressed [ 140.529180][ T42] audit: type=1400 audit(1785773808.888:2070): avc: denied { write } for pid=10221 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.540652][T10177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.547247][T10177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.549693][T10177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.557831][T10177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.594559][T10177] hsr_slave_0: entered promiscuous mode [ 140.598941][T10177] hsr_slave_1: entered promiscuous mode [ 140.601350][T10177] debugfs: 'hsr0' already exists in 'hsr' [ 140.603221][T10177] Cannot create hsr debugfs directory [ 140.651143][ T60] usb 11-1: USB disconnect, device number 2 [ 140.670739][ T60] qmi_wwan 11-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.6-1, WWAN/QMI device [ 140.727494][ T42] audit: type=1400 audit(1785773809.076:2071): avc: denied { write } for pid=10225 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.792787][ T42] audit: type=1400 audit(1785773809.141:2072): avc: denied { write } for pid=10228 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.850190][ T60] wwan wwan0: port wwan0qmi0 disconnected [ 140.911155][ T42] audit: type=1800 audit(1785773809.253:2073): pid=10177 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27718 res=0 errno=0 [ 140.926388][ T42] audit: type=1400 audit(1785773809.253:2074): avc: denied { write } for pid=10230 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.953493][ T42] audit: type=1800 audit(1785773809.253:2075): pid=10177 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=27717 res=0 errno=0 [ 140.966539][ T5816] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.972889][ T42] audit: type=1800 audit(1785773809.272:2076): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=174384 res=0 errno=0 [ 140.990542][ T9] radio-usb-si4713 5-1:139.49: Si4713 development board discovered: (10C4:8244) [ 141.005094][ T9] radio-usb-si4713 5-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 141.006140][ T42] audit: type=1400 audit(1785773809.338:2077): avc: denied { write } for pid=10233 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.013032][ T9] usbhid 5-1:139.49: couldn't find an input interrupt endpoint [ 141.022392][ T42] audit: type=1800 audit(1785773809.347:2078): pid=8158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=168467 res=0 errno=0 [ 141.023341][ T9] usb 5-1: USB disconnect, device number 14 [ 141.035094][ T42] audit: type=1800 audit(1785773809.347:2079): pid=8158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=168468 res=0 errno=0 [ 141.110785][T10236] binder: BC_ACQUIRE_RESULT not supported [ 141.112778][T10236] binder: 10235:10236 ioctl c0306201 2000000003c0 returned -22 [ 141.142166][ T5816] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.198342][T10177] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 141.206131][T10177] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 141.209438][T10177] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 141.214376][T10177] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 141.219693][T10177] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 141.225961][T10177] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 141.229246][T10177] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 141.246355][T10177] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 141.300335][ T5816] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.346159][T10253] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 141.406470][T10177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.424676][T10177] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.438386][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.440738][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.527945][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.530287][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.572635][ T5741] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 141.692709][ T5816] bridge_slave_1: left allmulticast mode [ 141.694496][ T5816] bridge_slave_1: left promiscuous mode [ 141.701623][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.726452][ T5816] bridge_slave_0: left allmulticast mode [ 141.729541][ T5816] bridge_slave_0: left promiscuous mode [ 141.731496][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.756139][T10286] sctp: [Deprecated]: syz.6.1165 (pid 10286) Use of int in max_burst socket option. [ 141.756139][T10286] Use struct sctp_assoc_value instead [ 141.863866][T10293] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1169'. [ 141.881642][ T5816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.888208][ T5816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.894389][ T5816] bond0 (unregistering): Released all slaves [ 141.910281][ T5741] Bluetooth: hci0: command tx timeout [ 141.986092][ T24] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 142.062802][T10306] CIFS: iocharset name too long [ 142.069703][T10306] ipvlan0: left promiscuous mode [ 142.074785][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1168'. [ 142.142915][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1170'. [ 142.160440][T10313] xt_hashlimit: size too large, truncated to 1048576 [ 142.176064][ T24] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 142.180787][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.187676][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 142.190673][ T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 142.193447][ T24] usb 5-1: Product: syz [ 142.194769][ T24] usb 5-1: Manufacturer: syz [ 142.196240][ T24] usb 5-1: SerialNumber: syz [ 142.200629][ T24] usb 5-1: config 0 descriptor?? [ 142.215991][ T24] usb 5-1: selecting invalid altsetting 0 [ 142.275594][T10177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.334760][ T5816] hsr_slave_0: left promiscuous mode [ 142.342317][ T5816] hsr_slave_1: left promiscuous mode [ 142.361471][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.371264][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.384648][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.387063][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.400190][ T5816] veth1_macvtap: left promiscuous mode [ 142.404280][ T5816] veth0_macvtap: left promiscuous mode [ 142.406124][ T5816] veth1_vlan: left promiscuous mode [ 142.412294][ T5816] veth0_vlan: left promiscuous mode [ 142.493456][ T29] usb 