last executing test programs: 48.071138915s ago: executing program 3 (id=217): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x18, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="d2"}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r9, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 48.069986021s ago: executing program 3 (id=218): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000800"/38], &(0x7f00000007c0)=""/235, 0x26, 0xeb, 0x1}, 0x20) r0 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x0, 0x31, 0x25, {0x25, 0x7, "800f8abaa249605a8fc934a7b864b2c8693cd02ea3f45fb7403a65715ae60259079a61"}}, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/10], 0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) (async, rerun: 32) setsockopt$bt_BT_VOICE(r1, 0x112, 0x13, 0x0, 0x0) (rerun: 32) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b02, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) (async, rerun: 64) r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000140), 0x1ad7dbf75b337066, 0x0) (rerun: 64) write$rfkill(r4, &(0x7f0000000240)={0x80, 0x9}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x54, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x3}, [@nested={0x4, 0x12c}, @generic="68a9575e4c8d76386c54b765402f976670159836d03465e6be34b8cb3488798f312fc9ae00b9be9565b5fffd10cfa99b2c6a298dfce90320b0"]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$SNDCTL_SYNTH_MEMAVL(r3, 0xc004510e, &(0x7f00000010c0)) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f00000003c0)={0x14, &(0x7f0000000300)={0x0, 0x22, 0xab, {0xab, 0x31, "33d68eab0060d88e1521a0ccbe1e1d9de72a69086d104c2ed381144739b6528fac34f34ea5d01b549eeec5c336d856c2ed51ccef3ca677e855a8df0e7ff4a8dcc4496ad69634c66dde3d60a770c16f66426dbae3a819e270d4c02ccaa101434489a79b20753caa310116d94124aa62a4d8446405cf103f968225b8e9a2ba893d290ed44f23ba1c3426738c636e7d45c4cf33e978f181ef3a62f7b99576c8bc293014d7f9dfe84483ed"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc4dc5345c6b1cbf5}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000500)={0x0, 0xa, 0xf0, "4273e8cbd3f2b68402b21737e505541d289edab3517247a6aefc7daf0373fa663116abf28d52ff9547c00473bcb4fe2115c3e84ec499c9e9a2196208ef62a658e28b1742e1331aa019eb938f9854ca8d7a3a2bf890b47f12ce28ee40e71f51092ba79c19b20a932f6660a0674e6b4556c46665dbd14a20909d954c0182335a39bdc16ed05884aa8aaa5babf17d353636d30a2dd1eb0fa41abf61a14944847054d0ec56ff2e0f9ff03a29a55e7620241684e9ec9c685e95b968d4a7eeeea460eb8a35073c3fa551d6e2804fadd895313fcaed2bd7c4a9216b446bc80c750fb43f6b777f0fdf3ed9163e4a87c6d67ea44c"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0xc0, 0x5, 0x4, "1ea4f890"}, &(0x7f0000000600)={0x40, 0x5, 0x5, "db56f227e8"}}) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r9 = dup3(r8, r7, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x35}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x2a}, @fda={0x66646185, 0x5, 0x0, 0x28}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) (async, rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) 47.059674561s ago: executing program 3 (id=237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r1, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f00000001c0)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) unshare(0x2c020400) msgget$private(0x0, 0x240) msgsnd(0x0, &(0x7f00000001c0)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000) 46.200270466s ago: executing program 3 (id=243): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000580)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\xfb\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^\xbb\x06\xc92\x01\xd92\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8v\x10\xe1R \x9a^\xdfqpc\x00\x00\x00\x00\x00\x00&>\x94\x882\x1c_j\x15{ \xf08\xdf\x84\xe64{4\x81\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xa3=\xab\xf1\xf5\r\xb6\f\xfcS9\xae.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/', 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) read$FUSE(r7, 0x0, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) (rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) (async, rerun: 32) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010428ff030000", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000800) (async, rerun: 64) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xfffffffffffffd6c, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc801}, 0x4) (async, rerun: 64) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r10, 0x11, 0xa, &(0x7f0000000000), 0x4) (async) sendmmsg$inet6(r10, &(0x7f0000000fc0)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x4, @mcast1, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)="39ef9a98ee24c702c71efc2fccb982c237561eb3a690e8c579b4436e563d4b4fcd862ffaed995d6f356f4b6c94a07431b9da98cf93c0c2d3061c61558fd8d4ae01eb475a75614a83d88845da5dedcd35acf5cdb0184b391c8c0359109b", 0x5d}, {0x0}, {&(0x7f0000000680)}, {0x0}], 0x4}}], 0x3, 0x0) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000040)=ANY=[@ANYBLOB="7472446e731d76697274696f2c6163636573733d757365722c00685139e97fc70c427c576bf4"]) 46.199710647s ago: executing program 3 (id=244): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0xf, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0xf, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x90) shutdown(r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000)) fstat(r2, &(0x7f0000000340)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x14, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000014) 46.198505397s ago: executing program 3 (id=246): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x1c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x4, 0x1}]}, 0x1c}}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x33565348, 0x0, 0x30000000, 0x0, 0x5, 0xfeedcafe, 0x3, 0x0, 0x0, 0x6}}) io_uring_setup(0x6ecd, &(0x7f0000000140)={0x0, 0x49fd, 0x10003, 0x20002, 0x185}) 31.720718336s ago: executing program 2 (id=390): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) write(r1, &(0x7f0000000280)="6e19", 0x2) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)}, 0x0) 31.720032654s ago: executing program 2 (id=391): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x152) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@metacopy_off}, {@verity_on}, {@index_off}, {@verity_require}, {@metacopy_on}, {@redirect_dir_follow}, {@default_permissions}, {@verity_require}, {@nfs_export_on}, {@metacopy_on}]}) 31.660838494s ago: executing program 2 (id=392): r0 = socket(0x23, 0x80805, 0x0) listen(r0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x3, 0x1, 0x2, "cfc139ae869d1804eea83c9df17240900ddb1c17e59cb61c1ac57abfd3fe1fa2", 0x34363248}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x100000000000000}, 0x20048040) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000407000/0x1000)=nil, 0x1000, 0xb, 0x13, r2, 0x2000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) read$FUSE(r3, &(0x7f0000000380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r3, &(0x7f00000000c0)={0xf0, 0x0, r4, [{0x5, 0x10, 0x2, 0x0, '+@'}, {0x3, 0x100000001, 0xc, 0x32a, '/dev/nullb0\x00'}, {0x4, 0xfffffffffffffffe, 0xf, 0xca9, '.$///\'!\xd2$-)u((:'}, {0x4, 0x5, 0x2, 0x3, ']@'}, {0x2, 0xb, 0xc, 0x6, '/dev/nullb0\x00'}, {0x4, 0x100000001, 0xc, 0x6, '/dev/nullb0\x00'}]}, 0xf0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e1209004000f8ff0700a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 30.648779174s ago: executing program 32 (id=246): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x1c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x4, 0x1}]}, 0x1c}}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x33565348, 0x0, 0x30000000, 0x0, 0x5, 0xfeedcafe, 0x3, 0x0, 0x0, 0x6}}) io_uring_setup(0x6ecd, &(0x7f0000000140)={0x0, 0x49fd, 0x10003, 0x20002, 0x185}) 30.389931639s ago: executing program 2 (id=394): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/239, 0xef}, {&(0x7f0000000180)=""/181, 0xb5}, {&(0x7f0000000000)=""/16, 0x10}, {&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f0000000300)=""/178, 0xb2}], 0x5, 0x30ec, 0x7) 30.31065555s ago: executing program 2 (id=395): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00'/20, @ANYRESDEC=r0, @ANYBLOB="340401000000020008001b000000000014001a80100002800c00018008001d0007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004071}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x80000) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40086602, &(0x7f0000000000)) fstat(r4, &(0x7f0000000340)) recvmsg$can_raw(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/243, 0x1f}, {&(0x7f0000000300)=""/115, 0x73}], 0x2}, 0x0) sendmsg$xdp(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef7", 0x93}], 0x1, 0x0, 0x0, 0x20000080}, 0x440000d0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fcdbdf255d0000002800a6800a00060008021100000100000a00060008021100000000000a00060008021100000100000800a500000000000800a50001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x400c040) 30.220951131s ago: executing program 2 (id=396): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x18, 0x3c, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 14.969844154s ago: executing program 33 (id=396): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x18, 0x3c, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 13.776948532s ago: executing program 5 (id=635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x400}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@tracing={0x0, 0x2}}, 0x20) close(r2) 13.660494924s ago: executing program 5 (id=653): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000014000200626174616476300000000000000000000900010073797a3000000000"], 0x34}}, 0x44880) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x11) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='xdp_exception\x00', r4}, 0x18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r7}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000740)=@framed={{}, [@alu={0x4, 0x1, 0xb, 0x0, 0x0, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0xe2, &(0x7f00000004c0)={@remote, @local, @void, {@mpls_uc={0x8847, {[], @llc={@llc={0xaa, 0xf4, 'y', "98756bb54c99ae05ed5bae3524f7efeb6bced30db1573914ce03b4acea1c5372d524da293d34b6abb9cd800cb941ac241cb96bc3f2fb61a1d023348fed5903cca226cc5bab6b2ae01f859532bdaabf02807ee6ccce0b47f48d3efe75c60b062cc40aa3d7fe53fb2be77d3155438ef91bd03d718250303ad4b772b15a8549dfc6504116aa018a39ab83d787c1e0c3ceff4df46169933a60dd2fff3121386aa6c6b468c11d828c0a9022172aafb15f532b90429b700f0f4d10474e3429bd2d4f61392e39dec2bdb89f38d61983bd7834c7c9"}}}}}}, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) 13.610010115s ago: executing program 5 (id=656): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x38) readlink(&(0x7f0000000000)='./file0/file0/file0/file0/file0\x00', 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="10000000191407"], 0x10}}, 0x0) 11.828807671s ago: executing program 5 (id=677): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0xf, 0x0, 0xa00, {[@mptcp=@syn={0x1e, 0xc, 0x7, 0x1, 0x2, 0xad, 0x4}]}}}}}}}}, 0x0) unshare(0x22020400) r2 = eventfd(0x2) syz_io_uring_setup(0x7793, &(0x7f0000000440)={0x0, 0x251b9, 0x26, 0x6, 0x2d7, 0x0, r2}, 0x0, 0x0) 11.792055184s ago: executing program 34 (id=677): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0xf, 0x0, 0xa00, {[@mptcp=@syn={0x1e, 0xc, 0x7, 0x1, 0x2, 0xad, 0x4}]}}}}}}}}, 0x0) unshare(0x22020400) r2 = eventfd(0x2) syz_io_uring_setup(0x7793, &(0x7f0000000440)={0x0, 0x251b9, 0x26, 0x6, 0x2d7, 0x0, r2}, 0x0, 0x0) 1.218476377s ago: executing program 4 (id=841): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04132e01c800"], 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04132e01c800"], 0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) (async) 1.216486814s ago: executing program 0 (id=842): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xbfa75000) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xbe, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xf8, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0xb, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x4, 0x6}, @var={0x2, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x2}, {0xd, 0x2}]}]}, {0x0, [0x2e, 0x61, 0x5f, 0x61, 0x0, 0x61, 0x30, 0x5f, 0x61]}}, &(0x7f0000000700)=""/123, 0x5f, 0x7b, 0x0, 0x1}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRES64=r1, @ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) (async) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) (async) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 1.160501038s ago: executing program 4 (id=843): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000001440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) recvmsg$qrtr(r1, &(0x7f00000017c0)={&(0x7f0000001480), 0xc, &(0x7f0000001740)=[{&(0x7f00000014c0)=""/151, 0x97}, {&(0x7f0000001580)=""/190, 0xbe}, {&(0x7f0000001640)=""/247, 0xf7}], 0x3, &(0x7f0000001780), 0x0, 0x2001}, 0x38, 0x2100) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="800000001000ffff24bd7000f8fadf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000030000600012800b000100697036746e6c00005000028008000700"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) recvmsg(r2, &(0x7f0000001400)={&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000000)=""/49, 0x31}, {&(0x7f0000000180)=""/229, 0xe5}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/151, 0x97}], 0x5, &(0x7f00000013c0)=""/5, 0x5}, 0x40000021) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r3, 0x0, 0x0, 0x0) bind$alg(r0, &(0x7f0000002980)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="820faeb46dcd3592ea915d564c90c200", 0x10) 1.100518727s ago: executing program 4 (id=844): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xfffffffffffffffd) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, '.\x00'}) 1.092233833s ago: executing program 0 (id=845): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x174}, 0x1, 0x0, 0x0, 0x44014}, 0x20048841) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 1.088746556s ago: executing program 0 (id=846): symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x198) 1.008708878s ago: executing program 0 (id=847): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xd, 0xf0, 0x40, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0xb}, {0x5000, 0x2, 0xd, 0x5, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x0, 0x8, 0xfc, 0x3, 0x0, 0x2, 0xd, 0x6, 0x3, 0x80, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x47, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0xf000, 0xeeee8000, 0x0, 0x7, 0x3, 0x6f, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x9, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x4, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x209}, 0x40050000, 0x0, 0xf000, 0x300, 0x5, 0x0, 0xd000, [0xffffffffffffff47, 0x401, 0x5, 0xc5]}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000003e08"]) (async) r3 = socket$kcm(0x10, 0x2, 0x10) socket$key(0xf, 0x3, 0x2) (async) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="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", 0x275}], 0x2}, 0x4) 910.454165ms ago: executing program 0 (id=848): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) (async, rerun: 32) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x17, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x6, 0x3}}, 0x44) (async, rerun: 32) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) (async) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) r5 = accept4$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0xc0000) socket(0x8, 0x3, 0x401) accept4$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14, 0x800) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000380)}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newlink={0xc4, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x21001}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xffffff7f}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x10}, @IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x100}]}}}, @IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x68, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_TTL={0x5, 0x8, 0xd7}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_LINK={0x8, 0x1, r6}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0xb}]}}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x4000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000300)={@private0, r6}, 0x14) 910.196667ms ago: executing program 0 (id=849): r0 = syz_open_dev$cec(&(0x7f00000037c0), 0x0, 0x2040) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r0, 0x8044610a, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], 0x40}, 0x1, 0x0, 0x0, 0x45}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000053c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000005480)={0x0, 0x8, 0x3cdb, {0x0, 0x10000}}) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_bond\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x26, 0x3, 0x2, 0x0, 0x9, 0xffff, 0x8, 0xa8, 0x435}}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000080)="0f017206ba210066ed66b8f825068366efbafc0c66b80020000066efbaf80c66b80a2fd48a66efbafc0ced6467f30f2a0a3e360f140fba4300ecd0810000c80000b5b830010f00d0", 0x48}], 0x1, 0x59, &(0x7f0000000040)=[@cr0={0x0, 0x20000020}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) 410.201607ms ago: executing program 1 (id=859): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) eventfd(0x2641d82c) (async) recvfrom(0xffffffffffffffff, &(0x7f0000000000)=""/224, 0xe0, 0x12000, &(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @broadcast}}, 0x80) (async) close_range(r0, 0xffffffffffffffff, 0x0) 347.540459ms ago: executing program 1 (id=862): r0 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x400) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x1, 0x800) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f00000001c0)) r4 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) close_range(r4, r0, 0x2) 270.326721ms ago: executing program 1 (id=864): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x64}, 0x1, 0x0, 0x0, 0x48041}, 0x48800) r5 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280)={0x27, 0x0}, &(0x7f0000000300)=0x60, 0x800) sendmsg$nfc_llcp(r5, &(0x7f0000000740)={&(0x7f0000000340)={0x27, 0x0, 0x0, 0x2, 0x68, 0xd3, "24ef7edd1704287be0eb00a8a95dbc9c6d39ed86425ff9c6013243c75e82ed2a6ff31f452f1e0d9467188706458d3fb9f7dcb447cde15257d92ecf9a7a6b2a", 0x3d}, 0x60, &(0x7f00000006c0)=[{&(0x7f00000003c0)="329ae587a4d4d43be9e2aa66f885891ed9392d878e83b29724eda83d087c5132b7b121dba477f5466d1792f82f0d10d46ad2d37c5ee27374c288f17fb6c3a4b57974b0841f6b7224ca22ac7a80676dd17c7e66fa421f97177a8b59c3a646ee1f9ca6cacb29d489190f63af8365cf6652ea9f7bb1c0797b0c192ea6110794aaeb931f65f0330a90d08feadc388b7f9f199af2f76b2e756369770d55ecfdc0dae512a38868be1cc822cd8fde38faa04c600cdd896efa207bf69a105e3b0a37362a36bbab9f79", 0xc5}, {&(0x7f00000004c0)="21d530821196fddae1bef70977e7af5ed06e86ea0d416df00cf2f54e41f3fe93175f47b49ab89e2b062da304686cfc59ae58ab3f0c42ddf2e33ed7b648bd08682019598abc7b176e2123fc5fd70281f0955d73598fc02f5e78422ee45bb37145885755006cf912b6c763e47309b1fdfd866508a5c7e8b358c77b7220c53890956e7ae5c7d353d68eed7439c520778ebd851cf4c46032cbe05cd112450d6eefc7d6ac65c2b17f7c9d5a6806f3f8646daae63bccc6e4f4a8d05ed36f1fd2515d697781ab375d2500a08ffb07e2980d1832d35ee6630890bfbeb85fec3cce9703dcd2", 0xe1}, {&(0x7f00000005c0)="c0d26153af98ab2bced5b89753f5713e767df0f9ed609e26d0ddcffba23ea35c30685be8c16ac502ffdac027f7a7bafc9cd56c146de84c266e0b7378d8eb9546e280e4feff11b4868d33eb5fdeef94a9e18c3feff1a7df931ae072d2a92aaae2f05e48245bf1428f096dad8746371d82069d661816cb81b8fc443c6f77d8bc6d2090f37326d7c51b0ecba7908ab7756295d3119abc0cf0242c018eb14453475bfda01783f241e79cf7d402ea857e80191a36180829d3fbdd9af4b2779f2f82ed49ea50a4198959a0c8c00514b47fe96d3e02b2344f7c43aa6aedabdac17833fcd3", 0xe1}], 0x3, &(0x7f0000000700)={0x18, 0x10a, 0xcf, 'a'}, 0x18, 0x800}, 0x4000804) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$nci(r7, &(0x7f00000007c0)=@NCI_OP_CORE_RESET_NTF={0x0, 0x0, 0x3, 0x0, 0xf1, {0x8, 0xfc, 0x1, 0xff, 0x0, 0x5}}, 0xc) r8 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r8, 0x0, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, r0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404c004}, 0x4000400) fallocate(r7, 0x4, 0x80, 0x3) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r9) sendmsg$IEEE802154_LLSEC_LIST_KEY(r9, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r10, 0x800, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc004}, 0x24008042) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000001400)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000001d40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000002000)=0x0) sendmmsg$nfc_llcp(r5, &(0x7f0000003c40)=[{&(0x7f0000000a80)={0x27, 0x0, 0xffffffffffffffff, 0x3, 0x80, 0x3, "5a21610fdafb4aba05adde30171b8b5d219181a9a2a1ec6ea0ac647c80fbcb8f45e16c152979eb758788581b4eea1a2f8487251b9cfc0a40d176b249e9087c", 0x5}, 0x60, &(0x7f0000000bc0)=[{&(0x7f0000000b00)="505368e782368d23e93b704766f02c27a25fe304143b2d059ad89cc8aaaad749e448c44d37c49c5293ca4f60fed58a29751da8c96b367bafaa6b90236b3556fe370916fd875e015e387636c5c022fd89c21c1673cab0364856650b8ff223b4a13823e9ab26370a79dc14c043bec942339f6abbc19c30537171651770439d151f40f3c119565dee92f38b1f4a849fd11479ffa9a9cf", 0x95}], 0x1, &(0x7f0000000c00)={0x70, 0x10c, 0x97, "fad413c57b89a7ef6cd580a6c10f10de0bcc69ecaa3a65dff47cbf3c89ebd6e3fa15507913524322c9daa67edbba28685be45c2f3722a0528ac6b3748adebabb61b1f188482892b3d498e0e844a926241f17dbc2f62ff6cb0ac9a50d"}, 0x70, 0x24040040}, {&(0x7f0000000c80)={0x27, r4, 0xffffffffffffffff, 0x6, 0x4, 0x0, "3415888e6b32a923a0235965b213da1c04a9b880fa3fec4d3f7359de290dd332c7ee095f41c0f798b5f683852a27bf48b74746e361cd98da95a3cc0bfc4e5d", 0x1a}, 0x60, &(0x7f0000000d80)=[{&(0x7f0000000d00)="c3c8cca2793fe900d491", 0xa}, {&(0x7f0000000d40)}], 0x2, 0x0, 0x0, 0x20000000}, {&(0x7f0000000dc0)={0x27, r1, 0x0, 0x1, 0x0, 0x1, "bdf67220ffa263535a0ebc362853885c646e638662b9834e84fd0d55df39314dfa6d6c55fd2c387446fe1dab92ff361fdb9f89a6c2c4a2b26d2c79ee6ff71b", 0x10}, 0x60, &(0x7f00000010c0)=[{&(0x7f0000000e40)="eb3fad8dd8f29a8ca8f51de2cf64cb4214d0a986a1a0cc3380", 0x19}, {&(0x7f0000000e80)="b4be00d32747d8babafd1a3785", 0xd}, {&(0x7f0000000ec0)="ce1d329b4032bc75ac5a99941c6a339bf728d346f15a639a0fb387cea62de0f5cf18fcfce399645cd270454aba27fa10420acaa3248530d58b96cee4e0d4253dea75574e62a89b4c5a1f8fd232b2316b76b6d3", 0x53}, {&(0x7f0000000f40)="695b5e7610d6958c756bc19d56ccef5d92c940c8bcf8abaf7c77bd5ccf36da44f7bb2817529d6ca0c160b335e931748dd93442a1eeafc1187d550ba0707610c4e1e689f500ecfc1463a7112450efd6920f49f894c2d4f7c8d1f49221132d95d2fa4aa3575cfe49894c83", 0x6a}, {&(0x7f0000000fc0)="322492a8dfefe1eaeb574df3aa3efc72837f2353153c54a279178a5a8528da6d8629fb1db95a42de45c70ed4125f8fa1552debb4a39cf219e085c4ea33e85a3ddb8e50b0349e162d525a2646641a8291bc7afbed1e269de2e2bcae1e0834d81118ef187f82b1ea767dfe9df9eabe752546220e1aa4192bf6c2fac22dd9e0ff16861ebdadac46207ad55093f6def306babe7b927388d1c4c20e91472202226ebd13cb57f2f7c791203476b9e5db1dd57873d0991512c380b409381f095ba1ca3001fdc94d57fce90eeb526324478bdb", 0xcf}], 0x5, 0x0, 0x0, 0x1}, {&(0x7f0000001140)={0x27, r6, 0xffffffffffffffff, 0x6, 0x7, 0xa, "b39be28b868ae47c606fa19840f5e50a9997564b9d5e1d66706613d3147bba86110bae74a21b7bdeb494e41196d9b1578127bdc940fe4a5c58106ce4808e5f", 0x24}, 0x60, &(0x7f0000001380)=[{&(0x7f00000011c0)="06d0dac470", 0x5}, {&(0x7f0000001200)="bdf016fcd8b491947001b395622efb242bc64dd60078d0f8f2fc579da557754c771f731b7fc84f", 0x27}, {&(0x7f0000001240)="16cc95bb44e55e768b64d0e198e0d33ecef77767a9605800c92be6c5fc25a1fbf038081fe26b59de79c4e31a2bf6b4ae6e2ff201ab4e60c66256", 0x3a}, {&(0x7f0000001280)="19d25b0d34f5e88309cb6e30322f4b656c6d54872d9fd9edcbcdeebf78a10ebce22a58d984082edd26e26c7b76d05b4025f23ffd84794a096be38c4e887299c9ca808ced6ba0a768463940b73cc4d6543c009f93060e9ccaed7ff8264c442f9658d20dcdcf1a4c3b85060db6dc727110d789e4d95ca00f060c9b70b67f22efd8e4d3e729e9fa4f16ea91c109d03eef7a239a7a5389aadc066d0790a15941321601382a6283a45f6dbe13143d0aa616b00417f02507aa9f839d9e4350a75c28523d7e1bf77556009a53923e2d472ede57f0dfe625cb6f31ae5ec5e33b7697b83cd5bc618e7f2c167ed7b3b2260f9000478ee11b", 