last executing test programs: 30.279477273s ago: executing program 0 (id=1): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000380)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x5, @private1, 0x8}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000080)="c88cb7387000660bc21aee4150deda86c0e52d1c", 0x14}], 0x1}}], 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'ip_vti0\x00', 0x20}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) 30.23920688s ago: executing program 0 (id=9): set_robust_list(0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x9, 0x3, 0x0, 0x2, 0x0, 0x70bd26, 0x25dfdbff}, 0x10}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xfffe, 0x0, 0x0, 0x300, 0x7fffffff}, 0x9c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x94, 0x30, 0x36eac49ec043b62f, 0x0, 0x25dfdbbf, {}, [{0x80, 0x1, [@m_csum={0x7c, 0x4, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x7fff, 0x2, 0x2, 0x6}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x2, 0x4, 0xdbe}, 0x9}}]}, {0x17, 0x6, "e63710fcda5a84dbabb3b1fa149242af47ffe5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x94}}, 0x0) 30.019366933s ago: executing program 0 (id=10): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b1b, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd, 0x80000}]}}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd, 0x80000}]}}) r2 = dup3(r1, r1, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0xc00, 0x5, 0x2}, 0x18, 0x1) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, &(0x7f0000000080)={0x9, [0x4, 0x3, 0x5], [{0x0, 0x4, 0x0, 0x1}, {0x1, 0x4, 0x0, 0x0, 0x1}, {0x9, 0xe56, 0x0, 0x1, 0x0, 0x1}, {0xfffffd45, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xbe4, 0x81, 0x1, 0x0, 0x1}, {0x146, 0x2, 0x0, 0x1, 0x1}, {0x400, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x872, 0x8, 0x1, 0x1}, {0x3, 0x4, 0x1}, {0x1, 0x6, 0x0, 0x0, 0x1, 0x1}, {0xffffffff, 0x3}, {0x8, 0x71b, 0x0, 0x0, 0x1, 0x1}], 0x5d}) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, &(0x7f0000000080)={0x9, [0x4, 0x3, 0x5], [{0x0, 0x4, 0x0, 0x1}, {0x1, 0x4, 0x0, 0x0, 0x1}, {0x9, 0xe56, 0x0, 0x1, 0x0, 0x1}, {0xfffffd45, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xbe4, 0x81, 0x1, 0x0, 0x1}, {0x146, 0x2, 0x0, 0x1, 0x1}, {0x400, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x872, 0x8, 0x1, 0x1}, {0x3, 0x4, 0x1}, {0x1, 0x6, 0x0, 0x0, 0x1, 0x1}, {0xffffffff, 0x3}, {0x8, 0x71b, 0x0, 0x0, 0x1, 0x1}], 0x5d}) 29.96072782s ago: executing program 0 (id=12): r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60, 0x4000}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20010, 0x284a0}}}}}}]}, 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 29.829877986s ago: executing program 0 (id=17): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000006594bca1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f00000002c0)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x38]}}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900"], 0x7c}}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000409'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r7, 0x80044dff, &(0x7f0000000840)) ioctl$DRM_IOCTL_GET_CAP(r6, 0xc010640c, &(0x7f0000000000)={0x11}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000100fefffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8a43030000000000080029003dd1000014000300626188613d2f79f5550000615f3000f50991e162d904a4eb3000"], 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) 29.678545598s ago: executing program 0 (id=21): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@gettaction={0x1dc, 0x32, 0x200, 0x70bd27, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc31}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3c1}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x791}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2000400}}]}, @action_gd=@TCA_ACT_TAB={0x94, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd828}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x79}}, {0x14, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3ce4}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7ff}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6e}}]}]}, 0x1dc}}, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r3 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x41ff7484, 0x0}, {0x2, 0x0, 0x100d5ba, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x10d2, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x40005, 0x0}]}) (async, rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (rerun: 64) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x11) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0x69, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000340)={0x28, 0x5, r9, 0x0, &(0x7f00000003c0)='a', 0x1, 0x100000001}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r9, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) (async, rerun: 32) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r9, 0x0, &(0x7f0000000a80)="ee661d8d", 0x4, 0x5}) (async, rerun: 32) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r9, 0x0, &(0x7f0000000840)="fc", 0x1, 0x80000000000}) (async) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r9, 0x0, &(0x7f0000000240)='@', 0x1, 0x80000000}) (async, rerun: 32) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000180)={0x18, r9, 0x9, 0xfffffffb}) (rerun: 32) 21.716929302s ago: executing program 3 (id=116): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40007061, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x2c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0a00fe1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b4090a79507df79f298129da487130d5f24b46001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad379e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488a010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a18159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7962b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac2bba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f407000000000000006d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab669ab377e4c2422a47e9ffe2d4a2d32f7528751313694bf57704400b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6940b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d30902208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c8000000000000003a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f000000000facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f296115d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc05000000000000006c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a4619a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806b90cc39c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d3133319e069f9648a2ff93060ff073b3a113e47e447c030931651dd315003b7a6a47c912853826c4c65433a2bb560ae99ec4b227eda2e63a1cb1a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e5f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec90f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754c68b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8adbd2c2604eab3a62a28611da1dae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412cbbdebae06edb51a134301d2627d4927287daf9dcae6720334862d3a18094f1edd9e350337cbb804004d1755cfe7d7fa01872fb99815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2b63a6038ab5546ba1e5ad6a329f2c627100e0442f865fc6c179ad3edcb6b000000000000000b0000000000000000ac192d48d76e2a8cae83ae850f73fdfbaca81b6b7b1a0d7b517f41fbd46aa24b0f4b8e0202e3a580947f1925ba4de097e8dcb6bd7f686322b45d4a544ca1e83b592d4a6d46d0a0dc39634550bc77d4cabba01b283082e66778de7c61a1a36838d36c2f8e58cef603770ee3d6a9625be0bc21d2be2da69ac9e9c5e88278d39239501b465102ad16d651ea8bb8cee35527c1ad42ac6a565e449929ccb4469bdd6824b64e13579b7188566e735200000000000000000094e05bcda1e96e4c33ccf6d74046e45bafe9d512c43a3e485dedad9a38b34f7fcd00fafcc25dc36716f0e21e0632425b7a1c1a6bc15c3fc07d914c88103411d8d2b77b72a796fd3aaa7ea493c7bc43e63b2b0d05ad5682121682096b224933fa20255d58a680cc2ec200"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02e086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00L\t', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 21.639712454s ago: executing program 3 (id=117): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x10200, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x109) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc2, 0x4e, 0x40, 0x2, 0x80, 0x1, 0x3, 0x44, 0x8, 0x9, 0x100000000009}, {0xb, 0xa6f2, 0x6, 0x28, 0x9, 0xff, 0x4, 0x3, 0xa, 0x1, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xf6, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3bc, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x400}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000100)={0x2, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x78, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x450, &(0x7f00000000c0)={[{@cpuset_v2_mode}]}) openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000b0061000000001d000000000000009501000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2}, 0x48) 20.518075517s ago: executing program 3 (id=130): r0 = socket(0x2b, 0x80801, 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) syz_emit_ethernet(0x1a6, &(0x7f0000002600)={@broadcast, @multicast, @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x16c, 0x88, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast1}, {[@dstopts={0x8}, @hopopts={0x87, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x8}, @jumbo={0xc2, 0x4, 0xfffffff7}]}, @dstopts={0x2c, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}, @hopopts={0x4, 0x0, '\x00', [@ra={0x5, 0x2, 0x3}]}, @hopopts={0x73, 0x2, '\x00', [@generic={0x5, 0xd, "619e1d96acd32a55ce2b887fd1"}, @pad1]}, @routing={0x84, 0x8, 0x1, 0x2, 0x0, [@empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, @mcast2]}, @routing={0x3b, 0x2, 0x2, 0xc6, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1c}]}], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "48a0218b5e18924d1daa9268e74fedd2c8a2a913d275e7564902d3f13a287ef9", "785d6bbffbfaf9743ba160c69403a465487d352c9ee7f60000002ae9c6e47b6d442f2f756a91993e9542e889e7cf7118", "add317350284d1cc5d8d00d6ce891743b9653014e80fb7f826a1bf30", {'s\x00', "ca5e0ff0a96b6eefdd65b199f135c5e3"}}}}}}}}, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (async) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) (async) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x0, 0x0, 