last executing test programs: 3m20.773809521s ago: executing program 2 (id=571): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x10, 0x0, 0x0, 0x2}}) (async) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r1, 0x0, 0x23, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) getsockopt$MRT(r1, 0x0, 0xd0, 0x0, &(0x7f0000000040)) 3m20.715144846s ago: executing program 2 (id=573): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000007d00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setxattr$security_selinux(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)='system_u:object_r:dhcpd_initrc_exec_t:s0\x00', 0x29, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000080)={0x6, @pix={0x4, 0x5, 0x31363553, 0x0, 0x7fff, 0x4, 0x1, 0x3, 0x0, 0x3, 0x0, 0x1}}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000140)=@x86={0x3, 0x8, 0x4c, 0x0, 0x0, 0x2, 0x9, 0x5, 0xfd, 0x12, 0x0, 0x10, 0x0, 0x4, 0xa, 0x0, 0x0, 0x0, 0x3, '\x00', 0x4, 0x8000000000002}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x22, 0x0, &(0x7f0000000480)="f80204000000000000007f530800ff47d61f844ca76750f66d702b1fe14b822a9b52", 0x0, 0x404, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) timerfd_create(0x9, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x1}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) 3m20.605038404s ago: executing program 2 (id=574): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r1, 0x0, 0x160) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010000d0400"/20, @ANYRES32=r4, @ANYBLOB="00000000002101002c001280110001006272696467655f736c6176650000000014000580050001"], 0x4c}, 0x1, 0x0, 0x0, 0x40000044}, 0x0) 3m20.591550645s ago: executing program 2 (id=575): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) (async) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x8, 0x1, 0x0, "d2ea61bf62041dae026e9e8203614554307c83d774dfc0fb62602f9a84c3bbe4", 0x32315559}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x8, 0x1, 0x0, "d2ea61bf62041dae026e9e8203614554307c83d774dfc0fb62602f9a84c3bbe4", 0x32315559}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 3m20.264106282s ago: executing program 2 (id=585): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r0) keyctl$search(0xa, r0, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000000080)=""/55, &(0x7f00000000c0)=0x37) close(r4) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f00000005c0)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, r6) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000007000000080000002220000000000000", @ANYRES32, @ANYBLOB="01000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000001c00000000000000000c000073fd7877f36c5baf000000000000009cb71a98dc873261a9b3e142f3873672d6266d1f7f3de9c6c28bd277f6ee47dea6b9518b5ccf907a0638ac9e2f9b59d2f444c1fbc8297a4c48ad7b8642170f141edf716118c6e0949e1cb296a8bb4c6d21fa120cbccf985817416cfe3f1142c42501ebf3f4eed3e4f32fbce5f5dd9067220c77b245164db4f7782d"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="05"], 0x10) r9 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000180)) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2084}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x1}]}}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000002080)=ANY=[@ANYRES32=r8, @ANYRES32=r10, @ANYBLOB="04"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r9, &(0x7f0000000240), &(0x7f00000006c0)=@buf="ceb4babe8da33062b48f095b584770a7b67f52fb0de522b8674dc62334f796bd76055715c67b41fdc19166ac69aebc1bd4154e98e32fbda3a4f8ef7aaf3e8f6bd1014d97efdbdc0a86bb2fb7c437cd3599d102db2978604c636c2ca7251e8ed7aefc35d0ffc0d603d0afe309d2181097255420472a8f64758a759fc2ef4507ef00c4cc3a00079e264fa22717eba9a0fe518d286e9f27eb8f206c80d8e7dfceadccd83560b4"}, 0x20) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x2, &(0x7f0000000540)=[{0x9, 0x0, 0x0, 0x7fffffff}, {0xa, 0x2, 0x7, 0x2400000}]}) r13 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r13, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x1ff, 0x80003, 0xa0363159, 0x2, 0x8000, 0x3, 0x6, 0x100010, 0x1, 0x1, 0x0, 0x5}}) close_range(r12, 0xffffffffffffffff, 0x0) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x2, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={0x0}}, 0xee) 3m19.961202708s ago: executing program 2 (id=588): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f0000000080)={0xa, 0x2, 0x7fff, @local, 0x4}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000000)="8000ff0200000099", 0x8}, {&(0x7f0000000440)="7c018525a26ee4a15618fd53b06270af60e3f5320530ae8197db6caa658cb002d1d73980363ae79998dba2de67e2bea696a8192e638a839ac383d3ba674ad5290f7d60ef6d6d4e9a9ea06f99c4897b9155bfef301282af42cc5057af1d4fa97d5f22349718ed6926ddb695a5bdb0a35d4bf6c2389a20115363aa83f8611aa8809c388228a90493f9fe5768069a961890ac0d41acdf5db7cee6fdaff0a8305b8803dd13dc5ca99eabdfe37614", 0xac}], 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="140000000000000029000000080000003a1c000000000000d382cb850558fa7e73e9482133186421df0daa9bd640b55722a22d01c3b3758881f3ac4cd7ee274c45bf8a73135dc699721fde6175837593a7d82d0afa7cdf88e66f6e5714224f5804997db7e739cb8b050f569a19d0848fdbef5dbc2e4fbeab34aa"], 0x18}}], 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r1], 0x50) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f00000001c0)) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="00000729bd7000ffdbdf250a000088595e8729d5250000", @ANYRES32=r5, @ANYBLOB="0400090004000b0008000a000000000004000b00"], 0x38}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x8) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "b2f2a03891307a69", "00000100", "634eca88", "a3aed7f3f111d75e"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r7) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x2000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES16=r0], 0x54}}, 0x8000) 3m19.882976171s ago: executing program 32 (id=588): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f0000000080)={0xa, 0x2, 0x7fff, @local, 0x4}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000000)="8000ff0200000099", 0x8}, {&(0x7f0000000440)="7c018525a26ee4a15618fd53b06270af60e3f5320530ae8197db6caa658cb002d1d73980363ae79998dba2de67e2bea696a8192e638a839ac383d3ba674ad5290f7d60ef6d6d4e9a9ea06f99c4897b9155bfef301282af42cc5057af1d4fa97d5f22349718ed6926ddb695a5bdb0a35d4bf6c2389a20115363aa83f8611aa8809c388228a90493f9fe5768069a961890ac0d41acdf5db7cee6fdaff0a8305b8803dd13dc5ca99eabdfe37614", 0xac}], 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="140000000000000029000000080000003a1c000000000000d382cb850558fa7e73e9482133186421df0daa9bd640b55722a22d01c3b3758881f3ac4cd7ee274c45bf8a73135dc699721fde6175837593a7d82d0afa7cdf88e66f6e5714224f5804997db7e739cb8b050f569a19d0848fdbef5dbc2e4fbeab34aa"], 0x18}}], 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r1], 0x50) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f00000001c0)) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="00000729bd7000ffdbdf250a000088595e8729d5250000", @ANYRES32=r5, @ANYBLOB="0400090004000b0008000a000000000004000b00"], 0x38}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x8) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "b2f2a03891307a69", "00000100", "634eca88", "a3aed7f3f111d75e"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r7) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x2000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES16=r0], 0x54}}, 0x8000) 44.871805949s ago: executing program 1 (id=1854): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8051}, 0x4040040) 42.703641126s ago: executing program 4 (id=2941): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read$FUSE(r0, &(0x7f0000001080)={0x2020}, 0x2020) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000001000000c8a7b12bfda81d98a64fdbc6d4a6b9c30900010073797a000000600000001600010000000900020073797a300043864973b0401f9d79300000000008000740000000032c0003800800024000000000080001400000007fb9b26be338b02550c449390018000380140001007866726d300000000000000000000000140000001400010000000000000000000000000a00"/196], 0xa8}}, 0x0) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) r5 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x140) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="20000000ff0f0000000400000600000001000000", @ANYRES32=r5, @ANYBLOB='\b\x00'/20, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0300000001d10a085ae225344e00"/28], 0x50) close_range(r4, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x7290, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3, 0xde}, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 42.644047717s ago: executing program 4 (id=2942): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x43) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="90db829991766d5fad37f60c9bfd514d84cceeebff710ae4febaf6402f89d15f506dd659ffc650f514a4826a058afd03dfb950587320d15f5bd6a256e7069bda6aa1e2b3800e5de6ebc0dc463b89df4381767f9f13e6ae523290e27d70507e9612cfb00a5f5c8a992b1cf8f8377d45e8efd00a47b77127b4822b8fbdb3638e4abb78cf8519b0b0fab38637f2ec632d9b8af093d365e2d1756de9dbcad45581eb", 0xa0}, {&(0x7f0000000180)="e3831b3629305c791bae17e2a0e47ba9f1467688a1c4d7cad66c70eebac6a52ff8fe156e974c1541ff08c3cfb0789806297410846792443a75cc61e86563b3a009dcf53e14bed7b3fc7b5241f9231a2ea554e903913a6768b53d1e8f8483dc220e77d4e911aa47f07c78bc4b9ad4", 0x6e}, {&(0x7f0000000300)="0f3d326f7621b766f75bb8650ffd79def61a4d7b8797d67c2e1d00e02efd7e4fa6f9251f56374e1a82a8e4afdb6fa6377654e44d419a038bae9d25ec20cc926ba73cd5672e9776ab06b57c2d73fc1ae0cf333446c1f0909a3109a9d1a1c9302cca060f15e00ba599aa35dec108969eb1ad488f941037f3b788e12879dedb0c615405dbaf904bda1cc9b52a82da33b665d92b54df7910284b2406187a2c720398ca5275a03977e19353ea64eab3c92e4010af30be0d1462e6f1d11c2f99448f22c388170ccf70883d33da84c00d992b8af5c925a789fc528731d1d14d075f537213903a", 0xe3}, {&(0x7f0000000400)="0833b8312c792918d1978cae20deccd9f1d4185935fef115048dd6a4be3bc563967e1a03ffedc0d18e205595a92dc922f2b97f9fb3fb88c1f650209f16142d4d1d766ae20f25039838326ccc6372de544b9f26c7b035eb914b25ace052efea3282d923402619b54ef5361151238b70", 0x6f}, {&(0x7f0000000200)="e0c7c2e2", 0x4}], 0x5}}, {{&(0x7f0000000280)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x79a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000500)="2bf5ea5b7a1712d551cb9d9265826da5bcaa44ad6c7f940d27", 0x19}, {&(0x7f0000000540)="0c90629ddb97c8eda963490c1ff63bb2999f62e406edab0e8e953143eb77f6a2333b60407b8f160cd5d94bbddb46b4e17c9cf1b0d4280ef765fb0645574c668e4d8b6b942b4984a113d3d6", 0x4b}, {&(0x7f00000005c0)="7642d68e49ba6b003c8bb74a9bd110f5d309170d1550e4b696b05d450614fca3200d02a3443c0b5006639e41e9b37885c6fb0330d9fd3c710498bf1b670416af28cbd2465fb3d4ece14998c8acdb3340313d8c1b705e9dd9460988beb54b33110d9fc2fa96f1fd36daaefb966edbfa276631047444c19aac28c35560982cd1dfb3cff1d694b2fcb009185029cd2998b2342a7d707c5fefc58eb550d06683a59bc819d9f1b9205ac6f9760a183cfff61d5e083aa157d4d45320efb422fcc280", 0xbf}], 0x3, &(0x7f00000006c0)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}}], 0x2, 0x40) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000f00)="c85651ba6c7c3a3d658131596ec733571ba7b7386890cf1f50e156c1104de3efc9f9261c04a6555706aca5cdb8f8ca0a0f47bfba02dba3674a167f33fa44fb8c02f11ad6eedc20291418bd4c7cd07624069b2d576f063f90af531d6f35df33f5247715db3a64eb12336b4afdfd373a2bb40ca18e8b8f96ce66fe16f0", 0x7c}], 0x1}}], 0x1, 0x4000) 42.642928612s ago: executing program 4 (id=2943): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2a, 0xa, 0x3a, {0xc, @sctp_ip4_spec={@loopback, @private=0xa010102, 0x4e24, 0x4e24, 0x1}, {0x0, @empty, 0x401, 0x1000, [0x7fff, 0x1]}, @usr_ip4_spec={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0x3, 0x6, 0x1, 0x3}, {0x0, @link_local, 0x1, 0x1, [0x9, 0x7]}, 0x96, 0x3}, 0x4, [0x3, 0x7f, 0xb2c, 0x0]}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3f}}}}]}]}, 0x84}}, 0x0) 42.533988908s ago: executing program 4 (id=2945): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x8, 0x0, 0x0, {0x40, 0x4, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902, 0xfffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x10800001}}, 0x50) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TIOCGPTPEER(r2, 0x932, 0x8) socket$inet(0x2, 0x80001, 0x84) r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40801, 0x0) ioctl$SNDCTL_TMR_START(r3, 0x5402) (async) r4 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) (async) r5 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000240)=0xe9, 0x4) (async) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getown(r7, 0x9) write(r6, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r8 = socket$inet(0x2, 0x2, 0x1) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xaece, 0x0) preadv(r11, &(0x7f00000001c0)=[{&(0x7f00000015c0)=""/4098, 0x1002}, {0x0}, {&(0x7f0000000740)=""/160, 0xa0}], 0x3, 0x2, 0xdf77) (async) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497c0c818c0", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)="b18420f195c61fe6", 0x8}, {0x0}, {0x0}], 0x3}}], 0x2, 0x2004000) (async) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) 42.421802078s ago: executing program 4 (id=2949): r0 = socket$netlink(0x10, 0x3, 0x7) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x8001, 0x804041) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r2, 0x0) mremap(&(0x7f00002ec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000048b000/0x2000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 41.95196875s ago: executing program 4 (id=2951): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000053022cf59766ae000600000000000008d14df7dfc47f704b2ad2b63d9c7f68fc84e4274ed9e4d6f62aefe662b3fab981f0639f252ef239b83b3e64b82013f6adb12ca590130b003d0240299f5e875f7169024141f3ad51e67feac0174fc6aefa0a5f8fec1bd459e5c19631f82a3e69ad42c640f447e923208e3609f84a2bdc2db51b179d7568af18ee"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 41.912081072s ago: executing program 33 (id=2951): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000053022cf59766ae000600000000000008d14df7dfc47f704b2ad2b63d9c7f68fc84e4274ed9e4d6f62aefe662b3fab981f0639f252ef239b83b3e64b82013f6adb12ca590130b003d0240299f5e875f7169024141f3ad51e67feac0174fc6aefa0a5f8fec1bd459e5c19631f82a3e69ad42c640f447e923208e3609f84a2bdc2db51b179d7568af18ee"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 39.860573347s ago: executing program 0 (id=2968): r0 = syz_io_uring_setup(0x70e4, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'netdevsim0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ab00, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r5, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x44, 0x0, @fd, 0x4, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 39.622258259s ago: executing program 0 (id=2970): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000044000500"], 0x178}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 39.616418166s ago: executing program 0 (id=2972): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xfff1, 0xffff}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0xe8) mount(&(0x7f0000000040)=@filename='./file1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='hpfs\x00', 0x1058, 0x0) 39.547402435s ago: executing program 0 (id=2974): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000080000150001c0"]) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r5, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x15}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000880)=""/100) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000d40)=@bridge_delneigh={0x2c, 0x1c, 0x1, 0x2, 0x0, {0x7, 0x0, 0x0, r7, 0x3, 0x4, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040051}, 0x4048080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getlink={0x39c, 0x12, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, 0x40900, 0x100}, [@IFLA_VF_PORTS={0x4}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x4}, @IFLA_EXT_MASK={0x8, 0x1d, 0xf}, @IFLA_VFINFO_LIST={0x368, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x2, 0x8000342, 0x5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x1, 0xbd3, 0x5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x8, 0x4}}]}, {0x4}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x7, @remote}}, @IFLA_VF_MAC={0x28, 0x1, {0x7, @broadcast}}, @IFLA_VF_VLAN={0x10, 0x2, {0xffffffff, 0x9e1, 0x4}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3ff, 0x432, 0x0, 0x8100}}, {0x14, 0x1, {0x8, 0x365, 0x5, 0x8100}}, {0x14, 0x1, {0xfffeffff, 0x876, 0xd1, 0x8100}}, {0x14, 0x1, {0x5, 0x3e, 0x80000000, 0x88a8}}]}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x7ff, 0x2}}]}, {0xb0, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xfffffff8, 0x2}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2ec, 0xe00000}}, @IFLA_VF_MAC={0x28, 0x1, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}, @IFLA_VF_MAC={0x28, 0x1, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x200, 0xdf5d}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4f, 0xc}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x1000, 0x9}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0x4, 0x4}}]}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x2, @multicast}}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0xfffffffd, 0xfffffff8}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0x362, 0x0, 0x8100}}, {0x14, 0x1, {0x3, 0x82f, 0x5, 0x88a8}}, {0x14, 0x1, {0xfffffffb, 0xfc5, 0x0, 0x88a8}}, {0x14, 0x1, {0xdfb, 0xf81, 0x2, 0x8100}}]}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0xa34}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x0, 0x80}}, @IFLA_VF_VLAN={0x10, 0x2, {0x1, 0x2fa, 0x1ff}}]}, {0xc0, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x6, 0xf45, 0x5, 0x8100}}, {0x14, 0x1, {0x0, 0x664, 0x80000000, 0x88a8}}, {0x14, 0x1, {0x8, 0x216, 0x8, 0x88a8}}, {0x14, 0x1, {0x40, 0x23c, 0x9, 0x88a8}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7, 0x3}}, @IFLA_VF_RATE={0x10, 0x6, {0x800, 0x3ff, 0x7ff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x1}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x9073}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1, 0x41}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xffff8000, 0xd}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x2}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x1, 0x101}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x9}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0x4}}, @IFLA_VF_TRUST={0xc, 0x9, {0xffffd661, 0x51ee0000}}]}]}]}, 0x39c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r8, &(0x7f00000007c0)='\f', 0x1, 0x20000815, 0x0, 0x0) recvmsg(r8, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002240)=""/4113, 0x1011}], 0x1, 0x0, 0x0, 0x407006}, 