last executing test programs: 2m47.04543283s ago: executing program 3 (id=538): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}]}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c0000002500090122bd7000fcffffff510000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) recvmmsg(r2, &(0x7f0000007700)=[{{&(0x7f0000000140)=@can, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/241, 0xf1}], 0x1}, 0x9}, {{&(0x7f00000002c0)=@un=@abs, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000380)=""/72, 0x48}, {&(0x7f0000000840)=""/236, 0xec}, {&(0x7f0000000940)=""/157, 0x9d}, {&(0x7f0000000a00)=""/129, 0x81}, {&(0x7f0000000540)=""/1, 0x1}, {&(0x7f0000000640)=""/123, 0x7b}, {&(0x7f0000000700)}], 0xa, &(0x7f0000000c80)=""/113, 0x71}, 0x6}, {{&(0x7f0000000d00)=@can, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000ac0)=""/61, 0x3d}], 0x1}, 0x6}, {{&(0x7f0000000dc0)=@phonet, 0x80, &(0x7f0000001340)=[{&(0x7f0000000f00)=""/147, 0x93}, {&(0x7f0000000fc0)=""/237, 0xed}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/226, 0xe2}, {&(0x7f00000011c0)=""/97, 0x61}, {&(0x7f0000001240)=""/253, 0xfd}], 0x6, &(0x7f00000013c0)=""/157, 0x9d}, 0x7}, {{&(0x7f0000001480)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001500)=""/68, 0x44}, {&(0x7f0000001580)=""/230, 0xe6}, {&(0x7f0000000e40)=""/34, 0x22}, {&(0x7f0000001680)=""/36, 0x24}, {&(0x7f00000016c0)=""/154, 0x9a}, {&(0x7f0000001780)=""/38, 0x26}], 0x6, &(0x7f0000001840)=""/229, 0xe5}, 0x2}, {{&(0x7f0000001940)=@alg, 0x80, &(0x7f0000001a40)=[{&(0x7f00000019c0)=""/95, 0x5f}], 0x1, &(0x7f0000001a80)=""/95, 0x5f}, 0x9}, {{&(0x7f0000001b00)=@caif, 0x80, &(0x7f0000005e40)=[{&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000004e00)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/68, 0x44}, {&(0x7f0000001c00)=""/161, 0xa1}, {&(0x7f0000001cc0)=""/249, 0xf9}, {&(0x7f0000005e00)=""/17, 0x11}], 0x7, &(0x7f0000005ec0)=""/100, 0x64}, 0x9}, {{&(0x7f0000005f40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000006100)=[{&(0x7f0000005fc0)=""/64, 0x40}, {&(0x7f0000006000)=""/221, 0xdd}], 0x2, &(0x7f0000006140)=""/203, 0xcb}, 0x81}, {{&(0x7f0000006240)=@qipcrtr, 0x80, &(0x7f0000007600)=[{&(0x7f00000062c0)=""/102, 0x66}, {&(0x7f0000006340)=""/138, 0x8a}, {&(0x7f0000006400)=""/123, 0x7b}, {&(0x7f0000006480)=""/4096, 0x1000}, {&(0x7f0000007480)=""/80, 0x50}, {&(0x7f0000007500)=""/67, 0x43}, {&(0x7f0000007580)=""/99, 0x63}], 0x7, &(0x7f0000007680)=""/69, 0x45}, 0xfffffff3}], 0x9, 0x41, 0x0) 2m46.986321026s ago: executing program 3 (id=541): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000200)={0x1b0001, 0x0, {[0x2, 0x8, 0x2, 0x7fff, 0x3, 0x2, 0x5]}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x4000, 0xb, 0xa, 0xfffffffc, 0x0, [{0xc, 0x5, 0x7, '\x00', 0xb4}, {0x83, 0x7, 0x4, '\x00', 0x4b}, {0xfc, 0xe, 0x7, '\x00', 0x40}, {0x0, 0x9, 0x40, '\x00', 0x7}, {0x8, 0xfa, 0x8, '\x00', 0xa8}, {0x6, 0x5, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x8, 0x8c, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x8}, {0x5, 0xdc, 0x6, '\x00', 0x4}, {0x1, 0xd, 0x15, '\x00', 0x8}, {0x8, 0x7, 0x6, '\x00', 0x7}, {0x4, 0x8a, 0x80, '\x00', 0xdd}, {0x3, 0xf1, 0x6, '\x00', 0x9}, {0x7, 0x3, 0xc, '\x00', 0xfd}, {0x6, 0x9b, 0x42, '\x00', 0x23}, {0x7, 0x2, 0x4, '\x00', 0x4}, {0xef, 0x6, 0x9}, {0xf, 0x6, 0x6, '\x00', 0xb}, {0x9, 0x3, 0x3, '\x00', 0x5}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x40, '\x00', 0x6}, {0x15, 0xfd, 0x7, '\x00', 0xff}, {0x92, 0x6, 0xfa, '\x00', 0x42}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m46.872365362s ago: executing program 3 (id=547): r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f00000000c0)=0x2) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x80, 0x8, 0x7ff, 0x0, 0x0, 0xf421, 0x0}) 2m46.798353595s ago: executing program 3 (id=548): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f0000000040)={@private2, 0x60}) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') statx(0xffffffffffffffff, 0x0, 0x4000, 0x100, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) lstat(&(0x7f0000001540)='./bus\x00', &(0x7f0000001580)) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x714f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) open(0x0, 0x3f5f41, 0x84) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m46.78934231s ago: executing program 3 (id=551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 2m46.552870461s ago: executing program 3 (id=556): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_PEC(r1, 0x708, 0x40) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000004c0)={0x1, 0x7, 0x1, &(0x7f0000000280)={0x5, "1d27f0db2e1f25eff995475188afe0ebe9bab69516a5e88a718dca33021b22b650"}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000000000000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x29b63}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x10}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}]}}}]}, 0x44}}, 0x0) 2m46.462624843s ago: executing program 32 (id=556): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_PEC(r1, 0x708, 0x40) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000004c0)={0x1, 0x7, 0x1, &(0x7f0000000280)={0x5, "1d27f0db2e1f25eff995475188afe0ebe9bab69516a5e88a718dca33021b22b650"}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000000000000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x29b63}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x10}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}]}}}]}, 0x44}}, 0x0) 1m28.31080933s ago: executing program 2 (id=2081): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x8639671695197dd4, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000005, 0x0, 0x0) 1m28.246335088s ago: executing program 2 (id=2083): syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf8, r2, 0x2, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x894}, 0x20000000) ptrace(0x4206, r1) tkill(r1, 0x12) ptrace(0x4208, r1) ptrace(0x4207, r1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)={0x468, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x44a, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x6c, 0x0, 0x0, @uid}, @nested={0x10e, 0x1c, 0x0, 0x1, [@generic="3b634cd6b17731c87d4d87d9710314fad54b9e79764fa7a0c52bc46dd17b4784a254f337f1be73f1090f3943c260a59c4ca85d92cfca3813ec7a213dd9c5cd107073ec8feb35591a5d7047aabf074686d2c819f4536953656dd956b924aac93d15e7a95033eeafc5486a1b5bd7d48021a11a236424db54376cdcb82daee7b0e94af0341ed82b7a832dd8fc81e101cb08dcd3278b49fbfbc9079712402485739094f40d42108751de787385", @generic="900abe5b168d2c051a4456c42b6a0deaeb99bae8ace6c94ff40b755bae5ab3a7e9be9fc89c589a70cc55a88b7f355ca341eb73c0f5038f87de8f96ac95609dc926ff91bfa0202413ed2c515a79d1c93ae264d5a69446648146c893f3d4c243"]}, @nested={0x29e, 0xb7, 0x0, 0x1, [@typed={0xc, 0x31, 0x0, 0x0, @u64=0x8001}, @nested={0xb1, 0xe3, 0x0, 0x1, [@typed={0x52, 0x67, 0x0, 0x0, @binary="4d8b86c61e536c5aa182c934d64f5d22a261942590f3a2bfe1b4a34355f1604ef9dd8588db0a1fd76837ec43c464f1d47cbda0c3d4f21d9289f656fa737a7fac85df447e86c847857edf28142fdf"}, @generic="e52843be993e0a1d3009f465a4bf06a96c53b4b704b941382acbf81bbfabf4ffb885244caffd81ba7db8d13c49c0234197", @generic="bd7ad78f7a6305b6bed45d67", @typed={0x14, 0x2e, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0x4c}, @nested={0x4, 0x14d}]}, @generic="ecc8397ce737f0590ed030560b1492c63e90457dd255383d1b2d2f9582cb26820290e2b7a231d17607d2c8f49ce563a01c2ec73fada2e75a00ecc1443940778a319642e27ceb08b03176d51b9cf9c4a839e096c53c2bf9691e22e4b5f216cb72fb05f2e69b2d3f1711468541792043fd6d0c666aa1cc6cc9d4b56ac4f5b0749de1b4b10143780b5bc090dcd74f2541cc43c5c44f5b3a5a4122d60cff1419de069d5e85cfa828eb457b5f061b64c2ffb9a9023ed5dc358c4b0286bfacc949742ae27e474c4704053624705ed8227f3f4ff8dd44712a4fe7fbf93f7deaac89", @nested={0xfb, 0x22, 0x0, 0x1, [@nested={0x4, 0xfb}, @nested={0x4, 0x5d}, @generic="d7597eb784d7c6395a91132ed6cb3f2dcbdbd936fca274ef1597ae69340b58eac163496215d1f2203b741114c6cd9087e6c4bb085c0766808a3cd30cb5e7e322a61f9b4fb8a9e6d4dd061a302d3393221d28cece7e918c2ca5b7daaa4729ff949fb7cb5e14d566e5bab6a1d2d945024f0bfd9b678c38ca269cb1c793621931aafdbd2475f8266a21b77b732b2d52278e8add8e88d15066695da08441840d5eac456c798fc7eab081450615eeb77065dfd1fb5b3097eade85a85e84cd7fa68bf7a92e1010291e9d23725ba9472eabd8065baea001b8e17cf9565245f6b747c7bae42128c4742cd63859c622", @nested={0x4, 0x9f}]}]}, @generic="b6a4acff5605d6e8ef43c568cc3fbb7d40f76f7eaac716f9379807cead7cb58036021dfd2e523f4737a6ee97bed4e7d96e0f8110a7c5ffa4d6a1a94a95ba9a683dc934a255d42034468c14d37d6321762a1639026d0bea78e5f180b9d226920e8ff47292a166526d67efe5c5524ed661cf7697189c77639e10eb73f20f8b6edfb616", @typed={0x4, 0xb5}]}, @nested={0x4, 0x2}]}, 0x468}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@RTM_GETMDB={0x18, 0x56, 0x5322e0bc5fded58b, 0x70bd26, 0x25dfdbfb}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) bind$vsock_stream(r4, &(0x7f0000000100), 0x10) 1m28.117696161s ago: executing program 2 (id=2087): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000280)) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) 1m28.05383691s ago: executing program 2 (id=2088): r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) r2 = socket(0x22, 0x2, 0x24) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="20c13d10", 0x4) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="20c13d10", 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 1m28.053204167s ago: executing program 2 (id=2089): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) getsockopt(r2, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RMKDIR(r3, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x40, 0x3, 0x1}}, 0x14) write$char_usb(r3, &(0x7f0000002680)="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", 0xfed) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) syz_kvm_setup_cpu$x86(r6, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000280)="0f01d1ea8000000036000f20e035002000000f22e066ba4300b003ee440f20c0350d000000440f22c00f01cf060f01c40fc7ab677e00000f01c3", 0x3a}], 0x1, 0x4, &(0x7f0000000300)=[@dstype0], 0x1) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="32428b7fe03f2a46d78d641a4434b313bf48656df12148935c1d7c060694dbba8e5ff7caf0993ac3c33a67b6c2fead39629a5892369fbb48de7f0dc6a9d2d9baf71e5d59b40ab0d7e2db3e1779b47f72be220800342fa550f32407beafbf4b3c6e59b8d5adfa8049fe85bf3566fc812016e0d2ada78a5062dc737a45a9005a87b2c8ac4f7ee1f7c5d6"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x62, '\x00', 0x0, @cgroup_skb=0x1, r1}, 0x94) 1m27.834001408s ago: executing program 2 (id=2091): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x7, 0x2, {0x1, '\x00'}}, 0xa) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1e}}], 0x2, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000003c0)={r4, 0x0, 0x20}, 0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={r4}, &(0x7f0000000100)=0x8) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000000)) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x5b, 0xa, 0x0, "b75cbb1844038d2cd97c94fc49f31638b5f9623a74002a5b00", 0x31303553}) 1m11.830011634s ago: executing program 33 (id=2091): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x7, 0x2, {0x1, '\x00'}}, 0xa) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1e}}], 0x2, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000003c0)={r4, 0x0, 0x20}, 0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={r4}, &(0x7f0000000100)=0x8) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000000)) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x5b, 0xa, 0x0, "b75cbb1844038d2cd97c94fc49f31638b5f9623a74002a5b00", 0x31303553}) 56.115476691s ago: executing program 1 (id=2709): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) getrandom(&(0x7f0000000000)=""/84, 0x54, 0x2) (async) madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x15) (async) mlock(&(0x7f0000002000/0x1000)=nil, 0x1000) 55.855902434s ago: executing program 1 (id=2714): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x3, 0x0, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast1, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0xf3a, 0x0) write$binfmt_misc(r9, &(0x7f0000000980), 0xfdef) splice(r6, 0x0, r9, 0x0, 0x81, 0x2) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x3c, r1, 0x1, 0xfffffffe, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0xfffffffc, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x3, 0x1, 0x9}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x38}}, 0x0) 54.506162406s ago: executing program 1 (id=2723): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r0, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {0x6}, @addr={0x7, 0x3}}, {0xd, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0xc}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x8}, {0x3, 0x1}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) 54.505719267s ago: executing program 1 (id=2724): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x89727a31546dcc46, 0x4}) (async) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x89727a31546dcc46, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000940)=[@textreal={0x8, &(0x7f0000000900)="bad00466ed0f01cf0f01c966b90c06000066b87051000066ba000000000f30650fbf340f08360fc7700e660fc732f20f209df2d039", 0x35}], 0x1, 0x6, &(0x7f0000000980)=[@cr0={0x0, 0x40000004}, @efer={0x2, 0xe801}], 0x2) (async) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000940)=[@textreal={0x8, &(0x7f0000000900)="bad00466ed0f01cf0f01c966b90c06000066b87051000066ba000000000f30650fbf340f08360fc7700e660fc732f20f209df2d039", 0x35}], 0x1, 0x6, &(0x7f0000000980)=[@cr0={0x0, 0x40000004}, @efer={0x2, 0xe801}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x1) (async) r7 = fsmount(r6, 0x0, 0x1) fchdir(r5) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000240)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000004c0)='%+9llu \x00'}, 0x20) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="00000400e6ff040000000a00000000000000ea56f69d3e8508c20c6af30b04bf885b97db4c846ac2122d05e7a553c95d94470f7d56fa23b4000000800000000044040f000000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x50) (async) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="00000400e6ff040000000a00000000000000ea56f69d3e8508c20c6af30b04bf885b97db4c846ac2122d05e7a553c95d94470f7d56fa23b4000000800000000044040f000000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x50) memfd_secret(0x0) (async) r12 = memfd_secret(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000040000000000000000000000850002004a0000000890500010000000184500000600000000000000000000004f521000ff0f00ff95000000000000000243375caae2bf3f5a8cfc8a13c82f825e10c3e898a96968fb967df49d2ab180f7e79b78aad5391336e29a064426d832c745c77f0759e30852325ec83df6e68f774ace986f101f38fa1b9df97e74137315e9bb587d"], &(0x7f0000000080)='GPL\x00', 0x8, 0xf3, &(0x7f0000000380)=""/243, 0x41000, 0x11, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f00000000c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x8, 0x8}, 0x10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000600)=[r2, r4, r7, r0, r8, r9, r10, r11, r12], &(0x7f0000000640)=[{0x4, 0x4, 0xe, 0x4}, {0x1, 0x4, 0x7, 0x4}, {0x4, 0x0, 0xa, 0x8}, {0x5, 0x5, 0x6, 0x8}], 0x10, 0x3}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000040000000000000000000000850002004a0000000890500010000000184500000600000000000000000000004f521000ff0f00ff95000000000000000243375caae2bf3f5a8cfc8a13c82f825e10c3e898a96968fb967df49d2ab180f7e79b78aad5391336e29a064426d832c745c77f0759e30852325ec83df6e68f774ace986f101f38fa1b9df97e74137315e9bb587d"], &(0x7f0000000080)='GPL\x00', 0x8, 0xf3, &(0x7f0000000380)=""/243, 0x41000, 0x11, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f00000000c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x8, 0x8}, 0x10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000600)=[r2, r4, r7, r0, r8, r9, r10, r11, r12], &(0x7f0000000640)=[{0x4, 0x4, 0xe, 0x4}, {0x1, 0x4, 0x7, 0x4}, {0x4, 0x0, 0xa, 0x8}, {0x5, 0x5, 0x6, 0x8}], 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) msync(&(0x7f000011f000/0x1000)=nil, 0x1000, 0x6) 54.498644533s ago: executing program 1 (id=2727): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x48c42, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x3, 0x1, 0xdddd1000, 0x1000, &(0x7f0000fe9000/0x1000)=nil}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40084020}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x1108, r4, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac0c, 0xfac0a, 0xfac09, 0xfac05]}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x44, 0x115, "bf1064b3dbb5d5955a5dd3c94b826ddfadbcac8bc3c7a591fe5ab2b870f18f2ede3abe0f6f441c1063ae3dad575f12808964fc1353b44810a114a085120ea820"}, @NL80211_ATTR_PMK={0xa, 0xfe, "4aca9f13a50e"}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, 'M'}, @NL80211_ATTR_FILS_ERP_RRK={0x7, 0xfc, '-nj'}, @NL80211_ATTR_FILS_ERP_RRK={0x25, 0xfc, "1b76249a4d9203b59e02d68faf8fd7f2c38d1659e73fd721a52f513b61bfbd8f36"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "6b5b8d8e32d244df9ede"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "94c8bc67b30e8cf2593534"}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PBSS={0x4}]}, 0x1108}, 0x1, 0x0, 0x0, 0x24000050}, 0x5) (async) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40084020}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x1108, r4, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac0c, 0xfac0a, 0xfac09, 0xfac05]}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x44, 0x115, "bf1064b3dbb5d5955a5dd3c94b826ddfadbcac8bc3c7a591fe5ab2b870f18f2ede3abe0f6f441c1063ae3dad575f12808964fc1353b44810a114a085120ea820"}, @NL80211_ATTR_PMK={0xa, 0xfe, "4aca9f13a50e"}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "9bb4027bfc1e91bf31ab879a89a4d6eaadcf67c552b0a9829ac565f383169cf5389f85c2636d83664f434e750e098dcb1bc4a522fb20e3190e6bf1b337a748950f3713fea0263d3133938ea7ef4f3841cba1397e03dac9e134e3c044fb653bbd8cf6c9de4c1c344811e2313e8e8d458865abe19912e06ddfe20af2dc635e654ed70cd70eec8f24ddb468c3ce566cfc0a882f163d851b0952c140f537bf4e191b29cc5102f520551b473dabf7ba8b5b113e4abdaced52a811eeaf7597bc56480feeda711e1cb720d99fad0f46c1cb308320c850756e85f72009638e13f0abb07602363e1eb5330bf4b8fc81aa4a1558d7096ee92e32ffca7a7f27a78c731fc919c19ca19b949f74caad4a28eb77ce28165c987bcae3efe47c9d37e58933ae25df049de36858632c9cba0ba4f1e19d010cf13099407ce526711cbd133dc1174cb03c99eb3b0d63865797d671232bc672b6121c41f26f795445fd34a7a9afdf1f00efadf2fa092c509d04c92b3e245c715abd04db024ea02e45baeedac42ca4c0194672885b94c60d50ca9a10de1807cee740a05d4407504c3b5cf93cdd4c6aa14886836a9e822a996787ab2220050cb6c0d59c327ec8de562d0a68a01d06470bab7d18cddc31fb34dc87c24abef8f9b5e2332b4c42fcb73b080b554060f76bac9358931a0fbc9ef2cbbfa38170f05854a709c6b51ab392f21e863ac901cb1391d8faf4dca83e96b3a52f54bd02ea46e8149b2f7c4f57402b389253dc26452a879807ebc65904a1fe53c1ba474838715b7c3e171d6ccd55778051021c45068223141b9a50dba7dc13c89dd608dedcd4bd5acd49742de22a44bb9547800d02d3ed0e6a14973d10003986f184ce304e86c9ccd0567244abb3aeea6269bdaf55c051aaf943c73f6fd2077d880964e9cdb970dbddeb95847b77e01bbcbc4d4786619cdd1f539ffd6a45827fceeaa12b2d85ab6deac0016e794c0cce4b47f01d8540c943b69f7a7e9afd2667103ba62fab4bcf70565fb1dfbc9fda16e7799ead1d5e488dee0a3a39d22095ef70ce2496ccf37535c26ed1a02ac6f0b40cb4db41bf0a737d745bc9ab3a08ad395b3231848d2725cf23b7a0c9fbe7a8a155a5ec79583356d6ee0d4e98077819cae6a1999df176aea861576134dffbc207b750cd37f3e8e75eb27d36d3a0d949307cd2ad665b5e592c8204c882da725792f044637bfda5ee7ef76fe509cd56f5f105bd32f8dc2ae949a6e6de7a2cf57cd6bdd60e02df7365cd6ab3bfcaa8d85068f6065b9f4c56cd43da938344249543233b9c4626001a69ad75c827a2e702cf78f22ddf790df817affa60460e76bf8a7fb37594500a4c859a1adcbb0b9ac9e910987685147af79b874892a1c91fc942e156eb00d2d46b6415e2dfba46a6caf0a4b1f758b7b4ec45892d4b4e41891e5bf1e9adac70016e3cfcb82c0d54cbc42d785f2ed4e14e76ca4919a7d9928a9036b8a1fc5037cb98d2a2e8f093d2c430c42f64a064e5720d1689013b4f4a5042812420260291089e09063b7c671ed2d2c781ab39c1be8f4890f1256897e96592f7cf6a46d4787aec3753205fad07188e1886e7ad464ec1e5b98aae73be3d4af88f8844e1e4782363c3f1356c40e31c2b483e90051e47733befa4e587208c1f2059a16b124c61216f6ae8de2a6e2b21385ee0f9437a22fbbd7437f7eaf609cc2bbe65c0733ae14dfb0782c3919d570eb0467b0482a6e2d7d31856f18c2166be49b44c7a5525dad5cca195ca10d1109b2647cbeabbd4cd8c44474201776336bd87e6ac60ff3ede1951ca65ddcc48b9860b9e2adc8ad8d9f6acdb26bcba9a86a0d79378bf4f4c5a2217b981e89425748fb0f847f3482cfb839a0829019acf50729e46aba9024d8143bb9a04943b74226be632f2f344bdcf857ed4cc750d1c91e4c386d335877b80c803c5054dee14d2f213cb53029cca61a09fbc5a0bc128a9efc12f6d2cd4269e8117bca897fc0cc5b563c37529de7fd6efd10b254996a120dede33ff8e5e3c122f5b9aa2211b5bc0666850d5741879a7c07a9cededa6ac499d78cb4e255cbf77c8e93c6ca6ddf3c360c21dc323f26c170c3744ad69a10cca4c8b860452138486553ca18209b057ca3f0eb2ab53d5f47231a2107c284e54f6a6df4a826730e1d4e8f5f2bc0b28194a388d00d8da3f794cd73000c4c523dbbf79118b519f70dbe2257c47f50377c535508ae82bee4563c651bd9f02138a5d453ed1924e32f31b0066e8b0eb08bce0761a6243f8a201ba026d8944c850e37dfe41c7d81b9f9fb5be3dc17b8cf98261e756113ce6020a68c9f6934ddfac26809e6329cb6d5052d495f97241a44b9f93edd9b3f0940d90b999ac98a1bde4e7465d083688e39b2c6f8875f9d847a1b0b474f3a660de394f1dcc5ac04cbf0ab805c0535e38bb1b4891f394f7cdbd4c9baec5d7b6ffb2fc6baa815d8273eadf651a3dbbef4a61a5076b8f7ad0287a1aaa8428f594c91709715af7c145e0860a2a3d77ea98b01dbe9f3715e29b8beea69679762e04c044c6e153dc925d2deaa60132e676f6f2c04c1521c747deb3c455637ae96fbf8d8fd44653b2b63ed2398225de847e05d7628114203993f3526a12e49af96c859d7d0907c1a745ae2ab1636bf39dfd010ea3f8e1e0d45438ee2195999d0409e0f1b4a67778ac6a18e83746940802bfe98afb354e648ae1b0143673d29b104f5b70bfb57d4e5730029c433e1bf0058b205e9a965b12fc55479c35f95809b2433a287b2858fbf50649c54d54bd42983879799566b4cfe6d020c699ae1e8bf7d41fb23a57e6a931935152d97e75449d8607232b86220a2c98192b0ae7ec2bcfa17e64743f25de5a6186f57110bbca63072894577646838a535ce801a266eba3df3a6e24363747f78f7e89789453e017eef953e5a085591bc5cfc9d4c79ac493a993ba15b2b82c2dfe8c8b1c65612ec775f6c3dfa358cca9ee58c1dce9d9ef1d9331b02a38758651dba36f7bb867da41d9b60704adebdca99c386a36da7cb62b2bfdd9e8e3712eb70455fcb4457058161595329125815a9e28b20eecaf0cc9598ca71579419915b64880b228c0d118d9e2e1aaa2b3d07db540e1eea4ff1e910b67ce19019c515e8086990fed1976564b791b56c71bde1739b781d5bfcfb5a598aa74607ba0ce7dc6791eff73c02fbdee21a08c028d2c7ca3a4d4f59d7812631e50779b31bc40bcb7c43ad70ff12e4934062a6200a0afad53533acd9622c530be096707cda79313de4a9f1bf3baa7263e0118f5896cc72bdcef5d3cd6134319b7cdeeac4f514b06b79d38baa939e2d88082f3f4601d1d48a6fe2707a6c7ea8a235b3f0ecd50fd508eefcfdfcb062751d9b6434e6eca6f8b68ec6691161231dd09469afacee601c76e07ca2211370d632c221ebd26fd04397696b8195117bf5ac8d6a32506d7783311dcfaeb91118e91485e630a968d61d2a8aa9beac50c5bcb845e7f5eb4a97477c2636a935110f3bc8f0c767211e37c25b2b874bba586b67a602b6ad0fc3f948a82519fb91c53d8b76482347095ca05595e768e5473455c3f0c4a915f427fdb84aca6411834b86817ef3eaf11328dcf3d11ff6170d067fbe08c6f2ea68a599ca5b49c19872154655e683883fd6d817779e3ff1039ca12469ffb5db3534d7016f9be2d4237bb4c58e0a0bff11933725c789fd1c843a19565b17affe7683486fc78aa2cf3991762914e914cf0968413d487a3ead7d18231f2cb3014246884a612671be776df266af248cc02997f9b54401c8d3dd09eeaacfca00cc0dd3370de2a32380322d57fb34586cfbf9a82c85ea322226a9dd6d56b01ab24790e8e430c14b2ae4b1a16a22de79ca53b66840c9f851e14facda16dcec71fe88de55f558311342a08b4290015decd90f55dfbf57d9a32b234608c69291d31440c98aeb12fe0bba1de29b614455e3521edf5341212fd91c48e94e518534a737fbe57b0ad84eb4fc3ab0e4e8947be4659a8c5f6c16971d55c3672d857d7fafd08dd98ff9d3cff3df201ff84f9f9cf34c09beab6e079ecba9e9323e0afcdaf7631185b22d6732e143cd9a8d735cfdf9ab7a461e808e4334fcbe4fa8abcdc925058f854be3d1826b3d24306cb8b295831cc490aaed44cd2ee5679244cf36984aa15baafe9d1e75af8bac6f879d8cc847d22ffb53e518e27d0305f0ac89c6a3d69e20ecd67d3c5ae3111f14969ddfdbcda6168c87d58b3987d9f14dc3028d30af0e23f36356a0d67f425de1ddfd97b31f441064b0c5d5abc87cbe3220640c06fa7a3331a63d36eb1ab0eac20f19df7ba658fa8172e3b120188663cc9efc27010e294a04ca9de878abff42f21e6f60b10d97ff63069932aaa9e073866b3d440c21f72c478c23655f3f327fcef8f2b2f8e5e803d4d2dcaa2955db4805673c95538db7f51fa2c36bcfd9960dfac579818e59eb4e1298dafa5b040139e4a793f30b06c09e64aec42a589e7ece56c1bdf213afb88dcf6c140b4920ab2e37cd0ddd2c9548e809c571eeb45911c99b0df994b4a246a06d4e25c2e5ffac98209990f3d7dfe7c0a68e9c44d06d1fd24f9212a2eb8cfb5d3a5527ba84d521ce9c2cc9bcfc8ecef86d04d236a1ab36515f4029b1a1cd6f37cbfd189ab2af432f67c078bd51b3eb41f3abbea878cf48aedb8a1b986473f663eb6e3c27690d416ac83f65c9ea3dfdf9e365a3b50c4afd480536b1caa0cb51efb24594963a69fbac2d08eb4bd2af866655586eca55ed4a6bc6167c9b30d5215d0c06d40d088a628878859b84861d36b18ebfe5caa5e373cdd376bb8278b59c974860d3f334dc227f5c5c4abe38c645c0c92d7119bf474eb22edd3c0fe770a14cedd0c55b37ae51d5fbdc3f2d91f43d820db93fe3ff2850cb26776c9ad0689ef79377dd10ba5e3243f7960ad48c27b3cc529aa568b429cd4725a3e69eed735a3def270cef89dd2b6f7afb5febd7e11c80a91e36ba25b1f9522b44ef5f4009535f934a59af659712d8962e76c1fc53291a36690b9e4a3e4bb2a6f55d30f533e3e695e8c4a1258bd5494b6550cf7ef2a4e34a58aa971a8a2c6601660f418790547a81c8f0dd4cd63c4b1b07b3f269beff454318f67b158cb7ed7a1a909e6b16cfeb271b2e0a92c2ab8c8c2a227395ab086303393dcf17c97524978265072aef17b824727105e33c47405ccfadbc80a20fa161e6494c9f342f148dcbbcfbbbc0c5b8d752602bc39fcac51d5c113821deacf8c91136149a6a1e20deee9f381389f80264da536939da606622531cc018886dbeaa56d3acfa406c3d197117892e6775d6652d95007cb553a1eeb9a6f1a5ae11cedca341657df89b822138fd639b906edbeccd298fdac0e0312f39220be488f15d2505290e087750add69fb33b6442f386586c2be18de6d67c4c47f92510ecf48a65323d951e455e24db6e184c5c6a5fdf4872132f6c3c58b892cb12fbc05688b18f540fa28883379b9b44c965bfd8f6cb326ba3b91a68ac2fbdf2c7f2524658c396e5c396d9eb717706a7c286f78c1ee3d13f60a6cc69243d53fd5c5f4528d90b1dd8378d50e0844c771e9a4e77e281c1f6f68c83a69ae04c1d79079fab42372b01362cb6191e0b90db99f7521d533ba8ffad1e4e9efce296a67a6325554a4b86c25aa5095cbd9843dcedd59585b52fa62f7e4a18891cbfc889543f504f74383ef3e6474457bb67727f2ac99e6246fb0fafa20e8903dfde875e60669f57d9126c951ca118b82b9c06a88bc3f274838084c4f225d36c4acb5833d1644"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, 