0xf3}], 0x4, &(0x7f00000013c0)={0x10, 0x10e, 0x6}, 0x10, 0x2404c0d0}, {&(0x7f0000001440)={0x27, r11, 0x0, 0x5, 0xd, 0x3, "97ef7c41db299f59463463906f413d5026027d64271c507260c09766a0853efd69e15e0b85d9d8d25b4a93d00a8b8abcc9a18db15b744e4a729a66c4cc0e6a", 0x4}, 0x60, &(0x7f0000001b80)=[{&(0x7f00000014c0)="75acbe90898491acf1510d22c8abb93f73a8cdc73d45be92f392741eb9b0d4af412d106c1d3bb5b95b7132a37a0d2a831992abab19b64ef73fbabe2f5cf00c63d358cc4ff77ebd639491898aa03e4b3c716e455e7a813af576d2a274a7c9be42a59726fe0b003e3bc7caaeffc32294b88f95b1590d51", 0x76}, {&(0x7f0000001540)="9aec8c109c0fe53866416c4527f064413e7ae32490f7e35276c100e31df471f05729013fa4f01eb9c183899c844752686a49687a54b9b67391ddf36def454c7dad3796b8a3e97dada7ec89f1288f3cf001b0f4e957a9419d4b851ceb016ef28b80a48f0cfdd20ed9c52b09bb4bd653c8974bfc5950b234e46440d2d06ad73ee0cac142f5a6e9be4d682a", 0x8a}, {&(0x7f0000001600)="66008a1d35ea287461240362175f38f2cbcbeca88ed1f91de8b9df06afdc6408333d8b19dfb94d5009a7bd0ffd2bb858c1bbc6114ea4158be5b467f2ef4bbb1fc3e968f639e11e34d5e04bfd41c79f0e684f249d61c8791b62e5b6c4f7ef3a81ee4286182be3a7bdcbf66d071aca5d78be514f04d455167327aca8b49c5cf890eef12cdb4248b462da8e0030dc986cdf7a82a26f86a8c27b81d7ca78423131917cb9552bcdc1b97b7aac7f4840b09f1a5bfa048e7ad969c1e29bd2697033222ab49262094504aeabe0f72174949e2ddd4a5b9a545cf1621570093608725e2bfe7a3ab8bcdeb19f5779c59aebfa05f0b5b378714a4da2916ec8", 0xf9}, {&(0x7f0000001700)="b14dacc3090cb194693a35bfa5227ce557a6bdeb230559d151997a97b69f74296595c4600e1b3d4d69263799a226b649e80de8eae10b10e664728a58db936386b08adc14cd0f0639acb469e19950596ab8de47d81e9296e085e378c2ab4a8d0a8dcb4b30ba5aa032c02974325ad58e848c3434f813e1d5fb36e5937b6d0d247d73380613311ac381a84f6340f7403e5360b51246872eabeb0a9e39c1c6aee6cd80d3162a430f132cf927e60db8f2450fd6bcb26c87f38bf7a0758b77be1f43a6464bb0dd5623c4b38e3efcfe7a7230", 0xcf}, {&(0x7f0000001800)="8476143f2d4f9555a1bd90185e63e0dac61e418c99143881825af9c380f708557b1f6f6b92e1bd1e568f7533861e75968a37081ce2bbb2c8f64a243be5b7c31e3cf11086b9e92b22dd1e3d52c9696e49cf4c28140709c63bf024d953eaf945509732539a9be2dc752409a87cebe252a359be3da9a35be3bdc33c8dc0f8", 0x7d}, {&(0x7f0000001880)="f4b452aedac77ca25b529fe6b883e6c8d8add8a9afcbcbad58d9e7aeada569c6bd17fca7032f04b9475cec39dc3d61f03d68369ffbb4b583359d232a1c21a82c91c7cef82c1126bdda48f45f332e9f1cd5d630f024e4cc29d30ea111ab28941fe17f7968ac75f4724248f36eb63dfe103da0af0d0bb7da4732566e2b275d71a3", 0x80}, {&(0x7f0000001900)="a6279909a4b223aa2227cde0bc0d7368401a6f974ab87c4c91493afb4dba40a1e4fb20bdfafc0331c33bc2293ae7f8", 0x2f}, {&(0x7f0000001940)="60a3769ad03bf57bc7ce15b1e5310dab5d941c8ad9e6f7a555ebe649f083728fffeed9cdbe165ec65e079c2619a7c36864fb2850612e0f5b5d57704f126d0b567a947bcc9dce4268e5e742590d37aff4f1fe742b8b906890a9f10544fdc004434302b16100751ccb102aa3b3fbb3327a016546450e795bd8133a2e27cc3239f46c563b53ea83a282c44b49da1e73468660273fdc1130", 0x96}, {&(0x7f0000001a00)="ab84415ed7d531d8c68f9f73984ec9eb0ce6f5f368c6d0a9c845ec7e592e1b39f4e0509bd91a9a6c9f69a59d1e81f34272330951828509419c6ec3a06392a89b9677b6f588f327d0e86ce5aa63e9768782f30395a1142b250dd10c7e2b335fc90e1277fd4fb511f447a308b4f577d2127edba76eeb63bc37d52eee58ef7e9bc1127ef30808f6c0399b901a044c167a68d3705d5d2fb1c125548f975ed675c2a738ceba68a541d7a0e57d824a24ae0763b3d38fbe7dffec1399ea0b42d05560dd7c717a6129196aa6b9f5bf50c6", 0xcd}, {&(0x7f0000001b00)="c82df754847aed6e65dfd09e523f853a59f9f0dc0fbb3b403c566a1e6163551d64d2617a66ce1cd0e27a45fb666f85d568a40818c817a2691eea7c6ad1292a0a4e9f39930db29dae7b21e23f5a50d2b0b3e594", 0x53}], 0xa, &(0x7f0000001c40)={0xe8, 0xff, 0x5, "8500b1f74c43dc4a9e26e6c691d7fabf5433af9b3ff07e3abec5d20ce6cb80b351c7273f85eeb5044e8dc3b4da09971716a458c93386c5f9f84fe0e0ae90d75bf4e9ef91f166fc2a06678aecfb23acb4d123bc7c567cf61a967f08845d8417dc0d65d7ec22ae3090c9de4db4c52673e45b24e0e3c59e4a2059700c0ce3f01fafbdf4f20e5b4da161949be281b40d6071309e9acc68831460908a33ba46384c1c2ef22e57ac6fd476ffc343cfa5476bca0b3a121e7bc71479db47339de7fd189d8dd68013979f781f37688db7992dbdc0ad8eb3"}, 0xe8}, {&(0x7f0000001d80)={0x27, r12, 0xffffffffffffffff, 0x2, 0x0, 0x6, "2661fd5367e047001719f7e29c2e982f051a0eb3277e2a863749a0da79d0493459bf0b9e0ecd0f8677df61fda1e33d6d7c4d5fd60885165b208ecbde2c374d", 0x32}, 0x60, &(0x7f0000001f40)=[{&(0x7f0000001e00)="c23d3c5f39dcab114fd5398b6a0b0169c96f0c270a7d17ef26052c0efedc8537b70542a8e8ef2cb272841ccd7515d6007836c3f717af9dfb674e277685d9ca702d2b7c8a37164fe9bdcf6cf05e115f95a938a397772bdf72ef0b4509b7cc3f4b35be788caac5d30e2fade53660a22f", 0x6f}, {&(0x7f0000001e80)="de471bbcc2d49d7c97704e2c8939cd6bdf92745cbfc0d65b91e9b9d9771905b5ebd8db47342173811e7161ce72cfe19a57f1e86a9eabd1df9223da593263c2969e9a3c81f2b59b4907e7217385be5b7f307c7396e060baf64343ef023c57564e4dba90fb85237ee015a1e4f8a3082b1a207436b8b92f27afa627952729e0fd4c7a0cb56698879bff0f9c92c8f9ce09ec", 0x90}], 0x2, &(0x7f0000001f80)={0x60, 0x10f, 0x8, "8cf3c6e25c108c40b0311101cc86cf4755a08fb0359efe053c6b23d5a16cff7d1644fd8911297468a37e7a99c3a2bb2b1a248e3ceb9d01afc7b49fbf175bfc4bd3c2c00e0b2a1b0f7243"}, 0x60, 0xc000}, {&(0x7f0000002040)={0x27, r13, 0x0, 0x6, 0xaa, 0xab, "4ce3aada78c282940c7db4c969ec365a3b0cb4e736a0e53cb865bf0e4d86f4762e025a15559e293486cd9e00363f92afcf3126066544e1a74cfeefae6882ae"}, 0x60, &(0x7f0000002180)=[{&(0x7f00000020c0)="373a0adbe2682273c0e405e6e84ebc33b131c5e327a1415354da3235b2050d2648e861e5ef5231cabf47c286de1739b4982e9c0834e2be982ee60e18c7b8fff8d79dead967006384d66211f440915abfe4397ff70c0690f57a08807ed358c4470931a2b1f3765c78429f6d4e97", 0x6d}, {&(0x7f0000002140)="5482", 0x2}], 0x2, &(0x7f00000021c0)={0x100, 0x110, 0x98, "b1380c495453ba9500fc6d4407c620c2180c39cb6957c405d50a5b2f1bd21306b6c2ba86780ae69edb0de62bc53d73146590d3101dba92ac30af575c530b89086b20f5e536d9097a0e2664b0d9d17eca4c21bac8fe95f0e444577faeccc5afa8700417055234c163c1d3a1ff63fd43b67a843797e2c2bde2c1054d8000a47cea7a861fb6ae3870b9cce5219274394c0bc8c823c3b459812728acbce12e1d6f30b4d0a226b29a7123eeaccc1a9f50b1df06db0b3c3e21b5f3605de1fe08d1cdd5fea015be7cbaa11a185e6381afa719b9ee1be0dadca457bad2231da2f0c5b5d9a0fada64efb00ebc109b7d"}, 0x100}, {&(0x7f00000022c0)={0x27, r2, 0x0, 0x2, 0x9, 0xc8, "67f543a0f593e14781775c0df985b8f732c4e5930813bff753b50aa85a34583e36db582fb9048f4fe328ed375a9468bbedae29328f3b38df20e81b4d580b1a", 0x3e}, 0x60, &(0x7f0000002700)=[{&(0x7f0000002340)="195180bf4c155178ad7f112339fbed1869f63ad2ac764555f8a19cb4390a8ca104a9b2c005deb6bd158c1c2815bba94106a9bc0ea2c17569dae32e4ffb1b1a9345a8a32681b701d432b55a1def65350f5f4ca11de6822f3e0256979ce09ccb38434bf54f251e4fe03c1a9deb0e53dcfac5a1c3a655cfbd836623c4f4681ba7a93576dd0ee31450f4", 0x88}, {&(0x7f0000002400)="42fe17189fd70a06f0adf9670a65dd02053003639642d02fbc44b3d0d45895488a0ae616a086428a3aeee311809d6c5495628fd8a9e0dceebed6b93005df1c07f6f7651de489514d8be078dc6b43dc9f0fa3b5725c35897bb3f8a048687e09223060079182953cce4b4a6a0f70cd03306bf41ee2dc5c53132d3d067161d4ccd146eb9e9dc6f55e5946df0e2e5db279e969e73ed0f77498120ce6b32d080f7f19a79bd7e69a872f6eef331a43479125aad7bac1eb599862fcc897aa2d965fbf1a085975", 0xc3}, {&(0x7f0000002500)="f58175a54c03238ffab3f00dd4aa8d8e0e1967cc8ff3345608a9cc5e445d9eda42aff392dc98d417d3fc5fa9f015e14846a26722404a44a31dd2fc6422e88dcbc8eb175beedd1917bcaa1dc32640c45bb8382360ddad37ad8c909c7653f20f625c6f7f6e24b9abdf95d46a40fe477482844b5b08c3e2b1955ce80e367ca7360c628b96d790a84be6b9f9ab4db23741012c411340b918d746a7cc501d60c50ed9edc0083be397f8c1b7e23f87bacb4d2eb8f1fec49c6c739080a72615b7f1a704612ad586a5fbb401ca60b28e6c16f9d4efe3113e11d213f0bb8ca8603bf4db9fcfcc6b4b1d8e8637c983a8f67fffd3d1e2c4d7ab21c86d79", 0xf8}, {&(0x7f0000002600)="b6dba907a7f16d1788c072b01252f023a423fe439279b4ce8bf6c5b1a2a01dedebfaed1384c8e0c5dd11e4ecd5f3bde2d6eae662478c03b4d14999ad6033fc121b53321b8a0454442897aa2427d16dcd187fb62d366eef6dce5cc30fce71d99a83f835a010fdd61fa68f1cb08e45297139428b355b58ac959dbe04f6c67d81e3bd1cf80d16452aa02bc54748d45951502ade26ddadea706fab2884a141a9fbf7c366510e4b081cee0ca7c37eb548adfc5381f607de08aa05bc0cb8f08e0942ec259d5b518fb8f3dfe2d51c09dfe41509b5ed60d183f220018eb6aadad109c05817ab50", 0xe3}], 0x4, &(0x7f0000002740)={0xe0, 0x110, 0x4, "305dd3972a641b82c50b93850d8f5afae4b087019510a02e0e42bb919670a98b550199b8065aba1eab1df921477ce398dbc241eaf3a1ebbf94dcb953772a8b09052cbcf162ac97d5c7780b19f46bef9a58babd846e91b67c36ce15902ad30b0ab7d307accb7d87ccecef552d09e341dac64242c0af22b8e494bad27f520a8261e76e2d86c3ae2964a2ae99c373b8371187b697e066780a4b3e7136921bcac2dd2ad3d2fe4053b8ac4de17509ea65a656b573136cf1a59801cc5d88419b5decc7bf1d042aadc7842b7dcc"}, 0xe0, 0x4044}, {&(0x7f0000002840)={0x27, r1, 0xffffffffffffffff, 0x4, 0x11, 0xc, "0e0a4eec52cc8d35bb7ca2f2c3bebce0e89023e171172524bea9a28b47c57199819f7bd4304e019ff2abae2e211617d0a10cf240bc68858fa45019ae2211dd", 0x24}, 0x60, &(0x7f0000003b00)=[{&(0x7f00000028c0)="afcd4433b7346a4020979131780220e4079151beef9791d7b9915650568d275897820a4b34eec1937d0e53bceb9e55ad6105405cd4657fea40865328d7866f8a7f8322f3276f4de15b410a8c8fef42b4938599667619e8729cf928f27bbf1d880ae4f34fc7d4f97d06ed8945a8fdd5e58b9931bcd3736f352a40a2609405cf282198100d37874ab753a43baa9da3d20ce96a6db634b61e66db7cecb210e226d62e6d7e1506", 0xa5}, {&(0x7f0000002980)="e37a2723017b3ec1e90d5a0bb7181e2aac3ad157a57e342016d8433a90c278745c5d385ae97b42633f21a70b6bb93469872bc079c12be1cb61931951075ebf1efacd64e842e081c7c7b80d062b20868e6dc4c4af88861e5bfbf4802cd235acd2987a87e05e48871a22c6bdd5fde7913ed84afbadb43e0eb3691521abb8d34819d94fa1f67e64cfe2ea2df3b3d789ef5b4b83690eda97bc4ecea98223f5af28", 0x9f}, {&(0x7f0000002a40)="283ee86b6229def7aeadfc2d9b09d3bdeda26157684ece87f18801ced3a5f70a8bde6eb28e321835b7fe597ea8002ad16b101295", 0x34}, {&(0x7f0000002a80)="957d739699b6b1f5d9635a4528bfa1a873a292", 0x13}, {&(0x7f0000002ac0)}, {&(0x7f0000002b00)="53650f3f516cd05c23a4c7bb6cb54641f4f6fd4f545c684a3841f33119039e23cee0cf4e5cb3cad37300626d8c31969ddf695971dcbc62b23630024fe07c9e0924bc866648fc42b02cedf08f097afae18f0d01d9555783f9187cc58a492c30d8a440fb3e82464d791ed5f977a6e3b2dbf9d4387f18555d8c884be1e03ffbbfea46141619c4290de5847ab6e577b520496221d172e7b13fb0da93443973c4ee099da295700f7d110b430b847896e29b07ebee9e7fe7d5fdf1ba5fb91bf702fd9318ad3ce71012f6232a65e1676ebba065ef66a4823b6fdf1f45e02092a68d374d5ae16c960a25b52280ebec1b11250f7e8d57af67424e3053f151d81584f73848023ae0b4b23f25ca67ca01bc0051b849a3e35451f4e5f269c299beb02e08ae6f3470b51bd75e415b99ff16ecae1ff1276976dea533e84dfc904674d1a2b67239fd746f2899fd5472bf6db74c073321d9b3c16058733167b06660a40ef6e4f6e693a0f028b084c5010f1fc2f62a2ca758fba5bb3a006c53a885d6ed18a2521e84339e536ca02e2da1c7180d5a559c58f8453090587d044bb5f1f033ea4effe0e0c3234db33d48445902e2f103586d9253f1df831738d7351e126f2c0a0704a760b67375bcdae2c97d1d8d9465ee8f7c847476f6c30133d8b4f8274d73a547069c13a3a4b336a58501cafeb468ac7fddd844d9453c78f452a8d65775dc765ca9798c68ee6cb511f7b376e60101d6592c6187eaa543de9136d37864f79cc5d40fa6eb053abc9fc26ce3f1c36892562513394ea322434def94f95af37dbeedd9f15d387b0ccad0467dca6f26e02b839790d693439c2fc94271f6052e8cadc4454a743ec201b2c4438d8b542e1c10c43d26ebdc91ef448419cefd430250dbfac8507539cbf418eecb40c6a9e8437a4939f0feed8c0f2f2902e063d1c967edd7f4a57cb4cb96d855c0b577a2e2803c6548e06fedc5fda20bc1415dd6c76d3a3089463693ed1e055e855054f40ce7d2eebae0a035eff38e12386e52c8ff6dd461ad7ac3988b90bbec0f195c2fae0dc528c59068bde5168b64765660940f38272c9a897a7bda4955b98a0096b35bd00cbf126494682be8d641b302b2123002f804d3ed440ec3d2b655d5b460395acb6658653afe0c8f87752c7fe1b2c411550e1f8d736d1aba392d69021214e5460e8fe4fd577eb4e7e24e19019a6f1c483c6422bce0921173f74f6eef0dd8c006ea8dfe7d8eed579314f597b7ad4f2512df4a1972ac5b5b92acc7a3c67467fd59effffbebf0b9ec177028013bc7d00c1db9e630bc72ee725db4a92d7d75a0d189156f21f8ce593e15240a09bc701cd746f076215c2e7310deedad26d0c3517c98bd9766d7e241dc4f281e72b12ed62ae22489250c3e133e885b94bd3fd9356bd659c370b9a5bff328e40dc038c40b4d62995bc409a5548b0b9854d3a8cf584286139095beed7b5afef2822cefa91206df65d71066731b08dde8c3b80b30203fa796f088805862ba0486d3ea2d89ad8886ce71ad5e014da2b043be1ab281acb0797a028efc66b74760f6b221bcabe96c5a2285ec8d76e3e7a353986010b411551d4913bd4e1d677db6b6d6e1a4c2853cb8a3af620e2379f39150b4b8039a9e128da435702dacfafe7dd6f9b737bfcf5b7b18ddd8ec492834f8e2416f7e0636f7ec483d7ec09205310e8c7eeb9f747acf5e36d9b46b6d0c1c40c7e94d9747c44bf457b5b348480b04002272c6f5ce0653cc74b760b64c1b0dd16816e9b278d7be6e5c6ec3150a2c9f4eb884969ea3abffd3c330b716365a8b890139cd75af67edcd9fffa4a479931989ada3151506a61fafc1431adbf58168780450077d439d1eedb25392f107a80afc6cfafb275df920ac7cf79e0243f0ed4ac073e3048ab95b954cf6363dc6bf32b83ca734701215bce8a0a69c1777e19291b6b03c22535e443d67e1975022de0ecf79954c63c2c74158164de7ab922b2a4f6d0cab9505fce0081efc159c0c30097b077d3399b65fb0689cc4c3e39ac7b437ab40fcc94ca4156a0afdda2f6bfd0f1747fb4209ee227e33516bf95e53a379295efa6df9773581b9eb35574259c4a030355ea0fbe66cd72a3e71275fa3a39eb0c7c5383b5dcb6043cb6fa3507039337efa6951b08285f578548c2a35047c8954f7e6020b3e74351442e529856f7470af930af53d9287addd44c15cd31889710636d474d866823edc47271bfc1dd2d09197760236546e7f4377d760d004463166902939d45dc8cf796fedb044c23619d15780aba70fd71cf5f110ffdc9252cacb0c105004c8549bcf7936658a92d2e08413e39fe535593eaa1478480a6b2bbcf69331a07d83016fd7489ece3f0d4d30b023583a35428e83ae79cb5a16eaaee04c39212fb44666d82a6a2ac1299be227abeacdfca7b3b9ff38eff68b501353a063b0a70bf71b4340c8470fb916c6d15a30ff3f9f307eb4ee25694e437abc4c56f0e4ee623b99f9fa7c5fae9ed45aa22175aa7efdf70ab8467820a45cec78a53215bf69e857e77a723eb5d34dbd3b358b15d3e38577860dd26beef65096928bb53799e1a13d02dd7b0592f709a4df1c899478fdca42deba4eb394a7de68182aa338a781287a0e12dcdbb13bed6afca494eaeb26c7dc805c9b93aa2703e79f4dc01a0b25f55a0efca5bbf496b57970abdc786e212656aae7045c1393115b0bfb4ae4d41b60e3825447f0fea66950b3762728f18e59fe76a3aeeccee7a11130fb97f123065cc4ee9e24cfa5b00921d61d671df46e9241ca034f79d10741390b2d73de5b26ef4f06f8f666198746ae2f21221af8fc0acebe5c9b56152eba4c42f021c83cabd5a52c5fbc0c217eea50aac5c85e6d1888189a4a6296412292399b0fdaccb5a647499b1f235176fad3c7ea88bc79110273d67a65aec3a9ae32a061b45fea1040dcfdac08c7bea14639aa5b32bcea963adc88aada07ba76ba57ad477dcd505ab138270e3ffd1a2237f84fa14ba99da1f832abff038a3168db70f2e786f88cd0ee320651b571dd78d3ac735c0ffd5425006388e2bcdae97c5169cd02e2b2124de3fa8cd9e8c44c842e8f2f2ddb8ce25bd651b5520297bfc85e776d96e4ddb7522a63b7c7461d1ed97f2c634849ccef71ceae6b9c0a9416dfa58d9b74a1e8732d45725a9666d2c9af3791d40bebb186c1fb0b25a944a20ade6292b2d9ec18b64c99798ed02e33e4f5e46ec79973a1442076e01733af0d36d87c95d5ff8b1201809dcdce7f7375ccc1034c2d1bc3bac499b24efb029b571247014be61a8aeb6d211df98e1abb2df5d263c5f871bbe45e29af715bb19a2d310ce5c0f5f7b223a0d9f8757681a4566768148fb24f69f277ce57a843e055b81ebe7f2371f4d36168078a50192672424004b598ab27729bcc705565b914242160d4c9693eff11479736c73e65655dc16de186f548e98b762b0f1725d947279b58f36396a75ad114336384515fc82ede48fab6c874112bcec8dd1907e31363dac745dd66cbb10864d7146729bc6742c589ac941efd4750195795539c1c429ac3e55cc1929dd056d086a122df8e79f134a0b147b3452900140944a598f0327e1a02cc96f59ec23164c44b7d3bceb6587eb2e6e19e6cf266a8076f12de97d1cfec46d4023c575b8ea116ea890254f3f80171998eaf7b083da5e46a2cebb8ebb51243248cb008e892842009ff559dba6ea74fb0f7366bbbbf1091b9611110c1e33b9889fa4e2bc12a35a81e16a0446303a62e1891460ef9b14d726a7b60cb7ed435ebef3656fa60865cac0c4c5212c1dbe3c2a60e74c471bbfcddd1124fe83f6d17372739343cc6b7dcd0dc483e34184542be90ecb338f3036fb52c962f5163525f46246ba8affa0ab89fb6101f59988541539bf151c2dbaf5d89d878ef0b78412c42da156220dff963663a90e0750506e64814ecf1c0785d382b5df3d7319110b0fcff29b54a2a06b76634a75c5f36509cf482f8f93de88f21d693fae9d8d84a6e5e57737d120ddadad64ce26d75fea4989c7d66d748430d156312f6aeab999603dfd42c41886721f3f17ee4babbe61f9a072792544a7c89d7a597e916884dc8a47fcb45cc35f7cec1902e862f908336b0fc9bd62869ee7beecf5a6c12a3dfba16ee2f64786199e51e6e8f640a7a86acc9084fb52fc8b644e5865c7ea804acef0cefa867046b77945bd5d54689d18d96d4804cb7eb83a6b92eab27858b1f89d063013db35da70b546c763f7daf55c3a59364fcbd16cf2296d628f51bc9337db9e6151c053050d32246935117dd54693aae0dc9cf5e4cac5625737e5f69289da15fdaacab944b918c919cafae529f606f59abb2c79dc775f9ce95803c8b70c31018e2d2e8c3ab464d67353dbdb6501a9ed31af37671c56326316f2ae8feaf10c18af55d1003a89e1393b685f185289dcd37b52787716a897c2b389617d4ed3a0021669d1d31177be14e2322d2b8cde1cc7a8b616ab2bf9c9fd531a20d1e015f6f7c85ffd82d83f89092d9595cc1069ce12caf7cdfdf809f3eca899a7b1cf53099efed95ffbd175b3a65ef85b11c6273543ebce7ded2bf2a87251536e6574ab5c82f5e7b9ae2acaedb614cc1c8caee2230fe7c9284c1575858c7d7f2a0482e29f891829b52b777567f42e375472e8b0f617c8c2490caa10bd0ff18a6a0ff1dc18172d646fd0c2403892601bbbd94826ddf60efc75fe3874e0042bd33dfffb6f2c0b67d165a7797d22e9885a6a09523f60463b3d423ab9e5aa3d740ae2cc92f9246e1ad30559750bec68d6b000a5d04b6f70a9ee14ed07b05d73ff0a95d2316384dca36deddd19c7141e35fdff3770b3dd7f5a35e975a1aa69db7e21d0caa91174f2ad2fedf7cbf9a7676221310821ca6f70bfaebd72070900df4a4cf08085b9c9fc101dcbe6847a1932f496d55370214caa01680e94a3aa133e0fcd99c3a692a18d40a02b413ca8eeb17549b6677da8165c5cb34a404d1289cabbcb9d36ca9a9381e2ee00be65b3c77c7563bfc1acfdaf301e137ca1b6dbb3c069f611d4cdb7a1c5024f428fc413567a5d55f2f728db49601be8e3281b2dd31344e8647dc1e53d1e09ea32406eedcbb77823be235c25b8524b23b2d2a992ea9578da170d413dddc1a80b804737fc0a13628578b8133694153aa7c8ea143a7e3390bcb6a32fba516d1b649759a61089674ef9efcfd838592f97dfe7ca447963fd6639c6a643a1c55b9c78c2143a1670ed3f49fd45dc52feb6a1d496fa4e0e6cce6a00a12c092de30ec690aee7fbf8424c479965430a528d455e8884d28f1c3cccbc6604243710336303e33b100c61bf05603cf91691b35a5a33674b473b06a631dba61ba68d649fdeac4a36127fc61ba7505187bd9088ad6e89b0dc08b8699070061d257f14a69c9e196e0f5e276a7212c8b507e80bf2fb9d83703c7e827c85b7cdbbbb67a2756e3f47d5970de2f8e3e7ef5175035fe4e524d7322657c5f47a392692284115fbbed08c005f2a48119708cccd5cffbe37459683e1183a67f4fc0b9ddc957a943b4db189aa889b2a4cdcde5f5c860eca0da050599152dfde9624b54a7ce9eb3ef433c100fd8761377752fc57d03318e5a3e80098eea37c09e443e4e81216904ef0b11989a72e0c063a67438e6ab68167789e8cfceb8da6a8496c3156ed7b96b69f3f30b34c65aea9932a62cabbad74d8048f8da8fd68ecba763d2d2740f7a23816a6078a215f1740d26e08530cae3d70ece55f7d69bc4d2b80a565e450d21d676a84bd7c45975082d19c8", 0x1000}], 0x6, &(0x7f0000003b80)={0xc0, 0x117, 0xbaf, "881d05288ae7abd803c4dbeb17917613e0af18413390fb8d1baf28215e4107cb39fa38c983fadf376d802e7e09c0b8d60eface653d54eb52bcce408a205f60be1f10eee922aa76ffc57e5d660ec4dce6f495190d3be45ed9b69aa6cd293b8fd5011c6c3ca57e3f71bba3a9be1c1bd9a4d9cd8f8a03600f7568ee4b3c03104220cdbc66edd8456b365900c2925eb781407b67a60ca39c6e315fbc152813246747e07f0350de63bb8d5b"}, 0xc0, 0x40015}], 0x9, 0x83) r14 = syz_open_dev$vcsu(&(0x7f0000003e40), 0xd, 0x40) accept4$ax25(r14, &(0x7f0000003e80)={{}, [@netrom, @rose, @null, @bcast, @remote, @netrom, @netrom, @default]}, &(0x7f0000003f00)=0x48, 0x800) sendmsg$NFC_CMD_FW_DOWNLOAD(r9, &(0x7f0000004000)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003f80)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4801) write$nci(r14, &(0x7f0000004040)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x0, 0x3, 0x6, 0x61, {0xfa, 0x7}}, 0x5) read$alg(r14, &(0x7f0000004080)=""/66, 0x42) sendmmsg$alg(r14, &(0x7f0000005700)=[{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004100)="bac59f97124539dd0741fa5830fdb6e750494afa649edab8f1352cd648633d7e3ec193f4b446423b9ebe6eb281511ec4802d0bfc4980c4e217af9e860dfaa47851e9e090aa9e71b8747105b7e8dc4d5c4a64056ff0a2d31d79cf12f32cf95802ff9e0e8a77dc2e9f1a1af13ca7ae05a6bbf35632fabafd1c997127904988fd7bc35617d51fa3df28541d47749a67ba13117dc91e4f2b046deddb606065f4aab8d930f14e7c175c0165f920864c358b1935d18de56204f738a82210", 0xbb}], 0x1, &(0x7f0000004200)=[@assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x200010c0}, {0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000004280)="a82d6787b6", 0x5}, {&(0x7f00000042c0)="b3159d414348c39b83b5e05fbb7f43fcfe200a15c3fbd613656ce114c107e4f0c78dda6a8ef2529912ede27df0f9643db3d0621cdf778bfd3d85b22d39e81c57394d900602e46c0573e54010afaaeaa3230856f3f8f0d8abc48c78bb8daa201b9703c63b64594f16430a5d148f5b3d28cec918a1b925cca5a87cebf7a1a86460e2655c7df5a37befa6679a6652c5167e8739d313de8be4babd06a70d80e5fb8b3009fd5f47fa5cf0a2f06a60f794eff312979ab2de34c9152089fd8a6433", 0xbe}], 0x2, &(0x7f00000043c0)=[@iv={0xd8, 0x117, 0x2, 0xc2, "328db1c1f52250de9be40faaaa53ccb066401b8c876691726535172e444860b09f7808f84ebc8e3b7c693543809eaefb756642dc4163443d07fc42a2ddb85f29b328e1432bffb5243cea2a7af421aca5c22ef42308ed97ba8f937dc5204d56974d26cc27e2edcf1b568f3ad90774e6a338e2e986568491ae0fb0282a4ced4bc59916ba7b11d8e8ce29b71111951ad2bab9af7eff3b5ca1fad54f42fde95ce55d34f24909a87a73c905d7a484ba72bbb771912f977a80889bd52350f26e1004b75f28"}, @iv={0x110, 0x117, 0x2, 0xf7, "c6406b24ada4aee0a748742d942989ea4be0eb503355c11cf8f24784e442cd960a62f2718654eb2d0326762e59ed88eafbf36aff051f66d04136b5ccd07071c3262fb87eba6500a8f5000634591dfa4af29e1335b2b92f4d8a7c20cdaeb5b5f34279a3ef2f53675949b54e8cffd86eecf875676b6eb7b25bdd9f13f595ec8e12cc7c7a0e94e1a4a6d4f0084bc46d0919ab5d53ebd281fd545a12ed35611fc70f5d0251988447665fd6129e0535a2dfab4371c07147858f2c60270aa6016fa93f0ed66de8229ed6fa1be19d36101c63a9785f9ea6f476c426335b16027c4b01b41cbb5c7a194b411ef371a9590a06af758a8f34d0eac86c"}, @iv={0xf0, 0x117, 0x2, 0xdc, "49a9c32a42855cfd7995396003c3d02ce42feb2615d3aaf37a544105ddfb71ad4a589a9a9d6f2a5b8f963bd678c972ebeb385d8f06590fc6f09c91a2eceef33e8bd07d6f3092470f82c53c2eee2fe9e3f0db997619edae1dd160e31a48660573f6a9b049c361e559f0d84b304069209d5babb16873bc9b4ffa88eaba847056a8fd48e8f07b5f57586cfc5a61ca49f6907e47bfaa0d170f57e0ad1482d98913972395fc86622c6989f937fb7d2b51200a792e51eda72da1cf6887b0b28cafbf86b2160e2df09b397eee29a78b062dda5b9d70e8deb10d844cdd692ac4"}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18, 0x117, 0x3, 0x1}], 0x1320, 0x4811}], 0x2, 0x80) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000057c0), r14) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000005900)={&(0x7f0000005780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000058c0)={&(0x7f0000005800)={0x90, r15, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x3, 0x2, 0x0, {0xfffffffffffffffd, 0x1, 0x0, 0x77, 0x0, 0x0, 0x0, 0x2}, 0x6, 0x3}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1, 0x0, 0x7, 0x0, {0x8000, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x1, 0xff, 0x8f}}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x2, 0x6, 0x0, {0x1, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x300, 0xfffffff9, 0x90}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000081}, 0x8000) 268.352442ms ago: executing program 4 (id=866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x3c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x21}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc8}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e26, 0x80000, @loopback, 0xffffbffd}, 0x1c, 0x0, 0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='$'], 0x28}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x3c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x21}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc8}}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e26, 0x80000, @loopback, 0xffffbffd}, 0x1c, 0x0, 0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='$'], 0x28}, 0x0) (async) 210.342092ms ago: executing program 1 (id=867): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x400, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0x8}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x1, 0x400, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004071}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 209.968257ms ago: executing program 1 (id=868): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) timer_create(0x1, &(0x7f0000000800)={0x0, 0x14, 0x4}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x1, &(0x7f00000005c0)={{0x0, 0x3938700}}, 0x0) r1 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r3, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) shutdown(r3, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000280)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) (async) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000280)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, 0x9, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) (async) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, 0x9, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) timer_settime(r2, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) (async) timer_settime(r2, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r5 = gettid() tkill(r5, 0x12) r6 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="250000002d000b02d25a886f8c6394185900000000", 0x15}, {&(0x7f0000000500)="4622ff2fdbb4e95ec81f6937c4ed7281e0ae1479073379ae9aae402aae15db044243f74fdac2dbf9bcf228486e7a15d06bfabcceaa318eb96b8c77fd91f01ad89765bcc4dbd7", 0x46}], 0x2}, 0x40040) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x80002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r7, &(0x7f0000001380)=ANY=[@ANYRESOCT=r2, @ANYBLOB="7744137e5e9978e40bc6ee77efb5a1d3a57e319a1bbbc0ef8590baf80a4315a5418ab4b09d308f7d252a3064697521a418f12b3a05803e10a7af89a5ef81a5e63c5e39d6a2b269da33a882d859d09d116be5ac1bab978b9138561811fb2634ba98ba2427ecf5bfd9e843eae5db12be153293b4da06fb8f1b189c82aa79a4d5c0a3f1619db1276d0c2dbc34acd99915ed62b33cc6543e145fcebeea0b42852416708231cb223a7d0da5f21476ed64338f3bbe10522a705f778908b174f3f8a0354c7887c602a7783701eef970bc52070617d21eebc146b2bea134e0bdcd034544d15c99c2a5475a775409da1c7198bc08f4e53646fcd71179202ef7eab117fdf2ac5f9e4386aa4a4b1dbb31b86190dd9d1fcef138abaef9bdcd72cc6baf38a45aaf8bbf9eaa51708034a3ac498bfd5e7a937a52c727d94334415ea02a9cf025445bf3b1b37131b363643f041b6d3d49bd7565ecf673b44467c10f433409887f425364e10bb18ebeed4810fc9b38eef3678d40d246e6c83bd6a10893de6d580bfe77c189724a957f7ca6b858fac1a0acdb03fcadcd3a10bf838d1ad1dc4e319587de5a9731d50971bbd32f7d8496dfb6505a51f71cbce933d9967aaf3bccbd46fe042ac2fa793906150b160c76798b57277b939b86f5dd5b6196ca0d63a881407a88f8803264c9792c6d3be321e87c19204913a09012800a367111fc0365e012d1d85fdff315a708a0328bba6ee8420817ca43c55a076182d78fde084c56a5f5fca341603bfc021395d08d5d4177cfefa1182d7f33bbb5f86917bae26038d3a03eee721098ceb3ee0b345cfd8779fb6d3ad9f86595a419560389f10e79b26ac7c10289e44b8feb984f2eaf8633eaab5b25c085fffcc7717d437d030906df4d9435f141f16f7776466001d16dfc548efc24efa3fc8ef389a5272c305e487c6686e9393dd34f7fa4ebf22b0ff22bacec42016d8a7643c9609aaa12eb4179aaca9a4f0a7e78e3127bc21b1d805f8b4e8bd27991b905c9f609551eb28dc1861a4e4bfb18dd314cae63ea881eca76e6fcbd6ea22dc4bed471792848eb574726a70d9289a37adec3cb8f8daf298588e967996f4e8fe8b20a63751e92a9e4ffae6788785490510ac7017f9983c5894fc49f5eac0dcec22c2281afc0b4cab04b2a44bc14c0feb1f0247b162d4d73f1d754f9f4db942324b80d70e02d0e392b46af9f77ed199a773bec3fef6574bfbaaa6f0a8f08e790f3c18ff989a865c2fa1b356b8e050ab07f24a94d38f2b2e72a4c95033dc828af44091848baaa87bea1fc0aec79d35818a1566dbfa7ec0966304bcb86c523fc4f26344604c40cad026f44fcb32c2e96664f9527d1874de3bb0e877a679e31278fddc55fab4d526424b15fcde35a89493b1a2c4f5e7586fcd70b888227c72a4ff8c6ab6c5d6de677a3efa6c51892454cfdc5f594dee234fc7868dbdd065e5decda9a979aacfe69242ad8c154a6ae97747852e32c436a8b2aa9b65a7939bfb0f3e82bd800a55de12f4dd2ecf846dfd834054ff491ebfbdb2ef0add233a65ddd5dd49e4202a4854d9e5e6ff53d340cc5b4f40318cdb478815f99f49a2ef2a78eb85d5fd1434dc2c6f452c7060015008cab28f12ebe920d1e78f31f3c92045b2f1e382fb3e05e46a2096dca8a8468a47cb69ac0dcd8cc36c6dee4bc29760559b3ac507e36fb8716ab75fb75aafe354e8625853371c3329c143a5d88a22ea80e51ef1c654b5d994fcacae6c41467c7fbd42369814c3dd5f2ae533691adb35bdf7e79ec37a91fd8039cb22c355404e9adb1638dcb152b1049601187951a53b15a94b3d67408bef4788d47e8b9e186a7a0ad686b537da9166f1a86a48a630fe07927292e7d1bd93599893eb86a3d75c885bac9d0197886638fe5fff9c4b9e9b5b48206f8c424660a1444c68538d4794039e780d7b2610d9231357624e6585cd7a45a559ca70d7c43d20b2b4399a201b76afc1f096726d3c2e7468b7ea28ca55fc20d5b6e5513b06d53c2e8293e4a804e191b2ed028542ef78c9315fb451e847944399fdb52ce4db8f94500092b6cc8edf3734e248c6a76eaed8a6a2fa5e4b48d3d35171947c36b4cda02d63578be0ebdad19026f400e99968b02b1f4335918a590248467729a94f880796df4329c9a2d2f38971a42a569c6c40c03e37800dbc90ca90089c11219ef1cf66281cc92ce7fe0f1fa026c9cda45415b485670334925d8c73d4531b329f768d33e37045747696ac262445acd7a4fbc95604940ed643df2d5b38f7c85d5f4490788efa089d17cfb0080cbee5802483f11bc2f6115dad79d25c21b6f4d0e0cfb565f4fe53bff0a6f18d2a880d351e6cefdb4e19e12dcc1685ee54ae167cc30a316935e6b9ad38537f613aa62e7ffab4881b396fb71f1de2b76f0cc122bf8b4442af284f08352903ff82da3f32082c53a59dff4a45a5e707cabd1adf5d0b838b1e2dd3236a6fab419e95e08480555796b53f6f6720ac369edcc513223216ddf38956f7b7fb8c2bc2146be45444a66cbbe5e5d2a1da8a1f4e1dc8915513e2c7f713a08788d76362950322f34fb8444b6035753eb23fa3adcd1d00d604ec93629100c420c6ad7fb45fafc31be916f881ba5bb09d0e5b7b327e8e3af9aed7aa57dec6ec2959e44d612ee56627fa5a7961e545b8f1e0af33b2c10afd6f5d4ad4d7bd587f97511e8bd7a850591169818637d2682faeab3f51b7832994750c45909ea6f0cb51f1f13da627c312ffec268cb5b16a2105817545087083defd8cfc8f214ef0f06eb6a74b12ac6ac4ea22e1fbd2aeabb4ed8dd4d5af6ea9595d5b06f6355d1659d7997a611c86d9bb538d4c9929f7e3c607fbfdb05bcc27457b31bf873a93c537c3440f259dc851b9c7a865118f9734d90b599033106f5c121111391036011be688896e69695672f00157fc7281a0adc69ad5d4203745f684c76f767d11fb9da8dcba931b8e8f5d3404e6ee860c12bc2017566837c8b697e63a4592667089513b03c6c80e5e25f7ffef23f56416a8af0523a96790ee3bcefe02391bf96b315b7dc5bb1d8731b1d0bb24391aef38fd71edd69a95a0e9642c24bc3c9c210cb5165bafe41fa5e863a95dda11d3ea9c580cf56f50c8451cd372fc0ab84985c14629f92b1e1e9d14c888809de31d1113125ac3e6801454c4f5089c7bdf03d2bb9804a0a3414dc58c90fbd3d15a80255325285473b8c7467792752e696a0a0f936b5129bcb1992613cb3d51fba9a1ba4bc2aefea77a631d1855275e8aea67f065d2465d28038ec9470ff2364153295573db9f0b30ce3f456124038ddf6e63700d9fce70ea05457f61d5ebd70947c4de03c72afd0ffd66d9aa5b44606636fdcc898579b3e802d283f9ed228c3a8eebff22667f33dcde50e74c6bfe89550306cd6b3a49368e0b1cda35f16eb23dba8d6759a0a68a2ff55ecb444ec2b6b010dc7d8049b192b4840a5a008927481dc3251deb6875b36a0b6f421476aea30cb1cc3bc95344265f53ae3963f2399ae65521ab7b06ff1be9ca51c15e1fb5e7ddd8b7e4de7b91f224f50bebfd155e19f60d653ba523b7b34bd2930548a62560e016fb2edc43e07a5664f67d6e3aa5650a8fe6bfc0fd9c66ab3206a1a697aa2adee838d3094cb30db55ec575b9831a01717cd63a9f018733eafce92e37f0594f8158496eb28a3576a4ab3f4bdc4aef571b1bf78d77f165c67ce7b5914b992b6718c8df0f61c90efe311f230491fc050c18cb587d53be6e750d8845e2f355ff33ad639f22003e5cf7cd3b47ba3dcf5bffe15175886e08f0e40c622b54202c762621b4279f62f7498344b310dd4aa182c79dae96d8904c69d8e91cbbd310987f618da039a5a74c93797a2209bd780c669dc6f225d2d4785867dfb6e48c6532e03bc4024e9cdcc674c4c6f74183833edaea20f8c7f0d24059688cbaa5e550294a0a46823e61f0cb8f67a75b788b68f2040f82c4019776d9495fdb1eaa0340d126b01d5415a805fae6b774c9cf1b6a2f28380dec095be55400a99dd9a38a7ab21f95e0854f91d2a3a22a7528c265cf23d43aaa117dac83dadea92f6be1a6ee416948c1152b8af8d92b2288161dd96c78eb1710ca732ac200c7b668942c4b59c95a8ff670cbbe4faa1b86889c418cf2e59c4096c6c9030daf499dc5fc80b8ee415d2b6e44d183282c89eae951e19d2a0bf37f7df6823b668de45970ab9ccb389f11e90e8b6b105e0a0041dbbba0b5b03324a9e069af5c0c16706057cb1946297685cb90cdbf811d2daee662ec911a8dd3f52df65169a83d835094ca25b295c255e59afafd66583a93d30dec9714a67e776157cd7ba019ca667ee96306ad9cf2179500b14effdaeacb0f98a379581e058a7c1d053f0f90bf0506c071d69b2d3b20170610c5d0d7d7775625ae99c5a0afc8dc15a345b0f4c59a56ee0d182e1b1bf484b451a53049f07455251e25d95fd193a673d8b7d4ec88953fc6548eb7b46106a3c9ff599d7c77851e7d053e19e5ce73dadc0cdcbb6abfd6ddf68361ba798d5c352d98d0257b9d3315ee48f5486cf3cda8684755d249849df2f6d2aee32d2645730c485d05f3f4758c2568a3b02ec73d9b2ab45708cedebc7f1dca21ae941bbf76c21d8f9baf9a690e4dab9f7557158566671d16562d9a1e11bb589e30b136f3fa26d22de0cc9f87069557db030d37452d833991c5f694947ccc2a987a254eede8ef08071147566defe91b6cc4259968a56c02e721d4434322df5f87f5bd40f5b6301f53dbec6723c9ddc7c35a1e6c060a37fee8b6b31820efd2e0448f15c9f9c32297d1b7b1b044f1fe498593971d2ff41788533cb72339c42043c8292a210843c3c7ee6fdad76f4cb48023aa21d3994eb1b608a582d0883ebc56b8c884a7ee19bb514c6e8e0e61f1531f45c7899d5196ef3f167cb9566bec455a3a9c26be5d06698d62e0cb12afb07b0ce0785f96016c83c6bb87c804bc3be4c984ef09e811cd819b70055868ea3307aa1bbea189a7f00d88e682995ed3f6d44a2c48639862a0d4abee997e4a23f8fb0d3a2b6abd3a73781d6459575a83d08740e4964b9c493e2c0ea4b213f0a4e65877cb4e2a686397c958b7532d5dd6ce37a424b2ed9c2f243639c2784ef1f23995bbe0a273913613bc8188fc097fb7c884037a592c745190f5256530e156fb3ecc7a04fafd9d3b41909e47fb72182f2e5504f71295aea220b556783e277222c27799abd62ea49d2548f2d77f1edfee3fce8b2b40d541ea9f6f7796d07d0a26bddd461c59684d7403bcf10231341865500e6b4d50d37e2215e8847f506d3dab90fa6b238a7dba54c0df11624f695042660509c494e96649db5bdd5437ff5d23393122e37abd8db2edca5e56dac52f46d0b66964853c0dced588edbe521fcc64c23fc982993c2140daf82a7e281e0c4d2adba9f06741a02036bbd513684ddcd6a9492af1136d792773e273176380d07fb2b07a266f59d9ef25a548e466fd866c2479d7298bc8630296314c8fe0025d03bd8223fc91e9778b5cf5da72559b90765d206f1677807191d4da86eb5bd585c3b76964e43a39eb761a5997bf8f51e0080849c1c91cbbfe441e339c884c817aa4f2220f9f6917145add349cceb3e64299cbf791d539bceb4c129e583e49f8adea09ae11d52213521096ab8eb8b3f1791a6399840ee46df372399e4bb12683a6f1cbe4b2944dbb860e2898cd813d26d8ad06f628a3e66882a4fb816472d718778bdf8fe9eb7812ab976e3f16ccd4e9272099f00c30ee229d94ae149", @ANYRES64=r0, @ANYRES32=r6], 0xd396) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x3}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x4004080) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x3}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x4004080) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) (async) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) 209.706211ms ago: executing program 4 (id=869): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket(0x10, 0x3, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40345410, &(0x7f00000004c0)={{0x3}}) close(0x3) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x19, 0x1c, 0x401, 0x1000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x20, 0x8ccdef3e8cce1dee}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x4) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'ip_vti0\x00', r2, 0x20, 0x49, 0x14, 0x7, {{0x15, 0x4, 0x2, 0x3d, 0x54, 0x64, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010102, @multicast1, {[@noop, @timestamp_prespec={0x44, 0x14, 0x9c, 0x3, 0x3, [{@rand_addr=0x64010100, 0x8001}, {@broadcast, 0x3}]}, @ra={0x94, 0x4}, @rr={0x7, 0x27, 0x11, [@private=0xa010101, @rand_addr=0x64010101, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2f}, @broadcast, @dev={0xac, 0x14, 0x14, 0x1b}, @loopback, @remote, @multicast1]}]}}}}}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r9, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)={0x868, r7, 0x20, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0x80, 0x7f, 0xb}, {0x4, 0x8, 0x1f, 0x400}, {0x7fff, 0x4, 0x7, 0x7f}, {0x8, 0x3, 0x5, 0xa}, {0x7, 0x5, 0x99, 0x400}]}}}]}}, {{0x8, 0x1, r11}, {0x200, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x577d}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x18, 0x8, 0x17, 0x5}, {0x8, 0x2, 0xc, 0x9}, {0x40, 0x5, 0xbf, 0x7}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5baf2886}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x250, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff80}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x3, 0x2, 0x85, 0x6}, {0x80, 0x0, 0xc0, 0x7ff}, {0xcbc, 0x40, 0x4}, {0x7fff, 0x7, 0x9, 0x5}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}]}}, {{0x8, 0x1, r12}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}]}, 0x868}, 0x1, 0x0, 0x0, 0x80}, 0x20048050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r15, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 209.308219ms ago: executing program 6 (id=870): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 'id0\x00'}) read$msr(r0, &(0x7f0000000080), 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004840}, 0x8010) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @broadcast, @remote}, &(0x7f0000000240)=0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000280)) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000002c0)=0x80000000, 0x4) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000300)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000340)=0x28) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x4}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000400)=@sack_info={r2, 0x6, 0xff}, &(0x7f0000000440)=0xc) sendto$l2tp6(r0, &(0x7f0000000480)="3079888065eb488c09fcd0fcf22a98761849aa0f0f53f262072b3aa3fc92bfe889a9167183733ae999a1192242dd8d7459db4b4b1f95b8ef4293074a4a1acb1ce88625e5e04f5a5c3fa4a5f6bc7edecaeba485abecc475b99304e59b59946ba28b6fb05ca5c714c597d647ab025c3b648fe79acbff756ea81d3921da2e1e21a2e985f561b09ed7928a6339cf7cbe3a1a2d9336297aec866c05c7ec8a22db9ee606daf17f283137a109f445", 0xab, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001180)={&(0x7f0000000540)=@pppoe={0x18, 0x0, {0x4, @empty, 'pimreg1\x00'}}, 0x80, &(0x7f0000000d80)=[{&(0x7f00000005c0)}, {&(0x7f0000000600)="e543e393eb61f98942ca6b6b15867b685f290f121b7896bcc502e2c05998794a388a1a809bb655d7fa00424fff6a07beef94912b532e8f3755ca39de85e034edc70003729cfa3b574cf7840876a8c9bf9d949bc5ca1658cd74360d73a2cf1a3b0ced341b78a13064a30c439bb506820944dfb0ab808f4e1714521039e4af5561a7f55534122e7990790413cb0b2f695b02a607b7a73b8385b43f66aae4bdf50758b01ed0787640d5c436f718ae31befa4e544bf8d1e11cd27f664f83aff56ba32436b4849cb88abdcd0761f5228f4cacbbf7c8258b0d2b1af945937f", 0xdc}, {&(0x7f0000000700)="68c55b3f589209e5d402a923356ace64872a2344cc13850de5f073e94dcf6dd768b8fb689b222cc9a22744f0bb13bebe5323f6efd5975b3ea623b3b3de543bf915a25ffe7d0c2e40fbe043bcf9f9d8631b16cadbfe7181a6da2ad663efdc0a05fe92c8970817a1f3236cb648840e50a8296fcc7a2bdbb3c5b593d5d0652da911ad9eada115bd153c2d1521982fe6056352162b8a3e5d2e781862ee13b86bb276a8ad20a77e843bedd60bad99a2809ad6", 0xb0}, {&(0x7f00000007c0)="c600648cb7faf5654c9fd40700664e2c3e7ecff0e692940732c8b110f89903ea6f0659218cb2583871e0b24f4ae03c2be1c052ad2c67f1141f3fc542fcb5ee3e02d06d22de709e1c62be35c735426839d593102f92d707bdba4d129a244cc159c7e1e301ba4179c9bde8cc41150f8a865ea95bfa20d9e465e1926b088fb196d61d0b84a7212a53", 0x87}, {&(0x7f0000000880)="4677f78dd0e13009032a926720103a1fe31b2884377dfee583e620c023117a5e03ee1d2cd60f70c1decb25bed3980fde962321cb05fd885ec9f78c615de5951363092d8e6c5360668dd43d087ffe40e5eca91270d6aec0bd8e54d20130f8e1f1c7604f9bdc31ab25f5b3057319a43d13237271653c3f4bfbad147242a1458c1f82b4", 0x82}, {&(0x7f0000000940)="6efa62fb9fe303f17a6dc3489ec69efbeaf1089527be5ac8a17bd598cc4b05873705e8a789862fbe9cd427e635598fbfecd7614fa1c540b9014d03ee1ba4a4ab437314ffe7b25774b1e76eed9f2337e870f07dcf93b446176d689f0a08a17cfcdf29405724d77f7870e26b1a8a3b6463d57f308a", 0x74}, {&(0x7f00000009c0)="4034e99187d6acb3e84b5ab9c30f64ee32b4bb3f129223b2849906bb162f458badb48fd15e9483eddf76d690ee68ba22694746e42c6775484f1adb8447ebb11532bde5de4c6e8bd9c76e98aa8a929ab4a54ea1a8d2225d50845b29f7c1cb7a61bc32dd9520e5bfb4d0d42bccebcf4fb245ecf2dbca2b7b6565b72f1ca79b8d30497c941a1e2971032dd448639da137dff9e9ca9a702adef76aee9ad516c154", 0x9f}, {&(0x7f0000000a80)="df9b6c5a4b654b9dffaf1dd155d47b60d062dbfb1e62301176631620a2e81ed1553fd95dde07af676b5b9c3c78d0ee53a4ce9ec58e0f2b7144d7a0b6e1a8bdc050bc75ee05716426efc06db526494e49361aaf03a2a5676ce68362e4d630b7ea5194bb656a78904595d1ddb6debdb45f73aed4838c9af2ea1bc8dca27f020b9572f00648d58cec5a2c17eba9064c496801a26b82e04546a658b992a9aa34ec262f1325427700cfadc4377f67c4957b144f50e7db2022afe4791d52acbded7ac2d0", 0xc1}, {&(0x7f0000000b80)="af2d32b5652c2153339b71f752c0b04969f632cfb9aeb30b9072c3bf4af5c9e8575175d6790de8cc5a61c8595a2a3e3ff47601b632115b290295c48efd2ea39db84b4acb5527aa54c9d47519a6cc457ecb22130c5a8e03efd385cc5d5298c22a97fb93db376b161b94bb8d5ce579b24bc31b46fb6219700f7f19167a7326832663027e26d43f7684b9d3222a84985a3c8c015b562f84e72c0fefeaca1fcfe7fa0829dc6d548e0ce81494cc8c1138ca14f42a6567a6e572a2f798bf026361c9792737de65fe1baf8ef9", 0xc9}, {&(0x7f0000000c80)="03608f2a80bdfdddd7fbab9ff01dbab1070caa0dfedd2470e7b0dd6a2822a5ce924a9e61a6dbd54ede4eaf4c0704c964a5d727948e086d0a9d3d2cb69af0a13501e37a437c33c638707c5b66dee04f00c8b0553336496d085fa8166e2ef9b90aa4775d3f30a76c515ac0f899e28c1eae37a699ca18bbe49a61bda4f5dea8e36637cf5000ee3da773c216f324b5860652aec7b204339bf63ed8455e52a21871bf381dc43e90fdb3c2f8df07a44bde37217603a2234ff1ef8e5effbaa7ee7802e015e351611dcef118fceb01cbfa929402c6f0f3a5a1d89e5b054d553c008b50bb2cfaca065d383b53d16baeaed0336622cbeb", 0xf2}], 0xa, &(0x7f0000000e40)=[{0xe0, 0x10a, 0x19, "0127588953a9223c9fd19037b6b404af794e959be4e4ec9d45b0d1e83e67f0ccb70f4db266490bf34994b39ae00df6634daf08da36206b1fbb058d0abc643c137a5ab32f81f289d279dfabb9a6861426082c4fcf698ef3505c2562b3274851a2333236787cf0c6c1f252c1a21a20e91ecabad53fff553089d928bd2f5da06efe1e82b9ecc79f5eb7b36962e3586bb44d5798ff2e20f20ca0e46a26c0267d59135e101cfa656bb0ed8b51eec565d8bcb502051c8f06d32ccfe1ab61051437924cb542969a50a721a0b929bd3db306ff0e"}, {0xe0, 0xb71b7f8137d9682f, 0x3, "9f70ac3bce0b6fbec8b5e4f8ea093c29c1cde8a254ef256201f01473bee787436a5e8f4b9b7e3658c3629ff3ea3353a10489615e8a54288a5b087a7e62b3238b6359e1389d0ab5da96f73a14708471c0c0d30887bfb3b118768fd39e99ff31a948676c1e2e2d62a3333f9ec750925efd26cabec89eddf382eb0de7f1a48208d99f6d998a74b632ac0dcd4665effbfb157f6dd9505d4d4031139dedd7769f5c7be347e9b233bc2c61b0154d337f382530c1f8c2464526b311c25ad23d9be36a0452858e6c98c89b1533f5"}, {0x78, 0x11, 0x8, "686dca5903fa80e77f707d33124135c4fc572dedc87b8dee24c26f39e67f5a527fea09df44af076621193ecf5fb96f4753db5c5d33cbf451a6c25a03800fa259bff4bc3e485cde42338c20c0192db65fb4b20d52c68cd321a280064f3da28549b3f0fef3a5"}, {0x58, 0x1, 0x5, "594d217669637f1e1df85ba82990b057b235534061c6c1714b118e35828ab90e50b2e2a40a48ae02dcae89380ac3d67e47c510610b727dd1e4112d8fcac5367dd6952f2490"}, {0x60, 0x112, 0x3, "ce90f1b9e3aba0cde454e75ea5076d9af3975da9e0200b52f65bf13d4cffe3c50697d1806def84c62fec2635d6c0a0dae292b4e4a4b77b8f23aad999b574c4176b7ec1e8a9bfae5eff7050"}, {0x40, 0x3a, 0x1, "bdacc49c9a08688e47eee88035192de1071685aaeb8f92c18dbba06b22f2dda1bc49a69260d1d56795675fe78f3a60"}], 0x330}, 0x10) read$FUSE(r0, &(0x7f00000011c0)={0x2020}, 0x2020) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003200), 0x2) recvfrom$packet(r0, &(0x7f0000003240)=""/145, 0x91, 0x43ac893cba6b9c20, &(0x7f0000003300)={0x11, 0x12, r1, 0x1, 0x1b, 0x6, @multicast}, 0x14) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000003340)='lazytime\x00', 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000033c0), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000003580)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003540)={&(0x7f0000003400)={0x12c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1d, 0x5}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x116}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xbf5}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000044}, 0x40) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x0, 0x200000e, 0x10, r0, 0x0) sendmsg$nl_route(r0, &(0x7f0000003680)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003640)={&(0x7f0000003600)=@dellinkprop={0x34, 0x6d, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0x804d, 0x180}, [@IFLA_IFNAME={0x14}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000036c0)={0x0, 0x1, 0x1}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000003700)={'macsec0\x00', {0x2, 0x4e23, @private=0xa010100}}) ioctl$KVM_CAP_HYPERV_SEND_IPI(r0, 0x4068aea3, &(0x7f0000003740)) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f00000037c0)={0x9, 0x5}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000003840), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000003940)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003900)={&(0x7f0000003880)={0x54, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040800}, 0x20000040) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000039c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000003ac0)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003a80)={&(0x7f0000003a00)={0x48, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x2, 0x3ff, 0x8]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x44) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003b40), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003d00)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003bc0)={0xec, r6, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x9f, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0xff}, @device_b, @device_b, @from_mac=@broadcast, {0x3, 0xf3}, @value=@ver_80211n={0x0, 0x4dab, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0x3010, 0x7, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x2, [{0x30, 0x1}, {0xc}]}, @void, [{0xdd, 0x65, "10d675ebbe09d6b4ff7267d01ca4a34ca86b11ca727b1d8d3e79f301dbec291261cd045801d5af9ac5435d07a4ab01581810618eae11d7fd6047cc52459f6aa3a7bf085df439ecf4233ad7167c5797f0b5c62fcc64f40fcd431f08c4ad40119f5c51a2f7a9"}, {0xdd, 0x6, "e84b64f2c8be"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x1, 0x6]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x204c000) 149.654049ms ago: executing program 1 (id=871): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0xfffd, 0x4, 0x9, 0x8001, 0x6, 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r6, 0x0, 0x80, 0x8) splice(r5, 0x0, r4, 0x0, 0x100000004, 0x0) write(r3, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0xffffffffffffff97, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000e14000000140a0102000000000000000002000005140000001100010000000000000000000700000a"], 0x3c}, 0x1, 0x0, 0x0, 0x898}, 0x0) ioctl$SG_BLKTRACETEARDOWN(r9, 0x1276, 0x0) prlimit64(r0, 0x3, &(0x7f0000000140)={0x7, 0x10002}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161042, 0x91) pwrite64(r13, &(0x7f0000000140)='2', 0xfdef, 0xe7c) write$P9_RVERSION(r12, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r14 = dup(r12) write$FUSE_BMAP(r14, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r14, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r14, &(0x7f0000000140)=ANY=[], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r14, @ANYBLOB=',posixacl']) 148.762698ms ago: executing program 6 (id=872): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r1, 0x12, 0x1, 0x400000, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r2, 0x204, 0x0) ptrace$setregs(0xf, r2, 0x1a99, &(0x7f0000000240)="a16f3cd45103ee196d7203966a7105381c1970ca0770bfb1f96179f5a39785504e92697535bc00c5205a829ced48b91ee26cbd525f79201a4bdc80aa12bd35a70d23cae9f321bb312e9e764b4981d8ef43bbdb316b6ff9d72fa8aa0d2f0dacffeefd82d6d1347768c5c609fc03538fac47e15d80cf9da0357aa522138903a268329a") r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000010000d0400"/18, @ANYRES32, @ANYBLOB="01000000000002004c0012"], 0x6c}}, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f", 0x1f) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) 148.319908ms ago: executing program 4 (id=873): arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003) (async) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0a85322, &(0x7f0000000100)={{0x0, 0xfa}}) (async) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0a85322, &(0x7f0000000100)={{0x0, 0xfa}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xe) r3 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r4, 0x2, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1fd, r3, 0x0, 0x0, 0x4, 0x0, 0x1, r3}]) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) (async) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) (async) bind$alg(r5, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) tkill(0x0, 0x7) (async) tkill(0x0, 0x7) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r8, 0x8, 0x10000000, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x2, 0x800, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008080}, 0x9004) mq_open(&(0x7f0000000040)='&]\xfb\x00', 0x800, 0x5, &(0x7f0000000080)={0x5, 0x2, 0x88ba, 0x9}) (async) mq_open(&(0x7f0000000040)='&]\xfb\x00', 0x800, 0x5, &(0x7f0000000080)={0x5, 0x2, 0x88ba, 0x9}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r9) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r9) sendmsg$IEEE802154_LLSEC_ADD_KEY(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRESOCT=r1], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) r11 = io_uring_setup(0x362d, &(0x7f00000002c0)={0x0, 0x166f, 0x80, 0x2, 0x161}) r12 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r12, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5a, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) (async) sendmsg$inet(r12, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5a, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r12, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="c6", 0x1}], 0x1}, 0x4000080) close_range(r11, 0xffffffffffffffff, 0x0) 148.200667ms