0x105) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x23cdc43, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 39.420021269s ago: executing program 0 (id=2976): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x2800) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff3, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xfe, 0x1, 0x6, 0x5, 0x5e1d, 0x8}, 0x3ff, 0xa0, 0x99}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008840) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r8 = accept4(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r8) sendmsg$alg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000080)=[@iv={0x38, 0x117, 0x2, 0x20, "fe228881c2deb38fa74010e4eb39969cfbfd03df83e4c57a8b623af9b27dde06"}], 0x38, 0x10}, 0x40804) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000980)={0x50, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x6001}, 0x10044001) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=""/96, 0x60}], 0x1}, 0x2) r9 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x80, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x1000004}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r9, 0x47bc, 0x0, 0x0, 0x0, 0x0) 39.133839498s ago: executing program 0 (id=2979): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0xfffe, @empty}}) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x9e}, "4a6213f58a655fa7e3ee729b1adb79532f8871ad30229ba383dfedb8190c6fe8ce7fb91c16d6060bdf6220e5176f28eea12fece785e00f7daf15827ae36958e481ba63fdcaeffbbc7c3d83d7e54da41663352f6366f83fbb870355760d94fb97f4769871c26684232d783d81da30a1e911ef9e58c1dee959155fc0bfccd955bbdc5b00b536203814746a8a9afe6ecd0671d7025262c3d4dbf2d711e78646"}, 0xa2) 39.114790196s ago: executing program 34 (id=2979): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000180)={'batadv_slave_1\x00', {0x2, 0xfffe, @empty}}) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x9e}, "4a6213f58a655fa7e3ee729b1adb79532f8871ad30229ba383dfedb8190c6fe8ce7fb91c16d6060bdf6220e5176f28eea12fece785e00f7daf15827ae36958e481ba63fdcaeffbbc7c3d83d7e54da41663352f6366f83fbb870355760d94fb97f4769871c26684232d783d81da30a1e911ef9e58c1dee959155fc0bfccd955bbdc5b00b536203814746a8a9afe6ecd0671d7025262c3d4dbf2d711e78646"}, 0xa2) 37.992597374s ago: executing program 1 (id=1854): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8051}, 0x4040040) 30.392447954s ago: executing program 1 (id=1854): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8051}, 0x4040040) 27.8025432s ago: executing program 3 (id=3068): io_cancel(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x7) 27.801881159s ago: executing program 3 (id=3069): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a01030000000200000000020000000c00024000000000000900010900010073797a30"], 0x80}, 0x1, 0x0, 0x0, 0x4000002}, 0x0) 27.727095304s ago: executing program 3 (id=3070): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x14) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfffffffffffffffd, 0x7c6c035d9d822eb7) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000140)={0x980902, 0xa}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xf) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r3, 0x8927, &(0x7f0000000040)={'vcan0\x00', @ifru_map={0x8000000000000001, 0x2, 0x8, 0x4, 0x1, 0xf8}}) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000000000000000c00018006000600894f"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 27.465075325s ago: executing program 3 (id=3072): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r1, 0xdfd2c0ff079d97f5}, 0x14}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r5, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x43) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f0000000000)={0x6, 'nr0\x00', {}, 0x100}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000080)={0x0, 'tunl0\x00', {0x3}, 0xfff8}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x89fc, &(0x7f0000000040)={'bond0\x00', 0x0}) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="04010000160001", @ANYRES16=r7, @ANYRESOCT=0x0, @ANYBLOB="e229ce4f68f4f0cedc58b28c63639a75d79a38f1d42d79d5186c891890608147d8a574e878538490899cb4ca34559ccf44c5f59767b7a9c2c68c7c5483a82bbef7cf6ea65168c04f5b6f7512b8c9866d03eb7401a2e3b500ffd95bf42370e4a42a3b50a1755f7435f2442bfdfd21f0b85164287c5f41107384cc702d0d8dc19929667d6ca76ef4994533f8ff1c41125cf9b19d51205686f975c63afcfdc32166"], 0x104}, 0x1, 0x0, 0x0, 0x4020004}, 0x4c814) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8008851) 27.303820738s ago: executing program 3 (id=3073): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)="1a668d062a71c6e7d5c27bf74166a6c6056e432a0dd68000e9946fa6d5f3fa61eb85b1097c52989c5d44b2a071d8d1b6798024dc1623dc723abb0678f866540a96ee72ea82508cd1e4eed46677b6a2fad6b423ee57b01600968635d62d01dde579a9e6e24503ffb84213a12708f6d65aeac4d692e4aa9c0cebaca3197901abeb287c8d1d30214fdfa7df76a481b3fa9827148127d353c9fb7a0b84859dc8a160ff549d19874b3f5386fa2f102755a3d57041dfdde30db6eb847f79b294174b87624269f8f53bc550043449a076cd9d886b4a347a2403289d29d9960380a50db2d1b7390ffdec6111e4119d74b8c35746a7a42a7514", 0xf5) r2 = dup(r0) r3 = accept4(r1, 0x0, 0x0, 0x800) sendfile(r3, r2, 0x0, 0x8a000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) syz_emit_ethernet(0x66, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x9) syz_emit_ethernet(0x5e, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYRES32=0x41424344, @ANYBLOB="a00200009078001c1e1230010000802e5431c67cf006f10971ea0000"], 0x0) r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r7, &(0x7f0000000300)='.\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x221) close(r7) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r7, 0x3b87, &(0x7f0000000240)={0x18, 0x0, 0x1, 0x0, 0x0, 0xa2f0}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8c, 0x0, &(0x7f0000000700)=[@exit_looper, @acquire_done={0x40106309, 0x1}, @increfs_done={0x40106308, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@fda={0x66646185, 0x7, 0x0, 0x9}, @flat=@weak_handle={0x77682a85, 0x100}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000540)={0x0, 0x20, 0x38}}, 0x4c0}, @increfs_done], 0x0, 0x0, 0x0}) dup3(r9, r8, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) 25.691103196s ago: executing program 3 (id=3079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0103fffffff500000000020000000c00024000000000000900010900010073797a30"], 0x80}, 0x1, 0x0, 0x0, 0x4000002}, 0x0) 25.626875126s ago: executing program 35 (id=3079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0103fffffff500000000020000000c00024000000000000900010900010073797a30"], 0x80}, 0x1, 0x0, 0x0, 0x4000002}, 0x0) 22.744360785s ago: executing program 1 (id=1854): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8051}, 0x4040040) 14.722722357s ago: executing program 1 (id=1854): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8051}, 0x4040040) 7.118233141s ago: executing program 1 (id=1854): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8051}, 0x4040040) 1.063353344s ago: executing program 7 (id=3371): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) setsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000080)=0x23fd, 0x4) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 1.063034024s ago: executing program 7 (id=3373): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = dup(r2) r4 = syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, &(0x7f0000000100), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000080)={0x2020}, 0x2020) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="820000000000000070000040"]) ioctl$I2C_SLAVE_FORCE(r3, 0x706, 0x1b0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000200), 0x2, 0x0) 870.017284ms ago: executing program 7 (id=3375): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x6, 0x2) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xa00965, 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) 866.957564ms ago: executing program 6 (id=3376): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000001840)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4a0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}]}}}]}, 0x3c}}, 0x0) getsockopt(r0, 0x9, 0x8, &(0x7f0000000140)=""/167, &(0x7f0000000000)=0xa7) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000001840)=0x8, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4a0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}]}}}]}, 0x3c}}, 0x0) (async) getsockopt(r0, 0x9, 0x8, &(0x7f0000000140)=""/167, &(0x7f0000000000)=0xa7) (async) 866.062909ms ago: executing program 7 (id=3377): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00), 0x0, 0x0, 0x0, 0x4000000}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x1d783000) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/msg\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d30783030303e3030303030303030346532332c72713d3078303030303030303030303030303083b6d69a213d4074ce42f8ac7343142b30332c00"]) 865.960625ms ago: executing program 6 (id=3378): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001b00)=ANY=[@ANYRESOCT=r1, @ANYBLOB="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", @ANYBLOB="010026bd0b736cf6fa011b0d0000180000c0292ffe42208014000200"], 0x2c}, 0x1, 0x0, 0x0, 0x6008040}, 0x880) (async) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) 863.070638ms ago: executing program 7 (id=3380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a01030000000000f5ff00020000000c00024000000000000900010900010073797a30"], 0x80}, 0x1, 0x0, 0x0, 0x4000002}, 0x0) 792.426981ms ago: executing program 6 (id=3381): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x33, 0x0, &(0x7f0000000200)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x14, 0xa9, @random="d4eb5312fae22606fb2b22b5fead95de"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @handle=@pci={{0x8}, {0x11}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42215}}, 0x20}, 0x1, 0xba01}, 0xc840) 792.191365ms ago: executing program 5 (id=3382): add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) r0 = socket$can_bcm(0x1d, 0x2, 0x2) fstat(r0, &(0x7f0000000080)) 791.469729ms ago: executing program 7 (id=3383): r0 = socket(0x22, 0x2, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_disconnect(r2) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, &(0x7f0000000200)={0x0, 0xb, 0x65, {0x65, 0x22, "9d0ea5159c18b0cecdfafebbb660429647d0d0e8729ce6d2a0180cb94d983b86c30b487685f95a77cc56025e1ccbdc05eb1cde24c494a4e325e1798f804933ace872ab8232819981bf2f90f13ad6dad330dc278b57cec4ed3e1643ebb87c36cc215801"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}, &(0x7f0000000180)={0x0, 0xf, 0x32, {0x5, 0xf, 0x32, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0xc1, 0x5, 0x7, 0xd, 0x40}, @wireless={0xb, 0x10, 0x1, 0xde4c6b698d6e174b, 0x8, 0x0, 0x41, 0x6, 0x5c}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x4, 0xf000, 0x4, [0x30, 0x60]}, @ptm_cap={0x3}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x80, 0x1, 0x2, "ebcc160e", "cf867a3f"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x8, 0xe3, 0x7f, 0x6, 0x0, 0x8}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x0, 0x18, 0xe7, "b3ff0dbbc50e879185e5cc147e96ff696ec5d36b437bc16109a2bb941b3022789e0665f02fd78afbc2d98868251e2dcbf4f648d56e5d1792ab38e28901c6553b92fe96a5a6a82fd9f5c46d29b1095fd95c7631ae85c6627414dceed21c9c9c4fa8d141fc43d07cf437f899f575c2a2d01b7066eebac2a2b508f179ff84fb63e671806b60866f0e9f10f27576fb5cd835705c4921120340ba3b883816feae85b0a2798eb841d0f2b68048afe88d1a8181ec86a59bbabd90cb113d17bad9bb3469bdb7cb95f24f688bf11f673f0f59324d9dbb3c6a910ffde97fcd69c007466c2a39402c69c49583"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x140, 0x24, [0xf0f]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x81}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "24da"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x27}, &(0x7f0000000840)={0x40, 0x13, 0x6, @local}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "d250"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x69}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x71}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x5}}) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000001c0)=0x5, 0x2) r3 = socket(0x40000000015, 0x5, 0x0) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x1b4, &(0x7f0000000380)={[{0xf6, 0x4e00, "ed5e57b57cb5e7dc86405a3d739aa289554cc2bcb8a04f1e5497020d3cfad726c1cc2b938b959e61fd7d3be05edde2b85094f6501e9bd06c07be9393cd16d6a7b94f3afdf6f0833294bee66a52d068c7cf119430dd554de371b03c175bdb5fb45872f66dbff7a0f318d50bdec69c39ced7f45d3d67e13424e0025e09b1e93b98e43801042833517e8a9f035f07c5ea633b1d3d96985dee2f6c832a7bd288364a5f5021001da76fb86490d6656d31f14874a92e94cc2e27dd10472046e47ca3b858bd7d74cd4d08657882bd73508ab0e577150096b909f9f680588de110e4900b25e9c056f1316e39698cd02e82f9c972dbb2bd62b00c"}, {0x2, 0x4e00, "80a3"}, {0xa2, 0x4e00, "55a2be233699fdf76e89c57c2b77409e65f02fbd202439bbb81e75ffc0aaa1c97d3dbbe49ab5a49d166012534d55671f9879202d086b2a003a1e102960ccf96c80a318290198f91582e279c9a1b4edc62e2092a3aebe48aea47aa9e1c19c434bf6ce79b6b5c8a53c559955d7341202ab9232059cab77a708a42107b8a37aaa956e0476225f9b988696150f5bfb47e4076aca65990e2c9a157887b5f6767991935560"}, {0x3, 0x4e00, "1446e4"}]}) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r5 = socket(0x10, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41c0) 790.538872ms ago: executing program 6 (id=3384): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x121000, 0x109) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xc, 0xa}, {0x0, 0xc}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x4810) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 64) syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500005c000000000011907800000000000000000b004e220048907803000000030000002870212d6eaa8051da20a52eb271dfeb04984050ee6b487bb35a7e09a48f6896c7e983953d1301bb1c01e6515915de48c76f0e8531"], 0x0) (async) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20242, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000006301000000000000950000000000000057827881c5e1627825e7001a1ee4b7511cbd4b3f8188e702e8908b9cf6d556c830d6a0ad00f3e1345b0d72494a602892b5ede67ce67402e292959713616fd1fb2cde47269c000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0x20}}], 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) (async) ioprio_get$pid(0x1, 0x0) (async) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f000000cdc0)=0x10, 0x4) (async, rerun: 32) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x30) (async, rerun: 32) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000200)) (async) pwritev(r8, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 790.486534ms ago: executing program 5 (id=3385): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x40}, '.\x00'}) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) 790.174812ms ago: executing program 6 (id=3386): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x500}, 0x1, 0x0, 0x0, 0x4c804}, 0x4091) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x1, 0x32314152, 0x3, 0x0, [{0x8, 0xf}, {0x9, 0x29f6ebcd}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x5, 0x4}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000600)) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r3, 0x2, 0x70bd21, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008044}, 0x80) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xcbd4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) readv(r5, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/200, 0xc8}], 0x1) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r6, 0x7cb, &(0x7f0000000080)={0xffffffffdccd5f6a, 0xa, 0x4}) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) socketpair(0x11, 0x3, 0x3, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) pidfd_send_signal(r10, 0x28, 0x0, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01b36f3246de561494257000000008000300", @ANYRES32=r12, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000001}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x114, r11, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}]]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x10) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') 703.635809ms ago: executing program 5 (id=3387): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000040)={0x8, 0xd5}) chdir(&(0x7f0000000480)='./cgroup\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0xec242, 0x80) 523.631992ms ago: executing program 6 (id=3388): mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x8200, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f00000029c0)={0x10, 0x0, r2}, 0x10) write$FUSE_NOTIFY_RESEND(r1, &(0x7f0000000100)={0x14}, 0x14) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000900)) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000280)={'ip6tnl0\x00', {0x2, 0x0, @empty}}) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) (async) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x8200, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) read$FUSE(r1, &(0x7f0000000580)={0x2020}, 0x2020) (async) write$FUSE_DIRENTPLUS(r1, &(0x7f00000029c0)={0x10, 0x0, r2}, 0x10) (async) write$FUSE_NOTIFY_RESEND(r1, &(0x7f0000000100)={0x14}, 0x14) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000900)) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000280)={'ip6tnl0\x00', {0x2, 0x0, @empty}}) (async) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) (async) 83.580297ms ago: executing program 5 (id=3389): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)=""/57, &(0x7f0000000100)=0x39) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000140)=0x2f, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x483, 0x44000102, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 1.97156ms ago: executing program 5 (id=3390): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000000d0aac00000000000000000000000000090002"], 0x20}}, 0x0) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0) r2 = fsmount(r0, 0x1, 0x0) fchdir(r2) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x2, 0x3, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xe7a}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0xfdfdffff, 0x0, 0xfffffff8}) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000000d0aac00000000000000000000000000090002"], 0x20}}, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0) (async) fsmount(r0, 0x1, 0x0) (async) fchdir(r2) (async) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x2, 0x3, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xe7a}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0xfdfdffff, 0x0, 0xfffffff8}) (async) 0s ago: executing program 5 (id=3391): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1ab083, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_procfs$pagemap(r0, &(0x7f00000001c0)) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x32}, 