5-1: USB disconnect, device number 15 [ 142.685532][ T5816] team0 (unregistering): Port device team_slave_1 removed [ 142.693893][ T5816] team0 (unregistering): Port device team_slave_0 removed [ 142.954013][T10177] veth0_vlan: entered promiscuous mode [ 142.984030][T10349] pimreg: tun_chr_ioctl cmd 1074025672 [ 142.986365][T10349] pimreg: ignored: set checksum enabled [ 143.000923][T10177] veth1_vlan: entered promiscuous mode [ 143.049244][T10177] veth0_macvtap: entered promiscuous mode [ 143.056489][T10177] veth1_macvtap: entered promiscuous mode [ 143.072308][T10177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.080624][T10177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.096250][ T29] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 143.100331][ T5451] 8021q: adding VLAN 0 to HW filter on device eth13 [ 143.237387][ T5550] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.243563][ T5550] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.249027][ T5550] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.259389][ T29] usb 10-1: not running at top speed; connect to a high speed hub [ 143.265878][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.266075][ T29] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 143.269150][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.290424][ T29] usb 10-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 143.298433][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.302228][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.302514][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.304996][ T29] usb 10-1: Product: syz [ 143.309353][ T29] usb 10-1: Manufacturer: syz [ 143.312211][ T29] usb 10-1: SerialNumber: syz [ 143.313810][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.323178][ T29] oti6858 10-1:1.0: oti6858 converter detected [ 143.329810][ T29] usb 10-1: oti6858 converter now attached to ttyUSB0 [ 143.408012][ T5451] 8021q: adding VLAN 0 to HW filter on device eth14 [ 143.410764][T10364] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 143.423779][T10366] 9pnet_fd: Insufficient options for proto=fd [ 143.455307][T10369] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 143.472641][T10372] syzkaller1: entered promiscuous mode [ 143.474982][T10372] syzkaller1: entered allmulticast mode [ 143.629171][ T5451] 8021q: adding VLAN 0 to HW filter on device eth15 [ 143.652088][T10383] xt_time: unknown flags 0x78 [ 143.685484][T10383] syzkaller0: entered promiscuous mode [ 143.690394][T10383] syzkaller0: entered allmulticast mode [ 143.727657][ T8156] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 143.850715][ T1166] nvmet: connect request for invalid subsystem n! [ 143.858452][T10395] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "n" [ 143.859461][T10399] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 143.872122][T10402] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 143.876936][T10399] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 143.880851][T10399] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 143.883947][T10399] UDF-fs: Scanning with blocksize 512 failed [ 143.889133][T10399] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 143.893642][ T5451] 8021q: adding VLAN 0 to HW filter on device eth16 [ 143.893815][T10399] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 143.900661][T10399] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 143.903718][T10399] UDF-fs: Scanning with blocksize 1024 failed [ 143.906657][T10399] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 143.911235][T10399] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 143.916637][T10399] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 143.916879][T10404] cgroup: Invalid name [ 143.924175][T10399] UDF-fs: Scanning with blocksize 2048 failed [ 143.931779][T10399] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 143.939847][T10399] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 143.943244][T10399] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 143.946032][T10399] UDF-fs: Scanning with blocksize 4096 failed [ 143.947936][T10399] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 143.968919][T10400] loop2: detected capacity change from 0 to 7 [ 144.064334][T10400] Dev loop2: unable to read RDB block 7 [ 144.066900][T10400] loop2: AHDI p1 p2 p3 [ 144.069155][T10400] loop2: partition table partially beyond EOD, truncated [ 144.072785][T10400] loop2: p1 start 1601398130 is beyond EOD, truncated [ 144.086841][T10400] loop2: p2 start 1702059890 is beyond EOD, truncated [ 144.134668][ T5741] Bluetooth: hci0: command tx timeout [ 144.413342][T10451] netlink: 'syz.6.1196': attribute type 21 has an invalid length. [ 145.197863][T10509] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 145.200175][T10509] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 145.204089][T10509] vhci_hcd vhci_hcd.0: Device attached [ 145.233729][T10510] vhci_hcd: connection closed [ 145.240347][ T12] vhci_hcd vhci_hcd.8: stop threads [ 145.252461][ T12] vhci_hcd vhci_hcd.8: release socket [ 145.255216][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 145.461424][T10525] tmpfs: Unknown parameter '' [ 145.506877][T10527] veth1_macvtap: left promiscuous mode [ 145.719185][ T5451] veth1_macvtap: entered promiscuous mode [ 145.893410][ T42] kauditd_printk_skb: 182 callbacks suppressed [ 145.893427][ T42] audit: type=1400 audit(1785773813.904:2262): avc: denied { block_suspend } for pid=10551 comm="syz.0.1223" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 145.907275][ T42] audit: type=1800 audit(1785773813.923:2263): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177081 res=0 errno=0 [ 145.913865][ T42] audit: type=1800 audit(1785773813.923:2264): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177096 res=0 errno=0 [ 145.923910][ T42] audit: type=1400 audit(1785773813.932:2265): avc: denied { write } for pid=10553 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.051809][ T42] audit: type=1800 audit(1785773814.063:2266): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0 [ 146.089223][ T6766] usb 10-1: USB disconnect, device number 6 [ 146.116961][ T42] audit: type=1800 audit(1785773814.120:2267): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 146.139432][T10573] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 146.147847][ T42] audit: type=1400 audit(1785773814.148:2268): avc: denied { write } for pid=10572 