'queue0\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000029000b0027bd7000004000000201"], 0x1c}}, 0x4040080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000002440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xffffffffffffff71, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r10, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x1) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000002480)=0x2, 0x4) (async) openat$cgroup_subtree(r1, &(0x7f00000024c0), 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r11, &(0x7f0000000200), 0x2, 0x0) r12 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r12, &(0x7f0000000740), 0x1, 0x7fff, 0x1fffd) ioctl$DRM_IOCTL_WAIT_VBLANK(r12, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3}) 20.517015402s ago: executing program 3 (id=131): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480), 0x8) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="1e00000005000000060000000010000024000000", @ANYRES32=0x1, @ANYBLOB="ff0f00"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0200000005000000010000000d000000000000001ce0fc259842503a14593fa4000000000000000029985c91ca85"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r4 = dup(0xffffffffffffffff) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40086602, &(0x7f0000000000)) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f0000000140)=0x1) ioctl$VIDIOC_CROPCAP(r7, 0xc02c563a, &(0x7f0000000000)={0xa, {0xbe8, 0x8, 0xd, 0x9}, {0x8, 0x8838, 0x4, 0x8}, {0x0, 0x101}}) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r6, &(0x7f0000000240)='./file0\x00') sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r5, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, 0x140e, 0x130, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000892}, 0x4000052) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c000700000000000000000008000900000000000800080000a4000000d2864a5a73697000"], 0x4c}}, 0x0) 19.690086746s ago: executing program 3 (id=133): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="200001", @ANYRES32=0x0, @ANYBLOB="000000f1a0"], 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x18, r3, 0x103, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000001}, 0x8000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x9c, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2b}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 19.479943164s ago: executing program 3 (id=138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x44, r1, 0x520dcd1079e2df1f, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x80000000}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000000}, 0x8040) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ufs\x00', 0x204009, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000012c0)='oom_score\x00') read$FUSE(r3, &(0x7f0000001300)={0x2020}, 0x2020) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x4, 0x4}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='rtc_irq_set_freq\x00', r5}, 0x18) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0x80000000000725) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='lp', 0x2) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000f7baf201d7badb6ae4948736c0ca1a489c26bb85625cc2e595265b6ca0c78a4c87b1b71234200c5dcc049a6f561c45f40a4e667c7118958cf80912957a856a82cce20f0b9ac5f5ce8778728f050736b37ceeaae03872a9e80dd273704a446e6275f01c142bdbd09aa828842a697e6959683ba52d3f71679e8ccc4760c720a50cfc004ef5788400f7b028afa4ae7237ade2ceddbb68979942206a8aba11586d19816efc8bc1d1", @ANYRES16=0x0, @ANYBLOB="200029bd7000fddbdf2513000000050003000500000005000300090000000c0009000200aaaaaaaaaaaa0c0009000203aaaaaaaaaaaa0c0009000200aaaaaaaaaaaa06000800a1aa00000c0009000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) 19.403619324s ago: executing program 32 (id=138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x44, r1, 0x520dcd1079e2df1f, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x80000000}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000000}, 0x8040) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ufs\x00', 0x204009, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000012c0)='oom_score\x00') read$FUSE(r3, &(0x7f0000001300)={0x2020}, 0x2020) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x4, 0x4}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='rtc_irq_set_freq\x00', r5}, 0x18) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0x80000000000725) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='lp', 0x2) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000f7baf201d7badb6ae4948736c0ca1a489c26bb85625cc2e595265b6ca0c78a4c87b1b71234200c5dcc049a6f561c45f40a4e667c7118958cf80912957a856a82cce20f0b9ac5f5ce8778728f050736b37ceeaae03872a9e80dd273704a446e6275f01c142bdbd09aa828842a697e6959683ba52d3f71679e8ccc4760c720a50cfc004ef5788400f7b028afa4ae7237ade2ceddbb68979942206a8aba11586d19816efc8bc1d1", @ANYRES16=0x0, @ANYBLOB="200029bd7000fddbdf2513000000050003000500000005000300090000000c0009000200aaaaaaaaaaaa0c0009000203aaaaaaaaaaaa0c0009000200aaaaaaaaaaaa06000800a1aa00000c0009000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) 14.653098232s ago: executing program 33 (id=21): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@gettaction={0x1dc, 0x32, 0x200, 0x70bd27, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc31}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3c1}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x791}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2000400}}]}, @action_gd=@TCA_ACT_TAB={0x94, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd828}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x79}}, {0x14, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3ce4}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7ff}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6e}}]}]}, 0x1dc}}, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r3 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x41ff7484, 0x0}, {0x2, 0x0, 0x100d5ba, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x10d2, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x40005, 0x0}]}) (async, rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (rerun: 64) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x11) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0x69, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000340)={0x28, 0x5, r9, 0x0, &(0x7f00000003c0)='a', 0x1, 0x100000001}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r9, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) (async, rerun: 32) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r9, 0x0, &(0x7f0000000a80)="ee661d8d", 0x4, 0x5}) (async, rerun: 32) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r9, 0x0, &(0x7f0000000840)="fc", 0x1, 0x80000000000}) (async) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r9, 0x0, &(0x7f0000000240)='@', 0x1, 0x80000000}) (async, rerun: 32) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000180)={0x18, r9, 0x9, 0xfffffffb}) (rerun: 32) 1.000102535s ago: executing program 4 (id=400): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd7, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x1d, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001b00)={&(0x7f0000000380)={0x1748, r1, 0x700, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_SOPASS={0x69, 0x3, "41b7f28c334d808911f9bfe7949260c618d82b6a4e65c6c6548faf13fe552e116756d3231e936ed2f24b01bc058c9f7269c1c5a62ac3a97bab0ca3b9722169bd4dd2ab416ef9277f19eae0c0c036aa2cf1b5cbee807cee6cfe8dba3402e3aa138f1bfa76f1"}, @ETHTOOL_A_WOL_SOPASS={0x96, 0x3, "d5abdc7addb08d467f7c69729f80b92783ff0d6e8dedcf52a5702cac4d01440b0346298a03a1a51f34c80a8c6b4c30927df4bc625f29986074baa0e2cb795aa31f0b038193a98f5619c09cf3b3d1efcf217e376e2fd616bf7b2ba6c7180c17bed98fc62853366e87e498c8d7d9c33a540ec6f9ed531a079beb9df915e827c9679efd9be664e7a6b843de2404aee810248dcd"}, @ETHTOOL_A_WOL_MODES={0xc0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x87, 0x5, "ce8b42f8a897f2841734fd986553c4af86149b237418b8528755747feba84536c52bcd77853d222a816a94a4cd00d4f3fbc388c226c0c41dc830735bf7dfec7b35387eebee07076f4398ccbaf1f93ed028ffc1a0b5d8770183276aed8c69d62edd58f2f0a11b72b5aae2ad228efcff2072c858fb1b1101d05685dda5c39461031a3ec9"}, @ETHTOOL_A_BITSET_MASK={0x34, 0x5, "c1ca1bc16a54440c9fb01a4c9b7a650c2e0f8534b26075f077b1dc202f74a0c9073aa779ff6bdbac3d373370b275cda6"}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_WOL_MODES={0x29c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xff}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x42, 0x5, "19ef0bc884ef5a730157798a8fcc9931e2d42980a549014bc79941a75f4b34082692194509267e8fdb43b39963e5d7cdb5908e92cf9479f03beaf36299e8"}, @ETHTOOL_A_BITSET_MASK={0xca, 0x5, "5c95805b299367de585846a878fc4744647d8ca35610d1dda9d984ad7e2d8c50b110ba609c6d096249404318f6b83bf4a3ad81a0b41ac7e3bc4a04f5b21b938e44baa4fcd7168d70c8ee9e6b6abf24ad96ead5825c68e331ee0e9dc602d84d6b8bb89bfa0d5bb1103820c4502233dc645c753f975532584adc9755a2f0f01a1fffa606c5465e52488336518193ea3c54f6810b537b1f143119402b99b20b9d7674107b1d64b950ad76b03006786c3420b53d46deead935e8d67ef6376564984de7b57ddf7cbc"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x6a, 0x5, "e258ac0d7bf199b161c02456606afb95b9bbedbe5bf01ecc60d39ea23da1ec7eed73b85289a47bf65ee08f3985d9c6818fe2f3ebefa97445a6a5e9f6c69d06e7fda9c1fccbd3875d252495da2805db413fd7712db3a0ecd585d319eef55fd6c92bec5e2c7d66"}, @ETHTOOL_A_BITSET_MASK={0xe3, 0x5, "9c3178611704caa516561707e164c1f5dfbde323e57d57e5f55c2b81d9dd89cbac7bfda8009605d2004d2d2b6e74710fded87b26ad2e26501035564d165b0a0bdd3bf8ff2552a21163e378fbc218c717b4d72529f9e6e297057a1dd5240115434fd5fc350195edf6173c278f5d1697cac57fbcfbe5e366ee5dacd1925e76528aa23d237ef8f5a24111d6841b263054496278e93adad2023a308d51a84efe31590be24201737dc976358a28ab12d4e646c96ff5e2d95de681094c076a39464c241a92fec36f976c236fc5c7b6530fcf32a5a2ae9fbfa8d1ffb37399cfb9a7fc"}, @ETHTOOL_A_BITSET_MASK={0x1d, 0x5, "df7eeb7c701d88a8ecbdd78187510f4a656a8a72bcc76b6461"}]}, @ETHTOOL_A_WOL_MODES={0x1254, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x12c, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xae}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '\'#!+/$\x7f):(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{*^'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x50a59490}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ',}\',}-)\xa4$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'H*\x1c&^,\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-Y[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':\xff.