0x18) tkill(r3, 0x12) socket$packet(0x11, 0x3, 0x300) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000340)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r6}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x1) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r7, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r8, 0x103, 0x2, &(0x7f0000000100)=0xbc5, &(0x7f0000000180)=0x4) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000280)={0x60, 0x2, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x4, &(0x7f0000000200)=[{0x6, 0x0, 0x10}], 0x1, 0xfffffffffffffff5, 0x6, 0x2, 0x45, 0x28}) connect$netrom(r8, &(0x7f0000000700)={{0x6, @rose, 0xffffffff}, [@bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48) ppoll(&(0x7f0000000240)=[{r2, 0x100}], 0x1, &(0x7f0000000340), 0x0, 0x3e) kernel console output (not intermixed with test programs): uninitialized): (slave ip_vti0): Device is not bonding slave [ 228.135549][T15609] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip_vti0) [ 228.160924][T15611] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 228.165755][T15612] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 228.268004][T15623] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2882'. [ 228.326996][T15625] 9pnet_fd: Insufficient options for proto=fd [ 228.419317][T15637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2887'. [ 228.483862][T15641] netlink: 'syz.4.2889': attribute type 7 has an invalid length. [ 228.486267][T15641] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2889'. [ 228.560144][T15653] usb usb8: usbfs: process 15653 (syz.4.2893) did not claim interface 0 before use [ 228.583707][ T10] libceph: connect (1)[::]:6789 error -101 [ 228.586444][ T10] libceph: mon0 (1)[::]:6789 connect error [ 228.623011][ T5942] Bluetooth: hci1: command tx timeout [ 228.624929][T15658] ceph: No mds server is up or the cluster is laggy [ 228.638370][ T40] audit: type=1400 audit(229.496:838): avc: denied { ioctl } for pid=15667 comm="syz.4.2897" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 228.643189][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2897'. [ 228.675273][ T40] audit: type=1400 audit(229.536:839): avc: denied { nlmsg_read } for pid=15669 comm="syz.0.2898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 228.774651][T15689] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.2904'. [ 228.842280][T15702] overlayfs: missing 'lowerdir' [ 228.896384][ T40] audit: type=1400 audit(229.756:840): avc: denied { accept } for pid=15710 comm="syz.0.2912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 228.902108][ T40] audit: type=1400 audit(229.756:841): avc: denied { map } for pid=15710 comm="syz.0.2912" path="/692/file0" dev="hugetlbfs" ino=61794 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 228.902589][T15713] vlan2: entered allmulticast mode [ 228.910228][T15713] bridge0: entered allmulticast mode [ 228.939345][T15716] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2914'. [ 228.972998][ T40] audit: type=1400 audit(229.836:842): avc: denied { append } for pid=15715 comm="syz.0.2915" name="nbd0" dev="devtmpfs" ino=690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.053379][T15729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2917'. [ 229.192000][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.052511][T15579] vhci_hcd: connection reset by peer [ 230.054270][ T6766] vhci_hcd: stop threads [ 230.055616][ T6766] vhci_hcd: release socket [ 230.057106][ T6766] vhci_hcd: disconnect device [ 230.561552][ T40] audit: type=1400 audit(231.416:843): avc: denied { append } for pid=15739 comm="syz.3.2922" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 230.635451][T15763] loop2: detected capacity change from 0 to 7 [ 230.641182][T14209] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 230.642942][T14209] loop2: partition table partially beyond EOD, truncated [ 230.645418][T14209] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 230.651311][ T5935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 230.657338][ T5935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 230.660187][ T5935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 230.664045][ T5935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 230.664437][T15763] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 230.667912][T15763] loop2: partition table partially beyond EOD, truncated [ 230.668606][ T5935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 230.670426][T15763] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 230.703645][ T5942] Bluetooth: hci1: command tx timeout [ 230.704889][T15764] lo speed is unknown, defaulting to 1000 [ 230.713863][T14209] udevd[14209]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 230.753932][T14209] udevd[14209]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 230.821535][T15764] syzkaller0 speed is unknown, defaulting to 1000 [ 230.824478][T15764] lo speed is unknown, defaulting to 1000 [ 230.929848][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.961937][T15786] can0: slcan on ptm1. [ 230.965589][T15764] chnl_net:caif_netlink_parms(): no params data found [ 231.069031][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.083936][T15764] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.086216][T15764] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.088538][T15764] bridge_slave_0: entered allmulticast mode [ 231.091161][T15764] bridge_slave_0: entered promiscuous mode [ 231.107099][T15764] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.109257][T15764] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.110579][T15797] netlink: 'syz.4.2938': attribute type 39 has an invalid length. [ 231.111428][T15764] bridge_slave_1: entered allmulticast mode [ 231.116612][T15764] bridge_slave_1: entered promiscuous mode [ 231.133152][T15797] veth0_macvtap: left promiscuous mode [ 231.164168][T15782] can0 (unregistered): slcan off ptm1. [ 231.176277][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.198798][T15764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.208072][T15764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.272151][T15764] team0: Port device team_slave_0 added [ 231.277967][T15764] team0: Port device team_slave_1 added [ 231.317461][T15809] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 231.318298][T15764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.326956][T15764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.337727][T15764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.343559][T15764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.346396][T15764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.359364][T15764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.424218][T14209] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 231.515167][T15764] hsr_slave_0: entered promiscuous mode [ 231.517659][T15764] hsr_slave_1: entered promiscuous mode [ 231.519666][T15764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.521991][T15764] Cannot create hsr debugfs directory [ 231.611617][T15828] block device autoloading is deprecated and will be removed. [ 231.622636][T15826] md: md2 stopped. [ 231.628426][ T12] bridge_slave_1: left allmulticast mode [ 231.630185][ T12] bridge_slave_1: left promiscuous mode [ 231.631938][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.638061][ T12] bridge_slave_0: left allmulticast mode [ 231.639804][ T12] bridge_slave_0: left promiscuous mode [ 231.641686][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.641973][ T40] audit: type=1400 audit(232.496:844): avc: denied { connect } for pid=15825 comm="syz.4.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 231.939554][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.944130][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.947764][ T12] bond0 (unregistering): Released all slaves [ 232.365300][ T5935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 232.370432][ T5935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 232.374311][ T5935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 232.378393][ T5935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 232.380995][ T5935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 232.403392][ T40] audit: type=1400 audit(233.256:845): avc: denied { append } for pid=15864 comm="syz.0.2953" name="video9" dev="devtmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 232.428270][ T12] hsr_slave_0: left promiscuous mode [ 232.431097][ T12] hsr_slave_1: left promiscuous mode [ 232.433205][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.435428][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.437995][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.440242][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.452788][ T9] vhci_hcd: vhci_device speed not set [ 232.466820][ T12] veth1_macvtap: left promiscuous mode [ 232.468594][ T12] veth0_macvtap: left promiscuous mode [ 232.470388][ T12] veth1_vlan: left promiscuous mode [ 232.472091][ T12] veth0_vlan: left promiscuous mode [ 232.491984][ T40] audit: type=1400 audit(233.346:846): avc: denied { module_load } for pid=15871 comm="syz.0.2954" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 232.492917][T15872] kernel read not supported for file /policy (pid: 15872 comm: syz.0.2954) [ 232.508019][T15872] IPVS: set_ctl: invalid protocol: 94 100.1.1.2:20002 [ 232.704988][ T5942] Bluetooth: hci2: command tx timeout [ 232.848947][T15875] tmpfs: Bad value for 'mpol' [ 232.982779][T15880] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 233.126484][ T12] team0 (unregistering): Port device team_slave_1 removed [ 233.196977][ T12] team0 (unregistering): Port device team_slave_0 removed [ 233.738786][T15860] lo speed is unknown, defaulting to 1000 [ 233.824888][T15860] syzkaller0 speed is unknown, defaulting to 1000 [ 233.830012][T15860] lo speed is unknown, defaulting to 1000 [ 233.839234][T15764] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 233.844823][T15764] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 233.851088][T15764] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 233.860302][T15764] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 233.945158][T15764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.985887][T15764] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.992387][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.994430][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.003051][T15860] chnl_net:caif_netlink_parms(): no params data found [ 234.023719][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.025986][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.138989][T15860] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.141502][T15860] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.145102][T15860] bridge_slave_0: entered allmulticast mode [ 234.147713][T15860] bridge_slave_0: entered promiscuous mode [ 234.150897][T15860] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.153503][T15860] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.155686][T15860] bridge_slave_1: entered allmulticast mode [ 234.158279][T15860] bridge_slave_1: entered promiscuous mode [ 234.195897][T15860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.210856][T15860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.258343][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.289726][T15860] team0: Port device team_slave_0 added [ 234.294930][T15764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.300123][T15860] team0: Port device team_slave_1 added [ 234.315602][T15947] tun0: tun_chr_ioctl cmd 1074025675 [ 234.317263][T15947] tun0: persist enabled [ 234.318881][T15947] tun0: tun_chr_ioctl cmd 1074025675 [ 234.320552][T15947] tun0: persist disabled [ 234.335070][T15860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.337169][T15860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.338291][T15945] netlink: 'syz.3.2967': attribute type 1 has an invalid length. [ 234.345809][T15860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.350994][T15860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.353870][T15860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.361292][T15860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.381910][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.416813][T15860] hsr_slave_0: entered promiscuous mode [ 234.419014][T15860] hsr_slave_1: entered promiscuous mode [ 234.421100][T15860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.423737][T15860] Cannot create hsr debugfs directory [ 234.462697][ T5942] Bluetooth: hci1: command tx timeout [ 234.466556][T15944] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 234.507686][T15764] veth0_vlan: entered promiscuous mode [ 234.518975][T15953] __nla_validate_parse: 8 callbacks suppressed [ 234.518986][T15953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2970'. [ 234.524910][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.541504][T15764] veth1_vlan: entered promiscuous mode [ 234.577654][T15860] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 234.583179][T15764] veth0_macvtap: entered promiscuous mode [ 234.585511][T15860] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 234.591344][T15860] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 234.608558][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.614573][T15860] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 234.619091][T15764] veth1_macvtap: entered promiscuous mode [ 234.629270][T15764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.632179][T15764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.635432][T15764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.638324][T15764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.641854][T15764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.648353][T15764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.651240][T15764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.654430][T15764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.657368][T15764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.660845][T15764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.665987][T15764] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.668417][T15764] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.670775][T15764] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.673313][T15764] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.723336][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.725702][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.753385][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.757670][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.776367][T15860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.784405][ T5942] Bluetooth: hci2: command tx timeout [ 234.838319][T15860] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.869710][ T6787] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.871886][ T6787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.884205][ T6787] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.886388][ T6787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.893189][ T12] bridge_slave_1: left allmulticast mode [ 234.894819][ T12] bridge_slave_1: left promiscuous mode [ 234.896527][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.899523][ T12] bridge_slave_0: left allmulticast mode [ 234.901138][ T12] bridge_slave_0: left promiscuous mode [ 234.903680][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.906578][ T40] audit: type=1400 audit(235.766:847): avc: denied { map } for pid=15969 comm="syz.3.2978" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 235.063324][T15977] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.2981'. [ 235.151818][ T5935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.156925][ T5935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.159900][ T5935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.164145][ T5935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.167027][ T5935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.177578][T15983] netlink: 'syz.3.2982': attribute type 1 has an invalid length. [ 235.179965][T15983] netlink: 'syz.3.2982': attribute type 2 has an invalid length. [ 235.232973][T15984] kAFS: unparsable volume name [ 235.290433][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.294963][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.298513][ T12] bond0 (unregistering): Released all slaves [ 235.323198][T15860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 235.326259][T15860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.335268][T15981] lo speed is unknown, defaulting to 1000 [ 235.417087][T15860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.419416][T15981] syzkaller0 speed is unknown, defaulting to 1000 [ 235.422339][T15981] lo speed is unknown, defaulting to 1000 [ 235.495853][ T40] audit: type=1400 audit(236.356:848): avc: denied { bind } for pid=16000 comm="syz.3.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 235.501563][ T40] audit: type=1400 audit(236.356:849): avc: denied { listen } for pid=16000 comm="syz.3.