'M'}, @NL80211_ATTR_FILS_ERP_RRK={0x7, 0xfc, '-nj'}, @NL80211_ATTR_FILS_ERP_RRK={0x25, 0xfc, "1b76249a4d9203b59e02d68faf8fd7f2c38d1659e73fd721a52f513b61bfbd8f36"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "6b5b8d8e32d244df9ede"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "94c8bc67b30e8cf2593534"}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PBSS={0x4}]}, 0x1108}, 0x1, 0x0, 0x0, 0x24000050}, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0, 0xfffffffffffffd13}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000000)={0x4000, 0x100000}) (async) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000000)={0x4000, 0x100000}) 54.018419957s ago: executing program 1 (id=2735): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e04e04120"], 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd70000008598364ff000008000300", @ANYRES32=r2], 0x24}}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0x9, 0x62ca, 0x20, 0x0, 0x100000, 0xffffffffffffffff, 0x53, 0xecbc}, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) open_by_handle_at(r5, &(0x7f00000002c0)=@OVL_FILEID_V1={0x81, 0xf8, {'\x00', {0x0, 0xfb, 0x7e, 0x7, 0x3, "fe121221f1c083c7151135d6fa31e026", "53607ad6b96555d8a1b65a061f56e48d11ab8fc1ffc64f5044029f0f788ab0062ad94d8d42933b43d114bfb77e4d8f1c4d9d3a1a4c03f27e6336351b0d648e0e5cb9dc23a99ead2ebcd9bd6b09f0a831dfc5d5efab83511214b2ab03961808dc6534ff639a8edd771b"}}}, 0x200000) r6 = syz_io_uring_setup(0x88f, &(0x7f00000003c0)={0x0, 0xaee2, 0x10, 0xffffffff, 0x16}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x15, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x1, 0x20}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x12) ptrace(0x4207, r4) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r10, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x38, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x7fffffff}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040}, 0x4000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x0, &(0x7f00000000c0)=0x6, 0x0, 0x4) getdents64(r9, &(0x7f0000000240)=""/44, 0x7a) getdents64(r9, 0x0, 0x0) tkill(r4, 0x27) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)=0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) 53.931881446s ago: executing program 34 (id=2735): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e04e04120"], 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd70000008598364ff000008000300", @ANYRES32=r2], 0x24}}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0x9, 0x62ca, 0x20, 0x0, 0x100000, 0xffffffffffffffff, 0x53, 0xecbc}, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) open_by_handle_at(r5, &(0x7f00000002c0)=@OVL_FILEID_V1={0x81, 0xf8, {'\x00', {0x0, 0xfb, 0x7e, 0x7, 0x3, "fe121221f1c083c7151135d6fa31e026", "53607ad6b96555d8a1b65a061f56e48d11ab8fc1ffc64f5044029f0f788ab0062ad94d8d42933b43d114bfb77e4d8f1c4d9d3a1a4c03f27e6336351b0d648e0e5cb9dc23a99ead2ebcd9bd6b09f0a831dfc5d5efab83511214b2ab03961808dc6534ff639a8edd771b"}}}, 0x200000) r6 = syz_io_uring_setup(0x88f, &(0x7f00000003c0)={0x0, 0xaee2, 0x10, 0xffffffff, 0x16}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x15, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x1, 0x20}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x12) ptrace(0x4207, r4) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r10, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x38, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x7fffffff}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040}, 0x4000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x0, &(0x7f00000000c0)=0x6, 0x0, 0x4) getdents64(r9, &(0x7f0000000240)=""/44, 0x7a) getdents64(r9, 0x0, 0x0) tkill(r4, 0x27) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)=0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) 6.330338437s ago: executing program 0 (id=3538): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=r0, 0xa, 0x0, 0x3, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$CDROMPLAYBLK(r2, 0x5317, &(0x7f0000000200)={0x4, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='cubic', 0x5) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000280)={0x0, @reserved}) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340)={0x0, 0xb, 0x6, 0x4, 0x800}, 0x14) r3 = socket$inet6(0xa, 0x3, 0x4) sendto$inet6(r3, &(0x7f0000000380)="30e0024b7fc8a036e63895e8200867b74e25bd8881eba5e8f851cb258074ea2ed22298c185d97b615030502105b2709ed2357f751e46b9a629164c35d1d3bf4d33277f7956f06d89c71423e14fc66637364e56a94ce856c586a20945ccd24ca7fd514b50c81a3d3ef174e40f874144af7abd3a32c32c93686cb238189964a482d9905874faf3115672e5927bf98af1bbaaa35f2aa25e2a7439caeccbd6a889c8368505060a8bd36db92ba710", 0xac, 0x4000014, &(0x7f0000000440)={0xa, 0x4e21, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) openat$cgroup_devices(r2, &(0x7f0000000480)='devices.allow\x00', 0x2, 0x0) getpeername$ax25(r2, &(0x7f00000004c0)={{0x3, @null}, [@netrom, @rose, @null, @remote, @default, @netrom, @netrom, @bcast]}, &(0x7f0000000540)=0x48) splice(r2, &(0x7f0000000580)=0x8, r1, &(0x7f00000005c0), 0x29c, 0x8) r4 = syz_open_dev$swradio(&(0x7f0000000600), 0x0, 0x2) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000640)={0x7, 0x3032344d, 0x1, @stepwise={0x3, 0x7, 0x810, 0x9, 0x1, 0xd2b}}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000680), 0x600000, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000006c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000700)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000780), 0x4) r8 = pidfd_getfd(r2, r3, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f00000007c0)=0x5, 0x8) r9 = socket(0x1, 0x5, 0x0) ioctl$VIDIOC_S_EDID(r4, 0xc0285629, &(0x7f0000000840)={0x0, 0x8001, 0xbe, '\x00', &(0x7f0000000800)=0x98}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000880)={0x4, "cb34604f427536aa69d230c5fd82e91c0578a712a207925af46dd1e74fe2d626", 0x3, 0x0, 0x9, 0x7, 0x4, 0x2, 0x6, 0xc}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000029c0)={&(0x7f0000000900)="573fbd86df3dff3aa7aba4e282298629371b4ced91d07436b35e776175408e154cc1e565e710ac73", &(0x7f0000000940)=""/98, &(0x7f00000009c0)="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", &(0x7f00000019c0)="5e5f040cb23acd38a1b9194bce6b51e2a21b4c81e80a87e31fbd50a2ba872536e5de678bf4ab98696991ae37a2c6a4d6f6ead8525f4226d9af36e67d5f4d9e210b7caf5bea3b04de0255616230f6029d0d556e4eaa3609ae8a0c7adadce9327ed79aa7ca7127da0096641f225278c7e2ecf7bf901e5b50f21952abd85a5eb55f21306251c926a2f3a580d7c055a60e0489ed5fc485814526c21a75ac54dc4cc206d7d808081df7aabfc745b938ae537c263fa8598551870af8184549a5e46ed2af29feb466ce496dd5b67080bee49eb6d3c30e00f99c2baf371fdc9c82544f9c536abbcdc39d91f9fa5595e5caef1073a0a583e4f59b7ef26884ba6a10b5a2781f78874fa487f9f7745f1da1164ab42716da73eed2171d83ebe34ce53d849d72f35534193f12b54f9c0a44884179d07b946cb236b9d5cc36df92609e6f1388464a8cbba1f0edd7ece294bdbe49ef2cc9169812331b094b47691fa325edd7217ffd20ecab39e68b6891be4134122cd485ae2ca63a9ded2a8ae39210a5acc886eeb32d09306528b73ebeacbe6b0d9352a3c06c31c31e4d5c6b308b443f9c1d6ff152f593bf4ae87cc323cc1c9b38cb40fda0d006bd677b379630d4526503fa2c1f703768a926cec7cd672c5b73e53d07e65ad176973b4ab14c630191123e7abafadb9af5a80f330cf03589b237bb9857948320d96c5a7d4c7dc07b7ca1e093c6c55e7a095028a7c9b0aad2413a3e72ad61453f3302956dc3d77009d71b129e7fcf67078b80dd6fb08293751b2e3b2a4b9633d80392e7042d0e1494dabfb22cc64cf92aa4c29e3f8ac706c62a887431da9d9d71d097b093162590188efcc591948a291aa4c56ee942ed00836a72913eb9c49b4aa2d5b6c1c9aa25e261fcbc3862b96316b79ae53557931c91cab36b509e7cd88c8069728b016774a4291db9abb45e206fc71bff222b5ec191ee75359ebb7c46c0433ef5549707cf9ea6f9856a4a1797489a77e4417ccdfa4ff7a4ddcadd19172fc8870476c1e11f1205b5d29a9c2816bd233fbede3e57cd3bc1e6b94c7e44e83a5f7a2a545ace0aab350614075b5d6b5c28e28952270b440634b5503310ed0407d38fa1b0b2c1c8f01be71fad445d8b43f399d1deda998ee08a9500b05452937608851c081ee8a270119e838bc79e00eea6c62f79fd2763aa7aa5aec29f66f27d0f995e1c31f34cc0313b3d17aafa1524c1741fa98b8b84adbaa44779b8ab659c0877dc8b6d2ed04d68a8f72fb0ad19cf63e2e76b1066b5696aa3758cb4f725154c7170b26b36257d3039c7f497e809932d71574a78e4fb3163730ce575caf633a3e2254a69957e64b6db4c571eb99d336c7d2581bd28c611d2b92559f0f9443e8337640fcc5f600af4a36c64b8904720602eafbbb57f8ede7d1348243e5c944780418c1a4a6ee3117a5d04283dd0397cfaa962a7187d9b27466ed25405fb2d711a8f5dc1e857e0976b38af7d5281256db0f95e697d19ee2464002526939f2f01db2ee4832b3e9b1ff3c90fbbab30ed881f18b929f9547154a8cc36da204abeda5b01447bf6bea2e04c5a387587fde0fbcd374127ccdcc58efb70aeea78ef39492756e2e281fb945cc9cd43c7491fb3f01de6e68d0e01a3eb7ca4d242c6e4861c624be7147a25fa8f291ccf3cd8ad21cad8eab1fb7a72fd5005a56ba2913459d92bde056e7008fd892e2804a1709ee59bf811cc67386a18e8d74819051bba034008223eef2be30b270d8ef18813530ffcd9696dbca2e9f12abe60f40ae1911cc88ad3b9b1222924b8fc36bffd835ecc5b637f64b8790bffd186affcbfa584917cbaeffefaafe81b4120ccd91c6c9c44c7e9ffd1da8fe2a7d83c49028d9669b1edf4b4701f4a9c2cf4da369bc14eaa5d5241990d23daf8795c06ac158dff946b4c02496d13f804ffa75bbcd491378ca7e7bce5536b873bc5d7959c8d49638c04b38b6fe7f3e995cde1751a1df34704332de2f935bd7c0fdc1ff1ca7e9819dd96bb763aef0575b071b589ff3099e0c6d22ce391c4e53cdecf7535d7df6ea3ca2a31633607e2eec6332e8c42bc159ca7591b4e4a8890f9f5b6b72e76a2bc4cd53bee13d59c399508b88190ce77cab3348a6722f08d4f55e14c75ca831aa57f39695b6d4a1cd9f3c866226485548bf3ea254a39e11e31951d5b882b091c34c77a926f3e88cace4df770b6acd2071b7843b8fdf9e070bb2275f9edfa4625c915b1dbc8ff4e0e9d3aefed9b7ba9aebb1dde8a121ba470259fd97baa08225bda1ee3f2dd93ceb35891bd09f4ba0bd5535e381065f665f18591932b46152d11d98d64fdc2771aa63bc268d3310f451ae0cb88f9b4ade9d9650dd8b931e29b40b19376050e5cc77c60fc172fcfe8008529c80665b5d32f63e859e7041981c0da50e49fa02d2d270dbba3dfbe1ccf6e4d676c83c6f869a45ed3bfb3542e9e3b2d3505d6f08171312d098c8d518085723decdc00c658d4f962aa3a38f4342663103dae3951ecb2090508745070769299bff353a10341461e45964bf0186bc7cf27e6c04dc450283e4f8e3a92a789b030aa8cd3ac158a800bf0023965df48fec6d822d67b83c11f38cf9c9e2d9d067beccf391c25adb4316c0ab1862c1aabfc70b4904d3aa615e5d555934ec49177e0c71fde39ea3e555df8862c63918f90a4b7ca7ad8efb5cb55f45fa06dacd44c12ef497d76d22ce7c148f4351d6a400f7b12d2b14a7c75ee691d09240239cc93677e5d8f5bf0c846a869eb56587674367bfd8e84bd345368fe40435bec588f60d6565211dc8c865c12819394f669b654b85db7b0f370375168509748698c95ca49bc2e74393803d37aa6eeaa1968ad424a030a57c972bb3d93c3fed85bacee7e3456fcf1048165357e76ee42e644c5a54d710862be7ed267774d01335d7f1fa5ae83e5c48e1968139bb1cf4983f14ad6ff53ecf7620e9a28601d44850bf1e6701676918b5760e2a6b1ad87257deba3678a96914e7285811bfe4d46fe79ec4e7f3151fba77b7284dff60307ebb1a94cbd80fdfce758cb5a7dde27c6d324d4473c63abd342bd90ecafabc6af8216669acf9238b85f2e519a2c35cfe62f250a05bcb929cef08fd48e9192d942a9fd7de3d4b6c3587b724dcd5c155cc17d14626a2f415051edbdce9949cef0c6d4ee179ea58de72fe076da4efd77b9bc56fdc99ac699d23d8238ec25e53b41b5a52022bd7866896dc1eb3f475f9bf607ebc149379543d02cd35e2e278f6cf6ab58c060c56f3e0ea7e190a5af935d8b329221a46095149bd874e684763b0bd621c0e7b2adbee0dbb9ea9b7e9ad944c8bb5bd6d472cf483d3fc9f728666f22c3c87fbe00260cd427b440c4a84d95b0b7b5fc75ee613501498ae4f076c7c73a43e491ee9258164e5938bbf53fc3ad1e4692427e5833fded2b89cf946e56db88cf2a0038041c46033ccdaabe41510ce77a624eb0b36d16bb6271d584dc06cb9840816c5c3fb5022c6db91c2b35e97367e86d916d8ef4c49cd6a19166b1a32a559b89250ea4f30ee70ccb29dd7399ee3e2e903380c364b194d764a6b2a2c20f466beedac03dd915d96c8487ffaedb8f024465b7dfedb625f6c319c9b1b486f0c9864c5f613680b392d254ea07b19726d0af5298b14fc09cc69120846d1602c214f02028fcd8f919f2cb4bcce51ed6df8ca31e8b4c7c7df67a0e50f2239f5214803373d4c48317bcd25394083bb366fa32209b232bac7e5b62d018b8c12addcb0b9ff99b413b94afa709ac4862c2dd3f153b7641100e37069a341dc6d55d535e5eee8f1533c82e3350d922ecdd2e97b6f8cd5536f11e7432bd94c8250aa1e803b96f9fe039531af7ad4db0e45b05f70519df3efa59aabee7532815348eaf15e0776ed41e3bb94b75c198befa5cc12e82521c6eadf956e056babb4e89baca2244b4eeb0a79a1b93f7e94c3693f84dcff8df2c9b13e4c6fa923fa85d135c8d3f6e6944ed6335c2c26de84e3e8b177f109b4c8a0461c2cb66c104e4bf12b8a1fb6517968441b04ff44d83f672965fbb14797bd1471df2969e93ec304e83b90a03112042483fad0af4e380e8d03b326bfeee0b871e341efc195b8cff27f2376342d2f0de795c83f11cbd6a0ab1a85d71be3b563e321a40a1d1a84a807e93ccd9fee91537fc5ef4becc18e2531fb94570379727194a66eaa597777090a21a15449eb979c04c1336182b485a71d48dcd583698bb6e6c15ce9a891c413732a05b22cd3149fe702d8db2c10d408be40a74525d342709b052766eb639a04b685269b29cb7517d1ca7b1159de39388650dcb0cd60abf173c615a08314f595a21bb6ffe1968386098f7539ac82600f9c488494601a656d6d65bf12a875e438adfa53cbbaa6536d5b01305b5da4dcdd00e9c8551903994a7ca040514008924e89c253921ca5ae56aab075bcbac78ff70b74d32949a055686fa272c642feba699b182efb85bc87458e77f6b9eafab2de1e92fa4cf8a138243762aac448de34e8a8f1fbf6033d32b77662ef339bbc474954c63b1a2b88b8c34c249da71b54727324642589885b8cb9aee0eea02626aca0599decd7b3ed1da15e478c0b4738e19722996b8ab234237b409ad51634a3125ee7f95633861e36dc040813bc5b85b415d52ba68c7b1bc23b61fe41aa5a20712c337458100699485a6b30dc626475a785bad70aeb3108f7a5ef775b57500de9c0a3e7dc167043247775bf2a212811c4f152d53385f2779152af411143d9f48f701853c666b3dfc81a582a96ae60c94081c59c866a8964427444e651f980bead55b7b95720819a986807e90cd555eec205c8414da7202034a44e92feaeed11839e525c9010053a85379b9a94bd160b390edf4a2d09f35a1a90684267aa19110d9c121eedad3d9afa5729459c591cca7f4c219056eb5b4d9cdd5737053cf54352ff76e78ae5686903fe9cf0c0a035def69f2f8d042104d2faf53716869dd71dd98cb1b870776e67a8069cf494f230c94b1a3814c6e6221771a6a1e344007dd9bae6016972a9f5fd9d56d1d0a8ab21d1397b5dd4c8a1fb9e255d1bae926f16ea2cb4de87bc8e44bcbfee674c6103f914116cfab999f8e994d31b7a5e8a4631fc1a83320a2a595934e83c67c6b80ca7640945f54eeef02238e7a9d4c33be07c99f1c6e2a24d53db3555c63a6a96d51e76444f717eb938b70520a1f78d12a967c5ee5e4e5cd5adc1959d9219fdb5a724d15a3198a6184ab668a7e038cbf5e261f2e849e897af461d9c949740b8a3b7b2ab6f876e65b10a42ebe19507aef25710acc18ab0f4b9908bb0a5fc8fd9fd583bbfacfe1795d300a1ffae827693babbaaf8bd153219c9fcc23d073267d1dacf7c1c06827eadae73b4a12f1e698c2830ae7802afd0733ef27edaeabddb3f9a5f54e05cdf4a36f30b0582a73c47b070ded1ce7183094aac7c9f093f7394a7b9d997f8814f5e4a027ec2683800794c62a5a70b73095640ed20171070d7139e0ae5dbe601ffaed886a5751b604a2aa971122d28903cba5d5ef5897a8352dab1359066242fac9ded8d7e5cc2db454d95b1e6e30846f8374d85398beb8ca65121ae3acb3cb7413371d2c81552e84ce32b319f9ba44172855f1cdc1a8e73000acf6a56aba284bdd67f0228aa6000d98d92b2246650012740b5864294eb53f97e04845835e2a299cbfeabe9c0b064f48f8e88ea69cf4dff4aa7b5d84b27273a2d0b50c0c6e3f78c5f5f23bd46ecdd7f84df8bf3e079a818a16c5aec1eaef8586405d544fb2db42430375e8a4", 0x24c8, r5}, 0x38) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000002a00)='vegas', 0x5) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002e80)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r12 = syz_clone(0x10002000, &(0x7f0000003140)="1b3be752b86ff119383e96af4d338af246ad12d04d4853e5b80822c8df7e68fe1d2ba9232b8f091ad9495aceeb9a6728ea677171ed1b3659a50b496f1e62162d3a13c01a08af8a6da8198928e07a9bcd262865b2b3ed101be04e85d47b863af9e01b230218134ea3deea0c811ef7938e20a74e0166baf2c314e8882195d9f4b361d19bc161e569a3d592e62f32e9b12d994e4132e4fcfb1e1c552ba96efc43077e11aff386b6", 0xa6, &(0x7f0000003200), &(0x7f0000003240), &(0x7f0000003280)="2b24a7d5db3fd424d8dde6f0d6615508f53580b8f1d7f30b63a20ea8684fa5e052b44fc3541607ccac773688bd4c8433a1e138d78f25f81f22a8f92ef8ca3d92be38d9772c7c4d17be0f6938986df6b2ed2d40e3b387b8351f55c03caa66e14c15e26a92f47d53a77ae153a4c4e11a007e2c20cbfacd9d2b0fd7aac8ddeb99a40ba6940dd5045dbf6a1125251037b0d79f3d0e9a4d") sendmmsg$unix(r8, &(0x7f00000037c0)=[{{&(0x7f0000002a40)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000002ac0)="921828c930272422ad35492e35693fe1182ff5a83bec7aef16d104c8a82e8fe345a7bc23b1cb14281bea9aafb046531a1d1367ece5ef", 0x36}, {&(0x7f0000002b00)="b67e036e5bfe94b5ddb2c0d0d8f40139b27e903a4fa46b1745f4f05022857d346afd6f0ad79675023d2dd5df0264b441477c0aaba9f729609fe3d57c58d4b7690bdec1e2430f0e6a1ac6d7f5e527", 0x4e}, {&(0x7f0000002b80)="5adbbc3f0e6a552e27c40f307500612fdb2b3af2de013fe953159db741e2828873e9f4001067e62669dc7f0440ff7665cf5e1bcb87518f9d7ea3ae5f8381be228b84f4f95f76999d5be4b12abf7e7e7d40ba", 0x52}, {&(0x7f0000002c00)="fbada1a3dee66bc764874eaa1ad0e0403f0b65276120588d8512d4eed0b6181f62e4d2f95ea3236925244a6e3791c66164a5c2c880f4a4ec9f29ba2266164e9ad38ce0f8e53c3226c46bb46b8351bc2474836c94e3a631d2a8ef45440a66e0dcb729ef15d9f3f360a94ffc143d638d56ec1c20340477d57b9f984bd551193d1b4941069d8b98855031908e7060b105a0754dd923fa0393563e0f5fb5ad8f1a2d6c02b437a28d46bee7d24db8928c5657472b969c1b057ab359a23d4b1520d467645c23f0d0ab3f3121f6079a965486cf46f26274f915ab501b", 0xd9}, {&(0x7f0000002d00)="d8e907751bc04a50b891be9c2147bbe82d894567473b4d398aaafea87b694dc92778d4ed09f2f7220e5724cc8f338b89aefa6d74cfede87612abbd63145c468cb2b4526b5604b9261151a6decde36724a1acf85c22d8cd76fa192742b72ced4499b58d02ceb66b780a1808e7bd263425ffecf05e9caa47f6f186239cc877c4c4e39ca6eda1609b7afb899381248cd87b332cc191bf8a9ae48d65651e062338880caa25c3e90445e9642c9bf728d4e2790bba591f337936afd878137566039457198e41e8e51d0afcd4c517bc7228aa", 0xcf}], 0x5, &(0x7f0000002ec0)=[@rights={{0x1c, 0x1, 0x1, [r3, r1, r0]}}, @rights={{0x14, 0x1, 0x1, [r11]}}, @rights={{0x20, 0x1, 0x1, [r2, r9, r5, r4]}}], 0x58, 0x4000000}}, {{&(0x7f0000002f40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002fc0), 0x0, 0x0, 0x0, 0x48824}}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000003000)="6fd1eccccec4298666873e43381abb313fcc252ebe0fb7c3a0d86fb3b841fe14caeca0e59dd02f81b3c5b9517c6e96", 0x2f}, {&(0x7f0000003040)="a55432b2c5406c334aecc0567125599da901dab771389314049b6c12502a34d787663a66ee1aadc6eb0b3d4e25dd5d4d88231722de94c4dce5f80687fd9b53171894f97ba9324c4b24769184f887b0cf8a4351926f19d30c8969abcdc5de08183b20e3f6488f59552dab14711ceb0b9fd7e01b6f18a9d5b2b56c52b1eda20698c0abb76db57645d09a5e3a95429410f2a6", 0x91}], 0x2, &(0x7f0000003700)=[@rights={{0x18, 0x1, 0x1, [r7, r2]}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}], 0x3, 0x20004800) 6.264167031s ago: executing program 0 (id=3539): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r0 = socket$inet6(0xa, 0x3, 0xff) sendto(r0, 0x0, 0x0, 0x26040050, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0x80fe}, 0x80) (async) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.074039221s ago: executing program 0 (id=3540): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002000), 0x0, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000002040)={[0x5836, 0x8, 0x7, 0x1, 0x1, 0x5479, 0x1041, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffe, 0xfffffffe, 0x7, 0x9, 0x8000000000005, 0x800040068], 0xeeee0000, 0x80}) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc80, 0x0) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000200)={[0x0, 0x1000, 0xeeee0000, 0x4000], 0x7fe0000000000, 0xa, 0xff}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCGLCKTRMIOS(r4, 0x8910, &(0x7f0000000100)={0x9, 0x6, 0x8cc5, 0x6, 0x8, "1d0599045a000000006faee8fb7f0200"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@getpolicy={0x58, 0x15, 0x1, 0x30bd28, 0x25dfdbfc, {{@in=@multicast1, @in=@remote, 0x4e23, 0x0, 0x4e21, 0x9, 0x2, 0x20, 0xa0, 0x6c}, 0x6e6bb5}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) poll(&(0x7f0000000040)=[{r3, 0x230}], 0x1, 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000002000), 0x0, 0x0) (async) dup(r0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000002040)={[0x5836, 0x8, 0x7, 0x1, 0x1, 0x5479, 0x1041, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffe, 0xfffffffe, 0x7, 0x9, 0x8000000000005, 0x800040068], 0xeeee0000, 0x80}) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc80, 0x0) (async) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000200)={[0x0, 0x1000, 0xeeee0000, 0x4000], 0x7fe0000000000, 0xa, 0xff}) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x7) (async) ioctl$TIOCGLCKTRMIOS(r4, 0x8910, &(0x7f0000000100)={0x9, 0x6, 0x8cc5, 0x6, 0x8, "1d0599045a000000006faee8fb7f0200"}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@getpolicy={0x58, 0x15, 0x1, 0x30bd28, 0x25dfdbfc, {{@in=@multicast1, @in=@remote, 0x4e23, 0x0, 0x4e21, 0x9, 0x2, 0x20, 0xa0, 0x6c}, 0x6e6bb5}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) poll(&(0x7f0000000040)=[{r3, 0x230}], 0x1, 0x5) (async) 5.849489238s ago: executing program 0 (id=3541): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000240)='./file1\x00', 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000004800010300000000000000000a006000", @ANYRES32=0x0, @ANYBLOB="0000000008000200ff0000ff140001"], 0x38}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00004027f0000010000000000000000"], 