\\}\\\x87\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff00}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '-[(\xa0}-/}%0n:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '$+)-\xb9[@#((!&\\%+^(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "df43e6d151b1eb4fd817772aa7316d8c3b2ecac33d228404c034532f130c8d375ff668b1b82d1182fbc26e8b261ee76c3745c88d72a3ca58f09768eccd4dd23fa876525604c331b2af713939ad8113307a39f25279d7b58f3a5fec9a938b9db193e0f9c3511e33fa7bec44d271812f1ff68725278a8fb0c443dc834167ed481d090dc0d02ee9f77850118a78e2624627946d0abd8a74f53e29426ec03cf66acaf43c62f393fa21e6775b6e1977eb793a1462f196d59edc5b82f504e206ae206bc974d239f999f03ff404d9d3fc0abf457ca40cc7a6495d1f9f53b5c70a82ac0020562771c37f4499d7c2632ca91c505631870e209394e1e9847d9b6c46844294a990f2d05b761e5981530c0391ab15e87b9bb1a310e0d8fbabd4e1957132578ffad654532a2acc1fa889ace066074bae5e484933cc5aed9bd044e78d0d330ff861311ac592e2fa459d866735ae25f13b52778ed3b402f3fa2aa8c060c5f7bccf7d74ffe04c56ecd70e832b2eb8d508babc5e171e88ccafbd22bbee4827dff5065018d7592d1bc9f41d5f772b70f7f600c68e12d08e48c9af0a8d5d8a36a93c663a68fc6502fc25ac3e05fe77d69c7a015f4e030e6ac60aa9c9330067ef51336a7ebfffc2fa9ea6ac7019a6aff509161c07ca3350bd85519fbf75bd68e10e7660f1be8f55620ab97a5e713403dc7ff593e45058fde04c0e13fd0ebede7dca7174a4e1fa67480c3de921f1b25bf32c52c18e7454ec19fc4f2b9825fc8f450f6325919d39b665c98cd42f09e5ef038db9b1b3fd5e70f4ce3e051862eaed321db787b568998a5b93ce408294df9650cd647e014bcf30d36ed86ce512708164e866d07f3849e0859f51cc12a1d368923284f7fd47373c03d05aad0c61b23f3a460d68b1250fd04c9a4fab80904615670f4c2c4b19a549fdf874ba8c864b457843379e7719e41693c0fa792144c70b0c4ad9b79f2cba753cb88c600c2aa09103744e0de25911542d9ec086950e0572e81f702af2a4e78952ab63e989f35b0d9c3e261f29c89b6239b4fea1b149eea0ca27360acdfc7b1ac95748e2bdcc3170f9474aeacf4644ecf70232866f6b2735c9f60586d69578d0062467c0de26d3b80913971c3561ae4d860a3c442f72f8f99a0554dfc99d64e0ffc3e82c27e5d0ef71b08dd908da6f22ef396816c87c8e93098373e90ec3892c1e3d7c53bd1e00251b92610d0ff41c2aa6f1c759c0f115012d7ad1e26b31db59c05d9afda0f336459be9c27ece519b6266cff00237b841194686f56bb1fa58db2a39351fef671e54497607ae5e66de382cf73d1241f3bbfa6b697f891605ec981986bb2422e2a48c03c819562c9e0d06cb29909ae3375958660c2f0a6cf9779a21dd5ce34184562d52de25c142c9fe15a51c9f8049011ecb05923eedad3b982aaa0364082f0ed42549078d7073ca627e17ef0486e8bb44080d7349a938d255afb202abfbba6fd21787fd608446d557726eacd1d7d984d5c8c11f2f9ee769b26cd3d7a9fbb9eddad9081065469e59f3c6eab93e469d5ce8ad6f6643712a60d84f6efe4d6525875a0b5e7bf717cb092bd1385c269d446f79f4516d53f08263e03527f51d5f7ebd815b1190a0627fa5e741224c31ca0785e23ad2549b767c2dc18f30a5d5086421a67436fd0daad44a84b46ef879b8b3cefd6e21adf509fa2d96b1a604642324b1751fe2d13afec25fe672386b53cdc6f64a36bf87c0169e63da10d726d79cfb9677949e7475e02f7cc9c3357188dc74889abe3c9e0a71dae713fc0d19d62c079547960f3c31b50692522beaa47c864cf619e06f23bf2c9d2d3f9e36a34f10b0884c477d5b812b034a27824d73884109c0e2bb36f82753292e5fa91dd1965aca34927206e73f596782cbeb20d1795a44a78ea5013e1b33421973bc1e329cfb13cecde1f5b95113b86e4cd051a085bcd14cbd24016302cead43d931f5a01c04c318288307e88a895130b1664063394cd176b61c6066706900e485e7050b7859afd77554ea5f2ea351eb4fb1c899bb9e85f3b5aff7aae71c6d5d77a3f1eb4c37d6b4f4190182ba04fd16583ca36d5d25153ab3a299b4b4a6309eb9a6d0d269f3c1fc3be51f82058e6839c641e0c7290e543dafbd1a93e027db8857f4fd6a90784393dce434444d69d7b91f3ff34b2b1720c28fb2008ec647bbf22b6cb2a6c99e68f0831da9897aebcbaa340bc8c73e33480ae0b354ac65ed257be44960a957cac660ed34995bba6a1c274304c5bd52df5be900980445d4ed94ffac76ef85daa86918ccd7ad8eaf8efda4988bab22b984b757d7db553e6389e60d1dffd3fd9c3f2ca364452162e748a405b647ddc778f68999e0e9a3378771f3049c853eea5ff339ac4fbe2dc6ac0fc3f3aa70a0435216b69885e5bb2dd05804293abeaf15ffe025dffe132befc2b225982fb0ff188890a650a8458655723d68de4c7f32c0cddce29695c4333a17344c17dfdcf2019c7079a4370d3abaf881bb2ac9f7e6b5d08e2ffbb1e6ba283db471603cc6ed772344464102fd912a4e47976d6ac644586e50c995e272843b8d88a7a16563d706738f94b22642a46a9f184fa5bb0b319f6339c9bf9e7f27ca8c9569ee3e19bae886cc52601f2ad3a4cc94522f23511e9ce95974a27f0fd536fada7fe72b971b6b0c269e83f93cfa6cbb4dbc3d43cf2efb326a0d039f5436d66a67d30d906b735c3ea6ff0e5f9a3d49b5117603aed4197321432b1b0be7d1e290eef4beefbd57b845a39ac75150fd49f9ef2937b0c9a33c3f65e4837a7a9f0c4188c750fa8c5f34d2d02de204ff772dbd6ff6feca25501c1d4ca9ced3b02e11dec46d1a458ce36c0c9e5298b3f52ba4a31718d2fee5e76b5b4c47eff8216c685d496d0bdb9290a2545581e4aaa990a245ab12e9032eb139aefaf93a5a03804c2e4c5df0aa0d33a27d838a7d387c2638e1bd266147353540f9348ccf9846c4aaf8085215e69bd25badb877797cb81207f1681ec1e33c844b60ca5f2e44536f200ea44d726f179d4ab4091c0455809d9b7eb6cdaa53de3de40a741721a0a3c5745886f8f0480b966c2e7a74edb7f3009cc48fe2b857f015cb260407ed42f9f6f7b3d238ba0774916c537d2c2bb3102da6d025eea035df433160aebc679ffedfadd8f793c1c25ceb5cc0f6bcbc5fcfb903952796e450cd8afc74fe74912726615f766174ad46a8ecc912a6e68ab877e8b582d1c80a9f8476425f464ba257e1bcd7b3670bc3429f29398111e4ccd5b34f3cc16273a8ca8ba88f8379357ff8d69852556a44419903473aca544aa280e159f289972aaa6fddce007e601a1f426bb63d6c2ed5063d3a37d2b073d9c3dcd201bc2cb4321b0ccd51a2e9ddb3285f36e150bc63c85b88d0b3a790a70b612cd67ebd67a512b838b3700b9a7d9ffe76d9bb2a242557330e2be4b1749e273e64450d658da72cb3fb7aaaf9a6f839126ddebd8d322d7e21d111d99b9778652617169dc38c06015c0b26117bc6c720ac3b88462780500d1a37504a4f57ff31b6a39a6b9bfa9434d790f1571dc7cefa5b1095a5236a69342750c429c8a2730cd32c656f1770ed642381601c0e0c3dc1f171895a79a47690b8c8f63cbbe6fa0e9cf3542ab5c6dc9fbb8ce5db689f66955e4774c090c589b26e3429c07a5fb15c397f6f0455c24b690e67ea1f648773231e52aef238b7f7b170365349db9fd1f8ce156d105a558400d4eb25a6921ff862d1e5493b5f0699c00ead9c70a5f86bc25ed2f0d926fbce4ccb893a0961a189e26665ac23ac09c595bcc66b55ed8f25fad77a9d129de84a879f68446cdee6006ebf8428ef066ddfbc134eced558b21d71b5cb80e6aff550ef615d565d3a65f6a7a97a8636ac67da787174a870c585e3cb752cd924c4dd4efb61f9753554c36e21d259680fc322f2857de2265e86983bbcb14f103269b34c218c18659050cda9604fcd235d23e9a8a86c9812cc6f8b396975029e2f2a9e9317c6970b279d6aa261ae9bd20202ad5a9d611777429c5f5b22f42e007756b75c6d033bbf263478d4438460e1ce7bb637f8afb753b3320a6efddc953b637509800251f4ad95a822ea7350afd144c3c160474373145f27a403c537853585fcc17a418a9a562cf31e2deaba356a432e914010e6ced075d4b6ec2b6248be9fad44346f0599946cd44eaa453d4331db7ecbbd50c4d9a0161d51bfc44b9185e51bbaa0fbc8e09f71bf356546d1ecadd0a212bdab783110fdede27158d480f8449e517992b024e4b40b4324e1424ee80448ea3581098cde26a9f3ebad851766ce9c6a4ea680f78d20047ed14e29900d9e6497316df29ef20027c832d078656ae7ea29eb05b393a98e9337abe5a5fe48c6b07aacae4f16e25b7f9c9c590548076dfc97e1322d536e95096a59b7328ad324e2bfec84bec86587c8a884a86feacff83e681b5a790fd361c070cc5f6f65f0b408ec9a38ca4730697ca3308766a5d9870b9f601bd4284f7dfe8e3a620cac45c64b8574e876b45bd08ca47b676a2939c00579fa4f77d0ee35fc48d90a7e103bf656a4f5a4a659e36f0ca547795aaa538b3003cc913ce980333515b490a994cce5ecb47bafa9655044692af7c418c2c5d4cc715e8935b23b719e76c4d8bd80a3a44e63e736581c7ad244303efb5cdf6085ec9371d4ea4df8bc0ca962aa31ae066c3b7c2761f44fcce5d222f08719a976bc94b58792cb49fb2c661e70dc4aff9c164fc4a15c7a5c036e13760320127e220ca4ff760da8c44b371feebe6eb26e58cb8fef1c5e1554b1f42d44260a0743bc3dd72fe0799c2358b5557208d4759348f3e2e71088f28cdc42edf9da41610e951a539c0361d0d66fcdd31f04df2339a7dc35663dc2324b6aebdd5ab02e900d249c7da7f3782335da904860e700c74bf7b4773c72aa06cb84213f6a45b6a0b974b100d7a7469953ef8c91f61897282cef164c904b0f045148a7d739dbec16de1ac9a666f6054aff9144639714b1f98305f3650d81455806270f278aa226207c1f50e982d3edd0ed884f20ef757b3e8dbadf51a9e435ad8a64150ecb6dad3bb7942227dc78f04294c08c1a3868c174c77a19ce5161ffc3db46e90ed876445d42433a68c95752815f110eb13757456ffb836bf6d9817f9986eaf42b0a9b4386193cf536de969d56a274b572ff93509b14e221d5099dd3178e247f7e8842813ae07a321dcdedc41b9b1b6f7998de7f40aad54695ff4a5277b331ef6a6f780a282aa6a47316996b15a1e174563611e3b96432065b6a2bb14089bda338cd0857eb9743361d9397ecb9d92d44910ccab51b906d7d9d9b10718ecabc6b2fc27e7f3c02b4fbb6adac1f3853cf4736119be8985ca5654f1a4e6dbaa5cf1ee9dfff7eda33430b6d605cf915473b2457019520375c7276f5de277946b35c95f46768d0259218ebe31d3b201f2dbd9a2bc25c1741089d81d7a28c215693d92ab611fc8183399b468a2ddb96b1fe4ce560d2b034c500e7919e50ffb06efc32563ef033b425d0806ffe68ae6bcd9243f79e8db4cdf28d8678725d408bec238847d76287acfa11d176d75c9b681c13bb8b9eef658d80d6f6caf6bf2a67211f0a2ee57db9f1fe63b67a450c0cf217c3ea50de28de2a7880f536938f75aec0c6950fb87d41192776a20a353ce3c8d5993e121541a17eeb338b261d2e1b8a79961c1a3d6b4e2cc4b1abc119a0fce047fe98908a34a1a1b8e4dee961f46fdf6ba23faca1e7402cf6bcf8230d429372a29435187ed1e0c7cad2e7ba47e00a"}, @ETHTOOL_A_BITSET_VALUE={0x93, 0x4, "9db736daac0d724d9c25c0cd353fed8b0dff90fc14a9657c2e2d3f7268d595d306af72f65bd143e7cda8d621e7d83dc1cbc3f604892d01540c72339dd90e747002f9d1b0e551d013713dd09df74b5245b46b7242e0afd219e29e5cf632a851c20b3af08587afae54ea4e831fadafa37f4024fb73742a9fc8385b5f4363fcc9631433c2cfc3105f934d11acc7332ebc"}, @ETHTOOL_A_BITSET_MASK={0x85, 0x5, "cead54c78ba67902b8165a7a6c6444b5752c152a2ccc50347c080f4bcddc2d0a987713d20ffb57f919bc9b58c2db5e6665a8f30af33725940596b31cea8ed699f841c064f3749479ee02ff023ecacc5f885100fa6085804c1796e3b3cbfa9028c3538d39f4d3fc60376ee58728cb5f0e08054ddfcdc43cf2def9885a53d3c74829"}]}, @ETHTOOL_A_WOL_SOPASS={0x73, 0x3, "b00a8c3c93b10f5f13284e659342af0ca76fee47ce9bc1215e363a627bf106c11cc14a9e2948949b61b005887ad8fe66760523312d225b46af3bea8384f98c40baae8491045bcb93ef5403bd8ab4ccd3141e237cf922088650e00ca416f9d765b57bc1a8350fbbb5cda3ce0d5d9048"}]}, 0x1748}, 0x1, 0x0, 0x0, 0x8000000}, 0x40000c0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001b80)={{0x1, 0x1, 0x18, r0, {0x9, 0x5}}, './file0\x00'}) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001c00), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x24, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0xc4) getsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000001d00), &(0x7f0000001d40)=0x4) (async) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x54, r4, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x800}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x240008c5) (async) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000001f00), r0) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001f40)) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000002040)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x50, r5, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x28}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async) sendmsg$nl_route_sched(r3, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)=@deltaction={0x50, 