last executing test programs: 1m20.012989518s ago: executing program 1 (id=528): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101c02, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x503, 0x70bd28, 0xffffffff, {0x0, 0xcf, 0x0, 0x0, 0x808b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x3a}}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}]}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_PORT_SELF={0x4}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xe}]}, 0x54}}, 0x0) splice(r1, &(0x7f0000000000)=0x7144, r1, &(0x7f00000000c0)=0xe, 0x7ff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101c02, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) (async) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000040)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x503, 0x70bd28, 0xffffffff, {0x0, 0xcf, 0x0, 0x0, 0x808b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x3a}}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}]}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_PORT_SELF={0x4}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xe}]}, 0x54}}, 0x0) (async) splice(r1, &(0x7f0000000000)=0x7144, r1, &(0x7f00000000c0)=0xe, 0x7ff, 0x0) (async) 1m18.923535757s ago: executing program 1 (id=539): r0 = socket(0xa, 0x80805, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushpolicy={0x18, 0x12, 0x105, 0x4, 0x25dfdbff, "", [@proto={0x5, 0x19, 0x32}]}, 0x18}, 0x1, 0x0, 0x0, 0x880}, 0x20040840) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f0000000100)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)="02", 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000050080002000000008000000"], 0x18, 0x840}, 0x0) 1m18.923177712s ago: executing program 1 (id=540): r0 = memfd_create(&(0x7f0000000840)='[\v\xdbX\xae[\x1a\xa9\x00\xc2\x9aml\r\xcf\xaa\x13\x99\x85B\xc3\x06<\xc2\xa9\xc3\xdb\x88\xee\x85md\xc8\x85HX\xa9%\f\x8fe\xe0\x00\x00\xa8\xfdn\xbe \a\x0e\xa3\xb9\x1d\x9dO\xbdj\x00\x00\xfb\xff\x00c\xb2\xc9\ap\xd0\xa2\x82\x1e\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcb\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2\xa75\x9d\xcb\x1e\x80\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x00uNh\xc5(\xbc\xf3\xac{\x04D2\xf2\xcd\xc2{E\xae\x89\xddI\xc8\xc6\xe9\xef\x98\xf0\x8b\xac\xa7R\x10\x011\x9fi\x00\x00\x00\x00\x00\x00\x00\x00\x002?D\x86\x14\xa52<\x87n\xf4\x04R\x15\t\xb8\xbeT\xb8\xe7K)\x1fP\xb6\xce8\xcc\xabe\xcb\xd0\xf9\xc9\xfe_\v\xaa#\x8f\x8asu\xb2\xfe\xc4\xbe\x03\xd3\x93E\x1d\xaf}\x9b\xac\xc2\x9a\xe6W\x92sD\fn\x9e\xc2s\xc6_4\f\xc1\x8b\x9a\xa4_\xad\x9b\xb9 \v\x0f{>\xdf^.\xb8\x96\x1d\x99vY\xa8\xfa\xd7i\x94i^;\xaa\xe7XA\xd2\xc5\x02\x12I\xbe\xd0Ksq\x96 \xbf\xed\x1c\x91\xeeN\xda&\xddtG\xc2\xa8j\xae\xac)\xfdNu\x19\x91\xa7z\x1b\x0e\xab\xd2k\x16\x87#\xf6p#\x8d\xdd?\x9fXV\x12\xa9\xc7v\x02\x98g:4\xb6\xcaY\xc2~k\xcb\xef]h/\xa2\xaf\xc4\xec\xdc\xd4H\xed\x94qNY\x85\x87&\xf1\xbb\f\x02\x0fo\xae\xf4\x19|\xc4\xfcL\xdb\x00\xedrK\x13\xb5J?s\x93\xe6\xda\xf0\xf3B\x8d\xb4\xd8>\x12\xb0\x8e\x8d\xdaQ\xa2\xd0\xbc\x92d\x9e^\xbc\xd5\x8aNf\xefa\v*\xb08\xfc\xd2\xa4\x11`\xae\x98\xcc\xe1\xea\xc2\x1dKR\x0e\x1cK\x86\v\xba\xdfz\xa8\xdf\xb6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xe9\xb3@\xe8\a0\x1e\xb8L\x83\xc4\xa8\xb2\xc1\xf8\xae\x1d\x198\x0f\xfa\t\x88+\xdc\xe1\x01@\xbd\x8ba\"|\x14\x1bF\x9b\xd3\xff7\a\x1c:U\xba\xf4\t\xdc\xef\xe3\x11\xdb^\xee\x8c0\xee\xde6:\x80t\xfb\xbc^K\xb4\x8c9\xb0\xec\x82\x127!\x0e\xa3\xc9\xe0\xea\xfa\x0f\xbb\x0e \xc3\xef\xb2r0, {0x4434}}, './file0\x00'}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x3, 0x3, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x75}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xe4}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xd}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x3}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x9}}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x8008) r2 = syz_io_uring_complete(0x0) io_uring_enter(r2, 0x1bfa, 0x7c57, 0x1, &(0x7f0000000040)={[0xf2]}, 0x8) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x437, 0x70bd29, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) (async) write(r4, &(0x7f0000000000)="05000000010001", 0x7) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14"], 0x18}, 0x0) (async) setsockopt$sock_int(r7, 0x1, 0x2a, &(0x7f0000000000), 0x4) (async) recvmmsg(r7, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x101}], 0x2, 0x10122, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f00000083c0)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r8, 0x54a1) (async) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) (async) syz_io_uring_setup(0x36ea, &(0x7f00000000c0)={0x0, 0xf287, 0x80, 0x2, 0x2ee}, &(0x7f0000000180), &(0x7f00000001c0)) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m18.873531934s ago: executing program 1 (id=542): mkdir(&(0x7f0000000140)='./file1\x00', 0x1bb) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peekuser(0x3, r0, 0x4106) syz_pidfd_open(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000500)='io_uring_defer\x00', r1, 0x0, 0x10000}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0xff01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x5, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0x200001000, 0x472, 0xfffffffffffffffd, 0x82, 0x43, 0xffffffffffffffff}) 1m18.801741202s ago: executing program 1 (id=547): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000000514210626bd70000000000008000100000000000800030000000000a4d97a1a55211c5a1adf25049fe2791f975ec3d849ec23664e94faae85532768625fe1e8c1a0bbf7b5f4f231299aa066520a330a73b84ee57e676c828f2f0b"], 0x20}}, 0x0) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000000)=0x40000fb, 0x4) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f0000000080)={0x1f, 0x4}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x1184, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m18.463407697s ago: executing program 1 (id=557): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000140)=""/4096, 0x1000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000200)) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0xc8, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x54, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x9}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x8}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x13}, @TCA_FQ_FLOW_REFILL_DELAY={0x0, 0x9, 0x3}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xba06}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x101}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xaced}]}}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1a, 0x1, {0x8, 0xc, 0xc89f, 0xfff75ef7, 0x0, 0x8001, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x1, 0x8, 0xfc000000, 0x0, 0x80000001, 0x4000, 0x2}}, {0x8, 0x2, [0x1, 0xba7]}}]}]}, 0xc8}}, 0x4048000) open$dir(&(0x7f0000000000)='./file4\x00', 0x2601, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x48, 0x14, 0x1, 0x20000, 0xfffffffc, {0x2, 0x88}, [@INET_DIAG_REQ_BYTECODE={0x31, 0x1, "fd2929bf64daedcfeb488e63463d8554add1da6e87f783980a4d1634c6450559443c29240956451306cf1fb0e1"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 1m18.419960332s ago: executing program 32 (id=557): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000140)=""/4096, 0x1000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000200)) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0xc8, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x54, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x9}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x8}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x13}, @TCA_FQ_FLOW_REFILL_DELAY={0x0, 0x9, 0x3}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xba06}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x101}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xaced}]}}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1a, 0x1, {0x8, 0xc, 0xc89f, 0xfff75ef7, 0x0, 0x8001, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x1, 0x8, 0xfc000000, 0x0, 0x80000001, 0x4000, 0x2}}, {0x8, 0x2, [0x1, 0xba7]}}]}]}, 0xc8}}, 0x4048000) open$dir(&(0x7f0000000000)='./file4\x00', 0x2601, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x48, 0x14, 0x1, 0x20000, 0xfffffffc, {0x2, 0x88}, [@INET_DIAG_REQ_BYTECODE={0x31, 0x1, "fd2929bf64daedcfeb488e63463d8554add1da6e87f783980a4d1634c6450559443c29240956451306cf1fb0e1"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 55.506069818s ago: executing program 0 (id=959): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c15bfeeff12800802000000737200480002050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4f1e, 0x40, @ipv4={'\x00', '\xff\xff', @remote}, 0x20000101}, 0x1c) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x181) ftruncate(r5, 0x82081fc) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f0000002500)=[{{&(0x7f0000000280)=@ieee802154, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/78, 0x4e}, {&(0x7f0000000440)=""/60, 0x3c}, {&(0x7f0000000480)}], 0x5, &(0x7f0000000580)=""/158, 0x9e}, 0x8}, {{&(0x7f0000000640)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000006c0)=""/181, 0xb5}, {&(0x7f00000007c0)=""/249, 0xf9}, {&(0x7f00000008c0)=""/80, 0x50}, {&(0x7f0000000980)=""/85, 0x55}], 0x4, &(0x7f0000000a40)=""/143, 0x8f}, 0xd7e2}, {{&(0x7f0000000b40)=@can, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)=""/241, 0xf1}, {&(0x7f0000000cc0)=""/141, 0x8d}, {&(0x7f0000000d80)=""/18, 0x12}], 0x3, &(0x7f0000000e00)=""/160, 0xa0}, 0x1ae}, {{&(0x7f0000000ec0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000002480)=""/78, 0x4e}, 0x2}], 0x4, 0x500, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)={0x4, 0x0, [{0x9a5, 0x0, 0x6}, {0xbd4, 0x0, 0x400}, {0x2e6, 0x0, 0xffff}, {0x8ae, 0x0, 0x1dda}]}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x66, &(0x7f0000000240)=0x10, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x80, 0x0, 0x0) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r8, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0x2000}], 0x2) getsockopt$sock_int(r3, 0x1, 0x3c, 0x0, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="041817aaaaaaaaaa10"], 0x1a) syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000ba7000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r10, 0x4020aed2, &(0x7f0000000100)={0x100000, 0x14000, 0x8}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001800010000000000000000000200000002000009002200000600150002000000200016801c0002"], 0x44}, 0x1, 0x0, 0x0, 0x10001}, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r10, 0x4020aed2, &(0x7f0000000380)={0x8000000}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x12, r0, 0x100000000) 55.43273974s ago: executing program 0 (id=960): ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000400)={0x1, 0x1, {0x0, 0x1a, 0x11, 0x11, 0x2, 0x4f5c, 0x2, 0x5e}}) 55.431452728s ago: executing program 0 (id=961): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a001000010000100000000000000000900000000000000000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a0}}, 0x0) 55.372081029s ago: executing program 0 (id=962): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r1, &(0x7f0000000300)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x45}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd8d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000380), 0xe09, 0x2) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f00000002c0)={0xf, 0x4, 0x5, 0x6, 0x1}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x1, 0xb5315258, 0x5, 0xc, [{0x2000008, 0xf}, {0xa, 0x5d4}, {0xd, 0x8}, {0x7f9, 0x8}, {0x5, 0x3277}, {0x4, 0x1}, {0x6, 0x40d}, {0x10001, 0x1800000}], 0x0, 0xd, 0x6, 0x3078182a3427730f, 0x1}}) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x4, 0x0, 0x0, 0x1ffd}, 0x0, 0x0, &(0x7f0000000040)={{0x1, 0xc, 0x0, 0x80000000}}, 0x200000, 0x0, 0x40}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000010000104000000000000000009000000", @ANYRES32=0x0, @ANYBLOB="01310100000000002c0012800e00010069703665727370616e0000001800028008001500fca70e00040012000500160001"], 0x4c}}, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000600), 0xa, 0x60081) ioctl$VIDIOC_SUBDEV_G_EDID(r7, 0xc0285628, &(0x7f0000000040)={0x0, 0xff, 0x0, '\x00', &(0x7f0000000000)=0x4}) 55.32286965s ago: executing program 0 (id=964): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @netrom}, [@netrom, @bcast, @default, @remote, @rose, @bcast, @bcast, @default]}, &(0x7f00000000c0)=0x48) r2 = accept4$netrom(r1, &(0x7f0000000100)={{0x3, @null}, [@remote, @null, @null, @bcast, @remote, @netrom, @default]}, &(0x7f0000000180)=0x48, 0x80800) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) r4 = ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', r4, 0x4000, r0}, 0x18) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000240)=0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000340)={0x0, 0x0, 0x8}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000740)={{r2}, r5, 0x0, @inherit={0x88, &(0x7f0000000280)={0x1, 0x8, 0x9, 0x9, {0xd, 0xcb, 0x10, 0x5fe5, 0x3ff}, [0xc, 0xff, 0x5, 0x8000000000000001, 0x2, 0x0, 0x7f, 0x40]}}, @devid=r6}) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f0000001740)={0x8, 0xcb21}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001780)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000001a00)={{r1}, r7, 0x7, @inherit={0x60, &(0x7f0000001980)={0x1, 0x3, 0x1, 0x7, {0x1, 0xbd7, 0xaa, 0x7f, 0x4}, [0x2, 0x2, 0x6]}}, @subvolid=0x5}) timerfd_gettime(0xffffffffffffffff, &(0x7f0000002a00)) ioctl$IMHOLD_L1(r4, 0x80044948, &(0x7f0000002a40)=0x9) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000002ac0)={0x2, 0x20, [0x906, 0x1, 0x8, 0x9], &(0x7f0000002a80)=[0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f0000002b00)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000002b80)=0x8) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000002d80)={0x24, &(0x7f0000002bc0)={0x0, 0xc, 0x6a, {0x6a, 0x1, "6d3f62c3acfbf5b582d692e289a9d80e838c18cca38bc83b9d49e0c47ab8dad1ab862a9f6fd4fc0218157f3966023e84398d0658fde3f6759fd5482c04fece4ae2697547dc47d3f4f9c5049e29a3e189965eecbd0a52fbe1ea2026705d2924fcf5d5cc48fa7a9011"}}, &(0x7f0000002c40)={0x0, 0x3, 0x84, @string={0x84, 0x3, "0d8b3ac9c5d041ec97389f404b6467ac4dc81c83d35ef70ae420ac6103c1b1c7f992b5702da3fbc3cdd4af040b1c875766356ca7efa9d9f51d91eb8dbea2e7d8c52a98ee46836a7e579d6363c631f4e5378078c32697de2e193250ad6cd26d0841c286a8b27450bf83907049e6b95a4dcefa404ec37dbdbb1197bbffedefdb7165a9"}}, &(0x7f0000002d00)={0x0, 0x22, 0x14, {[@local=@item_012={0x2, 0x2, 0x1, "e32b"}, @global=@item_4={0x3, 0x1, 0x4, "89758fd8"}, @main=@item_012={0x2, 0x0, 0xc, "3e9c"}, @global=@item_4={0x3, 0x1, 0x7, "de821015"}, @main=@item_012={0x2, 0x0, 0xa, "b486"}, @main=@item_012={0x0, 0x0, 0xb}]}}, &(0x7f0000002d40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x9, 0x1, {0x22, 0xdf8}}}}, &(0x7f0000002fc0)={0x2c, &(0x7f0000002dc0)={0x40, 0xb, 0x83, "5a03987723548b3c1adcc4541ff023d0e7a6e282a038ae7a38c6fce35deb864a9c76b08147bba91f23d8eb386cf5a801ad211b7f5b9b835c1ae5ae955c15b1e3ecf647ead745afb286e7cc3c4b10b543a216746e378055f9a79604cd6405a7ae88b58629149f14c5d2f35201f5aed644e736b7e873d2b65eee424aef9518ab0d0127bf"}, &(0x7f0000002e80)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000002ec0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002f00)={0x20, 0x1, 0x65, "e18808e5aae12520f97f94cbc1fb11db8320fcf1a2772ba01f87e84982e54206c675c7642e8258210305b98a49354d2965fe5f354417ab92232a94724c40c08196790d2a4930b4b0d2d4e8823d76651d7480aad1561a51768a449863ef38da783d81fc3be3"}, &(0x7f0000002f80)={0x20, 0x3, 0x1, 0x9}}) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000003000)={[{0x1, 0x3, 0x1, 0x20, 0x81, 0x6, 0xe, 0x9, 0x1, 0x94, 0x1, 0x40, 0x1}, {0x443, 0x2, 0x2, 0x1, 0x5, 0xff, 0x7, 0x9, 0x8, 0x12, 0x20, 0x1, 0x4}, {0x2, 0x3, 0xff, 0x6, 0xe, 0x80, 0x5, 0x80, 0x2, 0x3, 0x5, 0x64, 0x2}], 0xd39}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000030c0)={0x2, &(0x7f0000003080)=[{0xc, 0xc, 0xf, 0xd}, {0xe3c, 0x3, 0x4, 0x3}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004300)={r4, 0x0, 0xe6, 0x86, &(0x7f0000003100)="f243f03d42712a8e0f74fbf785eface1d9fb67fdc61aeeb94a6648a15b4ab0a96ee969938c2afe057c748c3060043a5d2247f330a4511ff2abf7e3490859517b79306041a48eba12e2c1ff1893a43c1bfb511878ab98f22b53f6bc62468d77ac102655353125be31a87eeaa56f2de672eb4cad69968876b3e309e99c99a7d5a625c158cfe651d3e05c0f510b31b387cb36e18cd69ac46ff1fd1b9729d25ca39760f8142164bec7bd3834301a38196daa66d4712f8a7ed8a0e1b50282674450650ba212757a2f3ac472080d0c9538362383811398d7315695b7422bfdde21eae5164ac47d4efe", &(0x7f0000003200)=""/134, 0x7fff, 0x0, 0x36, 0x1000, &(0x7f00000032c0)="e3e096270eed8e1479810d088cf62f932b03b6948dcd922ff678a9bc1e6eb9c72c737ab8d74702901fcd4d9f41226b1e94caedfef467", &(0x7f0000003300)="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", 0x2, 0x0, 0x1e}, 0x50) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000004380)=0xffffffffffffffff, 0x4) r8 = syz_usb_connect(0x5, 0x3eb, &(0x7f00000043c0)={{0x12, 0x1, 0x300, 0x7d, 0x52, 0xb2, 0x20, 0x1bc7, 0x1012, 0x27d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d9, 0x1, 0x80, 0x9, 0x80, 0x80, [{{0x9, 0x4, 0x63, 0x81, 0x9, 0xa1, 0x75, 0x64, 0x0, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "60d33f685b"}, {0x5, 0x24, 0x0, 0x6fd}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xe, 0xfff9, 0x7f}, {0x6, 0x24, 0x1a, 0x3, 0x1}, [@mdlm_detail={0x38, 0x24, 0x13, 0x3, "4160de98ccea03bb8c9172c6a3830502ba30feede8b15213a9e66313a81b761c7d99a261a92aafb0db05c618a6d25dc8113866e1"}, @obex={0x5, 0x24, 0x15, 0x5884}, @obex={0x5, 0x24, 0x15, 0x82}, @mdlm_detail={0xf9, 0x24, 0x13, 0x5, "cdef2fc02dee3b56f0b89308bba780ba8bc8ee83b689f0cf20746338b7ea21a02aa1a963ade3e97d8c4fe04eca18f8f859a9db9877e1089ae00a16b49d0f501376a1f7c230d6c62ef64c3a84d88f2e9f4c36ab04924c23aba9a699afcf91ee8a3e1d8079243266be86be9a05a5d2aebab6bc5f34145afebaa7757040dbaa5f85c8cf799130d0c2bbb767070903e2bb935dc0bfa9ba7cdf5eee0c443c3e2dd5e1455f26227b121089ee68b25b909581de332014cb5223869ea158f47000a614041831b875e81c7ed5434dd553266013237796f3b4d519f9321a57c80002ae6aa15dad1d15c1b0802eb74c4833156d80f81f1d8e7c7c"}]}], [{{0x9, 0x5, 0x8, 0x0, 0x8, 0xa, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x5}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x35, 0x8, 0x0, [@generic={0xcd, 0x22, "41b0dc30e86fdb40b97b47363a1cab4d4804a3355af273eb241447c631eb180f507013c40fa84ca2aacea11e3cc66bebc3f480c4a6077457a5210e8af3abcc9825e9d71d7d3dc6fb9e131c3f4ad4afd1820a7ca80df4aa696e22ad035854de465b7439137c71875d6179546d73c75ae28bd0def99332734c2b0d46ec1abe6f9d6f0420c1f51e1f84099c410bad1778a883c2c958f76698320aa258014932cc6455d0b285555f2da8ad154c58a91066f33271cf92ef4705a176ebf6e2bfd32e4662b558dd429efba6d71881"}]}}, {{0x9, 0x5, 0x8, 0xe4905b8c8190ea1a, 0x3ff, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x10}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x5, 0x8b, 0x36, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0xf9a}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x9, 0x7, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x2f36daf9180a496a, 0x40, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x7}]}}, {{0x9, 0x5, 0x8, 0x2, 0x0, 0x40, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xfff}, @generic={0x34, 0x11, "efeaf4710b79c55fd4bdb22d7d101ef8827207b41d67436e65b59a628cd574a9473f94d0afa642a0aa1179752eb263889f5d"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x5, 0x4, 0xf, [@generic={0x60, 0x4, "d28a76007c6ab3846c9994b5cc77370d7e773b81f930c2c4eaa523897d4fac00d0384474220011fbc6ad493fb348f60bfe6f16fa20e7631c844c88c883bbbfce338176da7040cea0c7ee6f3fa7e042ee95466218105b812a5a44777fc898"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0x3, 0xfd, 0x2, [@generic={0x6f, 0xa, "047eea52f0bb1f250b2e4d74f3dc7715495eb3785c9ed555ea706acc2dfc60762a2c75e1a1159635b4be27b5bd645161eb2dcdf45be0642408ed7c0122c04d111fa1456a01835350014850db8f9973fc867c4b4512194b6056c5cec6c7aa46528422462b0c0b612713974771dc"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0x2}]}}, {{0x9, 0x5, 0x1f, 0x8, 0x40, 0x0, 0x7, 0xf, [@generic={0xa, 0x7, "9e4fb819af6e2883"}]}}]}}]}}]}}, &(0x7f0000004b80)={0xa, &(0x7f00000047c0)={0xa, 0x6, 0x201, 0xf7, 0x7, 0x9, 0x10, 0x51}, 0xbf, &(0x7f0000004800)={0x5, 0xf, 0xbf, 0x3, [@generic={0x86, 0x10, 0xb, "cf20781a3f2b1ff9470877cf8d93e942e3dbff4f91d3b875b3a5fa76b4ef9e2d52b646a21b7de195a3ad0af20a592d787921e55b8055f191186f67d3a19d77231725b3b0eaf06ec3da572770f7d1c032d58d2acb4eba362da0f681d38cabc933dfa78f3606a63d95a5cadb9602e487319758df03323fc43190e63e8d5bf72b13219528"}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x4c9cde0, 0xf000, 0xfff2, [0x1bf, 0xf0, 0xffc0c0, 0xc0, 0xf, 0xc000]}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x8, 0xf, 0x2, [0x30]}]}, 0x7, [{0x4, &(0x7f00000048c0)=@lang_id={0x4, 0x3, 0x860}}, {0x87, &(0x7f0000004900)=@string={0x87, 0x3, "82cdfdaae363cb3e1cd3de5c80f96e64c9aa3565799d9384e76a09ed203c83eff98850bc4688d5a310b5c4cd715ab071e2c0330a3ef6498440065501b0a9b6cf139caed07ec3337c3521ca56f1d7f8d1ac2b5d0ac1343dac0e215996f8b4cbd509e376d863a8ada13db6ab9c6306e5d1aff82725277497bf54679894ef4cfbccd180d5a8a2"}}, {0x4, &(0x7f00000049c0)=@lang_id={0x4, 0x3, 0x380a}}, {0x2b, &(0x7f0000004a00)=@string={0x2b, 0x3, "b95bbc5a85e9a10c6df3e3ec75ba535bff37123288c15ab2dd0ecb4a68fa1a2e80e101a2c184f76a81"}}, {0x4, &(0x7f0000004a40)=@lang_id={0x4, 0x3, 0x804}}, {0x69, &(0x7f0000004a80)=@string={0x69, 0x3, "a93b2aa8d71fca965cbe1ccaf2f5505eb040f74badc374c410d422d8dc592f5c4f35a624d6b9fbb8af2e8588469aa6e88fb7bebc4834a911ddf8bdd33f216c1661d0d0c4ee1d57360cfceb4a44624cdfb69c7d6cd2679b4990ce7453c0e3d169d33b76426602ef"}}, {0x4c, &(0x7f0000004b00)=@string={0x4c, 0x3, "be0afe3a4916f4a285d75231cf4f7cdca1b403f39a067dd58bda5f6f63c46b264f49b821865ca785f1b359c2830e08d9400a96d16f869cc98a5d777be0c78c02ee39a6bfbddf6311ef52"}}]}) syz_usb_control_io$uac1(r8, &(0x7f0000004dc0)={0x14, &(0x7f0000004c00)={0x20, 0x9, 0xea, {0xea, 0x0, "4c2747aa45d55b6f46746bc4a241077e301dbc771412fd9a65968de86824b8c8489ca3f98a290a601d369539f6b9b958b291e0410b0f998b016d0e3cf9ced5a58c9374c724ca5a4437ec5f9e9579cb38144ad871fb4dcd5f46c42fe27720b6a681061bcec9a42a871223120980f6e5065e08fada973068a8d1d57ae44d04e2ecd4435389510c35b2ab3360cf2d5299f8c1f10c922c8f82c799110beb63292cb79cdc99e62c7cb9bed645b437cc2444ccd23ec5fb3cf1123f9e14458db42a3eb323209eb4a10b8cfbeb418d55d45c5e06aa91e344b2e085fdd9b6a3535a5169547f98df57ec645a3a"}}, &(0x7f0000004d00)={0x0, 0x3, 0x98, @string={0x98, 0x3, "024228f0fc624ad079232bbc95b8463020577727299fbee660199665445079a557af4286d1674e00468504251587087373bfcbb1ad52de426a03d4923743b84572e5ed06f4abc4532022be2bf24079b0cf1d620554cf97eda773a070d21c07641ef5493d4ce8db60b9b9a64003bee0733e1bbd293da4b440f5bce219a281896760c1c31374e9074484f7868749354491425198e36dd3"}}}, &(0x7f00000050c0)={0x44, &(0x7f0000004e00)={0x40, 0x14, 0xbc, "6ee575442cd02b0eb82add9bfad629b9c2574dcbaff6827818f7c24ce3aed7f02b60ec6e08045813ee3394eaddf1fafec78aedf481c538ace587a4fd4b7073735c34fe9771744bae6702a25e25984b7c5ee19de030fc25e849b96d40d1c624d0efc829aecc40243e0ce2cfd590fe6844170190042d8e84216506acade9b5f8a9a8f7781b9a88151c8a004bcd4f31310eb1ea96d3754f903d25ac722e8d6427198d35bb5bb883749aa601bddf82d0d05c69e6bc37c7415ac87de9d2a4"}, &(0x7f0000004f00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000004f40)={0x0, 0x8, 0x1, 0xb0}, &(0x7f0000004f80)={0x20, 0x81, 0x1, "b0"}, &(0x7f0000004fc0)={0x20, 0x82, 0x1, "f6"}, &(0x7f0000005000)={0x20, 0x83, 0x2, "001a"}, &(0x7f0000005040)={0x20, 0x84, 0x2, "7bbc"}, &(0x7f0000005080)={0x20, 0x85, 0x3, "b8c63d"}}) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000005140)={0xc4, 0x6, 0x1, "aede54dc1d4d0436efd0eb7b7788e0e2ad9a0f861562fb17c87214c50e3e049bc949187c56c83c47d9396c9a5558f6462fb612328c6b37003c15e0c3f75906c2648524e96d09815f6bf1012e5d48b7b0bd4fa3a626f7e1c7d2d0b0bf900c6d6b73c96fb2c3bff955a4d069fe7ec0ac88ae552b85fefb83c01a9bfad5ca3b82ddfdcdf640ce2235ab9360d827681bca47ab1a272683015d17551f2aad38dca0942f48b4fa4d6af4c9ffcd7ff7b8a6b16d8ca8bf12beee95401b78e2c4f8c158cb318db1ea"}) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000005240)={0xd7, 0x3, 0x7, "d3f77337c04e16a2b43bd4e1466ef92dc4f822ca122259bc5fd05c930d30fe0b7cc194520c1007fd9633fb1caca058f95c9b86c77c8e1f203d53efe0c4b4d4c8be0d54c82d5566b9f73cb03083387ca8500a3ed45f706abdd1419a2d5e68cce04e733b09b813b46c44cd57325bdbc6da07a717708095bb587c11c2fc7bcb2e2cf5ea1fcfb5de21bf62cca7da785364bb3623c0f22bdcb7bba1887f40eeaa2199f6b65a8499ec2e18abf88df4d392c570d17e922eecb3aadaa8dfd14b9ac54fc8de1d8f73d5eb0400757ab8752a97bd3d745f44d9e29623"}) syz_usb_connect$uac1(0x2, 0xfd, &(0x7f0000005340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x18, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xeb, 0x3, 0x1, 0x7b, 0x50, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfffa, 0xd}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x203, 0x5, 0x0, 0x3, 0xff, 0x2}, @selector_unit={0xa, 0x24, 0x5, 0x4, 0x7, "5e1e316016"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x303, 0x4, 0x3, 0x8}, @feature_unit={0x11, 0x24, 0x6, 0x4, 0x5, 0x5, [0x3, 0x1, 0x5, 0x6, 0x1], 0x6}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x1, 