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 235.588643][T15860] veth0_vlan: entered promiscuous mode [ 235.596768][T15981] chnl_net:caif_netlink_parms(): no params data found [ 235.603949][T16017] macsec0: entered promiscuous mode [ 235.605643][T16017] veth1_to_batadv: entered promiscuous mode [ 235.618750][T15860] veth1_vlan: entered promiscuous mode [ 235.744328][T15981] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.746530][T15981] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.748753][T15981] bridge_slave_0: entered allmulticast mode [ 235.751581][T15981] bridge_slave_0: entered promiscuous mode [ 235.758873][T15981] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.761017][T15981] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.763669][T15981] bridge_slave_1: entered allmulticast mode [ 235.766180][T15981] bridge_slave_1: entered promiscuous mode [ 235.785485][ T12] hsr_slave_0: left promiscuous mode [ 235.788836][ T12] hsr_slave_1: left promiscuous mode [ 235.790728][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.793294][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.796047][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.798293][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.821634][ T12] veth1_macvtap: left promiscuous mode [ 235.824476][ T12] veth1_vlan: left promiscuous mode [ 235.826112][ T12] veth0_vlan: left promiscuous mode [ 236.431996][ T12] team0 (unregistering): Port device team_slave_1 removed [ 236.500948][ T12] team0 (unregistering): Port device team_slave_0 removed [ 236.552689][ T5935] Bluetooth: hci1: command tx timeout [ 237.018567][T15860] veth0_macvtap: entered promiscuous mode [ 237.022881][T15860] veth1_macvtap: entered promiscuous mode [ 237.030464][T15981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.035083][T15981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.071673][T15981] team0: Port device team_slave_0 added [ 237.076342][T15981] team0: Port device team_slave_1 added [ 237.112656][T15860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.115907][T15860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.118886][T15860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.122012][T15860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.126277][T15860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.129243][T15981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.131417][T15981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.139563][T15981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.154151][T15860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.157359][T15860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.160243][T15860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.164217][T15860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.167883][T15860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.170486][T15981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.172974][T15981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.180500][T15981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.182581][ T5935] Bluetooth: hci0: command tx timeout [ 237.221460][T15981] hsr_slave_0: entered promiscuous mode [ 237.223888][T15981] hsr_slave_1: entered promiscuous mode [ 237.225932][T15981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.228285][T15981] Cannot create hsr debugfs directory [ 237.242411][T15860] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.245124][T15860] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.247698][T15860] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.250273][T15860] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.331380][ T6785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.334974][ T6785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.383876][ T6786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.386555][ T6786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.428041][T15981] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 237.433305][T15981] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 237.437284][T15981] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 237.442771][T15981] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 237.479838][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.515524][T15981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.527433][T15981] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.535206][ T223] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.537483][ T223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.542632][ T223] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.544891][ T223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.647300][T15981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.701976][T16067] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2992'. [ 237.790088][T16080] cgroup: Unknown subsys name 'fsname' [ 237.801710][ T5942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.805801][ T5942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.816712][ T5942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.821800][ T5942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.825499][ T5942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.825784][T15981] veth0_vlan: entered promiscuous mode [ 237.830386][T16085] ieee802154 phy0 wpan0: encryption failed: -22 [ 237.838412][T15981] veth1_vlan: entered promiscuous mode [ 237.886502][T16082] lo speed is unknown, defaulting to 1000 [ 237.890884][T15981] veth0_macvtap: entered promiscuous mode [ 237.897463][T15981] veth1_macvtap: entered promiscuous mode [ 237.909696][T15981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.913959][T15981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.919504][T15981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.924756][T15981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.927792][T15981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.931160][T15981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.935644][T15981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.938255][T16095] netlink: 'syz.5.2998': attribute type 29 has an invalid length. [ 237.960400][T15981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.981976][T15981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.985297][T15981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.988762][T15981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.991750][T15981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.995251][T15981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.999400][T15981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.001727][T16095] netlink: 'syz.5.2998': attribute type 29 has an invalid length. [ 238.004876][T16082] syzkaller0 speed is unknown, defaulting to 1000 [ 238.011545][T15981] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.016824][T15981] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.019549][T15981] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.022243][T15981] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.028325][T16082] lo speed is unknown, defaulting to 1000 [ 238.113539][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.150934][ T6766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.154990][ T6766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.167164][T16116] xt_hashlimit: size too large, truncated to 1048576 [ 238.196341][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.199279][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.211264][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.218706][T16114] lo speed is unknown, defaulting to 1000 [ 238.221051][T16082] chnl_net:caif_netlink_parms(): no params data found [ 238.320173][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.340890][ T40] audit: type=1400 audit(239.196:850): avc: denied { nlmsg_write } for pid=16123 comm="syz.6.2980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 238.368542][T16131] SELinux: policydb version 0 does not match my version range 15-34 [ 238.371180][T16131] SELinux: failed to load policy [ 238.384332][T16114] syzkaller0 speed is unknown, defaulting to 1000 [ 238.386870][T16082] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.389154][T16082] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.391494][T16082] bridge_slave_0: entered allmulticast mode [ 238.397943][T16082] bridge_slave_0: entered promiscuous mode [ 238.409293][T16082] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.411510][T16082] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.414802][T16082] bridge_slave_1: entered allmulticast mode [ 238.417411][T16082] bridge_slave_1: entered promiscuous mode [ 238.435367][T16114] lo speed is unknown, defaulting to 1000 [ 238.482220][T16082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.490342][T16082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.527019][T16141] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3008'. [ 238.554607][T16144] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3009'. [ 238.557526][T16144] netlink: zone id is out of range [ 238.557715][T16142] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3008'. [ 238.559134][T16144] netlink: zone id is out of range [ 238.559139][T16144] netlink: zone id is out of range [ 238.559143][T16144] netlink: get zone limit has 8 unknown bytes [ 238.632682][ T5935] Bluetooth: hci1: command tx timeout [ 238.672908][T16141] team0: Port device team_slave_0 removed [ 238.681086][T16142] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3008'. [ 238.687033][T16082] team0: Port device team_slave_0 added [ 238.701781][T16082] team0: Port device team_slave_1 added [ 238.719896][T16142] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3008'. [ 238.723031][T16142] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3008'. [ 238.765128][T16142] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3008'. [ 238.769211][ T12] bridge_slave_1: left allmulticast mode [ 238.771004][ T12] bridge_slave_1: left promiscuous mode [ 238.774516][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.778109][ T12] bridge_slave_0: left allmulticast mode [ 238.779899][ T12] bridge_slave_0: left promiscuous mode [ 238.781718][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.050025][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.054295][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.057975][ T12] bond0 (unregistering): Released all slaves [ 239.065281][T16082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.067466][T16082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.075841][T16082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.096615][T16082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.098877][T16082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.109144][T16082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.123785][ T5972] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 239.171207][T16082] hsr_slave_0: entered promiscuous mode [ 239.173565][T16082] hsr_slave_1: entered promiscuous mode [ 239.175560][T16082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.177894][T16082] Cannot create hsr debugfs directory [ 239.272576][ T5935] Bluetooth: hci0: command tx timeout [ 239.272864][ T5972] usb 10-1: Using ep0 maxpacket: 8 [ 239.277385][ T5972] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 239.283527][ T5972] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.292552][ T5972] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.295656][ T5972] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 239.297351][T16178] vlan2: entered promiscuous mode [ 239.298866][ T5972] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.300730][T16178] bond0: (slave vlan2): Opening slave failed [ 239.305304][ T5972] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 239.310148][ T5972] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.521618][ T5972] usb 10-1: usb_control_msg returned -32 [ 239.523990][ T5972] usbtmc 10-1:16.0: can't read capabilities [ 239.525956][ T12] hsr_slave_0: left promiscuous mode [ 239.528400][ T12] hsr_slave_1: left promiscuous mode [ 239.530448][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.542488][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.552401][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.556187][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.587337][ T12] veth1_macvtap: left promiscuous mode [ 239.589130][ T12] veth0_macvtap: left promiscuous mode [ 239.590897][ T12] veth1_vlan: left promiscuous mode [ 239.592678][ T12] veth0_vlan: left promiscuous mode [ 239.883432][T16198] usbtmc 10-1:16.0: usb_control_msg returned -32 [ 239.886749][T12528] usb 10-1: USB disconnect, device number 2 [ 239.902593][ T5935] Bluetooth: hci2: command tx timeout [ 240.234327][ T12] team0 (unregistering): Port device team_slave_1 removed [ 240.308078][ T12] team0 (unregistering): Port device team_slave_0 removed [ 240.702715][ T5935] Bluetooth: hci1: command tx timeout [ 240.919358][T16203] __nla_validate_parse: 58 callbacks suppressed [ 240.919370][T16203] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3024'. [ 240.924480][T16203] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3024'. [ 241.025651][ T40] audit: type=1400 audit(241.886:851): avc: denied { mounton } for pid=16209 comm="syz.5.3026" path="/16/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 241.031917][ T40] audit: type=1400 audit(241.886:852): avc: denied { remount } for pid=16209 comm="syz.5.3026" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 241.089682][T16082] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 241.097991][T16082] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 241.107632][T16082] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 241.107977][T16219] support for the xor transformation has been removed. [ 241.116423][T16082] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 241.164222][T16082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.177712][T16082] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.182235][ T6768] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.184530][ T6768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.191647][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.193876][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.295324][ T5935] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 241.302082][T16082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.337252][T16082] veth0_vlan: entered promiscuous mode [ 241.338213][T16242] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3032'. [ 241.342925][ T5935] Bluetooth: hci0: command tx timeout [ 241.349461][T16082] veth1_vlan: entered promiscuous mode [ 241.386052][T16082] veth0_macvtap: entered promiscuous mode [ 241.389658][T16082] veth1_macvtap: entered promiscuous mode [ 241.400656][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.407501][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.410525][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.414300][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.417294][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.420485][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.424786][T16082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.428439][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.431583][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.435106][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.438262][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.441223][T16082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.446243][T16082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.449935][T16082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.455835][T16082] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.458453][T16082] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.461051][T16082] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.464356][T16082] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.525532][ T6785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.528251][ T6785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.571291][ T6785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.574107][ T6785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.632566][ T6221] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 241.695247][T16261] Bluetooth: MGMT ver 1.23 [ 241.783073][ T6221] usb 11-1: Using ep0 maxpacket: 32 [ 241.785952][ T6221] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 241.788471][ T6221] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 241.791284][ T6221] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 241.794385][ T6221] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 241.797427][ T6221] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 241.800489][ T6221] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 241.805884][ T6221] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 241.808801][ T6221] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.812801][ T6221] usb 11-1: config 0 descriptor?? [ 242.019524][ T6221] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 242.028005][ T6221] usb 11-1: USB disconnect, device number 2 [ 242.033185][ T6221] usblp0: removed [ 242.452632][ T6221] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 242.602861][ T6221] usb 11-1: Using ep0 maxpacket: 32 [ 242.607179][ T6221] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 242.609686][ T6221] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 242.612282][ T6221] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 242.615210][ T6221] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 242.618175][ T6221] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 242.621041][ T6221] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 242.626044][ T6221] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 242.630527][ T6221] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.638444][ T6221] usb 11-1: config 0 descriptor?? [ 242.845293][ T6221] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 242.933297][T16305] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 243.044671][ T40] audit: type=1400 audit(243.906:853): avc: denied { read write } for pid=16247 comm="syz.6.3033" name="lp0" dev="devtmpfs" ino=3075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 243.051405][ T40] audit: type=1400 audit(243.906:854): avc: denied { open } for pid=16247 comm="syz.6.3033" path="/dev/usb/lp0" dev="devtmpfs" ino=3075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 243.098764][ C1] usblp0: nonzero read bulk status received: -71 [ 243.098823][T12528] usb 11-1: USB disconnect, device number 3 [ 243.103306][T16248] usblp0: error -71 reading from printer [ 243.354579][T16247] usblp0: removed [ 243.422857][ T5935] Bluetooth: hci0: command tx timeout [ 243.606136][T16309] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 243.656995][ T40] audit: type=1400 audit(244.516:855): avc: denied { create } for pid=16310 comm="syz.3.3052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 243.659685][T16311] netlink: 'syz.3.3052': attribute type 1 has an invalid length. [ 243.680663][T16311] 8021q: adding VLAN 0 to HW filter on device bond3 [ 243.704057][T16311] veth5: entered promiscuous mode [ 243.708548][T16311] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 243.734284][T16314] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3053'. [ 243.745765][T16316] netlink: 'syz.3.3054': attribute type 1 has an invalid length. [ 243.748141][T16316] netlink: 'syz.3.3054': attribute type 3 has an invalid length. [ 243.750447][T16316] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3054'. [ 243.786254][ T1149] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.982509][T12528] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 244.143739][T12528] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 244.147133][T12528] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 244.150037][T12528] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 