comm="syz.5.1229" name="functions" dev="configfs" ino=14403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 146.162935][ T6766] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 146.163365][ T42] audit: type=1800 audit(1785773814.148:2269): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 146.167289][ T6766] oti6858 10-1:1.0: device disconnected [ 146.178874][ T42] audit: type=1400 audit(1785773814.157:2270): avc: denied { write } for pid=10572 comm="syz.5.1229" name="functions" dev="configfs" ino=14403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 146.188836][ T42] audit: type=1800 audit(1785773814.176:2271): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 146.341137][T10579] input: syz1 as /devices/virtual/input/input16 [ 146.361534][ T5741] Bluetooth: hci0: command tx timeout [ 146.395403][T10583] kvm: vcpu 260: requested lapic timer restore with starting count register 0x390=3440470153 (6880940306 ns) > initial count (1354806962 ns). Using initial count to start timer. [ 146.439982][T10591] program syz.5.1237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.444670][T10591] geneve1: left promiscuous mode [ 146.453742][T10591] geneve1: entered allmulticast mode [ 146.493731][T10596] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 146.638636][T10605] vcan1: entered allmulticast mode [ 146.668182][T10606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1239'. [ 146.672270][T10606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1239'. [ 146.745996][T10620] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1244'. [ 146.791502][T10623] FAT-fs (nullb0): bogus number of reserved sectors [ 146.799139][T10623] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 146.805332][T10628] /dev/nullb0: Can't open blockdev [ 146.971831][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'. [ 147.019103][T10645] tipc: Enabling of bearer rejected, failed to enable media [ 147.023907][T10645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1253'. [ 147.028129][T10645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1253'. [ 147.103666][ T6766] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 147.148401][T10661] netlink: 'syz.6.1258': attribute type 4 has an invalid length. [ 147.151071][T10661] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1258'. [ 147.164335][T10661] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 147.209528][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1260'. [ 147.213107][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1260'. [ 147.225221][ T5817] IPVS: starting estimator thread 0... [ 147.272175][ T6766] usb 13-1: Using ep0 maxpacket: 8 [ 147.276307][ T6766] usb 13-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 147.279599][ T6766] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.288042][ T6766] pvrusb2: Hardware description: Terratec Grabster AV400 [ 147.296164][ T6766] pvrusb2: ********** [ 147.297582][ T6766] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 147.302175][ T6766] pvrusb2: Important functionality might not be entirely working. [ 147.304835][ T6766] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 147.309125][ T6766] pvrusb2: ********** [ 147.315208][T10677] netlink: 'syz.0.1263': attribute type 1 has an invalid length. [ 147.317272][T10667] IPVS: using max 32 ests per chain, 76800 per kthread [ 147.318397][T10677] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 147.398355][T10669] xfrm1: entered allmulticast mode [ 147.507808][ T2523] pvrusb2: Invalid write control endpoint [ 147.544295][ T2523] pvrusb2: Invalid write control endpoint [ 147.552267][ T2523] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 147.557002][ T2523] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 147.559661][ T2523] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 147.565123][ T2523] pvrusb2: Device being rendered inoperable [ 147.567048][ T2523] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 147.569375][ T2523] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 147.577029][ T2523] pvrusb2: Attached sub-driver cx25840 [ 147.579287][ T2523] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 147.583347][ T2523] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 147.721153][T10635] pvrusb2: Attempted to execute control transfer when device not ok [ 147.773322][ T5817] usb 13-1: USB disconnect, device number 2 [ 147.783515][T10706] SELinux: ebitmap start bit (1279) is not a multiple of the map unit size (64) [ 147.786668][T10706] SELinux: invalid class [ 147.798019][T10706] SELinux: failed to load policy [ 147.819519][T10706] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 147.822094][T10706] syzkaller1: group set to 0 [ 148.118680][T10734] overlayfs: regular lower layers cannot follow data lower layers [ 148.127882][T10732] netlink: Conntrack attr has 12 unknown bytes [ 148.130273][T10732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.581219][ T5741] Bluetooth: hci0: command tx timeout [ 148.620954][ T29] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 148.623690][T10764] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1287'. [ 148.783861][ T29] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.789484][T10775] afs: Unknown parameter 'dyn' [ 148.791502][ T29] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.795593][ T29] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.800380][ T29] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.804239][ T29] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.809732][ T29] usb 13-1: config 0 descriptor?? [ 148.860606][T10781] IPVS: sh: FWM 3 0x00000003 - no destination available [ 149.048393][ T847] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 149.208611][ T847] usb 10-1: Using ep0 maxpacket: 8 [ 149.212348][ T847] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.215866][ T847] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.219074][ T847] usb 10-1: config 0 interface 0 has no altsetting 0 [ 149.221258][ T847] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 149.224103][ T847] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.228384][ T847] usb 10-1: config 0 descriptor?? [ 149.257440][ T29] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 149.631142][T10791] openvswitch: netlink: Missing key (keys=40, expected=100) [ 149.671134][T10775] orangefs_mount: mount request failed with -4 [ 149.672580][ T847] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 149.678132][ T847] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 149.680741][ T847] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 149.683084][ T847] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 149.685416][ T847] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 149.688239][ T847] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 149.716497][T10794] netlink: 'syz.0.1293': attribute type 1 has an invalid length. [ 149.790398][T10794] bridge5: entered promiscuous mode [ 149.797680][T10794] bond3: (slave bridge5): making interface the new active one [ 149.802142][T10794] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 149.811992][T10794] bridge6: entered promiscuous mode [ 149.822156][T10794] bond3: (slave bridge6): Enslaving as a backup interface with an up link [ 149.828394][T10794] netlink: 'syz.0.1293': attribute type 1 has an invalid length. [ 149.828553][T10798] bond3: option fail_over_mac: unable to set because the bond device has slaves [ 149.873474][T10802] binder: 10801:10802 ioctl c0306201 200000000640 returned -22 [ 149.876421][T10802] binder: 10801:10802 ioctl 8070587c 200000000080 returned -22 [ 150.553118][ C2] plantronics 0003:047F:FFFF.0005: usb_submit_urb(ctrl) failed: -1 [ 150.931429][ T847] usb 10-1: reset high-speed USB device number 7 using dummy_hcd [ 151.274654][ T42] kauditd_printk_skb: 292 callbacks suppressed [ 151.274678][ T42] audit: type=1800 audit(1785773818.948:2564): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0 [ 151.285641][ T42] audit: type=1400 audit(1785773818.958:2565): avc: denied { unmount } for pid=6584 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 151.305195][ T42] audit: type=1400 audit(1785773818.976:2566): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=49218 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 151.342037][ T42] audit: type=1400 audit(1785773819.004:2567): avc: denied { read append } for pid=10870 comm="syz.0.1301" name="cec0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.352544][ T42] audit: type=1400 audit(1785773819.004:2568): avc: denied { open } for pid=10870 comm="syz.0.1301" path="/dev/cec0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.360991][ T42] audit: type=1400 audit(1785773819.004:2569): avc: denied { ioctl } for pid=10870 comm="syz.0.1301" path="/dev/cec0" dev="devtmpfs" ino=974 ioctlcmd=0x610a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.370933][ T42] audit: type=1800 audit(1785773819.004:2570): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0 [ 151.371362][T10873] Bluetooth: MGMT ver 1.23 [ 151.379718][ T42] audit: type=1400 audit(1785773819.004:2571): avc: denied { create } for pid=10870 comm="syz.0.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 151.379763][ T42] audit: type=1400 audit(1785773819.004:2572): avc: denied { getopt } for pid=10870 comm="syz.0.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 151.379804][ T42] audit: type=1400 audit(1785773819.033:2573): avc: denied { perfmon } for pid=10872 comm="syz.8.1302" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 151.414887][T10875] overlay: Bad value for 'workdir' [ 151.442696][T10063] usb 13-1: USB disconnect, device number 3 [ 151.603919][T10886] netlink: 'syz.0.1306': attribute type 1 has an invalid length. [ 151.629450][T10886] 8021q: adding VLAN 0 to HW filter on device bond5 [ 152.024769][T10909] __nla_validate_parse: 1 callbacks suppressed [ 152.024797][T10909] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1312'. [ 152.482799][T10928] IPv4: Oversized IP packet from 127.202.26.0 [ 152.557806][T10934] tipc: Enabled bearer , priority 10 [ 152.772428][T10592] usb 10-1: USB disconnect, device number 7 [ 152.799445][ T1369] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 152.905672][T10942] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1321'. [ 152.934006][T10934] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1321'. [ 152.960217][ T1369] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 152.971666][ T1369] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.976184][ T1369] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.982635][T10933] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 152.982662][ T1369] usb 11-1: config 0 interface 0 has no altsetting 0 [ 152.991935][ T1369] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.998894][ T1369] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.008120][ T1369] usb 11-1: config 0 interface 0 has no altsetting 0 [ 153.018121][ T1369] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.024450][ T1369] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.033146][ T1369] usb 11-1: config 0 interface 0 has no altsetting 0 [ 153.040611][ T1369] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.047066][ T1369] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.055066][ T1369] usb 11-1: config 0 interface 0 has no altsetting 0 [ 153.062248][ T1369] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.069763][ T1369] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.089983][ T1369] usb 11-1: config 0 interface 0 has no altsetting 0 [ 153.095774][ T1369] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.104586][ T1369] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.113134][ T1369] usb 11-1: config 0 interface 0 has no altsetting 0 [ 153.120016][ T1369] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.126179][ T1369] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.134626][ T1369] usb 11-1: config 0 interface 0 has no altsetting 0 [ 153.141628][ T1369] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.148106][ T1369] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.162455][ T1369] usb 11-1: config 0 interface 0 has no altsetting 0 [ 153.167615][ T1369] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 153.171335][ T1369] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 153.175794][ T1369] usb 11-1: Product: syz [ 153.177661][ T1369] usb 11-1: Manufacturer: syz [ 153.179768][ T1369] usb 11-1: SerialNumber: syz [ 153.181354][T10959] netlink: 'syz.0.1328': attribute type 3 has an invalid length. [ 153.184918][ T1369] usb 11-1: config 0 descriptor?? [ 153.190462][T10959] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 153.200621][T10959] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1328'. [ 153.201075][ T1369] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 153.475019][ C0] usb 11-1: yurex_control_callback - control