0x10) 4.989227476s ago: executing program 0 (id=3551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x448}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "0400"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="a9fb0824", @ANYRES16=r5, @ANYBLOB="00032dbc7000ffdbdf210200000008006100000000000800690000000080"], 0x24}, 0x1, 0x0, 0x0, 0x20008850}, 0x40000) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000010480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000080004400000000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x1a0, 0x10, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x0, 0x0, 0x70bd28, 0xeaa}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x838}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) 4.988480932s ago: executing program 0 (id=3553): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) (async) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x8, 0x8000, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x1, 0x1, 0x2}) ioctl$SNDRV_PCM_IOCTL_RESET(r3, 0x4141, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_RESET(r3, 0x4141, 0x0) r4 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d0002000000000000020000000000370500000000060015000200000014001600100008800c000280080001"], 0x38}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d0002000000000000020000000000370500000000060015000200000014001600100008800c000280080001"], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000004800)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$sequencer(r8, &(0x7f0000004a80)=""/186, 0xba) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x9, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180000007a000a00000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186800000300000000000000090000000573ff00060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x9, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180000007a000a00000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186800000300000000000000090000000573ff00060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x20, r11, 0x1, 0x0, 0x25dfdc01, {}, [{{0x8, 0x1, r10}, {0x4}}]}, 0x20}}, 0x40000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r12, r13, 0x80000) (async) r14 = dup3(r12, r13, 0x80000) recvmmsg(r14, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000480)=""/28, 0x1c}], 0x1, &(0x7f0000001780)=""/109, 0x6d}}], 0x1, 0x1, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r7, @ANYRES32=r15, @ANYRES32=r7], 0x3c}}, 0x90) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r7, @ANYRES32=r15, @ANYRES32=r7], 0x3c}}, 0x90) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x2}}}]}, 0x78}}, 0x0) 1.583383606s ago: executing program 5 (id=3608): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95}, 0x14}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c7cbdc27cc45aff000000", @ANYRES16=r3, @ANYBLOB="080028bd7000fbdbdf250100000006001c0000000000050022000100000006001c0009000000"], 0x2c}}, 0x4001) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000880)={@empty, @broadcast, 0x1e, 0x12}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xd96d8b7b53e1f133, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.155467636s ago: executing program 6 (id=3613): r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x9, &(0x7f0000000000)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000580)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 1.036079185s ago: executing program 6 (id=3615): r0 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x3, 0x2}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f00000001c0)=0x9, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x38) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x24, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x24}}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="f81b6b", 0x3}, {&(0x7f0000000140)='\x00\x00\x00', 0x3}], 0x2}}], 0x4000000000000ae, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001", @ANYBLOB="966226dc294ae69f5c2cb1a3c9b4d66f8f61441df082438a56f36a4ae3ff2e90778ecc61096db600e7c3f979391f643084f9af", @ANYBLOB="48e543de52b74b58ce5a9c8d329a8d0e8bad0b5d306fcb93e56e5ef6b4279c54ecc627346ab37e548a51d382a9c7ac", @ANYRESHEX=r4, @ANYRES16=r0], 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0x4004005) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) recvmmsg(r4, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40000102, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000280)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x3b}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x400000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r9], &(0x7f0000000200), &(0x7f0000000580)=[r8], &(0x7f0000000040)}) 1.035477204s ago: executing program 6 (id=3616): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0x40, 0x80800) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd22, 0x1a1802) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000180)={0x0, 0x0, 0x6, 0xbf8b, 0x4f6}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback, 0x2}, 0x1c) listen(r4, 0x5) accept4(r4, &(0x7f0000000240)=@x25, 0x0, 0x80800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) sendto$inet6(r5, &(0x7f0000000040)='f', 0x1, 0x8020, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x3, "000000002010000000000000401000"}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000880)="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", 0x15f}, {&(0x7f0000005f40)="92c8308f50bba2da5ee082c3b8dfaea7e980c0139c3133421349dd913523b57daa0c3360c48ac2dfb3c6766fcbe70c4b01053f175c018000004521b8458fcc5c4950702163dabc8596fafcbf867a70f93838c529160935b2e8d215daa857d8d8af704772858ca50a7a49490e69f8b09e8171f47d792d6e2e9d6ee610c807b96eae4617639b498aec97ad751e6a924fbe1ce6c356f36146cc623822d4a8bd0a61c1031850719f98167d74535d308c736a0c17cf0742bf2dae0007ff4e", 0xbc}, {&(0x7f0000000a00)="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", 0xd2f}], 0x3}, 0x810) 652.222212ms ago: executing program 5 (id=3622): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[], 0x50) r0 = socket(0x10, 0x3, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x18, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xe7fe21d4ec091820}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x4, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) eventfd2(0x1, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r7, 0xc080aebe, &(0x7f0000000240)={{0xdfb28f6d6c9a9116, 0x0, 0x80, {0x6000, 0xdddd1000, 0x2}}, "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", "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"}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) ioctl$TUNSETOWNER(r8, 0x400454cc, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x13, 0x0, 0x0, 0x0, 0x20}, 0x94) r10 = socket(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r12, @ANYBLOB="0c0001"], 0x24}, 0x1, 0x0, 0x0, 0x40000050}, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x400000000000235, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r13}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r14, 0x0, 0x0}, 0x10) 436.861467ms ago: executing program 5 (id=3629): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f00000004c0)={{0x6, @rose, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r3) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r4, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @local}, 0x14) 424.413282ms ago: executing program 4 (id=3630): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000001200)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0xfffffdc7, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008001400", @ANYRES32=0x0, @ANYRES8=r2], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 422.131014ms ago: executing program 5 (id=3631): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffec9, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x230, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x20000000) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/pid\x00') ioctl$NS_GET_PARENT(r5, 0x8004b706, 0x0) fstat(r2, &(0x7f000000b100)) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0xb}) close_range(r0, 0xffffffffffffffff, 0x0) 363.256835ms ago: executing program 4 (id=3632): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d4f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4042}, 0x0) 300.086801ms ago: executing program 4 (id=3633): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}]}, 0x44}}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000400)=""/148) 299.712787ms ago: executing program 4 (id=3634): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000140)=0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10008, &(0x7f0000000380)=ANY=[@ANYBLOB="6774fa32ff100a", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x2, {0x7, 0x29, 0x1, 0x6a542793, 0x681d, 0x0, 0x3, 0x1, 0x0, 0x0, 0x100, 0x82}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x5}}, 0x30) read$FUSE(r2, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000001980)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@metacopy_on}]}) r4 = open(&(0x7f0000000240)='./file0\x00', 0x400, 0x43) mknodat$loop(r4, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="bd8d6ea31ef7bf643d", @ANYRES32=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r3, @ANYRESDEC]) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) r9 = msgget$private(0x0, 0x383) msgsnd(r9, &(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r1, @ANYRESHEX], 0x401, 0x800) msgsnd(r9, &(0x7f0000000200)=ANY=[@ANYBLOB="0000ff"], 0x8, 0x0) msgrcv(r9, &(0x7f00000001c0)={0x0, ""/75}, 0x53, 0x2, 0x2000) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0, 0xffffffffffffffdc}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 235.432391ms ago: executing program 5 (id=3635): socket$unix(0x1, 0x1, 0x0) (async) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) (async) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x100) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={&(0x7f0000000040)={0x20, 0x1, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1003}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4821}, 0x40) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) accept4(r3, 0x0, 0x0, 0x80800) (async) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f00000006c0)="0798dba016735026c8e1ea4fbd432d2bc09f", 0x12}], 0x2}], 0x1, 0x891) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/86, 0x56}], 0x1, 0x0, 0x0, 0xf5000000}, 0x40000140) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fcdbdf251400000008000300", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4004000) (async) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fcdbdf251400000008000300", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4004000) 54.334141ms ago: executing program 6 (id=3636): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DVD_WRITE_STRUCT(r0, 0x5390, &(0x7f0000000500)=@copyright={0x1, 0x0, 0x9}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) (async) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) ioctl$CDROMSETSPINDOWN(r0, 0x531e, &(0x7f0000000040)=0x8) 54.088315ms ago: executing program 5 (id=3637): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001e000100"], 0x48}}, 0x20000800) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000040)=[@increfs_done={0x40106308, 0x2, 0x700}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={r3, 0x1, 0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fe80ffff00000e1208000f0100810401a80016ea1f000b400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000100)={r3}) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010300000068416a8fb4e89743090500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) close(r7) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000a00)=[{&(0x7f0000000ac0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000140)={0x0, 0x1, r4}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {0x29}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) r11 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400"], 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r11, 0x0, 0x0) syz_usb_control_io$uac1(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) r12 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r12, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x7fff, 0x5850, 0x2000, &(0x7f0000000780)="e0"}], 0x1}) 53.640568ms ago: executing program 6 (id=3638): getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xc) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={r1, 0x1000}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000100)={r3, 0x93, "a952d3c87b6d0ec2ec5f817e0dd611fcf13d0bfb11d91c9bf03ade010af8544069988870c0df0242dadb449befd96a7ea252db3eb82855fc053b53439403aa8d4d96104812feee867dadd7c3134e51a515dfef4368f24a8c2b4394ffca59b9e73e871cbedce9aa73c6b6ae935669ef50f734ed3c2fbb803c052d745c45c7aa742d86dceeac855d4f0b388ba128bc9f70c3baf1"}, &(0x7f00000001c0)=0x9b) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000240)=r0, 0x4) sendfile(r2, r2, 0x0, 0x2) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)=@ipv4_newroute={0x144, 0x18, 0x2, 0x70bd26, 0x25dfdbff, {0x2, 0x80, 0x14, 0x3, 0x0, 0x3, 0x37, 0xb, 0x1400}, [@RTA_UID={0x8, 0x19, r5}, @RTA_TABLE={0x8, 0xf, 0x3}, @RTA_METRICS={0xf6, 0x8, 0x0, 0x1, "2c9dccf09c9c79d245145fcb0d7eb52e537ec7ca8c65686f382558dc28cccacce5cb20c5688b2fe2788878eb5e416298cab5eda6c01b4959425a66049ef49f5d74ef317f2e22bfe18e79fa278602462654342bfaa24019616f9ec42a3341572fd1664fe70fe15b68c20374cec6a96c5f9feef02178496644431988d52e56ab1c1df162788842e8018d54be1a6defbef1d6bb5578f558b215c9542a3be7f66419311a21f5777f04e13cdba160ba565b30ac4617e107d6527d9a69509b34efb0385af05b7ec8f3a1ffb0d3e08ba6863b91dc7f06712b4305b865f4ce6275040502d3e280bd925518951c45abd241929627371b"}, @RTA_SRC={0x8, 0x2, @multicast2}, @RTA_FLOW={0x8, 0xb, 0x8}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8, 0x1, r4}}}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000084}, 0x80) recvmsg(r4, &(0x7f00000019c0)={&(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000600)=""/92, 0x5c}, {&(0x7f0000000680)=""/247, 0xf7}, {&(0x7f0000000780)=""/1, 0x1}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/126, 0x7e}], 0x5, &(0x7f00000018c0)=""/222, 0xde}, 0x1) getsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000001a00)={@multicast1, @empty, 0x0}, &(0x7f0000001a40)=0xc) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000001a80)={'wlan0\x00', {0x2, 0x0, @private}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001b00)={'veth1\x00', &(0x7f0000001ac0)=@ethtool_cmd={0xa, 0x3, 0x8, 0x7, 0x20, 0xc0, 0x10, 0xa, 0x9, 0xe, 0x1800000, 0x1, 0x1ff, 0x2, 0x7, 0x5, [0xfff, 0x4]}}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001b40)) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000001b80)=@assoc_value={r0, 0x1}, 0x8) getsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f0000001bc0)={@dev, 0x0}, &(0x7f0000001c00)=0x14) socket$packet(0x11, 0x3, 0x300) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), r6) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000001f40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001cc0)={0x204, r9, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x9}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xc1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}, @NL80211_ATTR_TX_RATES={0x160, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x12, 0x60, 0x1b, 0x48, 0x36, 0x1, 0x6c, 0x6c, 0x6, 0x12, 0x9, 0x0, 0x60, 0xc, 0x30, 0x1b, 0xc, 0x1b, 0x4, 0x12, 0x6, 0x62, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x7, 0xf146, 0x0, 0x7f, 0x9, 0x5800, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xdfc0, 0xffff, 0x8000, 0x81, 0xe7b8, 0x5, 0x8, 0x41a]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x2, 0x1, 0x2, 0x6c, 0x3, 0x60, 0xc, 0x60, 0x18, 0xb, 0x16, 0x3, 0x48, 0x1, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0xb76c, 0x1, 0x4, 0x80, 0x0, 0x4]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x5, 0x6}, {0x1, 0x6}, {0x1, 0x9}, {0x0, 0x6}, {0x5, 0x7}, {0x0, 0x2}, {0x3, 0x3}, {0x4, 0x2}, {0x1, 0x9}, {0x3, 0x3}, {0x3, 0x6}, {0x3, 0x4}, {0x1, 0xa}, {0x6, 0x6}, {0x3, 0x4}, {0x1, 0x4}, {0x1, 0x4}, {0x0, 0x8}, {0x5, 0x5}, {0x0, 0x7}, {0x2, 0x4}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x2}, {0x2, 0x8}, {0x5, 0x7}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0xa}, {0x4, 0x7}, {0x3, 0x1}, {0x2, 0x8}, {0x3, 0x9}, {0x2, 0x6}, {0x6, 0x3}, {0x4, 0x7}, {0x2, 0x1}, {0x2, 0x5}, {0x7, 0x4}, {0x3, 0x7}, {0x0, 0x4}, {0x1, 0x8}, {0x0, 0x4}, {0x1, 0x5}, {0x4, 0x3}, {0x0, 0x5}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6c, 0x44, 0x36, 0x3, 0x1b, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x5, 0xe0cd, 0x5, 0xe197, 0xdb4, 0x7, 0x1]}}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x9}, {0x1, 0xa}, {0x7, 0x8}, {0x1}, {0x1, 0x7}, {0x6, 0x4}, {0x1, 0x5}, {0x5, 0x2}, {0x0, 0x8}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x1}, {0x1, 0x3}, {0x2, 0x5}, {0x2, 0x9}, {0x6, 0x3}, {0x7, 0x7}, {0x7, 0x9}, {0x6, 0x4}, {0x7, 0x7}, {0x1, 0x3}, {}, {0x6, 0x7}, {0x6, 0x2}, {0x4, 0x2}, {0x4, 0xa}, {0x1}, {0x1, 0x4}, {0x3, 0x1}, {0x0, 0x6}, {0x4}, {0x4, 0xa}, {0x1, 0x6}, {0x2, 0x8}, {0x0, 0x6}, {0x3, 0x1}, {0x5, 0x9}, {0x4, 0xa}, {0x7, 0x8}, {0x1, 0x3}, {0x5, 0xa}, {0x1, 0x6}, {0x3, 0x8}, {0x0, 0x3}, {0x7, 0x6}, {0x1, 0x3}, {0x7, 0x2}, {0x5, 0x3}, {0x0, 0x9}, {0x7, 0x2}, {0x7, 0x3}, {0x4, 0x7}, {0x1, 0x5}, {0x5, 0xa}, {0x4}, {0x4, 0x7}, {0x1, 0x7}, {0x4, 0xa}, {0x2, 0x1}, {0x5}, {0x2, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0x4, 0xc, 0x60, 0x36, 0x5, 0x60, 0x16, 0x2, 0x6, 0x1b, 0x4, 0x5, 0x4, 0x2c, 0x36, 0x24, 0x29, 0x3, 0x1b, 0x60, 0x6, 0x6, 0x6]}]}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x10, 0x24, [{0x24, 0x1}, {0x63, 0x1}, {0x9, 0x1}, {0x12}, {0x48}, {0x6c}, {0xc, 0x1}, {0x2, 0x1}, {0x16, 0x1}, {0x2}, {0x6c}, {0x12}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BSS_BASIC_RATES={0x23, 0x24, [{0x5}, {0x5, 0x1}, {0x60, 0x1}, {0x9, 0x1}, {0x9, 0x1}, {0xc}, {0x12, 0x1}, {0x36, 0x1}, {0x5}, {0x2}, {0x48, 0x1}, {0x48}, {0xb, 0x1}, {0x6c, 0x1}, {0x6c}, {0xc}, {0xb}, {0x2}, {0x3}, {0x2, 0x1}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x6c, 0x1}, {0x2}, {0x6c, 0x1}, {0xcaf09df2a850600f, 0x1}, {0x6}, {0x0, 0x1}, {0x48}, {0xc, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xbf}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x50}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x1}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001fc0), r6) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x34, r10, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfff}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x54b7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20040080) shutdown(r6, 0x1) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000002140)={0x9, &(0x7f00000020c0)=[{0x7, 0x7, 0xa7, 0x3}, {0x3, 0x8b, 0x1}, {0x1, 0x80, 0x4, 0x7}, {0x2, 0x21, 0x7, 0x4}, {0x4702, 0x7, 0x9e, 0xffffffff}, {0x5, 0x7, 0x1, 0x7}, {0x2, 0x4, 0xb, 0x3}, {0x0, 0x8, 0xb, 0x4}, {0x8000, 0xe, 0x9, 0xd}]}) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000002280)={'ip_vti0\x00', &(0x7f00000021c0)={'ip_vti0\x00', r7, 0x10, 0x7, 0xa6, 0x0, {{0x20, 0x4, 0x3, 0x0, 0x80, 0x66, 0x0, 0x8, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x24}, {[@rr={0x7, 0x1b, 0x41, [@empty, @remote, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote]}, @cipso={0x86, 0x21, 0x1, [{0x5, 0x10, "1baf47bf008b2cd3fac45306cd35"}, {0x2, 0xb, "809335b381477cb390"}]}, @ssrr={0x89, 0xf, 0x41, [@loopback, @private=0xa010100, @rand_addr=0x64010100]}, @cipso={0x86, 0x20, 0x3, [{0x2, 0x11, "78f61347e78883ec18245b155804ef"}, {0x1, 0x9, "bcbefbec4cdd03"}]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f00000035c0)={&(0x7f0000002180), 0xc, &(0x7f0000003580)={&(0x7f00000022c0)={0x1298, r10, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x11a0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xce9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xa9)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[$^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth1\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-/)\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '/proc/bus/input/devices\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#:(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x465}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xd, 0x4, "1233684e7d199123fb"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}, @ETHTOOL_A_BITSET_VALUE={0x61, 0x4, "448a6b1cbe9fef9ca80f9e52b57df055e377483562ba108239bbb30a2e8217a9f42ea2a8d07f1ddd56474ddb663b11aaa0a5b53fb441f9af1bc7aed4d73e4fb74b620e87f0920e887f88a20eb7813d06b37414070dfec9b559d7199de8"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6129}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x1298}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008080) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000003600)={r3, 0x1c889279}, &(0x7f0000003640)=0x8) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000003680)={0x1, 'team_slave_0\x00', {}, 0x7}) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000036c0)={r12, @in6={{0xa, 0x3, 0x33a8, @private2}}}, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000003780)={r1, 0x7}, &(0x7f00000037c0)=0x8) 53.44064ms ago: executing program 4 (id=3639): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r1) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x20) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f00000005c0)={{r2}, "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"}) ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000480)={{{0x6, 0x1}}, 0xd8, 0x765, &(0x7f0000000380)="ef525b24210e428d21dec9f312b8458de2b05c0721197f12e9462cfc065124c251cf22cbb6c148b88c9186b74a1ec92e3572a5531de2b6577005253226c5c63e0673c2ad7a87d62d82cff926a953549c622bc8b475cdd0b50da0d99c9fd8d71527f0d8fad19d906397ddd59119ac128d0a113fd1e4f904f52953e6c9bb831beae6b6d5b74f0fd1b4554b10306387f412496b7d227ff139282a6646d33c8996e146353a9fe716b7bf003f0a6cb0861a48281dfb2b7fe82712e863196d323baa96bd5be66be4d81329c9219613a5e4ac33a4b0f7b82c9e8d76"}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/0:0:0:0\x00', 0x103000, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000280)={0x53, 0xfffffffffffffffc, 0xf0, 0x8, @buffer={0x0, 0x3a, &(0x7f0000000040)=""/58}, &(0x7f0000000080)="ba262601d7dfc50ed705cea6c1bb994478159f5b226dd8fbf5784e54db6efaac6d69d572fae0fdde810e7145b9b26b43e7e364e076f73987be1ae70106c3fd4f4abe48bfe1a2e8cd14ea8dbe4a33559621b62d6bb8433af13cd24b900b972672b1ba3573294801d25ef6a5eb872b740450efd3ee036a0a89ba31dbe4236d7ef02ab4dc4532c2e5f68eda204e2274bdf6f8abc0e6eb77a869c18b534a8ffc8287bc120a982ab25e42c86533770096eb371995b31532ad739cca08dc5466631fe6685548362a5c8a50b2a639b8e3b1c062c68a6d53249c7fb3e5dcc5a893bd7091981926cb3a02275bf185df037b4dfa47", &(0x7f0000000180)=""/117, 0x2, 0x2, 0x1, &(0x7f0000000200)}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x56, &(0x7f0000000300)=[{0x4, 0x0, 0x9, 0x1000}, {0xff, 0xff, 0x8, 0x1000}, {0x7ff, 0xa, 0x9, 0x6}, {0xfffb, 0xfc, 0x6, 0x6}, {0x3, 0x2, 0x0, 