0x31, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) close_range(r0, r3, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000021c0)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'}) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002240), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x14, r9, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x50) mount_setattr(0xffffffffffffff9c, &(0x7f0000002340)='./file0\x00', 0x1800, &(0x7f0000002380)={0x1, 0x86, 0x9f1ac552407cc523, {r8}}, 0x20) (async) timerfd_create(0x5, 0x80000) (async) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) r10 = openat$cgroup_pressure(r8, &(0x7f00000024c0)='io.pressure\x00', 0x2, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)=@delchain={0x44, 0x65, 0x20, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0x8, 0x5}, {0xb, 0xf24a26c9ec52843f}}, [@TCA_RATE={0x6, 0x5, {0x93, 0xe}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x3e, 0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x14, r9, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x80) (async) ioctl$F2FS_IOC_COMPRESS_FILE(r10, 0xf518, 0x0) getsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000002740), &(0x7f0000002780)=0x4) writev(r7, &(0x7f00000029c0)=[{&(0x7f00000027c0)="2d1d5b57b0164bd2c4106f850f5870458d919656aaffa37796fa0db75b5dee20f245df6e09a0d1a2e606da86e2f93948d02009e8c22cd4887e9216a5ce2ef67bcdb0f8f02ef4e860c675af55740b3797bc9eca6fb8e3c12bb0f1b9e26baf4e1f6c0d506d83fc83ab7aa8eab5a03598e36ffbcf0f39fc98ed7c7bcbad575bfdd58e34cddd9c08a20d1d835598c81c0a5329cc9b337414f764013177d5cf6009b5fd0f7cced4242b2f7dc6da5816869413f4b50503f3c63601d0d978703353b0d1", 0xc0}, {&(0x7f0000002880)="48303bd2a5db99e95e4bc17e81394bc87d43d7d4363a0761ed4c54942047dedda8a331f87523b6150df86a0ed0a509d0a4f3a3ae79429c66d4a8a3c307", 0x3d}, {&(0x7f00000028c0)="bd8889e465ad7679104aa6c4b2d00f2a13f2a5dade237e53e2ed8efa83f65ee11d9051", 0x23}, {&(0x7f0000002900)="5e5dcb44f720993727a2be44bfbe4cf3c0d7c85632c4ea6365a1eff058f3f4368316712a155ffffe9ef2b3c99b6251d6d85234d320d4ad6e82e06e85df0f8306bbc01189536d0508a6da5695aee18e5dceb713d25d04a44368c57e6b44842537a6deb1662f1a201868aa17060188747f7937c1845ea961e44199bb", 0x7b}, {&(0x7f0000002980)="ead42d4a8eb59ed5bc6d03573e8dda8dbe45dec8ac027cffbf31b08fc1db3685a7aa4c5122f1386ad4cfbe3eee", 0x2d}], 0x5) ioctl$AUTOFS_DEV_IOCTL_FAIL(r8, 0xc0189377, &(0x7f0000002a40)={{0x1, 0x1, 0x18, r10, {0x2d, 0x7ff}}, './file0\x00'}) sendmsg$AUDIT_USER(r11, &(0x7f0000002c40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002ac0)={0x10c, 0x3ed, 0x300, 0x70bd2c, 0x25dfdbfd, "a7055104e9d2427ce71f2b598b141b3b5041c139072828cbf10e9ee186b5becaa956ef8b413f40a6bf8a75552ab206f1b6c29fcdc65ba68a22f5a9a416d68d1d5af6a3c9146d2761455e618c4465613e05d88a6d2856a67e14721b6e77735f4ae815e4f76651c79538549a0c0ca5d5c44c5087ab3fcd03b74e4cace05caae8d01058d80bef614fea2fcfabccbcf56600afb0529ffac9dddb8e0fb53d04bd41c9bd70db3b11850767309368e29b5f6eba01c0c8bd7423012375faa87eee0df8099d9cdaf7ed01bbb3bf82835554b161a74b19bda321db2cf1dea8fdc67ce166e4f9cd435ad9a0d30d604be87b0fc079cc2e9bcaeba7a68e90fdd11e", ["", ""]}, 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r11, 0xc0206434, &(0x7f0000002c80)={0x6483, 0x0, 0x1}) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d00)={0x44, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffff8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40810) 999.891738ms ago: executing program 2 (id=401): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)={@val={0x70}, @void, @eth={@broadcast, @multicast, @val={@void, {0x8100, 0x4, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x85865}}}}}}}, 0x42) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='nilfs2\x00', 0x8080, &(0x7f0000000100)='discard') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="03020a00006b0000004005b6b70108000300", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4008814) 998.297409ms ago: executing program 4 (id=402): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, 0x0, 0x7, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ff81000000000000000000be7ba9b5"], 0x1c}}, 0x40000) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x80, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x50, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_TTL={0x5, 0x8, 0x6}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x5}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) recvmmsg$unix(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2d000000010001", 0x7) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r3) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x20, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfdc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) 948.464027ms ago: executing program 4 (id=405): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x98) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x101001, 0x68) read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000020c0)={0x50, 0x0, r2, {0x7, 0x2b, 0x81, 0x2400000, 0xcdbd, 0x5, 0xc, 0x1000, 0x0, 0x0, 0x40, 0xfffffffb}}, 0x50) poll(&(0x7f0000002140)=[{r1, 0x1000}, {r0, 0x30}, {r0}, {r1, 0x4004}], 0x4, 0x8) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f00000021c0)={0x6, &(0x7f0000002180)=[{0x6, 0x1, 0x3}, {0x1ff, 0x3, 0x7f, 0x400}, {0xfff7, 0x7, 0x3, 0x4}, {0xa3, 0x3, 0xd3, 0x6}, {0x3, 0x0, 0x85, 0x7}, {0x0, 0x1, 0x4, 0x7477}]}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000002200)={0x44, @tick=0x7, 0xff, {0xd, 0x4}, 0x7, 0x1, 0x8}) (async) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000002240)='./file0\x00', &(0x7f0000002280)={0x8000, 0x2, 0x21}, 0x18) (async) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4008af75, &(0x7f00000022c0)={0x2, 0x2}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000002300), 0x103000, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000002340)={0xff, 0x0, 0x4, 0xe, 0x0, 0x4}) (async) close_range(r3, r0, 0x0) r5 = syz_open_dev$hiddev(&(0x7f00000023c0), 0x7fffffff, 0x84400) ioctl$HIDIOCGCOLLECTIONINFO(r5, 0xc0104811, &(0x7f0000002400)={0x48ae, 0x1, 0xffffffff, 0x40}) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000002440)={0x1, 0x1c}) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000024c0), 0x4101) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f0000002500)={0x71d, 0x2cc, 0x1, 'queue0\x00', 0x1}) (async) ioctl$HIDIOCGCOLLECTIONINFO(r5, 0xc0104811, &(0x7f00000025c0)={0xd, 0x5, 0x8, 0x3ff}) write$P9_RSYMLINK(r1, &(0x7f0000002600)={0x14, 0x11, 0x1, {0x1, 0x2, 0x8}}, 0x14) ioctl$EXT4_IOC_GETFSUUID(r5, 0x8008662c, &(0x7f0000002640)) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f0000002680)={{0xe0, 0x9}, 0x0, 0xfffffffc, 0x1, {0x5, 0xa}, 0x3, 0xf215f911}) (async) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000027c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x10, 0x3f2, 0x200, 0x70bd2c, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4000894) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000002800)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000002840)={0x27, r7, 0x1, 0x1, 0x2, 0xde, "e592f11b4e234757ed1332195ffec9dd7c5d2cfa388a3bfb642063a86a00e472c5ed6492b0a38c29e2165073aae652a8897ee59367ca9307d1ff5907912859", 0x2c}, 0x60) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f00000028c0)=0x8) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000002900)={{0x0, 0xffffffff00000001, 0x5, 0x6b, 0x7, 0x8fbb, 0x552, 0x7fffffff, 0x3, 0x2, 0xffff, 0x7, 0x3, 0x58a, 0xda}}) (async) socket(0x2c, 0x3, 0x3) r8 = syz_open_dev$ndb(&(0x7f0000003900), 0x0, 0xa4001) ioctl$BLKREPORTZONE(r8, 0xc0101282, &(0x7f0000003940)={0x2, 0x9, 0x0, [{0x7, 0x7a, 0x400, 0x5, 0x6, 0xa, 0xbe, '\x00', 0x8}, {0x1, 0x2, 0x6, 0x80, 0x97, 0x40, 0xc, '\x00', 0x5}, {0x9, 0x0, 0xfff, 0x80, 0x4, 0x7, 0x3, '\x00', 0xa}, {0x7, 0x0, 0x6, 0x4, 0x0, 0x0, 0xb, '\x00', 0x200}, {0xf5, 0x7fff, 0x0, 0x4, 0x81, 0x9, 0x8, '\x00', 0x10}, {0x1, 0x8a6, 0x7f, 0x4, 0x1, 0x0, 0xff, '\x00', 0x1000}, {0x7fffffffffffffff, 0x5, 0x9, 0x3, 0x4, 0x4, 0x7, '\x00', 0x3}, {0x1000, 0x4, 0x9, 0x6, 0x3, 0xc2, 0x6, '\x00', 0x401}, {0x2, 0x3ff, 0x719, 0x2, 0x81, 0x8, 0x2, '\x00', 0x66}]}) 890.200098ms ago: executing program 4 (id=406): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) copy_file_range(r0, 0x0, r2, 0x0, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'vlan0\x00'}) (async) syz_io_uring_setup(0x8003285, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="a0000000190010044dbd7000ffdbdf251d010400150003000200d201575b4f0300000015000100000000600103000089b697c80003000000006007010000bfd0bed961e5aa9f040000001500030002000000060200002314081c78d9617e020000000c000b00000000a0030000801500030001000020060200002cf15aa3e8c252760200000005000d000800"/160], 0xa0}, 0x1, 0x0, 0x0, 0x40045}, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', 0x0, 0x2002002, 0x0) r3 = socket$inet(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) (async, rerun: 32) sendto$inet(r3, &(0x7f0000000280)="9a9c", 0x2, 0x24000080, &(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) (async) r6 = socket(0x10, 0x803, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f0000000340)) (async) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r5, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xe, &(0x7f0000000880)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffe, 0xc}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r14, 0x2000000, 0xe, 0x0, &(0x7f0000000200)='\x00'/14, 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 889.358194ms ago: executing program 2 (id=407): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x2040, 0x9) read$nci(0xffffffffffffffff, &(0x7f0000000680)=""/88, 0x58) 887.893583ms ago: executing program 4 (id=414): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r1 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 32) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="01000002"], 0xc8) (async, rerun: 32) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000040)=0x40fff, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x55, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x5e, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000500)={0x82, r3, 0x1}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000200)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x130f}, 0x94) (rerun: 32) 819.937788ms ago: executing program 2 (id=408): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000380)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x5, @private1, 0x8}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000080)="c88cb7387000660bc21aee4150deda86c0e52d1c", 0x14}], 0x1}}], 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'ip_vti0\x00', 0x20}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) 817.129711ms ago: executing program 2 (id=410): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$xdp(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)="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", 0x1d8}], 0x1}, 0x4000000) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/178, 0xb2}], 0x1}, 0x2000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0xff, 0x4) 750.182551ms ago: executing program 4 (id=411): bpf$PROG_LOAD(0x5, 0x0, 0x3f) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000540)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x95}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x8, &(0x7f00000001c0)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0x7, 0x2}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r5 = socket(0x400000000011, 0x2, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000340)=[{r5, 0x2004}], 0x1, 0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x41624800ab11328a, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYRES16=r5, @ANYRES32=r1, @ANYRESOCT=r6, @ANYRES8=r1], 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0xffffffffffffffce, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0xc, 0xfff1}, {0xffe0, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10001, "2d09b285079682476a200bf6e2927fef"}}}]}, 0x48}}, 0x0) setxattr$incfs_id(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)={'0000000000000000000000000000000', 0x33}, 0x20, 0x0) 749.04653ms ago: executing program 2 (id=412): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = syz_open_dev$media(&(0x7f00000006c0), 0x200400a, 0x1a1b02) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x7c80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 549.056796ms ago: executing program 2 (id=413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e0308004d6b71ef2885632bfc1f709c06"], 0xffdd) syz_usb_connect(0x0, 0x6f9, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b40)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x87, 0x3, 0x8, 0x8, 0xf7}, 0x28, &(0x7f00000000c0)={0x5, 0xf, 0x28, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x7, 0xd, 0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x7, 0xf000, 0xe53, [0x7e00, 0xf, 0x30, 0x0]}]}, 0x5, [{0x4d, &(0x7f0000000140)=@string={0x4d, 0x3, "0e2e7ca4d678061d37286b963d53295a6c3f911e8bec7755786c4a4f3b78e916a8658c797595e85fcaa0b66619451495cc74a13f8d37d544044894420c3cb112118d2c4aa2b4e9381152b6"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x340a}}, {0x86, &(0x7f0000000200)=@string={0x86, 0x3, "6b487dfba207fec3ceb0d4c85a622c3b8746893870cf3577cac30d078faa0a14ece38a7177fa77ee5c57866ab9a9ee15ceddc25d1228bfe0dea3666576de01a4eff8d81d5c4f9ea764bc56ea2f858a4c369de01028fcc31f5d4077d7a9cf4c82eaae16aaaa5db557eba4862f4743cf1dbaff8ec803a53b36c8971430856e6d94bd6c1af0"}}, {0x86, &(0x7f00000002c0)=@string={0x86, 0x3, "e25d41f138d76b05b700054998a1c182996abce47a234e0f799b3b86c06f78c0ff69b5b702af503d0814ab98ddb0ae842d7ce45f858322aff32aa3b878d6356aaab9c32720963c2cb37182d734df5cec3287814ff1217ffc5c8b7b0499a52b683f5aa28251cd72cc84f11f8203ea204156df62d0d47be713fbc1c6c417a4b3d65aa13bed"}}, {0x7e, &(0x7f0000000ac0)=@string={0x7e, 0x3, "b2d665eefdc40ab5440645266871464a67109728191e52c6b81280c66b787eddf0dc04c1d0a42d79529819c2299fed030a99f20edc39eab80eb2c56cdde48a8abf7bf8e07f7887c8d1f5fdb0944dce09ee58399514e74f482261b51ba36f061992ba1b97b361c179b33a5e4be735f58d047adfa6882cc583041ad5f5"}}]}) 489.049942ms ago: executing program 1 (id=417): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_vmscan_write_folio\x00', r3, 0x0, 0x100000001}, 0x18) (async) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x7, 0x1c, 0x5, 0xfffffff7, 0x80000002, 0x800f6, 0x8000004]}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f00000001c0)={0xc4a, r3}) (async) r6 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xd) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r11}, &(0x7f0000000240), &(0x7f00000006c0)=r7}, 0x20) (async, rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r12, r9, 0x25, 0x2, @val=@tcx={@void, @value=r7}}, 0x1c) (rerun: 32) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) r13 = syz_open_dev$video(&(0x7f0000000140), 0x2, 0x58000) ioctl$VIDIOC_QUERYBUF_DMABUF(r13, 0xc0585609, &(0x7f0000000240)={0x5, 0x3, 0x4, 0x102000, 0xefd1, {}, {0x3, 0xc, 0xe5, 0xd, 0x10, 0x0, "b12c63fb"}, 0x5, 0x4, {}, 0x5, 0x0, r3}) (async) r14 = syz_open_pts(r0, 0x583280) (async) r15 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r15, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="cc0000000000000012"]) (async) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004000000080000000d00100000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r15}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="03000002", @ANYRES32=r5, @ANYBLOB="000000000000000085000000aa000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) ioctl$TCXONC(r14, 0x540a, 0x0) ioctl$TIOCNXCL(r6, 0x540d) (async) write$UHID_INPUT(r1, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d0381e007fc6e5539b0d430a8b089b3f383563030b90e0879b0a71cfe70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7da129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118062651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e09000000000000003934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadbac5c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 390.156838ms ago: executing program 5 (id=419): syz_emit_ethernet(0x86, &(0x7f0000000000)={@random="e7842a3e0090", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x4, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2f, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) recvfrom$ax25(0xffffffffffffffff, &(0x7f00000000c0)=""/32, 0x20, 0x40000001, &(0x7f0000000100)={{0x3, @default}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) 320.13034ms ago: executing program 5 (id=420): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a6970"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000800)={0x560, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_EXPRESSIONS={0x54c, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x40, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x428, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x418, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_EXPR={0x3e4, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x3d0, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x154, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfd, 0x1, "5e49cbac7b7005c7109b1a8ff1db78b81bc442097bbc7efa739d929f7dfb3858048058f820a674f1be2b498cdb114bdc0771dc4caf007866ea1796de52eb06eaa55f003fd7cc5ef202853db807aaaa7dca5337f4a029cf904a87900a84d37b0bd07b4f813e8608faf2ca39a2a291bc2940287dc98ec48cdaa50aed19f58ab4109221a05033205cce269b75f74b62f5dfac2e6fb0235507f021e568f1090b52f5a2d28a4d632d75beb1618be39de63224a7ec13111ac6f1ad1ef3d99c3d0e9ffadff17c1e83d9e963784ab4e1d6dfb31980ac6b10449d28f55ee9a430de4d0c1a1722dbb1de14610598613406ebc5db69c52b6ddc1438fe349e"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_IMMEDIATE_DATA={0x80, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x11, 0x1, "27a72f641a7052509b491a3cce"}]}, @NFTA_IMMEDIATE_DATA={0x1f0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa3, 0x1, "06c9ac699f5c7191fd9d8cc894908bfac1dbe52101f83184989cd1adca81480d7d444b74f3272c5d27ba2b23d428934bd867144e0fd1b127917dc14bd811d50f2362050626a218aaba4cba6dc1c39afed3a935a26115239da8817b2181035a71736e7427df6a1d373bf96c8628f72f0acb2011001f632601842adff8044eed946cd87ffee64b69588ac4c03ba93d0f9a132d524caac6fec8c2ce02ccd47d91"}, @NFTA_DATA_VALUE={0x32, 0x1, "0d37e760dd4ec04991c4d5996dd666df9dd42b4506414849a9d695f57f86be0b195bef025588edf410c70ed8061d"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xd7, 0x1, "87dd4aba3845b4e001b2fdcb8af2013dd68d3ea43817e476833bf5adffd6c4138f4b621737e5425a3c85850728ab0fc0c68b5cb3c7f794aef887da50ba0778f75ed4cd66d9d2083827c8081f4691f370aac3989efc33e16fd27906d65ce655e312a5bf97f4040b670900bfabb163d7ba7048ffb925c2eab05d50562af3a1ed913f46cfaede9fa5f9b0625ca4bf65171530d1aa956609996d552dcce3c7cacfe3a3973f7d531ab1a8a19f0f7518d5f902866d0d66c1652395dc5ed816a46ba82651f4341a811e1e2e508995556404236dd90edc"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x76}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xb}]}}}, {0xa8, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x98, 0x2, 0x0, 0x1, [@NFTA_BITWISE_MASK={0x8c, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x2f, 0x1, "997695ea9d62f764ccca130ce9091778168b0c7c70621f45415fb31eedfafe89437c9e3ec993c08750e4cf"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14d7dbde58fcaba7}]}}}]}]}, 0x560}, 0x1, 0x0, 0x0, 0x10}, 0x40080d0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0xb, [@float={0x10, 0x0, 0x0, 0x10, 0x4}, @volatile={0x7, 0x0, 0x0, 0x9, 0x1}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x4d, 0x0, 0x48, 0x3}, @restrict={0xd, 0x0, 0x0, 0xb, 0x3}, @struct={0x6, 0x2, 0x0, 0x4, 0x1, 0x101, [{0x5, 0x2, 0x8}, {0x3, 0x3, 0x3}]}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x2e, 0x2e, 0x61, 0x0, 0x61, 0x30]}}, &(0x7f0000000040)=""/56, 0x7b, 0x38, 0x1, 0x5}, 0x28) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0xb8}}, 0x0) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2008, &(0x7f00000007c0)) 319.71675ms ago: executing program 5 (id=421): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0xa, 0x40, 0xac5, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00', 0xc0, 0x8000, 0xc3, 0x621}}) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r7, &(0x7f0000000100)='=', 0x1, 0x4fed3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0401010000000000140003007369743000000000000000000000000008000a00", @ANYRES32=r8, @ANYBLOB="78bea70ed0224799e53e3465329d"], 0x3c}}, 0x0) 319.581918ms ago: executing program 1 (id=422): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='gadgetfs\x00', 0xc94, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31"], 0x15c}}, 0x0) 170.073714ms ago: executing program 1 (id=423): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x24, &(0x7f0000000040)=0x2, 