ago: executing program 6 (id=874): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x7fffffff, 0x3, 0x2}) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r0, 0x4068aea3, &(0x7f0000000040)) (async) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r0, 0x4068aea3, &(0x7f0000000040)) 89.38978ms ago: executing program 6 (id=875): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', r3, 0x2f, 0x2, 0x3, 0x8, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x700, 0x2, 0x7b}}) ioctl$sock_netdev_private(r1, 0x8948, &(0x7f0000000000)="a69544b6ae6e3a") 574.84µs ago: executing program 6 (id=876): userfaultfd(0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 0s ago: executing program 6 (id=877): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x24, 0xb3b}, 0x0, 0x0, 0x8c1, 0x101, 0x7fffffff, 0x9, 0x4bf, 0x6, 0x7, 0x1, r5, 0xffffffffffffffff}) r8 = msgget$private(0x0, 0x10) msgctl$IPC_STAT(r8, 0x2, &(0x7f00000002c0)=""/242) r9 = getuid() prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)={0x0, 0x40}) brk(0x689d80000000) syz_clone(0x6a02f080, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0) msgctl$IPC_SET(r8, 0x1, &(0x7f0000001580)={{0x1, r6, r4, r9, r7, 0x80, 0xe00}, 0x0, 0x0, 0xfffffffffffffff9, 0x8, 0xa, 0x1, 0x4, 0x6, 0x9, 0x9, r5, r2}) r10 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000001680)) ioctl$SIOCAX25GETUID(r10, 0x89e0, &(0x7f00000016c0)={0x3, @null, r3}) mount_setattr(0xffffffffffffffff, &(0x7f0000001f80)='./file0\x00', 0x1800, &(0x7f0000002000)={0x8, 0x100000, 0x20000}, 0x20) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_80211_inject_frame(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000207da60e65d5a8536c9fba7"], 0x10) syz_kvm_setup_cpu$x86(r1, r11, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="0f20e06635400000000f22e00f237e3e660f124bfab853058ec80f01ca0f20d86635080000000f22d80f01cad838ddeff20f58f3", 0xfffffffffffffe3c}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): n available UDC or it's busy [ 46.803245][ T6064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.810043][ T6064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.812813][ T6064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.821543][ T6053] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 46.824411][ T6053] usb 6-1: can't read configurations, error -71 [ 47.348914][ T6113] kAFS: unparsable volume name [ 48.115492][ T6128] fuse: blksize only supported for fuseblk [ 48.198018][ T6130] cdrom: dropping to single frame dma [ 48.424479][ T6143] program syz.0.30 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.441249][ T6146] program syz.3.31 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.490889][ T6154] vivid-000: ================= START STATUS ================= [ 48.493320][ T6154] vivid-000: Radio HW Seek Mode: Bounded [ 48.495165][ T6154] vivid-000: Radio Programmable HW Seek: false [ 48.497910][ T6154] vivid-000: RDS Rx I/O Mode: Block I/O [ 48.499685][ T6154] vivid-000: Generate RBDS Instead of RDS: false [ 48.501686][ T6154] vivid-000: RDS Reception: true [ 48.503289][ T6154] vivid-000: RDS Program Type: 0 inactive [ 48.505113][ T6154] vivid-000: RDS PS Name: inactive [ 48.507539][ T6154] vivid-000: RDS Radio Text: inactive [ 48.509288][ T6154] vivid-000: RDS Traffic Announcement: false inactive [ 48.511417][ T6154] vivid-000: RDS Traffic Program: false inactive [ 48.514263][ T6161] netlink: 'syz.3.36': attribute type 2 has an invalid length. [ 48.516723][ T6161] netlink: 'syz.3.36': attribute type 2 has an invalid length. [ 48.517209][ T6154] vivid-000: RDS Music: false inactive [ 48.519504][ T6161] netlink: 'syz.3.36': attribute type 2 has an invalid length. [ 48.521281][ T6154] vivid-000: ================== END STATUS ================== [ 48.523701][ T6161] netlink: 'syz.3.36': attribute type 2 has an invalid length. [ 48.529021][ T6161] netlink: 'syz.3.36': attribute type 1 has an invalid length. [ 48.531578][ T6161] netlink: 'syz.3.36': attribute type 1 has an invalid length. [ 48.554633][ T6165] binder: 6162:6165 ioctl 80045430 7fa2b95edf9c returned -22 [ 48.557404][ T6165] binder: 6162:6165 ioctl c0306201 200000000640 returned -22 [ 48.557463][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'. [ 48.566189][ T6169] bridge0: entered promiscuous mode [ 48.569079][ T6165] binder: 6162:6165 ioctl 5457 2000000002c0 returned -22 [ 48.571868][ T6169] bridge0: port 3(macvlan2) entered blocking state [ 48.574153][ T6165] binder: 6162:6165 ioctl 8208ae63 200000000680 returned -22 [ 48.576202][ T6169] bridge0: port 3(macvlan2) entered disabled state [ 48.579659][ T6169] macvlan2: entered allmulticast mode [ 48.581675][ T6169] bridge0: entered allmulticast mode [ 48.587953][ T6169] macvlan2: left allmulticast mode [ 48.589887][ T6169] bridge0: left allmulticast mode [ 48.591846][ T6169] bridge0: left promiscuous mode [ 48.596530][ T6164] netlink: 16 bytes leftover after parsing attributes in process `syz.0.39'. [ 48.600372][ T6164] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.624022][ T6174] Zero length message leads to an empty skb [ 48.626336][ T6174] netlink: 14 bytes leftover after parsing attributes in process `syz.0.41'. [ 48.634943][ T6174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.640215][ T6174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.643709][ T6174] bond0 (unregistering): Released all slaves [ 48.646766][ T5975] Bluetooth: hci1: command tx timeout [ 48.656968][ T5975] Bluetooth: hci0: command tx timeout [ 48.657139][ T5982] Bluetooth: hci3: command tx timeout [ 48.660532][ T5334] Bluetooth: hci2: command tx timeout [ 48.731117][ T6180] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.106753][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 49.256803][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 49.260631][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.260861][ T6185] syz.2.45: attempt to access beyond end of device [ 49.260861][ T6185] loop2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 49.265041][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.269124][ T6185] gfs2: error -5 reading superblock [ 49.275727][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 49.281250][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 49.284788][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.289378][ T9] usb 6-1: config 0 descriptor?? [ 49.290870][ T6188] netlink: 'syz.2.46': attribute type 1 has an invalid length. [ 49.562453][ T6180] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 49.643162][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 49.646003][ T6201] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 49.648625][ T6201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 49.679277][ T6207] netlink: 'syz.2.52': attribute type 1 has an invalid length. [ 49.686501][ T6207] team0: Port device bridge1 added [ 49.690414][ T40] kauditd_printk_skb: 47313 callbacks suppressed [ 49.690425][ T40] audit: type=1400 audit(1755758719.498:47394): avc: denied { unmount } for pid=5976 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 49.698927][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 49.705037][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:045E:07DA.0002/input/input6 [ 49.710860][ T40] audit: type=1400 audit(1755758719.518:47395): avc: denied { read } for pid=5368 comm="acpid" name="event4" dev="devtmpfs" ino=2841 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.711625][ T9] microsoft 0003:045E:07DA.0002: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 49.721165][ T40] audit: type=1400 audit(1755758719.518:47396): avc: denied { open } for pid=5368 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2841 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.738107][ T40] audit: type=1400 audit(1755758719.548:47397): avc: denied { connect } for pid=6215 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 49.744392][ T40] audit: type=1400 audit(1755758719.548:47398): avc: denied { write } for pid=6215 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 49.751819][ T40] audit: type=1400 audit(1755758719.548:47399): avc: denied { execute } for pid=6211 comm="syz.2.55" path="/6/cpu.stat" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.760330][ T40] audit: type=1400 audit(1755758719.548:47400): avc: denied { map } for pid=6211 comm="syz.2.55" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.768377][ T40] audit: type=1400 audit(1755758719.558:47401): avc: denied { read } for pid=6215 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 49.778371][ T40] audit: type=1400 audit(1755758719.578:47402): avc: denied { ioctl } for pid=5368 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2841 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.778733][ T6223] netlink: 'syz.2.57': attribute type 4 has an invalid length. [ 49.787514][ T40] audit: type=1400 audit(1755758719.578:47403): avc: denied { watch } for pid=6221 comm="syz.2.57" path="/7/file0" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 49.797997][ T6222] netlink: 'syz.2.57': attribute type 4 has an invalid length. [ 49.854204][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 49.857845][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 49.977477][ T6236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=6236 comm=syz.2.61 [ 50.000684][ T6022] usb 6-1: USB disconnect, device number 4 [ 50.015656][ T6238] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 50.153492][ T6245] syz.0.64 uses obsolete (PF_INET,SOCK_PACKET) [ 50.347742][ T6264] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 50.347931][ T6263] overlayfs: maximum fs stacking depth exceeded [ 50.397695][ T6259] block nbd3: shutting down sockets [ 50.458238][ T6281] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 50.488440][ T6287] SELinux: policydb version 203636566 does not match my version range 15-35 [ 50.491615][ T6287] SELinux: failed to load policy [ 50.582339][ T6306] JFS: discard option not supported on device [ 50.584505][ T6306] syz.1.85: attempt to access beyond end of device [ 50.584505][ T6306] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 50.588905][ T6306] syz.1.85: attempt to access beyond end of device [ 50.588905][ T6306] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 50.593873][ T6306] Mount JFS Failure: -5 [ 50.678945][ T6317] fuse: Unknown parameter 'group_éd' [ 50.727286][ T5334] Bluetooth: hci2: command tx timeout [ 50.727886][ T5982] Bluetooth: hci3: command tx timeout [ 50.737325][ T5982] Bluetooth: hci1: command tx timeout [ 50.856887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.883430][ T6342] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 50.906351][ T6348] ªªªªªª: renamed from wg2 (while UP) [ 51.006113][ T6354] i2c i2c-1: Invalid block write size 34 [ 51.330447][ T6364] ======================================================= [ 51.330447][ T6364] WARNING: The mand mount option has been deprecated and [ 51.330447][ T6364] and is ignored by this kernel. Remove the mand [ 51.330447][ T6364] option from the mount to silence this warning. [ 51.330447][ T6364] ======================================================= [ 51.345515][ T6364] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 51.518519][ T6376] SELinux: Context system_u:object_r:dbusd_exec_t:s0 is not valid (left unmapped). [ 51.592945][ T6385] __nla_validate_parse: 43 callbacks suppressed [ 51.592956][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 51.599590][ T6385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 51.655091][ T6394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.113'. [ 51.799114][ T1114] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 51.802282][ T1114] ata1: failed to read log page 10h (errno=-5) [ 51.806087][ T1114] ata1.00: exception Emask 0x1 SAct 0x10000 SErr 0x0 action 0x0 [ 51.810098][ T1114] ata1.00: irq_stat 0x40000000 [ 51.812650][ T1114] ata1.00: failed command: WRITE FPDMA QUEUED [ 51.815453][ T1114] ata1.00: cmd 61/18:80:ee:04:10/00:00:00:00:00/40 tag 16 ncq dma 12288 out [ 51.815453][ T1114] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 51.822612][ T1114] ata1.00: status: { DRDY } [ 51.825344][ T1114] ata1.00: configured for UDMA/100 [ 51.828361][ T1114] ata1: EH complete [ 51.876708][ T6346] comedi comedi2: reset error (fatal) [ 51.887990][ T6401] binder: 6399:6401 ioctl c0306201 200000000640 returned -22 [ 51.911735][ T6405] ptrace attach of "/syz-executor exec"[5969] was attempted by "/syz-executor exec"[6405] [ 52.105588][ T6423] befs: (nullb0): No write support. Marking filesystem read-only [ 52.109621][ T6423] befs: (nullb0): invalid magic header [ 52.289504][ T6432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 52.462430][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'. [ 52.466097][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.131'. [ 52.806823][ T5334] Bluetooth: hci2: command tx timeout [ 52.808648][ T5982] Bluetooth: hci1: command tx timeout [ 52.816847][ T5982] Bluetooth: hci3: command tx timeout [ 53.045178][ T6490] 9pnet_virtio: no channels available for device syz [ 53.066094][ T6493] CUSE: unknown device info "ý<±5æç—‘l‡k˜úUëyúX¨5ˆtZÀÜ£ Îö—h/ÿpSâw¢À”cò4³™ð}6½ [ 53.069516][ T6493] R÷)Í" [ 53.077817][ T6493] CUSE: unknown device info "eQïŒÌmÅ€%åãöP;Tý€ÁÎá38RÝ2ß«JgË龯$‚O‹³kžJÇ;fA™ v#Ü—Œ5¼¡i“R/Ab?`W4–¯ÍwÓFþ£odADxaÔ*³’" [ 53.081920][ T6493] CUSE: unknown device info "ÚádPü" [ 53.084008][ T6493] CUSE: unknown device info "O{Sˆn`Œ¦›À­W«A{ÉޱôF4Qš¤û>ë\áïð«ºzöŒ0z,~XY©+A}sÎ…F'%ÓËó:„Ij!ó@Q…åmß‘RÞúGQãò––q 6*³5p)ÙxÙ?," [ 53.089843][ T6493] CUSE: unknown device info "ÿŽ&b¬í%Z‰ñWú«)«×3\my­ åû" [ 53.092346][ T6493] CUSE: unknown device info "Ò­Sû‡¨‚¨«€ýmMÀiÊ_¿Ä0˱°Ý¯;qÈ]Â{ìi¹ë79ñ©{Ò0Ôµßt•º~ø±>V¤ûÞÂZÀ\.9êÁOC‡«®U™&†qÿ…±Ïmsfûkž½cêð±"" [ 53.096565][ T6493] CUSE: DEVNAME unspecified [ 54.017360][ T6525] fuse: Unknown parameter '0x00000000000000030x0000000000000003' [ 54.046134][ T6527] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.093097][ T6529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32789 sclass=netlink_route_socket pid=6529 comm=syz.3.157 [ 54.098945][ T6529] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio0-cursor) [ 54.103880][ T6527] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.103929][ T6529] tmpfs: Unknown parameter 'ç/€' [ 54.168160][ T6527] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.203817][ T6548] netlink: 20 bytes leftover after parsing attributes in process `syz.1.163'. [ 54.211532][ T6527] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.225801][ T6556] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 54.291444][ T72] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.294034][ T72] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.300727][ T61] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.306169][ T72] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.329702][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'. [ 54.362275][ T6569] validate_nla: 3 callbacks suppressed [ 54.362290][ T6569] netlink: 'syz.2.168': attribute type 1 has an invalid length. [ 54.367564][ T6569] netlink: 17 bytes leftover after parsing attributes in process `syz.2.168'. [ 55.224479][ T40] kauditd_printk_skb: 115 callbacks suppressed [ 55.224490][ T40] audit: type=1400 audit(1755758725.028:47519): avc: denied { override_creds } for pid=6583 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 55.243100][ T6587] netlink: 32 bytes leftover after parsing attributes in process `syz.1.174'. [ 55.531948][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'. [ 55.537868][ T1145] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.540672][ T1145] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.545174][ T1145] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.548405][ T1145] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.728416][ T40] audit: type=1400 audit(1755758725.538:47520): avc: denied { mounton } for pid=6609 comm="syz.1.181" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.874938][ T40] audit: type=1400 audit(1755758725.678:47521): avc: denied { write } for pid=6614 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.892507][ T40] audit: type=1400 audit(1755758725.698:47522): avc: denied { write } for pid=6619 comm="syz.2.184" path="socket:[14699]" dev="sockfs" ino=14699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 56.126770][ T6052] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 56.276808][ T6052] usb 7-1: Using ep0 maxpacket: 8 [ 56.280681][ T6052] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 56.283809][ T6052] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 56.287119][ T6052] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 56.290290][ T6052] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 56.295494][ T6052] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 56.299207][ T6052] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.490714][ T6624] program syz.3.185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.506601][ T6052] usb 7-1: GET_CAPABILITIES returned 0 [ 56.509307][ T6052] usbtmc 7-1:16.0: can't read capabilities [ 56.603290][ T40] audit: type=1400 audit(1755758726.408:47523): avc: denied { map } for pid=6634 comm="syz.3.188" path="socket:[14712]" dev="sockfs" ino=14712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.611408][ T40] audit: type=1400 audit(1755758726.408:47524): avc: denied { read } for pid=6634 comm="syz.3.188" path="socket:[14712]" dev="sockfs" ino=14712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.709665][ T40] audit: type=1400 audit(1755758726.518:47525): avc: denied { ioctl } for pid=6634 comm="syz.3.188" path="socket:[14713]" dev="sockfs" ino=14713 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 56.719682][ T1349] usb 7-1: USB disconnect, device number 2 [ 56.738135][ T40] audit: type=1400 audit(1755758726.548:47526): avc: denied { watch } for pid=6642 comm="syz.2.189" path="/41/file0" dev="tmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.750162][ T40] audit: type=1400 audit(1755758726.548:47527): avc: denied { watch_sb watch_reads } for pid=6642 comm="syz.2.189" path="/41/file0" dev="tmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.778574][ T6646] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6646 comm=syz.2.190 [ 56.782079][ T6648] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 56.784304][ T40] audit: type=1400 audit(1755758726.588:47528): avc: denied { audit_write } for pid=6645 comm="syz.2.190" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.922384][ T6662] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.928094][ T6662] __nla_validate_parse: 2 callbacks suppressed [ 56.928104][ T6662] netlink: 176 bytes leftover after parsing attributes in process `syz.2.194'. [ 56.933247][ T6662] netlink: 176 bytes leftover after parsing attributes in process `syz.2.194'. [ 57.686903][ T5982] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 57.687201][ T5334] Bluetooth: hci4: command 0x1003 tx timeout [ 57.692790][ T6610] mkiss: ax0: crc mode is auto. [ 57.780253][ T6677] netlink: 1176 bytes leftover after parsing attributes in process `syz.1.197'. [ 57.803586][ T6677] hsr_slave_1 (unregistering): left promiscuous mode [ 57.822062][ T6679] ref_ctr increment failed for inode: 0x10e offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88803341d600 [ 57.874010][ T6680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.198'. [ 57.882146][ T6684] overlayfs: failed to resolve './file0': -2 [ 57.898457][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.199'. [ 57.930119][ T6691] netlink: 28 bytes leftover after parsing attributes in process `syz.2.201'. [ 57.933971][ T6691] netlink: 28 bytes leftover after parsing attributes in process `syz.2.201'. [ 57.940271][ T6691] gretap0: entered promiscuous mode [ 57.943287][ T6691] gretap0: left promiscuous mode [ 58.116854][ T6707] ALSA: seq fatal error: cannot create timer (-22) [ 58.121111][ T6707] netlink: 700 bytes leftover after parsing attributes in process `syz.1.206'. [ 58.125759][ T6710] netlink: 'syz.2.207': attribute type 7 has an invalid length. [ 58.183235][ T6710] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 58.416838][ T840] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 58.578035][ T840] usb 6-1: config 0 has no interfaces? [ 58.580622][ T840] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.583439][ T840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.587365][ T840] usb 6-1: config 0 descriptor?? [ 58.794710][ T1349] usb 6-1: USB disconnect, device number 5 [ 58.802548][ T6729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'. [ 58.809957][ T6729] 8021q: adding VLAN 0 to HW filter on device bond2 [ 58.812890][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'. [ 58.815896][ T6729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18433 sclass=netlink_route_socket pid=6729 comm=syz.2.213 [ 58.815924][ T6730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18433 sclass=netlink_route_socket pid=6730 comm=syz.2.213 [ 59.138290][ T6744] tipc: Started in network mode [ 59.139938][ T6744] tipc: Node identity 7f000001, cluster identity 4711 [ 59.142361][ T6744] tipc: Enabled bearer , priority 10 [ 59.144964][ T6744] binder: 6743:6744 ioctl c0306201 0 returned -14 [ 59.147404][ T6744] binder: 6743:6744 ioctl c0306201 2000000000c0 returned -11 [ 59.147826][ T6745] binder: 6743:6745 ioctl c0306201 0 returned -14 [ 59.303357][ T6751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=6751 comm=syz.2.219 [ 59.409499][ T6762] program syz.2.223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.416943][ T840] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 59.439300][ T6764] xfrm1: entered promiscuous mode [ 59.441026][ T6764] xfrm1: entered allmulticast mode [ 59.566954][ T840] usb 8-1: Using ep0 maxpacket: 8 [ 59.569884][ T840] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 59.572421][ T840] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 59.575468][ T840] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 59.578861][ T840] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 59.582049][ T840] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.586323][ T840] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 59.589338][ T840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.638804][ T6767] comedi comedi2: dt2817: I/O port conflict (0x9,5) [ 59.711970][ T6776] tmpfs: Bad value for 'mpol' [ 59.783558][ T6783] bond0: entered allmulticast mode [ 59.785289][ T6783] bond_slave_0: entered allmulticast mode [ 59.787470][ T6783] bond_slave_1: entered allmulticast mode [ 60.146766][ T840] tipc: Node number set to 2130706433 [ 60.147867][ T6784] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 60.160300][ T1349] usb 8-1: USB disconnect, device number 2 [ 60.218522][ T6804] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 60.441827][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 60.441838][ T40] audit: type=1400 audit(1755758730.248:47555): avc: denied { unmount } for pid=5971 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.459486][ T40] audit: type=1400 audit(1755758730.268:47556): avc: denied { create } for pid=6808 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 60.481198][ T6809] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 60.514438][ T40] audit: type=1400 audit(1755758730.318:47557): avc: denied { listen } for pid=6808 comm="syz.2.239" path=2F37322FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 60.909473][ T40] audit: type=1400 audit(1755758730.718:47558): avc: denied { getopt } for pid=6816 comm="syz.2.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 60.940149][ T40] audit: type=1400 audit(1755758730.748:47559): avc: denied { setopt } for pid=6819 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 61.021705][ T6823] CIFS: iocharset name too long [ 61.042883][ T40] audit: type=1400 audit(1755758730.848:47560): avc: denied { shutdown } for pid=6827 comm="syz.3.