0x7, "d9"}, @processing_unit={0xa, 0x24, 0x7, 0x3, 0x2, 0x95, "b2d6d1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xf7, 0x9, 0x1001}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xf, 0x5, 0xd, "b06abc40"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x10, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x7, 0x7}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x3, 0xff, 0x3, "f32e700579c1"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xc, 0x4, 0x6, 0x6, "dfeab5", "feda"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0x5a, 0xa8, {0x7, 0x25, 0x1, 0x1, 0x2, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x3, 0x7, 0x6, "ff8625", "8f3c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x4, 0xb, 0x6, {0x7, 0x25, 0x1, 0x2, 0x80, 0x2}}}}}}}]}}, &(0x7f0000005580)={0xa, &(0x7f0000005440)={0xa, 0x6, 0x110, 0x6, 0x6, 0x6, 0x40, 0xe}, 0xbf, &(0x7f0000005480)={0x5, 0xf, 0xbf, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x6, 0x3, 0xf}, @generic={0x8b, 0x10, 0x3, "dfd4d890aecccaeb8b13ab5d3639262a92cbbacbe9f4000011875d88462ce004575f0fec06c9afa9b13012a764293b432284a64293258eaaa7d1d7e210f769d0636f174e6b3b1298fce1b755096e1c70c568bbf709ebf4d37e2a1561a61b441215663057662f02e50cf10ce0ffd7ec5a29fe15e83db21f61415dda97d620308c7b422fbf01636c86"}, @generic={0x6, 0x10, 0x4, "8cc786"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x0, 0x0, 0x1}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0xe2, 0xf000, 0x6, [0xc000, 0x3f30, 0xff0000]}]}, 0x1, [{0x4, &(0x7f0000005540)=@lang_id={0x4, 0x3, 0x816}}]}) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f00000055c0)={0x1, 0x200, 0x4, 0xe, 0x2, 0x1ff5}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000005600), 0x8000, 0x0) 54.823198862s ago: executing program 0 (id=969): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffff, r1}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffff, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r1}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r1}, 0x38) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x20007}]}}]}, 0xa4}}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r5, 0x300, 0x2000, 0xfffffffe, {0x53}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044010}, 0x8000) 54.748570538s ago: executing program 33 (id=969): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffff, r1}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffff, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r1}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r1}, 0x38) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x20007}]}}]}, 0xa4}}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r5, 0x300, 0x2000, 0xfffffffe, {0x53}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044010}, 0x8000) 43.212655991s ago: executing program 5 (id=1178): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e21, 0x5, @remote, 0xffffffff}}, 0x7fff, 0x2, 0x4, 0x3, 0x7}, &(0x7f0000000140)=0x98) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc2}, &(0x7f0000000380)={0x0, "7449cb89bcd834c90925b4c2d21c6ce53c9ad5ddede0fc7b6fcebce7bf1cf988c3138f38092ee9575a483439c73d4a2b7f8033e5c7c5b775c65c3f42a401951b", 0x19}, 0x48, 0xfffffffffffffffc) (async) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc2}, &(0x7f0000000380)={0x0, "7449cb89bcd834c90925b4c2d21c6ce53c9ad5ddede0fc7b6fcebce7bf1cf988c3138f38092ee9575a483439c73d4a2b7f8033e5c7c5b775c65c3f42a401951b", 0x19}, 0x48, 0xfffffffffffffffc) add_key(&(0x7f0000000180)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="5241c352ae0aeb006cb4d6fa4653f79e1ce0becdab2d70a89e56b9547eb64106a229761b25afef6ccf9e9617114dd040120a3f7e6d2812ee2aba7aba1574e7dbc14c3d81013b267b0ac69f6b997e09f17ba5ad305a595a29375bec85f368449b10f1dff152dade9b26596e197cbdd808c89e46677aa4b8067b20d916256db0571ecf3ab71ab3652b44a43e53e4ffabba99a2fc4de7b0bc19d30c13156baca1ca96cb7dce4d0c6556692f522b922ec6ce6f6b6acee5247859a3c7dac88e66097c20a61f9d2292c420266537c58266cb97a5becdb0e5b835b94d5155ea869b0a908ff67ea22367bf34b34b527a5ddc3ca279d60c42079a", 0xf6, r2) (async) add_key(&(0x7f0000000180)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="5241c352ae0aeb006cb4d6fa4653f79e1ce0becdab2d70a89e56b9547eb64106a229761b25afef6ccf9e9617114dd040120a3f7e6d2812ee2aba7aba1574e7dbc14c3d81013b267b0ac69f6b997e09f17ba5ad305a595a29375bec85f368449b10f1dff152dade9b26596e197cbdd808c89e46677aa4b8067b20d916256db0571ecf3ab71ab3652b44a43e53e4ffabba99a2fc4de7b0bc19d30c13156baca1ca96cb7dce4d0c6556692f522b922ec6ce6f6b6acee5247859a3c7dac88e66097c20a61f9d2292c420266537c58266cb97a5becdb0e5b835b94d5155ea869b0a908ff67ea22367bf34b34b527a5ddc3ca279d60c42079a", 0xf6, r2) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) r3 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r4 = add_key$fscrypt_provisioning(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)={0x3, 0x0, @c}, 0x29, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x8010, 0xffffffffffffffff, 0x0) (async) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x8010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6c9b, &(0x7f0000000540)={0x0, 0xc7c5, 0x8000, 0x0, 0x209}, &(0x7f00000005c0), &(0x7f0000000600)=0x0) io_uring_setup(0x58a0, &(0x7f0000000640)={0x0, 0x54b6, 0x20, 0x2, 0x11f}) (async) r7 = io_uring_setup(0x58a0, &(0x7f0000000640)={0x0, 0x54b6, 0x20, 0x2, 0x11f}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000007c0)=@IORING_OP_MSG_RING={0x28, 0x50, 0x0, r7, 0x1, &(0x7f00000006c0)="a95709b99d020853d601abda1cad5834845f0d81181068fd7c02d0b611c1da8ede053ee42e22cabdf4fb898d879055736a2b967028e649aad20d3fac78dcb6e212700a1391e94196be3aed6f3cdcf92f11800b9721db2ab8b9da73b2e204732ae4df6462d32c66e5c416acd84b0180d438c16ed3ad3d9949d275361a4d30af246c3226e9e77d12df9808cdf2459c1bbc451469b73d7ff93891ba0ca5ff41dd27e4d2ca2400cd9c8425386f518da3b8f7fc8203ec13b133a6b5521f037bfb2b1de55715f6008d96d183f115f54eaf2fa5f96c19e3ea9f092fec7a8fb74a9d468e1a978a0bd49811a6057ad36477b8002881fe4e18c3", 0xf5, 0x0, 0x0, {0x0, r8}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000800)=0x0) lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r9, r10) keyctl$describe(0x6, r4, &(0x7f0000000900)=""/121, 0x79) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000980)={r1, @in={{0x2, 0x4e24, @empty}}, [0x888, 0xfff, 0x5, 0x466, 0x5, 0x5, 0xff, 0xa, 0x8, 0x7, 0x7, 0x10, 0x1000, 0x7, 0x5]}, &(0x7f0000000a80)=0x100) r11 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000ac0), 0x80600, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r11, 0x80044d1d, &(0x7f0000000b00)) (async) ioctl$SOUND_MIXER_READ_VOLUME(r11, 0x80044d1d, &(0x7f0000000b00)) r12 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r12, &(0x7f0000000fc0)={&(0x7f0000000b40)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/227, 0xe3}, {&(0x7f0000000c80)=""/53, 0x35}], 0x2, &(0x7f0000000e80)=[@mask_cswp={0x58, 0x114, 0x9, {{0xae0, 0x2}, &(0x7f0000000d00)=0xd, &(0x7f0000000d40)=0x9, 0x5, 0x5, 0xaf, 0xffffffffffff3b79, 0x40}}, @fadd={0x58, 0x114, 0x6, {{0x2, 0x3ff}, &(0x7f0000000d80)=0x7, &(0x7f0000000dc0)=0x3, 0x9, 0x2, 0xb, 0x0, 0x2, 0xfffffffffffffc57}}, @rdma_dest={0x18, 0x114, 0x2, {0x4, 0x9}}, @rdma_dest={0x18, 0x114, 0x2, {0x100, 0x3}}, @fadd={0x58, 0x114, 0x6, {{0x7e1f, 0x8}, &(0x7f0000000e00), &(0x7f0000000e40)=0x10, 0x6, 0x9, 0x4, 0x8000, 0xa, 0x9}}], 0x138, 0x80}, 0x2000c090) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_SPLIT_IRQCHIP(r11, 0x4068aea3, &(0x7f0000001000)={0x79, 0x0, 0x1}) fcntl$setlease(r12, 0x400, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000001080)={0xaa, 0x60c}) setxattr$trusted_overlay_opaque(&(0x7f00000010c0)='./file0/file0\x00', &(0x7f0000001100), &(0x7f0000001140), 0x2, 0x3) (async) setxattr$trusted_overlay_opaque(&(0x7f00000010c0)='./file0/file0\x00', &(0x7f0000001100), &(0x7f0000001140), 0x2, 0x3) r13 = dup(r7) syz_genetlink_get_family_id$devlink(&(0x7f00000011c0), r13) (async) r14 = syz_genetlink_get_family_id$devlink(&(0x7f00000011c0), r13) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r13, &(0x7f0000001380)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001340)={&(0x7f0000001200)={0x130, r14, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x20048800) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r13, &(0x7f0000001380)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001340)={&(0x7f0000001200)={0x130, r14, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x20048800) 43.15251533s ago: executing program 5 (id=1180): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000040)=""/58, &(0x7f0000000080)=0x3a) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0xfffffffffffffffe, 0xfeac) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x9, 0x28, 0xfc, 0x10, 0x5ac, 0x291, 0x4325, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x84, 0x0, 0x0, 0x3, 0xe1, 0x2}}]}}]}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x28000) 41.706231054s ago: executing program 5 (id=1208): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000006100)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x64f, @loopback, 0x5}, 0x1c, &(0x7f0000001080)}}, {{&(0x7f0000001140)={0xa, 0x4e24, 0x8, @private0, 0x5}, 0x1c, &(0x7f0000003500)=[{&(0x7f0000002440)="d0", 0x1}], 0x1}}], 0x2, 0x48051) shutdown(r0, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000000680)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @remote, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1}}], 0x1, 0xc0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000007c0)={r5, 0xffff, 0x1, "df"}, 0x9) listen(r2, 0x0) accept4$rose(r2, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) syz_usbip_server_init(0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000000)={r8, 0x5, 0x1b88c5b9, 0x8}, &(0x7f0000000080)=0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) 40.342351999s ago: executing program 5 (id=1249): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x1) recvfrom(r1, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x1, 0x0, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_coalesce={0xe, 0x0, 0x800, 0x2, 0x0, 0xfffffff7, 0xfffffff4, 0xbfffbffa, 0xfffffffd, 0x5, 0x0, 0xffffffff, 0x1, 0x600, 0xfffffffd, 0x4, 0x0, 0x8, 0x1, 0x40100, 0x3, 0xa, 0x1001}}) 40.159715538s ago: executing program 5 (id=1261): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000380)={0x2}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x1}], 0x2f, 0x0, &(0x7f00000000c0)="739db72dfb607c0043eadc14cf98aecc12101c5b2c83622a5d7ff84bb25ac2070e787acdcbaba5e8cb3b1fb09adfab"}) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 39.862724394s ago: executing program 5 (id=1267): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = fsopen(&(0x7f00000000c0)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="a3", 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3, @loopback}, 0x1c) r2 = syz_io_uring_setup(0x1244, &(0x7f0000010180)={0x0, 0x6292, 0x8000, 0x1, 0x2f3}, &(0x7f0000000400)=0x0, &(0x7f0000010200)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$packet(0x11, 0xa, 0x300) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r5, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x4) listen(r7, 0x0) setsockopt$sock_int(r7, 0x1, 0x6, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0x10}}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x1ff}, &(0x7f0000000140)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="189ac8a5b4b60000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r5, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x47, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000900), 0x481, 0x0) 39.752587158s ago: executing program 34 (id=1267): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = fsopen(&(0x7f00000000c0)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="a3", 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3, @loopback}, 0x1c) r2 = syz_io_uring_setup(0x1244, &(0x7f0000010180)={0x0, 0x6292, 0x8000, 0x1, 0x2f3}, &(0x7f0000000400)=0x0, &(0x7f0000010200)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$packet(0x11, 0xa, 0x300) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r5, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x4) listen(r7, 0x0) setsockopt$sock_int(r7, 0x1, 0x6, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0x10}}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x1ff}, &(0x7f0000000140)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="189ac8a5b4b60000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r5, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x47, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000900), 0x481, 0x0) 30.602859053s ago: executing program 4 (id=1399): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mpol=prefer=re']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) socket(0xb, 0x1, 0x6) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'pim6reg1\x00', 0x3}, 0x18) 30.552361702s ago: executing program 4 (id=1400): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000010}, 0x48000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0) io_setup(0x9, &(0x7f0000000f40)=0x0) io_cancel(r4, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r6, 0x0, &(0x7f0000000000)="bda8", 0x2, 0x100, 0x1}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r8, &(0x7f0000000300)=""/212, 0xd4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x11, r10, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) io_uring_enter(r1, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000200)='~', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 29.529369327s ago: executing program 4 (id=1423): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa, 0x0, 0x700}}, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000080)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x73, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10001, 0x8, 0x8001, 0x4, 0x5, 0x1, 0xfff, 0x81, 0xe}}}}]}, 0x58}}, 0x8040800) 29.392551464s ago: executing program 4 (id=1428): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x54}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040034}, 0xc802) 29.318710643s ago: executing program 4 (id=1431): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x280000, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008800}, 0x40c0) 28.462543192s ago: executing program 4 (id=1439): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x1, &(0x7f0000000740)=0x0) io_submit(r6, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, 0x0, 0xfefd, 0x3000000000000000}]) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000600)={0x0, 0x3}, 0x8) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0x1}) r8 = syz_open_dev$dri(&(0x7f0000000340), 0x1ff, 0x2000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000040)={0x3, r9, 0xfffffffe, 0x80000001, 0xb, 0x1fd, 0x1}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x44, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r10 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r10, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r10, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4f21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000480)={'mangle\x00', 0x2, [{}, {}]}, 0x48) setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) dup3(r5, r2, 0x0) recvfrom$inet6(r1, &(0x7f0000000f00)=""/4096, 0x1000, 0x2020, &(0x7f00000000c0)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10000}, 0x1c) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 13.132302941s ago: executing program 35 (id=1439): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x1, &(0x7f0000000740)=0x0) io_submit(r6, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, 0x0, 0xfefd, 0x3000000000000000}]) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000600)={0x0, 0x3}, 0x8) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0x1}) r8 = syz_open_dev$dri(&(0x7f0000000340), 0x1ff, 0x2000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000040)={0x3, r9, 0xfffffffe, 0x80000001, 0xb, 0x1fd, 0x1}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x44, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r10 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r10, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r10, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4f21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000480)={'mangle\x00', 0x2, [{}, {}]}, 0x48) setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) dup3(r5, r2, 0x0) recvfrom$inet6(r1, &(0x7f0000000f00)=""/4096, 0x1000, 0x2020, &(0x7f00000000c0)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10000}, 0x1c) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 4.612330961s ago: executing program 3 (id=1777): pipe(&(0x7f0000000040)={0xffffffffffffffff}) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x40) (async) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) (async) io_setup(0x3ff, &(0x7f0000000500)=0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0x30000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000041404002abd70fcfddbdf25080001000000000008000100010000000800010001000000080001000200000008000100010000000800010002000000"], 0x40}, 0x1, 0x0, 0x0, 0x40458d0}, 0x841) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) (async, rerun: 64) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) (async, rerun: 64) r4 = syz_open_dev$swradio(&(0x7f00000001c0), 0x0, 0x2) poll(&(0x7f0000000000)=[{r4, 0x101}], 0x1, 0x68) (async, rerun: 32) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) (rerun: 32) write$UHID_CREATE2(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async, rerun: 64) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}, {0x0, 0x18}], 0x2) (rerun: 64) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000540)={0x4, 0x100003, 0x2, {0xb, @vbi={0x58c, 0x3, 0x2000370, 0x38414262, [0xb4ac, 0x2], [0x5abc, 0x4000003], 0x1}}, 0x9}) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0xd20}]}}]}, 0x38}}, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x50, r12, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a3446ceb1c5a6525e8f56e2add"}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) r14 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r14, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="080000000000000010000040"]) (async) socket$netlink(0x10, 0x3, 0x0) 4.208921856s ago: executing program 3 (id=1784): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x40, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9c6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}, 0x1, 0x0, 0x0, 0xc804}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000bc0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x2, 0x0, 0x7d889395ab3b5234, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x4d5, 0x6c}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x9}, {0x0, 0x4, 0x40000000, 0xfffffffffffffffc}, {0x40}, 0x0, 0x0, 0xa, 0x2, 0x1, 0xe0}}, 0xf0}, 0x1, 0x0, 0x0, 0x801}, 0x4810) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x40, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9c6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}, 0x1, 0x0, 0x0, 0xc804}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000bc0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x2, 0x0, 0x7d889395ab3b5234, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x4d5, 0x6c}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x9}, {0x0, 0x4, 0x40000000, 0xfffffffffffffffc}, {0x40}, 0x0, 0x0, 0xa, 0x2, 0x1, 0xe0}}, 0xf0}, 0x1, 0x0, 0x0, 0x801}, 0x4810) (async) 4.208436858s ago: executing program 3 (id=1786): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @buffer={0x0, 0x1000, &(0x7f0000001d80)=""/4096}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x0, 0x30, 0x0, 0x0}) (async) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000000c0)) 4.207317792s ago: executing program 3 (id=1788): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa0000, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000380)={'dummy0\x00', @multicast}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f000000000002000000ffffffff0000000000deffff0c0001007564703a73797a3200000000"], 0x54}}, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x3c, r5, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40004) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r7, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000d"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f80)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xa, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0x8001, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00'}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r8, 0x0, 0x0}, 0x10) 4.042279339s ago: executing program 3 (id=1790): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x10) (async) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) (async) r3 = fsopen(&(0x7f00000011c0)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) r5 = gettid() (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r6, 0x8b2c, &(0x7f0000000040)) (async) timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f00000008c0)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x100000, 0x0, 0x0, 0x2) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000600)=0x3, 0x4) r8 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='\x00', 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000280)="ca0e808b257a0957f1", 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r9, 0x2e, 0x1, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000240), &(0x7f0000000b00)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x60) (async) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000003000000000000000600000095002e6fe30c000095000000500d26c591d557d200000000b825000000000000bc99894bf7"], &(0x7f0000000700)='syzkaller\x00', 0x7, 0xe1, &(0x7f0000000740)=""/225, 0x40f00, 0x3, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000005c0)=[{0x0, 0x4, 0x10, 0xa}, {0x3, 0x1, 0x3, 0xb}, {0x4, 0x3, 0xa, 0x9}, {0x4, 0x5, 0xd, 0x6}], 0x10, 0x7ff}, 0x94) ioctl$TUNSETSTEERINGEBPF(r11, 0x800454e0, &(0x7f0000000880)=r13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r10, 0x0, 0x30, 0x0, @val=@netkit={@void, @value=r11, @void, @void, r12}}, 0x1c) 3.212078204s ago: executing program 3 (id=1800): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x2, 0x7, 0x8cc, 0x10, r1, 0x1ff, '\x00', r4, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x7}, 0x50) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffff7fef}, 0xc) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)=0x5c8) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x7, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x41) socket$netlink(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x2, 0x7, 0x8cc, 0x10, r1, 0x1ff, '\x00', r4, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x7}, 0x50) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffff7fef}, 0xc) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) (async) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)=0x5c8) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x7, 0x4) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x41) (async) 1.252045742s ago: executing program 7 (id=1837): memfd_create(&(0x7f0000000000)='\\\\&.\x00c6\x0fR\xfc\xbb `\r$\x88oCi\xad\x13\xeb\xea0n\xea,\xc2\xeb\x9e\xa2\xd5\x94\xed\x9e\xd5cHX\xa2@\xdf\x99R\x16\xa1\x8f\xfd\v\xe1m,\xa7W\xfb2d\xe9C\x02B\"\xce\xfcE5e\x01=\xbbK\xe0kLA\xd2\b#{m[\x16\x83u,\xcdo0\x90v\x9a\xc9\xad$z\x8e\xcc\x9cO\xdb\xb2\xf9\x06#\xd9\xf02\xd5&\xd0\x90\xdb\xbb\xa3\xa2\xac\x1a9\xf7Y\xd12\xec\xc0\x84E\xc1\xebM\xe6sN$]\x9a\x8cv~W^X\v\xa4\xdd\x05]\x8d%#\xf7S\x83\xf1\xf0\x1a\xdc\xff\n\xca%\xb9a\xc1\xd1\x95\x01h\x8d\x81Q\x8a\x04n\xba\xc3\xcdO\xd5\xeb\x03\x1dS\xd6\x9ebR\xfd\xb9\xf3\xf4w\xf1Q\x89a\xa7g#\xe3P9\xd5z\x1d\xb5G\x17\x8dC\x88Q@\xbd\xed&a~\x00\xec\xc0\xf2\x04\x19\xb5\x03\xb5\xb1-\xe8\x7f\xae\n6\xd6`\xe6\x8bD\x1c\xf0\xc5\xfd5\xdf\xf9\xb6U\xb3\xaef\xdc\x17\xa8kr\x0eJ\r\xd1\x7f\xcaE-\xc2\x92\xa3\x05\x0e\a\x00\x00\x00\x00\x00\x00\x00\xadd\x15\xf3\x1e\xa4\xb1*h=:\x1d\x8b\x81.\xa3h\xa0v\xd5n\a\xa7D\xf8\x86\x00+\xf8~\x8d\xab\xfb R\xd7\xadh\xbaa\x94\xb9\x01_I\x01\x14\tS\xd3\xaf\xfc\n\xcf\x90\xbc\xf6\x80\x04\xc5\a\xdbV\xb2\x98\x04\xf4\x14\x0e\f\xd4|\xa1\xd0\xb2\x9b\x85\xfbr o:\x87\x12\xd5=\xa2<\xc7\x9d\xfb\xd2\x86\xd0\x89\xbfa\x84\x98\xba\x1a\x1d\'\x99w\x14\x1e\'81\x17\x03\xbc\xc1J\x8b\x94\xad\a\xe4\x1f\xe7\xda\xccT\x11\xa9)\xb2\\\xb9v%e\x15A&\xf8Ij\xd1\x85#Wu\xce\xbc\xe2\xbc\xc0\xa9\xc2j\t\xb8\xcbI\xa7\xac\x176\x0e\xda\xb0\xad?\xaaW\x11\x18\xe2HW\x10\\:\xe5Q\xd6\xb5\x8e\x06\"\\\x06\xe4\x00>\xfc\xcb\xf4 \xa6 \x94Q?\x9a\x95\x01\x00\x0f\x14M!\xa1P!\x8dvc\xb9C\xfb+<\x1e\xad\xe4\xa5\xc0*\xb1\xc2\xd7\v\xca\x98\xf4\x06\xe1\x0eH+\xe3\xca\xfdXwft`\x1f\xc5G\xe0_\xc4SR\xaf\xeao\f\xffE\x12\xfe\x9a\x19i9)\xe8\xae\"H\x9fS\xf3\x97\x9d\x93\x80+@\x86\xd9\xff*\xa1\x9f\xd7\xc7w\xbd\xa5s\x99\xa9\x8b<\xcb\xd7\x85(j\xb3\xc8\xa4\x06\xf0\xae>\xf5h\xbe\x19\x97\xe6M\x15\xc2L\n\x90\xf6\x81W\xd7\xc2\x91Z\xb6I2m\x01\x12\xab_\x8d\xc8\xd8\xed0l_\xd7\x00\x00\x00\x00\x00\xadBc\xf8\x1c\xcc\x8d\xccE\xdf\b\"\xd4be\xaf#M?