0x4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000003"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8891}, 0x2000880) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11) (async) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r12, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) dup3(r6, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) 169.363534ms ago: executing program 1 (id=424): openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x450040, 0x0) (async) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x450040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20000080) socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x38, 0x0, 0xa0c, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x45}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x0, 0x3}, {0x8, 0x6}], "c00b4f7168984363"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) (async) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) socket(0x1, 0x2, 0x0) (async) r4 = socket(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 116.93243ms ago: executing program 5 (id=425): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000940)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000600)={0x3, 0x81, 0xf1eb}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = open(&(0x7f0000000480)='./file0\x00', 0x60142, 0x0) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f00000007c0)="ee74c8031171e8ce08bb3d9d72d30b5ef75505ccf4bb53287da1bc5d1f485f6084a0a7be2740fe7efddbe17630b4c857c7fd65dfe02172f4bda279c14d7e85e8d7d38164bc078b36b49f48a2a905544289a1380f2cf7e816e01feeca699a20c46904ca25b486a4f1988f9a01b246d5a9266ce05979952faddacdbe89b4fc39dd611c8fce241677792b9fb7c573faf6edb6b2552f1689fb8cdf5ad753423ee8903a10be5f19365f965625e6fa33a4c533252aa47f260b9370590bec6147158a396997d07b99925749974efa5a542475262620bdaaeb8987456f65e8fc62abdbb7374d5b28da02cd0f3ab72f6391ec98", 0xef, r5) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r4, &(0x7f00000000c0)=0x8800000, 0x6, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf2501000000000000000c410000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b1600000000000000000200000844000480180001b0080001006f7366000c000280080001400000000428c600207343e63dec872f4f000180080001006e6174001c00028008080003400000001408000240000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000aa5344aa4fec974f6a5aabd64b21caa23639c2e76dcc44b8a878c46a338ce526cd87ca2c7c2a19f072b78a29258e7cac293555b128e6230a8817972d1813f039e32653f0e275036a5f927a7aed3995fb7259ad20ffb8791a250ea7f19d4884c85c310321e85baf24ef66317ed33e9ee0437ad8704d99e55a32cf6935628f196c79487442545a921f20b483df16856fb1951cf49dbf6a07172f8ad5b173c6315a0b3eaf284a3d7c7f34c61d85d6fb15799940502c1294e107abc90c96ae87ee18ec5c6e4"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) (async) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x1}, 0x6) (async) mkdir(&(0x7f0000000140)='./file0\x00', 0x89) (async) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='iso9660\x00', 0x405, 0x0) (async) ioctl$sock_bt_hci(r3, 0x400448df, &(0x7f0000000240)) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) (async) r8 = syz_open_dev$sg(&(0x7f0000000340), 0x8, 0x12380) ioctl$SG_BLKTRACESTART(r8, 0x1274, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r9) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400000011000100"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x200140d0) (async) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) 116.75822ms ago: executing program 1 (id=426): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000001880)={0x1, 0x10000}, 0x8) close(r1) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x19e, 0x80000) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000080)=0xf4240) ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f0000000040)=0x3) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f00000000c0)=ANY=[@ANYBLOB='\b']) ioctl$SIOCGETSGCNT_IN6(r0, 0x5411, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) 116.472522ms ago: executing program 5 (id=427): setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @broadcast}, 0x10) socket(0x1, 0x2, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x10, 0x0, &(0x7f0000000080)) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)=0x800000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x286ac6390fc5d783}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x4, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c8c3}, 0x8010) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0x0, 0x343}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 49.929915ms ago: executing program 1 (id=428): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) recvfrom$inet6(r0, &(0x7f0000000240)=""/169, 0xa9, 0x40010002, 0x0, 0x0) pipe(&(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r2 = socket(0xa, 0x5, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x5a930, 0x11800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf3, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xfffd}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020000000000000008400000008000000200100"/56], 0x38, 0x4855}, 0x24000052) recvmmsg$unix(r2, &(0x7f0000002b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002c80)=""/4105, 0x1009}], 0x1}}], 0x1, 0x40010040, 0x0) socket$inet6(0xa, 0xa, 0x1) 0s ago: executing program 5 (id=429): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) exit(0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x204001, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:29214' (ED25519) to the list of known hosts. [ 39.165527][ T40] audit: type=1400 audit(1761414167.579:62): avc: denied { name_bind } for pid=5843 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.182118][ T40] audit: type=1400 audit(1761414167.589:63): avc: denied { write } for pid=5844 comm="sh" path="pipe:[2034]" dev="pipefs" ino=2034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.193117][ T40] audit: type=1400 audit(1761414167.599:64): avc: denied { execute } for pid=5844 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.202324][ T40] audit: type=1400 audit(1761414167.599:65): avc: denied { execute_no_trans } for pid=5844 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.144925][ T40] audit: type=1400 audit(1761414169.559:66): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.154639][ T5844] cgroup: Unknown subsys name 'net' [ 41.296616][ T5844] cgroup: Unknown subsys name 'cpuset' [ 41.300421][ T5844] cgroup: Unknown subsys name 'rlimit' [ 41.495300][ T5849] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.169275][ T5844] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.867723][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 44.867737][ T40] audit: type=1400 audit(1761414173.279:80): avc: denied { execmem } for pid=5921 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.122271][ T40] audit: type=1400 audit(1761414173.529:81): avc: denied { create } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.129752][ T40] audit: type=1400 audit(1761414173.529:82): avc: denied { read write } for pid=5926 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.136731][ T40] audit: type=1400 audit(1761414173.529:83): avc: denied { open } for pid=5926 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.143166][ T40] audit: type=1400 audit(1761414173.539:84): avc: denied { ioctl } for pid=5926 comm="syz-executor" path="socket:[7319]" dev="sockfs" ino=7319 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.179818][ T5928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.184281][ T5928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.188129][ T5928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.192302][ T5928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.196397][ T5928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.198563][ T5931] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.202918][ T5931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.204055][ T5933] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.206054][ T5931] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.208874][ T5933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.210842][ T5931] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.212736][ T5933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.215345][ T5931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.216816][ T5933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.218921][ T5931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.225542][ T40] audit: type=1400 audit(1761414173.639:85): avc: denied { read } for pid=5930 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.231574][ T40] audit: type=1400 audit(1761414173.639:86): avc: denied { read } for pid=5934 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.240204][ T40] audit: type=1400 audit(1761414173.639:87): avc: denied { open } for pid=5930 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.248066][ T5928] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.250625][ T40] audit: type=1400 audit(1761414173.639:88): avc: denied { mounton } for pid=5930 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.254062][ T5928] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.259653][ T5928] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.262397][ T5928] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.265895][ T5928] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.444120][ T40] audit: type=1400 audit(1761414173.859:89): avc: denied { module_request } for pid=5926 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.515314][ T5926] chnl_net:caif_netlink_parms(): no params data found [ 45.521684][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 45.568139][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 45.607569][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 45.780150][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.782804][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.785560][ T5926] bridge_slave_0: entered allmulticast mode [ 45.788122][ T5926] bridge_slave_0: entered promiscuous mode [ 45.791301][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.793507][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.795997][ T5930] bridge_slave_0: entered allmulticast mode [ 45.798937][ T5930] bridge_slave_0: entered promiscuous mode [ 45.805605][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.808472][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.811320][ T5934] bridge_slave_0: entered allmulticast mode [ 45.814806][ T5934] bridge_slave_0: entered promiscuous mode [ 45.817564][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.819850][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.822172][ T5926] bridge_slave_1: entered allmulticast mode [ 45.824945][ T5926] bridge_slave_1: entered promiscuous mode [ 45.827658][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.830178][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.832729][ T5930] bridge_slave_1: entered allmulticast mode [ 45.836902][ T5930] bridge_slave_1: entered promiscuous mode [ 45.880865][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.883942][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.886681][ T5934] bridge_slave_1: entered allmulticast mode [ 45.889935][ T5934] bridge_slave_1: entered promiscuous mode [ 45.953140][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.991259][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.996660][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.002452][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.006076][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.008261][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.010465][ T5938] bridge_slave_0: entered allmulticast mode [ 46.013378][ T5938] bridge_slave_0: entered promiscuous mode [ 46.017187][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.021839][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.062309][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.064712][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.066907][ T5938] bridge_slave_1: entered allmulticast mode [ 46.069468][ T5938] bridge_slave_1: entered promiscuous mode [ 46.177911][ T5934] team0: Port device team_slave_0 added [ 46.181095][ T5926] team0: Port device team_slave_0 added [ 46.184927][ T5930] team0: Port device team_slave_0 added [ 46.188994][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.192743][ T5934] team0: Port device team_slave_1 added [ 46.209437][ T5926] team0: Port device team_slave_1 added [ 46.212229][ T5930] team0: Port device team_slave_1 added [ 46.216737][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.274933][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.277740][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.286879][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.338937][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.341100][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.349007][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.354106][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.356567][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.367043][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.371407][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.373881][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.382141][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.386839][ T5938] team0: Port device team_slave_0 added [ 46.392883][ T5938] team0: Port device team_slave_1 added [ 46.396944][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.399085][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.410291][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.415511][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.417775][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.425425][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.467125][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.469254][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.478419][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.484464][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.487216][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.497138][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.611952][ T5934] hsr_slave_0: entered promiscuous mode [ 46.614398][ T5934] hsr_slave_1: entered promiscuous mode [ 46.657257][ T5926] hsr_slave_0: entered promiscuous mode [ 46.660267][ T5926] hsr_slave_1: entered promiscuous mode [ 46.663069][ T5926] debugfs: 'hsr0' already exists in 'hsr' [ 46.667333][ T5926] Cannot create hsr debugfs directory [ 46.671611][ T5930] hsr_slave_0: entered promiscuous mode [ 46.673765][ T5930] hsr_slave_1: entered promiscuous mode [ 46.675736][ T5930] debugfs: 'hsr0' already exists in 'hsr' [ 46.677458][ T5930] Cannot create hsr debugfs directory [ 46.729289][ T5938] hsr_slave_0: entered promiscuous mode [ 46.732395][ T5938] hsr_slave_1: entered promiscuous mode [ 46.736751][ T5938] debugfs: 'hsr0' already exists in 'hsr' [ 46.739102][ T5938] Cannot create hsr debugfs directory [ 47.076583][ T5930] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.082073][ T5930] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.086034][ T5930] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.094311][ T5930] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.127498][ T5926] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.132519][ T5926] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.136902][ T5926] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.143881][ T5926] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.189869][ T5934] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.214519][ T5934] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.218810][ T5934] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.230624][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.232823][ T5934] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.244273][ T5293] Bluetooth: hci2: command tx timeout [ 47.244350][ T5928] Bluetooth: hci0: command tx timeout [ 47.244518][ T5931] Bluetooth: hci1: command tx timeout [ 47.274501][ T5938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.293835][ T5938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.298787][ T5938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.305496][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.314711][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.317017][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.320096][ T5938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.330205][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.333659][ T5928] Bluetooth: hci3: command tx timeout [ 47.343387][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.345741][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.376561][ T5926] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.385600][ T1185] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.387903][ T1185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.397041][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.399391][ T1185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.470598][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.485192][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.494990][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.497638][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.504217][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.509895][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.512567][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.529380][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.536825][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.539129][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.557620][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.559884][ T1185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.589464][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.600993][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.638016][ T5930] veth0_vlan: entered promiscuous mode [ 47.649579][ T5930] veth1_vlan: entered promiscuous mode [ 47.651940][ T5926] veth0_vlan: entered promiscuous mode [ 47.658817][ T5926] veth1_vlan: entered promiscuous mode [ 47.690844][ T5926] veth0_macvtap: entered promiscuous mode [ 47.697457][ T5930] veth0_macvtap: entered promiscuous mode [ 47.701185][ T5926] veth1_macvtap: entered promiscuous mode [ 47.710214][ T5930] veth1_macvtap: entered promiscuous mode [ 47.731227][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.738039][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.744631][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.748842][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.754860][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.760015][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.767006][ T1185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.776327][ T1185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.779728][ T1185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.786781][ T1185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.789823][ T1185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.798136][ T1185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.802983][ T1185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.815772][ T1147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.862908][ T5938] veth0_vlan: entered promiscuous mode [ 47.871637][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.875219][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.883004][ T5938] veth1_vlan: entered promiscuous mode [ 47.890867][ T5934] veth0_vlan: entered promiscuous mode [ 47.903828][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.906257][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.913055][ T1185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.916465][ T1185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.919921][ T5934] veth1_vlan: entered promiscuous mode [ 47.936203][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.940614][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.946803][ T5938] veth0_macvtap: entered promiscuous mode [ 47.956788][ T5938] veth1_macvtap: entered promiscuous mode [ 47.975143][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.978248][ T5934] veth0_macvtap: entered promiscuous mode [ 47.985090][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.985929][ T5930] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.989347][ T5934] veth1_macvtap: entered promiscuous mode [ 48.003874][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.012831][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.017357][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.019720][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.032121][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.040722][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.060775][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.071050][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.083890][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.087260][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.118839][ T6025] syz_tun: entered allmulticast mode [ 48.132218][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.135515][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.155404][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.157954][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.182679][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.186357][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.202417][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.206654][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.269784][ T6038] syzkaller1: entered promiscuous mode [ 48.271944][ T6038] syzkaller1: entered allmulticast mode [ 48.323871][ T5928] Bluetooth: hci1: hardware error 0x08 [ 48.568026][ T6061] bridge0: entered allmulticast mode [ 48.570112][ T6061] bridge0: left allmulticast mode [ 48.651137][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 48.662822][ T6071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37989 sclass=netlink_route_socket pid=6071 comm=syz.0.17 [ 48.674117][ T6071] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 48.740804][ T6075] warning: `syz.2.