failed: -2 [ 153.561271][ T5817] usb 11-1: USB disconnect, device number 3 [ 153.567694][T10932] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 153.578544][ T5817] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 153.681946][T10988] : renamed from vlan0 (while UP) [ 153.732684][T10995] CIFS: enabling forcegid mount option implicitly because gid= option is specified [ 153.735697][T10995] CIFS mount error: No usable UNC path provided in device string! [ 153.735697][T10995] [ 153.739359][T10995] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 154.300067][T11007] dlm: Using TCP for communications [ 154.667992][T11026] netlink: 'syz.6.1349': attribute type 1 has an invalid length. [ 154.682097][T11026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.705214][T11026] bond1: (slave gretap1): making interface the new active one [ 154.723657][T11026] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 154.730158][T11026] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11026 comm=syz.6.1349 [ 154.830632][T11039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1353'. [ 154.947767][T11025] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 155.040739][T11056] binder: 11054:11056 ioctl 400c620e 200000000180 returned -22 [ 155.040795][T11055] binder: 11054:11055 ioctl 400c620e 200000000180 returned -22 [ 155.459966][ T5817] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 155.631063][ T5817] usb 11-1: Using ep0 maxpacket: 32 [ 155.634294][ T5817] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 155.637080][ T5817] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 155.639793][ T5817] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 155.643201][ T5817] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 155.646233][ T5817] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 155.649179][ T5817] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 155.653499][ T5817] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 155.656335][ T5817] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.661071][ T5817] usb 11-1: config 0 descriptor?? [ 155.882982][ T5817] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 155.890802][ T5817] usb 11-1: USB disconnect, device number 4 [ 155.912962][ T5817] usblp0: removed [ 156.097284][T11056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.107062][T11092] sctp: [Deprecated]: syz.8.1363 (pid 11092) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.107062][T11092] Use struct sctp_sack_info instead [ 156.107717][T11056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.273531][T11108] netlink: 'syz.0.1365': attribute type 6 has an invalid length. [ 156.347089][ T5817] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 156.507182][ T5817] usb 11-1: Using ep0 maxpacket: 32 [ 156.513476][ T5817] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 156.518472][ T5817] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 156.526048][ T5817] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 156.531400][ T5817] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 156.534599][ T5817] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 156.537876][ T5817] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 156.542212][ T5817] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 156.545224][ T5817] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.555546][ T5817] usb 11-1: config 0 descriptor?? [ 156.626586][ T42] kauditd_printk_skb: 408 callbacks suppressed [ 156.626603][ T42] audit: type=1400 audit(1785773823.955:2982): avc: denied { allowed } for pid=11135 comm="syz.0.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 156.639658][ T42] audit: type=1400 audit(1785773823.955:2983): avc: denied { create } for pid=11135 comm="syz.0.1367" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 156.648522][ T42] audit: type=1400 audit(1785773823.974:2984): avc: denied { prog_load } for pid=11135 comm="syz.0.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 156.656315][ T42] audit: type=1400 audit(1785773823.974:2985): avc: denied { module_request } for pid=11084 comm="syz.8.1363" kmod="crypto-rfc3686(ctr(aes))" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 156.668332][ T42] audit: type=1400 audit(1785773824.002:2986): avc: denied { create } for pid=11135 comm="syz.0.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 156.676594][T11136] IPVS: set_ctl: invalid protocol: 0 47.0.0.0:0 [ 156.676627][ T42] audit: type=1400 audit(1785773824.002:2987): avc: denied { setopt } for pid=11135 comm="syz.0.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 156.687523][T11136] IPVS: set_ctl: invalid protocol: 3 3.0.0.0:0 [ 156.725114][ T42] audit: type=1400 audit(1785773824.048:2988): avc: denied { create } for pid=11142 comm="syz.0.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.742915][ T42] audit: type=1400 audit(1785773824.048:2989): avc: denied { write } for pid=11142 comm="syz.0.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.750634][ T42] audit: type=1400 audit(1785773824.048:2990): avc: denied { mounton } for pid=11142 comm="syz.0.1368" path="/343/sys" dev="tmpfs" ino=1868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 156.760309][ T42] audit: type=1400 audit(1785773824.058:2991): avc: denied { getopt } for pid=11142 comm="syz.0.1368" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 156.779663][ T5817] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 156.793796][ T5817] usb 11-1: USB disconnect, device number 5 [ 156.813986][ T5817] usblp0: removed [ 156.848640][T11152] input: syz0 as /devices/virtual/input/input17 [ 157.113277][T11169] Process accounting resumed [ 157.213769][T11151] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 157.447028][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1376'. [ 157.680710][T11221] overlay: Unknown parameter 'uid<00000000000000000000' [ 157.714792][T11224] netlink: 'syz.0.1383': attribute type 6 has an invalid length. [ 158.179364][T11247] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1387'. [ 158.380657][T11267] netlink: 'syz.6.1392': attribute type 6 has an invalid length. [ 158.392720][T11267] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 158.396339][ T10] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 158.437029][T11269] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1393'. [ 158.482141][T11271] msdos: Unknown parameter 'addr' [ 158.804827][ T5817] usb 13-1: new full-speed USB device