244.153593][T12528] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 244.157997][T12528] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 244.160726][T12528] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.163417][T12528] usb 10-1: Product: syz [ 244.164705][T12528] usb 10-1: Manufacturer: syz [ 244.166129][T12528] usb 10-1: SerialNumber: syz [ 244.168827][T12528] usb 10-1: config 0 descriptor?? [ 244.376911][T12528] adutux 10-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 244.577706][ T40] audit: type=1400 audit(245.436:856): avc: denied { getopt } for pid=16313 comm="syz.5.3053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 244.585755][ T9] usb 10-1: USB disconnect, device number 3 [ 245.368336][T16329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3059'. [ 245.396305][ T40] audit: type=1400 audit(246.256:857): avc: denied { read } for pid=16331 comm="syz.3.3060" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 245.397342][T16332] tmpfs: Bad value for 'huge' [ 245.404654][ T40] audit: type=1400 audit(246.256:858): avc: denied { open } for pid=16331 comm="syz.3.3060" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 245.413930][ T40] audit: type=1400 audit(246.266:859): avc: denied { ioctl } for pid=16331 comm="syz.3.3060" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64bd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 245.448960][T16340] netlink: 'syz.3.3061': attribute type 10 has an invalid length. [ 245.451690][ T5942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.457802][ T5942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.460727][ T5942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.465916][ T5942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.468456][ T5942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.495786][T16339] lo speed is unknown, defaulting to 1000 [ 245.592014][ T1149] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.599107][T16339] syzkaller0 speed is unknown, defaulting to 1000 [ 245.602271][T16339] lo speed is unknown, defaulting to 1000 [ 245.667204][ T40] audit: type=1400 audit(246.526:860): avc: denied { read } for pid=16357 comm="syz.6.3065" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 245.697890][ T1149] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.708761][T16339] chnl_net:caif_netlink_parms(): no params data found [ 245.814824][ T1149] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.821763][T16339] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.824769][T16339] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.827047][T16339] bridge_slave_0: entered allmulticast mode [ 245.829664][T16339] bridge_slave_0: entered promiscuous mode [ 245.834142][T16339] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.836732][T16339] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.838924][T16339] bridge_slave_1: entered allmulticast mode [ 245.841492][T16339] bridge_slave_1: entered promiscuous mode [ 245.876229][T16339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.885427][T16339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.965031][T16339] team0: Port device team_slave_0 added [ 246.035332][T16339] team0: Port device team_slave_1 added [ 246.090962][T16339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.093282][T16339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.101077][T16339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.106338][T16339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.108468][T16339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.117593][T16339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.125842][ T1149] bridge_slave_1: left allmulticast mode [ 246.128370][ T1149] bridge_slave_1: left promiscuous mode [ 246.130849][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.140724][ T1149] bridge_slave_0: left allmulticast mode [ 246.144230][ T1149] bridge_slave_0: left promiscuous mode [ 246.146688][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.430019][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 246.430029][ T40] audit: type=1400 audit(247.286:862): avc: denied { listen } for pid=16375 comm="syz.6.3071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 246.438102][ T40] audit: type=1400 audit(247.286:863): avc: denied { accept } for pid=16375 comm="syz.6.3071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 246.558293][T16380] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 246.579820][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.595065][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.599283][ T1149] bond0 (unregistering): Released all slaves [ 246.695457][T16339] hsr_slave_0: entered promiscuous mode [ 246.697982][T16339] hsr_slave_1: entered promiscuous mode [ 246.700143][T16339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.702872][T16339] Cannot create hsr debugfs directory [ 246.759697][T16382] 8021q: VLANs not supported on tunl0 [ 246.784695][T16382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3072'. [ 247.022064][ T1149] hsr_slave_0: left promiscuous mode [ 247.025169][ T1149] hsr_slave_1: left promiscuous mode [ 247.027175][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.029882][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.038220][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.040524][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.068774][ T1149] veth1_macvtap: left promiscuous mode [ 247.070486][ T1149] veth0_macvtap: left promiscuous mode [ 247.072222][ T1149] veth1_vlan: left promiscuous mode [ 247.073954][ T1149] veth0_vlan: left promiscuous mode [ 247.391030][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025a2d400: rx timeout, send abort [ 247.393727][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025a2cc00: rx timeout, send abort [ 247.396479][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888025a2d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 247.401932][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888025a2cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 247.477079][T16405] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 247.516086][ T5942] Bluetooth: hci2: command tx timeout [ 247.604400][T16416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.658905][T16416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.717284][T16417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.804248][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 247.879892][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 248.442088][T16405] lo speed is unknown, defaulting to 1000 [ 248.555274][T16405] syzkaller0 speed is unknown, defaulting to 1000 [ 248.557900][T16405] lo speed is unknown, defaulting to 1000 [ 248.648205][ T5935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 248.653174][ T5935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 248.656496][ T5935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 248.660544][ T5935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 248.668834][ T5935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 248.708913][T16432] lo speed is unknown, defaulting to 1000 [ 248.783845][T16432] syzkaller0 speed is unknown, defaulting to 1000 [ 248.789323][T16432] lo speed is unknown, defaulting to 1000 [ 248.870913][ T40] audit: type=1326 audit(249.726:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16443 comm="syz.5.3081" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8e58e969 code=0x7ffc0000 [ 248.878612][ T40] audit: type=1326 audit(249.726:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16443 comm="syz.5.3081" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8e58e969 code=0x7ffc0000 [ 248.885416][ T40] audit: type=1326 audit(249.726:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16443 comm="syz.5.3081" exe="/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fba8e58e969 code=0x7ffc0000 [ 248.891962][T16339] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 248.898764][ T40] audit: type=1326 audit(249.726:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16443 comm="syz.5.3081" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8e58e969 code=0x7ffc0000 [ 248.910197][ T40] audit: type=1326 audit(249.726:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16443 comm="syz.5.3081" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba8e58e969 code=0x7ffc0000 [ 248.918611][ T40] audit: type=1326 audit(249.726:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16443 comm="syz.5.3081" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8e58e969 code=0x7ffc0000 [ 248.928165][ T40] audit: type=1326 audit(249.726:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16443 comm="syz.5.3081" exe="/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fba8e58e969 code=0x7ffc0000 [ 248.935211][ T40] audit: type=1326 audit(249.736:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16443 comm="syz.5.3081" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8e58e969 code=0x7ffc0000 [ 248.935260][T16339] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 248.954324][T16339] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 248.966569][T16339] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 248.974063][T16452] netlink: 'syz.5.3082': attribute type 29 has an invalid length. [ 248.977122][T16452] netlink: 'syz.5.3082': attribute type 29 has an invalid length. [ 248.979876][T16452] netlink: 500 bytes leftover after parsing attributes in process `syz.5.3082'. [ 249.012269][T16456] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 249.068374][T16432] chnl_net:caif_netlink_parms(): no params data found [ 249.087824][T16339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.146646][T16339] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.151885][ T6766] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.154086][ T6766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.189634][T16432] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.191885][T16432] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.194754][T16432] bridge_slave_0: entered allmulticast mode [ 249.197369][T16432] bridge_slave_0: entered promiscuous mode [ 249.202698][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.204883][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.215283][T16432] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.217541][T16432] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.219805][T16432] bridge_slave_1: entered allmulticast mode [ 249.222752][T16432] bridge_slave_1: entered promiscuous mode [ 249.250588][T16339] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 249.257389][T16339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.289136][T16432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.295186][T16432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.334153][T16432] team0: Port device team_slave_0 added [ 249.337684][T16432] team0: Port device team_slave_1 added [ 249.384517][T16432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.386656][T16432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.403070][T16432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.407292][T16432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.409446][T16432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.418474][T16432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.435404][T16478] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3087'. [ 249.438577][T16478] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3087'. [ 249.560797][T16339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.565627][T16432] hsr_slave_0: entered promiscuous mode [ 249.570388][T16432] hsr_slave_1: entered promiscuous mode [ 249.573696][T16432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.575979][T16432] Cannot create hsr debugfs directory [ 249.582649][ T5935] Bluetooth: hci2: command tx timeout [ 249.649963][T16492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3092'. [ 249.658217][T16492] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3092'. [ 249.668080][T16492] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.670798][T16492] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.673711][T16492] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.676426][T16492] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.681719][T16492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3092'. [ 249.684705][T16492] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3092'. [ 249.726300][T16339] veth0_vlan: entered promiscuous mode [ 249.731360][T16339] veth1_vlan: entered promiscuous mode [ 249.759338][T16339] veth0_macvtap: entered promiscuous mode [ 249.770787][T16339] veth1_macvtap: entered promiscuous mode [ 249.826098][T16505] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3097'. [ 249.830333][T16432] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 249.834663][T16432] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 249.838871][T16339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.862568][T16339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.865695][T16339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.868953][T16339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.871990][T16339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.875407][T16339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.879421][T16339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.882695][T16432] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 249.894231][T16339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.897516][T16339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.900555][T16339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.905089][T16339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.909376][T16339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.914944][T16339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.918841][T16339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.921182][T16432] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 249.934407][T16339] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.937983][T16339] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.941643][T16339] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.944982][T16339] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.016365][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.018722][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.040014][T16432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.048174][T16525] netlink: 'syz.6.3102': attribute type 11 has an invalid length. [ 250.050565][T16525] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3102'. [ 250.053973][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.056459][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.064748][T16432] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.070920][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.073206][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.080118][ T223] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.082363][ T223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.165850][ T5935] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 250.169704][T16536] trusted_key: encrypted_key: key trusted:syz not found [ 250.220648][T16541] sp0: Synchronizing with TNC [ 250.250452][T16432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.263201][T16540] [U] è [ 250.364710][T16432] veth0_vlan: entered promiscuous mode [ 250.369458][T16432] veth1_vlan: entered promiscuous mode [ 250.386857][T16432] veth0_macvtap: entered promiscuous mode [ 250.391118][T16432] veth1_macvtap: entered promiscuous mode [ 250.401302][T16432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.405227][T16432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.408375][T16432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.411566][T16432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.414924][T16432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.418139][T16432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.421153][T16432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.424874][T16432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.428752][T16432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.434218][T16432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.437450][T16432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.440453][T16432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.444259][T16432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.447280][T16432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.450470][T16432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.453611][T16432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.456975][T16432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.461224][T16432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.466992][T16432] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.469875][T16432] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.472676][T16432] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.481476][T16432] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.511949][ T6781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.518082][ T6781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.535938][ T6781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.538361][ T6781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.578384][T16565] syz.7.3080: attempt to access beyond end of device [ 250.578384][T16565] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 250.585724][T16565] exFAT-fs (nbd7): unable to read boot sector [ 250.587694][T16565] exFAT-fs (nbd7): failed to read boot sector [ 250.598301][T16565] exFAT-fs (nbd7): failed to recognize exfat type [ 250.623658][T16565] netlink: 'syz.7.3080': attribute type 9 has an invalid length. [ 250.675298][T16571] xt_hashlimit: size too large, truncated to 1048576 [ 250.702678][ T5935] Bluetooth: hci3: command tx timeout [ 250.729113][T16582] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 250.732247][T16582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.872164][T16597] binder: 16596:16597 ioctl c0306201 200000000000 returned -22 [ 250.924597][T16521] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 250.989215][T16607] ISOFS: Unable to identify CD-ROM format. [ 251.054284][ T6221] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 251.087226][T16615] tmpfs: Unknown parameter 'fsuuid' [ 251.126251][T16617] deleting an unspecified loop device is not supported. [ 251.157775][T16620] netlink: 'syz.6.3133': attribute type 1 has an invalid length. [ 251.163015][ T29] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 