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.049776][ T40] audit: type=1400 audit(1755758730.848:47561): avc: denied { write } for pid=6827 comm="syz.3.244" lport=36617 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 61.057801][ T40] audit: type=1400 audit(1755758730.858:47562): avc: denied { setattr } for pid=5976 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.084358][ T40] audit: type=1400 audit(1755758730.888:47563): avc: denied { name_bind } for pid=6834 comm="syz.2.247" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 61.179372][ T40] audit: type=1400 audit(1755758730.988:47564): avc: denied { bind } for pid=6834 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.243712][ T6843] fuse: Bad value for 'user_id' [ 61.245600][ T6843] fuse: Bad value for 'user_id' [ 61.691194][ T6863] kvm: MWAIT instruction emulated as NOP! [ 61.930478][ T6878] netlink: 'syz.2.259': attribute type 2 has an invalid length. [ 61.934991][ T6878] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 61.939757][ T6878] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 61.941927][ T6878] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 61.944015][ T6878] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 62.184406][ T6882] __nla_validate_parse: 9 callbacks suppressed [ 62.184423][ T6882] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.261'. [ 62.261683][ T6889] dlm: no locking on control device [ 62.469763][ T6900] netlink: 'syz.0.267': attribute type 1 has an invalid length. [ 62.512200][ T6898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6898 comm=syz.1.266 [ 63.228973][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 63.232662][ T6922] netlink: 20 bytes leftover after parsing attributes in process `syz.1.274'. [ 64.135822][ T6936] netlink: 'syz.2.278': attribute type 142 has an invalid length. [ 64.365456][ T6946] netlink: 16 bytes leftover after parsing attributes in process `syz.2.282'. [ 65.235331][ T6971] exFAT-fs (nullb0): invalid boot record signature [ 65.237985][ T6971] exFAT-fs (nullb0): failed to read boot sector [ 65.239915][ T6971] exFAT-fs (nullb0): failed to recognize exfat type [ 65.255988][ T6971] netlink: 48 bytes leftover after parsing attributes in process `syz.1.289'. [ 65.651316][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 65.651328][ T40] audit: type=1400 audit(1755758735.458:47597): avc: denied { setattr } for pid=5976 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.662449][ T40] audit: type=1400 audit(1755758735.458:47598): avc: denied { setattr } for pid=5976 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.669363][ T40] audit: type=1400 audit(1755758735.458:47599): avc: denied { read write } for pid=5977 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.676527][ T40] audit: type=1400 audit(1755758735.458:47600): avc: denied { open } for pid=5977 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.683861][ T40] audit: type=1400 audit(1755758735.458:47601): avc: denied { ioctl } for pid=5977 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.691785][ T40] audit: type=1400 audit(1755758735.458:47602): avc: denied { setattr } for pid=5976 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.699637][ T40] audit: type=1400 audit(1755758735.468:47603): avc: denied { setattr } for pid=5976 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.706859][ T40] audit: type=1400 audit(1755758735.468:47604): avc: denied { setattr } for pid=5976 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.715987][ T40] audit: type=1400 audit(1755758735.468:47605): avc: denied { setattr } for pid=5976 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.724955][ T40] audit: type=1400 audit(1755758735.468:47606): avc: denied { setattr } for pid=5976 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.250757][ T6990] process 'syz.1.295' launched './file0' with NULL argv: empty string added [ 66.314576][ T6990] netlink: 40 bytes leftover after parsing attributes in process `syz.1.295'. [ 66.428021][ T6993] overlay: filesystem on ./bus not supported [ 66.515494][ T6996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.297'. [ 66.518507][ T6996] netlink: 'syz.0.297': attribute type 7 has an invalid length. [ 66.521052][ T6996] netlink: 'syz.0.297': attribute type 8 has an invalid length. [ 66.523483][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'. [ 66.566046][ T7000] can: request_module (can-proto-0) failed. [ 66.610880][ T6999] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 66.613916][ T7004] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 66.962849][ T7027] syz.2.306: attempt to access beyond end of device [ 66.962849][ T7027] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 66.966404][ T7027] XFS (nbd2): SB validate failed with error -5. [ 67.403409][ T7040] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 67.433004][ T7044] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 67.436184][ T6052] libceph: connect (1)[c::]:6789 error -101 [ 67.443709][ T6052] libceph: mon0 (1)[c::]:6789 connect error [ 67.447382][ T7043] ceph: No mds server is up or the cluster is laggy [ 67.712279][ T7072] netlink: 248 bytes leftover after parsing attributes in process `syz.1.318'. [ 67.769142][ T7081] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.321'. [ 67.771925][ T7081] netlink: zone id is out of range [ 67.773395][ T7081] netlink: get zone limit has 8 unknown bytes [ 67.829876][ T7083] netlink: 40 bytes leftover after parsing attributes in process `syz.0.320'. [ 67.833229][ T7083] warning: `syz.0.320' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 68.146760][ T53] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 68.296757][ T53] usb 6-1: device descriptor read/64, error -71 [ 68.546790][ T53] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 68.686800][ T53] usb 6-1: device descriptor read/64, error -71 [ 68.795639][ T162] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.798700][ T162] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.802153][ T162] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.804895][ T162] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.810532][ T53] usb usb6-port1: attempt power cycle [ 69.139296][ T7112] Bluetooth: MGMT ver 1.23 [ 69.156758][ T53] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 69.168885][ T7117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.329'. [ 69.173531][ T7117] vxlan2: entered promiscuous mode [ 69.193456][ T53] usb 6-1: device descriptor read/8, error -71 [ 69.446737][ T53] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 69.477787][ T53] usb 6-1: device descriptor read/8, error -71 [ 69.587255][ T53] usb usb6-port1: unable to enumerate USB device [ 69.998919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.145948][ T7127] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 70.197466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.202464][ T7136] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7136 comm=syz.2.335 [ 70.407515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.486885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.518035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.538110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.597668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.627980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.648153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.753200][ T40] kauditd_printk_skb: 1639 callbacks suppressed [ 70.753212][ T40] audit: type=1400 audit(1755758740.558:49246): avc: denied { setattr } for pid=5976 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.766368][ T40] audit: type=1400 audit(1755758740.568:49247): avc: denied { setattr } for pid=5976 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.773915][ T40] audit: type=1400 audit(1755758740.568:49248): avc: denied { read write } for pid=5971 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.782686][ T40] audit: type=1400 audit(1755758740.568:49249): avc: denied { open } for pid=5971 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.791715][ T40] audit: type=1400 audit(1755758740.568:49250): avc: denied { ioctl } for pid=5971 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.800359][ T40] audit: type=1400 audit(1755758740.568:49251): avc: denied { setattr } for pid=5976 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.808270][ T40] audit: type=1400 audit(1755758740.568:49252): avc: denied { setattr } for pid=5976 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.815527][ T40] audit: type=1400 audit(1755758740.568:49253): avc: denied { setattr } for pid=5976 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.823325][ T40] audit: type=1400 audit(1755758740.578:49254): avc: denied { setattr } for pid=5976 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.836728][ T40] audit: type=1400 audit(1755758740.578:49255): avc: denied { setattr } for pid=5976 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.869700][ T7145] netlink: 52 bytes leftover after parsing attributes in process `syz.2.338'. [ 70.872908][ T7145] kvm: Disabled LAPIC found during irq injection [ 70.931552][ T7149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.340'. [ 71.092839][ T7165] netlink: 20 bytes leftover after parsing attributes in process `syz.2.344'. [ 71.208412][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.210421][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.416789][ T6022] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 71.578218][ T6022] usb 7-1: config 6 has an invalid interface number: 250 but max is 3 [ 71.580848][ T6022] usb 7-1: config 6 has an invalid interface number: 9 but max is 3 [ 71.583363][ T6022] usb 7-1: config 6 has an invalid interface number: 92 but max is 3 [ 71.586103][ T6022] usb 7-1: config 6 has an invalid interface number: 53 but max is 3 [ 71.588674][ T6022] usb 7-1: config 6 has an invalid interface number: 228 but max is 3 [ 71.591224][ T6022] usb 7-1: config 6 has 5 interfaces, different from the descriptor's value: 4 [ 71.594094][ T6022] usb 7-1: config 6 has no interface number 0 [ 71.595964][ T6022] usb 7-1: config 6 has no interface number 1 [ 71.597929][ T6022] usb 7-1: config 6 has no interface number 2 [ 71.599868][ T6022] usb 7-1: config 6 has no interface number 3 [ 71.601828][ T6022] usb 7-1: config 6 has no interface number 4 [ 71.603744][ T6022] usb 7-1: config 6 interface 250 altsetting 11 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 71.607124][ T6022] usb 7-1: config 6 interface 250 altsetting 11 bulk endpoint 0x9 has invalid maxpacket 1023 [ 71.610320][ T6022] usb 7-1: config 6 interface 250 altsetting 11 has a duplicate endpoint with address 0x9, skipping [ 71.613638][ T6022] usb 7-1: config 6 interface 250 altsetting 11 has a duplicate endpoint with address 0x9, skipping [ 71.617118][ T6022] usb 7-1: config 6 interface 250 altsetting 11 has a duplicate endpoint with address 0xB, skipping [ 71.620427][ T6022] usb 7-1: config 6 interface 250 altsetting 11 has an endpoint descriptor with address 0x7C, changing to 0xC [ 71.623956][ T6022] usb 7-1: config 6 interface 250 altsetting 11 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 71.627421][ T6022] usb 7-1: config 6 interface 9 altsetting 6 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 71.630747][ T6022] usb 7-1: config 6 interface 92 altsetting 9 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 71.634080][ T6022] usb 7-1: config 6 interface 92 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 71.637330][ T6022] usb 7-1: config 6 interface 92 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 71.640583][ T6022] usb 7-1: config 6 interface 92 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 9 [ 71.644512][ T6022] usb 7-1: too many endpoints for config 6 interface 53 altsetting 97: 188, using maximum allowed: 30 [ 71.647840][ T6022] usb 7-1: config 6 interface 53 altsetting 97 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 71.651190][ T6022] usb 7-1: config 6 interface 53 altsetting 97 has a duplicate endpoint with address 0xF, skipping [ 71.654476][ T6022] usb 7-1: config 6 interface 53 altsetting 97 bulk endpoint 0xE has invalid maxpacket 32 [ 71.657493][ T6022] usb 7-1: config 6 interface 53 altsetting 97 has a duplicate endpoint with address 0xF, skipping [ 71.660739][ T6022] usb 7-1: config 6 interface 53 altsetting 97 has a duplicate endpoint with address 0xF, skipping [ 71.664008][ T6022] usb 7-1: config 6 interface 53 altsetting 97 has an invalid descriptor for endpoint zero, skipping [ 71.667322][ T6022] usb 7-1: config 6 interface 53 altsetting 97 has 6 endpoint descriptors, different from the interface descriptor's value: 188 [ 71.671375][ T6022] usb 7-1: config 6 interface 228 altsetting 251 has a duplicate endpoint with address 0xD, skipping [ 71.674716][ T6022] usb 7-1: config 6 interface 228 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 71.678227][ T6022] usb 7-1: config 6 interface 250 has no altsetting 0 [ 71.680468][ T6022] usb 7-1: config 6 interface 9 has no altsetting 0 [ 71.682571][ T6022] usb 7-1: config 6 interface 92 has no altsetting 0 [ 71.684707][ T6022] usb 7-1: config 6 interface 53 has no altsetting 0 [ 71.687036][ T6022] usb 7-1: config 6 interface 228 has no altsetting 0 [ 71.691234][ T6022] usb 7-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=a0.73 [ 71.694058][ T6022] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.696545][ T6022] usb 7-1: Product: ốܡ는찥韄玭⇛ãƒç‚±è†±å¦‡ç‰‚áœ®éº“Å¿áµ–å´¬â‰¶ìª¹áª ë’½æ½‘é®æŸ®æŒªäŒµï§Žì’¥à¤§í‚乡䬶ì¡ïŒá˜²ì±–ꟈ㞚붉èºà­ˆë­¡íŽé½žç§…ë¿äœ è¾…䓄꾚í¯ìˆ„蔼謿å«äŒˆâ””⤥碈礓䅳暎뜢롤픸耹狢믉㓽郬핹짛燡ᆈﻄ앱鰅 [ 71.704253][ T6022] usb 7-1: Manufacturer: Ж [ 71.705735][ T6022] usb 7-1: SerialNumber: syz [ 71.709707][ T7174] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 71.914157][ T6022] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 71.923182][ T6022] snd-usb-audio 7-1:6.250: probe with driver snd-usb-audio failed with error -2 [ 71.928424][ T6022] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 71.930946][ T6022] snd-usb-audio 7-1:6.9: probe with driver snd-usb-audio failed with error -2 [ 71.935956][ T6022] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 71.938783][ T6022] snd-usb-audio 7-1:6.92: probe with driver snd-usb-audio failed with error -2 [ 71.943455][ T6022] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 71.945839][ T6022] snd-usb-audio 7-1:6.53: probe with driver snd-usb-audio failed with error -2 [ 71.950808][ T6022] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 71.960334][ T6022] snd-usb-audio 7-1:6.228: probe with driver snd-usb-audio failed with error -2 [ 71.963883][ T6022] usb 7-1: USB disconnect, device number 3 [ 71.986043][ T6484] udevd[6484]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:6.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.451953][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.352'. [ 72.460779][ T7189] netlink: 'syz.1.352': attribute type 5 has an invalid length. [ 72.469045][ T7189] XFS (nullb0): Invalid superblock magic number [ 72.503210][ T7197] block device autoloading is deprecated and will be removed. [ 72.907903][ T7215] program syz.2.359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.955220][ T7225] veth0_to_team: entered promiscuous mode [ 72.991852][ T7232] nbd: couldn't find device at index -1605786504 [ 72.999593][ T7233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'. [ 73.002707][ T7233] netlink: 'syz.0.364': attribute type 20 has an invalid length. [ 73.077461][ T7233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'. [ 73.080272][ T7233] netlink: 'syz.0.364': attribute type 20 has an invalid length. [ 73.400873][ T7252] SELinux: policydb string does not match my string SE Linux [ 73.403629][ T7252] SELinux: failed to load policy [ 73.405733][ T7252] netlink: 'syz.1.371': attribute type 1 has an invalid length. [ 73.409243][ T7252] netlink: 224 bytes leftover after parsing attributes in process `syz.1.371'. [ 73.513144][ T7261] ata1.00: invalid cdb length 6 [ 73.629793][ T7265] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 73.631844][ T7265] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 73.634594][ T7265] vhci_hcd vhci_hcd.0: Device attached [ 73.638620][ T7265] vhci_hcd vhci_hcd.0: port 0 already used [ 73.644844][ T7265] ipvlan2: entered promiscuous mode [ 73.647492][ T7265] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 73.652088][ T7266] vhci_hcd: connection closed [ 73.652260][ T1145] vhci_hcd: stop threads [ 73.656067][ T1145] vhci_hcd: release socket [ 73.658786][ T1145] vhci_hcd: disconnect device [ 73.965275][ T7282] mkiss: ax0: crc mode is auto. [ 74.289203][ T7298] fuseblk: Unknown parameter '18446744073709551615Œ>˜Xï«û@)Ñ!]¯"C®ÀÕš/)&Ì$Œå/ÉníÂWÝo¨ k®†^JÎ1ãìá8W4öúˆ¨¦?˜Ÿƒ£»V£#&«3²­QÐZý~G¢—¡á2Þ+Nš²ÍKc¿<Öº™:øæðÖ¾²ûBºçU¦”¥é-' [ 74.442546][ T7305] mmap: syz.1.384 (7305) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 74.639892][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 74.642816][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 75.474373][ T7322] binder: 7321:7322 ioctl c0306201 200000000080 returned -14 [ 75.534684][ T7327] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 75.539324][ T7327] overlayfs: missing 'lowerdir' [ 75.624571][ T7330] netlink: 'syz.2.392': attribute type 64 has an invalid length. [ 75.628416][ T7330] netlink: 'syz.2.392': attribute type 4 has an invalid length. [ 75.631836][ T7330] netlink: 152 bytes leftover after parsing attributes in process `syz.2.392'. [ 76.609945][ T40] kauditd_printk_skb: 2065 callbacks suppressed [ 76.609958][ T40] audit: type=1400 audit(1755758746.418:51321): avc: denied { execute } for pid=7331 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 76.619762][ T40] audit: type=1400 audit(1755758746.418:51322): avc: denied { execute_no_trans } for pid=7331 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 76.629043][ T40] audit: type=1400 audit(1755758746.418:51323): avc: denied { execmem } for pid=7331 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 76.647783][ T5982] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 76.711017][ T40] audit: type=1400 audit(1755758746.518:51324): avc: denied { create } for pid=7332 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.717382][ T5334] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.717816][ T40] audit: type=1400 audit(1755758746.518:51325): avc: denied { read write } for pid=7332 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.720037][ T5334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.728130][ T40] audit: type=1400 audit(1755758746.518:51326): avc: denied { open } for pid=7332 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.730918][ T5334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.738349][ T40] audit: type=1400 audit(1755758746.518:51327): avc: denied { ioctl } for pid=7332 comm="syz-executor" path="socket:[19614]" dev="sockfs" ino=19614 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.741065][ T5334] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.751268][ T5334] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.754633][ T40] audit: type=1400 audit(1755758746.558:51328): avc: denied { ioctl } for pid=7332 comm="syz-executor" path="socket:[19614]" dev="sockfs" ino=19614 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.763448][ T40] audit: type=1400 audit(1755758746.558:51329): avc: denied { read } for pid=7332 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.771538][ T40] audit: type=1400 audit(1755758746.558:51330): avc: denied { read open } for pid=7332 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.843907][ T7332] chnl_net:caif_netlink_parms(): no params data found [ 76.892855][ T7332] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.895871][ T7332] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.898894][ T7332] bridge_slave_0: entered allmulticast mode [ 76.901458][ T7332] bridge_slave_0: entered promiscuous mode [ 76.904725][ T7332] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.907466][ T7332] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.910303][ T7332] bridge_slave_1: entered allmulticast mode [ 76.911195][ T7343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7343 comm=syz.2.395 [ 76.912682][ T7332] bridge_slave_1: entered promiscuous mode [ 76.937177][ T7332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.944128][ T1145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.950818][ T7332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.972271][ T7332] team0: Port device team_slave_0 added [ 76.975555][ T7332] team0: Port device team_slave_1 added [ 77.003961][ T7332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.007112][ T7332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.018480][ T7332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.023589][ T7332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.025766][ T7332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.034500][ T7332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.063636][ T1145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.071112][ T7332] hsr_slave_0: entered promiscuous mode [ 77.073618][ T7332] hsr_slave_1: entered promiscuous mode [ 77.075843][ T7332] debugfs: 'hsr0' already exists in 'hsr' [ 77.077800][ T7332] Cannot create hsr debugfs directory [ 77.131389][ T1145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.171702][ T7332] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.176049][ T7332] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.184070][ T7332] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.189841][ T7346] bridge0: port 3(veth0_to_bridge) entered blocking state [ 77.192873][ T7346] bridge0: port 3(veth0_to_bridge) entered disabled state [ 77.195899][ T7346] veth0_to_bridge: entered allmulticast mode [ 77.199805][ T7346] veth0_to_bridge: entered promiscuous mode [ 77.202340][ T7346] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 77.207989][ T7346] bridge0: port 3(veth0_to_bridge) entered blocking state [ 77.210882][ T7346] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 77.213513][ T7332] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.222012][ T1145] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.234527][ T7332] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.237060][ T7332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.239453][ T7332] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.241811][ T7332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.261687][ T7332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.267954][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.270768][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.278296][ T7332] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.283654][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.286250][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.296087][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.298943][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.351343][ T1145] bridge_slave_1: left allmulticast mode [ 77.353774][ T1145] bridge_slave_1: left promiscuous mode [ 77.356288][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.359984][ T1145] bridge_slave_0: left allmulticast mode [ 77.361805][ T1145] bridge_slave_0: left promiscuous mode [ 77.363621][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.541865][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.545539][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.549445][ T1145] bond0 (unregistering): Released all slaves [ 77.559584][ T7357] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.399'. [ 77.620123][ T1145] tipc: Disabling bearer [ 77.623028][ T1145] tipc: Left network mode [ 77.663604][ T7332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.678594][ T7372] block device autoloading is deprecated and will be removed. [ 77.810796][ T7332] veth0_vlan: entered promiscuous mode [ 77.816302][ T7332] veth1_vlan: entered promiscuous mode [ 77.835549][ T7332] veth0_macvtap: entered promiscuous mode [ 77.842419][ T7332] veth1_macvtap: entered promiscuous mode [ 77.854370][ T7332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.863580][ T7332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.879179][ T162] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.884232][ T162] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.889843][ T162] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.893895][ T7391] mac80211_hwsim hwsim5 aëÿÿ: renamed from wlan1 (while UP) [ 77.903472][ T162] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.905613][ T7391] openvswitch: netlink: IPv4 tunnel dst address is zero [ 77.915089][ T1145] hsr_slave_0: left promiscuous mode [ 77.926957][ T1145] hsr_slave_1: left promiscuous mode [ 77.931107][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.935594][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.939107][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.941688][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.946457][ T1145] veth1_macvtap: left promiscuous mode [ 77.949587][ T1145] veth0_macvtap: left promiscuous mode [ 77.951553][ T1145] veth1_vlan: left promiscuous mode [ 77.953371][ T1145] veth0_vlan: left promiscuous mode [ 78.032134][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 78.039184][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 78.101415][ T7405] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.405'. [ 78.106369][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.111375][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.123752][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.126245][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.185154][ T7412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.393'. [ 78.190584][ T7412] xfrm1: entered promiscuous mode [ 78.192220][ T7412] xfrm1: entered allmulticast mode [ 78.270868][ T7428] netlink: 40 bytes leftover after parsing attributes in process `syz.4.410'. [ 78.275822][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 78.281328][ T7428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.410'. [ 78.410028][ T7447] deleting an unspecified loop device is not supported. [ 78.450226][ T7450] netlink: 'syz.0.416': attribute type 2 has an invalid length. [ 78.452655][ T7450] netlink: 'syz.0.416': attribute type 2 has an invalid length. [ 78.617043][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 78.634267][ T7460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.420'. [ 78.756838][ T9] usb 9-1: device descriptor read/64, error -71 [ 78.806889][ T5982] Bluetooth: hci2: command tx timeout [ 78.857822][ T7466] program syz.0.422 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.860925][ T7466] ata1.00: non-matching transfer count (-3329/0) [ 78.863980][ T7466] loop9: detected capacity change from 0 to 7 [ 78.867098][ T7466] Dev loop9: unable to read RDB block 7 [ 78.868936][ T7466] loop9: unable to read partition table [ 78.870775][ T7466] loop9: partition table beyond EOD, truncated [ 78.873069][ T7466] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 78.917766][ T6052] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 78.968871][ T7476] netlink: 36 bytes leftover after parsing attributes in process `syz.0.425'. [ 79.008960][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 79.076820][ T6052] usb 6-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.081879][ T6052] usb 6-1: config 1 interface 0 has no altsetting 0 [ 79.086885][ T6052] usb 6-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.40 [ 79.090261][ T6052] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.093597][ T6052] usb 6-1: Product: ဇ [ 79.095223][ T6052] usb 6-1: Manufacturer: ㄂쾙戻淲èŒâ¨¸æ’¬ì««é¶Šé¸•㿕Ⓙ괪愑㭘錟㈋褹ï”⎨æ¸ìƒµï„¹è’šåƒ€ï–˜æ‘Šâ£«êƒ¹â µî´½î–ä¤ç¤Œå ‚擳⚢疌鳨献 [ 79.101088][ T6052] usb 6-1: SerialNumber: Ь [ 79.136973][ T9] usb 9-1: device descriptor read/64, error -71 [ 79.257251][ T9] usb usb9-port1: attempt power cycle [ 79.316366][ T7489] affs: No valid root block on device sr0 [ 79.324657][ T6052] usbhid 6-1:1.0: can't add hid device: -71 [ 79.326587][ T6052] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 79.338391][ T6052] usb 6-1: USB disconnect, device number 10 [ 79.596781][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 79.617475][ T9] usb 9-1: device descriptor read/8, error -71 [ 79.856847][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 79.878150][ T9] usb 9-1: device descriptor read/8, error -71 [ 79.986990][ T9] usb usb9-port1: unable to enumerate USB device [ 80.379102][ T7515] capability: warning: `syz.0.437' uses 32-bit capabilities (legacy support in use) [ 80.467558][ T7518] overlayfs: conflicting options: userxattr,redirect_dir=on [ 80.526117][ T7524] capability: warning: `syz.0.441' uses deprecated v2 capabilities in a way that may be insecure [ 80.601104][ T7535] 9pnet: Could not find request transport: virtiXverson=9p2000.u [ 80.687457][ T7549] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 80.701444][ T7549] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 80.732529][ T7551] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 80.770372][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.448'. [ 80.848420][ T7563] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 80.850860][ T7563] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 80.853392][ T7563] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 80.855899][ T7563] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 80.865151][ T7565] syzkaller1: entered promiscuous mode [ 80.867379][ T7565] syzkaller1: entered allmulticast mode [ 80.887479][ T5982] Bluetooth: hci2: command tx timeout [ 81.126758][ T6053] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 81.256792][ T6053] usb 9-1: device descriptor read/64, error -71 [ 81.456971][ T839] cfg80211: failed to load regulatory.db [ 81.619341][ T40] kauditd_printk_skb: 3222 callbacks suppressed [ 81.619357][ T40] audit: type=1400 audit(1755758751.428:54428): avc: denied { checkpoint_restore } for pid=7580 comm="syz.0.457" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 81.631937][ T40] audit: type=1400 audit(1755758751.428:54427): avc: denied { setattr } for pid=5971 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.641835][ T40] audit: type=1400 audit(1755758751.428:54429): avc: denied { allowed } for pid=7580 comm="syz.0.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 81.650229][ T40] audit: type=1400 audit(1755758751.438:54430): avc: denied { setattr } for pid=5971 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.660063][ T40] audit: type=1400 audit(1755758751.438:54431): avc: denied { create } for pid=7580 comm="syz.0.457" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 81.667377][ T40] audit: type=1400 audit(1755758751.438:54432): avc: denied { allowed } for pid=7580 comm="syz.0.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 81.674597][ T40] audit: type=1400 audit(1755758751.438:54433): avc: denied { setattr } for pid=5971 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.682823][ T40] audit: type=1400 audit(1755758751.438:54434): avc: denied { sqpoll } for pid=7580 comm="syz.0.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 81.689552][ T40] audit: type=1400 audit(1755758751.438:54435): avc: denied { create } for pid=7580 comm="syz.0.457" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 81.696454][ T40] audit: type=1400 audit(1755758751.448:54436): avc: denied { setattr } for pid=5971 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.811798][ T7590] 9pnet_fd: Insufficient options for proto=fd [ 81.839179][ T7595] geneve2: entered promiscuous mode [ 81.841036][ T7595] geneve2: entered allmulticast mode [ 82.147849][ T7613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.465'. [ 82.151031][ T7613] IPv6: NLM_F_CREATE should be specified when creating new route [ 82.257052][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.467'. [ 82.261852][ T7625] trusted_key: encrypted_key: keylen parameter is missing [ 82.586892][ T6053] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 82.746918][ T6053] usb 9-1: Using ep0 maxpacket: 16 [ 82.749850][ T6053] usb 9-1: config 0 has no interfaces? [ 82.752668][ T6053] usb 9-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 82.755547][ T6053] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 82.758543][ T6053] usb 9-1: Manufacturer: syz [ 82.760010][ T6053] usb 9-1: SerialNumber: syz [ 82.763421][ T6053] usb 9-1: config 0 descriptor?? [ 82.966996][ T5982] Bluetooth: hci2: command tx timeout [ 82.968300][ T6053] usb 9-1: USB disconnect, device number 8 [ 83.177825][ T7647] program syz.0.475 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.203450][ T7649] binder: Bad value for 'max' [ 83.518795][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'. [ 83.527756][ T7670] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 83.527756][ T7670] The task syz.4.481 (7670) triggered the difference, watch for misbehavior. [ 83.675390][ T7687] @: renamed from vlan0 (while UP) [ 83.701888][ T7691] netlink: 24 bytes leftover after parsing attributes in process `syz.4.487'. [ 83.752729][ T7697] netlink: 16 bytes leftover after parsing attributes in process `syz.4.490'. [ 83.801385][ T7704] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 83.810334][ T7704] CIFS mount error: No usable UNC path provided in device string! [ 83.810334][ T7704] [ 83.813365][ T7704] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 84.175293][ T7725] tmpfs: Unknown parameter 'usrquota€qNJCG$Žùš„}7¿›ä_×”Ù‘Š' ñ[  <@Â4íG²}°Üç€ùËàIÛ(YT4ãÏ^‘…µz.pF¾¹Ïž’y9´' [ 84.218390][ T7727] netlink: 'syz.4.498': attribute type 10 has an invalid length. [ 84.234746][ T7727] IPVS: Scheduler module ip_vs_sip not found [ 84.348800][ T7738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22886 sclass=netlink_route_socket pid=7738 comm=syz.4.502 [ 84.393797][ T7744] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 1, id = 0 [ 84.394905][ T7732] kvm: kvm [7731]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 84.401224][ T7732] kvm: kvm [7731]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 84.417893][ T7732] kvm: kvm [7731]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 84.424007][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.505'. [ 84.438537][ T7732] kvm: kvm [7731]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 84.442009][ T7732] kvm: kvm [7731]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 84.457474][ T7732] kvm_intel: kvm [7731]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 85.057766][ T5982] Bluetooth: hci2: command tx timeout [ 85.396919][ T7767] block nbd1: shutting down sockets [ 85.623876][ T7779] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 85.690272][ T7784] tmpfs: Bad value for 'mpol' [ 86.631692][ T40] kauditd_printk_skb: 2111 callbacks suppressed [ 86.631706][ T40] audit: type=1400 audit(1755758756.438:56548): avc: denied { setattr } for pid=5971 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.641709][ T40] audit: type=1400 audit(1755758756.448:56549): avc: denied { setattr } for pid=5971 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.691532][ T40] audit: type=1400 audit(1755758756.498:56550): avc: denied { setattr } for pid=5971 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.701055][ T40] audit: type=1400 audit(1755758756.498:56551): avc: denied { setattr } for pid=5971 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.711124][ T40] audit: type=1400 audit(1755758756.498:56552): avc: denied { setattr } for pid=5971 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.720536][ T40] audit: type=1400 audit(1755758756.518:56553): avc: denied { setattr } for pid=5971 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.731580][ T40] audit: type=1400 audit(1755758756.518:56554): avc: denied { setattr } for pid=5971 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.742533][ T40] audit: type=1400 audit(1755758756.548:56555): avc: denied { setattr } for pid=5971 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.752314][ T40] audit: type=1400 audit(1755758756.548:56556): avc: denied { read write } for pid=5969 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.762458][ T40] audit: type=1400 audit(1755758756.548:56557): avc: denied { open } for pid=5969 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.795966][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.527'. [ 87.001005][ T7827] netlink: 'syz.0.532': attribute type 12 has an invalid length. [ 87.003889][ T7827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7827 comm=syz.0.532 [ 87.011815][ T7827] cgroup: No subsys list or none specified [ 87.014062][ T7827] Bluetooth: MGMT ver 1.23 [ 87.117715][ T7842] netlink: 24 bytes leftover after parsing attributes in process `syz.0.535'. [ 87.217898][ T7846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.537'. [ 87.484711][ T7871] netlink: 'syz.4.547': attribute type 8 has an invalid length. [ 87.642961][ T7884] sctp: [Deprecated]: syz.0.551 (pid 7884) Use of struct sctp_assoc_value in delayed_ack socket option. [ 87.642961][ T7884] Use struct sctp_sack_info instead [ 87.755228][ T7898] sctp: [Deprecated]: syz.1.554 (pid 7898) Use of struct sctp_assoc_value in delayed_ack socket option. [ 87.755228][ T7898] Use struct sctp_sack_info instead [ 87.891015][ T7915] MPI: mpi too large (16392 bits) [ 87.894268][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'. [ 88.012154][ T7922] random: crng reseeded on system resumption [ 88.217870][ T7938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7938 comm=syz.4.567 [ 88.367855][ T839] IPVS: starting estimator thread 0... [ 88.371152][ T7952] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.571'. [ 88.393921][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 88.456782][ T7953] IPVS: using max 52 ests per chain, 124800 per kthread [ 88.508690][ T7967] sp0: Synchronizing with TNC [ 88.511969][ T7967] syz.0.575: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 88.520385][ T7966] [U] è [ 88.655528][ T7972] dns_resolver: Unsupported server list version (0) [ 88.658664][ T7972] netlink: 'syz.0.577': attribute type 32 has an invalid length. [ 88.661307][ T7972] __nla_validate_parse: 43 callbacks suppressed [ 88.661317][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.577'. [ 88.666465][ T7972] (unnamed net_device) (uninitialized): option coupled_control: invalid value (107) [ 88.672677][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.577'. [ 88.990286][ T7985] tipc: Started in network mode [ 88.991916][ T7985] tipc: Node identity 4, cluster identity 4711 [ 88.994411][ T7985] tipc: Node number set to 4 [ 88.996138][ T7987] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 89.171398][ T8012] netlink: 100 bytes leftover after parsing attributes in process `syz.1.586'. [ 89.238853][ T8014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.587'. [ 89.970444][ T8033] fuse: Unknown parameter '9Rî1 Èa2Ï?0x0000000000000004' [ 90.070980][ T8038] batman_adv: batadv0: Adding interface: gretap1 [ 90.072988][ T8038] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.083063][ T8038] batman_adv: batadv0: Interface activated: gretap1 [ 90.261226][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.599'. [ 90.294026][ T8077] fuse: Bad value for 'rootmode' [ 90.459927][ T8090] overlay: Unknown parameter 'obj_role' [ 90.465522][ T8090] tmpfs: Invalid uid '0x00000000ffffffff' [ 90.557406][ T8095] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 90.559370][ T8095] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 90.562900][ T8095] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 90.565327][ T8095] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 90.567755][ T8095] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 90.570745][ T8095] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 90.574981][ T8095] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 90.576997][ T8095] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 90.579889][ T8095] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 90.612910][ T8103] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 90.615234][ T8103] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.620255][ T8103] vhci_hcd vhci_hcd.0: Device attached [ 90.622623][ T8101] netlink: 'syz.0.608': attribute type 3 has an invalid length. [ 90.628325][ T8104] vhci_hcd: connection closed [ 90.628634][ T72] vhci_hcd: stop threads [ 90.632931][ T72] vhci_hcd: release socket [ 90.634918][ T72] vhci_hcd: disconnect device [ 90.799510][ T8116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8116 comm=syz.0.612 [ 90.804257][ T8116] netlink: 'syz.0.612': attribute type 1 has an invalid length. [ 90.826034][ T8116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.835856][ T8116] bond0: (slave geneve2): making interface the new active one [ 90.840803][ T8116] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 91.049116][ T8130] netlink: 'syz.0.617': attribute type 1 has an invalid length. [ 91.060284][ T8130] bond1: (slave geneve3): making interface the new active one [ 91.062923][ T8130] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 91.065698][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 91.068063][ T8130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.617'. [ 91.068920][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 91.075383][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 91.080634][ T8130] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.082990][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 91.237017][ T8137] IPv6: NLM_F_CREATE should be specified when creating new route [ 91.250309][ T8143] netlink: 'syz.4.621': attribute type 1 has an invalid length. [ 91.269156][ T8145] (unnamed net_device) (uninitialized): option use_carrier: invalid value (8) [ 91.276360][ T8143] bond1: (slave bridge1): making interface the new active one [ 91.284575][ T8143] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 91.297042][ T8150] rdma_op ffff888037f4c9f0 conn xmit_rdma 0000000000000000 [ 91.303649][ T8143] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 91.307550][ T8143] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 91.318142][ T8148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.623'. [ 91.329348][ T8155] 9pnet_fd: p9_fd_create_unix (8155): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 91.571328][ T8172] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 91.626837][ T8174] smc: net device ipvlan0 applied user defined pnetid SYZ1 [ 91.630494][ T8174] netlink: 44 bytes leftover after parsing attributes in process `syz.4.632'. [ 91.633272][ T8174] netem: unknown loss type 12 [ 91.634783][ T8174] netem: change failed [ 91.637945][ T40] kauditd_printk_skb: 3203 callbacks suppressed [ 91.637960][ T40] audit: type=1400 audit(1755758761.448:59761): avc: denied { read write } for pid=8173 comm="syz.4.632" name="video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 91.649334][ T40] audit: type=1400 audit(1755758761.448:59762): avc: denied { setattr } for pid=5971 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.657873][ T40] audit: type=1400 audit(1755758761.448:59763): avc: denied { read write open } for pid=8173 comm="syz.4.632" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 91.665663][ T40] audit: type=1400 audit(1755758761.448:59764): avc: denied { ioctl } for pid=8173 comm="syz.4.632" path="/dev/video3" dev="devtmpfs" ino=959 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 91.676296][ T40] audit: type=1400 audit(1755758761.448:59765): avc: denied { write } for pid=8173 comm="syz.4.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.682769][ T40] audit: type=1400 audit(1755758761.448:59766): avc: denied { nlmsg_write } for pid=8173 comm="syz.4.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.689403][ T40] audit: type=1400 audit(1755758761.448:59767): avc: denied { setattr } for pid=5971 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.696601][ T40] audit: type=1400 audit(1755758761.458:59768): avc: denied { setattr } for pid=5971 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.704076][ T40] audit: type=1400 audit(1755758761.458:59769): avc: denied { setattr } for pid=5971 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.711343][ T40] audit: type=1400 audit(1755758761.458:59770): avc: denied { read write } for pid=7332 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 92.316784][ T5334] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.319152][ T5334] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.321488][ T5334] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.324355][ T5334] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.327096][ T5334] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.390133][ T8182] chnl_net:caif_netlink_parms(): no params data found [ 92.442133][ T8182] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.445019][ T8182] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.447944][ T8182] bridge_slave_0: entered allmulticast mode [ 92.450724][ T8182] bridge_slave_0: entered promiscuous mode [ 92.454190][ T8182] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.457970][ T8182] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.460815][ T8182] bridge_slave_1: entered allmulticast mode [ 92.463551][ T8182] bridge_slave_1: entered promiscuous mode [ 92.482840][ T8182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.489431][ T8182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.511399][ T8182] team0: Port device team_slave_0 added [ 92.514308][ T8182] team0: Port device team_slave_1 added [ 92.531515][ T8182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.533758][ T8182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.542824][ T8182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.547844][ T8182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.550532][ T8182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.561596][ T8182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.566833][ T5334] Bluetooth: hci3: command 0x0c1a tx timeout [ 92.585702][ T8182] hsr_slave_0: entered promiscuous mode [ 92.588056][ T8182] hsr_slave_1: entered promiscuous mode [ 92.590297][ T8182] debugfs: 'hsr0' already exists in 'hsr' [ 92.592196][ T8182] Cannot create hsr debugfs directory [ 92.598421][ T8193] libceph: resolve '40' (ret=-3): failed [ 92.646823][ T5334] Bluetooth: hci2: command 0x0c1a tx timeout [ 92.674712][ T8182] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 92.682735][ T8182] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.688937][ T8182] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 92.701465][ T8182] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.707604][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.721791][ T8182] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.724137][ T8182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.726465][ T8182] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.728803][ T8182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.751410][ T8182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.758218][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.760729][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.765861][ T8182] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.771907][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.774314][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.779746][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.782278][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.789409][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.860037][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.890922][ T8182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.910328][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.992820][ T8182] veth0_vlan: entered promiscuous mode [ 92.996797][ T8182] veth1_vlan: entered promiscuous mode [ 93.003560][ T8230] netlink: 24 bytes leftover after parsing attributes in process `syz.4.643'. [ 93.017638][ T8182] veth0_macvtap: entered promiscuous mode [ 93.021744][ T8182] veth1_macvtap: entered promiscuous