number 4 using dummy_hcd [ 158.923119][T11284] No such timeout policy "syz1" [ 158.967401][ T5817] usb 13-1: not running at top speed; connect to a high speed hub [ 158.971416][ T5817] usb 13-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 158.976607][ T5817] usb 13-1: config 1 interface 0 has no altsetting 0 [ 158.981005][ T5817] usb 13-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.40 [ 158.984657][ T5817] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.990884][ T5817] usb 13-1: Product: syz [ 158.992663][ T5817] usb 13-1: Manufacturer: syz [ 158.994271][ T5817] usb 13-1: SerialNumber: syz [ 159.061360][T11271] syz.6.1394 (11271): drop_caches: 1 [ 159.079021][T11271] syz.6.1394 (11271): drop_caches: 1 [ 159.133484][T11290] bridge_slave_1: left allmulticast mode [ 159.135309][T11290] bridge_slave_1: left promiscuous mode [ 159.138502][T11290] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.143140][T11290] bridge_slave_0: left allmulticast mode [ 159.145496][T11290] bridge_slave_0: left promiscuous mode [ 159.148232][T11290] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.205943][T11295] hub 8-0:1.0: USB hub found [ 159.212370][T11295] hub 8-0:1.0: 1 port detected [ 159.264362][ T847] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 159.268631][ T5741] Bluetooth: hci3: command 0x0c1a tx timeout [ 159.271322][ T847] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 160.136758][ T5817] usbhid 13-1:1.0: can't add hid device: -71 [ 160.140451][ T5817] usbhid 13-1:1.0: probe with driver usbhid failed with error -71 [ 160.149490][ T5817] usb 13-1: USB disconnect, device number 4 [ 160.274413][T11371] i2c i2c-1: DVB: adapter 0 frontend 0 symbol rate 0 out of range (1000000..45000000) [ 160.288162][T11371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=11371 comm=syz.8.1413 [ 160.323665][T11378] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 160.326549][T11378] UDF-fs: Scanning with blocksize 2048 failed [ 160.329645][T11378] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 160.332486][T11378] UDF-fs: Scanning with blocksize 4096 failed [ 160.399043][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 160.403933][T11378] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 160.414387][T11381] can0: slcan on ttyS3. [ 160.459610][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1416'. [ 160.536445][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1419'. [ 160.539453][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1419'. [ 160.570852][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 160.574706][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 160.577825][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 160.581061][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.588877][T11360] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 160.595498][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.635464][T11375] can0 (unregistered): slcan off ttyS3. [ 160.820392][ T10] usb 5-1: USB disconnect, device number 16 [ 160.849035][T11413] netlink: 'syz.6.1422': attribute type 6 has an invalid length. [ 161.486945][ T847] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 161.487392][ T5741] Bluetooth: hci5: command 0x0c1a tx timeout [ 161.491988][ T847] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 161.762317][T11421] syzkaller1: entered promiscuous mode [ 161.764523][T11421] syzkaller1: entered allmulticast mode [ 161.813457][T11429] syzkaller1: entered promiscuous mode [ 161.815207][T11429] syzkaller1: entered allmulticast mode [ 161.878224][T11431] netlink: 'syz.8.1430': attribute type 2 has an invalid length. [ 161.880711][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1430'. [ 161.893902][T11425] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1428'. [ 162.028446][ T42] kauditd_printk_skb: 513 callbacks suppressed [ 162.028460][ T42] audit: type=1400 audit(159.655:3505): avc: denied { read write } for pid=11432 comm="syz.0.1431" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 162.038320][ T42] audit: type=1400 audit(159.655:3506): avc: denied { open } for pid=11432 comm="syz.0.1431" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 162.046232][ T42] audit: type=1400 audit(159.655:3507): avc: denied { write } for pid=11432 comm="syz.0.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 162.052077][ T42] audit: type=1400 audit(159.673:3508): avc: denied { module_request } for pid=11432 comm="syz.0.1431" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 162.058851][ T42] audit: type=1400 audit(159.683:3509): avc: denied { read write } for pid=10177 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 162.067301][ T42] audit: type=1400 audit(159.683:3510): avc: denied { open } for pid=10177 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 162.068742][T11425] syz.6.1428 (11425): drop_caches: 2 [ 162.075700][ T42] audit: type=1400 audit(159.683:3511): avc: denied { ioctl } for pid=10177 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 162.086527][ T42] audit: type=1800 audit(159.683:3512): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0 [ 162.093925][ T42] audit: type=1800 audit(159.701:3513): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17257 res=0 errno=0 [ 162.102857][ T42] audit: type=1400 audit(159.720:3514): avc: denied { sys_module } for pid=11432 comm="syz.0.1431" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 162.321565][T11457] netlink: 'syz.0.1438': attribute type 6 has an invalid length. [ 162.341507][T11459] netlink: 'syz.8.1439': attribute type 61 has an invalid length. [ 162.375485][T11459] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 162.379940][T11459] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 162.666096][T11471] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1440'. [ 162.695388][T11483] ima: Unable to open file: / (-22) [ 162.712998][T11484] ima: policy update failed [ 162.771122][T11495] netlink: 344 bytes leftover after parsing attributes in process `syz.8.1449'. [ 162.803872][T11482] pci_bus 0000:01: busn_res: [bus 01] is released [ 162.951328][T11518] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1455'. [ 162.965563][T11515] cdns2-pci 0000:00:00.0: probe with driver cdns2-pci failed with error -22 [ 162.990998][T11523] netlink: 'syz.6.1457': attribute type 6 has an invalid length. [ 163.168591][T11534] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 163.442458][ T55] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 163.613966][ T55] usb 11-1: Using ep0 maxpacket: 32 [ 163.622312][ T55] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 163.626962][ T55] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 163.633363][ T55] usb 11-1: string descriptor 0 read error: -22 [ 163.635534][ T55] usb 11-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 163.638434][ T55] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.644192][T11530] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 163.649776][ T55] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.656519][ T55] usb 11-1: MIDIStreaming interface descriptor not found [ 163.709932][ T5741] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.716671][ T847] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 163.718747][ T847] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 163.877392][ T7434] usb 11-1: USB disconnect, device number 6 [ 163.907542][T11543] overlayfs: missing 'lowerdir' [ 164.038440][T11559] efs: device does not support 512 byte blocks [ 164.041964][T11559] device does not support 512 byte blocks [ 164.041964][T11559] [ 164.088527][T11564] netlink: 'syz.8.1469': attribute type 1 has an invalid length. [ 164.101363][T11564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.107935][T11559] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 164.119506][T11563] bond1: (slave dummy0): making interface the new active one [ 164.123530][T11563] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 164.130900][T11563] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1469'. [ 164.133788][T11563] BUG: unable to handle page fault for address: fffffffffffffc10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 164.136311][T11563] #PF: supervisor read access in kernel mode [ 164.138873][T11563] #PF: error_code(0x0000) - not-present page [ 164.142021][T11563] PGD e997067 P4D e997067 PUD e999067 PMD 0 [ 164.144355][T11563] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 164.146137][T11563] CPU: 1 UID: 0 PID: 11563 Comm: syz.8.1469 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.149505][T11563] Tainted: [L]=SOFTLOCKUP [ 164.150870][T11563] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.153603][T11563] RIP: 0010:strnlen+0x4b/0x80 [ 164.155118][T11563] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 40 87 07 00 48 [ 164.161391][T11563] RSP: 0018:ffffc9000ab97110 EFLAGS: 00010246 [ 164.163312][T11563] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 164.165829][T11563] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 164.168314][T11563] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 164.170803][T11563] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 164.173274][T11563] R13: ffff88801c2f3e00 R14: 0000000000000006 R15: 0000000000000010 [ 164.175909][T11563] FS: 00007f5fdab546c0(0000) GS:ffff8880d5ed8000(0000) knlGS:0000000000000000 [ 164.178707][T11563] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.180797][T11563] CR2: fffffffffffffc10 CR3: 0000000035f78000 CR4: 0000000000352ef0 [ 164.183285][T11563] Call Trace: [ 164.184357][T11563] [ 164.185313][T11563] ? look_up_lock_class+0x64/0x120 [ 164.186946][T11563] trace_event_raw_event_drv_net_setup_tc+0x100/0x5d0 [ 164.189069][T11563] ? __pfx_trace_event_raw_event_drv_net_setup_tc+0x10/0x10 [ 164.191352][T11563] ? __pfx___might_resched+0x10/0x10 [ 164.193076][T11563] ieee80211_netdev_setup_tc+0x2c6/0x3e0 [ 164.194838][T11563] ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10 [ 164.196766][T11563] tcf_block_offload_cmd.isra.0+0x1c4/0x310 [ 164.198622][T11563] ? __pfx_tcf_block_offload_cmd.isra.0+0x10/0x10 [ 164.200624][T11563] ? __pfx_down_write+0x10/0x10 [ 164.202158][T11563] tcf_block_get_ext+0x7ed/0x1950 [ 164.203744][T11563] tcf_block_get+0xa8/0x100 [ 164.205174][T11563] ? __pfx_tcf_block_get+0x10/0x10 [ 164.206839][T11563] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 164.209278][T11563] ? lockdep_init_map_type+0x5c/0x250 [ 164.211374][T11563] ? timer_init_key+0x150/0x310 [ 164.213288][T11563] fq_pie_init+0x4b6/0x8e0 [ 164.215044][T11563] ? __pfx_fq_pie_init+0x10/0x10 [ 164.216956][T11563] qdisc_create+0x47b/0x1060 [ 164.218776][T11563] tc_modify_qdisc+0xdcf/0x2120 [ 164.220675][T11563] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 164.222741][T11563] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 164.224796][T11563] rtnetlink_rcv_msg+0x3c9/0xe90 [ 164.226749][T11563] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 164.228917][T11563] ? ref_tracker_free+0x37e/0x6c0 [ 164.230933][T11563] netlink_rcv_skb+0x159/0x420 [ 164.232827][T11563] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 164.234956][T11563] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 164.236783][T11563] ? netlink_deliver_tap+0x1ae/0xcc0 [ 164.238433][T11563] netlink_unicast+0x585/0x850 [ 164.240252][T11563] ? __pfx_netlink_unicast+0x10/0x10 [ 164.241956][T11563] netlink_sendmsg+0x8b0/0xda0 [ 164.243482][T11563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.245186][T11563] ? selinux_socket_sendmsg+0x198/0x2f0 [ 164.247014][T11563] ____sys_sendmsg+0xa4d/0xbe0 [ 164.248534][T11563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.250198][T11563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.251872][T11563] ___sys_sendmsg+0x190/0x1e0 [ 164.253363][T11563] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.255005][T11563] ? __lock_acquire+0x49f/0x1a40 [ 164.256616][T11563] __sys_sendmsg+0x160/0x210 [ 164.258083][T11563] ? __pfx___sys_sendmsg+0x10/0x10 [ 164.259729][T11563] do_syscall_64+0x115/0x870 [ 164.261195][T11563] ? clear_bhb_loop+0x40/0x90 [ 164.262705][T11563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.264574][T11563] RIP: 0033:0x7f5fd9b9e019 [ 164.266070][T11563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.272065][T11563] RSP: 002b:00007f5fdab54028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.274664][T11563] RAX: ffffffffffffffda RBX: 00007f5fd9e25fa0 RCX: 00007f5fd9b9e019 [ 164.277163][T11563] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 164.279661][T11563] RBP: 00007f5fd9c3500c R08: 0000000000000000 R09: 0000000000000000 [ 164.282128][T11563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.284606][T11563] R13: 00007f5fd9e26038 R14: 00007f5fd9e25fa0 R15: 00007ffcd29aed78 [ 164.287124][T11563] [ 164.288113][T11563] Modules linked in: [ 164.289374][T11563] CR2: fffffffffffffc10 [ 164.290685][T11563] ---[ end