251.202871][ T6221] usb 12-1: Using ep0 maxpacket: 16 [ 251.208265][ T6221] usb 12-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 251.211353][ T6221] usb 12-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 251.216170][ T6221] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.218995][ T6221] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.221473][ T6221] usb 12-1: Product: 羌㮌ä¯å¶á‡¦ë‘˜ïµ‡ãµè˜ˆá±·ì–½ã‚»ã·‚ᔪ㱺㼋譧æ¿ê°¥îª™ç–²î©ŠÕ®æ¥”⚻〈賨쉌諓婉疴íŒë³å¶Žê‚ªä®ë¾çª¤î··ä¿é­›â¹‘ [ 251.226190][ T6221] usb 12-1: Manufacturer: á°‰ [ 251.227690][ T6221] usb 12-1: SerialNumber: Ð¥ [ 251.323945][ T29] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 251.327667][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 251.331033][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 251.334304][ T29] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 251.338510][ T29] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.341384][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.345683][ T29] usb 10-1: config 0 descriptor?? [ 251.434708][T16589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.441203][ T6766] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.443052][T16589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.456941][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 251.456950][ T40] audit: type=1400 audit(252.316:888): avc: denied { ioctl } for pid=16583 comm="syz.7.3118" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 251.759240][ T29] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 251.761756][ T29] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 251.764169][ T29] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 251.766471][ T29] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 251.768742][ T29] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 251.771253][ T29] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 251.774182][ T29] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 251.776533][ T29] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 251.778802][ T29] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 251.781005][ T29] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 251.783271][ T29] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 251.785484][ T29] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 251.787734][ T29] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 251.789982][ T29] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 251.792244][ T29] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 251.795862][ T29] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 251.814743][ T29] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 252.782744][ T5935] Bluetooth: hci3: command tx timeout [ 252.968523][ T6766] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.104385][ T5982] usb 10-1: reset high-speed USB device number 4 using dummy_hcd [ 253.178220][ T40] audit: type=1400 audit(254.036:889): avc: denied { write } for pid=16672 comm="syz.6.3142" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 253.223672][ T5942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.230361][ T5942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.234349][ T5942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.237641][ T5942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.240379][ T5942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.255976][ T6766] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.281208][T16676] lo speed is unknown, defaulting to 1000 [ 253.326295][ T6766] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.352246][T16685] FAT-fs (nullb0): bogus number of reserved sectors [ 253.354551][T16685] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 253.378770][T16676] syzkaller0 speed is unknown, defaulting to 1000 [ 253.381351][T16676] lo speed is unknown, defaulting to 1000 [ 253.471931][ T6766] bridge_slave_1: left allmulticast mode [ 253.473879][ T6766] bridge_slave_1: left promiscuous mode [ 253.475737][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.480441][ T6766] bridge_slave_0: left allmulticast mode [ 253.482240][ T6766] bridge_slave_0: left promiscuous mode [ 253.484486][ T6766] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.735951][ T6766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.741181][ T6766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.748431][ T6766] bond0 (unregistering): Released all slaves [ 253.774745][ T6221] cdc_ncm 12-1:1.0: bind() failure [ 253.777032][T16676] chnl_net:caif_netlink_parms(): no params data found [ 253.778204][ T6221] cdc_ncm 12-1:1.1: CDC Union missing and no IAD found [ 253.781166][ T6221] cdc_ncm 12-1:1.1: bind() failure [ 253.790532][ T6221] usb 12-1: USB disconnect, device number 2 [ 253.818568][ T40] audit: type=1400 audit(254.676:890): avc: denied { map } for pid=16694 comm="syz.7.3143" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 253.832293][T16695] xt_ecn: cannot match TCP bits for non-tcp packets [ 253.928142][T16676] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.932622][T16676] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.935073][T16676] bridge_slave_0: entered allmulticast mode [ 253.939116][T16676] bridge_slave_0: entered promiscuous mode [ 253.963854][T16707] binder: 16701:16707 ioctl c0306201 2000000003c0 returned -22 [ 253.966423][T16707] binder: 16701:16707 ioctl 8936 200000000140 returned -22 [ 253.969474][T16676] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.971901][T16676] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.974536][T16676] bridge_slave_1: entered allmulticast mode [ 253.977223][T16676] bridge_slave_1: entered promiscuous mode [ 254.034013][T16676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.046578][T16713] __nla_validate_parse: 4 callbacks suppressed [ 254.046589][T16713] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3146'. [ 254.058507][T16676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.065145][T16716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3147'. [ 254.068172][T16716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3147'. [ 254.171910][T16729] FAULT_INJECTION: forcing a failure. [ 254.171910][T16729] name failslab, interval 1, probability 0, space 0, times 1 [ 254.175386][T16676] team0: Port device team_slave_0 added [ 254.178804][T16729] CPU: 3 UID: 0 PID: 16729 Comm: syz.7.3150 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 254.178826][T16729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 254.178836][T16729] Call Trace: [ 254.178841][T16729] [ 254.178847][T16729] dump_stack_lvl+0x16c/0x1f0 [ 254.178897][T16729] should_fail_ex+0x512/0x640 [ 254.178922][T16729] ? fs_reclaim_acquire+0xae/0x150 [ 254.178942][T16729] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 254.178967][T16729] should_failslab+0xc2/0x120 [ 254.178983][T16729] __kmalloc_noprof+0xd2/0x510 [ 254.179011][T16729] tomoyo_realpath_from_path+0xc2/0x6e0 [ 254.179034][T16729] ? tomoyo_profile+0x47/0x60 [ 254.179049][T16729] tomoyo_path_number_perm+0x245/0x580 [ 254.179067][T16729] ? tomoyo_path_number_perm+0x237/0x580 [ 254.179087][T16729] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 254.179105][T16729] ? find_held_lock+0x2b/0x80 [ 254.179144][T16729] ? find_held_lock+0x2b/0x80 [ 254.179160][T16729] ? hook_file_ioctl_common+0x145/0x410 [ 254.179178][T16729] ? __fget_files+0x20e/0x3c0 [ 254.179204][T16729] security_file_ioctl+0x9b/0x240 [ 254.179226][T16729] __x64_sys_ioctl+0xb7/0x200 [ 254.179247][T16729] do_syscall_64+0xcd/0x260 [ 254.179263][T16729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.179273][T16729] RIP: 0033:0x7f3be718e969 [ 254.179281][T16729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.179290][T16729] RSP: 002b:00007f3be4ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.179300][T16729] RAX: ffffffffffffffda RBX: 00007f3be73b5fa0 RCX: 00007f3be718e969 [ 254.179307][T16729] RDX: 0000200000000000 RSI: 0000000000008b20 RDI: 0000000000000003 [ 254.179312][T16729] RBP: 00007f3be4ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 254.179318][T16729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.179323][T16729] R13: 0000000000000000 R14: 00007f3be73b5fa0 R15: 00007ffc27b9f518 [ 254.179336][T16729] [ 254.179340][T16729] ERROR: Out of memory at tomoyo_realpath_from_path. [ 254.206054][T16676] team0: Port device team_slave_1 added [ 254.272334][ T6766] hsr_slave_0: left promiscuous mode [ 254.275561][ T6766] hsr_slave_1: left promiscuous mode [ 254.277670][ T6766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.280000][ T6766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.282812][ T6766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.285237][ T6766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.295094][T16735] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3151'. [ 254.316530][ T6766] veth1_macvtap: left promiscuous mode [ 254.318254][ T6766] veth0_macvtap: left promiscuous mode [ 254.319961][ T6766] veth1_vlan: left promiscuous mode [ 254.321592][ T6766] veth0_vlan: left promiscuous mode [ 254.345731][T16736] overlay: filesystem on ./bus not supported as upperdir [ 254.824356][T15974] usb 10-1: USB disconnect, device number 4 [ 254.863416][ T5935] Bluetooth: hci3: command tx timeout [ 255.061580][ T6766] team0 (unregistering): Port device team_slave_1 removed [ 255.143104][ T6766] team0 (unregistering): Port device team_slave_0 removed [ 255.346225][ T5935] Bluetooth: hci2: command tx timeout [ 255.509217][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.511175][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.764778][T16740] No source specified [ 255.801251][T16676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.807078][T16676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.810504][ T40] audit: type=1400 audit(256.666:891): avc: denied { setattr } for pid=16747 comm="syz.5.3154" path="socket:[71741]" dev="sockfs" ino=71741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 255.818482][T16746] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3156'. [ 255.822852][T16676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.829790][T16676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.831953][T16676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.840815][T16676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.932020][T16676] hsr_slave_0: entered promiscuous mode [ 255.937223][T16676] hsr_slave_1: entered promiscuous mode [ 255.939315][T16676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.941671][T16676] Cannot create hsr debugfs directory [ 256.005679][T16772] netlink: 'syz.6.3161': attribute type 23 has an invalid length. [ 256.333121][T16819] CIFS mount error: No usable UNC path provided in device string! [ 256.333121][T16819] [ 256.336551][T16819] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 256.350978][T16815] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.410085][T16831] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3175'. [ 256.425553][T16831] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3175'. [ 256.515457][T16843] loop6: detected capacity change from 0 to 7 [ 256.517905][T16843] Dev loop6: unable to read RDB block 7 [ 256.519670][T16843] loop6: unable to read partition table [ 256.521557][T16843] loop6: partition table beyond EOD, truncated [ 256.531901][T16843] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 256.551611][T16843] netlink: 'syz.5.3180': attribute type 33 has an invalid length. [ 256.554304][T16843] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3180'. [ 256.598669][T16858] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3184'. [ 256.666843][T16676] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 256.678733][T16676] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 256.682925][T16869] kAFS: No cell specified [ 256.684236][T16676] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 256.698445][T16676] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 256.703280][ T40] audit: type=1400 audit(257.566:892): avc: denied { remount } for pid=16871 comm="syz.7.3189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 256.860492][T16676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.869185][T16676] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.875407][ T6785] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.877668][ T6785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.882654][ T6785] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.884905][ T6785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.943200][ T5942] Bluetooth: hci3: command tx timeout [ 256.951105][T16899] netlink: 'syz.5.3193': attribute type 1 has an invalid length. [ 256.953649][T16899] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3193'. [ 256.977667][T16904] netlink: 'syz.7.3194': attribute type 1 has an invalid length. [ 256.980132][T16904] netlink: 'syz.7.3194': attribute type 2 has an invalid length. [ 257.047568][T16676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.080667][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 257.094758][T16676] veth0_vlan: entered promiscuous mode [ 257.104504][T16676] veth1_vlan: entered promiscuous mode [ 257.118420][T16676] veth0_macvtap: entered promiscuous mode [ 257.122095][T16676] veth1_macvtap: entered promiscuous mode [ 257.131065][T16676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.137151][T16676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.142639][T16676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.145817][T16676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.152957][T16676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.156116][T16676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.159233][T16676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.162598][T16676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.166453][T16676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.170213][T16676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.173991][T16676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.177017][T16676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.180927][T16676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.188814][T16676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.193304][T16676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.197364][T16676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.198575][T16932] nfs4: Bad value for 'source' [ 257.202036][T16676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.210984][T16676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.228512][T16930] bridge_slave_0: left allmulticast mode [ 257.231627][T16930] bridge_slave_0: left promiscuous mode [ 257.234976][T16930] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.241750][T16930] bridge_slave_1: left allmulticast mode [ 257.244921][T16930] bridge_slave_1: left promiscuous mode [ 257.248398][T16930] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.257916][T16930] bond0: (slave bond_slave_0): Releasing backup interface [ 257.267362][T16930] bond0: (slave bond_slave_1): Releasing backup interface [ 257.292350][T16930] team0: Port device team_slave_0 removed [ 257.301708][T16930] team0: Port device team_slave_1 removed [ 257.304501][T16930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.307400][T16930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.310897][T16930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.313584][T16930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.327109][T16676] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.330385][T16676] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.342795][T16676] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.345836][T16676] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.359016][T16934] netlink: 'syz.5.3203': attribute type 1 has an invalid length. [ 257.434327][ T5942] Bluetooth: hci2: command tx timeout [ 257.532242][T16936] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 257.534574][T16936] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 257.538718][T16936] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 257.543445][ T5935] Bluetooth: hci0: Opcode 0x1407 failed: -112 [ 257.545978][T16936] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 257.548278][T16936] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 257.555341][T16936] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 257.558792][T16936] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 257.561027][T16936] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 257.571558][T16936] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 257.575934][T16936] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 257.577872][T16936] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 257.583996][T16936] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 257.609504][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.611847][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.635903][T16951] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 257.639808][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.642369][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.747903][T14223] udevd[14223]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 257.761152][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 257.768975][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 257.784445][T16967] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 257.789141][ T40] audit: type=1400 audit(258.646:893): avc: denied { name_bind } for pid=16966 comm="syz.6.3214" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 257.804093][ T40] audit: type=1400 audit(258.646:894): avc: denied { node_bind } for pid=16966 comm="syz.6.3214" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 257.830335][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 257.854534][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 257.891599][T16979] block device autoloading is deprecated and will be removed. [ 257.946044][T16981] program syz.7.3219 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.951193][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 257.954473][T16976] md2: using deprecated bitmap file support [ 257.956445][T16976] md2: error: bitmap file must be a regular file [ 257.977126][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 258.087481][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 258.111677][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 258.124088][ T40] audit: type=1326 audit(258.986:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.5.3228" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba8e58e969 code=0x0 [ 