mode [ 93.030650][ T8182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.037813][ T8182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.042739][ T72] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.047969][ T72] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.051004][ T72] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.053761][ T72] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.084868][ T12] bridge_slave_1: left allmulticast mode [ 93.087139][ T12] bridge_slave_1: left promiscuous mode [ 93.089676][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.093396][ T12] bridge_slave_0: left allmulticast mode [ 93.095696][ T12] bridge_slave_0: left promiscuous mode [ 93.098906][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.124132][ T8237] pvfs2: Unknown parameter '/dev/comedi4' [ 93.269026][ T12] team0: Port device bridge1 removed [ 93.368766][ T12] bond0 (unregistering): left allmulticast mode [ 93.370827][ T12] bond_slave_0: left allmulticast mode [ 93.372645][ T12] bond_slave_1: left allmulticast mode [ 93.375561][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.380313][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.383882][ T12] bond0 (unregistering): Released all slaves [ 93.387909][ T12] bond1 (unregistering): Released all slaves [ 93.394201][ T12] bond2 (unregistering): Released all slaves [ 93.418652][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.424247][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.438193][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.441312][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.469691][ T8249] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 93.532006][ T8202] 9pnet_fd: p9_fd_create_tcp (8202): problem connecting socket to 127.0.0.1 [ 93.592679][ T8265] Illegal XDP return value 4294967274 on prog (id 62) dev syz_tun, expect packet loss! [ 93.675152][ T12] hsr_slave_0: left promiscuous mode [ 93.679388][ T12] hsr_slave_1: left promiscuous mode [ 93.682285][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.685309][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.690734][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.693803][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.699842][ T12] veth1_macvtap: left promiscuous mode [ 93.702107][ T12] veth0_macvtap: left promiscuous mode [ 93.704733][ T12] veth1_vlan: left promiscuous mode [ 93.707308][ T12] veth0_vlan: left promiscuous mode [ 93.801232][ T12] team0 (unregistering): Port device team_slave_1 removed [ 93.814484][ T12] team0 (unregistering): Port device team_slave_0 removed [ 93.936779][ T838] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 93.963552][ T8295] kAFS: Can only specify source 'none' with -o dyn [ 94.086965][ T838] usb 9-1: Using ep0 maxpacket: 8 [ 94.095564][ T838] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.101516][ T838] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.106006][ T838] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.111378][ T838] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.115677][ T838] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 94.118987][ T838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.330469][ T838] usb 9-1: GET_CAPABILITIES returned 0 [ 94.332295][ T838] usbtmc 9-1:16.0: can't read capabilities [ 94.533125][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 94.539619][ T6022] usb 9-1: USB disconnect, device number 9 [ 94.646817][ T5334] Bluetooth: hci3: command 0x0c1a tx timeout [ 94.726807][ T5334] Bluetooth: hci2: command 0x0c1a tx timeout [ 94.756101][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.666'. [ 94.764377][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.666'. [ 94.782976][ T6053] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 94.793650][ T6053] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 94.906338][ T8323] veth0_to_bridge: left allmulticast mode [ 94.908226][ T8323] veth0_to_bridge: left promiscuous mode [ 94.910177][ T8323] bridge0: port 3(veth0_to_bridge) entered disabled state [ 94.913226][ T8323] bridge_slave_1: left allmulticast mode [ 94.915016][ T8323] bridge_slave_1: left promiscuous mode [ 94.916919][ T8323] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.919833][ T8323] bridge_slave_0: left allmulticast mode [ 94.921711][ T8323] bridge_slave_0: left promiscuous mode [ 94.923529][ T8323] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.102782][ T8334] netlink: 64 bytes leftover after parsing attributes in process `syz.4.668'. [ 95.112204][ T8334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8334 comm=syz.4.668 [ 95.129633][ T8334] syzkaller0: entered promiscuous mode [ 95.131472][ T8334] syzkaller0: entered allmulticast mode [ 95.221657][ T8344] netlink: 72 bytes leftover after parsing attributes in process `syz.1.670'. [ 95.414594][ T72] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.540413][ T5982] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.543352][ T5982] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.545716][ T5982] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.549245][ T5982] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.551793][ T5982] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.556601][ T8379] dummy0: entered promiscuous mode [ 95.614341][ T8375] chnl_net:caif_netlink_parms(): no params data found [ 95.653359][ T8375] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.655633][ T8375] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.658512][ T8375] bridge_slave_0: entered allmulticast mode [ 95.661024][ T8375] bridge_slave_0: entered promiscuous mode [ 95.664094][ T8375] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.666357][ T8375] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.669318][ T8375] bridge_slave_1: entered allmulticast mode [ 95.671766][ T8375] bridge_slave_1: entered promiscuous mode [ 95.706089][ T8375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.711204][ T8375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.735837][ T8375] team0: Port device team_slave_0 added [ 95.739166][ T8375] team0: Port device team_slave_1 added [ 95.771894][ T8375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.774227][ T8375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.782364][ T8375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.786406][ T8375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.789057][ T8375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.797829][ T8375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.801443][ T8409] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 95.804681][ T8409] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 95.808402][ T8409] program syz.4.686 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.829342][ T8375] hsr_slave_0: entered promiscuous mode [ 95.831461][ T8375] hsr_slave_1: entered promiscuous mode [ 95.897357][ T8375] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 95.901669][ T8375] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 95.906200][ T8375] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 95.910983][ T8375] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 95.925886][ T8375] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.928575][ T8375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.930983][ T8375] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.933802][ T8375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.955044][ T8375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.962037][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.965006][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.980278][ T8375] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.985204][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.987568][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.992560][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.995013][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.049837][ T8424] netlink: 16 bytes leftover after parsing attributes in process `syz.4.688'. [ 96.105164][ T8375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.232278][ T8375] veth0_vlan: entered promiscuous mode [ 96.238974][ T8375] veth1_vlan: entered promiscuous mode [ 96.256757][ T8375] veth0_macvtap: entered promiscuous mode [ 96.261655][ T8375] veth1_macvtap: entered promiscuous mode [ 96.275468][ T8375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.283662][ T8375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.290779][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.293767][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.297440][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.300730][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.327290][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.329903][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.338493][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.341817][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.379875][ T8434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.434714][ T8437] netlink: 32 bytes leftover after parsing attributes in process `syz.1.689'. [ 96.438884][ T8437] netlink: 32 bytes leftover after parsing attributes in process `syz.1.689'. [ 96.468669][ T8439] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 96.726820][ T5982] Bluetooth: hci3: command 0x0c1a tx timeout [ 96.817005][ T5982] Bluetooth: hci2: command 0x0c1a tx timeout [ 96.821873][ T8449] syz.1.694 (8449): drop_caches: 2 [ 96.837028][ T40] kauditd_printk_skb: 1121 callbacks suppressed [ 96.837040][ T40] audit: type=1400 audit(1755758766.648:60892): avc: denied { read write } for pid=7332 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.849159][ T40] audit: type=1400 audit(1755758766.648:60893): avc: denied { open } for pid=7332 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.857262][ T40] audit: type=1400 audit(1755758766.648:60894): avc: denied { ioctl } for pid=7332 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.865256][ T40] audit: type=1400 audit(1755758766.658:60895): avc: denied { create } for pid=8459 comm="syz.4.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.872150][ T40] audit: type=1400 audit(1755758766.658:60896): avc: denied { read } for pid=8459 comm="syz.4.697" dev="nsfs" ino=4026533907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 96.879889][ T40] audit: type=1400 audit(1755758766.658:60897): avc: denied { open } for pid=8459 comm="syz.4.697" path="net:[4026533907]" dev="nsfs" ino=4026533907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 96.888365][ T40] audit: type=1400 audit(1755758766.658:60898): avc: denied { create } for pid=8459 comm="syz.4.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.895243][ T40] audit: type=1400 audit(1755758766.658:60899): avc: denied { setopt } for pid=8459 comm="syz.4.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.902583][ T40] audit: type=1400 audit(1755758766.658:60900): avc: denied { ioctl } for pid=8459 comm="syz.4.697" path="socket:[28762]" dev="sockfs" ino=28762 ioctlcmd=0xf515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.910620][ T8467] random: crng reseeded on system resumption [ 96.910635][ T40] audit: type=1400 audit(1755758766.658:60901): avc: denied { read } for pid=8459 comm="syz.4.697" dev="nsfs" ino=4026533907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 96.914688][ T8470] netlink: 24 bytes leftover after parsing attributes in process `syz.1.698'. [ 96.924401][ T8469] futex_wake_op: syz.4.700 tries to shift op by -1; fix this program [ 96.973800][ T8474] afs: Unknown parameter 'dynv [ 96.973800][ T8474] mœú8<ú{¿YkY ãA}’¾‡Ý@k'îEk \©1H@μ)cï^Og2îr‡85þ8Ûdz!€”Wo†²o„Ž1GÑÀ¶•åU}G0ìÿÎwÍ}«‰' [ 97.058233][ T8480] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 97.129300][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.708'. [ 97.319775][ T8495] program syz.4.709 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.324084][ T8495] ata1.00: non-matching transfer count (0/2304) [ 97.395429][ T72] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.447700][ T72] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.501454][ T72] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.532383][ T8525] overlayfs: failed to resolve './file0': -2 [ 97.568718][ T8533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.571486][ T8533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.574929][ T8533] netlink: 'syz.6.717': attribute type 1 has an invalid length. [ 97.581139][ T8530] input: syz1 as /devices/virtual/input/input10 [ 97.591994][ T8533] geneve2: entered promiscuous mode [ 97.593852][ T8533] geneve2: entered allmulticast mode [ 97.607237][ T5982] Bluetooth: hci1: command tx timeout [ 97.657795][ T72] bridge_slave_1: left allmulticast mode [ 97.659636][ T72] bridge_slave_1: left promiscuous mode [ 97.661460][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.669063][ T72] bridge_slave_0: left allmulticast mode [ 97.670886][ T72] bridge_slave_0: left promiscuous mode [ 97.673319][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.742315][ T8547] comedi comedi2: dmm32at: I/O port conflict (0x9,16) [ 97.746249][ T8541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8541 comm=syz.0.719 [ 97.787783][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.792722][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.798398][ T72] bond0 (unregistering): Released all slaves [ 97.839772][ T838] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 97.976910][ T838] usb 11-1: device descriptor read/64, error -71 [ 98.057360][ T72] hsr_slave_0: left promiscuous mode [ 98.059803][ T72] hsr_slave_1: left promiscuous mode [ 98.062837][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.065392][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.070745][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.074208][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.079559][ T72] veth1_macvtap: left promiscuous mode [ 98.081482][ T72] veth0_macvtap: left promiscuous mode [ 98.083970][ T72] veth1_vlan: left promiscuous mode [ 98.085754][ T72] veth0_vlan: left promiscuous mode [ 98.171521][ T72] team0 (unregistering): Port device team_slave_1 removed [ 98.179121][ T72] team0 (unregistering): Port device team_slave_0 removed [ 98.216814][ T838] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 98.356858][ T838] usb 11-1: device descriptor read/64, error -71 [ 98.478588][ T838] usb usb11-port1: attempt power cycle [ 98.769027][ T7087] libceph: connect (1)[c::]:6789 error -101 [ 98.771826][ T7087] libceph: mon0 (1)[c::]:6789 connect error [ 98.816786][ T838] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 98.837779][ T838] usb 11-1: device descriptor read/8, error -71 [ 98.880142][ T7087] libceph: connect (1)[c::]:6789 error -101 [ 98.882741][ T7087] libceph: mon0 (1)[c::]:6789 connect error [ 99.027150][ T7087] libceph: connect (1)[c::]:6789 error -101 [ 99.030166][ T7087] libceph: mon0 (1)[c::]:6789 connect error [ 99.086798][ T838] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 99.117606][ T838] usb 11-1: device descriptor read/8, error -71 [ 99.147071][ T7087] libceph: connect (1)[c::]:6789 error -101 [ 99.149854][ T7087] libceph: mon0 (1)[c::]:6789 connect error [ 99.159088][ T8616] netlink: 'syz.4.730': attribute type 1 has an invalid length. [ 99.175468][ T8616] 8021q: adding VLAN 0 to HW filter on device bond3 [ 99.178774][ T8616] bond2: (slave bond3): making interface the new active one [ 99.181369][ T8616] bond2: (slave bond3): Enslaving as an active interface with an up link [ 99.186198][ T8616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.730'. [ 99.191758][ T8616] netlink: 'syz.4.730': attribute type 1 has an invalid length. [ 99.193156][ T8619] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 99.217711][ T8625] dummy0: entered promiscuous mode [ 99.237050][ T838] usb usb11-port1: unable to enumerate USB device [ 99.499607][ T8654] binder: 8653:8654 unknown command 0 [ 99.501316][ T8654] binder: 8653:8654 ioctl c0306201 200000000080 returned -22 [ 99.526850][ T6053] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 99.531537][ T8654] binder: 8653:8654 ioctl 3ba0 200000000440 returned -22 [ 99.534028][ T8654] binder: 8653:8654 ioctl c0306201 200000000540 returned -22 [ 99.546984][ T7087] libceph: connect (1)[c::]:6789 error -101 [ 99.549064][ T7087] libceph: mon0 (1)[c::]:6789 connect error [ 99.594104][ T8594] ceph: No mds server is up or the cluster is laggy [ 99.594273][ T8599] ceph: No mds server is up or the cluster is laggy [ 99.676822][ T6053] usb 9-1: Using ep0 maxpacket: 8 [ 99.680325][ T6053] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 99.683448][ T6053] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.687425][ T6053] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 99.691259][ T6053] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.695215][ T6053] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.696874][ T5982] Bluetooth: hci1: command tx timeout [ 99.699718][ T6053] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 99.704785][ T6053] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.919531][ T6053] usb 9-1: usb_control_msg returned -32 [ 99.921778][ T6053] usbtmc 9-1:16.0: can't read capabilities [ 100.052733][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.747'. [ 100.177973][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.752'. [ 100.206006][ T8696] bond5 (unregistering): Released all slaves [ 100.492705][ T8730] netlink: 40 bytes leftover after parsing attributes in process `syz.1.761'. [ 100.528413][ T8732] netlink: 68 bytes leftover after parsing attributes in process `syz.0.762'. [ 100.536506][ T8732] IPv6: sit1: Disabled Multicast RS [ 100.539686][ T8732] sit1: entered allmulticast mode [ 100.631860][ T840] usb 9-1: USB disconnect, device number 10 [ 100.653260][ T8747] 9pnet: Unknown protocol version 9p20\++} [ 100.653326][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.6.765'. [ 100.891163][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'. [ 101.106789][ T840] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 101.256791][ T840] usb 9-1: Using ep0 maxpacket: 8 [ 101.259533][ T840] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.262714][ T840] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.265823][ T840] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.269258][ T840] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.273363][ T840] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 101.276169][ T840] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.480165][ T5982] Bluetooth: hci3: unexpected subevent 0x12 length: 122 > 5 [ 101.518258][ T8760] tipc: Started in network mode [ 101.519906][ T8760] tipc: Node identity , cluster identity 4711 [ 101.522315][ T8760] tipc: Failed to obtain node identity [ 101.524656][ T8760] tipc: Enabling of bearer rejected, failed to enable media [ 101.531065][ T840] usb 9-1: GET_CAPABILITIES returned 0 [ 101.532840][ T840] usbtmc 9-1:16.0: can't read capabilities [ 101.551882][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.774'. [ 101.572460][ T8770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.650282][ T8776] netlink: 'syz.0.776': attribute type 1 has an invalid length. [ 101.726786][ T6053] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 101.738808][ T840] usb 9-1: USB disconnect, device number 11 [ 101.766832][ T5982] Bluetooth: hci1: command tx timeout [ 101.817680][ T8786] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 101.853187][ T40] kauditd_printk_skb: 1283 callbacks suppressed [ 101.853205][ T40] audit: type=1400 audit(1755758771.658:62185): avc: denied { read write } for pid=5977 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.864324][ T8794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.780'. [ 101.865953][ T40] audit: type=1400 audit(1755758771.658:62186): avc: denied { open } for pid=5977 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.877972][ T40] audit: type=1400 audit(1755758771.658:62187): avc: denied { ioctl } for pid=5977 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.888172][ T40] audit: type=1400 audit(1755758771.658:62188): avc: denied { create } for pid=8793 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.888601][ T6053] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 101.896627][ T40] audit: type=1400 audit(1755758771.658:62189): avc: denied { write } for pid=8793 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.899533][ T6053] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 101.899547][ T6053] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 101.899571][ T6053] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 101.899585][ T6053] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 101.900619][ T6053] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 101.907646][ T40] audit: type=1400 audit(1755758771.658:62190): avc: denied { read } for pid=8793 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.911166][ T6053] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 101.914082][ T40] audit: type=1400 audit(1755758771.658:62191): avc: denied { ioctl } for pid=8793 comm="syz.0.780" path="socket:[29288]" dev="sockfs" ino=29288 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.917451][ T6053] usb 6-1: Product: syz [ 101.917461][ T6053] usb 6-1: Manufacturer: syz [ 101.919678][ T6053] cdc_wdm 6-1:1.0: skipping garbage [ 101.920887][ T40] audit: type=1400 audit(1755758771.678:62192): avc: denied { read } for pid=8793 comm="syz.0.780" dev="nsfs" ino=4026533004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 101.923705][ T6053] cdc_wdm 6-1:1.0: skipping garbage [ 101.924835][ T6053] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 101.929316][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'. [ 101.930215][ T40] audit: type=1400 audit(1755758771.678:62193): avc: denied { open } for pid=8793 comm="syz.0.780" path="net:[4026533004]" dev="nsfs" ino=4026533004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 101.930236][ T40] audit: type=1400 audit(1755758771.678:62194): avc: denied { create } for pid=8793 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.974121][ T6053] cdc_wdm 6-1:1.0: Unknown control protocol [ 102.107559][ T8797] @: renamed from vlan0 (while UP) [ 102.120485][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 102.122647][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 102.124794][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 102.126896][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 102.129006][ T6053] usb 6-1: USB disconnect, device number 11 [ 102.133313][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.6.782'. [ 102.140073][ T8799] kvm: kvm [8798]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000004) [ 102.149174][ T8799] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.151995][ T8799] bond0: (slave bond1): Enslaving as an active interface with an up link [ 102.414349][ T8809] netlink: 'syz.0.786': attribute type 1 has an invalid length. [ 102.431589][ T8809] veth5: entered promiscuous mode [ 102.530301][ T8817] usb usb1: usbfs: process 8817 (syz.6.789) did not claim interface 0 before use [ 102.552728][ T8820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.565059][ T34] IPVS: starting estimator thread 0... [ 102.569920][ T8822] tipc: Started in network mode [ 102.572269][ T8822] tipc: Node identity ac1414aa, cluster identity 4711 [ 102.575515][ T8822] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 102.578766][ T8822] tipc: Enabled bearer , priority 10 [ 102.656891][ T8824] IPVS: using max 26 ests per chain, 62400 per kthread [ 102.706887][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 102.856839][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 102.903331][ T8840] raw_sendmsg: syz.1.796 forgot to set AF_INET. Fix it! [ 102.996829][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 103.106359][ T8847] "syz.1.799" (8847) uses obsolete ecb(arc4) skcipher [ 103.107684][ T8851] syzkaller1: entered