{\x9f\xa8\xf0\x9e\xd6S\xde5\xa1\t\x10\x13\xe0V0c\xf5\xc7\xe89\xc7\xa8>\xc7\xe9_\xdd\x9dz\x8f\xe8\\M\xbf\xd4j$\xad\xaa\x8e`\xe2>\t\x9e\x9f\xfa\xa7nP\xa2\x96\xfdO*\xecn\xc4\xb5\xf4\x14 \xd2Kz\xb7\x0f5\xeaG\\Q}q\x1d\x1a\x10$\x040\xd3\tl\xdcn\xef\xa7!bb\r\x965\xc0\xd2\xa5\'\xe2I\xbf\xadvN\xf5OD\x1c\xd3\xcb\x9d\f\xd4YJ\n\xca\xaa\xd4\xf9\xc3\xf6V\xee\x93\x15\xc3\xd3\xce_\x03\x871!\x1b\v8\xe9\xa3+\xa1\xf7`\xea\x91;3kwH\xc4\xb0\x8b\xc8Gc\xbf\'%\xf0\xce\x1f\x05\xb8\x17z\v\xb2\xfbk\xe9\xaeN>\xcef\xd7\x94\xe7\xf2\xf4?\xfa\xd0\xa1\xb4u\x9b\xf0\x10$6\x03\x83\x98\x15', 0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f000071a000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x1148, &(0x7f0000000300)={0x0, 0xc95e, 0x80, 0x2, 0x30f}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.015443981s ago: executing program 7 (id=1838): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) prctl$PR_SET_PDEATHSIG(0x25, 0x2000000000034) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x4000010, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0}, 0x1a83}], 0x2, 0x100, 0x0) 362.768141ms ago: executing program 2 (id=1848): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newsa={0x144, 0x10, 0x400, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@loopback}, {@in=@initdev={0xac, 0x1e, 0x80, 0x0}, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0xcd}, {0xc, 0x402, 0x0, 0x4}, {0x1, 0x0, 0xfffffffc}, 0x0, 0x4000000, 0x2, 0x0, 0x0, 0xea}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x40}}, @tfcpad={0x8, 0x16, 0x4000001}]}, 0x144}, 0x1, 0x0, 0x0, 0x44800}, 0x20008800) 339.527718ms ago: executing program 2 (id=1850): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x7100}) 336.015153ms ago: executing program 6 (id=1851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10a}]}], {0x14}}, 0x64}}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000496da77e7546f2e343de6800000000000000000000000000000000f8ffd0d84a"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0c20d0464c48bd5a99420d5a1c3bb845a17cd9f6abec7063cfed3e2c4ad48bfbe2f16c47e849d7fe66b8d428f030030ddcce513145b83e2bc3f84b6105a95f61fe72e3d615d6eff3f029ec9b6062835d4d30a50f5ad518e0906538ea18afaa8f780520aff2f48e45b1ec7b81148cd11b5b1d6a"]) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xae40e3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES16=0x0, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) 223.839277ms ago: executing program 6 (id=1852): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4020000000000007b1148000000000085000000c4000000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b49"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000)=0x6, 0x4) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@t={0x81, 0x5, 0x0, 0xfe, @generic=0x7ff}) socket$kcm(0x10, 0x2, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000040)={'tunl0\x00', 0x9, 0xff}) r3 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="2e0000004d96097b30435eb0f0f28e0b3e724d64664fbb10008188e6b62aa73772cc9f1ba1f848310000005e140602000000007c38043c19acf785c40b75a65b0e000a001000000002800000128c", 0x4e}], 0x1}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r5, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x881}, 0x20000080) 222.208226ms ago: executing program 2 (id=1853): connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffff, 0x7fff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x53, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x11}, 0x1, 0x0, 0x0, 0xc00}, 0x0) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000580)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') r4 = socket$inet_smc(0x2b, 0x1, 0x0) accept4$inet(r4, 0x0, 0x0, 0x0) statx(r3, 0x0, 0x1000, 0x10, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f0000000000)="ba474193297cf644f93578df72e434685ab8c6d6ed9bd0840f5510988d6fd92bf2af8e8bcee326ce742cf82900ba738c582b", 0x32) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) lseek(r5, 0x5, 0x1) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3e5f01bf5e830536773269e41fffb228fcafd9fe4de8cc81ee7a2d5cfa2c73a47789a406e793f30463c8959fed409a5204556e05c2aedb4bf3cc0f2004a31b23578cf681378cd988f0e683e66bc01ea0a0bf5e819cd906b2deb4d749b5dc492df9606585ad87a7132eb6bcdd6c268c39a4e552bf3c1eb05953db1fa761f856e90807096c3193f66c4f824b0bc2449593faac44b1cf8f1d58d8a72d9a28aaba47adc6e58dd4bd6eb3221a1ecc9491ea6b40dec0e4beded1222fb430db69e5f6a4798fbdc345236ec79d550dfbffb2ea86e7873b5a3de51f81a46e"], 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x20004052) setrlimit(0xc, &(0x7f0000000080)={0x401, 0x7}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) r7 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000440), 0x8a0043, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000680)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) shutdown(r8, 0x0) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r10, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) io_uring_enter(r0, 0x6686, 0x2936, 0x28, 0x0, 0x0) 221.734455ms ago: executing program 6 (id=1854): r0 = syz_io_uring_complete(0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x8, 0x8, 0xa, 0x1, {{0xf, 0x4, 0x2, 0xf, 0x3c, 0x67, 0x0, 0x1, 0x2d, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@noop, @timestamp_prespec={0x44, 0x24, 0xcf, 0x3, 0xb, [{@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@loopback, 0x100}, {@empty, 0x1}]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x2, 0x4, 0x85, 0x6, 0x1, 0x1, '\x00', r1, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)={'veth1_to_hsr\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) 162.314343ms ago: executing program 7 (id=1855): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) (async) 159.335749ms ago: executing program 2 (id=1856): r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_1\x00', 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440002100000900010073797a3000000000080003400000000814"], 0x64}}, 0x0) 158.690424ms ago: executing program 6 (id=1857): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000880)={'veth1_to_bridge\x00', 0x5005}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001d001a800800062dd5000500080000003e"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) write$tun(r0, &(0x7f0000001440)={@void, @val={0x0, 0x83, 0x8, 0xe057, 0x19, 0xc}, @ipv6=@icmpv6={0x6, 0x6, "a44cda", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x6a, '\x00', {0x4, 0x6, "41035e", 0x8, 0x33, 0x0, @local, @mcast2}}}}}, 0x62) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x8) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0xffffffc0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="00006003bbbbbbbbbbbbbbbbbbbbbbbb88a81600790024000800450000200067e000032f907800001fe1e0000001a0006558000c9078817f0000"], 0x3a) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x41, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x78c, 0x0, 0x0, 0x0, 0x7f}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xfffffff9}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xb2}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0x73, &(0x7f00000002c0)=""/115, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xe, 0x31c, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000440)=[{0x2, 0x4, 0xe, 0xb}, {0x3, 0x3, 0x5, 0x2}], 0x10, 0xec}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x8, 0x80000000, 0x8, @local, @empty, 0x1, 0x7, 0xc4, 0x10001}}) r11 = syz_clone(0x60000000, &(0x7f00000006c0)="9ef21388de7a4f8acb9e4fa0", 0xc, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)="daef5e16ab59f15c76bd0bb2d24c4531772bafe695e9c4e9e86809db42ba0a640b3c776b54356a2f18fba6618a6036319ed23d93352abe50d5ebfe7cb786fbcdca32a3903e457cf8ea12f70b1c667e031c4c88abe826360198f393887ae258d9d7b3794232e20392e208cc97558af45ea5af401e467c8043e4fbb2629c365a3e7c193c686270af7525ba9f0214c8897f8bc8756bf721bd4c1b0c8e45460e34601145ca67fcd2459463363a94eba7ef1718bee98fb9e61a1bf341803a6fa9a82f") bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r9, r10, 0x25, 0x5, @val=@uprobe_multi={&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=[0x2, 0x7, 0x6, 0x7fffffff], &(0x7f0000000680)=[0x0, 0x3, 0x1, 0x2, 0x4, 0x3, 0x2], 0xf, 0x4, 0x1, r11}}, 0x40) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000380)=0x8) 154.76929ms ago: executing program 7 (id=1858): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) syz_emit_ethernet(0xd2, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60120008009c3a00fe8000000000000000000000000000bbff02000000000000000000000000000182"], 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x28f, 0x9, 0x4}) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x1ff, 0x2000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, r4, 0xfffffffe, 0x80000001, 0xb, 0x1fd, 0x1}) r5 = fanotify_init(0x0, 0x80000) fanotify_mark(r5, 0x60e, 0x48000030, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="c80100001500010026bd7000ffdbdf25050000006cffba80c90032807e3e82a852a6215d348ab7b1df0c24f9938cc9c6a60869a483e90096626579fc75b05f210e7c70e2740fcc998f0cae8a67590711d19c06661eb690a5d2d779834a28deb3bb2f3d5ebfeea3a8e0b6b9411a706335c385222c48d572bc042107cbedfa767f5b0b788b1ece3b68b32545fe593db2608c151a579b34d7b50d12338ef6ebba0ec44dfc692e22f6fd585c6c2c00feb30d4a3fdf0265629f33a8a6638ab1f5805b51c13e7172aa22090b12aff2998d3a16f95a6780739b91da6df40dd7ce054f39c1000000a400c70074d0b9e7b3b1c99c0abe0e3a06a2c0524a68a1bba12db66150abb5ec50729a4992ecf875fa1d4c433bb337f390fc3c7b9c3f7ac96f4ae5b84eacd0de30b3e99eb6930c2515b756627008813413d651e7c68d60bcd094ff0d589d0071b53d1b8be6a02a5fe39b301b0a1e3eb1ac862c4587b5be5839f87621d933ec8ffa614a7c34ca6527779789ff809101b326a8ff07005ba40ca68f39d9bbae2dad59075a4cb431ea2e12bb172a23c9c4e4aa19df9b97627fdc5df7694d32fb3504e5768237130037002f6465762f6472692f636172642300001c000b8014001500fc01000000000000000000000000000004009f80080067000004000008007a00", @ANYRES32=r0, @ANYBLOB="734de71867298f5ca7a365b46e8a4e385d47c9364368b5f61511a9adf8c147ff9664be58edca5e7534a080e7f979a5e78256ba02c569da1af08a9aba52c5ed942313693ed4459db467b2a496b5f56514ec3da4fcf5e093e8eda63f1a7f4af6f16c481270dd674e9d95cff738a52c00da592fe7f88cd9b79afe900918b6128b44b48701e5d95fe04668c60d2bebab955cc515bdd2f50b3ecba46e7d87bcc0489a104178471442f7981b87d6c888e7b002792976f0003917bf4a2cb2968a29b7a640e5c1b50f76848f6df1f96dc5145b5f19dc72e45f32578570fa5ca3758c573d242235a486c0ed280c37fb97ca33e3da4be1b64f4fa16fe09254f5a0d678b53069ea8ce9272bfbbf78f07f117f74dbeea3ba95dff1ac53585204e02597cb4a3f3e3161b4f832c9499d3ef5fec39bd5de87c837b016c4e171"], 0x1c8}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf18000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close_range(r3, r3, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 91.227167ms ago: executing program 2 (id=1859): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) (async) mmap(&(0x7f00003ce000/0x2000)=nil, 0x2000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) (async) mq_open(&(0x7f0000000a80)='\'\xf5@$*\x00', 0x40, 0xb, 0x0) (async) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f00000000c0)={0xa50664d, 0xffffffe0, 0x8, 0x3, 0x5, 0x1}) 91.011397ms ago: executing program 7 (id=1860): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) lsm_get_self_attr(0x65, &(0x7f0000000000)={0x0, 0x0, 0xd6, 0xb6, ""/182}, &(0x7f0000000680)=0xd6, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x40000020, 0x0, 0x16}, {0x87c, 0x0, 0x9}]}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000280)={0xfffffffffffffe09, 0x8, r2, 0x0, 0xa, 0xffd9, &(0x7f0000000080)="d3929d732ee4cd95f74874fe90d5a2c28a1c9288079e62b4e1976f38ec7302aa2c5ee17897253ae02e0d7a886af1ed8701055ddf0e399875a9d910e32b1bab6d476247d7cc84be0ae2b0e835a1aaa9c668ea2080b15b96f7884729c70f431e43c82a9f0074d741e7b1e560e91692caab99d474ab5e86d13173870f5c"}) 90.467891ms ago: executing program 2 (id=1861): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0xfffffffb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0xd30}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xf357}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x8, 0x0, &(0x7f0000000240)) io_setup(0x7, &(0x7f0000000140)=0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002340), 0x100) r5 = eventfd2(0x3ff, 0x1) io_submit(r3, 0x6, &(0x7f0000002640)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x1, r2, &(0x7f0000000300)="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", 0x1000, 0x34ac, 0x0, 0x4, r1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xb746, r2, &(0x7f00000001c0), 0x0, 0x7ff, 0x0, 0x2, r1}, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x7, 0xb87, r1, &(0x7f0000001300)="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", 0x1000, 0x4, 0x0, 0x2, r1}, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x2, 0x7, r4, &(0x7f0000002380)="8d6756ca1ce2f95b6f4a5aa0b98078886e9bc8e4b81d64b29bc591564ef263889128b906a809b3d0a33a156a9a3339601fd20d68733497022a9089c687d40b784a6a16dfec4f11fddfdd0c076a4514cb377f73ca826186dd5def486e058b4e88059be4c42a1f8725f33e24c4540d45ebaaf4c7d5b281dcce7a8b585f5eb99fca433dbce8f3c09e47ad48d9d562eb3dcae1eae15a148c49", 0x97, 0x0, 0x0, 0x7f7e85c71e9cf402, r1}, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x7, 0x136, r0, &(0x7f0000002480)="37506c9fcb950a6f8d3e6645a287466b0792edd1cbcc3f181d03fa14216ef1bea38f9d681a1cca3c6d8f55534822252617e41971a368c349c21412942ea73274bfe1ae5348c079f5335d921dc0f92f85963058cd1cc670b7f549d372e7d9b5be89a26e5caca42771b41dd3f4dc3e91e1f8020a117fe916a647d0c69a24b050cf174aa7779c83ab6efddb9a686cb8a6b2bc595b2f47fa4465869e518243c3500e7bd068604ef85f9f356a8b8fe71102b1e92289572ac24feebfb122316ee19a723a41c1fcdfee029aaf84cb2dc5d54940e4fde97980d25f3be29903db4efd3d98d6d979428c34224e9bc750acd7bba4a0ce", 0xf1, 0xe6, 0x0, 0x3, r1}, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x5, 0x8000, r2, &(0x7f00000025c0)="936e18b0ab7a30f609b1fff9d2bee40a0592f2cc7d9ec6fab4d85fa282d74ec4b6a127b3a752c0151f8c8b256dd0feacda90ce68", 0x34, 0x0, 0x0, 0x2, r5}]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100)=0x8, 0x1) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.666326ms ago: executing program 6 (id=1862): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000011c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001180)={&(0x7f00000000c0)={0x10a8, r1, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x60}}}}, [@NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "69e618a3b7dd3214035e96732a1a9da60917032012e1d53572dace8440e15c06373033dfd47eb383cccc36757aedb99bb4cefad44feb514edec42539fa392de22a545167929b6d444c1949345d5a1e7c23b33030d83b63bc78227fc99db45c061de7242971809d00bb13c93b5a19c3ab211422e49933c4c4ebc6cfc4ab45f4c77efc1236ae8bc893bb91b8db447d8dfbbc94666159b8a5a7c6343a5d4935693022eb4a65c6fa52517e8c5627d8d5fc1f03feaf7fb759fe8e0e48fa6e37056bc610275c4ff63875929969cff27edd499a07427eeda59478e3269852a885fd91fad23089409a6315fe46d48d1974261811409f6e80101e0ce36c406977b3490b9242ce713b9161bb627a8802fc41d07c18e12f90767550e6830af36e40f65cd5c56fe02a6b2a3d3fd24fb3c7bd681c15dc538e080343657572c2aa66ad8675b42f6faa2c06a8605989f1ff34661004ca3d64f36c77520b3b7373604928ce40209a6bd8681f30e3ef8054576ee8a1ec911859325f024b3af13b6ae837c34de3637e12a517a734f70a80a637b8c1627423201ff800bc247633201c9713be377c042c735f3aa57f9db14a57b40d45e3384bbf5d527584be5cab158cba611e72ed3cff31d8340def8efe77e4de18ff6c7060042e22ef84e10daf4415bdec930e397d96892210751ab727d1e10f813d73dd0d2f1dfff2cac1f52503da298a3d9dea6912ede56d93687f3442952a1baac5db7fd663f43a8508396b6b992cc0e2c3080881576b190805f4f25981eade9d151e40a7c12b7bb98ef37dfd0714084ba6b0940a6203a4781254de7a9f2d26305a3864e94b4be0248f77c5a12fab2b9c3f48a633247c972354841f3fd10ad473436ce72ab16ef87a000518625b23dcafc9fdf2c8498c123381ffbebe08a15eb2b0077e174c0c7a66928645e944cb70b2fb8f574e747060925892bb803966cc711956f928dfa38f13e1e25a2a6cd67eaafa403e68a7827ce6055c5d662855f6bb3735995e1354bdce41b352e93eb3a3c3456037de0041599e0faaa06bd6ce9930109b353a2aef836a2ec05fee051b6ccb72dc0d2f1a6865b8c51446a48f305163129a096c119d6524ed670d428a909853af31a290fdc04431bd7dcc04d4691f3ebf0da20fc3d559bf9c7dd718f2d493649ba71812d84b6c161da4f2c3d2942d7c71bec2d4a9d083b5971f384bba08a5d97a66cba6b8bd8672864ada402931a86d6dbb608863b4f20c733b0729323f4acad01931560adcda23b740d8681522e044cbdfda455652905699f67180686e4ee4276537eec1791322c6eb1036e8793281b7c5cdbb42e1e8b29d94052ee1828f9ab239f0640048c2bff6d163af81dabf1f968b59989b0684c820f697c74f6018449f9ab4ab042afbf1c54b33f821f6750538688056d700fe7e1443cabd02e98cd0ad15c8a89964940207df0ab6a312614f03be9c6b8290ed23157029d35ff04ec3514f993a4445ab54b3ebdef221a38f05c30f35d1b3ed44263e6dc2e1c2c0fc2e773da32c31d34b7376c44eb82773110641a8d63612ca152d0b42a7cced5dd2ca67dad1b0ba1763ec34cb61cd75d5b26bb5f93c2e9bf3428facf1b5736de9146b75763cb7f37dbdf8016694891311dd60e811c0f28286956816343edf7d1e6d86f55fe93c49fbcaa2ab787011ad8e9fa91d8c4e8239a29da29a8c8d3fe2141671c95df8f237d9053d37bdd3d638b5f6d2069963a2d3f8c2c3c50e33bed25d89881d8954a225ae3906c7dfb5a069ad12c94b1db201b87e918d770a3578c492a970958fb7f5c737935710cfc30423ce5ba526a63da84b287775e5620a768d21bc5b90412643eefe76f28072d7522855ac86f9ebadad8f0113ec0805d51da5c467d465faee36120c8c54d0dfd898af5bf10dcaac77ce1bb53e7933d6b254d4943f83e34fd8f19e7783db4252e736fc3ec1e4657047e34e203b5153420eec5e0e28629c57893aefdf24000d78f68add8d28d3791885008d4c3c5976d87f875da77578070124983eee9cb20d08f81074aa9bde45b734930cccb162c1e3c42b1a53681a0fe832063fc01523ed74ccb7718a81832c29e55ba62ae678783ee605168380c6eb37ef6e7ead1c7a049d7749e0b3a25567f7cfabf4b504d3fc395f1e0fb7923a2e820c747bcca1577987411ef1f6136035634af9d6afea31eb15fea486b2690ddf170b3df00ee76e4648118b514c4153e6e9dac24973c797e9173a26b341994b21ae97b1d88af3d9383cfef6131bca9f3de551c537108ba0979a9cdb823b2c9f2292541132b0b845593e8c556635e442427fbb5a818c9b984c6b2546264b011334feab8c28f974ee3c3234308fed13ec72d1293d283305636ecf59b84bdabba0111d44b7d4d9c0b31dc591a7fa6eaeb721dd383662541ca7f5b4d4e56d477502b91768efaa70b9e62d23b13a00cdbe1d134c17cdf98150c115a3e839a185f6f7f969e1d9d86323e7df0dc8fa17f3e369d8ab2a72f4141632af427df4674d3a97b4503318a6bf58af4c6d4b0dadae60afc67d044517186e3ce307c723320867ddbe2e5582d3dbec21eebeec375a7d846fa743b9de36b3d2ad7c7a06e4e9dbd45edd3a8cff7083798e769eb8a3d4c60be469d3af4f3069176ae36db4c388bd8b602ef4db18fdcb679b705b9ec0aadee152455f3ba03aaa269ea863b419772390748468c3a959f77e1b0a23bd4e9bd3d1fbfee1ac3a8e3ce57cf4114fdaf5f6c279e660083b4ab488d543476808143ce7854d89eb606d1252f389d019663b39f29107f9ced7aee62f5efadcebd1242e2cda7300fab60fe5c10c283c0f0f48292f5b759d8707ad1e825d390b2dc6c6ca596f0f7f6a6e2615bd99c05e9425a18d6ceb6bfc44686091c7233ba753f29e032c804fe9e440e5582119931098656015c97098f98444062c3c5cb0b0be39adb48b9406a48afbadb9546460d5c402badb4370a797b1388c522dd64af3c3e7988b303c56ace680b4755775c8d5bdc75a6600396775482a1cd2c091f2258ba6ba9c1ec1c379eeb1c7e7fc53b16e00257213ecc16a519d2cae22186de7b9ef0665b877775e5e2b0c1c208e6733454a7190341ef2a9959384c581151db8f30763f5bf95005e38263f4cd5551f70df22eb4440dc0918a29a1e102558ac311625809b1f7c3411c2534f634a7e7bca1f23121c264160d91f8d23af83d4fd3f5d6d9ffd5c15a12c9edaaf3bb282f02d92c478a0826a6a8c54363e47e6c9db5e52058f944f448dc9a333a7bc7d39bdd8108dc0391405e697b7d88eb19e3e4e3d444a99321f33dcbcb0c77ec557ed52ff99ea5fbfa3ab84fee77e635fd0a1337228cfdbf69e441c1cd109a64da285dd19c8e82b34d223e58d89c48d3f0d25a3e313e36a76bb16c7b76bbb5f438a0ea498ba48beae2179dcef18fcc18db409eb119da55ba2f7839304242fd3e081cf95e7ee9ed9e23a1754b2ea5d9c9096af0406ebe81e379b1988c659e5c4edddecf98a6db69020811fc4f53950240ab470c57b0f9fccc9269322695343d4c836c40010e62f9ca42c94009dd46cad47e165899f886ebee5ee214042855a1b5f9500c90f8e386296c0d6fc0235da2464c388c537969bd8b58707b8f477b4a4509ada53ac78b840c987e14c86977be28decdb339ac3e2b1ef65ee79e6926ee77472ab678b4d5493c2627aa97a44b7749d48b4265d2d5fb02a1913bb036856a4781d6a6291064e7168628ab019603a6a3714c6c0846cba862e615272ce71caaae56026b8b47b78447f3f2baec03bafc28c80e7bf5557f4f6723ab67f817914a97be21969c0d59f6036e6672a2ab65cbb260e571a89abd5366512766d00986b1211e70c77dac3b3438537d580fd0e840196ae6edf1e1614702c3e42e23de3eb180c070722347b3412e0b5e7fd730780f2f7e1a3abba00ed95551ba3f35fc9e189ced54999ceeaf9fef304e1cbd5d50a1f9c74b2b9bc16f22e212cc03534297426fabae3f8a55a81df199191205a8e95c4c9a8460b69d1f8536045bcf30edae7de2c0b67a552bdd5ffd731c5c89873b51e6b4870eac4f8ec52f0d804a74755f3f2271f38e2b922a5003294849f0f3aa69d8b42f9c9b49695e2c0adf053534d07f7e770d29ed1122df39a3447ea29a6ff7c4923af64fdfe15ab63b31ce85f88ba751979d2e6593fb7b39a1dbeb567ffdd747a1c158b9190b196fe7b0283fc345caa5eabeb71e271d70a0988f804f7c525aa1f368aef8bbd2d29fe9bff8cecb96ec88ca553079967d4c392a51b32fa3aa479cc15f218bfd9d7d7096349eb22a2db6073c6778b9958d9cfcf6c6f56ddbc65711f7dda4f85b70930990c8ca725bb9af8fc886d3d2772a713af41f0b66f854d7eda6b805e0744264b06adb3fb749d635efb8da957f2996e9c7ff4465ac77b882fc09295062ec17cbbedf971084ef28f15b36c118079fc5a8212c6d506dc227a58b6afe4707955fb5b873a4d7817c3def7376596a5416cd75e6aa2f977eacf2f95e3c3a46c62b3c41d5889ad2e7d988e74eff48a3bb15192d80ede5c962c17fc57becea03014b8efe1cdadd8c21ebea35692e57ea791e0011af8882b1ce4379e94bf246c6fde9cf8066b5cfac675c1700a0b46ef3e6b0401ad692a4ac0c89c7bfa487364a85e8d5e47fd49259cac0fe41f5be67eb3ee5f3a0dbd718e73a27e5e016ecae001376e8f3fe246d970ee49cf76592bf5b51238fa8e686e8d8ab6a9bc30a76b678c543be2d351f2232e995a9e5985e28db4da3c570700edab2603f48f5a409f396357e02ec4b823e8a523a9055605092b63f027bf6fbfcec447de58112b896625ce966c2a7cafd3fb0a2f5148741399a789cafa3414ec195aa706ac87a89f7e7100773abf37a426950852d2ad5ba14a69f62a38b29b4e1e5145a233b6f9bd5fdf4f349da482b01286a4ec200a2476f6b15952bab82275514de8fdc55b2f988bae323e27c2c2c7e9dc7f69eb2e850591c33d820b8f933ab247246d753eb92ebbaaec3d80af65608512a948821295741b5abde81541f865bbfe8d9c89835f3c71711044a0f53988c0f48ba7fe29bcad593bc2720e7898c7da4ad03614f4efade41b80734062f82967fb7943257148d5fb7201f329fe75796d241e683ed46b6f78fa4c8eb113616b49d9cdc9de540221b72ad2bc31affe302879c662881b24d4df59b11bf957597c4b76e90278510eb3f7a44d403e7fdabd9f896a8f7dcf23df93f8afcef1463bc1a015ce456a0b823649d56399e6d63f2cea805d83da026dee365197b8a6f39f95c0269f3831486a65cfdf594c8e20b648861963c66679c0d35b672aae4d15405dc3c964abdcbc93942f31ef9f15862d64c161c74e98811249a9fe25f04629e81ce8e1c4bcfbe92daeb9f65b3ecf58be44bc1c3fc145d9d063144c6e76d8f70fa53e7e1c4b3fdf1544bb1903f046baeec2b3dcd8c24593e8e11ac91a5f6b15e4f4c2a1bf92a61fff369d23868475edcc227328c315bf20babc3aa4d18f5170fcbe9e09d12d4d5d3051ee2be9abc8bfd0d2f9bd7b4c27dfc3cd01b861404b7091440a98680f32ff7450c9956be91588c0c809d52c93bea9f8791b83f8882311d1cce1ce23c52dd755056c47d3eb26f846286cc718c2d5c44b216fac2d44c8aa8f631490a40688300777199a42be7816b36e5a0704f8495cd2d08b9d76c5760bcf8a449049b40fda8c597be53125e362025ab76ad01132845c12052fa9295e4c2a54fac9b399fbf4225db2a0285ea2e278076e2e83f773f5a6"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}, @NL80211_ATTR_FRAME_MATCH={0x71, 0x5b, "60f3267be1a76f78a1f2ed572ab30882d79e3245c4f1cb9979a4574c25effe4f973be60e35d0604dbbe189600734da4d51351d7045275494d616f88ce7d04ad5b7bc2ca55ab1ac9aa1c2ff708aa0014790c784657a75e48d1d09c42b70b9e4386c8fdbcf7c0322ac586c4a08ac"}]}, 0x10a8}, 0x1, 0x0, 0x0, 0x2000c004}, 0x40040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x4c, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x800, 0x4e}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xa06}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x3a, 0x6, 0x6, 0x7]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044810}, 0x20000004) fgetxattr(r0, &(0x7f0000001380)=@random={'btrfs.', 'nl80211\x00'}, &(0x7f00000013c0)=""/96, 0x60) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001480), r0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, r4, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x94}, 0x8000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000015c0), r3) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x24, r5, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x18}]}, 0x24}, 0x1, 0x0, 0x0, 0x2050}, 0x40040) socket$inet6(0xa, 0x3, 0x1) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1d) ioctl$F2FS_IOC_DEFRAGMENT(r6, 0xc010f508, &(0x7f00000016c0)={0x40000000000, 0x3}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001700), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000001740)={{0x0, 0x3, 0x0, 0x3, 0x2}, 0x5, 0xf, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0x101, 0x9, 0x4fe6}) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000001840), 0x2100, 0x0) write$USERIO_CMD_REGISTER(r8, &(0x7f0000001880)={0x0, 0x7}, 0x2) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000018c0), 0x102, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r9, &(0x7f0000001ac0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x84000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001940)={0x114, r1, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x1b}}}}, [@NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x29}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x6}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x9}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x7ff}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x3}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff3c}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xffff}]}, @NL80211_ATTR_KEYS={0x7c, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x10, 