258.986486][ T40] audit: type=1400 audit(259.846:896): avc: denied { ioctl } for pid=17020 comm="syz.6.3232" path="socket:[73964]" dev="sockfs" ino=73964 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 259.011294][ T40] audit: type=1400 audit(259.866:897): avc: denied { bind } for pid=17020 comm="syz.6.3232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 259.123676][ T40] audit: type=1400 audit(259.986:898): avc: denied { getopt } for pid=17046 comm="syz.6.3242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 259.138883][ T40] audit: type=1400 audit(259.986:899): avc: denied { map } for pid=17044 comm="syz.5.3241" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 259.152659][ T40] audit: type=1400 audit(259.986:900): avc: denied { execute } for pid=17044 comm="syz.5.3241" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 259.198736][T17059] netlink: 'syz.7.3246': attribute type 1 has an invalid length. [ 259.222100][T17060] veth3: entered promiscuous mode [ 259.238031][T17060] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 259.431376][T17082] syz.6.3251: attempt to access beyond end of device [ 259.431376][T17082] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 259.455236][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.503028][ T5935] Bluetooth: hci1: command 0x0c1a tx timeout [ 259.592666][ T5942] Bluetooth: hci0: command 0x1407 tx timeout [ 259.592728][ T5935] Bluetooth: hci3: command 0x0c1a tx timeout [ 261.100218][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.170753][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.199200][T17089] bridge_slave_0: left allmulticast mode [ 261.201560][T17089] bridge_slave_0: left promiscuous mode [ 261.204355][T17089] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.210322][T17089] bridge_slave_1: left allmulticast mode [ 261.213459][T17089] bridge_slave_1: left promiscuous mode [ 261.215942][T17089] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.232115][T17089] bond0: (slave bond_slave_0): Releasing backup interface [ 261.244099][T17089] bond0: (slave bond_slave_1): Releasing backup interface [ 261.269206][T17089] team0: Port device team_slave_0 removed [ 261.280036][T17089] team0: Port device team_slave_1 removed [ 261.282253][T17089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.285055][T17089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.288025][T17089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.290376][T17089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.307247][ T5942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 261.310638][ T5942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 261.317260][ T5942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 261.324612][ T5942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 261.328176][ T5942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 261.346690][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.356978][ T64] libceph: connect (1)[c::]:6789 error -101 [ 261.358950][ T64] libceph: mon0 (1)[c::]:6789 connect error [ 261.381654][T17098] lo speed is unknown, defaulting to 1000 [ 261.419167][ T64] libceph: connect (1)[c::]:6789 error -101 [ 261.421155][ T64] libceph: mon0 (1)[c::]:6789 connect error [ 261.445540][T17114] xt_check_table_hooks: 55 callbacks suppressed [ 261.445552][T17114] x_tables: duplicate underflow at hook 2 [ 261.454795][ T40] audit: type=1400 audit(262.316:901): avc: denied { setopt } for pid=17111 comm="syz.5.3260" lport=52207 faddr=::ffff:100.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 261.491839][T17117] fuseblk: Unknown parameter 'ft' [ 261.505271][ T12] bridge_slave_1: left allmulticast mode [ 261.507134][ T12] bridge_slave_1: left promiscuous mode [ 261.508979][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.515160][ T12] bridge_slave_0: left allmulticast mode [ 261.516946][ T12] bridge_slave_0: left promiscuous mode [ 261.518774][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.592727][ T5935] Bluetooth: hci1: command 0x0c1a tx timeout [ 261.628665][ T1022] libceph: connect (1)[c::]:6789 error -101 [ 261.630778][ T1022] libceph: mon0 (1)[c::]:6789 connect error [ 261.662667][ T5935] Bluetooth: hci3: command 0x0c1a tx timeout [ 261.672680][ T5935] Bluetooth: hci0: command 0x1407 tx timeout [ 261.692764][ T1022] libceph: connect (1)[c::]:6789 error -101 [ 261.694733][ T1022] libceph: mon0 (1)[c::]:6789 connect error [ 261.784762][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.789467][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.793460][ T12] bond0 (unregistering): Released all slaves [ 261.798950][T17098] syzkaller0 speed is unknown, defaulting to 1000 [ 261.800103][T17114] lo speed is unknown, defaulting to 1000 [ 261.802135][T17098] lo speed is unknown, defaulting to 1000 [ 261.903376][T17098] chnl_net:caif_netlink_parms(): no params data found [ 261.907613][T17114] syzkaller0 speed is unknown, defaulting to 1000 [ 261.910262][T17114] lo speed is unknown, defaulting to 1000 [ 261.912816][T15974] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 262.064611][T15974] usb 10-1: config 1 interface 0 has no altsetting 0 [ 262.073422][T15974] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 262.076425][T15974] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.078965][T15974] usb 10-1: Product: syz [ 262.080372][T15974] usb 10-1: Manufacturer: syz [ 262.081957][T15974] usb 10-1: SerialNumber: syz [ 262.085243][T17098] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.087543][T17098] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.089816][T17098] bridge_slave_0: entered allmulticast mode [ 262.095162][T17098] bridge_slave_0: entered promiscuous mode [ 262.099080][T17098] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.101369][T17098] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.103755][T17098] bridge_slave_1: entered allmulticast mode [ 262.106339][T17098] bridge_slave_1: entered promiscuous mode [ 262.140594][T17098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.142753][ T5972] libceph: connect (1)[c::]:6789 error -101 [ 262.145868][ T5972] libceph: mon0 (1)[c::]:6789 connect error [ 262.159180][T17098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.167611][T17101] ceph: No mds server is up or the cluster is laggy [ 262.171949][T17107] ceph: No mds server is up or the cluster is laggy [ 262.209367][ T5972] libceph: connect (1)[c::]:6789 error -101 [ 262.211365][ T5972] libceph: mon0 (1)[c::]:6789 connect error [ 262.291098][ T5935] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 262.308191][T17098] team0: Port device team_slave_0 added [ 262.315360][T15849] udevd[15849]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 262.319217][T17098] team0: Port device team_slave_1 added [ 262.337645][T15849] udevd[15849]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 262.352300][ T12] hsr_slave_0: left promiscuous mode [ 262.371959][ T12] hsr_slave_1: left promiscuous mode [ 262.375685][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.378124][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.386736][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.389113][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.429779][T15849] udevd[15849]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 262.435694][ T12] veth1_macvtap: left promiscuous mode [ 262.437498][ T12] veth0_macvtap: left promiscuous mode [ 262.439316][ T12] veth1_vlan: left promiscuous mode [ 262.441024][ T12] veth0_vlan: left promiscuous mode [ 262.463809][T15849] udevd[15849]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 262.610776][T17189] block nbd6: shutting down sockets [ 262.614215][T17188] block nbd6: NBD_DISCONNECT [ 262.616511][T17188] block nbd6: Send disconnect failed -32 [ 262.693244][T15974] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 263.151127][ T12] team0 (unregistering): Port device team_slave_1 removed [ 263.232514][ T12] team0 (unregistering): Port device team_slave_0 removed [ 263.425503][ T5935] Bluetooth: hci2: command tx timeout [ 263.672687][ T5935] Bluetooth: hci1: command 0x0c1a tx timeout [ 263.744764][ T5935] Bluetooth: hci0: command 0x1407 tx timeout [ 263.744803][ T5942] Bluetooth: hci3: command 0x0c1a tx timeout [ 263.832875][T17098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.835108][T17098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.843644][T17098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.857264][T17187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.860722][T17187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.864739][T17187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.868478][T17187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.904405][T17098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.905092][T14210] udevd[14210]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 263.905240][T17193] __nla_validate_parse: 2 callbacks suppressed [ 263.905250][T17193] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3270'. [ 263.907246][T17098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.907268][T17098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.974767][T17098] hsr_slave_0: entered promiscuous mode [ 263.977049][T17098] hsr_slave_1: entered promiscuous mode [ 263.979272][T17098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.981636][T17098] Cannot create hsr debugfs directory [ 263.995402][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 264.037441][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 264.095714][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 264.217611][T15849] udevd[15849]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 264.254812][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 264.294530][ T40] audit: type=1400 audit(265.156:902): avc: denied { connect } for pid=17227 comm="syz.6.3280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 264.355731][ T40] audit: type=1400 audit(265.216:903): avc: denied { shutdown } for pid=17229 comm="syz.7.3281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 264.384460][T17234] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 264.575192][T17250] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 264.601211][T17258] program syz.7.3287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.716723][T17272] Invalid logical block size (2) [ 264.784382][T17098] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 264.788476][T17098] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 264.798500][T17098] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 264.806341][T17098] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 264.846860][T17098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.861730][T17098] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.868414][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.870659][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.879577][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.881846][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.968366][ T9] usb 10-1: USB disconnect, device number 5 [ 264.971734][ T9] usblp0: removed [ 265.056115][T17098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.078547][T17098] veth0_vlan: entered promiscuous mode [ 265.086719][T17098] veth1_vlan: entered promiscuous mode [ 265.102058][T17098] veth0_macvtap: entered promiscuous mode [ 265.110227][T17098] veth1_macvtap: entered promiscuous mode [ 265.118696][T17098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.122031][T17098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.126741][T17098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.129982][T17098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.135685][T17098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.141173][T17098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.145030][T17098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.148079][T17098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.152488][T17098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.157022][T17098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.164816][T17098] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.168864][T17098] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.171538][T17098] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.177021][T17098] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.224593][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.227896][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.242151][ T40] audit: type=1326 audit(266.096:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17307 comm="syz.5.3296" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fba8e585927 code=0x0 [ 265.259963][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.272629][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.367535][T17318] ucma_write: process 347 (syz.5.3299) changed security contexts after opening file descriptor, this is not allowed. [ 265.464881][T17327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3302'. [ 265.467697][T17327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3302'. [ 265.585122][ T40] audit: type=1400 audit(266.446:905): avc: denied { map } for pid=17332 comm="syz.5.3305" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 265.592252][ T40] audit: type=1400 audit(266.446:906): avc: denied { execute } for pid=17332 comm="syz.5.3305" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 265.653494][T17330] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 265.749722][T17348] syzkaller1: entered promiscuous mode [ 265.751564][T17348] syzkaller1: entered allmulticast mode [ 266.029034][ T40] audit: type=1400 audit(266.886:907): avc: denied { write } for pid=17349 comm="syz.7.3310" path="socket:[75799]" dev="sockfs" ino=75799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 266.106929][ T40] audit: type=1400 audit(266.966:908): avc: denied { execute } for pid=17354 comm="syz.7.3311" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 266.177812][T17360] lo speed is unknown, defaulting to 1000 [ 266.252779][T17360] syzkaller0 speed is unknown, defaulting to 1000 [ 266.252864][T17361] lo speed is unknown, defaulting to 1000 [ 266.255388][T17360] lo speed is unknown, defaulting to 1000 [ 266.356389][T17361] syzkaller0 speed is unknown, defaulting to 1000 [ 266.359100][T17361] lo speed is unknown, defaulting to 1000 [ 266.904881][ T9] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 267.008853][ T40] audit: type=1326 audit(267.866:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17379 comm="syz.7.3319" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3be718e969 code=0x0 [ 267.042565][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.064940][ T9] usb 10-1: Invalid ep0 maxpacket: 64 [ 267.192621][ T9] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 267.352848][ T9] usb 10-1: Invalid ep0 maxpacket: 64 [ 267.354837][ T9] usb usb10-port1: attempt power cycle [ 267.692754][ T9] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 267.713438][ T9] usb 10-1: Invalid ep0 maxpacket: 64 [ 267.773528][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 267.847900][ T9] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 267.883094][ T9] usb 10-1: Invalid ep0 maxpacket: 64 [ 267.884904][ T9] usb usb10-port1: unable to enumerate USB device [ 268.949338][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 268.992858][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 269.002389][T17398] netlink: 'syz.6.3325': attribute type 16 has an invalid length. [ 269.006517][T17398] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.3325'. [ 269.024113][ T5942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.030099][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.034064][ T5942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.037780][ T5942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 269.038997][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 269.041248][ T5942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 269.047277][ T5942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.047472][T17403] IPVS: length: 24 != 30744 [ 269.078437][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 269.080804][T17400] lo speed is unknown, defaulting to 1000 [ 269.105890][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.109754][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 269.139650][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 269.171010][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 269.184116][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.191747][T17400] syzkaller0 speed is unknown, defaulting to 1000 [ 269.194633][T17400] lo speed is unknown, defaulting to 1000 [ 269.205954][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 269.228405][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 269.284898][T17400] chnl_net:caif_netlink_parms(): no params data found [ 269.415574][ T12] bridge_slave_1: left allmulticast mode [ 269.417450][ T12] bridge_slave_1: left promiscuous mode [ 269.419308][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.425997][ T12] bridge_slave_0: left allmulticast mode [ 269.427880][ T12] bridge_slave_0: left promiscuous mode [ 269.429765][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.692653][T17438] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3334'. [ 269.706339][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.710491][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.716360][ T12] bond0 (unregistering): Released all slaves [ 269.721906][T17400] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.724460][T17400] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.726850][T17400] bridge_slave_0: entered allmulticast mode [ 269.729516][T17400] bridge_slave_0: entered promiscuous mode [ 269.741406][ T40] audit: type=1804 audit(270.596:910): pid=17438 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.3334" name="/newroot/133/file0" dev="tmpfs" ino=740 res=1 errno=0 [ 269.742972][T17438] xt_hashlimit: size too large, truncated to 1048576 [ 269.750132][T17400] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.755629][T17400] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.757936][T17400] bridge_slave_1: entered allmulticast mode [ 269.760550][T17400] bridge_slave_1: entered promiscuous mode [ 269.802884][T17441] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -32767, delta: 1 [ 269.805869][T17441] ref_ctr increment failed for inode: 0x2e4 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888024ee0a00 [ 269.837115][T17400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.843208][T17400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.869607][T17446] openvswitch: netlink: IP tunnel dst address not specified [ 269.908673][T17400] team0: Port device team_slave_0 added [ 269.915575][T17400] team0: Port device team_slave_1 added [ 269.950022][T17454] xt_hashlimit: overflow, rate too high: 0 [ 269.957140][T17448] delete_channel: no stack [ 269.967761][ T40] audit: type=1400 audit(270.816:911): avc: denied { connect } for pid=17448 comm="syz.7.3337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 270.033720][T17400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.035934][T17400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.046615][T17400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.053459][T17400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.055747][T17400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.063793][T17400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.164525][T17400] hsr_slave_0: entered promiscuous mode [ 270.170443][T17400] hsr_slave_1: entered promiscuous mode [ 270.177634][T17400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.180021][T17400] Cannot create hsr debugfs directory [ 270.211985][T17481] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3346'. [ 270.227744][ T40] audit: type=1400 audit(271.076:912): avc: denied { write } for pid=17482 comm="syz.5.3347" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 270.250469][ T40] audit: type=1400 audit(271.096:913): avc: denied { append } for pid=17485 comm="syz.7.3348" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 270.296700][T17491] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 270.316231][ T12] hsr_slave_0: left promiscuous mode [ 270.321947][ T12] hsr_slave_1: left promiscuous mode [ 270.327465][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.329847][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.343117][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.345487][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.371733][ T5935] Bluetooth: hci1: unexpected cc 0x0402 length: 65 > 1 [ 270.376384][ T5935] Bluetooth: hci1: unexpected event for opcode 0x0402 [ 270.392171][ T12] veth1_macvtap: left promiscuous mode [ 270.396881][ T12] veth0_macvtap: left promiscuous mode [ 270.398674][ T12] veth1_vlan: left promiscuous mode [ 270.400365][ T12] veth0_vlan: left promiscuous mode [ 270.534602][T17498] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3350'. [ 270.672681][ T40] audit: type=1400 audit(271.526:914): avc: denied { read } for pid=17504 comm="syz.7.3352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 271.115118][ T5935] Bluetooth: hci2: command tx timeout [ 271.169569][ T12] team0 (unregistering): Port device team_slave_1 removed [ 271.255271][ T12] team0 (unregistering): Port device team_slave_0 removed [ 271.575451][T17516] netlink: 'syz.7.3356': attribute type 10 has an invalid length. [ 271.578635][T17516] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3356'. [ 271.863510][T17516] team0: Port device geneve0 added [ 271.995452][T17529] program syz.7.3362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.998495][T17530] program syz.7.3362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.047813][T17533] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3363'. [ 272.058431][T17530] ubi31: attaching mtd0 [ 272.060295][T17530] ubi31 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 272.069031][T17538] ubi31: attaching mtd0 [ 272.070399][T17538] ubi31 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 272.079046][ T40] audit: type=1326 audit(272.936:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17527 comm="syz.7.3362" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3be718e969 code=0x0 [ 272.096749][T17543] netlink: 700 bytes leftover after parsing attributes in process `syz.5.3364'. [ 272.101461][T17543] netlink: 700 bytes leftover after parsing attributes in process `syz.5.3364'. [ 272.108109][T17543] netlink: 700 bytes leftover after parsing attributes in process `syz.5.3364'. [ 272.111095][T17543] netlink: 700 bytes leftover after parsing attributes in process `syz.5.3364'. [ 272.179018][ T40] audit: type=1326 audit(273.036:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17527 comm="syz.7.3362" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be718e969 code=0x7fc00000 [ 272.274686][T17555] syz.7.3365: attempt to access beyond end of device [ 272.274686][T17555] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0 [ 272.280946][ T40] audit: type=1400 audit(273.136:917): avc: denied { create } for pid=17553 comm="syz.5.3366" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 272.287657][T17555] befs: (nbd7): unable to read superblock [ 272.290780][ T40] audit: type=1400 audit(273.136:918): avc: denied { write } for pid=17553 comm="syz.5.3366" name="file0" dev="9p" ino=35913834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 272.297959][ T40] audit: type=1400 audit(273.136:919): avc: denied { open } for pid=17553 comm="syz.5.3366" path="/148/file0/file0" dev="9p" ino=35913834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 272.468841][T17400] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 272.473546][T17400] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 272.477460][T17400] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 272.481600][T17400] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 272.534961][T17400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.547795][T17400] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.552943][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.555258][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.560810][ T6766] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.563096][ T6766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.592209][T17400] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 272.595840][T17400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.691862][T17400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.716294][T17400] veth0_vlan: entered promiscuous mode [ 272.721111][T17400] veth1_vlan: entered promiscuous mode [ 272.733834][T17400] veth0_macvtap: entered promiscuous mode [ 272.737487][T17400] veth1_macvtap: entered promiscuous mode [ 272.748180][T17400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.751410][T17400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.754546][T17400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.757770][T17400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.761770][T17400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.768174][T17400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.771352][T17400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.775358][T17400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.778537][T17400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.782317][T17400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.787412][T17400] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.790117][T17400] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.792893][T17400] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.795594][T17400] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.829352][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.831813][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.850192][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.852986][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.904612][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 272.965280][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 272.999938][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 273.055100][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 273.079334][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 273.182742][ T5935] Bluetooth: hci2: command 0x041b tx timeout [ 273.192263][T17608] vxcan1: entered allmulticast mode [ 273.194347][T17608] vxcan1: left allmulticast mode [ 273.252244][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 273.297179][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 273.323001][T17629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17629 comm=syz.6.3381 [ 273.339924][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 273.377548][T17641] autofs4:pid:17641:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 273.390410][T15849] udevd[15849]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 273.421868][T17645] random: crng reseeded on system resumption [ 273.592554][T15974] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 273.604822][T14209] udevd[14209]: symlink '../../loop6' '/dev/disk/by-diskseq/168.tmp-b7:6' failed: Read-only file system [ 273.744923][T15974] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 273.748373][T15974] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 273.751414][T15974] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 273.754299][T15974] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.759653][T17635] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 273.764968][T15974] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 273.963838][ T1022] usb 12-1: USB disconnect, device number 3 [ 274.122265][T17656] netlink: 'syz.5.3390': attribute type 2 has an invalid length. [ 274.124976][T17656] __nla_validate_parse: 61 callbacks suppressed [ 274.124983][T17656] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3390'. [ 274.131606][T17656] netlink: 'syz.5.3390': attribute type 2 has an invalid length. [ 274.134158][T17656] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3390'. [ 274.397898][T17661] Oops: general protection fault, probably for non-canonical address 0xdffffc000000003c: 0000 [#1] SMP KASAN NOPTI [ 274.402382][T17661] KASAN: null-ptr-deref in range [0x00000000000001e0-0x00000000000001e7] [ 274.407237][T17661] CPU: 1 UID: 0 PID: 17661 Comm: syz.5.3391 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 274.411656][T17661] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 274.415629][T17661] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 274.417716][T17661] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 274.422498][T15974] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 274.424705][T17661] RSP: 0018:ffffc9000419fb90 EFLAGS: 00010286 [ 274.424725][T17661] RAX: dffffc0000000000 RBX: 00000000000001e0 RCX: 0000000000000001 [ 274.424737][T17661] RDX: 0000000000000000 RSI: ffffffff8b6e90ae RDI: dffffc000000003c [ 274.433580][T17661] RBP: 00000000000001e0 R08: 0000000000000001 R09: 0000000000000000 [ 274.435848][T17661] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8b6e90ae [ 274.438093][T17661] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 274.440356][T17661] FS: 00007fba8f34a6c0(0000) GS:ffff8880d6ae1000(0000) knlGS:0000000000000000 [ 274.442866][T17661] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.444757][T17661] CR2: 000000110c384d7f CR3: 00000000138e1000 CR4: 0000000000352ef0 [ 274.447031][T17661] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 274.449291][T17661] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 274.451558][T17661] Call Trace: [ 274.452536][T17661] [ 274.453396][T17661] __kasan_check_byte+0x13/0x50 [ 274.454794][T17661] lock_acquire+0xfc/0x350 [ 274.456117][T17661] ? __pfx___might_resched+0x10/0x10 [ 274.457632][T17661] down_read_killable+0x9e/0x4b0 [ 274.459064][T17661] ? do_pagemap_scan+0x691/0xd00 [ 274.460500][T17661] ? __pfx_down_read_killable+0x10/0x10 [ 274.462083][T17661] ? trace_kmalloc+0x2b/0xd0 [ 274.463430][T17661] ? __kmalloc_noprof+0x242/0x510 [ 274.464884][T17661] do_pagemap_scan+0x691/0xd00 [ 274.466269][T17661] ? __pfx_do_pagemap_scan+0x10/0x10 [ 274.467803][T17661] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 274.469751][T17661] ? selinux_file_ioctl+0x180/0x270 [ 274.471243][T17661] ? selinux_file_ioctl+0xb4/0x270 [ 274.472881][T17661] do_pagemap_cmd+0x58/0x80 [ 274.474216][T17661] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 274.475759][T17661] __x64_sys_ioctl+0x190/0x200 [ 274.477187][T17661] do_syscall_64+0xcd/0x260 [ 274.478518][T17661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.480178][T17661] RIP: 0033:0x7fba8e58e969 [ 274.481438][T17661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.486748][T17661] RSP: 002b:00007fba8f34a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.489069][T17661] RAX: ffffffffffffffda RBX: 00007fba8e7b5fa0 RCX: 00007fba8e58e969 [ 274.491292][T17661] RDX: 0000200000000280 RSI: 00000000c0606610 RDI: 0000000000000005 [ 274.493642][T17661] RBP: 00007fba8e610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 274.495889][T17661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.498097][T17661] R13: 0000000000000000 R14: 00007fba8e7b5fa0 R15: 00007ffd31c12248 [ 274.500446][T17661] [ 274.501354][T17661] Modules linked in: [ 274.503209][T17661] ---[ end trace 0000000000000000 ]--- [ 274.506175][T17661] RIP: 0010:kasan_byte_accessible+0x15/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 274.507914][T17661] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 274.513766][T17661] RSP: 0018:ffffc9000419fb90 EFLAGS: 00010286 [ 274.515514][T17661] RAX: dffffc0000000000 RBX: 00000000000001e0 RCX: 0000000000000001 [ 274.517752][T17661] RDX: 0000000000000000 RSI: ffffffff8b6e90ae RDI: dffffc000000003c [ 274.519989][T17661] RBP: 00000000000001e0 R08: 0000000000000001 R09: 0000000000000000 [ 274.522222][T17661] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8b6e90ae [ 274.524549][T17661] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 274.526803][T17661] FS: 00007fba8f34a6c0(0000) GS:ffff8880d6ae1000(0000) knlGS:0000000000000000 [ 274.529341][T17661] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.531229][T17661] CR2: 000000110c384d7f CR3: 00000000138e1000 CR4: 0000000000352ef0 [ 274.533779][T17661] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 274.536045][T17661] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 274.538281][T17661] Kernel panic - not syncing: Fatal exception [ 274.540690][T17661] Kernel Offset: disabled [ 274.541935][T17661] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:18:03 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffea00043b09c0 RCX=1ffffffff356c5b5 RDX=0000000000000001 RSI=0000000000000008 RDI=ffff88817fff8378 RBP=ffffffff93a52d60 RSP=ffffc900040bf748 R8 =0000000000000007 R9 =ffffffffffffffff R10=057ff00000120808 R11=0000000000000001 R12=ffff88817fff8300 R13=0000000000000001 R14=0000000000000001 R15=ffffea00043b09f4 RIP=ffffffff81fe9b0d RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007faf2b6006c0 ffffffff 00c00000 GS =0000 ffff8880d69e1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007faf2b5fff98 CR3=0000000046a84000 CR4=00352ef0 DR0=0000080000001081 DR1=0000000000000007 DR2=fffffffffffffffd DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf2a811a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf2a811a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf2a811a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf2a811aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf2a811b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf2a811c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf2a983488 00007faf2a983480 00007faf2a983478 00007faf2a983450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf2b4ed100 00007faf2a983440 00007faf2a983458 00007faf2a9834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf2a983498 00007faf2a983490 00007faf2a983488 00007faf2a983480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000c10 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854f4835 RDI=ffffffff9adf74e0 RBP=ffffffff9adf74a0 RSP=ffffc9000419f590 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9adf74a0 R15=ffffffff854f47d0 RIP=ffffffff854f485f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fba8f34a6c0 ffffffff 00c00000 GS =0000 ffff8880d6ae1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c384d7f CR3=00000000138e1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000480081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fba8f349f90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fba8e611a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fba8e611a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fba8e611a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fba8e611aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fba8e611b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fba8e611c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e72656b2f737973 2f000a6425203a64 656c696166202973 2528657469727700 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b57404e0a565c56 0a000a4100051f41 40494c4443050c56 000d40514c575200 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000194854 RBX=0000000000000002 RCX=ffffffff8b6cc419 RDX=ffffed100d4c65be RSI=ffffffff8bf482e0 RDI=ffffffff819188f1 RBP=ffffed1003ad2910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c65bd R10=ffff88806a632deb R11=0000000000000000 R12=0000000000000002 R13=ffff88801d694880 R14=ffffffff9084f110 R15=0000000000000000 RIP=ffffffff8b6cacaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6be1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000002c0 CR3=000000004b9ff000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd31c125d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fba8e611a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fba8e611a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fba8e611a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fba8e611aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fba8e611b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fba8e611c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001f41c4 RBX=0000000000000003 RCX=ffffffff8b6cc419 RDX=ffffed100d4e65be RSI=ffffffff8bf482e0 RDI=ffffffff819188f1 RBP=ffffed1003bd5000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e65bd R10=ffff88806a732deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801dea8000 R14=ffffffff9084f110 R15=0000000000000000 RIP=ffffffff8b6cacaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ce1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3f9921 CR3=000000004aaf3000 CR4=00352ef0 DR0=0000000000005918 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc27b9f8a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3be7211a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3be7211a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3be7211a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3be7211aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3be7211b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3be7211c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000