0x10001}, {0x8, 0x1, 0xe3, 0x7}, {0xfff8, 0x4d, 0x57, 0x9815}, {0x9b, 0x9, 0x22}]}, 0x10) 743.227µs ago: executing program 6 (id=3640): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8942, &(0x7f00000014c0)={'ip6tnl0\x00', @ifru_names='vlan0\x00'}) (async) io_setup(0xff, &(0x7f0000000000)=0x0) (async) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x4f27, 0x7, 0x7ff, 0x16, 0x4, 0xc6, 0x8, 0x3, 0xa, 0xfd, 0x6, 0x11, 0xfffffffd, 0x1, 0x9adb, 0x6, 0xfffffffe, 0x7f, 0x3, 0x3, 0xfffffffd, 0xca99, 0x3, 0x20001e5d, 0xb, 0xe66, 0x3, 0xa, 0x4085, 0x6a, 0xfffffff7]}) (async) ioctl$COMEDI_UNLOCK(r2, 0x6406) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = dup3(r3, r0, 0x80000) (async, rerun: 32) r5 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r6 = eventfd2(0x7fffffff, 0x800) (async) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x280, 0x0) io_submit(r1, 0x3, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x2, r5, 0x0, 0x0, 0x9, 0x0, 0x1, r6}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000200)="16cfe6ef4d0914943238f3952c7ca3763630a78f8429998742dd0a85beff87167980d61bdf5380fb7e853614bd92eba317064bdb2aa03366251c43605bfe52e45e08e747e5f26d3be0e9394e8ab5ae6b9c5daf2e6d78c370a8ab8160448dbbf7b63388ed321470c3a74bcdc4169dbe2017c9608f0e98bf666a4299f4e2ac51bf9ffb3dabbb67ebd21936fddb02b1da93b90e7e1a862cf3177f585fc8fc4fd1a1c3b474094085c6b7a0cf3fabd7d015906ce9c656c7ff5c2b87c19b7d726ff23277591f6e28b4e8fda73b106129552666a52249", 0xd3, 0x75b, 0x0, 0x1, r7}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x4, r3, &(0x7f0000000380)="c58437e7673d0ecde02e675463f52206010c38f1da9fc8fca8a276dc408302586d36baf0758b165375de939ba5beb991dc12570b7f3b0d54d026d5a9a4549c817a6198d89e0545878226aeb73529158aff12cc681e9a94a85fb15069943beb18e31a8dcb48f93833a3308a6e9fb4da06672e9c229f7bb6218733f281864fb155d875661a6f1eb0fb5b1f33747a9ce6993f9e5445053b4f477a10510be80496d0a90346b43b776dee7c6f149a229e9db670a0eda545579be92882637e198d8091809e6f9be3452b1bd6b30725ba8923bd7e0e196ceb455d822c23dbfa0f18022d80fa5db829e637b7977dd86d62e239baf9", 0xf1, 0x6, 0x0, 0x2, r7}]) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') ioctl$NS_GET_PARENT(r8, 0xb702, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 0s ago: executing program 4 (id=3641): r0 = socket$inet6(0xa, 0x5, 0x46) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 0s ago: executing program 4 (id=3642): pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000019080)=0x30) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x32) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$TCFLSH(r3, 0x400455c8, 0x2) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xfc) kernel console output (not intermixed with test programs): sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 180.144684][T14158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2400'. [ 180.165396][T14158] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 180.168456][T14158] overlayfs: failed to set xattr on upper [ 180.170547][T14158] overlayfs: ...falling back to redirect_dir=nofollow. [ 180.172722][T14158] overlayfs: ...falling back to metacopy=off. [ 180.174647][T14158] overlayfs: ...falling back to index=off. [ 180.176761][T14158] overlayfs: ...falling back to uuid=null. [ 180.179135][ T5931] Bluetooth: hci0: command tx timeout [ 180.371133][ T40] audit: type=1400 audit(1762581493.159:1293): avc: denied { unmount } for pid=7903 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 180.398398][T14196] fuse: Bad value for 'rootmode' [ 180.518233][T14215] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2419'. [ 180.546363][T14228] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 180.559449][T14228] team0: Mode changed to "loadbalance" [ 180.562432][T14228] tipc: Started in network mode [ 180.564508][T14228] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 180.564599][T14228] tipc: Enabled bearer , priority 0 [ 180.697552][T14251] No buffer was provided with the request [ 180.701554][T14253] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 180.740600][T14258] overlayfs: conflicting lowerdir path [ 180.789133][T14262] netlink: 'syz.0.2433': attribute type 9 has an invalid length. [ 181.214978][T14313] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 181.247699][T14317] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 181.759712][ T29] tipc: Node number set to 11578026 [ 181.801074][T14353] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 182.053411][T14379] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 182.068264][T14403] ip6t_rpfilter: unknown options [ 182.174493][T14412] xt_hashlimit: max too large, truncated to 1048576 [ 182.176816][T14412] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 182.182008][T14412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14412 comm=syz.5.2477 [ 182.249812][ T40] audit: type=1400 audit(1762581494.908:1294): avc: denied { validate_trans } for pid=14422 comm="syz.4.2481" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 182.401308][ T5931] Bluetooth: hci0: command tx timeout [ 182.408951][ T40] audit: type=1400 audit(1762581495.058:1295): avc: denied { listen } for pid=14424 comm="syz.4.2482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 182.414409][ T40] audit: type=1400 audit(1762581495.067:1296): avc: denied { accept } for pid=14424 comm="syz.4.2482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 182.497623][T14425] bond0: Error: Cannot enslave bond to itself. [ 182.542838][T14427] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14427 comm=syz.4.2483 [ 182.576111][T14429] netlink: 'syz.4.2484': attribute type 17 has an invalid length. [ 182.578641][T14429] macvtap0: entered allmulticast mode [ 182.580327][T14429] veth0_macvtap: entered allmulticast mode [ 182.582567][T14429] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 182.869793][ T40] audit: type=1400 audit(1762581495.488:1297): avc: denied { bind } for pid=14450 comm="syz.1.2493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 182.963327][T14458] __nla_validate_parse: 4 callbacks suppressed [ 182.963343][T14458] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2494'. [ 182.994547][ T40] audit: type=1400 audit(1762581495.610:1298): avc: denied { read } for pid=14459 comm="syz.4.2495" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 183.003962][ T40] audit: type=1400 audit(1762581495.610:1299): avc: denied { open } for pid=14459 comm="syz.4.2495" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 183.013015][ T40] audit: type=1400 audit(1762581495.610:1300): avc: denied { ioctl } for pid=14459 comm="syz.4.2495" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x6804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 183.063715][T14463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.332787][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2503'. [ 183.409436][T14490] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2506'. [ 183.413133][T14490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2506'. [ 183.472420][T14497] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 183.560436][T14502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2509'. [ 183.693969][T14504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5138 sclass=netlink_route_socket pid=14504 comm=syz.0.2510 [ 183.698985][T14504] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 183.738841][ T40] audit: type=1400 audit(1762581496.311:1301): avc: denied { set_context_mgr } for pid=14505 comm="syz.0.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 183.933170][T14519] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2515'. [ 183.937127][T14519] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2515'. [ 183.943829][ T40] audit: type=1400 audit(1762581496.498:1302): avc: denied { write } for pid=14518 comm="syz.4.2515" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 183.951152][ T40] audit: type=1400 audit(1762581496.498:1303): avc: denied { open } for pid=14518 comm="syz.4.2515" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 184.050834][T14526] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 184.058146][ T9524] Bluetooth: hci2: Frame reassembly failed (-84) [ 184.392133][T14535] ISOFS: Unable to identify CD-ROM format. [ 184.402453][T14535] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 184.404805][T14535] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 184.407893][T14535] vhci_hcd vhci_hcd.0: Device attached [ 184.411665][T14537] vhci_hcd: cannot find the pending unlink 33554432 [ 184.413909][T14537] vhci_hcd: connection closed [ 184.415757][ T9533] vhci_hcd: stop threads [ 184.422313][ T9533] vhci_hcd: release socket [ 184.424007][ T9533] vhci_hcd: disconnect device [ 184.625283][ T5940] Bluetooth: hci0: command tx timeout [ 184.907894][T14543] overlayfs: failed to resolve './file0': -2 [ 184.915108][T14543] overlay: filesystem on ./file0 not supported as upperdir [ 185.251518][T14572] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 185.254704][T14572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2531'. [ 185.486192][T14585] random: crng reseeded on system resumption [ 185.747924][ T34] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 185.909298][ T34] usb 5-1: Using ep0 maxpacket: 32 [ 185.913061][ T34] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 185.916419][ T34] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 185.920351][ T34] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 185.923878][ T34] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 185.930047][ T34] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 185.932903][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.935407][ T34] usb 5-1: Product: syz [ 185.936775][ T34] usb 5-1: Manufacturer: syz [ 185.938289][ T34] usb 5-1: SerialNumber: syz [ 185.945213][ C3] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 185.948991][ T34] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input36 [ 186.131314][ T40] audit: type=1400 audit(1762581498.537:1304): avc: denied { getopt } for pid=14594 comm="syz.5.2539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 186.175717][ T34] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 186.178560][ T34] (id 0x00) [ 186.229072][ T34] rc_core: IR keymap rc-imon-pad not found [ 186.231537][ T34] Registered IR keymap rc-empty [ 186.233780][ T34] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 186.237671][ T34] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 186.250589][ T5931] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 186.390755][ T34] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 186.398215][ T34] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input37 [ 186.406493][ T34] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:16> initialized [ 186.448262][T14610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2542'. [ 186.535022][T14614] netlink: 264 bytes leftover after parsing attributes in process `syz.4.2544'. [ 186.592820][ T34] usb 5-1: USB disconnect, device number 16 [ 186.627641][T14624] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 186.633581][T14624] netlink: 'syz.4.2546': attribute type 10 has an invalid length. [ 186.752811][ T40] audit: type=1400 audit(1762581499.117:1305): avc: denied { setopt } for pid=14631 comm="syz.4.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 186.798488][T14635] Bluetooth: MGMT ver 1.23 [ 186.860012][ T5931] Bluetooth: hci0: command tx timeout [ 186.987642][ T40] audit: type=1400 audit(1762581499.341:1306): avc: denied { read } for pid=14646 comm="syz.4.2554" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 187.100324][T14652] netlink: 'syz.4.2555': attribute type 8 has an invalid length. [ 187.160177][T14657] i2c i2c-1: Invalid block write size 34 [ 187.162487][T14657] i2c i2c-1: Invalid block write size 34 [ 187.232139][T14668] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 187.235621][T14668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=14668 comm=syz.4.2560 [ 187.340597][T14682] netlink: 'syz.5.2565': attribute type 1 has an invalid length. [ 187.360736][T14682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.384852][T14682] bond1: (slave veth3): Enslaving as an active interface with a down link [ 187.409496][T14687] input input38: cannot allocate more than FF_MAX_EFFECTS effects [ 187.498653][T14701] netlink: 'syz.5.2570': attribute type 4 has an invalid length. [ 187.498738][T14702] netlink: 'syz.5.2570': attribute type 4 has an invalid length. [ 187.664469][T14714] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 187.835448][T14719] tmpfs: Bad value for 'mpol' [ 187.878357][T14724] option changes via remount are deprecated (pid=14722 comm=syz.0.2579) [ 187.932041][T14729] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 187.932640][T14729] tmpfs: Unknown parameter '0_b|ocks' [ 187.967471][T14731] loop3: detected capacity change from 0 to 7 [ 187.972407][T14731] Dev loop3: unable to read RDB block 7 [ 187.974794][T14731] loop3: unable to read partition table [ 187.977258][T14731] loop3: partition table beyond EOD, truncated [ 187.980425][T14731] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 188.155706][T14745] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 188.353762][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 188.353776][ T40] audit: type=1400 audit(1762581500.623:1312): avc: denied { watch watch_reads } for pid=14757 comm="syz.5.2592" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 188.487064][T14776] netlink: 'syz.0.2598': attribute type 63 has an invalid length. [ 188.512976][T14782] bridge6: entered promiscuous mode [ 188.545721][T14786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14786 comm=syz.1.2603 [ 188.561021][T14784] netlink: 'syz.5.2602': attribute type 1 has an invalid length. [ 188.564378][T14784] __nla_validate_parse: 3 callbacks suppressed [ 188.564391][T14784] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2602'. [ 188.576820][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2604'. [ 188.579458][T14788] openvswitch: netlink: Flow actions attr not present in new flow. [ 188.596068][T14792] netlink: 'syz.1.2605': attribute type 29 has an invalid length. [ 188.607102][T14792] netlink: 'syz.1.2605': attribute type 29 has an invalid length. [ 188.612285][T14792] netlink: 'syz.1.2605': attribute type 1 has an invalid length. [ 188.687393][ T40] audit: type=1400 audit(1762581500.931:1313): avc: denied { link } for pid=14800 comm="syz.4.2610" name="#37" dev="tmpfs" ino=2873 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 188.696952][ T40] audit: type=1400 audit(1762581500.931:1314): avc: denied { rename } for pid=14800 comm="syz.4.2610" name="#38" dev="tmpfs" ino=2873 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 188.706447][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2610'. [ 188.707416][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2610'. [ 188.728328][ T40] audit: type=1400 audit(1762581500.969:1315): avc: denied { shutdown } for pid=14807 comm="syz.5.2611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 188.844241][T14824] 9pnet_fd: p9_fd_create_tcp (14824): problem connecting socket to 127.0.0.1 [ 188.874746][T14830] bridge_slave_0: entered promiscuous mode [ 188.989149][T14879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14879 comm=syz.1.2623 [ 189.018942][T14849] workqueue: Failed to create a rescuer kthread for wq "nfc17_nci_tx_wq": -EINTR [ 189.035487][ T40] audit: type=1326 audit(1762581501.259:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.5.2627" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff173f8f6c9 code=0x0 [ 189.415877][ T5940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.419767][ T5940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.424247][ T5940] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.429533][ T5940] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.432589][ T5940] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.582921][T14912] chnl_net:caif_netlink_parms(): no params data found [ 189.670668][T14912] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.674693][T14912] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.677390][T14912] bridge_slave_0: entered allmulticast mode [ 189.681087][T14912] bridge_slave_0: entered promiscuous mode [ 189.685684][T14912] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.687961][T14912] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.690321][T14912] bridge_slave_1: entered allmulticast mode [ 189.693062][T14912] bridge_slave_1: entered promiscuous mode [ 189.726721][T14912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.731213][T14912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.753913][T14923] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2630'. [ 189.788131][T14912] team0: Port device team_slave_0 added [ 189.793605][T14912] team0: Port device team_slave_1 added [ 189.846659][T14912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.849454][T14912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.861080][T14912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.865277][T14912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.867367][T14912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.878249][T14912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.920993][T14937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2634'. [ 189.936078][T14912] hsr_slave_0: entered promiscuous mode [ 189.938084][T14912] hsr_slave_1: entered promiscuous mode [ 189.940346][T14912] debugfs: 'hsr0' already exists in 'hsr' [ 189.942468][T14912] Cannot create hsr debugfs directory [ 189.993634][T14952] Cannot find add_set index 0 as target [ 190.001068][T14954] overlayfs: failed to clone upperpath [ 190.193873][T14968] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2644'. [ 190.194043][T14973] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2644'. [ 190.427545][T14993] netlink: zone id is out of range [ 190.462811][ T40] audit: type=1400 audit(1762581502.587:1317): avc: denied { read } for pid=14995 comm="syz.4.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 190.483286][T14912] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 190.487238][T14912] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 190.492166][T14912] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 190.496031][T14912] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 190.541592][T14912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.553149][T14912] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.558140][ T9527] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.560415][ T9527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.566920][ T9527] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.569178][ T9527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.677670][T14912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.702746][T14912] veth0_vlan: entered promiscuous mode [ 190.710686][T14912] veth1_vlan: entered promiscuous mode [ 190.729889][T14912] veth0_macvtap: entered promiscuous mode [ 190.733861][T14912] veth1_macvtap: entered promiscuous mode [ 190.745025][T14912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.752929][T14912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.760362][ T9531] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.764922][ T9531] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.767960][ T9531] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.771332][ T9531] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.817916][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.820500][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.838688][ T9524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.841850][ T9524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.893735][ T40] audit: type=1400 audit(1762581502.998:1318): avc: denied { ioctl } for pid=15011 comm="syz.0.2628" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 190.995841][T15019] netlink: 'syz.0.2654': attribute type 2 has an invalid length. [ 190.998665][T15019] netlink: 'syz.0.2654': attribute type 1 has an invalid length. [ 191.001044][T15019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2654'. [ 191.054590][T15021] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 191.639909][ T5931] Bluetooth: hci2: command tx timeout [ 192.010090][T15036] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 192.012145][T15036] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 192.016021][T15036] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 192.027445][T15036] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 192.029560][T15036] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 192.032453][T15036] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 192.038265][T15036] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 192.040528][T15036] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 192.045090][T15036] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 192.190518][T15111] netlink: 'syz.5.2681': attribute type 6 has an invalid length. [ 192.260574][T15120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2683'. [ 192.380999][T15133] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 192.412368][ T40] audit: type=1400 audit(1762581504.420:1319): avc: denied { lock } for pid=15140 comm="syz.1.2688" path="socket:[57275]" dev="sockfs" ino=57275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 192.503472][T15157] CIFS mount error: No usable UNC path provided in device string! [ 192.503472][T15157] [ 192.508588][T15157] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 192.565635][T15162] XFS (nbd5): SB validate failed with error -5. [ 192.620738][T15169] netlink: 'syz.1.2694': attribute type 2 has an invalid length. [ 192.695744][T15178] nfs: Unknown parameter 'TIPCv2' [ 192.748966][T15182] binder: 15181:15182 ioctl c0306201 2000000003c0 returned -22 [ 192.754014][ T40] audit: type=1107 audit(1762581504.738:1320): pid=15181 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 192.757321][T15184] binder: 15181:15184 ioctl c0306201 200000000080 returned -22 [ 193.436553][ T5940] Bluetooth: hci4: command 0x0405 tx timeout [ 193.875892][T15230] syzkaller0: entered promiscuous mode [ 193.877652][T15230] syzkaller0: entered allmulticast mode [ 194.216465][ T5940] Bluetooth: hci2: command 0x040f tx timeout [ 194.216487][ T5931] Bluetooth: hci0: command 0x0c1a tx timeout [ 194.304644][T15256] kvm: user requested TSC rate below hardware speed [ 195.080346][T15262] veth1_macvtap: left promiscuous mode [ 195.082876][T15262] macsec0: entered promiscuous mode [ 195.189008][T15277] cgroup: Name too long [ 195.215734][T12182] syz_tun (unregistering): left promiscuous mode [ 195.248425][T15281] program syz.4.2730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.422857][T15286] netlink: 'syz.4.2732': attribute type 4 has an invalid length. [ 195.467571][ T29] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 195.618409][ T29] usb 10-1: device descriptor read/64, error -71 [ 195.878187][ T5940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 