0x4, "0db67b6b3a0b0a585a58593a"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "6487cec229"}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0xd, 0x4, "7204ffea2e965cf09f"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d01aa12245"}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@random="52bcd1178291", @broadcast}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x44800}, 0x20000001) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x40, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000001f80)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001c40)={0x2c8, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x51}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, '\''}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "1de4147a0e87e61a6f6d"}, @NL80211_ATTR_FILS_ERP_REALM={0x4c, 0xfa, "58ec5c6a846fdf11b07bf4dd316d10f32072a18aa803cf8cedba2ab0427c4e0b974b7b7946ddbf44bf4d4fba35b47a10f12c084e1800bdb6e43f03aa07edaa8cd57d4c68f69934c8"}, @NL80211_ATTR_FILS_ERP_RRK={0x9b, 0xfc, "97ee20088ab05f49e60d070f737de7d80b2705107f1dc4b2d049423e301d59b531acc1c0895ee06b282c299eb5fbc8787a5f2f39b0cc8474d38cf0ef87e426c5ff4074264ceb95a08957db5d31329451f8edd03f567311115b629c27ca7ff2dfd2d0c4da466a6cc453730661131bd5ab650b5ed9602761d7d2435945907fa6bf0862e5ff8cacbd6977f0335a01f47366bffb2bf9ca9f4a"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x67, 0xfc, "48c7c1b6034d0a8d9c8d6512d39e61997f0152d9b6cec488bb9c6c4013aa533520509254b3e4d45c5c4901899c34da8ce9cc307da3d0a5061af09c6044604b5f68ee732b51e0df00149fe9a3c6a6b1c615884b8f96067b5217eaec4c412fa3cc724b93"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_RRK={0x9d, 0xfc, "128d7c42757b2afd1ac1065ee6439788fb5102f3f53afa557922fb997b35eb8187221b06e6ee5b778f7ae9fbb5388dcf66f7d32130ede15e1bbfa0c68361324f561f31d33086262c0f8be4739dd15d7fadf20b6ec1be785fd43934d3145b43e32bf2010c74d32a014871a43f9fdace8bad7f19b3593fe5a21771c11b8f33c0f59a3b92413af5a8d54a6fb9616b1c091db42f312a27a265616f"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "28549177"}, @NL80211_ATTR_FILS_ERP_RRK={0x63, 0xfc, "84141799fffd63aa08657d71d7346efed9e3779f35baaaf7ce20f6ad8c5365d9ee65726d8bbc3e9788894e6e4e50a0513b09d2dca6b695c64b7974d67dd129a62fa310150238325a5aba86df7cc2baa47fecc21bc5e4582f6983be94e4eb8d"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfffb}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @NL80211_ATTR_IE={0xb, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @ibss={0x6, 0x2, 0x6}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xee}]]}, 0x2c8}, 0x1, 0x0, 0x0, 0x40400c6}, 0x15) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002000), r9) sendmsg$NL80211_CMD_TDLS_MGMT(r10, &(0x7f0000002100)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x50, r11, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x50}, @NL80211_ATTR_IE={0x18, 0x2a, [@perr={0x84, 0x2, {0x2}}, @dsss={0x3, 0x1, 0x95}, @dsss={0x3, 0x1, 0xb0}, @peer_mgmt={0x75, 0x8, {0x0, 0x1, @val=0x8001, @val=0x24, @void}}]}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000002140), 0x2, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000021c0), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000023c0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002380)={&(0x7f0000002200)={0x154, r12, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7fff}, @NL80211_ATTR_FRAME_MATCH={0xca, 0x5b, "cccfcd176dc592c938b940bdfde9b7613cd078cfcee4aa32064ee067e2926554fca4bd119a6abdf2801bf317f33046169788faf7df00f8d828fba665d0e59783ee1363be6f557f6248939a8d819125211a874303d87fcca61acb1c2995385b3809531c6540bdec1d88c87b80baf95b691ee5705182e9bfec45b7ad9046d590b406a187ad2081249075c4dda817739767963449add9eb75e5ef6ecb2df3cf03f6da2206b302c14beb9fe38a0a6f4a3d4f8f76051f729b4bcbbe33ff95c9b65a0423e67eeeb773"}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}, @NL80211_ATTR_FRAME_MATCH={0x5b, 0x5b, "273b73c4346e39c780e108733f58d984bbb6a916f44b7283aa5a6fa13758281434dd407523dbef04a385428111e7d0499867dffa4387041282b70193f5b5de88103e7762f700531031a3fd44c508246722356136bb5869"}]}, 0x154}, 0x1, 0x0, 0x0, 0x800}, 0x40) 326.913µs ago: executing program 7 (id=1863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendto$inet(r2, &(0x7f0000000000)='\x00', 0x1, 0x24000006, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r5, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r5, 0x7}, 0x8) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}}, 0x0) 0s ago: executing program 6 (id=1864): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000f80)="c6a2df5b40a88f13b14b695dcff8bdf91bee7d5d3192038a00d99b16e5cc48025acfb12448ecd50d96cc503dc30db319dbd926973d11195e8bd225df76d8d3c5d34e68829bb7c5bfcb51f0ab73d2e4500a669b1270c2e9626684e54ad6a9e468ca0a4084725b82d483ff5bfae8a249b509f2553bb4c1690269301e9693313afb0e", 0x81}], 0x1) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000080)="660f2ba90000008065f2e0e50f20d835200000000f22d83e260fc798005800002e0fc7b2a5464f0a260f21fe66baa100b0fba3c615eec615ee29730fc4e1b56a46000f01bb00000100", 0x49}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) (async) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000f80)="c6a2df5b40a88f13b14b695dcff8bdf91bee7d5d3192038a00d99b16e5cc48025acfb12448ecd50d96cc503dc30db319dbd926973d11195e8bd225df76d8d3c5d34e68829bb7c5bfcb51f0ab73d2e4500a669b1270c2e9626684e54ad6a9e468ca0a4084725b82d483ff5bfae8a249b509f2553bb4c1690269301e9693313afb0e", 0x81}], 0x1) (async) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000080)="660f2ba90000008065f2e0e50f20d835200000000f22d83e260fc798005800002e0fc7b2a5464f0a260f21fe66baa100b0fba3c615eec615ee29730fc4e1b56a46000f01bb00000100", 0x49}], 0x1, 0x2, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) kernel console output (not intermixed with test programs): 7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 417.814258][ T40] audit: type=1400 audit(673.724:601): avc: denied { getopt } for pid=8393 comm="syz.3.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 417.826623][ T8389] netlink: 'syz.2.687': attribute type 21 has an invalid length. [ 417.882371][ T8399] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.886260][ T8399] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.974879][ T40] audit: type=1400 audit(673.884:602): avc: denied { read } for pid=8406 comm="syz.4.693" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 417.984773][ T40] audit: type=1400 audit(673.894:603): avc: denied { ioctl } for pid=8406 comm="syz.4.693" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 418.090962][ T8417] program syz.4.698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 418.396209][ T5996] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 418.545739][ T5996] usb 9-1: Using ep0 maxpacket: 8 [ 418.549729][ T5996] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 418.553323][ T5996] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 418.557304][ T5996] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 418.560538][ T5996] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 418.564299][ T5996] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.569249][ T5996] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 418.572814][ T5996] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.590192][ T6026] libceph: connect (1)[c::]:6789 error -101 [ 418.590204][ T6062] libceph: connect (1)[c::]:6789 error -101 [ 418.590594][ T6062] libceph: mon0 (1)[c::]:6789 connect error [ 418.592408][ T6026] libceph: mon0 (1)[c::]:6789 connect error [ 418.779474][ T5996] usb 9-1: usb_control_msg returned -32 [ 418.781277][ T5996] usbtmc 9-1:16.0: can't read capabilities [ 418.857310][ T6062] libceph: connect (1)[c::]:6789 error -101 [ 418.857676][ T6026] libceph: connect (1)[c::]:6789 error -101 [ 418.859598][ T6062] libceph: mon0 (1)[c::]:6789 connect error [ 418.861841][ T6026] libceph: mon0 (1)[c::]:6789 connect error [ 418.870603][ T8465] __nla_validate_parse: 6 callbacks suppressed [ 418.870618][ T8465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.712'. [ 418.956720][ T8467] xfrm0 speed is unknown, defaulting to 1000 [ 419.131787][ T8473] usbtmc 9-1:16.0: INITIATE_CLEAR returned 0 [ 419.182285][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.714'. [ 419.182418][ T40] audit: type=1400 audit(675.094:604): avc: denied { mount } for pid=8474 comm="syz.3.714" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 419.186882][ T8475] netlink: 24 bytes leftover after parsing attributes in process `syz.3.714'. [ 419.210412][ T40] audit: type=1400 audit(675.124:605): avc: denied { unmount } for pid=5995 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 419.324984][ T40] audit: type=1326 audit(675.234:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.716" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f022518eec9 code=0x0 [ 419.335421][ T6026] usb 9-1: USB disconnect, device number 2 [ 419.365792][ T6062] libceph: connect (1)[c::]:6789 error -101 [ 419.368025][ T6062] libceph: mon0 (1)[c::]:6789 connect error [ 419.386603][ T7177] libceph: connect (1)[c::]:6789 error -101 [ 419.389206][ T7177] libceph: mon0 (1)[c::]:6789 connect error [ 420.221281][ T8493] ufs: You didn't specify the type of your ufs filesystem [ 420.221281][ T8493] [ 420.221281][ T8493] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 420.221281][ T8493] [ 420.221281][ T8493] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 420.233295][ T8493] ufs: failed to set blocksize [ 420.233306][ T8501] macvlan0: entered promiscuous mode [ 420.237070][ T8501] macvlan0: entered allmulticast mode [ 420.238866][ T8501] veth1_vlan: entered allmulticast mode [ 420.289705][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.725'. [ 420.315730][ T40] audit: type=1400 audit(676.234:607): avc: denied { connect } for pid=8502 comm="syz.4.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 420.645371][ T6062] libceph: connect (1)[c::]:6789 error -101 [ 420.647369][ T6062] libceph: mon0 (1)[c::]:6789 connect error [ 420.673248][ T8523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8523 comm=syz.3.731 [ 420.716366][ T6026] libceph: connect (1)[c::]:6789 error -101 [ 420.718427][ T6026] libceph: mon0 (1)[c::]:6789 connect error [ 420.731617][ T8525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.732'. [ 420.778667][ T8529] netlink: 'syz.3.733': attribute type 1 has an invalid length. [ 420.795193][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 420.823518][ T40] audit: type=1400 audit(676.734:608): avc: denied { append } for pid=8533 comm="syz.3.734" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 421.007691][ T8545] binder: binder_mmap: 8544 200000ffc000-200001000000 bad vm_flags failed -1 [ 421.078757][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.741'. [ 421.081658][ T8552] netlink: 'syz.3.741': attribute type 30 has an invalid length. [ 421.090033][ T6064] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.093051][ T6064] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.098085][ T6064] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.105104][ T6064] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.171881][ T8559] 9pnet: Could not find request transport: vahead [ 421.182208][ T8563] netlink: 'syz.3.744': attribute type 2 has an invalid length. [ 421.194290][ T8562] fuse: Unknown parameter '' [ 421.294468][ T8572] xt_connbytes: Forcing CT accounting to be enabled [ 421.459943][ T8579] XFS (nullb0): Invalid superblock magic number [ 421.507833][ T8456] ceph: No mds server is up or the cluster is laggy [ 421.507944][ T8458] ceph: No mds server is up or the cluster is laggy [ 421.515434][ T6026] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 421.689047][ T6026] usb 5-1: not running at top speed; connect to a high speed hub [ 421.693255][ T6026] usb 5-1: config 1 interface 0 altsetting 177 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 421.698038][ T6026] usb 5-1: config 1 interface 0 has no altsetting 0 [ 421.702462][ T6026] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 421.705751][ T6026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.708305][ T6026] usb 5-1: Product: syz [ 421.709607][ T6026] usb 5-1: Manufacturer: syz [ 421.711128][ T6026] usb 5-1: SerialNumber: syz [ 421.720520][ T8549] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 421.768017][ T8604] netlink: 56 bytes leftover after parsing attributes in process `syz.3.756'. [ 421.769784][ T8608] sctp: [Deprecated]: syz.4.757 (pid 8608) Use of int in maxseg socket option. [ 421.769784][ T8608] Use struct sctp_assoc_value instead [ 421.809308][ T8611] netlink: 'syz.3.759': attribute type 2 has an invalid length. [ 421.812558][ T8611] netlink: 'syz.3.759': attribute type 1 has an invalid length. [ 421.892351][ T8625] netlink: 36 bytes leftover after parsing attributes in process `syz.2.764'. [ 421.921499][ T8629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.766'. [ 422.024196][ T8637] syz.4.768 (8637) used greatest stack depth: 19544 bytes left [ 422.049546][ T8651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.770'. [ 422.072436][ T8654] IPVS: Unknown mcast interface: pimreg1 [ 422.077198][ T8654] netpci0: renamed from bridge_slave_0 (while UP) [ 422.139076][ T6026] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 177 proto 3 vid 0x0525 pid 0xA4A8 [ 422.144695][ T6026] usb 5-1: USB disconnect, device number 13 [ 422.148891][ T6026] usblp0: removed [ 422.290202][ T8664] binder: 8659:8664 ioctl c0306201 200000000640 returned -22 [ 422.843615][ T8671] bridge_slave_1: left allmulticast mode [ 422.845618][ T8671] bridge_slave_1: left promiscuous mode [ 422.848539][ T8671] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.853653][ T8671] bridge_slave_0: left allmulticast mode [ 422.856152][ T8671] bridge_slave_0: left promiscuous mode [ 422.858668][ T8671] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.142384][ T8679] bond0: entered promiscuous mode [ 423.144108][ T8679] bond_slave_0: entered promiscuous mode [ 423.146209][ T8679] bond_slave_1: entered promiscuous mode [ 423.148372][ T8679] batadv_slave_0: entered promiscuous mode [ 423.151251][ T8679] batadv0: entered promiscuous mode [ 423.154256][ T8679] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 423.159470][ T8679] bond0: left promiscuous mode [ 423.161045][ T8679] bond_slave_0: left promiscuous mode [ 423.162893][ T8679] bond_slave_1: left promiscuous mode [ 423.164677][ T8679] batadv_slave_0: left promiscuous mode [ 423.173628][ T8679] batadv0: left promiscuous mode [ 423.217637][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 423.217651][ T40] audit: type=1400 audit(679.134:613): avc: denied { connect } for pid=8686 comm="syz.0.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 423.227405][ T40] audit: type=1400 audit(679.134:614): avc: denied { ioctl } for pid=8686 comm="syz.0.783" path="socket:[28439]" dev="sockfs" ino=28439 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 423.320643][ T8700] NILFS (nbd4): device size too small [ 423.330722][ T8703] nilfs2: Unknown parameter 'discardPss_Dirty: 1064 kB [ 423.330722][ T8703] Pss_Anon: 472 kB [ 423.330722][ T8703] Pnilfs2' [ 423.333008][ T8702] input: syz0 as /devices/virtual/input/input12 [ 423.358163][ T8702] bond0: (slave bond_slave_0): Releasing backup interface [ 423.374632][ T8702] bond0: (slave bond_slave_1): Releasing backup interface [ 423.390412][ T8702] team0: Port device team_slave_0 removed [ 423.400762][ T8702] team0: Port device team_slave_1 removed [ 423.403678][ T8702] bond0: (slave batadv_slave_0): Releasing backup interface [ 423.410343][ T8702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.412653][ T8702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.416889][ T8702] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 423.437858][ T40] audit: type=1800 audit(679.354:615): pid=8710 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.2.791" name="/newroot/212/file0" dev="tmpfs" ino=1129 res=0 errno=0 [ 423.597561][ T40] audit: type=1400 audit(679.514:616): avc: denied { getattr } for pid=8723 comm="syz.4.795" name="/" dev="9p" ino=71827653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 423.597884][ T8724] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 423.679801][ T8728] 9pnet_virtio: no channels available for device syz [ 423.875436][ T6002] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 423.945872][ T8749] netlink: 'syz.2.802': attribute type 1 has an invalid length. [ 424.055529][ T6002] usb 9-1: Using ep0 maxpacket: 16 [ 424.066943][ T6002] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 424.069796][ T6002] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 424.072264][ T6002] usb 9-1: Product: syz [ 424.073571][ T6002] usb 9-1: Manufacturer: syz [ 424.076758][ T6002] usb 9-1: SerialNumber: syz [ 424.081848][ T6002] usb 9-1: config 0 descriptor?? [ 424.199021][ T8778] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 424.257477][ T6071] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.261420][ T6071] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.292689][ T6868] usb 9-1: USB disconnect, device number 3 [ 424.403162][ T8803] __nla_validate_parse: 3 callbacks suppressed [ 424.403179][ T8803] netlink: 96 bytes leftover after parsing attributes in process `syz.2.814'. [ 424.412316][ T40] audit: type=1400 audit(680.324:617): avc: denied { execute } for pid=8802 comm="syz.2.814" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=31093 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 424.600747][ T8815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.817'. [ 424.605985][ T8814] ucma_write: process 748 (syz.3.817) changed security contexts after opening file descriptor, this is not allowed. [ 425.101053][ T8833] overlayfs: failed to clone upperpath [ 425.101409][ T8832] ubi31: attaching mtd0 [ 425.105128][ T8832] ubi31 error: ubi_attach_mtd_dev: bad VID header (2) or data offsets (66) [ 425.182575][ T8841] netlink: 44 bytes leftover after parsing attributes in process `syz.2.824'. [ 425.187217][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.824'. [ 425.190083][ T8841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.824'. [ 425.312358][ T40] audit: type=1400 audit(681.224:618): avc: denied { execute } for pid=8847 comm="syz.0.827" path="/sys/kernel/debug/binder/failed_transaction_log" dev="debugfs" ino=5694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 425.479491][ T8850] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 425.519129][ T8854] Process accounting resumed [ 425.566066][ T40] audit: type=1400 audit(681.484:619): avc: denied { append } for pid=8859 comm="syz.4.831" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 425.566284][ T8860] gfs2: Unknown parameter '/dev/bus/usb/00#/00#' [ 425.577988][ T40] audit: type=1400 audit(681.494:620): avc: denied { append } for pid=8859 comm="syz.4.831" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 425.638265][ T8872] 9p: Unknown access argument 18446744073709551615: -34 [ 425.824705][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.836'. [ 425.830620][ T40] audit: type=1400 audit(681.744:621): avc: denied { mount } for pid=8874 comm="syz.2.836" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 425.911946][ T40] audit: type=1400 audit(681.824:622): avc: denied { getopt } for pid=8876 comm="syz.3.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 425.916402][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'. [ 425.939641][ T8884] netlink: 'syz.2.840': attribute type 1 has an invalid length. [ 426.017318][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.839'. [ 426.080500][ T8891] bridge0: entered promiscuous mode [ 426.082245][ T8891] macsec1: entered promiscuous mode [ 426.084304][ T8891] bridge0: port 2(macsec1) entered blocking state [ 426.086604][ T8891] bridge0: port 2(macsec1) entered disabled state [ 426.088707][ T8891] macsec1: entered allmulticast mode [ 426.090352][ T8891] bridge0: entered allmulticast mode [ 426.093022][ T8891] macsec1: left allmulticast mode [ 426.094618][ T8891] bridge0: left allmulticast mode [ 426.099479][ T8891] bridge0: left promiscuous mode [ 426.217413][ T8894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.843'. [ 426.230070][ T8896] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 426.523743][ T8920] netlink: 10 bytes leftover after parsing attributes in process `syz.2.849'. [ 426.531026][ T8922] netlink: 'syz.0.850': attribute type 5 has an invalid length. [ 426.690662][ T8877] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 426.692774][ T8877] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 426.694773][ T8877] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 426.699058][ T8877] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 426.701084][ T8877] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 426.703766][ T8877] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 426.825608][ T8955] 9pnet: Could not find request transport: virtim [ 426.828466][ T8967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 426.831405][ T8967] IPv6: NLM_F_CREATE should be set when creating new route [ 426.870801][ T8975] xt_CT: You must specify a L4 protocol and not use inversions on it [ 426.884046][ T8978] overlayfs: failed to resolve './file0': -2 [ 427.051638][ T9001] tipc: Started in network mode [ 427.053190][ T9001] tipc: Node identity 061f8145, cluster identity 4711 [ 427.057044][ T9001] tipc: Enabled bearer , priority 0 [ 427.103757][ T9008] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 427.422240][ T9044] overlayfs: unescaped trailing colons in lowerdir mount option. [ 427.463810][ T9046] kernel profiling enabled (shift: 63) [ 427.466036][ T9046] profiling shift: 63 too large [ 427.470190][ T9046] netlink: 'syz.3.889': attribute type 10 has an invalid length. [ 427.476498][ T9046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.479820][ T9046] team0: Port device bond0 added [ 427.655178][ T2303] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 427.815086][ T2303] usb 9-1: Using ep0 maxpacket: 8 [ 427.818199][ T2303] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 427.821401][ T2303] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 427.824490][ T2303] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 427.827521][ T2303] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.831722][ T2303] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 427.835280][ T2303] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.865148][ T6868] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 427.925126][ T6000] Bluetooth: hci0: command 0x0406 tx timeout [ 428.026635][ T6868] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 428.031425][ T6868] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 428.034216][ T6868] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.037113][ T6868] usb 8-1: Product: syz [ 428.038558][ T6868] usb 8-1: Manufacturer: syz [ 428.040174][ T6868] usb 8-1: SerialNumber: syz [ 428.042756][ T2303] usb 9-1: GET_CAPABILITIES returned 0 [ 428.044524][ T2303] usbtmc 9-1:16.0: can't read capabilities [ 428.047343][ T6868] usb 8-1: config 0 descriptor?? [ 428.056156][ T6026] tipc: Node number set to 102728005 [ 428.243848][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 428.251642][ T9062] SELinux: Context system_u:object_r:printer_device_t:s0 is not valid (left unmapped). [ 428.256734][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 428.256743][ T40] audit: type=1400 audit(684.174:633): avc: denied { relabelto } for pid=9057 comm="syz.3.892" name="275" dev="tmpfs" ino=1447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:printer_device_t:s0" [ 428.268738][ T40] audit: type=1400 audit(684.174:634): avc: denied { associate } for pid=9057 comm="syz.3.892" name="275" dev="tmpfs" ino=1447 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:printer_device_t:s0" [ 428.358104][ T6256] usb 9-1: USB disconnect, device number 4 [ 428.379801][ T9070] netlink: 'syz.2.895': attribute type 1 has an invalid length. [ 428.393883][ T9070] 8021q: adding VLAN 0 to HW filter on device bond5 [ 428.406318][ T9070] bond5: (slave geneve2): making interface the new active one [ 428.411350][ T9070] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 428.456221][ T2303] usb 8-1: USB disconnect, device number 4 [ 428.492782][ T9073] geneve3: entered promiscuous mode [ 428.494498][ T9073] geneve3: entered allmulticast mode [ 428.681546][ T40] audit: type=1400 audit(684.594:635): avc: denied { create } for pid=9075 comm="syz.2.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 428.690392][ T40] audit: type=1400 audit(684.594:636): avc: denied { setopt } for pid=9075 comm="syz.2.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 428.698675][ T40] audit: type=1400 audit(684.594:637): avc: denied { write } for pid=9075 comm="syz.2.