promiscuous mode [ 103.111395][ T8851] syzkaller1: entered allmulticast mode [ 103.136856][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 103.226381][ T8851] syz.4.800 (8851) used greatest stack depth: 19800 bytes left [ 103.250657][ T8868] overlayfs: missing 'workdir' [ 103.276889][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 103.342359][ T8881] trusted_key: encrypted_key: master key parameter is missing [ 103.416871][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 103.556774][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 103.696825][ T6053] tipc: Node number set to 2886997162 [ 103.836786][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 103.857533][ T5982] Bluetooth: hci1: command tx timeout [ 103.943925][ T8907] sp0: Synchronizing with TNC [ 103.947415][ T8907] sp0: Found TNC [ 103.953413][ T8906] [U] è` [ 104.139881][ T8920] kvm: apic: phys broadcast and lowest prio [ 104.279044][ T8930] netlink: 'syz.1.820': attribute type 29 has an invalid length. [ 104.304770][ T8935] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 104.436826][ T7087] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 104.598436][ T7087] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 104.602468][ T7087] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 104.606007][ T7087] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 104.610236][ T7087] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.615708][ T8917] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 104.620642][ T7087] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 104.676762][ T5974] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 104.820064][ T7087] usb 11-1: USB disconnect, device number 6 [ 104.826815][ T5974] usb 6-1: Using ep0 maxpacket: 32 [ 104.830974][ T5974] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 104.833724][ T5974] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 104.836436][ T5974] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 104.839807][ T5974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.843624][ T5974] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 104.848055][ T5974] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 104.852272][ T5974] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 104.855157][ T5974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.858859][ T5974] usb 6-1: config 0 descriptor?? [ 105.065993][ T5974] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 105.070861][ T5974] usb 6-1: USB disconnect, device number 12 [ 105.075516][ T5974] usblp0: removed [ 105.396864][ T7087] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 105.499428][ T8976] __nla_validate_parse: 5 callbacks suppressed [ 105.499444][ T8976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.829'. [ 105.506814][ T34] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 105.559056][ T7087] usb 11-1: Using ep0 maxpacket: 16 [ 105.563325][ T7087] usb 11-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 105.567689][ T7087] usb 11-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 105.571870][ T7087] usb 11-1: config 1 interface 0 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 105.576238][ T7087] usb 11-1: config 1 interface 0 has no altsetting 0 [ 105.582474][ T7087] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 105.586322][ T7087] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.589729][ T7087] usb 11-1: Product: syz [ 105.591532][ T7087] usb 11-1: Manufacturer: syz [ 105.593553][ T7087] usb 11-1: SerialNumber: syz [ 105.600463][ T8960] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 105.677115][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 105.685439][ T34] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 105.691360][ T34] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 105.694915][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 105.703550][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 105.708442][ T34] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 105.712286][ T34] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 105.718638][ T34] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 105.723303][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.728671][ T34] usb 6-1: config 0 descriptor?? [ 105.763550][ T8997] netlink: 'syz.4.836': attribute type 2 has an invalid length. [ 105.766606][ T8997] netlink: 'syz.4.836': attribute type 1 has an invalid length. [ 105.807597][ T7087] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 105.822913][ T9004] netlink: 268 bytes leftover after parsing attributes in process `syz.0.838'. [ 105.831389][ T9004] bridge_slave_0: left allmulticast mode [ 105.833283][ T9004] bridge_slave_0: left promiscuous mode [ 105.835129][ T9004] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.840513][ T9004] bridge_slave_1: left allmulticast mode [ 105.842446][ T9004] bridge_slave_1: left promiscuous mode [ 105.844353][ T9004] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.851141][ T9004] team0: Port device team_slave_0 removed [ 105.855167][ T9004] team0: Port device team_slave_1 removed [ 105.862975][ T9004] bond0: (slave geneve2): Releasing active interface [ 105.867970][ T9004] bond1: (slave geneve3): Releasing active interface [ 105.872624][ T8997] sch_fq: defrate 0 ignored. [ 105.875446][ T1144] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 105.880713][ T1144] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 105.884019][ T1144] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 105.887739][ T1144] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 105.892800][ T9004] team0: Mode changed to "loadbalance" [ 105.919432][ T8997] kvm: pic: non byte write [ 106.007486][ T9016] overlay: ./bus is not a directory [ 106.060645][ T8960] usblp0:failed reading printer status (-32) [ 106.069459][ T9027] netlink: 68 bytes leftover after parsing attributes in process `syz.4.843'. [ 106.074207][ T6052] usb 11-1: USB disconnect, device number 7 [ 106.081192][ T6052] usblp0: removed [ 106.137027][ T34] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 106.141971][ T34] usb 6-1: USB disconnect, device number 13 [ 106.145213][ T34] usblp0: removed [ 106.224423][ T9053] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.847'. [ 106.318747][ T9060] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 106.793228][ T9120] program syz.1.857 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.796270][ T9120] ata1.00: invalid transfer count 0 [ 106.865572][ T40] kauditd_printk_skb: 1365 callbacks suppressed [ 106.865587][ T40] audit: type=1400 audit(1755758776.668:63560): avc: denied { read write } for pid=8375 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.885223][ T9137] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 106.888623][ T9137] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 106.899763][ T40] audit: type=1400 audit(1755758776.668:63561): avc: denied { open } for pid=8375 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.909451][ T40] audit: type=1400 audit(1755758776.668:63562): avc: denied { ioctl } for pid=8375 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.916340][ T9141] binder: 9139:9141 ioctl c0306201 200000000080 returned -14 [ 106.928732][ T40] audit: type=1400 audit(1755758776.688:63563): avc: denied { read } for pid=9033 comm="syz.4.844" dev="nsfs" ino=4026533907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 106.935365][ T40] audit: type=1400 audit(1755758776.688:63564): avc: denied { open } for pid=9033 comm="syz.4.844" path="net:[4026533907]" dev="nsfs" ino=4026533907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 106.952336][ T40] audit: type=1400 audit(1755758776.688:63565): avc: denied { create } for pid=9033 comm="syz.4.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.959865][ T40] audit: type=1400 audit(1755758776.688:63566): avc: denied { read write } for pid=5969 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.970776][ T9147] audit: audit_backlog=65 > audit_backlog_limit=64 [ 106.972921][ T9147] audit: audit_lost=46 audit_rate_limit=0 audit_backlog_limit=64 [ 106.975342][ T40] audit: type=1400 audit(1755758776.688:63567): avc: denied { read write open } for pid=5969 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.011663][ T9157] netlink: 'syz.1.867': attribute type 1 has an invalid length. [ 107.090556][ T9178] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.872'. [ 107.268594][ T9195] __vm_enough_memory: pid: 9195, comm: syz.6.877, bytes: 21199879299072 not enough memory for the allocation [ 107.314189][ T9171] ------------[ cut here ]------------ [ 107.315945][ T9171] WARNING: CPU: 1 PID: 9171 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 107.319419][ T9171] Modules linked in: [ 107.321045][ T9171] CPU: 1 UID: 0 PID: 9171 Comm: syz.1.871 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 107.325910][ T9171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.329913][ T9171] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 107.332012][ T9171] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 cf 9c 81 09 83 fe 0a 0f 86 0a fe ff ff 80 3d bd 9d 7e 0e 00 75 0b c6 05 b4 9d 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 107.339100][ T9171] RSP: 0018:ffffc9000589f7f0 EFLAGS: 00010246 [ 107.341325][ T9171] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 107.344349][ T9171] RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000000000040d40 [ 107.347193][ T9171] RBP: 000000000000000d R08: 0000000000000005 R09: 0000000000000009 [ 107.350361][ T9171] R10: 000000000000000d R11: 0000000000000001 R12: 0000000000040d40 [ 107.352862][ T9171] R13: 1ffff92000b13f13 R14: ffffffff9ae78a24 R15: 000000000000000d [ 107.355531][ T9171] FS: 00007fa59a4036c0(0000) GS:ffff8880d67bc000(0000) knlGS:0000000000000000 [ 107.359387][ T9171] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.361508][ T9171] CR2: 000000110c3b2c23 CR3: 0000000049f8a000 CR4: 0000000000352ef0 [ 107.364465][ T9171] Call Trace: [ 107.365575][ T9171] [ 107.366617][ T9171] ? do_syscall_64+0xcd/0x4c0 [ 107.368548][ T9171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.370482][ T9171] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 107.372615][ T9171] ? rcu_is_watching+0x12/0xc0 [ 107.374226][ T9171] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 107.376148][ T9171] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.378301][ T9171] ? policy_nodemask+0xea/0x4e0 [ 107.380203][ T9171] alloc_pages_mpol+0x1fb/0x550 [ 107.381909][ T9171] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 107.384173][ T9171] ? v9fs_fid_get_acl+0x7a/0x120 [ 107.385824][ T9171] ___kmalloc_large_node+0xed/0x160 [ 107.388007][ T9171] ? v9fs_fid_get_acl+0x7a/0x120 [ 107.389879][ T9171] __kmalloc_large_node_noprof+0x1c/0x70 [ 107.391709][ T9171] __kmalloc_noprof.cold+0xc/0x61 [ 107.393395][ T9171] ? __pfx_iget5_locked+0x10/0x10 [ 107.395078][ T9171] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 107.397234][ T9171] ? p9_req_put+0x1c6/0x250 [ 107.398869][ T9171] v9fs_fid_get_acl+0x7a/0x120 [ 107.400841][ T9171] v9fs_get_acl+0xee/0x530 [ 107.402503][ T9171] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 107.404333][ T9171] v9fs_mount+0x4fd/0xa90 [ 107.405725][ T9171] ? __pfx_v9fs_mount+0x10/0x10 [ 107.407403][ T9171] ? cap_capable+0xb3/0x250 [ 107.408906][ T9171] ? __pfx_v9fs_mount+0x10/0x10 [ 107.410464][ T9171] legacy_get_tree+0x10c/0x220 [ 107.412008][ T9171] vfs_get_tree+0x8b/0x340 [ 107.413570][ T9171] path_mount+0x1513/0x2000 [ 107.415039][ T9171] ? __pfx_path_mount+0x10/0x10 [ 107.416624][ T9171] ? kmem_cache_free+0x2d1/0x4d0 [ 107.418280][ T9171] ? putname+0x154/0x1a0 [ 107.419657][ T9171] ? putname+0x154/0x1a0 [ 107.421133][ T9171] ? __x64_sys_mount+0x28d/0x310 [ 107.422733][ T9171] __x64_sys_mount+0x28d/0x310 [ 107.424473][ T9171] ? __pfx___x64_sys_mount+0x10/0x10 [ 107.426447][ T9171] do_syscall_64+0xcd/0x4c0 [ 107.428435][ T9171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.430591][ T9171] RIP: 0033:0x7fa59958ebe9 [ 107.432115][ T9171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.438368][ T9171] RSP: 002b:00007fa59a403038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 107.441491][ T9171] RAX: ffffffffffffffda RBX: 00007fa5997b5fa0 RCX: 00007fa59958ebe9 [ 107.444215][ T9171] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 107.447479][ T9171] RBP: 00007fa599611e19 R08: 0000200000000580 R09: 0000000000000000 [ 107.450504][ T9171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.453103][ T9171] R13: 00007fa5997b6038 R14: 00007fa5997b5fa0 R15: 00007fff178942a8 [ 107.455671][ T9171] [ 107.456770][ T9171] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 107.459032][ T9171] CPU: 1 UID: 0 PID: 9171 Comm: syz.1.871 Not tainted syzkaller #0 PREEMPT(full) [ 107.462356][ T9171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.465947][ T9171] Call Trace: [ 107.467043][ T9171] [ 107.468000][ T9171] dump_stack_lvl+0x3d/0x1f0 [ 107.469504][ T9171] vpanic+0x6e8/0x7a0 [ 107.470794][ T9171] ? __pfx_vpanic+0x10/0x10 [ 107.472387][ T9171] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 107.474367][ T9171] panic+0xca/0xd0 [ 107.475589][ T9171] ? __pfx_panic+0x10/0x10 [ 107.477048][ T9171] check_panic_on_warn+0xab/0xb0 [ 107.478633][ T9171] __warn+0xf6/0x3c0 [ 107.479898][ T9171] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 107.482024][ T9171] report_bug+0x3c3/0x580 [ 107.483455][ T9171] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 107.485472][ T9171] handle_bug+0x184/0x210 [ 107.486904][ T9171] exc_invalid_op+0x17/0x50 [ 107.488388][ T9171] asm_exc_invalid_op+0x1a/0x20 [ 107.489950][ T9171] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 107.492034][ T9171] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 cf 9c 81 09 83 fe 0a 0f 86 0a fe ff ff 80 3d bd 9d 7e 0e 00 75 0b c6 05 b4 9d 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 107.498055][ T9171] RSP: 0018:ffffc9000589f7f0 EFLAGS: 00010246 [ 107.499965][ T9171] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 107.502465][ T9171] RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000000000040d40 [ 107.504973][ T9171] RBP: 000000000000000d R08: 0000000000000005 R09: 0000000000000009 [ 107.507435][ T9171] R10: 000000000000000d R11: 0000000000000001 R12: 0000000000040d40 [ 107.509997][ T9171] R13: 1ffff92000b13f13 R14: ffffffff9ae78a24 R15: 000000000000000d [ 107.512481][ T9171] ? do_syscall_64+0xcd/0x4c0 [ 107.514020][ T9171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.515937][ T9171] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 107.518001][ T9171] ? rcu_is_watching+0x12/0xc0 [ 107.520441][ T9171] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 107.523437][ T9171] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.525932][ T9171] ? policy_nodemask+0xea/0x4e0 [ 107.527874][ T9171] alloc_pages_mpol+0x1fb/0x550 [ 107.529833][ T9171] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 107.531962][ T9171] ? v9fs_fid_get_acl+0x7a/0x120 [ 107.533959][ T9171] ___kmalloc_large_node+0xed/0x160 [ 107.536033][ T9171] ? v9fs_fid_get_acl+0x7a/0x120 [ 107.538016][ T9171] __kmalloc_large_node_noprof+0x1c/0x70 [ 107.540369][ T9171] __kmalloc_noprof.cold+0xc/0x61 [ 107.542392][ T9171] ? __pfx_iget5_locked+0x10/0x10 [ 107.544443][ T9171] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 107.546896][ T9171] ? p9_req_put+0x1c6/0x250 [ 107.548723][ T9171] v9fs_fid_get_acl+0x7a/0x120 [ 107.550629][ T9171] v9fs_get_acl+0xee/0x530 [ 107.552409][ T9171] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 107.554620][ T9171] v9fs_mount+0x4fd/0xa90 [ 107.556341][ T9171] ? __pfx_v9fs_mount+0x10/0x10 [ 107.558282][ T9171] ? cap_capable+0xb3/0x250 [ 107.560088][ T9171] ? __pfx_v9fs_mount+0x10/0x10 [ 107.562127][ T9171] legacy_get_tree+0x10c/0x220 [ 107.563691][ T9171] vfs_get_tree+0x8b/0x340 [ 107.565128][ T9171] path_mount+0x1513/0x2000 [ 107.566577][ T9171] ? __pfx_path_mount+0x10/0x10 [ 107.568246][ T9171] ? kmem_cache_free+0x2d1/0x4d0 [ 107.569953][ T9171] ? putname+0x154/0x1a0 [ 107.571313][ T9171] ? putname+0x154/0x1a0 [ 107.572695][ T9171] ? __x64_sys_mount+0x28d/0x310 [ 107.574288][ T9171] __x64_sys_mount+0x28d/0x310 [ 107.575808][ T9171] ? __pfx___x64_sys_mount+0x10/0x10 [ 107.577499][ T9171] do_syscall_64+0xcd/0x4c0 [ 107.578979][ T9171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.580858][ T9171] RIP: 0033:0x7fa59958ebe9 [ 107.582264][ T9171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.590053][ T9171] RSP: 002b:00007fa59a403038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 107.592720][ T9171] RAX: ffffffffffffffda RBX: 00007fa5997b5fa0 RCX: 00007fa59958ebe9 [ 107.595272][ T9171] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 107.597749][ T9171] RBP: 00007fa599611e19 R08: 0000200000000580 R09: 0000000000000000 [ 107.600200][ T9171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.602811][ T9171] R13: 00007fa5997b6038 R14: 00007fa5997b5fa0 R15: 00007fff178942a8 [ 107.606047][ T9171] [ 107.608137][ T9171] Kernel Offset: disabled [ 107.609554][ T9171] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:46:17 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000003 RBX=0000000000000001 RCX=1ffff1100d4847f8 RDX=0000000000001297 RSI=0000000000000003 RDI=ffff88801ce90c3c RBP=ffffc90004357840 RSP=ffffc90004357668 R8 =dffffc0000000000 R9 =0000000000000000 R10=0000000000000000 R11=ffffffff93d7e300 R12=ffffffff93d7e300 R13=ffff88801ce90c00 R14=ffff88806a53a300 R15=dffffc0000000000 RIP=ffffffff818f0fb5 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe23a7bac80 ffffffff 00c00000 GS =0000 ffff8880d66bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c33cbdf CR3=00000000326e1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000000300000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4ad1e6eb 00007fff4ad1e6eb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4ad1ebf0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4ad1ebf0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 617379733a746f6f 723d747865746e6f 6373203935363d6f 6e69202273667000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6173737330746565 7237747265746465 6373203335363765 6463202273667000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69617420746f4e20 3137382e312e7a79 73203a6d6d6f4320 31373139203a4449 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6f697461636f6c 6c61206568742072 6f662079726f6d65 6d206867756f6e65 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20746f6e20323730 3939323937383939 313132203a736574 7962202c3737382e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 362e7a7973203a6d 6d6f63202c353931 39203a646970203a 79726f6d656d5f68 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 67756f6e655f6d76 5f5f205d35393139 54205b5d34393538 36322e3730312020 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f723d747865746e 6f6373203935363d 6f6e692022736670 6d74766564223d76 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000049 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856437c5 RDI=ffffffff9b10e020 RBP=ffffffff9b10dfe0 RSP=ffffc9000589f160 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552031203a555043 R12=0000000000000000 R13=0000000000000049 R14=ffffffff9b10dfe0 R15=ffffffff85643760 RIP=ffffffff856437ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa59a4036c0 ffffffff 00c00000 GS =0000 ffff8880d67bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3b2c23 CR3=0000000049f8a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002000002 Opmask01=0000000000110101 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055cd037cf9c0 000055cd037cf9c0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055cd037b2f60 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8a2e7f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff0000000000ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a15d5 2a2a2a2a2a415943 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e754f4645425d05 1a474f475a054149 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69646165520073 25203a656c696620 7974706d6520676e 697070696b530065 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4245484d4952005f 090c164940454a0c 55585c41490c4b42 455c5c4547530049 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4345535500302f30 2f303d4550595400 6273753d4d455453 5953425553003730 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 202a3f372f300043 56431245237c7b73 47733171021a1110 18151010074e7e30 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7e7f7f7f7f7e3f7f 7f777f7d7f7e7f77 7f7f7f7f377b7f7f 7f7f77773f6f7f7f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055cd037c7460 000055cd037c73e0 000055cd037ba730 000055cd037cefc0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3130323d00554e51 4500373836363230 3630313d44450031 313130323d4d494e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3130303100302f30 2f00373530363200 3530313d44450031 313130323d003730 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000400 RBX=0000000000000002 RCX=ffffc900073e1000 RDX=0000000000080000 RSI=ffffffff81413b81 RDI=0000000000000005 RBP=ffffc90005c7fc10 RSP=ffffc90005c7faa0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=dffffc0000000000 R13=ffff8880578f2c38 R14=ffff8880578f2940 R15=ffff8880578f2978 RIP=ffffffff81413b86 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f424d1db6c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d68bc000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000ffff IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000024dfc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0041 [ST=0] FTW=01 MXCSR=00001f80 FPR0=c000000000000000 ffff FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe278841d6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe278841d6 00007ffe278841dc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f424c412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f424c412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f424c412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f424c412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f424c412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f424c412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffffff8f17e48f RCX=ffffffff84eb9575 RDX=0000000000000010 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000002 RSP=ffffc900059ee978 R8 =0000000000000005 R9 =0000000000000004 R10=0000000000000001 R11=ffff8880578a0030 R12=0000000000000012 R13=dffffc0000000000 R14=0000000000000010 R15=ffff8880578a0000 RIP=ffffffff81bb8ac0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe7863f16c0 ffffffff 00c00000 GS =0000 ffff8880d69bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa59a3e2d58 CR3=000000003162a000 CR4=00352ef0 DR0=0000000100000000 DR1=0000000000001000 DR2=0000000000000009 DR3=0000000000000800 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000000300000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4ad1e6eb 00007fff4ad1e6eb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4ad1ebf0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4ad1ebf0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 696d696c5f657461 725f746964756120 36343d74736f6c5f 7469647561203a00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6367636655657461 7255746364756120 3634377473656655 7463647561203000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746120676e697372 6170207265746661 207265766f746665 6c20736574796220 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d72657020656c69 665f6b6c623d7373 616c637420745f65 63697665645f6b73 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d72657020656c69 665f6b6c623d7373 616c637420745f65 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 63697665645f6b73 69645f6465786966 3a725f7463656a62 6f3a755f6d657473 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 79733d747865746e 6f637420745f6d64 617379733a725f6d 64617379733a746f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f723d747865746e 6f6373203935363d 6f6e692022736670 6d74766564223d76 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000