195.880330][ T5940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 195.884438][ T29] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 195.886233][ T5940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 195.892002][ T5940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 195.893212][ T5940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 195.935981][T15306] ceph: Path missing in source [ 196.010925][T15302] chnl_net:caif_netlink_parms(): no params data found [ 196.034043][ T29] usb 10-1: device descriptor read/64, error -71 [ 196.059488][T15313] __nla_validate_parse: 1 callbacks suppressed [ 196.059528][T15313] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2743'. [ 196.110671][T15319] 9pnet_fd: p9_fd_create_unix (15319): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 196.112059][ T40] audit: type=1400 audit(1762581507.880:1321): avc: denied { append } for pid=15318 comm="syz.0.2744" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 196.152798][ T29] usb usb10-port1: attempt power cycle [ 196.157277][T15302] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.159606][T15302] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.161914][T15302] bridge_slave_0: entered allmulticast mode [ 196.164624][T15302] bridge_slave_0: entered promiscuous mode [ 196.168329][T15302] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.170593][T15302] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.173674][T15302] bridge_slave_1: entered allmulticast mode [ 196.176336][T15302] bridge_slave_1: entered promiscuous mode [ 196.188702][T15319] 9pnet_fd: p9_fd_create_unix (15319): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 196.210919][T15302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.243491][T15302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.277628][T15302] team0: Port device team_slave_0 added [ 196.281609][T15302] team0: Port device team_slave_1 added [ 196.315280][T15302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.317456][T15302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.325975][T15302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.331553][T15302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.335068][T15302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.347232][T15302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.363698][T15327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2746'. [ 196.401942][T15302] hsr_slave_0: entered promiscuous mode [ 196.404174][T15302] hsr_slave_1: entered promiscuous mode [ 196.406248][T15302] debugfs: 'hsr0' already exists in 'hsr' [ 196.408073][T15302] Cannot create hsr debugfs directory [ 196.430743][ T5931] Bluetooth: hci2: command 0x040f tx timeout [ 196.440787][ T5931] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.543000][T15302] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 196.548391][T15302] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 196.554611][T15302] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 196.559426][T15302] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 196.564934][ T29] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 196.567163][ T40] audit: type=1400 audit(1762581508.301:1322): avc: denied { setattr } for pid=15341 comm="syz.0.2751" name="SCO" dev="sockfs" ino=61908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.606941][ T29] usb 10-1: device descriptor read/8, error -71 [ 196.627668][T15302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.647313][T15302] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.659641][ T9527] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.662586][ T9527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.667826][ T9527] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.670728][ T9527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.848717][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2753'. [ 196.854408][T15302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.854525][T15369] Option ''MO' to dns_resolver key: bad/missing value [ 196.869830][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.877220][ T29] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 196.912050][ T29] usb 10-1: device descriptor read/8, error -71 [ 197.009201][T15302] veth0_vlan: entered promiscuous mode [ 197.014501][T15302] veth1_vlan: entered promiscuous mode [ 197.026617][T15302] veth0_macvtap: entered promiscuous mode [ 197.029438][ T29] usb usb10-port1: unable to enumerate USB device [ 197.035142][T15302] veth1_macvtap: entered promiscuous mode [ 197.046689][T15302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.054237][T15302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.062565][ T9533] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.066466][ T9533] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.074094][ T9533] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.078620][ T9533] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.121844][ T9527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.124252][ T9527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.140905][ T9524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.143353][ T9524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.396522][T15404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2760'. [ 197.711724][T15438] netlink: 'syz.4.2772': attribute type 10 has an invalid length. [ 197.716983][T15438] netlink: 'syz.4.2772': attribute type 10 has an invalid length. [ 197.923328][T15459] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 197.926289][T15459] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 197.983894][T15468] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 197.986988][T15469] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 198.050410][ T40] audit: type=1400 audit(1762581509.685:1323): avc: denied { write } for pid=15472 comm="syz.4.2785" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 198.052966][T15471] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2784'. [ 198.058962][ T5931] Bluetooth: hci3: command tx timeout [ 198.157500][ T40] audit: type=1400 audit(1762581509.788:1324): avc: denied { map } for pid=15483 comm="syz.6.2788" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 198.165293][ T40] audit: type=1400 audit(1762581509.788:1325): avc: denied { execute } for pid=15483 comm="syz.6.2788" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 198.176467][T15480] binder: 15479:15480 ioctl 4018620d 200000004a80 returned -22 [ 198.183533][T15484] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2788'. [ 198.361181][T15493] QAT: Device 2 not found [ 198.425621][T15500] xt_socket: unknown flags 0xe4 [ 198.445937][T15502] tmpfs: Cannot enable quota on remount [ 198.487157][T15511] overlay: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa is not a directory [ 198.642027][ T40] audit: type=1400 audit(1762581510.237:1326): avc: denied { bind } for pid=15525 comm="syz.0.2802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 198.651813][ T40] audit: type=1400 audit(1762581510.237:1327): avc: denied { listen } for pid=15525 comm="syz.0.2802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 198.664586][ T5931] Bluetooth: hci0: command 0x0c1a tx timeout [ 198.664608][ T5940] Bluetooth: hci2: command 0x040f tx timeout [ 198.910483][ T7940] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 198.965558][T15554] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2810'. [ 199.060623][T15561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2812'. [ 199.113464][ T7940] usb 5-1: Using ep0 maxpacket: 8 [ 199.116959][ T7940] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.120220][ T7940] usb 5-1: config 0 has no interfaces? [ 199.122019][ T7940] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 199.125953][T15561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2812'. [ 199.130993][ T7940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.136819][ T7940] usb 5-1: config 0 descriptor?? [ 199.276663][T15563] netlink: 'syz.4.2813': attribute type 10 has an invalid length. [ 199.287307][T15563] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 199.364601][T15527] bond1 (unregistering): Released all slaves [ 199.409933][ T7940] usb 5-1: USB disconnect, device number 17 [ 199.637417][ T6014] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 199.708074][T15567] ALSA: mixer_oss: invalid OSS volume ';' [ 199.798407][ T6014] usb 9-1: Using ep0 maxpacket: 16 [ 199.801435][ T6014] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 199.806625][ T6014] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 199.809587][ T6014] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.812062][ T6014] usb 9-1: Product: syz [ 199.813401][ T6014] usb 9-1: Manufacturer: syz [ 199.814854][ T6014] usb 9-1: SerialNumber: syz [ 199.817499][ T6014] usb 9-1: config 0 descriptor?? [ 199.822856][ T6014] hub 9-1:0.0: bad descriptor, ignoring hub [ 199.824824][ T6014] hub 9-1:0.0: probe with driver hub failed with error -5 [ 199.825339][T15577] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 199.828471][ T6014] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input40 [ 199.847454][T15577] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2818'. [ 200.005775][T15587] 9pnet: Could not find request transport: unٌ [ 200.042079][T15565] misc userio: Can't change port type on an already running userio instance [ 200.180283][ T40] audit: type=1400 audit(1762581511.677:1328): avc: denied { append } for pid=15598 comm="syz.0.2824" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 200.279092][ T5940] Bluetooth: hci3: command tx timeout [ 200.621489][ T6027] usb 9-1: USB disconnect, device number 20 [ 200.664836][ T841] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 200.818110][T15620] netlink: 'syz.6.2831': attribute type 21 has an invalid length. [ 200.821500][T15620] netlink: 'syz.6.2831': attribute type 6 has an invalid length. [ 200.845645][ T841] usb 10-1: Using ep0 maxpacket: 8 [ 200.848684][ T841] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 200.851260][ T841] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 200.854478][ T841] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 200.857983][ T841] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.861285][ T841] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.865548][ T841] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 200.868720][ T841] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.888476][ T5940] Bluetooth: hci2: command 0x040f tx timeout [ 200.934598][T15622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.083745][T15626] veth0_vlan: left promiscuous mode [ 201.095376][ T841] usb 10-1: usb_control_msg returned -32 [ 201.097561][ T841] usbtmc 10-1:16.0: can't read capabilities [ 201.191435][T15628] kvm_intel: kvm [15627]: vcpu2, guest rIP: 0x9101 Unhandled WRMSR(0x1d9) = 0x1 [ 201.472371][T15651] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.477563][T15651] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.564775][T15657] bond1: option downdelay: invalid value (18446744073709551615) [ 201.565550][T15658] binder: 15655:15658 ioctl c0306201 200000000080 returned -14 [ 201.567314][T15657] bond1: option downdelay: allowed values 0 - 2147483647 [ 201.572517][ T40] audit: type=1400 audit(1762581512.977:1329): avc: denied { call } for pid=15655 comm="syz.6.2841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 201.572963][ T40] audit: type=1400 audit(1762581512.977:1330): avc: denied { transfer } for pid=15655 comm="syz.6.2841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 201.589908][T15657] bond1 (unregistering): Released all slaves [ 201.710704][ T40] audit: type=1400 audit(1762581513.108:1331): avc: denied { append } for pid=15670 comm="syz.0.2846" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 201.721889][T15671] netlink: 'syz.0.2846': attribute type 10 has an invalid length. [ 201.728025][T15671] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 201.772606][T15675] netlink: 'syz.6.2847': attribute type 1 has an invalid length. [ 201.793390][T15675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.796751][T15678] netlink: 'syz.0.2849': attribute type 21 has an invalid length. [ 201.808746][T15675] bond1: (slave geneve2): making interface the new active one [ 201.812020][T15675] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 201.814802][T15678] __nla_validate_parse: 2 callbacks suppressed [ 201.814810][T15678] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2849'. [ 201.819493][T15675] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 201.821732][T15678] veth1_macvtap: left promiscuous mode [ 201.822253][T15675] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 201.827078][T15675] vhci_hcd vhci_hcd.0: Device attached [ 201.830862][T15679] usbip_core: unknown command [ 201.832945][T15679] vhci_hcd: unknown pdu 2147680256 [ 201.834931][T15679] usbip_core: unknown command [ 201.836991][ T9531] vhci_hcd: stop threads [ 201.838343][ T9531] vhci_hcd: release socket [ 201.839805][ T9531] vhci_hcd: disconnect device [ 202.419436][T15698] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2854'. [ 202.503375][ T5940] Bluetooth: hci3: command tx timeout [ 202.644170][T15709] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 202.647641][T15709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.733146][T15711] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2858'. [ 202.841697][T15719] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2862'. [ 203.101906][ T5940] Bluetooth: hci2: command 0x040f tx timeout [ 203.482225][T15757] binder: 15756:15757 ioctl c0306201 200000000540 returned -14 [ 203.529578][T15761] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2875'. [ 203.532610][T15761] chnl_net:caif_netlink_parms(): no params data found [ 203.612413][T15766] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 203.616865][T15766] Error validating options; rc = [-22] [ 203.627752][ T841] usb 10-1: USB disconnect, device number 6 [ 203.643842][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2878'. [ 203.678197][ T40] audit: type=1400 audit(1762581514.951:1332): avc: denied { read } for pid=15777 comm="syz.5.2880" name="usbmon2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 203.691894][ T40] audit: type=1400 audit(1762581514.951:1333): avc: denied { open } for pid=15777 comm="syz.5.2880" path="/dev/usbmon2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 203.765471][T15788] netfs: Couldn't get user pages (rc=-14) [ 203.767266][T15788] netfs: Zero-sized read [R=25] [ 203.982427][T15790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2884'. [ 204.020461][T15792] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2883'. [ 204.031641][T15795] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2885'. [ 204.291356][ T5940] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 204.378874][T15829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2895'. [ 204.379568][ T40] audit: type=1400 audit(1762581515.605:1334): avc: denied { create } for pid=15827 comm="syz.0.2895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 204.425528][ T40] audit: type=1400 audit(1762581515.652:1335): avc: denied { getopt } for pid=15833 comm="syz.0.2897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 204.578879][ T40] audit: type=1400 audit(1762581515.802:1336): avc: denied { read } for pid=15861 comm="syz.4.2908" lport=63951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 204.727437][ T5940] Bluetooth: hci3: command tx timeout [ 204.739578][ T29] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 204.919519][ T29] usb 11-1: Using ep0 maxpacket: 16 [ 204.921288][ T5960] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 204.926962][ T29] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.930599][ T29] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.934562][ T29] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 204.939753][ T29] usb 11-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 204.943633][ T29] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.949187][ T29] usb 11-1: config 0 descriptor?? [ 205.069479][ T5960] usb 5-1: device descriptor read/64, error -71 [ 205.337232][ T5960] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 205.380955][T15840] random: crng reseeded on system resumption [ 205.390237][ T29] usbhid 11-1:0.0: can't add hid device: -71 [ 205.392167][ T29] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 205.396302][ T29] usb 11-1: USB disconnect, device number 2 [ 205.475559][ T5960] usb 5-1: device descriptor read/64, error -71 [ 205.508634][T15889] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.511817][T15889] kvm: kvm [15884]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x4000000b) = 0x0 [ 205.567259][T15894] bond2: entered allmulticast mode [ 205.569232][T15894] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.594823][ T5960] usb usb5-port1: attempt power cycle [ 205.967458][ T5960] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 205.989181][ T5960] usb 5-1: device descriptor read/8, error -71 [ 206.256046][ T5960] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 206.278705][ T5960] usb 5-1: device descriptor read/8, error -71 [ 206.395357][ T5960] usb usb5-port1: unable to enumerate USB device [ 206.606199][T15907] netlink: 'syz.5.2920': attribute type 4 has an invalid length. [ 206.630095][ T5931] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 206.634192][ T5931] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 206.637572][T15902] Invalid source name [ 206.638879][T15902] UBIFS error (pid: 15902): cannot open "./file0", error -22 [ 206.641008][ T5931] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 206.646551][ T5931] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 206.647860][T15912] openvswitch: netlink: EtherType 53b is less than min 600 [ 206.649125][ T5931] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.652950][T15912] overlayfs: failed to clone upperpath [ 206.742864][ T40] audit: type=1400 audit(1762581517.822:1337): avc: denied { shutdown } for pid=15928 comm="syz.6.2929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 206.752391][T15909] chnl_net:caif_netlink_parms(): no params data found [ 206.797390][T15940] netlink: 'syz.5.2931': attribute type 6 has an invalid length. [ 206.825474][T15909] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.827768][T15909] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.830023][T15909] bridge_slave_0: entered allmulticast mode [ 206.832638][T15909] bridge_slave_0: entered promiscuous mode [ 206.836350][T15909] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.838629][T15909] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.840884][T15909] bridge_slave_1: entered allmulticast mode [ 206.843531][T15909] bridge_slave_1: entered promiscuous mode [ 206.879185][T15909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.886225][T15909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.929194][T15909] team0: Port device team_slave_0 added [ 206.932875][T15909] team0: Port device team_slave_1 added [ 206.964147][T15909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.966420][T15909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.978279][T15909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.984373][T15909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.987237][T15909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.997292][T15909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.039085][T15909] hsr_slave_0: entered promiscuous mode [ 207.041436][T15909] hsr_slave_1: entered promiscuous mode [ 207.043683][T15909] debugfs: 'hsr0' already exists in 'hsr' [ 207.045540][T15909] Cannot create hsr debugfs directory [ 207.088062][T15959] netlink: 'syz.5.2937': attribute type 21 has an invalid length. [ 207.088178][T15958] netlink: 'syz.5.2937': attribute type 58 has an invalid length. [ 207.157090][T15909] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.160886][T15909] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.195225][ T5986] IPVS: starting estimator thread 0... [ 207.246610][T15909] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.250079][T15909] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.303956][T15967] IPVS: using max 45 ests per chain, 108000 per kthread [ 207.327928][ T40] audit: type=1400 audit(1762581518.364:1338): avc: denied { execmod } for pid=15969 comm="syz.5.2941" path=2F6D656D66643AFD0F6D33232F202864656C6574656429 dev="tmpfs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 207.337355][T15909] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.340576][T15909] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.465536][T15909] team0: Port device netdevsim0 removed [ 207.469000][T15909] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.472318][T15909] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.587149][T15909] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 207.593374][T15909] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 207.599450][T15909] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 207.604469][T15909] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 207.658570][T15909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.669299][T15909] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.674930][ T9527] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.677192][ T9527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.683125][ T9533] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.685872][ T9533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.798899][T15909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.921411][ T5940] Bluetooth: hci2: unexpected event for opcode 0x080f [ 207.928805][T15909] veth0_vlan: entered promiscuous mode [ 207.933720][T15909] veth1_vlan: entered promiscuous mode [ 207.937829][T16000] __nla_validate_parse: 3 callbacks suppressed [ 207.937839][T16000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2945'. [ 207.955306][T15909] veth0_macvtap: entered promiscuous mode [ 207.959599][T15909] veth1_macvtap: entered promiscuous mode [ 207.968252][T15909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.974065][T15909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.979855][ T46] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.982383][ T46] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.985493][ T46] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.988058][ T46] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.024277][ T9531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.026513][ T9531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.043528][ T9526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.045854][ T9526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.152249][T16021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2950'. [ 208.158409][T16024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.164673][T16024] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2951'. [ 