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 428.716239][ T6000] Bluetooth: hci2: command 0x0c1a tx timeout [ 428.725153][ T6000] Bluetooth: hci3: command 0x0c1a tx timeout [ 428.735669][ T40] audit: type=1400 audit(684.654:638): avc: denied { ioctl } for pid=9075 comm="syz.2.897" path="socket:[33978]" dev="sockfs" ino=33978 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 428.903728][ T9084] pimreg: entered allmulticast mode [ 428.974417][ T9095] overlay: Bad value for 'workdir' [ 429.045125][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 429.118407][ T9101] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1677391066 (6709564264 ns) > initial count (4324526900 ns). Using initial count to start timer. [ 429.157376][ T40] audit: type=1400 audit(685.074:639): avc: denied { getopt } for pid=9110 comm="syz.2.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 429.165379][ T40] audit: type=1400 audit(685.074:640): avc: denied { setopt } for pid=9110 comm="syz.2.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 429.239542][ T40] audit: type=1400 audit(685.154:641): avc: denied { view } for pid=9119 comm="syz.3.911" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 429.275140][ T6000] Bluetooth: hci4: command 0x1003 tx timeout [ 429.275193][ T6007] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 429.320514][ T9126] binder: BINDER_SET_CONTEXT_MGR bad uid 3327 != 0 [ 429.323693][ T9126] binder: 9124:9126 ioctl 4018620d 200000000200 returned -1 [ 429.371514][ T40] audit: type=1400 audit(685.284:642): avc: denied { shutdown } for pid=9133 comm="syz.3.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 429.545574][ T9152] syzkaller1: entered promiscuous mode [ 429.547535][ T9152] syzkaller1: entered allmulticast mode [ 429.889107][ T9157] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 430.101139][ T9168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24427 sclass=netlink_route_socket pid=9168 comm=syz.0.924 [ 430.253339][ T9180] syz_tun: refused to change device tx_queue_len [ 430.420124][ T9197] __nla_validate_parse: 13 callbacks suppressed [ 430.420139][ T9197] netlink: 52 bytes leftover after parsing attributes in process `syz.4.936'. [ 430.430489][ T9200] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 430.523331][ T9204] overlayfs: maximum fs stacking depth exceeded [ 430.580812][ T9214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.941'. [ 430.584769][ T9213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.941'. [ 430.775421][ T5996] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 430.795328][ T6007] Bluetooth: hci3: command 0x0c1a tx timeout [ 430.795590][ T6000] Bluetooth: hci2: command 0x0c1a tx timeout [ 430.886255][ T9233] macvlan0: entered promiscuous mode [ 430.888777][ T9233] macvlan0: entered allmulticast mode [ 430.891539][ T9233] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 430.937227][ T5996] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 430.940720][ T5996] usb 9-1: config 0 has no interface number 0 [ 430.943514][ T5996] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 430.948465][ T5996] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 430.952928][ T5996] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 430.958588][ T5996] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 430.963427][ T5996] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 430.969062][ T5996] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 430.974397][ T5996] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 430.979382][ T5996] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.989981][ T5996] usb 9-1: config 0 descriptor?? [ 430.993710][ T9211] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 430.999843][ T9211] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 431.012628][ T5996] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 431.028863][ T9241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.946'. [ 431.064321][ T9246] tipc: Enabling of bearer rejected, failed to enable media [ 431.273383][ T5996] usb 9-1: USB disconnect, device number 5 [ 431.278524][ T5996] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 431.688879][ T9274] netlink: 32 bytes leftover after parsing attributes in process `syz.3.955'. [ 431.737443][ T9274] netlink: 37 bytes leftover after parsing attributes in process `syz.3.955'. [ 431.741103][ T9274] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 431.744203][ T9274] IPv6: NLM_F_CREATE should be set when creating new route [ 431.747010][ T9274] IPv6: NLM_F_CREATE should be set when creating new route [ 431.860883][ T9287] netlink: 112 bytes leftover after parsing attributes in process `syz.0.959'. [ 431.869523][ T9287] netlink: 'syz.0.959': attribute type 2 has an invalid length. [ 431.968488][ T9296] ip6erspan0: entered promiscuous mode [ 432.007522][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.963'. [ 432.715263][ T9331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.975'. [ 432.763122][ T5998] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 432.768005][ T5998] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 432.772657][ T5998] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 432.778258][ T5998] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 432.781953][ T5998] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 432.809107][ T9345] xfrm0 speed is unknown, defaulting to 1000 [ 432.834692][ T9344] kvm_intel: kvm [9343]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x68ce [ 432.847346][ T9344] kvm: kvm [9343]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x103a [ 432.859838][ T9344] kvm: kvm [9343]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x103e [ 432.876192][ T9344] kvm: kvm [9343]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0x2127 [ 432.885557][ T6007] Bluetooth: hci3: command 0x0c1a tx timeout [ 432.911976][ T9344] kvm: kvm [9343]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x8f8f [ 432.921482][ T9344] kvm_intel: kvm [9343]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0xbb05 [ 432.942568][ T9345] chnl_net:caif_netlink_parms(): no params data found [ 433.041729][ T9345] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.044942][ T9345] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.049030][ T9345] bridge_slave_0: entered allmulticast mode [ 433.053179][ T9345] bridge_slave_0: entered promiscuous mode [ 433.058483][ T9345] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.059572][ T9370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.982'. [ 433.061491][ T9345] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.067554][ T9345] bridge_slave_1: entered allmulticast mode [ 433.071416][ T9345] bridge_slave_1: entered promiscuous mode [ 433.116088][ T9345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.120686][ T9345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.156194][ T9345] team0: Port device team_slave_0 added [ 433.159577][ T9345] team0: Port device team_slave_1 added [ 433.195649][ T9345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.198933][ T9345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.209684][ T9345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.215796][ T9345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.218536][ T9345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.228715][ T9345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.277723][ T9345] hsr_slave_0: entered promiscuous mode [ 433.280880][ T9345] hsr_slave_1: entered promiscuous mode [ 433.283672][ T9345] debugfs: 'hsr0' already exists in 'hsr' [ 433.288369][ T9345] Cannot create hsr debugfs directory [ 433.608605][ T9345] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 433.620870][ T9345] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 433.627609][ T9345] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 433.634184][ T9345] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 433.674268][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 433.674285][ T40] audit: type=1400 audit(689.584:651): avc: denied { append } for pid=9387 comm="syz.3.985" name="video6" dev="devtmpfs" ino=963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 433.687226][ T40] audit: type=1400 audit(689.594:652): avc: denied { accept } for pid=9387 comm="syz.3.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 433.713382][ T9392] program syz.3.987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 433.713548][ T9345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.716202][ T40] audit: type=1400 audit(689.624:653): avc: denied { map } for pid=9390 comm="syz.4.988" path="/dev/userio" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 433.716288][ T40] audit: type=1400 audit(689.624:654): avc: denied { execute } for pid=9390 comm="syz.4.988" path="/dev/userio" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 433.756516][ T9345] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.765471][ T7969] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.768593][ T7969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.781206][ T7969] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.784141][ T7969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.950908][ T9345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.125835][ T9345] veth0_vlan: entered promiscuous mode [ 434.133320][ T9345] veth1_vlan: entered promiscuous mode [ 434.161779][ T9345] veth0_macvtap: entered promiscuous mode [ 434.167296][ T9345] veth1_macvtap: entered promiscuous mode [ 434.183014][ T9345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.191908][ T9345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.202834][ T7969] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.207641][ T7969] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.213042][ T7969] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.217305][ T7969] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.242306][ T40] audit: type=1400 audit(690.154:655): avc: denied { mounton } for pid=9438 comm="syz.4.997" path="/89/file1" dev="autofs" ino=36895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 434.258484][ T9440] geneve2: entered promiscuous mode [ 434.260730][ T9440] geneve2: entered allmulticast mode [ 434.264679][ T40] audit: type=1400 audit(690.174:656): avc: denied { getopt } for pid=9438 comm="syz.4.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 434.268006][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.268018][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.273773][ T40] audit: type=1400 audit(690.174:657): avc: denied { getopt } for pid=9438 comm="syz.4.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 434.283673][ T6071] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 434.287672][ T6071] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 434.297451][ T6071] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 434.301638][ T6071] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 434.324242][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.327128][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.352375][ T40] audit: type=1400 audit(690.264:658): avc: denied { map } for pid=9446 comm="syz.4.999" path="socket:[36202]" dev="sockfs" ino=36202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 434.728744][ T9486] bridge1: entered promiscuous mode [ 434.784887][ T40] audit: type=1400 audit(690.694:659): avc: denied { ioctl } for pid=9487 comm="syz.4.1009" path="/dev/usbmon7" dev="devtmpfs" ino=759 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 434.805504][ T6000] Bluetooth: hci2: command tx timeout [ 434.955111][ T6000] Bluetooth: hci3: command 0x0c1a tx timeout [ 434.966698][ T75] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.970226][ T75] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.032778][ T75] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.036847][ T75] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.135379][ T75] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.139418][ T75] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.212373][ T75] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.217198][ T75] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.268605][ T9509] netlink: 'syz.4.1018': attribute type 1 has an invalid length. [ 435.569011][ T9521] __nla_validate_parse: 11 callbacks suppressed [ 435.569030][ T9521] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1021'. [ 435.619906][ T9524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=9524 comm=syz.3.1021 [ 435.694535][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.703769][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.706271][ T9533] 9pnet_fd: Insufficient options for proto=fd [ 435.709085][ T9535] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1025'. [ 435.710286][ T75] bond0 (unregistering): Released all slaves [ 435.726474][ T75] bond1 (unregistering): Released all slaves [ 435.766212][ T9534] veth0: entered promiscuous mode [ 435.844366][ T9535] veth0 (unregistering): left promiscuous mode [ 435.870609][ T40] audit: type=1400 audit(691.784:660): avc: denied { create } for pid=9540 comm="syz.3.1027" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 435.922530][ T75] tipc: Disabling bearer [ 435.927801][ T75] tipc: Left network mode [ 435.955093][ T9543] Failed to get privilege flags for destination (handle=0x2:0xffffffff) [ 435.971581][ T9543] team0: Device gtp1 is of different type [ 436.192256][ T75] hsr_slave_0: left promiscuous mode [ 436.199962][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.203156][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.209746][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.212638][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.257406][ T75] veth1_macvtap: left promiscuous mode [ 436.259692][ T75] veth0_macvtap: left promiscuous mode [ 436.830276][ T75] team0 (unregistering): Port device team_slave_1 removed [ 436.879651][ T75] team0 (unregistering): Port device team_slave_0 removed [ 436.885504][ T6000] Bluetooth: hci2: command tx timeout [ 437.196147][ T6007] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 437.435450][ T9567] tipc: Started in network mode [ 437.437089][ T9567] tipc: Node identity 4, cluster identity 4711 [ 437.439093][ T9567] tipc: Node number set to 4 [ 437.519103][ T9591] overlayfs: workdir and upperdir must be separate subtrees [ 437.563076][ T9599] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 437.573498][ T9599] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 437.789614][ T9627] netdevsim netdevsim2 ªªªªªª: renamed from netdevsim0 (while UP) [ 437.901426][ T9645] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1051'. [ 438.020515][ T9668] netlink: 'syz.4.1055': attribute type 12 has an invalid length. [ 438.031867][ T9668] fuse: Bad value for 'user_id' [ 438.033962][ T9668] fuse: Bad value for 'user_id' [ 438.088792][ T9677] xfrm0 speed is unknown, defaulting to 1000 [ 438.134643][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1058'. [ 438.138641][ T9677] netlink: 'syz.2.1057': attribute type 4 has an invalid length. [ 438.141133][ T9677] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1057'. [ 438.244071][ T9690] [U] ùÿ [ 438.291008][ T9698] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1063'. [ 438.542440][ T9713] xfrm0 speed is unknown, defaulting to 1000 [ 438.684115][ T9736] bridge1: entered promiscuous mode [ 438.965372][ T6007] Bluetooth: hci2: command 0x040f tx timeout [ 439.010244][ T9757] Error: Driver 'c6xdigio' is already registered, aborting... [ 439.055294][ T1026] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 439.078109][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 439.078121][ T40] audit: type=1400 audit(694.994:671): avc: denied { watch watch_with_perm } for pid=9761 comm="syz.2.1082" path="/307/bus" dev="tmpfs" ino=1641 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 439.177738][ T9771] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1084'. [ 439.182909][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'. [ 439.225143][ T1026] usb 10-1: Using ep0 maxpacket: 32 [ 439.228955][ T1026] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 439.232588][ T1026] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.239175][ T1026] usb 10-1: config 0 descriptor?? [ 439.248946][ T1026] as10x_usb: device has been detected [ 439.251991][ T1026] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 439.299387][ T1026] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 439.329315][ T1026] as10x_usb: error during firmware upload part1 [ 439.332447][ T1026] Registered device nBox DVB-T Dongle [ 439.424118][ T9783] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1088'. [ 439.430907][ T9783] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1088'. [ 439.455172][ T40] audit: type=1400 audit(695.364:672): avc: denied { mount } for pid=9748 comm="syz.5.1079" name="/" dev="pstore" ino=4987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 439.601944][ T9750] hsr_slave_1 (unregistering): left promiscuous mode [ 439.653171][ T40] audit: type=1400 audit(695.564:673): avc: denied { append } for pid=9795 comm="syz.3.1091" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 439.688019][ T6868] usb 10-1: USB disconnect, device number 2 [ 439.704230][ T6868] Unregistered device nBox DVB-T Dongle [ 439.723759][ T6868] as10x_usb: device has been disconnected [ 439.898324][ T9820] sctp: [Deprecated]: syz.3.1100 (pid 9820) Use of int in max_burst socket option. [ 439.898324][ T9820] Use struct sctp_assoc_value instead [ 439.917817][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.131764][ T40] audit: type=1400 audit(696.044:674): avc: denied { bind } for pid=9845 comm="syz.2.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 440.145098][ T5996] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 440.263630][ T6007] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 440.278358][ T9853] xfrm0 speed is unknown, defaulting to 1000 [ 440.279246][ T6083] IPVS: starting estimator thread 0... [ 440.282760][ T40] audit: type=1400 audit(696.194:675): avc: denied { create } for pid=9854 comm="syz.2.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 440.290729][ T40] audit: type=1400 audit(696.204:676): avc: denied { write } for pid=9854 comm="syz.2.1113" path="socket:[38506]" dev="sockfs" ino=38506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 440.306019][ T5996] usb 8-1: config 1 interface 0 altsetting 245 bulk endpoint 0x82 has invalid maxpacket 16 [ 440.309038][ T5996] usb 8-1: config 1 interface 0 altsetting 245 bulk endpoint 0x3 has invalid maxpacket 8 [ 440.312119][ T5996] usb 8-1: config 1 interface 0 has no altsetting 0 [ 440.316222][ T5996] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 440.319085][ T5996] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.322245][ T5996] usb 8-1: Product: syz [ 440.323606][ T5996] usb 8-1: Manufacturer: syz [ 440.325170][ T5996] usb 8-1: SerialNumber: syz [ 440.328973][ T9820] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 440.331247][ T9820] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 440.375165][ T9858] IPVS: using max 44 ests per chain, 105600 per kthread [ 440.540346][ T5996] usb 8-1: bad CDC descriptors [ 440.547110][ T5996] usb 8-1: USB disconnect, device number 5 [ 440.713644][ T9883] __nla_validate_parse: 32 callbacks suppressed [ 440.713672][ T9883] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1119'. [ 440.755174][ T6083] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 440.835101][ T1026] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 440.895294][ T6083] usb 10-1: device descriptor read/64, error -71 [ 440.995143][ T1026] usb 9-1: Using ep0 maxpacket: 32 [ 440.999490][ T1026] usb 9-1: config 0 has an invalid interface number: 130 but max is 0 [ 441.002882][ T1026] usb 9-1: config 0 has no interface number 0 [ 441.005779][ T1026] usb 9-1: config 0 interface 130 has no altsetting 0 [ 441.010687][ T1026] usb 9-1: New USB device found, idVendor=1bc7, idProduct=1201, bcdDevice=69.37 [ 441.014300][ T1026] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.018130][ T1026] usb 9-1: Product: syz [ 441.019928][ T1026] usb 9-1: Manufacturer: syz [ 441.021883][ T1026] usb 9-1: SerialNumber: syz [ 441.025987][ T1026] usb 9-1: config 0 descriptor?? [ 441.035228][ T6007] Bluetooth: hci2: command 0x040f tx timeout [ 441.078344][ T40] audit: type=1400 audit(696.994:677): avc: denied { read } for pid=9899 comm="syz.2.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 441.145136][ T6083] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 441.235801][ T1026] option 9-1:0.130: GSM modem (1-port) converter detected [ 441.241553][ T1026] usb 9-1: USB disconnect, device number 6 [ 441.244382][ T1026] option 9-1:0.130: device disconnected [ 441.275637][ T6083] usb 10-1: device descriptor read/64, error -71 [ 441.385439][ T6083] usb usb10-port1: attempt power cycle [ 441.428624][ T9932] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1132'. [ 441.504543][ T9937] veth1_to_bond: entered allmulticast mode [ 441.507789][ T9936] veth1_to_bond: left allmulticast mode [ 441.540946][ T40] audit: type=1400 audit(697.454:678): avc: denied { node_bind } for pid=9938 comm="syz.2.1135" saddr=fe88::103 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 441.541309][ T6000] Bluetooth: hci0: unexpected event for opcode 0x0803 [ 441.555622][ T9939] xfrm0 speed is unknown, defaulting to 1000 [ 441.735388][ T6083] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 441.765867][ T6083] usb 10-1: device descriptor read/8, error -71 [ 441.801916][ T9949] cgroup: fork rejected by pids controller in /syz4 [ 442.027647][ T6083] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 442.055248][ T6083] usb 10-1: device descriptor read/8, error -71 [ 442.165489][ T6083] usb usb10-port1: unable to enumerate USB device [ 442.182654][T11790] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 442.224715][T12031] bond6: peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 442.228598][T12031] 8021q: adding VLAN 0 to HW filter on device bond6 [ 442.349505][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1141'. [ 442.550685][T13720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1145'. [ 442.559672][T13720] netlink: 'syz.4.1145': attribute type 1 has an invalid length. [ 442.569436][T13720] nbd: error processing sock list [ 442.582029][T13720] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 442.945336][ T6261] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 443.064746][T13753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1157'. [ 443.108603][ T6261] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 443.111528][ T6261] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.113926][ T6261] usb 9-1: Product: syz [ 443.115854][ T6261] usb 9-1: Manufacturer: syz [ 443.117396][ T6261] usb 9-1: SerialNumber: syz [ 443.126916][ T6000] Bluetooth: hci2: command 0x040f tx timeout [ 443.127107][ T6261] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 443.153510][ T6261] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 443.195274][ T6007] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 443.246548][ T40] audit: type=1400 audit(699.164:679): avc: denied { read append open } for pid=13756 comm="syz.3.1158" path="/324/file0/net_prio.prioidx" dev="9p" ino=71827971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 443.335447][ T40] audit: type=1400 audit(699.254:680): avc: denied { create } for pid=13756 comm="syz.3.1158" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 443.446748][ T29] usb 9-1: USB disconnect, device number 7 [ 443.462389][T13770] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1161'. [ 443.861624][T13802] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 444.086198][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 444.086214][ T40] audit: type=1400 audit(700.004:684): avc: denied { getopt } for pid=13828 comm="syz.5.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 444.130959][T13833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1176'. [ 444.235293][ T6261] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 444.245194][ T6261] ath9k_htc: Failed to initialize the device [ 444.250912][ T29] usb 9-1: ath9k_htc: USB layer deinitialized [ 444.415235][ T2303] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 444.566633][ T2303] usb 10-1: Using ep0 maxpacket: 16 [ 444.571544][ T2303] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 444.574924][ T2303] usb 10-1: config 0 has no interface number 0 [ 444.580965][ T2303] usb 10-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 444.584888][ T2303] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.591332][ T2303] usb 10-1: Product: syz [ 444.594404][ T2303] usb 10-1: Manufacturer: syz [ 444.598130][ T2303] usb 10-1: SerialNumber: syz [ 444.598433][T13858] bond1: (slave bridge0): Releasing active interface [ 444.607137][ T2303] usb 10-1: config 0 descriptor?? [ 444.611581][ T2303] hub 10-1:0.132: bad descriptor, ignoring hub [ 444.614059][ T2303] hub 10-1:0.132: probe with driver hub failed with error -5 [ 444.620571][ T2303] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.132/input/input13 [ 444.665424][ T7612] udevd[7612]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 444.716963][T13864] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1189'. [ 444.741312][ T40] audit: type=1400 audit(700.654:685): avc: denied { create } for pid=13865 comm="syz.2.