trace 0000000000000000 ]--- [ 164.292395][T11563] RIP: 0010:strnlen+0x4b/0x80 [ 164.293885][T11563] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 40 87 07 00 48 [ 164.299886][T11563] RSP: 0018:ffffc9000ab97110 EFLAGS: 00010246 [ 164.301780][T11563] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 164.304252][T11563] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 164.306686][T11563] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 164.309144][T11563] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 164.311531][T11563] R13: ffff88801c2f3e00 R14: 0000000000000006 R15: 0000000000000010 [ 164.313976][T11563] FS: 00007f5fdab546c0(0000) GS:ffff8880d5ed8000(0000) knlGS:0000000000000000 [ 164.316730][T11563] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.318790][T11563] CR2: fffffffffffffc10 CR3: 0000000035f78000 CR4: 0000000000352ef0 [ 164.321252][T11563] Kernel panic - not syncing: Fatal exception [ 164.323760][T11563] Kernel Offset: disabled [ 164.325176][T11563] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:17:13 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff81fdc802 RDX=0000000000000001 RSI=0000000000000000 RDI=0000000000000005 RBP=ffff88806a541240 RSP=ffffc9000384f450 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000003 R13=ffffed100d4a8249 R14=0000000000000001 R15=ffff88806a43c880 RIP=ffffffff820a5ad0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5dd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd040957e20 CR3=000000000e994000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffcd209c60 00007fffcd209c60 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd03fdf2823 00007fd03fdf2823 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd03fdf2e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd03fdf2e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558aa78538 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001f69e03280200 01f69c0328020001 f69a0302d8020001 f6980302d4020001 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fff1080180032010 0001f68004039408 0000080001000000 08060a016dfc0002 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0101000000080602 0103ee0288841000 0004010000020806 060146e400000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b79e066214e8719c 7a00000105000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000002050080003 0180040008000402 79a800746e6d2f73 6e01ffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffff10801800320 100001f680040394 0800000800010000 0008060a016dfc00 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a2ff75 RDI=ffffffff9ba0be80 RBP=ffffffff9ba0be40 RSP=ffffc9000ab96970 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=000000000000006f R14=ffffffff9b6fe1ff R15=ffffffff85a2ff10 RIP=ffffffff85a2ff9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f5fdab546c0 ffffffff 00c00000 GS =0000 ffff8880d5ed8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=fffffffffffffc10 CR3=0000000035f78000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd29af266 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd29af266 00007ffcd29af26c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5fd9c355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5fd9c3562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5fd9c35793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5fd9c35621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5fd9df25f8 00007f5fd9df25c8 00007f5fd9df2600 00007f5fd9df25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000184f4c RBX=ffff88801f2b4a80 RCX=ffffffff8bbb42d5 RDX=0000000000000001 RSI=ffffffff8c402600 RDI=ffffffff81df2bd7 RBP=ffffed1003e56950 RSP=ffffc90000187e00 R8 =0000000000000000 R9 =ffffed100d4c678d R10=ffff88806a633c6b R11=ffffffff81d6005c R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=dffffc0000000000 RIP=ffffffff8bbb289f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff50e35da08 CR3=0000000012e89000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0e86a4dbd2323312 8ac4a18fc0162e7c 0e86a4dbd2323312 8ac4a18fc0162e7c 0e86a4dbd2323312 8ac4a18fc0162e7c 0e86a4dbd2323312 8ac4a18fc0162e7c ZMM18=c8b39036f97e8d7a e9d87d6b79e05408 c8b39036f97e8d7a e9d87d6b79e05408 c8b39036f97e8d7a e9d87d6b79e05408 c8b39036f97e8d7a e9d87d6b79e05408 ZMM19=0c0b000000000000 0000000000000005 0c0b000000000000 0000000000000004 0c0b000000000000 0000000000000003 0c0b000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffe080026f80307 e0080026f00312e8 080026e80304a208 0026e00300080026 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d8030fa0080026d0 0306080026c8030f 82080026c0030000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000077617201ff ffffffffffffffbf ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005fffffffd8 03000000ffffff9e 0700000000000009 ffffffc407000000 ZMM25=cd41ae16cd41ae16 cd41ae16cd41ae16 cd41ae16cd41ae16 cd41ae16cd41ae16 cd41ae16cd41ae16 cd41ae16cd41ae16 cd41ae16cd41ae16 cd41ae16cd41ae16 ZMM26=79ec4a0d79ec4a0d 79ec4a0d79ec4a0d 79ec4a0d79ec4a0d 79ec4a0d79ec4a0d 79ec4a0d79ec4a0d 79ec4a0d79ec4a0d 79ec4a0d79ec4a0d 79ec4a0d79ec4a0d ZMM27=a781ba56a781ba56 a781ba56a781ba56 a781ba56a781ba56 a781ba56a781ba56 a781ba56a781ba56 a781ba56a781ba56 a781ba56a781ba56 a781ba56a781ba56 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=5f0700005f070000 5f0700005f070000 5f0700005f070000 5f0700005f070000 5f0700005f070000 5f0700005f070000 5f0700005f070000 5f0700005f070000 info registers vcpu 3 CPU#3 RAX=000000000012ae0c RBX=ffff88801f2b2540 RCX=ffffffff8bbb42d5 RDX=0000000000000001 RSI=ffffffff8c402600 RDI=ffffffff81df2bd7 RBP=ffffed1003e564a8 RSP=ffffc90000197e00 R8 =0000000000000000 R9 =ffffed100d4e678d R10=ffff88806a733c6b R11=ffffffff81d6005c R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bbb289f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60d8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff50d7b4550 CR3=0000000035f7b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe0b1f3cd6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe0b1f3cd6 00007ffe0b1f3cdc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff50d6355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff50d63562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff50d635793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff50d635621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff50d7f25f8 00007ff50d7f25c8 00007ff50d7f2600 00007ff50d7f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000