208.167575][T16024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.172876][T16024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2951'. [ 208.175781][T16024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2951'. [ 208.216957][T16033] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2953'. [ 208.272282][ T53] hid-generic 0004:0000:80000000.000B: item fetching failed at offset 34/38 [ 208.276003][ T53] hid-generic 0004:0000:80000000.000B: probe with driver hid-generic failed with error -22 [ 208.300250][ T40] audit: type=1400 audit(1762581519.281:1339): avc: denied { listen } for pid=16046 comm="syz.4.2958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 208.336044][T16052] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2960'. [ 208.360324][T16054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16054 comm=syz.5.2961 [ 208.390081][T16057] program syz.5.2962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.484094][ T5931] Bluetooth: hci0: unexpected event for opcode 0x080f [ 208.744491][T16076] netlink: 'syz.6.2969': attribute type 29 has an invalid length. [ 208.752792][T16076] netlink: 'syz.6.2969': attribute type 29 has an invalid length. [ 208.755572][T16076] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2969'. [ 208.822234][ T34] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 208.833833][ T5931] Bluetooth: hci1: command tx timeout [ 208.836897][ T5931] Bluetooth: hci2: unexpected cc 0x0c47 length: 33 > 1 [ 208.839945][ T5931] Bluetooth: hci2: unexpected event for opcode 0x0c47 [ 208.982620][ T34] usb 10-1: Using ep0 maxpacket: 8 [ 208.985740][ T34] usb 10-1: config 1 interface 0 altsetting 61 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.989760][ T34] usb 10-1: config 1 interface 0 has no altsetting 0 [ 208.999347][ T34] usb 10-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.40 [ 209.003191][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.006649][ T34] usb 10-1: Product: ﶔ桬蕒痝뼳爉៿쓛嬨녣巍㒩㚞‥㤣㪺蓃뮔頍⏨启᎓桠᜕낊ꍊ醊茘Ҋ흰귄鼏켢瞸衇翕遼㨜椑璘⾆蘩፟﵌状嘺ዼ丼覠猑㳭栘팹鷎鎊㉍㥸鑀鹯賄헄戌㕈킚䏄ഋ⾻귦铍䢪Ｖ赮쒐㓣몛ọ뢺腗鴁犢홬ᦲ픝磭冊✩ [ 209.016505][ T34] usb 10-1: Manufacturer: Ж [ 209.016756][T16099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16099 comm=syz.0.2976 [ 209.017612][T16098] IPv6: addrconf: prefix option has invalid lifetime [ 209.018106][ T34] usb 10-1: SerialNumber: Т [ 209.027020][T16099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2976'. [ 209.040958][T16099] vxlan0: entered promiscuous mode [ 209.045043][ T46] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.048964][ T46] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.051686][ T46] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.054464][ T46] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.173006][ T40] audit: type=1400 audit(1762581520.094:1340): avc: denied { ioctl } for pid=16104 comm="syz.6.2980" path="socket:[65411]" dev="sockfs" ino=65411 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 209.248086][T16071] netlink: 'syz.5.2967': attribute type 11 has an invalid length. [ 209.258994][ T34] usbhid 10-1:1.0: can't add hid device: -71 [ 209.261255][ T34] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 209.264806][ T34] usb 10-1: USB disconnect, device number 7 [ 209.266869][ T40] audit: type=1326 audit(1762581520.179:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16117 comm="syz.4.2984" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faeabf8f6c9 code=0x0 [ 209.299439][T16120] netlink: 'syz.6.2985': attribute type 10 has an invalid length. [ 209.302214][T16120] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2985'. [ 209.305502][T16120] team0: entered promiscuous mode [ 209.307085][T16120] team_slave_0: entered promiscuous mode [ 209.308955][T16120] team_slave_1: entered promiscuous mode [ 209.311121][T16120] bridge0: port 3(team0) entered blocking state [ 209.313937][T16120] bridge0: port 3(team0) entered disabled state [ 209.316942][T16120] team0: entered allmulticast mode [ 209.319088][T16120] team_slave_0: entered allmulticast mode [ 209.322082][T16120] team_slave_1: entered allmulticast mode [ 209.356364][ T40] audit: type=1400 audit(1762581520.263:1342): avc: denied { getattr } for pid=16122 comm="syz.6.2986" path="socket:[67773]" dev="sockfs" ino=67773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 209.666812][T16147] netlink: 'syz.6.2992': attribute type 39 has an invalid length. [ 209.927806][T16157] netlink: 'syz.0.2996': attribute type 1 has an invalid length. [ 209.942349][T16157] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.964436][T16157] bond1: (slave veth3): Enslaving as an active interface with a down link [ 209.993611][T16162] netlink: 'syz.5.2998': attribute type 1 has an invalid length. [ 210.110144][T16176] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.316838][T16183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.321502][T16183] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 210.325106][T16183] batadv0: entered promiscuous mode [ 210.326762][T16183] batadv0: entered allmulticast mode [ 210.329172][T16183] bond0: (slave batadv0): Releasing backup interface [ 210.336769][T16183] bridge0: port 3(batadv0) entered blocking state [ 210.338863][T16183] bridge0: port 3(batadv0) entered disabled state [ 210.422966][T16187] netlink: 'syz.0.3005': attribute type 11 has an invalid length. [ 210.447596][ T9524] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 210.450536][ T9524] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 210.536905][ T40] audit: type=1326 audit(1762581521.366:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16190 comm="syz.0.3006" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f978f6c9 code=0x7ffc0000 [ 210.545808][ T40] audit: type=1326 audit(1762581521.366:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16190 comm="syz.0.3006" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f978f6c9 code=0x7ffc0000 [ 210.552997][ T40] audit: type=1326 audit(1762581521.376:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16190 comm="syz.0.3006" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87f978f6c9 code=0x7ffc0000 [ 210.562641][ T40] audit: type=1326 audit(1762581521.376:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16190 comm="syz.0.3006" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f978f6c9 code=0x7ffc0000 [ 210.572119][ T40] audit: type=1326 audit(1762581521.376:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16190 comm="syz.0.3006" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f978f6c9 code=0x7ffc0000 [ 210.641867][T16201] overlayfs: missing 'lowerdir' [ 211.058896][ T5931] Bluetooth: hci1: command tx timeout [ 211.405702][T16230] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 211.408076][T16230] PKCS7: Only support pkcs7_signedData type [ 211.418848][T16230] bridge0: entered promiscuous mode [ 211.420961][T16230] macsec1: entered promiscuous mode [ 211.453458][T16238] sit0: entered promiscuous mode [ 211.457475][T16238] team0: Device sit0 is of different type [ 211.492464][T16242] tmpfs: Unknown parameter 'uid<00000000000000000000' [ 211.535862][T16244] vivid-000: ================= START STATUS ================= [ 211.538392][T16244] vivid-000: Test Pattern: 75% Colorbar [ 211.540418][T16244] vivid-000: Fill Percentage of Frame: 100 [ 211.542263][T16244] vivid-000: Horizontal Movement: No Movement [ 211.545229][T16244] vivid-000: Vertical Movement: No Movement [ 211.547150][T16244] vivid-000: OSD Text Mode: All [ 211.548962][T16244] vivid-000: Show Border: false [ 211.550650][T16244] vivid-000: Show Square: false [ 211.552255][T16244] vivid-000: Sensor Flipped Horizontally: false [ 211.554555][T16244] vivid-000: Sensor Flipped Vertically: false [ 211.556557][T16244] vivid-000: Insert SAV Code in Image: false [ 211.558461][T16244] vivid-000: Insert EAV Code in Image: false [ 211.560708][T16244] vivid-000: Insert Video Guard Band: true [ 211.562566][T16244] vivid-000: Reduced Framerate: false [ 211.564295][T16244] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 211.566693][T16244] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 211.569223][T16244] vivid-000: Enable Capture Cropping: true grabbed [ 211.571418][T16244] vivid-000: Enable Capture Composing: true grabbed [ 211.573600][T16244] vivid-000: Enable Capture Scaler: true grabbed [ 211.575631][T16244] vivid-000: Timestamp Source: End of Frame [ 211.577500][T16244] vivid-000: Colorspace: SMPTE 170M [ 211.579164][T16244] vivid-000: Transfer Function: Default [ 211.581003][T16244] vivid-000: Y'CbCr Encoding: Default [ 211.582722][T16244] vivid-000: HSV Encoding: Hue 0-179 [ 211.584457][T16244] vivid-000: Quantization: Default [ 211.586079][T16244] vivid-000: Apply Alpha To Red Only: false [ 211.587956][T16244] vivid-000: Standard Aspect Ratio: 4x3 [ 211.589700][T16244] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 211.593082][T16244] vivid-000: DV Timings: 640x480p59 inactive [ 211.595044][T16244] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 211.597443][T16244] vivid-000: Maximum EDID Blocks: 2 [ 211.599142][T16244] vivid-000: Limited RGB Range (16-235): false [ 211.601227][T16244] vivid-000: Rx RGB Quantization Range: Automatic [ 211.603921][T16244] vivid-000: Power Present: 0x00000001 [ 211.606171][T16244] tpg source WxH: 720x576 (R'G'B) [ 211.608227][T16244] tpg field: 5 [ 211.609589][T16244] tpg crop: (0,0)/64x36 [ 211.611264][T16244] tpg compose: (0,0)/16x9 [ 211.613329][T16244] tpg colorspace: 1 [ 211.614779][T16244] tpg transfer function: 0/1 [ 211.616667][T16244] tpg quantization: 0/1 [ 211.618331][T16244] tpg RGB range: 0/2 [ 211.619907][T16244] vivid-000: ================== END STATUS ================== [ 211.644122][ T9533] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.647652][ T9533] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.650489][ T9533] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.653293][ T9533] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.892228][T16268] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 211.974166][T16269] could not allocate digest TFM handle cryptd(blake2b-160) [ 212.594388][T16300] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 212.603624][T16300] sch_tbf: burst 14 is lower than device lo mtu (65550) ! [ 212.747740][T16305] ip6erspan0: entered promiscuous mode [ 212.761466][ T40] kauditd_printk_skb: 51 callbacks suppressed [ 212.761477][ T40] audit: type=1400 audit(1762581523.452:1399): avc: denied { sys_admin } for pid=16304 comm="syz.6.3038" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 212.770720][ T5931] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 212.774091][ T5931] Bluetooth: hci0: Injecting HCI hardware error event [ 212.777058][ T5931] Bluetooth: hci0: hardware error 0x00 [ 213.169668][ T40] audit: type=1326 audit(1762581523.826:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16318 comm="syz.0.3043" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87f978f6c9 code=0x0 [ 213.235820][ T40] audit: type=1400 audit(1762581523.891:1401): avc: denied { recv } for pid=5861 comm="syz-executor" saddr=127.0.0.1 src=56888 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 213.287789][ T40] audit: type=1400 audit(1762581523.938:1402): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=56888 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 213.292232][ T5940] Bluetooth: hci1: command tx timeout [ 213.298892][ T40] audit: type=1400 audit(1762581523.948:1403): avc: denied { egress } for pid=9526 comm="kworker/u32:58" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 213.298938][ T40] audit: type=1400 audit(1762581523.948:1404): avc: denied { sendto } for pid=9526 comm="kworker/u32:58" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 213.443289][T16328] validate_nla: 3 callbacks suppressed [ 213.443305][T16328] netlink: 'syz.6.3045': attribute type 8 has an invalid length. [ 213.451598][ T40] audit: type=1400 audit(1762581524.088:1405): avc: denied { prog_load } for pid=16327 comm="syz.6.3045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 213.482857][ T40] audit: type=1400 audit(1762581524.116:1406): avc: denied { prog_run } for pid=16329 comm="syz.6.3046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 213.518734][ T40] audit: type=1400 audit(1762581524.163:1407): avc: denied { map_create } for pid=16331 comm="syz.4.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 213.521315][T16332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.526512][ T40] audit: type=1400 audit(1762581524.163:1408): avc: denied { map_read map_write } for pid=16331 comm="syz.4.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 213.566088][T16334] netlink: 'syz.6.3048': attribute type 13 has an invalid length. [ 213.569434][T16334] __nla_validate_parse: 12 callbacks suppressed [ 213.569446][T16334] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3048'. [ 214.033107][T16351] kernel read not supported for file /policy (pid: 16351 comm: syz.4.3053) [ 214.209775][T16366] netlink: 'syz.0.3057': attribute type 4 has an invalid length. [ 214.218532][T16366] netlink: 'syz.0.3057': attribute type 4 has an invalid length. [ 214.324353][T16379] syz.0.3060 (16379): /proc/16373/oom_adj is deprecated, please use /proc/16373/oom_score_adj instead. [ 214.351798][ T5940] Bluetooth: hci3: unexpected event 0x3c length: 97 > 7 [ 214.460791][ T6014] hid-generic 0005:0002:5508.000C: hidraw1: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 214.472132][T16396] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3068'. [ 214.611623][T16399] netlink: 288 bytes leftover after parsing attributes in process `syz.0.3069'. [ 214.668159][T16401] netlink: 'syz.0.3070': attribute type 2 has an invalid length. [ 214.828658][T16409] loop2: detected capacity change from 0 to 7 [ 214.968577][T16409] Dev loop2: unable to read RDB block 7 [ 214.970510][T16409] loop2: unable to read partition table [ 214.972354][T16409] loop2: partition table beyond EOD, truncated [ 214.974354][T16409] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 215.002721][ T5931] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 215.098795][T16425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3076'. [ 215.172159][T16447] netlink: 'syz.0.3082': attribute type 5 has an invalid length. [ 215.180819][T16447] ip6erspan0: entered promiscuous mode [ 215.188791][T16450] tipc: Enabling of bearer rejected, failed to enable media [ 215.192355][T16451] loop9: detected capacity change from 0 to 7 [ 215.199123][T16451] Dev loop9: unable to read RDB block 7 [ 215.201837][T16451] loop9: AHDI p1 p2 [ 215.203609][T16451] loop9: partition table partially beyond EOD, truncated [ 215.208868][T16451] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 215.245744][T16458] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3086'. [ 215.250013][T16463] sctp: [Deprecated]: syz.0.3082 (pid 16463) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.250013][T16463] Use struct sctp_sack_info instead [ 215.284434][T16470] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3090'. [ 215.515753][ T5931] Bluetooth: hci1: command tx timeout [ 216.300029][T16563] bridge1: entered promiscuous mode [ 216.306799][T16563] JFS: discard option not supported on device [ 216.311583][T16563] Mount JFS Failure: -5 [ 216.377120][T16567] kvm: kvm [16566]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0xbe702111 [ 216.433557][T16573] xt_connbytes: Forcing CT accounting to be enabled [ 216.436850][T16573] Cannot find set identified by id 0 to match [ 216.959976][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 217.031740][T16584] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16584 comm=syz.6.3124 [ 217.037724][T16584] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16584 comm=syz.6.3124 [ 217.043002][T16584] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16584 comm=syz.6.3124 [ 217.048725][T16584] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16584 comm=syz.6.3124 [ 217.054024][T16584] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16584 comm=syz.6.3124 [ 217.059514][T16584] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16584 comm=syz.6.3124 [ 217.064813][T16584] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16584 comm=syz.6.3124 [ 217.070752][T16584] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16584 comm=syz.6.3124 [ 217.075937][T16584] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16584 comm=syz.6.3124 [ 217.079913][T16584] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16584 comm=syz.6.3124 [ 217.120594][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 217.123631][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.126898][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 217.129753][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 217.133462][ T5931] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 217.136292][ T5931] Bluetooth: hci3: Injecting HCI hardware error event [ 217.139698][ T5931] Bluetooth: hci3: hardware error 0x00 [ 217.143655][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 217.147140][ T9] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 217.149946][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.156057][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 217.158572][ T9] hub 5-1:1.0: probe with driver hub failed with error -5 [ 217.161165][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 217.163048][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 217.165356][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 217.167195][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 217.705619][T16651] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 218.000489][ T53] usb 5-1: USB disconnect, device number 22 [ 219.040303][T16674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.095168][T16678] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.101060][T16678] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.189710][T16678] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.190210][T16704] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 219.192931][T16678] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.194378][T16705] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 219.310366][T16678] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.315803][T16678] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.365085][ T5931] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 219.396036][T16678] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.399477][T16678] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.406274][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 219.406285][ T40] audit: type=1400 audit(1762581529.662:1434): avc: denied { audit_control } for pid=16712 comm="syz.5.3148" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 219.532744][ T9531] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.536150][ T9531] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.544523][ T9531] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.547431][ T9531] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.555076][ T9531] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.558061][ T9531] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.574275][ T9531] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.576903][ T9531] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.844942][ T40] audit: type=1400 audit(1762581530.073:1435): avc: denied { create } for pid=16718 comm="syz.0.3150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 219.852770][ T40] audit: type=1400 audit(1762581530.073:1436): avc: denied { getopt } for pid=16718 comm="syz.0.3150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 220.106630][T16728] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3153'. [ 220.283063][ T40] audit: type=1400 audit(1762581530.475:1437): avc: denied { setattr } for pid=16739 comm="syz.5.3158" name="AF_VSOCK" dev="sockfs" ino=71774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 220.341880][T16747] netlink: 'syz.4.3161': attribute type 23 has an invalid length. [ 220.447948][T16763] vlan3: entered promiscuous mode [ 220.450401][T16763] vlan3: entered allmulticast mode [ 220.452187][T16763] hsr_slave_1: entered allmulticast mode [ 220.462624][T16756] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3164'. [ 220.757651][T16772] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 220.798817][T16776] mac80211_hwsim hwsim26 : renamed from wlan1 (while UP) [ 220.847528][T16779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3168'. [ 220.854260][ T40] audit: type=1400 audit(1762581531.018:1438): avc: denied { getopt } for pid=16780 comm="syz.6.3171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 221.180626][ T40] audit: type=1400 audit(1762581531.317:1439): avc: denied { connect } for pid=16793 comm="syz.6.3175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 221.190159][ T40] audit: type=1400 audit(1762581531.327:1440): avc: denied { listen } for pid=16793 comm="syz.6.3175" lport=57918 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 221.199522][ T40] audit: type=1400 audit(1762581531.327:1441): avc: denied { accept } for pid=16793 comm="syz.6.3175" lport=57918 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 221.213098][ T40] audit: type=1400 audit(1762581531.327:1442): avc: denied { write } for pid=16793 comm="syz.6.3175" lport=57918 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 221.220516][ T40] audit: type=1400 audit(1762581531.327:1443): avc: denied { setopt } for pid=16793 comm="syz.6.3175" lport=57918 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 221.374448][T16808] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.378421][T16808] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.438073][T16829] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 221.454910][T16808] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.458081][T16808] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.469485][T16834] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3188'. [ 221.473217][T16834] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3188'. [ 221.536800][T16841] fuse: Unknown parameter '0x0000000000000004' [ 221.568104][T16808] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.572636][T16808] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.605165][T16843] tipc: Started in network mode [ 221.606768][T16843] tipc: Node identity 2e6fe9e92b68, cluster identity 4711 [ 221.609110][T16843] tipc: Enabled bearer , priority 0 [ 221.611704][T16843] syzkaller0: entered promiscuous mode [ 221.613487][T16843] syzkaller0: entered allmulticast mode [ 221.617327][T16842] tipc: Resetting bearer [ 221.634676][T16842] tipc: Disabling bearer [ 221.705084][T16808] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.708427][T16808] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.762475][T16846] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3192'. [ 221.841148][ T9531] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.844611][ T9531] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.858692][ T9531] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.861458][ T9531] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.869891][ T9531] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.872838][ T9531] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.882945][ T9531] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.885846][ T9531] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.967939][T16854] SELinux: failed to load policy [ 222.079212][T16864] netlink: 'syz.5.3198': attribute type 1 has an invalid length. [ 222.092652][T16864] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.177973][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 222.234241][T16873] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3201'. [ 222.265134][T16875] netlink: 'syz.5.3202': attribute type 10 has an invalid length. [ 222.267604][T16875] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3202'. [ 222.270364][T16875] batadv0: entered promiscuous mode [ 222.272082][T16875] batadv0: entered allmulticast mode [ 222.274779][T16875] bridge0: port 3(batadv0) entered blocking state [ 222.277350][T16875] bridge0: port 3(batadv0) entered disabled state [ 222.280616][T16875] bridge0: port 3(batadv0) entered blocking state [ 222.282778][T16875] bridge0: port 3(batadv0) entered forwarding state [ 222.311354][T16877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3203'. [ 222.339844][T16880] nfs4: Bad value for 'source' [ 222.394111][T16887] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3206'. [ 222.455460][ T9533] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 222.459223][ T9533] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 222.470768][T16895] tmpfs: Unknown parameter 'usrquotap1' [ 222.926895][T16905] netlink: 'syz.6.3212': attribute type 4 has an invalid length. [ 223.653031][T16909] fuse: Bad value for 'fd' [ 224.300888][T16929] netlink: 'syz.6.3218': attribute type 1 has an invalid length. [ 224.328983][T16929] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 224.333220][T16929] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 224.339728][T16929] bond3: (slave vcan1): making interface the new active one [ 224.343360][T16929] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 224.348795][T16929] bond3: entered allmulticast mode [ 224.350970][T16929] vcan1: entered allmulticast mode [ 224.657841][ T5931] Bluetooth: hci2: command 0x040f tx timeout [ 224.657882][T16890] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 225.606621][T16890] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 225.610806][T16890] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 225.613007][T16890] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 225.615735][T16890] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 225.653159][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 225.653173][ T40] audit: type=1400 audit(1762581535.507:1450): avc: denied { associate } for pid=16954 comm="syz.0.3226" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 225.704075][T16956] binder: 16952:16956 ioctl c0306201 2000000003c0 returned -22 [ 225.929845][T16973] 9pnet_fd: p9_fd_create_tcp (16973): problem connecting socket to 127.0.0.1 [ 226.242879][T16991] __nla_validate_parse: 1 callbacks suppressed [ 226.242891][T16991] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3237'. [ 226.404452][T16988] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3236'. [ 226.411439][T16997] vlan3: entered promiscuous mode [ 226.413674][T16997] syz_tun: entered promiscuous mode [ 226.577863][T17005] selinux_netlink_send: 23 callbacks suppressed [ 226.577874][T17005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26145 sclass=netlink_route_socket pid=17005 comm=syz.0.3242 [ 226.583338][T17004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26145 sclass=netlink_route_socket pid=17004 comm=syz.0.3242 [ 226.616806][T17007] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3243'. [ 226.729040][T17013] binder: 17012:17013 ioctl c0306201 200000000080 returned -14 [ 226.892983][ T5931] Bluetooth: hci2: command 0x040f tx timeout [ 227.101995][ T40] audit: type=1326 audit(1762581536.863:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.0.3249" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87f978f6c9 code=0x0 [ 227.298937][ T9] usb 9-1: new low-speed USB device number 21 using dummy_hcd [ 227.424551][ T40] audit: type=1400 audit(1762581537.162:1452): avc: denied { read write } for pid=17034 comm="syz.5.3251" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 227.434415][ T40] audit: type=1400 audit(1762581537.162:1453): avc: denied { open } for pid=17034 comm="syz.5.3251" path="/dev/input/event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 227.442704][ T40] audit: type=1400 audit(1762581537.172:1454): avc: denied { ioctl } for pid=17034 comm="syz.5.3251" path="/dev/input/event2" dev="devtmpfs" ino=947 ioctlcmd=0x4506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 227.451446][ T9] usb 9-1: device descriptor read/64, error -71 [ 227.465191][T17037] geneve2: entered promiscuous mode [ 227.467021][T17037] geneve2: entered allmulticast mode [ 227.706488][ T9] usb 9-1: new low-speed USB device number 22 using dummy_hcd [ 227.822882][ T5931] Bluetooth: hci1: command 0x0c1a tx timeout [ 227.844150][ T9] usb 9-1: device descriptor read/64, error -71 [ 227.894714][T17067] kvm: pic: non byte write [ 227.950239][T17075] new mount options do not match the existing superblock, will be ignored [ 227.961877][ T9] usb usb9-port1: attempt power cycle [ 228.184996][ T40] audit: type=1400 audit(1762581537.873:1455): avc: denied { setopt } for pid=17091 comm="syz.6.3272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 228.205796][T17092] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3272'. [ 228.209220][T17092] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3272'. [ 228.212506][T17092] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3272'. [ 228.215332][T17092] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3272'. [ 228.220590][ T40] audit: type=1400 audit(1762581537.911:1456): avc: denied { bind } for pid=17091 comm="syz.6.3272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 228.226738][ T40] audit: type=1400 audit(1762581537.911:1457): avc: denied { read } for pid=17091 comm="syz.6.3272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 228.282774][ T40] audit: type=1400 audit(1762581537.957:1458): avc: denied { setattr } for pid=17093 comm="syz.6.3273" name="PHONET" dev="sockfs" ino=73020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 228.322583][T17104] bad cache= option: none [ 228.322583][T17104] [ 228.324948][T17104] CIFS: VFS: bad cache= option: none [ 228.336747][ T9] usb 9-1: new low-speed USB device number 23 using dummy_hcd [ 228.358855][ T9] usb 9-1: device descriptor read/8, error -71 [ 228.635384][ T9] usb 9-1: new low-speed USB device number 24 using dummy_hcd [ 228.657256][ T9] usb 9-1: device descriptor read/8, error -71 [ 228.777727][ T9] usb usb9-port1: unable to enumerate USB device [ 228.811352][T17128] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3282'. [ 228.871435][T17137] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3285'. [ 228.885164][T17133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3284'. [ 228.915779][T17140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.058344][ T40] audit: type=1400 audit(1762581538.687:1459): avc: denied { mount } for pid=17154 comm="syz.6.3291" name="/" dev="pstore" ino=6247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 229.156677][T17168] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 229.258278][T17176] netlink: 'syz.0.3299': attribute type 1 has an invalid length. [ 229.399351][T17196] xt_l2tp: wrong L2TP version: 0 [ 229.631670][T17203] netlink: 'syz.0.3307': attribute type 1 has an invalid length. [ 229.811810][ T5986] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 229.961359][ T5986] usb 10-1: device descriptor read/64, error -71 [ 230.046918][ T5931] Bluetooth: hci1: command 0x0c1a tx timeout [ 230.239317][ T5986] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 230.380750][ T5986] usb 10-1: device descriptor read/64, error -71 [ 230.497466][ T5986] usb usb10-port1: attempt power cycle [ 230.687437][T17238] vlan2: entered promiscuous mode [ 230.689411][T17238] bridge0: entered promiscuous mode [ 230.859773][ T5986] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 230.881549][ T5986] usb 10-1: device descriptor read/8, error -71 [ 230.987904][ T9] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 231.137922][ T5986] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 231.148205][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 231.152331][ T9] usb 9-1: config 8 has an invalid interface number: 203 but max is 0 [ 231.156005][ T9] usb 9-1: config 8 has no interface number 0 [ 231.158880][ T9] usb 9-1: config 8 interface 203 has no altsetting 0 [ 231.159475][ T5986] usb 10-1: device descriptor read/8, error -71 [ 231.163939][ T9] usb 9-1: New USB device found, idVendor=0544, idProduct=06c3, bcdDevice=eb.7a [ 231.167946][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.171156][ T9] usb 9-1: Product: syz [ 231.172822][ T9] usb 9-1: Manufacturer: syz [ 231.174541][ T9] usb 9-1: SerialNumber: syz [ 231.218683][ T5931] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 231.277205][ T5986] usb usb10-port1: unable to enumerate USB device [ 231.400885][ T9] usb 9-1: USB disconnect, device number 25 [ 231.702709][T17258] __nla_validate_parse: 8 callbacks suppressed [ 231.702720][T17258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3322'. [ 231.707774][T17258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3322'. [ 231.725164][T17258] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 231.961652][T17277] tipc: Started in network mode [ 231.963619][T17277] tipc: Node identity 4, cluster identity 4711 [ 231.966011][T17277] tipc: Node number set to 4 [ 232.055786][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 232.055801][ T40] audit: type=1400 audit(1762581541.493:1461): avc: denied { append } for pid=17287 comm="syz.4.3331" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 232.067473][T17290] netlink: 'syz.4.3331': attribute type 2 has an invalid length. [ 232.071100][T17290] netlink: 46 bytes leftover after parsing attributes in process `syz.4.3331'. [ 232.075110][T17290] netlink: 'syz.4.3331': attribute type 2 has an invalid length. [ 232.077626][T17290] netlink: 46 bytes leftover after parsing attributes in process `syz.4.3331'. [ 232.205367][T17301] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3333'. [ 232.271145][ T5931] Bluetooth: hci1: command 0x0c1a tx timeout [ 232.407615][T17305] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.410191][T17305] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.429943][T17306] netlink: 'syz.4.3336': attribute type 1 has an invalid length. [ 232.475796][T17305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.486904][T17305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.601607][T17306] 8021q: adding VLAN 0 to HW filter on device bond2 [ 232.623940][T17307] bond2: (slave veth3): Enslaving as an active interface with a down link [ 232.630419][T17308] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 232.632853][T17308] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 232.648210][ T9528] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.651963][ T9528] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.656531][ T9528] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.659595][ T9528] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.824860][T17325] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3341'. [ 232.824900][T17326] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3341'. [ 232.991222][T17337] netlink: 'syz.4.3345': attribute type 2 has an invalid length. [ 232.994094][T17337] netlink: 'syz.4.3345': attribute type 11 has an invalid length. [ 232.998968][T17340] netlink: 'syz.4.3345': attribute type 11 has an invalid length. [ 233.085082][ T40] audit: type=1400 audit(1762581542.456:1462): avc: denied { write } for pid=17344 comm="syz.4.3347" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 233.192197][T17352] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.198691][T17353] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.205203][T17351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17351 comm=syz.4.3349 [ 233.245163][T17355] unsupported nla_type 4111 [ 233.400487][T17368] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 233.481714][T17373] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3355'. [ 233.559069][T17379] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3358'. [ 233.637183][T17391] netlink: 'syz.5.3363': attribute type 58 has an invalid length. [ 233.648218][T17391] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 233.650076][T17391] PKCS7: Only support pkcs7_signedData type [ 233.689856][T17393] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3360'. [ 233.742955][T17403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13342 sclass=netlink_route_socket pid=17403 comm=syz.5.3367 [ 233.783624][T17411] overlayfs: failed to clone upperpath [ 234.124936][T17436] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 234.296482][T17440] overlayfs: upper fs does not support tmpfile. [ 234.500295][T17448] afs: Unknown parameter 'dyl' [ 234.660653][T17463] sp0: Synchronizing with TNC [ 234.666671][T17462] [U] [ 234.710656][T17465] fuse: Bad value for 'rootmode' [ 234.854015][ T40] audit: type=1400 audit(1762581544.111:1463): avc: denied { read write } for pid=17478 comm="syz.4.3393" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 234.862461][ T40] audit: type=1400 audit(1762581544.111:1464): avc: denied { open } for pid=17478 comm="syz.4.3393" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 234.862489][ T40] audit: type=1400 audit(1762581544.111:1465): avc: denied { ioctl } for pid=17478 comm="syz.4.3393" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 234.949827][T17483] overlayfs: conflicting options: userxattr,redirect_dir=on [ 235.507294][ T40] audit: type=1400 audit(1762581544.719:1466): avc: denied { read write } for pid=17491 comm="syz.0.3398" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 235.508006][T17492] fuse: Unknown parameter 'obj_role' [ 235.518533][ T40] audit: type=1400 audit(1762581544.719:1467): avc: denied { open } for pid=17491 comm="syz.0.3398" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 235.525554][ T5931] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 235.529630][ T5931] Bluetooth: hci2: Injecting HCI hardware error event [ 235.536511][ T5931] Bluetooth: hci2: hardware error 0x00 [ 235.766121][ T40] audit: type=1800 audit(1762581544.962:1468): pid=17501 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3400" name="file0" dev="tmpfs" ino=907 res=0 errno=0 [ 235.773867][ T40] audit: type=1804 audit(1762581544.972:1469): pid=17500 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.3400" name="/newroot/167/file0" dev="tmpfs" ino=907 res=1 errno=0 [ 235.895187][ T40] audit: type=1400 audit(1762581545.084:1470): avc: denied { write } for pid=17507 comm="syz.4.3402" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 235.897011][T17508] xt_hashlimit: max too large, truncated to 1048576 [ 236.152735][ T5960] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 237.173126][T17544] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 237.244589][T17568] __nla_validate_parse: 4 callbacks suppressed [ 237.244600][T17568] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3420'. [ 237.256678][T17561] netlink: 'syz.6.3417': attribute type 10 has an invalid length. [ 237.259028][T17560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=17560 comm=syz.6.3417 [ 237.268872][T17560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=17560 comm=syz.6.3417 [ 237.273934][T17560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=17560 comm=syz.6.3417 [ 237.274601][T17561] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 237.281735][T17560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=17560 comm=syz.6.3417 [ 237.302688][ T5940] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 237.303460][ T5940] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 237.315743][ T5940] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 237.399325][T17595] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4243739199 (8487478398 ns) > initial count (2409167910 ns). Using initial count to start timer. [ 237.407384][T17595] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2392374992 (306223998976 ns) > initial count (181984491136 ns). Using initial count to start timer. [ 237.533784][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 237.533795][ T40] audit: type=1400 audit(1762581546.618:1475): avc: denied { unmount } for pid=13988 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 237.544015][ T40] audit: type=1400 audit(1762581546.627:1476): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=56888 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 237.552104][ T40] audit: type=1400 audit(1762581546.627:1477): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=56888 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 237.563907][ T40] audit: type=1400 audit(1762581546.636:1478): avc: denied { read write } for pid=13988 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 237.571680][ T40] audit: type=1400 audit(1762581546.646:1479): avc: denied { open } for pid=13988 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 237.582835][ T40] audit: type=1400 audit(1762581546.646:1480): avc: denied { ioctl } for pid=13988 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 237.592498][ T40] audit: type=1400 audit(1762581546.646:1481): avc: denied { create } for pid=17596 comm="syz.0.3430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 237.593734][T17604] SET target dimension over the limit! [ 237.601375][ T40] audit: type=1400 audit(1762581546.646:1482): avc: denied { write } for pid=17596 comm="syz.0.3430" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 237.610598][ T40] audit: type=1400 audit(1762581546.655:1483): avc: denied { bpf } for pid=17600 comm="syz.6.3431" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 237.618349][ T40] audit: type=1400 audit(1762581546.683:1484): avc: denied { prog_load } for pid=17603 comm="syz.5.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 237.658760][T17613] program syz.5.3433 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.745556][ T5931] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 237.977334][T17634] netlink: 'syz.6.3440': attribute type 29 has an invalid length. [ 237.993032][T17634] netlink: 'syz.6.3440': attribute type 29 has an invalid length. [ 237.998100][T17634] netlink: 500 bytes leftover after parsing attributes in process `syz.6.3440'. [ 238.301458][ T5960] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 238.404988][T17646] lo: entered promiscuous mode [ 238.433005][T17649] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 238.473894][ T5960] usb 5-1: config 1 has an invalid interface number: 68 but max is 0 [ 238.476354][ T5960] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 238.478969][ T5960] usb 5-1: config 1 has no interface number 0 [ 238.480774][ T5960] usb 5-1: config 1 interface 68 altsetting 9 endpoint 0x8 has invalid wMaxPacketSize 0 [ 238.483950][ T5960] usb 5-1: config 1 interface 68 altsetting 9 has an endpoint descriptor with address 0x9D, changing to 0x8D [ 238.487326][ T5960] usb 5-1: config 1 interface 68 altsetting 9 endpoint 0x8D has invalid maxpacket 4588, setting to 64 [ 238.491064][ T5960] usb 5-1: config 1 interface 68 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 238.496444][ T5960] usb 5-1: config 1 interface 68 altsetting 9 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 238.499757][ T5960] usb 5-1: config 1 interface 68 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 238.502739][ T5960] usb 5-1: config 1 interface 68 altsetting 9 has an endpoint descriptor with address 0x2B, changing to 0xB [ 238.506448][ T5960] usb 5-1: config 1 interface 68 altsetting 9 endpoint 0xB has invalid maxpacket 45232, setting to 64 [ 238.509429][ T5960] usb 5-1: config 1 interface 68 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 238.513852][ T5960] usb 5-1: config 1 interface 68 altsetting 9 has 9 endpoint descriptors, different from the interface descriptor's value: 7 [ 238.519714][ T5960] usb 5-1: config 1 interface 68 has no altsetting 0 [ 238.525728][ T5960] usb 5-1: New USB device found, idVendor=1bc7, idProduct=9200, bcdDevice=b0.52 [ 238.528113][T17653] FAT-fs (nullb0): bogus number of reserved sectors [ 238.528903][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.530519][T17653] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 238.532903][ T5960] usb 5-1: Product: 鬥젎岭㏓⫂兰۰湣ॡ [ 238.537480][ T5960] usb 5-1: Manufacturer: 쇨댏朴⦂挨ⶶ䍡픉ﴍ굁ṧᯂ萯Ⴭﲙ閸Ẫꝳ羪怂┝⏑腪젧ʫᦁ講蝝ኃ攈徼퐙蹜๟켶婌牕揈澸쵻㐔䯬 [ 238.542602][ T5960] usb 5-1: SerialNumber: Ў [ 238.549001][T17637] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 238.580357][T17656] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 238.774214][ T5960] option 5-1:1.68: GSM modem (1-port) converter detected [ 238.810765][T17669] netlink: 'syz.5.3452': attribute type 5 has an invalid length. [ 238.814477][T17669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3452'. [ 238.824120][T17669] pim6reg: entered allmulticast mode [ 238.829748][T17669] pim6reg: left allmulticast mode [ 238.935235][T17686] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 238.937992][T17686] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 238.941382][T17686] vhci_hcd vhci_hcd.0: Device attached [ 238.970400][T17691] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3459'. [ 238.984507][ T841] usb 5-1: USB disconnect, device number 23 [ 238.998361][ T841] option 5-1:1.68: device disconnected [ 239.085426][T17691] team_slave_0 (unregistering): left promiscuous mode [ 239.087599][T17691] team_slave_0 (unregistering): left allmulticast mode [ 239.090477][T17691] team0: Port device team_slave_0 removed [ 239.101573][T17703] mkiss: ax0: crc mode is auto. [ 239.203334][ T9] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 239.221093][ T5960] usb 9-1: new low-speed USB device number 26 using dummy_hcd [ 239.383226][ T5960] usb 9-1: config 0 has no interfaces? [ 239.384914][ T5960] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 239.387592][ T5960] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.391205][ T5960] usb 9-1: config 0 descriptor?? [ 239.608774][T17688] usbip_core: unknown command [ 239.608787][T17688] vhci_hcd: unknown pdu 0 [ 239.611828][T17688] usbip_core: unknown command [ 239.612013][ T9528] vhci_hcd: stop threads [ 239.615259][ T9528] vhci_hcd: release socket [ 239.616173][ T9528] vhci_hcd: disconnect device [ 239.637531][ T5960] usb 9-1: USB disconnect, device number 26 [ 239.691444][ T9] vhci_hcd: vhci_device speed not set [ 240.269842][T17759] tmpfs: Unknown parameter 'euid>00000000000000000000' [ 240.302538][ T5931] Bluetooth: hci1: unexpected event for opcode 0x2023 [ 240.310744][T17764] uprobe: syz.6.3475:17764 failed to unregister, leaking uprobe [ 240.559150][T17800] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3486'. [ 240.562478][T17799] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3486'. [ 240.566387][T17799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3486'. [ 240.644701][T17817] binder: Binderfs stats mode cannot be changed during a remount [ 240.687704][T17819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3493'. [ 240.690554][T17819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3493'. [ 240.910431][ T9] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 241.063551][T17831] overlayfs: failed to resolve './file1': -2 [ 241.066491][T17830] bridge0: port 3(batadv0) entered disabled state [ 241.070775][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 241.073170][T17830] bridge_slave_0: left allmulticast mode [ 241.074955][ T9] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 241.074987][ T9] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 241.077592][T17830] bridge_slave_0: left promiscuous mode [ 241.077749][T17830] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.083258][ T9] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 241.091836][ T9] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 241.098446][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 241.100205][T17830] bridge_slave_1: left allmulticast mode [ 241.103541][T17830] bridge_slave_1: left promiscuous mode [ 241.104020][ T9] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 241.105401][T17830] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.109126][ T9] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 241.115312][ T9] usb 10-1: Product: syz [ 241.117322][ T9] usb 10-1: Manufacturer: syz [ 241.119397][ T9] usb 10-1: SerialNumber: syz [ 241.121768][T17830] bond0: (slave bond_slave_0): Releasing backup interface [ 241.123556][ T9] usb 10-1: config 0 descriptor?? [ 241.129209][ T9] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 241.134366][ T9] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 241.143328][T17830] bond0: (slave bond_slave_1): Releasing backup interface [ 241.156684][T17830] team0: Failed to send options change via netlink (err -105) [ 241.159560][T17830] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 241.163632][T17830] team0: Port device team_slave_0 removed [ 241.172451][T17830] team0: Failed to send options change via netlink (err -105) [ 241.174997][T17830] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 241.178296][T17830] team0: Port device team_slave_1 removed [ 241.180583][T17830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.182887][T17830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.185969][T17830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.189431][T17830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.195684][T17830] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 241.219732][T17833] team0: Failed to send options change via netlink (err -105) [ 241.222591][T17833] team0: Mode changed to "loadbalance" [ 241.344050][ T9] usb 10-1: USB disconnect, device number 12 [ 241.350221][ T9] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 241.436517][T17856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3502'. [ 241.563537][T17816] tmpfs: Bad value for 'mpol' [ 241.796204][T17881] binder: 17880:17881 ioctl c0306201 200000000080 returned -22 [ 241.892269][T17884] team0: Port device team_slave_1 removed [ 242.006552][T17892] overlayfs: regular lower layers cannot follow data lower layers [ 242.300390][ T6014] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 242.458380][T17917] x_tables: duplicate underflow at hook 4 [ 242.485301][T17917] syz_tun: entered allmulticast mode [ 242.485915][ T6014] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 242.490016][ T6014] usb 9-1: can't read configurations, error -22 [ 242.490179][T17917] syz_tun: left allmulticast mode [ 242.540527][ T9] IPVS: starting estimator thread 0... [ 242.631959][ T6014] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 242.631978][T17925] IPVS: using max 46 ests per chain, 110400 per kthread [ 242.794443][ T6014] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 242.797032][ T6014] usb 9-1: can't read configurations, error -22 [ 242.799485][ T6014] usb usb9-port1: attempt power cycle [ 242.918477][ T40] kauditd_printk_skb: 175 callbacks suppressed [ 242.918487][ T40] audit: type=1400 audit(1762581551.649:1660): avc: denied { accept } for pid=17932 comm="syz.0.3526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 242.946991][T17928] Cannot find del_set index 2 as target [ 243.008427][T17941] netlink: 'syz.6.3528': attribute type 58 has an invalid length. [ 243.036462][T17943] __nla_validate_parse: 6 callbacks suppressed [ 243.036473][T17943] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3529'. [ 243.187955][ T6014] usb 9-1: new full-speed USB device number 29 using dummy_hcd [ 243.194262][T17949] netlink: 'syz.0.3530': attribute type 21 has an invalid length. [ 243.197792][T17949] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3530'. [ 243.211457][ T6014] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 243.213985][ T6014] usb 9-1: can't read configurations, error -22 [ 243.219232][T17958] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3534'. [ 243.222316][T17958] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3534'. [ 243.289010][ T40] audit: type=1400 audit(1762581551.995:1661): avc: denied { create } for pid=17961 comm="syz.6.3537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 243.359361][ T6014] usb 9-1: new full-speed USB device number 30 using dummy_hcd [ 243.366817][ T40] audit: type=1400 audit(1762581552.070:1662): avc: denied { write } for pid=17961 comm="syz.6.3537" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 243.391048][ T6014] usb 9-1: config index 0 descriptor too short (expected 9, got 0) [ 243.394663][ T6014] usb 9-1: can't read configurations, error -22 [ 243.397184][ T6014] usb usb9-port1: unable to enumerate USB device [ 243.549307][T17974] sp0: Synchronizing with TNC [ 243.552484][ T40] audit: type=1400 audit(1762581552.248:1663): avc: denied { nlmsg_read } for pid=17973 comm="syz.0.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 243.777535][ T40] audit: type=1400 audit(1762581552.463:1664): avc: denied { create } for pid=17978 comm="syz.0.3541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 243.778669][T17979] lo speed is unknown, defaulting to 1000 [ 243.784621][ T40] audit: type=1400 audit(1762581552.463:1665): avc: denied { write } for pid=17978 comm="syz.0.3541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 243.789388][T17979] lo speed is unknown, defaulting to 1000 [ 243.795525][T17979] lo speed is unknown, defaulting to 1000 [ 243.834055][ T40] audit: type=1400 audit(1762581552.510:1666): avc: denied { setopt } for pid=17978 comm="syz.0.3541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 243.834792][T17980] netlink: 'syz.0.3541': attribute type 4 has an invalid length. [ 243.850200][T17980] netlink: 'syz.0.3541': attribute type 4 has an invalid length. [ 243.875446][T17979] infiniband syz2: set active [ 243.878055][ T7940] lo speed is unknown, defaulting to 1000 [ 243.878076][T17979] infiniband syz2: added lo [ 243.896126][T17979] RDS/IB: syz2: added [ 243.897477][T17979] smc: adding ib device syz2 with port count 1 [ 243.899437][T17979] smc: ib device syz2 port 1 has no pnetid [ 243.901402][ T53] lo speed is unknown, defaulting to 1000 [ 243.903714][T17979] lo speed is unknown, defaulting to 1000 [ 243.989420][T17979] lo speed is unknown, defaulting to 1000 [ 244.069318][T17979] lo speed is unknown, defaulting to 1000 [ 244.192725][T17979] lo speed is unknown, defaulting to 1000 [ 244.273308][T17979] lo speed is unknown, defaulting to 1000 [ 244.353206][T17979] lo speed is unknown, defaulting to 1000 [ 244.435236][T17979] lo speed is unknown, defaulting to 1000 [ 244.443448][T17991] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 244.520044][T17979] lo speed is unknown, defaulting to 1000 [ 244.628715][ T40] audit: type=1400 audit(1762581553.248:1667): avc: denied { ioctl } for pid=18004 comm="syz.6.3550" path="socket:[76574]" dev="sockfs" ino=76574 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 244.631453][T18005] batadv_slave_1: entered promiscuous mode [ 244.636608][ T40] audit: type=1400 audit(1762581553.258:1668): avc: denied { setopt } for pid=18004 comm="syz.6.3550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 244.641063][T18004] batadv_slave_1: left promiscuous mode [ 244.650180][T18007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3551'. [ 244.707966][T18015] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3554'. [ 244.746047][T18013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3553'. [ 244.752092][ T40] audit: type=1400 audit(1762581553.370:1669): avc: denied { read } for pid=18011 comm="syz.0.3553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 244.985081][T18034] overlayfs: failed to clone upperpath [ 245.287660][T18044] nvme_fabrics: missing parameter 'transport=%s' [ 245.290567][T18044] nvme_fabrics: missing parameter 'nqn=%s' [ 245.923102][T18059] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 246.175456][T18072] bridge0: entered allmulticast mode [ 246.237616][T18079] bridge0: port 3(team0) entered disabled state [ 246.275686][T18087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18087 comm=syz.4.3578 [ 246.282174][T18087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3578'. [ 246.455548][T18106] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3586'. [ 246.731135][T18126] lo speed is unknown, defaulting to 1000 [ 246.972482][T18127] fuse: Bad value for 'user_id' [ 246.974293][T18127] fuse: Bad value for 'user_id' [ 246.977349][T18127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3591'. [ 247.250138][T18136] netlink: 'syz.4.3594': attribute type 1 has an invalid length. [ 247.253142][T18136] netlink: 'syz.4.3594': attribute type 4 has an invalid length. [ 247.349658][T18148] cgroup: Name too long [ 247.441762][T18161] netlink: 'syz.6.3602': attribute type 7 has an invalid length. [ 247.444482][T18161] netlink: 'syz.6.3602': attribute type 8 has an invalid length. [ 247.541157][T18167] overlayfs: failed to resolve './bus': -2 [ 247.618054][T18170] Device name not specified. [ 247.618054][T18170] [ 248.088033][T18178] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 248.363476][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 248.363487][ T40] audit: type=1400 audit(1762581556.737:1705): avc: denied { mount } for pid=18182 comm="syz.4.3609" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 248.504922][T18192] geneve3: entered promiscuous mode [ 248.506707][T18192] geneve3: entered allmulticast mode [ 248.513031][ T40] audit: type=1400 audit(1762581556.887:1706): avc: denied { write } for pid=18193 comm="syz.4.3614" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 248.608668][ T40] audit: type=1400 audit(1762581556.971:1707): avc: denied { read } for pid=18195 comm="syz.6.3615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 248.849340][T18209] __nla_validate_parse: 1 callbacks suppressed [ 248.849356][T18209] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3620'. [ 248.856094][T18209] nbd: couldn't find a device at index 31 [ 248.859888][ T40] audit: type=1326 audit(1762581557.214:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18208 comm="syz.4.3620" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeabf8f6c9 code=0x7ffc0000 [ 248.865302][T18209] xt_hashlimit: size too large, truncated to 1048576 [ 248.869204][ T40] audit: type=1326 audit(1762581557.214:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18208 comm="syz.4.3620" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeabf8f6c9 code=0x7ffc0000 [ 248.869245][ T40] audit: type=1326 audit(1762581557.214:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18208 comm="syz.4.3620" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faeabf8f6c9 code=0x7ffc0000 [ 248.869281][ T40] audit: type=1326 audit(1762581557.214:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18208 comm="syz.4.3620" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeabf8f6c9 code=0x7ffc0000 [ 248.869318][ T40] audit: type=1326 audit(1762581557.214:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18208 comm="syz.4.3620" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeabf8f6c9 code=0x7ffc0000 [ 248.910535][ T40] audit: type=1326 audit(1762581557.214:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18208 comm="syz.4.3620" exe="/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7faeabf8f6c9 code=0x7ffc0000 [ 248.919117][ T40] audit: type=1400 audit(1762581557.214:1714): avc: denied { bind } for pid=18208 comm="syz.4.3620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 249.200974][T18236] netlink: 'syz.5.3629': attribute type 7 has an invalid length. [ 249.203903][T18236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3629'. [ 249.221874][T18238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3630'. [ 249.224840][T18238] openvswitch: netlink: Flow actions attr not present in new flow. [ 249.279837][T18242] 8021q: adding VLAN 0 to HW filter on device bond3 [ 249.320927][T18247] lo: left promiscuous mode [ 249.322952][T18247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.376904][T18251] mkiss: ax0: crc mode is auto. [ 249.381516][T18251] fuse: Unknown parameter 'gt2 [ 249.381516][T18251] 0x0000000000000005' [ 249.385359][T18251] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 249.527913][T18254] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3635'. [ 249.528593][T18255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3635'. [ 249.598485][T18260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3637'. [ 249.604570][T18260] netlink: 'syz.5.3637': attribute type 11 has an invalid length. [ 249.607523][T18260] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3637'. [ 249.715739][T18277] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 249.716104][ T9518] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 249.720636][T18277] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 249.720656][T18277] CPU: 0 UID: 0 PID: 18277 Comm: syz.4.3642 Not tainted syzkaller #0 PREEMPT(full) [ 249.726010][ T9518] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 249.728277][T18277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 249.731945][ T9519] Bluetooth: hci4: Frame reassembly failed (-84) [ 249.733882][T18277] RIP: 0010:h5_recv+0x104/0x950 [ 249.741508][T18277] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 21 91 7b f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 249.747407][T18277] RSP: 0018:ffffc90006fffbf0 EFLAGS: 00010293 [ 249.749277][T18277] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff88417c3a [ 249.751736][T18277] RDX: ffff8880354b0000 RSI: ffffffff88417c7f RDI: 0000000000000005 [ 249.754294][T18277] RBP: ffffc90006fffd78 R08: 0000000000000005 R09: 0000000000000000 [ 249.756717][T18277] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 249.759150][T18277] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8c907a80 [ 249.761617][T18277] FS: 00007faeaa1cd6c0(0000) GS:ffff8880d6a08000(0000) knlGS:0000000000000000 [ 249.764302][T18277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.766285][T18277] CR2: 00007faeaa1ccf98 CR3: 000000003de41000 CR4: 0000000000352ef0 [ 249.768710][T18277] Call Trace: [ 249.769918][T18277] [ 249.770845][T18277] ? __pfx_h5_recv+0x10/0x10 [ 249.772299][T18277] hci_uart_tty_receive+0x254/0x7e0 [ 249.773904][T18277] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 249.775670][T18277] tty_ioctl+0x583/0x1680 [ 249.777062][T18277] ? __pfx_tty_ioctl+0x10/0x10 [ 249.778578][T18277] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 249.780681][T18277] ? hook_file_ioctl_common+0x145/0x410 [ 249.782362][T18277] ? selinux_file_ioctl+0x180/0x270 [ 249.783929][T18277] ? selinux_file_ioctl+0xb4/0x270 [ 249.785598][T18277] ? __pfx_tty_ioctl+0x10/0x10 [ 249.787156][T18277] __x64_sys_ioctl+0x18e/0x210 [ 249.788673][T18277] do_syscall_64+0xcd/0xfa0 [ 249.790102][T18277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.791964][T18277] RIP: 0033:0x7faeabf8f6c9 [ 249.793387][T18277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.799133][T18277] RSP: 002b:00007faeaa1cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.801646][T18277] RAX: ffffffffffffffda RBX: 00007faeac1e6090 RCX: 00007faeabf8f6c9 [ 249.804129][T18277] RDX: 0000200000000040 RSI: 0000000000005412 RDI: 0000000000000005 [ 249.806611][T18277] RBP: 00007faeac011f91 R08: 0000000000000000 R09: 0000000000000000 [ 249.809023][T18277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.811464][T18277] R13: 00007faeac1e6128 R14: 00007faeac1e6090 R15: 00007ffde9fb2748 [ 249.813869][T18277] [ 249.814830][T18277] Modules linked in: [ 249.816324][T18277] ---[ end trace 0000000000000000 ]--- [ 249.818465][T18277] RIP: 0010:h5_recv+0x104/0x950 [ 249.820050][T18277] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 21 91 7b f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 249.825983][T18277] RSP: 0018:ffffc90006fffbf0 EFLAGS: 00010293 [ 249.827983][T18277] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff88417c3a [ 249.830438][T18277] RDX: ffff8880354b0000 RSI: ffffffff88417c7f RDI: 0000000000000005 [ 249.832940][T18277] RBP: ffffc90006fffd78 R08: 0000000000000005 R09: 0000000000000000 [ 249.835455][T18277] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 249.837949][T18277] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8c907a80 [ 249.840775][T18277] FS: 00007faeaa1cd6c0(0000) GS:ffff8880d6a08000(0000) knlGS:0000000000000000 [ 249.843553][T18277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.845583][T18277] CR2: 00007faeaa1ccf98 CR3: 000000003de41000 CR4: 0000000000352ef0 [ 249.847983][T18277] Kernel panic - not syncing: Fatal exception [ 249.850447][T18277] Kernel Offset: disabled [ 249.851808][T18277] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:59:24 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000051 RCX=ffffffff819bf1c1 RDX=ffff8880354b0000 RSI=ffffffff819bf1af RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90006fff878 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=6567203a73706f4f R12=1ffff92000dfff11 R13=0000000000000000 R14=ffff8880389d0000 R15=ffffc90006fff940 RIP=ffffffff819bf1b1 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007faeaa1cd6c0 ffffffff 00c00000 GS =0000 ffff8880d6a08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007faeaa1ccf98 CR3=000000003de41000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000014 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faeac013050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faeac01305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faeac013057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faeac01306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faeac0130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faeac0131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faeac1b74a8 00007faeac1b74a0 00007faeac1b7498 00007faeac1b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faeacd1d100 00007faeac1b7460 00007faeac1b7478 00007faeac1b74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faeac1b74b8 00007faeac1b74b0 00007faeac1b74a8 00007faeac1b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffffc900006a0ab0 RCX=ffffc900006a1001 RDX=1ffff920000d4156 RSI=ffffffff8187768e RDI=ffffc900006a0abc RBP=0000000000000004 RSP=ffffc900006a09d0 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc900006a09f0 R11=0000000000008750 R12=ffffffff81a80530 R13=ffffc900006a0ab0 R14=0000000000000000 R15=ffff8880389d0000 RIP=ffffffff81a805e5 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6b08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555570f57808 CR3=0000000025450000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde9fb2ad0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faeac013050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faeac01305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faeac013057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faeac01306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faeac0130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faeac0131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000001f1574 RBX=0000000000000002 RCX=ffffffff8b60b2a9 RDX=ffffed100d4c6656 RSI=ffffffff8bf06fc0 RDI=ffffffff8192579d RBP=ffffed1003bd4920 RSP=ffffc90000187de8 R8 =0000000000000000 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801dea4900 R14=ffffffff90820cd0 R15=0000000000000000 RIP=ffffffff8b609d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000019080 CR3=000000003de41000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faeac013050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faeac01305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faeac013057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faeac01306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faeac0130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faeac0131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faeac1b74a8 00007faeac1b74a0 00007faeac1b7498 00007faeac1b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faeacd1d100 00007faeac1b7460 00007faeac1b7478 00007faeac1b74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faeac1b74b8 00007faeac1b74b0 00007faeac1b74a8 00007faeac1b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff8211ddeb RDX=ffff8880355e4900 RSI=ffffffff8211de3b RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc90006edf598 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffea0000ac94c0 R13=ffff888034ba23c0 R14=0000000000000000 R15=ffffea0000ac94d8 RIP=ffffffff81bd0e06 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6d08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f216199bf98 CR3=0000000012f5e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcba7043e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff174013050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff17401305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff174013057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff17401306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1740130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1740131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000038 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030303030203030 3030303030302030 3030303030303020 3030303030303030 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2030303030303030 3020303030303030 3030203030303030 3030302030303030 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030303020303030 3030303030203030 3030303030302034 3030303030303020 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000