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 445.149449][T13894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1199'. [ 445.313252][T13900] ALSA: mixer_oss: invalid index 100000 [ 445.705931][T13933] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 445.749591][T13938] ip6tnl1: entered promiscuous mode [ 445.751656][T13938] ip6tnl1: entered allmulticast mode [ 445.824253][ T40] audit: type=1400 audit(701.734:686): avc: denied { setopt } for pid=13941 comm="syz.4.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 445.980110][T13952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1216'. [ 446.033886][T13895] ALSA: mixer_oss: invalid OSS volume ';Ê;Ê' [ 446.183572][T13979] QAT: Stopping all acceleration devices. [ 446.194038][ T40] audit: type=1400 audit(702.104:687): avc: denied { write } for pid=13973 comm="syz.3.1221" lport=33041 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 446.194924][T13974] sctp: [Deprecated]: syz.3.1221 (pid 13974) Use of struct sctp_assoc_value in delayed_ack socket option. [ 446.194924][T13974] Use struct sctp_sack_info instead [ 446.276539][T13985] xfrm0 speed is unknown, defaulting to 1000 [ 446.309377][ T40] audit: type=1400 audit(702.224:688): avc: denied { remount } for pid=13983 comm="syz.4.1225" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 446.317726][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.337903][ T40] audit: type=1400 audit(702.254:689): avc: denied { ioctl } for pid=13989 comm="syz.3.1227" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 446.381457][T13994] netlink: 'syz.2.1228': attribute type 1 has an invalid length. [ 446.403740][T13997] fuse: Bad value for 'rootmode' [ 446.411658][T13994] bond7: (slave geneve4): making interface the new active one [ 446.419914][T13994] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 446.424182][ T6064] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 446.427505][ T6064] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 446.430603][ T6064] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 446.449729][T13997] xt_nat: multiple ranges no longer supported [ 446.453218][T13997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1229'. [ 446.554341][T14009] netlink: 'syz.4.1235': attribute type 1 has an invalid length. [ 446.562480][T14009] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1235'. [ 446.590820][T14007] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 446.602236][T14009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'. [ 446.678946][T14016] tipc: Enabling of bearer rejected, failed to enable media [ 446.826356][T14038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'. [ 446.829447][T14038] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1242'. [ 446.861974][ T6007] Bluetooth: hci3: unexpected event for opcode 0x080e [ 446.865790][ T6007] Bluetooth: hci3: unexpected event for opcode 0x080e [ 446.903126][ T40] audit: type=1326 audit(702.814:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14047 comm="syz.4.1246" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f524958eec9 code=0x0 [ 446.976692][T14052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1247'. [ 447.033436][ T40] audit: type=1800 audit(702.944:691): pid=14059 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1249" name="bus" dev="overlay" ino=171 res=0 errno=0 [ 447.040356][T14063] IPVS: length: 177 != 24 [ 447.070681][T14070] overlayfs: failed to clone upperpath [ 447.184080][T14085] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 447.228515][T14089] ip6t_srh: unknown srh invflags 51E8 [ 447.325624][T14099] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 447.327744][T14099] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 447.330994][T14099] vhci_hcd vhci_hcd.0: Device attached [ 447.336060][T14099] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 447.338552][T14099] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 447.341186][T14099] vhci_hcd vhci_hcd.0: Device attached [ 447.404698][T14102] vhci_hcd: connection closed [ 447.404714][T14100] vhci_hcd: connection closed [ 447.405112][ T1149] vhci_hcd: stop threads [ 447.409624][ T1149] vhci_hcd: release socket [ 447.411003][ T1149] vhci_hcd: disconnect device [ 447.412665][ T1149] vhci_hcd: stop threads [ 447.414001][ T1149] vhci_hcd: release socket [ 447.415503][ T1149] vhci_hcd: disconnect device [ 447.480787][ T1149] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.488556][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1264'. [ 447.568195][ T1149] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.682628][ T1149] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.763717][ T1149] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.812786][ T6000] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 447.818797][ T6000] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 447.822046][ T6000] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 447.826837][ T6000] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 447.829778][ T6000] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 447.863432][T14117] xfrm0 speed is unknown, defaulting to 1000 [ 447.926059][T14121] overlayfs: failed to clone lowerpath [ 447.965459][ T40] audit: type=1326 audit(703.874:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14125 comm="syz.2.1274" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f542c18eec9 code=0x0 [ 447.993588][ T1149] bridge_slave_1: left allmulticast mode [ 447.997071][ T1149] bridge_slave_1: left promiscuous mode [ 448.000175][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.006135][ T1149] bridge_slave_0: left allmulticast mode [ 448.007956][ T1149] bridge_slave_0: left promiscuous mode [ 448.009738][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.096559][T14138] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 448.245275][ T1026] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 448.319324][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.323743][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.327781][ T1149] bond0 (unregistering): Released all slaves [ 448.358849][T14117] chnl_net:caif_netlink_parms(): no params data found [ 448.415078][ T1026] usb 9-1: Using ep0 maxpacket: 8 [ 448.418195][ T1026] usb 9-1: config 2 interface 0 has no altsetting 0 [ 448.422111][ T1026] usb 9-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 448.425087][ T1026] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.427579][ T1026] usb 9-1: Product: syz [ 448.428979][ T1026] usb 9-1: Manufacturer: syz [ 448.430506][ T1026] usb 9-1: SerialNumber: syz [ 448.480046][T14117] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.482512][T14117] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.485406][T14117] bridge_slave_0: entered allmulticast mode [ 448.488147][T14117] bridge_slave_0: entered promiscuous mode [ 448.492747][T14117] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.495863][T14117] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.498644][T14117] bridge_slave_1: entered allmulticast mode [ 448.501312][T14117] bridge_slave_1: entered promiscuous mode [ 448.529198][ T6083] usb 10-1: USB disconnect, device number 7 [ 448.549879][T14117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.570046][T14117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.636164][ T40] audit: type=1400 audit(704.554:693): avc: denied { mounton } for pid=14128 comm="syz.4.1275" path="/159/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 448.637107][T14153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.641572][T14117] team0: Port device team_slave_0 added [ 448.646742][T14117] team0: Port device team_slave_1 added [ 448.650094][T14153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.669301][ T1026] usb 9-1: USB disconnect, device number 8 [ 448.724070][ T1149] hsr_slave_0: left promiscuous mode [ 448.729285][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.732394][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.736816][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.740044][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.759683][ T1149] veth1_macvtap: left promiscuous mode [ 448.761458][ T1149] veth0_macvtap: left promiscuous mode [ 448.763290][ T1149] veth1_vlan: left promiscuous mode [ 448.764961][ T1149] veth0_vlan: left promiscuous mode [ 448.885403][T14162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1278'. [ 448.939225][T14163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1278'. [ 449.343638][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 449.420971][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 449.837945][ T6007] Bluetooth: hci2: command tx timeout [ 449.942646][T14117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.944879][T14117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.954113][T14117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.960218][T14117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.963077][T14117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.973531][T14117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.067762][T14117] hsr_slave_0: entered promiscuous mode [ 450.070495][T14117] hsr_slave_1: entered promiscuous mode [ 450.072755][T14117] debugfs: 'hsr0' already exists in 'hsr' [ 450.074559][T14117] Cannot create hsr debugfs directory [ 450.220450][ T40] audit: type=1400 audit(706.134:694): avc: denied { setopt } for pid=14204 comm="syz.3.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 450.296834][T14117] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 450.297998][ T1149] IPVS: stop unused estimator thread 0... [ 450.303368][T14117] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 450.309294][T14117] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 450.322686][T14117] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 450.388925][T14117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.398657][T14117] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.408488][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.410680][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.421438][ T6064] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.423787][ T6064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.434357][T14238] xfrm0 speed is unknown, defaulting to 1000 [ 450.639447][T14117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.825560][T14117] veth0_vlan: entered promiscuous mode [ 450.831020][T14117] veth1_vlan: entered promiscuous mode [ 450.844360][T14117] veth0_macvtap: entered promiscuous mode [ 450.851207][ T40] audit: type=1400 audit(706.764:695): avc: denied { allowed } for pid=14282 comm="syz.2.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 450.861965][T14117] veth1_macvtap: entered promiscuous mode [ 450.868311][ T40] audit: type=1400 audit(706.784:696): avc: denied { create } for pid=14284 comm="syz.4.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 450.874633][T14117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.876169][ T40] audit: type=1400 audit(706.784:697): avc: denied { bind } for pid=14284 comm="syz.4.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 450.892511][T14117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.902892][ T75] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.906424][ T75] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.914551][ T75] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.928933][ T75] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.963868][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.966415][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.988020][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.990504][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.039295][ T40] audit: type=1400 audit(706.954:698): avc: denied { read } for pid=14297 comm="syz.4.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 451.106295][ T40] audit: type=1400 audit(707.024:699): avc: denied { bind } for pid=14306 comm="syz.6.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 451.229914][ T6007] Bluetooth: hci2: Invalid handle: 0x7e53 > 0x0eff [ 451.369856][T14327] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 451.372568][T14327] overlayfs: missing 'lowerdir' [ 451.530387][T14348] __nla_validate_parse: 1 callbacks suppressed [ 451.530399][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1309'. [ 451.539862][T14348] geneve5: entered promiscuous mode [ 451.544350][T14348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1309'. [ 451.925166][ T6000] Bluetooth: hci2: command tx timeout [ 452.234386][ T40] audit: type=1400 audit(708.144:700): avc: denied { write } for pid=14401 comm="syz.6.1314" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 452.319404][T14408] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.319554][ T40] audit: type=1400 audit(708.234:701): avc: denied { write } for pid=14407 comm="syz.3.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 452.538497][ T40] audit: type=1400 audit(708.454:702): avc: denied { read } for pid=14419 comm="syz.3.1320" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 452.546020][ T40] audit: type=1400 audit(708.454:703): avc: denied { open } for pid=14419 comm="syz.3.1320" path="/365/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 452.551829][T14425] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 452.557230][T14425] block device autoloading is deprecated and will be removed. [ 452.605135][T14430] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1323'. [ 453.004676][ T6256] libceph: connect (1)[c::]:6789 error -101 [ 453.007312][ T6256] libceph: mon0 (1)[c::]:6789 connect error [ 453.051627][ T1026] libceph: connect (1)[c::]:6789 error -101 [ 453.053948][ T1026] libceph: mon0 (1)[c::]:6789 connect error [ 453.265709][ T6083] libceph: connect (1)[c::]:6789 error -101 [ 453.267769][ T6083] libceph: mon0 (1)[c::]:6789 connect error [ 453.315470][ T1026] libceph: connect (1)[c::]:6789 error -101 [ 453.317653][ T1026] libceph: mon0 (1)[c::]:6789 connect error [ 453.340755][T14424] overlayfs: statfs failed on './file0' [ 453.433633][T14480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1336'. [ 453.718836][T14504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1343'. [ 453.785342][ T6083] libceph: connect (1)[c::]:6789 error -101 [ 453.787408][ T6083] libceph: mon0 (1)[c::]:6789 connect error [ 453.825382][ T1026] libceph: connect (1)[c::]:6789 error -101 [ 453.826026][T14458] ceph: No mds server is up or the cluster is laggy [ 453.826586][T14463] ceph: No mds server is up or the cluster is laggy [ 453.827517][ T1026] libceph: mon0 (1)[c::]:6789 connect error [ 453.888026][T14508] overlay: Unknown parameter 'subj_user' [ 453.914394][T14508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1345'. [ 454.053426][T14517] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 454.135288][ T1026] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 454.285118][ T1026] usb 9-1: Using ep0 maxpacket: 8 [ 454.289122][ T1026] usb 9-1: config 2 interface 0 has no altsetting 0 [ 454.296917][ T1026] usb 9-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 454.300307][ T1026] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.303531][ T1026] usb 9-1: Product: syz [ 454.305452][ T1026] usb 9-1: Manufacturer: syz [ 454.307428][ T1026] usb 9-1: SerialNumber: syz [ 454.539005][ T1026] usb 9-1: USB disconnect, device number 9 [ 454.584698][T14524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1351'. [ 454.845288][T14545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1358'. [ 454.998218][T14552] binder_alloc: 14551: pid 14551 spamming oneway? 1 buffers allocated for a total size of 4096 [ 455.260741][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 455.260757][ T40] audit: type=1400 audit(711.239:711): avc: denied { getopt } for pid=14555 comm="syz.3.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 455.558108][ T40] audit: type=1400 audit(711.539:712): avc: denied { name_bind } for pid=14579 comm="syz.2.1365" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 455.666505][ T40] audit: type=1400 audit(711.649:713): avc: denied { setopt } for pid=14586 comm="syz.4.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 455.718440][ T40] audit: type=1400 audit(711.699:714): avc: denied { ioctl } for pid=14596 comm="syz.3.1376" path="socket:[40717]" dev="sockfs" ino=40717 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 455.727493][ T40] audit: type=1400 audit(711.699:715): avc: denied { write } for pid=14596 comm="syz.3.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 455.733315][ T40] audit: type=1400 audit(711.699:716): avc: denied { ioctl } for pid=14596 comm="syz.3.1376" path="socket:[41633]" dev="sockfs" ino=41633 ioctlcmd=0x942a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 455.761668][T14604] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1378'. [ 455.797560][ T40] audit: type=1400 audit(711.779:717): avc: denied { accept } for pid=14609 comm="syz.2.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 455.988430][T14623] MINIX-fs: unable to read superblock [ 455.996367][T14625] f2fs: Unknown parameter 'usrquotaÿ' [ 456.202415][T14645] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 456.206157][T14645] bridge6: entered promiscuous mode [ 456.236485][T14647] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 456.245304][ T6000] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 456.250000][ T6000] Bluetooth: hci2: Injecting HCI hardware error event [ 456.254667][ T6007] Bluetooth: hci2: hardware error 0x00 [ 456.494025][T14650] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 456.504856][T14650] CIFS mount error: No usable UNC path provided in device string! [ 456.504856][T14650] [ 456.509554][T14650] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 456.590935][ T6062] hid_parser_main: 15 callbacks suppressed [ 456.590949][ T6062] hid-generic 0000:0001:0005.0005: unknown main item tag 0x0 [ 456.595576][ T6062] hid-generic 0000:0001:0005.0005: unknown main item tag 0x0 [ 456.597933][ T6062] hid-generic 0000:0001:0005.0005: unknown main item tag 0x0 [ 456.600296][ T6062] hid-generic 0000:0001:0005.0005: unknown main item tag 0x0 [ 456.602674][ T6062] hid-generic 0000:0001:0005.0005: unknown main item tag 0x0 [ 456.607757][ T6062] hid-generic 0000:0001:0005.0005: unknown main item tag 0x0 [ 456.610228][ T6062] hid-generic 0000:0001:0005.0005: unknown main item tag 0x0 [ 456.616527][ T6062] hid-generic 0000:0001:0005.0005: unknown main item tag 0x0 [ 456.618938][ T6062] hid-generic 0000:0001:0005.0005: unknown main item tag 0x0 [ 456.622862][ T6062] hid-generic 0000:0001:0005.0005: unknown main item tag 0x0 [ 456.629927][ T6062] hid-generic 0000:0001:0005.0005: hidraw1: HID v0.08 Device [syz0] on syz1 [ 456.661705][T14665] fido_id[14665]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 456.703152][T14668] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1398'. [ 456.732999][T14671] tmpfs: Bad value for 'mpol' [ 456.754144][ T40] audit: type=1400 audit(712.729:718): avc: denied { transfer } for pid=14667 comm="syz.6.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 457.143515][T14699] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1406'. [ 457.302310][T14711] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1411'. [ 457.308832][T14711] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1411'. [ 457.311723][T14711] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1411'. [ 457.460694][T14723] kvm: kvm [14720]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 457.464321][T14723] kvm: kvm [14720]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 457.467102][ T40] audit: type=1400 audit(713.449:719): avc: denied { execute } for pid=14726 comm="syz.6.1414" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 457.490282][T14723] kvm: kvm [14720]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 457.511681][T14723] kvm: kvm [14720]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 457.515094][T14723] kvm: kvm [14720]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 457.531970][T14723] kvm_intel: kvm [14720]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 457.724960][T14752] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 457.766019][T14757] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1422'. [ 457.768422][T14758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1422'. [ 457.805947][T14760] pimreg: left allmulticast mode [ 457.856862][T14767] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1423'. [ 457.904003][T14775] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.1427'. [ 457.976446][T14780] siw: device registration error -23 [ 458.022132][T14776] netlink: del zone limit has 8 unknown bytes [ 458.026174][T14776] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1426'. [ 458.030148][T14776] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.033663][T14776] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.046083][ T40] audit: type=1400 audit(714.029:720): avc: denied { mounton } for pid=14766 comm="syz.6.1426" path="/proc/66/cgroup" dev="proc" ino=43359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 458.315201][ T6007] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 459.070622][T14822] can: request_module (can-proto-3) failed. [ 460.146238][T14869] netlink: 'syz.6.1452': attribute type 1 has an invalid length. [ 460.174544][T14869] bond1: (slave geneve2): making interface the new active one [ 460.178360][T14869] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 460.181350][T14034] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 460.188129][T14034] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 460.191798][T14034] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 460.196565][T14034] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 460.309781][T14885] ip6t_rpfilter: unknown options [ 460.512974][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 460.512991][ T40] audit: type=1400 audit(716.489:723): avc: denied { bind } for pid=14913 comm="syz.6.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 460.560377][T14921] netlink: 'syz.3.1468': attribute type 10 has an invalid length. [ 460.566186][T14921] team0: Device ipvlan1 failed to register rx_handler [ 461.344392][ T40] audit: type=1326 audit(717.319:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14913 comm="syz.6.1467" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2fd8eec9 code=0x7fc00000 [ 461.351286][ T40] audit: type=1326 audit(717.319:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14913 comm="syz.6.1467" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d2fd8eec9 code=0x7fc00000 [ 461.359695][ T40] audit: type=1326 audit(717.319:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14913 comm="syz.6.1467" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2fd8eec9 code=0x7fc00000 [ 461.491955][T14989] overlay: ./file0\ is not a directory [ 461.491967][T14990] overlay: ./file0\ is not a directory [ 461.613483][ T40] audit: type=1400 audit(717.589:727): avc: denied { append } for pid=14995 comm="syz.6.1486" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 461.614715][T14996] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 461.872995][T15002] IPVS: set_ctl: invalid protocol: 255 172.30.0.7:20001 [ 462.049402][T15015] netlink: 'syz.6.1490': attribute type 10 has an invalid length. [ 462.050522][T15014] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 462.052682][T15015] __nla_validate_parse: 4 callbacks suppressed [ 462.052696][T15015] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1490'. [ 462.066142][T15015] batadv0: entered promiscuous mode [ 462.068519][T15015] batadv0: entered allmulticast mode [ 462.071351][T15015] bridge0: port 3(batadv0) entered blocking state [ 462.074173][T15015] bridge0: port 3(batadv0) entered disabled state [ 462.084288][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 462.087245][T15017] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1493'. [ 462.093631][T15017] netlink: 1343 bytes leftover after parsing attributes in process `syz.3.1493'. [ 462.186502][ T7969] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 462.189994][ T7969] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 462.198431][T15028] netlink: 236 bytes leftover after parsing attributes in process `syz.6.1496'. [ 462.213438][T15028] kernel profiling enabled (shift: 63) [ 462.215363][T15028] profiling shift: 63 too large [ 462.252727][ T40] audit: type=1400 audit(718.229:728): avc: denied { map } for pid=15031 comm="syz.6.1497" path="socket:[45197]" dev="sockfs" ino=45197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 462.578716][ T40] audit: type=1326 audit(718.559:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15053 comm="syz.2.1498" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f542c18eec9 code=0x0 [ 462.651656][T15059] xfrm0 speed is unknown, defaulting to 1000 [ 462.717631][T15061] xfrm0 speed is unknown, defaulting to 1000 [ 462.795556][T15059] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1504'. [ 463.023266][ T40] audit: type=1400 audit(718.999:730): avc: denied { setopt } for pid=15079 comm="syz.3.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 463.053990][T15078] xfrm0 speed is unknown, defaulting to 1000 [ 463.109442][T15078] No such timeout policy "syz1" [ 463.138867][T15085] could not allocate digest TFM handle tgr192 [ 463.230210][ T40] audit: type=1400 audit(719.209:731): avc: denied { remount } for pid=15100 comm="syz.3.1513" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 463.237229][T15101] binder: 15100:15101 ioctl c0306201 200000000640 returned -22 [ 463.248638][T15101] overlayfs: failed lookup in lower (newroot/429, name='bus', err=-40): overlapping layers [ 463.392185][T15109] tipc: Started in network mode [ 463.393878][T15109] tipc: Node identity 22918378504b, cluster identity 4711 [ 463.396791][T15109] tipc: Enabled bearer , priority 0 [ 463.400523][T15109] syzkaller0: entered promiscuous mode [ 463.402365][T15109] syzkaller0: entered allmulticast mode [ 463.428157][ T6007] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 464.097936][T15103] tipc: Resetting bearer [ 464.109923][T15103] tipc: Disabling bearer [ 464.362322][T15133] Cannot find set identified by id 2 to match [ 464.401638][T15137] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 464.409692][ T40] audit: type=1400 audit(720.389:732): avc: denied { watch_mount } for pid=15135 comm="syz.3.1526" path="/435" dev="tmpfs" ino=2305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 464.504221][T15135] delete_channel: no stack [ 464.554742][T15143] dlm: Unknown command passed to DLM device : 255 [ 464.554742][T15143] [ 465.374941][T15160] netlink: 'syz.6.1533': attribute type 29 has an invalid length. [ 465.391117][T15160] netlink: 'syz.6.1533': attribute type 29 has an invalid length. [ 465.554745][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.558130][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.576121][T15174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.613385][T15178] netlink: 'syz.6.1538': attribute type 1 has an invalid length. [ 465.740910][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 465.740926][ T40] audit: type=1400 audit(721.719:734): avc: denied { ioctl } for pid=15181 comm="syz.6.1541" path="socket:[43788]" dev="sockfs" ino=43788 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 465.783278][ T40] audit: type=1400 audit(721.759:735): avc: granted { setsecparam } for pid=15184 comm="syz.6.1542" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 465.789823][ T40] audit: type=1400 audit(721.759:736): avc: granted { setsecparam } for pid=15184 comm="syz.6.1542" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 465.797239][ T40] audit: type=1400 audit(721.759:737): avc: granted { setsecparam } for pid=15184 comm="syz.6.1542" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 465.803689][ T40] audit: type=1400 audit(721.759:738): avc: granted { setsecparam } for pid=15184 comm="syz.6.1542" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 465.807505][T15185] netlink: 'syz.3.1543': attribute type 1 has an invalid length. [ 465.829052][T15185] 8021q: adding VLAN 0 to HW filter on device bond5 [ 465.847987][T15185] bond5: (slave geneve3): making interface the new active one [ 465.851881][T15185] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 465.857518][T15185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1543'. [ 466.200935][ T40] audit: type=1400 audit(722.179:739): avc: denied { getopt } for pid=15206 comm="syz.2.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 466.376370][T15229] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 466.426872][T15231] xfrm0 speed is unknown, defaulting to 1000 [ 466.538188][T15236] bridge0: entered promiscuous mode [ 466.539885][T15236] macsec1: entered promiscuous mode [ 466.624552][T15245] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 467.143425][T15271] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1567'. [ 467.219221][T15278] netlink: 'syz.3.1569': attribute type 3 has an invalid length. [ 467.410242][T15294] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1575'. [ 467.690100][T15302] overlayfs: failed to clone upperpath [ 467.747843][ T40] audit: type=1400 audit(723.729:740): avc: denied { setattr } for pid=15304 comm="syz.2.1577" name="ALG" dev="sockfs" ino=45427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 467.812021][T15311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1579'. [ 467.882393][T15316] tipc: Enabling of bearer rejected, failed to enable media [ 468.237531][T15329] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1584'. [ 468.350687][T15340] xfrm0 speed is unknown, defaulting to 1000 [ 468.653563][T15346] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 468.855154][ T40] audit: type=1400 audit(724.829:741): avc: denied { sqpoll } for pid=15348 comm="syz.2.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 469.024381][T15357] xfrm0 speed is unknown, defaulting to 1000 [ 469.394080][T15382] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 470.152766][T15404] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1607'. [ 470.157364][T15404] unsupported nlmsg_type 40 [ 470.266329][T15410] gtp1: entered promiscuous mode [ 470.665227][ T6261] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 470.827048][ T6261] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 470.831089][ T6261] usb 8-1: config 0 interface 0 has no altsetting 0 [ 470.836381][ T6261] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 470.840037][ T6261] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 470.843258][ T6261] usb 8-1: Product: syz [ 470.844975][ T6261] usb 8-1: Manufacturer: syz [ 470.846978][ T6261] usb 8-1: SerialNumber: syz [ 470.851328][ T6261] usb 8-1: config 0 descriptor?? [ 470.859793][ T6261] usb 8-1: selecting invalid altsetting 0 [ 471.058872][ T6256] usb 8-1: USB disconnect, device number 6 [ 471.416658][T15431] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1616'. [ 471.420328][T15431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1616'. [ 471.425883][T15431] overlay: Bad value for 'redirect_dir' [ 471.620050][T15441] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1619'. [ 472.139431][T15449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1621'. [ 472.152384][T15446] bond8: peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 472.159052][T15446] 8021q: adding VLAN 0 to HW filter on device bond8 [ 472.281743][T15454] overlayfs: failed to clone upperpath [ 472.369581][T15460] sctp: [Deprecated]: syz.2.1625 (pid 15460) Use of int in maxseg socket option. [ 472.369581][T15460] Use struct sctp_assoc_value instead [ 472.528462][T15466] netlink: 'syz.3.1627': attribute type 1 has an invalid length. [ 472.595543][T15466] 8021q: adding VLAN 0 to HW filter on device bond7 [ 472.599800][T15466] bond6: (slave bond7): making interface the new active one [ 472.602698][T15466] bond6: (slave bond7): Enslaving as an active interface with an up link [ 472.609449][T15466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1627'. [ 472.614408][T15466] bond6: entered promiscuous mode [ 472.616908][T15466] bond7: entered promiscuous mode [ 472.619176][T15466] bond6: entered allmulticast mode [ 472.621300][T15466] bond7: entered allmulticast mode [ 472.624704][T15466] 8021q: adding VLAN 0 to HW filter on device bond6 [ 473.048275][T15486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15486 comm=syz.3.1632 [ 473.126540][T15488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1633'. [ 473.255483][T15492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1634'. [ 473.288653][ T40] audit: type=1400 audit(729.269:742): avc: denied { getopt } for pid=15499 comm="syz.3.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 473.294943][ T40] audit: type=1400 audit(729.269:743): avc: denied { shutdown } for pid=15499 comm="syz.3.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 473.324444][T15502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1637'. [ 473.328003][T15502] openvswitch: netlink: Flow actions attr not present in new flow. [ 473.537567][T15513] netlink: 'syz.2.1640': attribute type 10 has an invalid length. [ 473.541079][T15513] batadv0: left allmulticast mode [ 473.543245][T15513] batadv0: left promiscuous mode [ 473.545645][T15513] bridge0: port 1(batadv0) entered disabled state [ 473.552686][T15513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.557565][T15513] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 474.240525][T15516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1642'. [ 474.243401][T15516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1642'. [ 474.301800][T15519] netlink: 'syz.2.1643': attribute type 10 has an invalid length. [ 474.426952][ T6000] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 474.430401][ T6000] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 474.433659][ T6000] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 474.438803][ T6000] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 474.442498][ T6000] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 474.471414][T15525] xfrm0 speed is unknown, defaulting to 1000 [ 474.578457][T15525] chnl_net:caif_netlink_parms(): no params data found [ 474.595139][ T1926] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 474.641539][T15551] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1650'. [ 474.673291][T15525] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.675724][T15525] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.678126][T15525] bridge_slave_0: entered allmulticast mode [ 474.680793][T15525] bridge_slave_0: entered promiscuous mode [ 474.684083][T15525] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.686426][T15525] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.688697][T15525] bridge_slave_1: entered allmulticast mode [ 474.692045][T15525] bridge_slave_1: entered promiscuous mode [ 474.697385][T15551] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15551 comm=syz.6.1650 [ 474.725356][T15525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.730184][T15525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.756990][ T1926] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.761109][ T1926] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 474.765758][ T1926] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 474.768144][T15525] team0: Port device team_slave_0 added [ 474.768914][ T1926] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 474.773145][T15525] team0: Port device team_slave_1 added [ 474.776174][ T1926] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 474.780112][ T1926] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 474.783396][ T1926] usb 8-1: Manufacturer: syz [ 474.787742][ T1926] usb 8-1: config 0 descriptor?? [ 474.806793][T15525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.808976][T15525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.816641][T15525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.820783][T15525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.823175][T15525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.833673][T15525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.871248][T15525] hsr_slave_0: entered promiscuous mode [ 474.873590][T15525] hsr_slave_1: entered promiscuous mode [ 474.875940][T15525] debugfs: 'hsr0' already exists in 'hsr' [ 474.877720][T15525] Cannot create hsr debugfs directory [ 475.017046][T15525] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 475.023963][T15525] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 475.029831][T15525] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 475.034373][T15525] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 475.045569][ T1926] rc_core: IR keymap rc-hauppauge not found [ 475.047658][ T1926] Registered IR keymap rc-empty [ 475.049971][ T1926] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 475.050366][T15525] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.055138][T15525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.057579][T15525] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.059867][T15525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.065547][ T1926] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 475.086735][ T1926] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 475.093443][ T1926] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input14 [ 475.101606][ T1926] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 475.102700][T15525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.116953][ T6064] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.122558][ T6064] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.126550][ T1926] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 475.143117][T15525] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.155906][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.158776][ T6036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.161912][ T1926] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 475.167313][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.170446][ T6036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.195152][ T1926] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 475.215181][ T1926] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 475.245203][ T1926] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 475.265107][ T1926] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 475.285162][ T1926] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 475.307229][T15525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.315170][ T1926] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 475.335516][ T1926] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 475.356424][ T1926] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 475.359539][ T1926] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 475.364856][ T1926] usb 8-1: USB disconnect, device number 7 [ 475.492896][T15586] tmpfs: Cannot change global quota limit on remount [ 475.503868][ T40] audit: type=1326 audit(731.479:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.2.1654" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542c18eec9 code=0x7ffc0000 [ 475.510046][ T40] audit: type=1326 audit(731.479:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.2.1654" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542c18eec9 code=0x7ffc0000 [ 475.513256][T15525] veth0_vlan: entered promiscuous mode [ 475.518778][ T40] audit: type=1326 audit(731.479:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.2.1654" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f542c18eec9 code=0x7ffc0000 [ 475.529365][ T40] audit: type=1326 audit(731.479:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.2.1654" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542c18eec9 code=0x7ffc0000 [ 475.537136][ T40] audit: type=1326 audit(731.479:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.2.1654" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542c18eec9 code=0x7ffc0000 [ 475.538822][T15525] veth1_vlan: entered promiscuous mode [ 475.543950][ T40] audit: type=1326 audit(731.479:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.2.1654" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f542c18eec9 code=0x7ffc0000 [ 475.563456][ T40] audit: type=1326 audit(731.479:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.2.1654" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542c18eec9 code=0x7ffc0000 [ 475.571510][ T40] audit: type=1326 audit(731.489:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15587 comm="syz.2.1654" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f542c18eec9 code=0x7ffc0000 [ 475.581651][T15525] veth0_macvtap: entered promiscuous mode [ 475.586568][T15525] veth1_macvtap: entered promiscuous mode [ 475.596293][T15525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.603239][T15525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.610038][T15592] tipc: New replicast peer: 172.20.20.170 [ 475.612404][T15592] tipc: Enabled bearer , priority 10 [ 475.614387][ T1149] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.618117][ T1149] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.621759][ T1149] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.626230][ T1149] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.691931][T15601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1660'. [ 475.695606][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.698283][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.718047][ T7969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.721258][ T7969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.759622][T15603] binder: 15602:15603 ioctl c0306201 200000000640 returned -22 [ 475.925124][ T6256] usb 11-1: new low-speed USB device number 2 using dummy_hcd [ 475.999787][T15614] tipc: Started in network mode [ 476.001482][T15614] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 476.004720][T15614] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 476.008309][T15614] tipc: Enabled bearer , priority 10 [ 476.086743][ T6256] usb 11-1: Invalid ep0 maxpacket: 16 [ 476.183632][T15629] netlink: 182 bytes leftover after parsing attributes in process `syz.7.1669'. [ 476.215374][ T6256] usb 11-1: new low-speed USB device number 3 using dummy_hcd [ 476.267040][T15637] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1673'. [ 476.295985][T15639] netlink: 'syz.2.1674': attribute type 11 has an invalid length. [ 476.298449][T15639] netlink: 'syz.2.1674': attribute type 13 has an invalid length. [ 476.370169][ T6256] usb 11-1: Invalid ep0 maxpacket: 16 [ 476.373697][ T6256] usb usb11-port1: attempt power cycle [ 476.475859][ T6007] Bluetooth: hci3: command tx timeout [ 476.715350][ T6256] usb 11-1: new low-speed USB device number 4 using dummy_hcd [ 476.735723][ T6256] usb 11-1: Invalid ep0 maxpacket: 16 [ 476.736574][ T1926] tipc: Node number set to 1926923128 [ 476.852019][T15650] binder: 15649:15650 ioctl 4008b100 200000000100 returned -22 [ 476.875524][ T6256] usb 11-1: new low-speed USB device number 5 using dummy_hcd [ 476.912918][ T6256] usb 11-1: Invalid ep0 maxpacket: 16 [ 476.915410][ T6256] usb usb11-port1: unable to enumerate USB device [ 476.946591][T15652] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 476.952645][T15652] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 476.958061][T15652] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 476.962631][T15652] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 477.019739][ T6256] tipc: Node number set to 1 [ 477.810399][T15665] new mount options do not match the existing superblock, will be ignored [ 477.833962][ T1926] Process accounting resumed [ 477.838372][ T5996] Process accounting resumed [ 478.035106][T15683] netlink: 'syz.3.1689': attribute type 4 has an invalid length. [ 478.046567][T15670] Process accounting resumed [ 478.047201][T15682] input: syz1 as /devices/virtual/input/input15 [ 478.059805][T15685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15685 comm=syz.2.1690 [ 478.142787][T15702] __nla_validate_parse: 2 callbacks suppressed [ 478.142842][T15702] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1695'. [ 478.149023][T15702] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1695'. [ 478.177645][T15704] 8021q: adding VLAN 0 to HW filter on device bond8 [ 478.189485][T15704] bond8: (slave ip6gretap1): making interface the new active one [ 478.193674][T15704] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 478.216960][T15698] /dev/sr0: Can't open blockdev [ 478.227782][T15710] fuse: blksize only supported for fuseblk [ 478.265876][T15717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=68 sclass=netlink_route_socket pid=15717 comm=syz.7.1700 [ 478.309888][T15723] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1703'. [ 478.323891][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 478.323902][ T40] audit: type=1400 audit(734.299:766): avc: denied { bind } for pid=15720 comm="syz.3.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 478.333059][ T40] audit: type=1400 audit(734.299:767): avc: denied { name_bind } for pid=15720 comm="syz.3.1702" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 478.342494][ T40] audit: type=1400 audit(734.299:768): avc: denied { node_bind } for pid=15720 comm="syz.3.1702" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 478.355525][ T6007] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 478.362923][T15727] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 478.405891][ T40] audit: type=1400 audit(734.389:769): avc: denied { append } for pid=15730 comm="syz.7.1706" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 478.486091][T15733] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 478.489317][T15733] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 478.491812][T15733] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 478.496908][T15733] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 478.504376][T15744] 9pnet_fd: Insufficient options for proto=fd [ 478.509798][ T40] audit: type=1400 audit(734.489:770): avc: denied { connect } for pid=15739 comm="syz.3.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 478.518511][ T40] audit: type=1400 audit(734.489:771): avc: denied { listen } for pid=15739 comm="syz.3.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 478.526710][ T40] audit: type=1400 audit(734.489:772): avc: denied { accept } for pid=15739 comm="syz.3.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 478.559985][ T40] audit: type=1400 audit(734.539:773): avc: denied { connect } for pid=15750 comm="syz.7.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 478.567044][ T40] audit: type=1400 audit(734.539:774): avc: denied { read } for pid=15750 comm="syz.7.1711" laddr=172.20.20.10 lport=23629 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 478.709446][T15769] x_tables: duplicate underflow at hook 1 [ 478.730819][T15773] netlink: 'syz.3.1716': attribute type 1 has an invalid length. [ 478.733344][T15773] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1716'. [ 478.770545][ T40] audit: type=1400 audit(734.749:775): avc: denied { append } for pid=15778 comm="syz.7.1719" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 478.794037][T15782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1716'. [ 478.804924][T15782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1716'. [ 478.809732][T15782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1716'. [ 478.814194][T15782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1716'. [ 478.818794][T15782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1716'. [ 478.833031][T15786] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1721'. [ 478.865538][T15788] ip6t_srh: unknown srh match flags 4000 [ 478.969562][T15786] hsr_slave_1 (unregistering): left promiscuous mode [ 479.033576][T15806] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 479.035909][T15806] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 479.039524][T15806] vhci_hcd vhci_hcd.0: Device attached [ 479.054799][T15809] vhci_hcd: connection closed [ 479.059649][ T6036] vhci_hcd: stop threads [ 479.063582][ T6036] vhci_hcd: release socket [ 479.065957][ T6036] vhci_hcd: disconnect device [ 479.107078][T15819] Bluetooth: MGMT ver 1.23 [ 479.295130][ T5996] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 479.435213][ T5996] usb 8-1: device descriptor read/64, error -71 [ 479.446310][ T6007] Bluetooth: hci0: unknown advertising packet type: 0x6b [ 479.446364][ T6007] Bluetooth: hci0: Dropping invalid advertising data [ 479.451531][ T6007] Bluetooth: hci0: Malformed LE Event: 0x02 [ 479.685238][ T5996] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 479.760754][T15856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=15856 comm=syz.7.1738 [ 479.766939][T15853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=15853 comm=syz.7.1738 [ 479.816984][ T5996] usb 8-1: device descriptor read/64, error -71 [ 479.838298][T15864] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 479.868316][T15865] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 479.935544][ T5996] usb usb8-port1: attempt power cycle [ 480.295085][ T5996] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 480.295466][T15876] ubi31: attaching mtd0 [ 480.302312][T15876] ubi31: scanning is finished [ 480.304361][T15876] ubi31: empty MTD device detected [ 480.325704][ T5996] usb 8-1: device descriptor read/8, error -71 [ 480.419359][T15876] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 480.422495][T15876] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 480.425929][T15876] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 480.428806][T15876] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 480.431879][T15876] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 480.435863][T15876] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 480.438592][T15876] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3943483979 [ 480.442149][T15876] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 480.447460][T15879] ubi31: background thread "ubi_bgt31d" started, PID 15879 [ 480.555272][ T6007] Bluetooth: hci3: command 0x040f tx timeout [ 480.556052][ T6000] Bluetooth: hci0: command 0x0406 tx timeout [ 480.585124][ T5996] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 480.612576][ T5996] usb 8-1: device descriptor read/8, error -71 [ 480.625130][T15885] macsec0: entered promiscuous mode [ 480.627499][T15885] macsec0: entered allmulticast mode [ 480.629416][T15885] veth1_macvtap: entered allmulticast mode [ 480.667319][T15887] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 480.722060][T15897] Bluetooth: MGMT ver 1.23 [ 480.725635][ T5996] usb usb8-port1: unable to enumerate USB device [ 480.759976][T15898] netlink: 'syz.6.1750': attribute type 1 has an invalid length. [ 480.779261][T15898] bond2: entered promiscuous mode [ 480.781720][T15898] 8021q: adding VLAN 0 to HW filter on device bond2 [ 480.793258][T15898] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 480.794121][T15900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3688 sclass=netlink_route_socket pid=15900 comm=syz.7.1751 [ 480.798449][T15898] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 480.808169][T15898] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 480.844228][T15901] random: crng reseeded on system resumption [ 481.589173][T15913] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 481.613865][T15915] bridge: RTM_NEWNEIGH with invalid ether address [ 481.736192][T15926] macvlan2: entered allmulticast mode [ 481.738594][T15926] veth1_vlan: entered allmulticast mode [ 482.155470][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 482.187321][T15940] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.311960][T15962] gretap0: entered promiscuous mode [ 482.314185][T15962] gretap0: entered allmulticast mode [ 482.358773][T15962] bridge_slave_1: left allmulticast mode [ 482.360570][T15962] bridge_slave_1: left promiscuous mode [ 482.362691][T15962] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.368313][T15962] bridge_slave_0: left allmulticast mode [ 482.370171][T15962] bridge_slave_0: left promiscuous mode [ 482.372129][T15962] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.471628][T15966] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 482.475808][T15969] syzkaller1: entered promiscuous mode [ 482.478075][T15969] syzkaller1: entered allmulticast mode [ 482.635183][ T6000] Bluetooth: hci3: command 0x040f tx timeout [ 482.683549][T15981] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=58 sclass=netlink_xfrm_socket pid=15981 comm=syz.3.1775 [ 482.689206][T15980] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=58 sclass=netlink_xfrm_socket pid=15980 comm=syz.3.1775 [ 482.752420][ T5996] hid_parser_main: 212 callbacks suppressed [ 482.752439][ T5996] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 482.767706][ T5996] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 482.796171][T15995] fido_id[15995]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 482.851516][T16002] binder: 16001:16002 ioctl c0306201 200000000240 returned -11 [ 482.950849][T16006] dlm: no local IP address has been set [ 482.953901][T16006] dlm: cannot start dlm midcomms -107 [ 483.080586][T16017] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 483.084269][T16017] SELinux: failed to load policy [ 483.239910][T16034] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 483.245269][T16034] block device autoloading is deprecated and will be removed. [ 483.382893][T16041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=16041 comm=syz.7.1791 [ 483.441270][T16044] loop2: detected capacity change from 0 to 7 [ 483.444880][ T6010] Dev loop2: unable to read RDB block 7 [ 483.447030][ T6010] loop2: unable to read partition table [ 483.449151][ T6010] loop2: partition table beyond EOD, truncated [ 483.454904][T16044] Dev loop2: unable to read RDB block 7 [ 483.456906][T16044] loop2: unable to read partition table [ 483.458788][T16044] loop2: partition table beyond EOD, truncated [ 483.461831][T16044] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 483.486828][T16047] : entered promiscuous mode [ 483.841399][ T5346] Dev loop2: unable to read RDB block 7 [ 483.843865][ T5346] loop2: unable to read partition table [ 483.847608][ T5346] loop2: partition table beyond EOD, truncated [ 483.934375][ T1145] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.938097][ T1145] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.941476][ T1145] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 483.945236][ T1145] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.948728][ T1145] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.952939][ T1145] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 483.957945][ T1145] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.961561][ T1145] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.965500][ T1145] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 484.121608][T16065] tmpfs: Unknown parameter 'E6—äÞTmpol' [ 484.156835][T16067] __nla_validate_parse: 8 callbacks suppressed [ 484.156850][T16067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1800'. [ 484.266547][T16074] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1803'. [ 484.271490][T16075] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1803'. [ 484.318112][ T6007] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 484.328256][ T6007] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 484.332216][ T6007] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 484.336608][ T6007] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 484.339963][ T6007] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 484.371200][T16080] xfrm0 speed is unknown, defaulting to 1000 [ 484.479834][T16080] chnl_net:caif_netlink_parms(): no params data found [ 484.555723][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 484.555735][ T40] audit: type=1400 audit(740.529:796): avc: denied { read } for pid=16101 comm="syz.7.1808" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 484.564501][ T40] audit: type=1400 audit(740.529:797): avc: denied { open } for pid=16101 comm="syz.7.1808" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 484.573689][ T40] audit: type=1400 audit(740.529:798): avc: denied { ioctl } for pid=16101 comm="syz.7.1808" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 484.595196][T16080] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.598049][T16080] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.600331][T16080] bridge_slave_0: entered allmulticast mode [ 484.602937][T16080] bridge_slave_0: entered promiscuous mode [ 484.606249][T16080] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.608913][T16080] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.611360][T16080] bridge_slave_1: entered allmulticast mode [ 484.616648][T16080] bridge_slave_1: entered promiscuous mode [ 484.675415][T16080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.682341][T16080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.717315][ T6000] Bluetooth: hci3: command 0x040f tx timeout [ 484.758451][T16080] team0: Port device team_slave_0 added [ 484.763858][T16080] team0: Port device team_slave_1 added [ 484.776306][T16121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.788238][T16121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.793482][ T40] audit: type=1400 audit(740.769:799): avc: denied { write } for pid=16119 comm="syz.7.1813" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 484.845227][T16080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.847584][T16080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.856358][T16080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.861028][T16080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.863371][T16080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.871956][T16080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.919859][ T40] audit: type=1400 audit(740.899:800): avc: denied { bind } for pid=16125 comm="syz.6.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 484.932410][T16080] hsr_slave_0: entered promiscuous mode [ 484.934679][T16080] hsr_slave_1: entered promiscuous mode [ 484.938347][T16080] debugfs: 'hsr0' already exists in 'hsr' [ 484.940140][T16080] Cannot create hsr debugfs directory [ 485.076098][T16138] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1818'. [ 485.280222][T16154] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1824'. [ 485.293226][ T40] audit: type=1400 audit(741.269:801): avc: denied { write } for pid=16156 comm="syz.7.1826" name="001" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 485.310905][T16154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.372772][T16154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.557038][T16171] bond1: entered allmulticast mode [ 485.558981][T16171] 8021q: adding VLAN 0 to HW filter on device bond1 [ 485.593417][ T40] audit: type=1400 audit(741.569:802): avc: denied { setopt } for pid=16173 comm="syz.7.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 485.767698][T16080] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 485.775618][T16080] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 485.780939][T16080] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 485.784934][T16080] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 485.823194][T16191] SQUASHFS error: Failed to read block 0x0: -5 [ 485.826734][T16191] unable to read squashfs_super_block [ 485.863707][T16080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.882401][T16080] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.890330][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.892610][ T6036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.900917][ T7969] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.903187][ T7969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.933514][ T40] audit: type=1400 audit(741.909:803): avc: denied { egress } for pid=6261 comm="kworker/1:3" daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 485.944860][T16195] netlink: 'syz.7.1835': attribute type 4 has an invalid length. [ 485.971740][T16195] input: syz1 as /devices/virtual/input/input16 [ 486.024076][T16201] veth0_to_team: entered promiscuous mode [ 486.052814][T16080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.083580][T16080] veth0_vlan: entered promiscuous mode [ 486.088915][T16080] veth1_vlan: entered promiscuous mode [ 486.103704][T16080] veth0_macvtap: entered promiscuous mode [ 486.108489][T16080] veth1_macvtap: entered promiscuous mode [ 486.118725][T16080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.127488][T16080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.133324][ T7969] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.138311][ T7969] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.142050][ T7969] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.147435][ T6036] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.186187][ T6036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.189280][ T6036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.206984][ T7969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.211447][ T7969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.323616][T16214] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1839'. [ 486.357018][T16216] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1840'. [ 486.383006][T16216] bridge_slave_1: left allmulticast mode [ 486.384895][T16216] bridge_slave_1: left promiscuous mode [ 486.387512][T16216] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.392964][T16216] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 486.396881][ T6000] Bluetooth: hci4: command tx timeout [ 486.405137][ T40] audit: type=1400 audit(742.379:804): avc: denied { ioctl } for pid=16215 comm="syz.6.1840" path="/102/file0" dev="tmpfs" ino=554 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 486.543516][T16223] netlink: 'syz.2.1842': attribute type 10 has an invalid length. [ 486.546967][T16223] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1842'. [ 486.549876][T16223] dummy0: entered promiscuous mode [ 486.553485][T16223] bridge0: port 3(dummy0) entered blocking state [ 486.555861][T16223] bridge0: port 3(dummy0) entered disabled state [ 486.557730][T16223] dummy0: entered allmulticast mode [ 486.560896][T16223] bridge0: port 3(dummy0) entered blocking state [ 486.562937][T16223] bridge0: port 3(dummy0) entered forwarding state [ 486.602121][T16223] sp0: Synchronizing with TNC [ 486.705513][T16229] xfrm0 speed is unknown, defaulting to 1000 [ 486.741652][T16231] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1844'. [ 486.795834][ T6000] Bluetooth: hci3: command 0x040f tx timeout [ 487.137190][ T40] audit: type=1400 audit(743.119:805): avc: denied { accept } for pid=16255 comm="syz.2.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 487.198921][T16267] netlink: 'syz.7.1858': attribute type 2 has an invalid length. [ 487.200665][T16263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1856'. [ 487.241969][T16265] xfrm0 speed is unknown, defaulting to 1000 [ 487.369980][T16284] ================================================================== [ 487.369989][T16284] BUG: KASAN: global-out-of-bounds in bit_putcs+0xbd0/0xdd0 [ 487.370027][T16284] Read of size 1 at addr ffffffff8bf4ab8d by task syz.6.1864/16284 [ 487.370036][T16284] [ 487.370042][T16284] CPU: 1 UID: 0 PID: 16284 Comm: syz.6.1864 Not tainted syzkaller #0 PREEMPT(full) [ 487.370055][T16284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 487.370062][T16284] Call Trace: [ 487.370065][T16284] [ 487.370070][T16284] dump_stack_lvl+0x116/0x1f0 [ 487.370090][T16284] print_report+0xcd/0x630 [ 487.370106][T16284] ? __virt_addr_valid+0x81/0x610 [ 487.370117][T16284] ? __phys_addr+0xe8/0x180 [ 487.370127][T16284] ? bit_putcs+0xbd0/0xdd0 [ 487.370139][T16284] kasan_report+0xe0/0x110 [ 487.370155][T16284] ? bit_putcs+0xbd0/0xdd0 [ 487.370168][T16284] bit_putcs+0xbd0/0xdd0 [ 487.370183][T16284] ? __pfx_bit_putcs+0x10/0x10 [ 487.370197][T16284] ? fb_get_color_depth+0x120/0x250 [ 487.370209][T16284] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 487.370228][T16284] ? __pfx_bit_putcs+0x10/0x10 [ 487.370240][T16284] fbcon_putcs+0x387/0x450 [ 487.370251][T16284] do_update_region+0x1fb/0x3f0 [ 487.370264][T16284] update_region+0xc1/0x160 [ 487.370278][T16284] vcs_write+0x83d/0xdb0 [ 487.370293][T16284] ? __pfx_vcs_write+0x10/0x10 [ 487.370306][T16284] ? bpf_lsm_file_permission+0x9/0x10 [ 487.370320][T16284] ? security_file_permission+0x71/0x210 [ 487.370337][T16284] ? rw_verify_area+0xcf/0x6c0 [ 487.370349][T16284] ? __pfx_vcs_write+0x10/0x10 [ 487.370360][T16284] vfs_writev+0x5df/0xde0 [ 487.370374][T16284] ? __pfx_vfs_writev+0x10/0x10 [ 487.370386][T16284] ? kmem_cache_free+0x2d4/0x6c0 [ 487.370398][T16284] ? putname+0x154/0x1a0 [ 487.370417][T16284] ? __fget_files+0x20e/0x3c0 [ 487.370432][T16284] ? do_writev+0x132/0x340 [ 487.370444][T16284] do_writev+0x132/0x340 [ 487.370455][T16284] ? __pfx_do_writev+0x10/0x10 [ 487.370468][T16284] do_syscall_64+0xcd/0xfa0 [ 487.370486][T16284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.370497][T16284] RIP: 0033:0x7f4d2fd8eec9 [ 487.370505][T16284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.370516][T16284] RSP: 002b:00007f4d2dff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 487.370527][T16284] RAX: ffffffffffffffda RBX: 00007f4d2ffe5fa0 RCX: 00007f4d2fd8eec9 [ 487.370534][T16284] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000007 [ 487.370541][T16284] RBP: 00007f4d2fe11f91 R08: 0000000000000000 R09: 0000000000000000 [ 487.370547][T16284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.370553][T16284] R13: 00007f4d2ffe6038 R14: 00007f4d2ffe5fa0 R15: 00007ffd68852948 [ 487.370563][T16284] [ 487.370567][T16284] [ 487.370570][T16284] The buggy address belongs to the variable: [ 487.370573][T16284] type_check_kinds+0x20d/0xcc0 [ 487.370588][T16284] [ 487.370590][T16284] The buggy address belongs to the physical page: [ 487.370595][T16284] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xbf4a [ 487.370605][T16284] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 487.370619][T16284] raw: 00fff00000002000 ffffea00002fd288 ffffea00002fd288 0000000000000000 [ 487.370646][T16284] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 487.370652][T16284] page dumped because: kasan: bad access detected [ 487.370657][T16284] page_owner info is not present (never set?) [ 487.370661][T16284] [ 487.370664][T16284] Memory state around the buggy address: [ 487.370669][T16284] ffffffff8bf4aa80: 00 00 02 f9 f9 f9 f9 f9 00 03 f9 f9 f9 f9 f9 f9 [ 487.370676][T16284] ffffffff8bf4ab00: 07 f9 f9 f9 f9 f9 f9 f9 00 01 f9 f9 f9 f9 f9 f9 [ 487.370683][T16284] >ffffffff8bf4ab80: 00 05 f9 f9 f9 f9 f9 f9 03 f9 f9 f9 f9 f9 f9 f9 [ 487.370689][T16284] ^ [ 487.370694][T16284] ffffffff8bf4ac00: 03 f9 f9 f9 f9 f9 f9 f9 03 f9 f9 f9 f9 f9 f9 f9 [ 487.370701][T16284] ffffffff8bf4ac80: 00 07 f9 f9 f9 f9 f9 f9 00 07 f9 f9 f9 f9 f9 f9 [ 487.370707][T16284] ================================================================== [ 487.370725][T16284] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 487.370733][T16284] CPU: 1 UID: 0 PID: 16284 Comm: syz.6.1864 Not tainted syzkaller #0 PREEMPT(full) [ 487.370746][T16284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 487.370752][T16284] Call Trace: [ 487.370756][T16284] [ 487.370760][T16284] dump_stack_lvl+0x3d/0x1f0 [ 487.370793][T16284] vpanic+0x640/0x6f0 [ 487.370807][T16284] panic+0xca/0xd0 [ 487.370818][T16284] ? __pfx_panic+0x10/0x10 [ 487.370832][T16284] ? check_panic_on_warn+0x1f/0xb0 [ 487.370845][T16284] check_panic_on_warn+0xab/0xb0 [ 487.370859][T16284] end_report+0x107/0x170 [ 487.370873][T16284] kasan_report+0xee/0x110 [ 487.370888][T16284] ? bit_putcs+0xbd0/0xdd0 [ 487.370902][T16284] bit_putcs+0xbd0/0xdd0 [ 487.370917][T16284] ? __pfx_bit_putcs+0x10/0x10 [ 487.370931][T16284] ? fb_get_color_depth+0x120/0x250 [ 487.370943][T16284] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 487.370961][T16284] ? __pfx_bit_putcs+0x10/0x10 [ 487.370973][T16284] fbcon_putcs+0x387/0x450 [ 487.370984][T16284] do_update_region+0x1fb/0x3f0 [ 487.370996][T16284] update_region+0xc1/0x160 [ 487.371010][T16284] vcs_write+0x83d/0xdb0 [ 487.371024][T16284] ? __pfx_vcs_write+0x10/0x10 [ 487.371036][T16284] ? bpf_lsm_file_permission+0x9/0x10 [ 487.371050][T16284] ? security_file_permission+0x71/0x210 [ 487.371065][T16284] ? rw_verify_area+0xcf/0x6c0 [ 487.371077][T16284] ? __pfx_vcs_write+0x10/0x10 [ 487.371089][T16284] vfs_writev+0x5df/0xde0 [ 487.371102][T16284] ? __pfx_vfs_writev+0x10/0x10 [ 487.371114][T16284] ? kmem_cache_free+0x2d4/0x6c0 [ 487.371126][T16284] ? putname+0x154/0x1a0 [ 487.371145][T16284] ? __fget_files+0x20e/0x3c0 [ 487.371160][T16284] ? do_writev+0x132/0x340 [ 487.371171][T16284] do_writev+0x132/0x340 [ 487.371182][T16284] ? __pfx_do_writev+0x10/0x10 [ 487.371196][T16284] do_syscall_64+0xcd/0xfa0 [ 487.371209][T16284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.371219][T16284] RIP: 0033:0x7f4d2fd8eec9 [ 487.371227][T16284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.371237][T16284] RSP: 002b:00007f4d2dff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 487.371248][T16284] RAX: ffffffffffffffda RBX: 00007f4d2ffe5fa0 RCX: 00007f4d2fd8eec9 [ 487.371255][T16284] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000007 [ 487.371261][T16284] RBP: 00007f4d2fe11f91 R08: 0000000000000000 R09: 0000000000000000 [ 487.371268][T16284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.371274][T16284] R13: 00007f4d2ffe6038 R14: 00007f4d2ffe5fa0 R15: 00007ffd68852948 [ 487.371284][T16284] [ 487.372057][T16284] Kernel Offset: disabled VM DIAGNOSIS: 13:08:50 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff8161b793 RDX=ffffffff8e097a00 RSI=ffffffff8161b7db RDI=ffffffff93a98fe0 RBP=ffff88806a420000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27531fc R10=ffffffff93a98fe7 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8161b7dc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69d9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555558be5808 CR3=000000004c578000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe7634f750 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f76dfa12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f76dfa12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f76dfa12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f76dfa12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f76dfa1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f76dfa1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85308610 RDI=ffffffff9ae077e0 RBP=ffffffff9ae077a0 RSP=ffffc90006bdf308 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3866666666666666 R12=0000000000000000 R13=0000000000000060 R14=fffffbfff35c0f4e R15=dffffc0000000000 RIP=ffffffff85308637 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4d2dff66c0 ffffffff 00c00000 GS =0000 ffff8880d6ad9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4d2fd72b60 CR3=0000000026a13000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffc00 Opmask01=0000000000000000 Opmask02=0000000000000007 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006800000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 00000f8000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d2fe1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d2fe1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003161 7363762f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001242 5040550c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff8161b793 RDX=ffff8880246c2480 RSI=ffffffff8161b7db RDI=ffffffff93a98fe0 RBP=ffff88806a620000 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff27531fc R10=ffffffff93a98fe7 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8161b7dc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4d2dff66c0 ffffffff 00c00000 GS =0000 ffff8880d6bd9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555608d95c8 CR3=0000000044ba1000 CR4=00350ef0 DR0=000000000000263e DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d2fe12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d2fe12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d2fe12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d2fe12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d2fe1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d2fe1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d2ffb74a8 00007f4d2ffb74a0 00007f4d2ffb7498 00007f4d2ffb7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d30b1d100 00007f4d2ffb7460 00007f4d2ffb0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4d2ffb74b8 00007f4d2ffb74b0 00007f4d2ffb74a8 00007f4d2ffb74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2fa8a96f3a8041f3 1b1ae6b98fe9be18 17efa7eb943a3663 9445d2fc67ca4511 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 60340e46458e0c1b 4cbd21f76b75c88b 7f89c814029fba25 75af7062683c197c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3e5a369c62b2fbe4 43807c461e40afa5 5ef48a5597cc08e2 9203e2324279b3d7 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d958e27a8893f398 013626e8ab884c1c 037e661c0bf712ea f87c453e90a332ca ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010002 RBX=0000000000000000 RCX=ffffffff8161b793 RDX=ffff888024974900 RSI=ffffffff8161b7db RDI=ffffffff93a98fe0 RBP=ffff88806a720000 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff27531fc R10=ffffffff93a98fe7 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8161b7dc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555558be5500 ffffffff 00c00000 GS =0000 ffff8880d6cd9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f76df865f3a CR3=00000000489c5000 CR4=00350ef0 DR0=000000000000263e DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f76e071d6c0 00007f76e071d6c0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f76e071d6b0 00007f76e071d6b0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f76dfa12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f76dfa12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f76dfa12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f76dfa12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f76dfa1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f76dfa1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000