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 49.130868][ T6097] netlink: 'syz.3.26': attribute type 62 has an invalid length. [ 49.323863][ T5293] Bluetooth: hci2: command tx timeout [ 49.333810][ T5293] Bluetooth: hci0: command tx timeout [ 49.403717][ T5293] Bluetooth: hci3: command tx timeout [ 49.446297][ T6126] program syz.3.35 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.554843][ T6000] IPVS: starting estimator thread 0... [ 49.599226][ T6139] capability: warning: `syz.1.40' uses 32-bit capabilities (legacy support in use) [ 49.654279][ T6135] IPVS: using max 46 ests per chain, 110400 per kthread [ 50.102854][ T40] kauditd_printk_skb: 133 callbacks suppressed [ 50.102864][ T40] audit: type=1400 audit(1761414178.509:223): avc: denied { map } for pid=6160 comm="syz.3.48" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 50.117276][ T40] audit: type=1400 audit(1761414178.529:224): avc: denied { map_read map_write } for pid=6160 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 50.254735][ T40] audit: type=1400 audit(1761414178.669:225): avc: denied { prog_run } for pid=6164 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 50.264034][ T40] audit: type=1400 audit(1761414178.679:226): avc: denied { create } for pid=6164 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 50.275319][ T40] audit: type=1400 audit(1761414178.679:227): avc: denied { read } for pid=6164 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 50.340700][ T6167] ipt_REJECT: TCP_RESET invalid for non-tcp [ 50.380265][ T40] audit: type=1400 audit(1761414178.789:228): avc: denied { map } for pid=6166 comm="syz.2.50" path="socket:[12302]" dev="sockfs" ino=12302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.389604][ T40] audit: type=1400 audit(1761414178.789:229): avc: denied { accept } for pid=6166 comm="syz.2.50" path="socket:[12302]" dev="sockfs" ino=12302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.404621][ T40] audit: type=1400 audit(1761414178.789:230): avc: denied { read } for pid=6166 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.423628][ T40] audit: type=1400 audit(1761414178.829:231): avc: denied { read write } for pid=6168 comm="syz.3.51" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 50.423657][ T40] audit: type=1400 audit(1761414178.829:232): avc: denied { open } for pid=6168 comm="syz.3.51" path="/24/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 50.444885][ T5928] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 50.575936][ T6183] Zero length message leads to an empty skb [ 50.588114][ T6190] netlink: 'syz.1.57': attribute type 39 has an invalid length. [ 50.620353][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58'. [ 50.625777][ T6192] sock: sock_set_timeout: `syz.2.58' (pid 6192) tries to set negative timeout [ 51.227218][ T6198] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 51.229434][ T6198] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 51.233136][ T6198] vhci_hcd vhci_hcd.0: Device attached [ 51.274380][ T6203] netlink: 'syz.1.60': attribute type 14 has an invalid length. [ 51.365270][ T6200] vhci_hcd: connection closed [ 51.368690][ T97] vhci_hcd: stop threads [ 51.372896][ T97] vhci_hcd: release socket [ 51.379563][ T97] vhci_hcd: disconnect device [ 51.413735][ T5928] Bluetooth: hci0: command tx timeout [ 51.416530][ T5928] Bluetooth: hci2: command tx timeout [ 51.493857][ T5928] Bluetooth: hci3: command tx timeout [ 51.667285][ T6224] trusted_key: syz.1.67 sent an empty control message without MSG_MORE. [ 51.724967][ T6226] program syz.1.68 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.358233][ T6236] program syz.3.70 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.478267][ T6242] bond1: option arp_validate: invalid value (808464390) [ 52.481827][ T6242] bond1 (unregistering): Released all slaves [ 52.613821][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.71'. [ 52.614311][ T6244] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 52.622065][ T6244] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 52.630425][ T6244] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 52.635955][ T6244] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 52.638200][ T6244] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 52.643131][ T6244] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 52.648384][ T6244] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 52.651621][ T6244] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 52.658266][ T6244] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 52.708000][ T6252] ipip0: entered promiscuous mode [ 52.711210][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 52.740899][ T6255] program syz.1.75 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.845330][ T6262] syzkaller0: entered promiscuous mode [ 52.847787][ T6262] syzkaller0: entered allmulticast mode [ 53.003332][ T6268] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.009064][ T6268] netlink: 'syz.3.78': attribute type 12 has an invalid length. [ 53.011480][ T6268] netlink: 'syz.3.78': attribute type 29 has an invalid length. [ 53.014902][ T6268] netlink: 148 bytes leftover after parsing attributes in process `syz.3.78'. [ 53.018414][ T6268] netlink: 'syz.3.78': attribute type 2 has an invalid length. [ 53.021390][ T6268] netlink: 'syz.3.78': attribute type 3 has an invalid length. [ 53.025413][ T6268] netlink: 15 bytes leftover after parsing attributes in process `syz.3.78'. [ 53.029724][ T6268] Bluetooth: MGMT ver 1.23 [ 53.040112][ T6268] team0: Port device vlan2 added [ 53.043458][ T6268] netlink: 'syz.3.78': attribute type 10 has an invalid length. [ 53.054526][ T6268] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 53.119446][ T6272] debugfs: Bad value for 'mode' [ 53.291686][ T6277] syzkaller0: entered promiscuous mode [ 53.294650][ T6277] syzkaller0: entered allmulticast mode [ 53.675434][ T6284] netlink: 40 bytes leftover after parsing attributes in process `syz.1.85'. [ 53.690700][ T6284] netlink: 27 bytes leftover after parsing attributes in process `syz.1.85'. [ 53.823725][ T24] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 53.855442][ T6292] FAT-fs (sr0): bogus number of reserved sectors [ 53.857810][ T6292] FAT-fs (sr0): Can't find a valid FAT filesystem [ 53.996872][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.005727][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 54.010057][ T24] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 54.015722][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.022249][ T24] usb 8-1: config 0 descriptor?? [ 54.031897][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 54.036297][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 54.048829][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 54.053725][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 54.056758][ T24] usb 8-1: media controller created [ 54.060414][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 54.070340][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 54.072270][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 54.095423][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input5 [ 54.108898][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 54.113024][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 54.238064][ T919] usb 8-1: USB disconnect, device number 2 [ 54.255275][ T919] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 54.551997][ T6312] netlink: 'syz.1.92': attribute type 10 has an invalid length. [ 54.558655][ T6312] team0: Cannot enslave team device to itself [ 54.693756][ T5293] Bluetooth: hci3: command 0x0c1a tx timeout [ 54.693810][ T5931] Bluetooth: hci2: command 0x0c1a tx timeout [ 54.693830][ T5933] Bluetooth: hci0: command 0x0c1a tx timeout [ 54.694696][ T5928] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 54.806325][ T6318] syzkaller0: entered promiscuous mode [ 54.808201][ T6318] syzkaller0: entered allmulticast mode [ 55.228115][ T40] kauditd_printk_skb: 53 callbacks suppressed [ 55.228130][ T40] audit: type=1400 audit(1761414183.639:286): avc: denied { map } for pid=6319 comm="syz.2.95" path="socket:[9905]" dev="sockfs" ino=9905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 55.241441][ T40] audit: type=1400 audit(1761414183.639:287): avc: denied { map } for pid=6319 comm="syz.2.95" path="/proc/85/pagemap" dev="proc" ino=11558 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 55.601945][ T6322] Process accounting resumed [ 55.641472][ T40] audit: type=1400 audit(1761414184.049:288): avc: denied { ioctl } for pid=6327 comm="syz.2.97" path="socket:[12713]" dev="sockfs" ino=12713 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.707572][ T6338] process 'syz.3.99' launched './file0' with NULL argv: empty string added [ 55.712379][ T40] audit: type=1400 audit(1761414184.119:289): avc: denied { execute_no_trans } for pid=6335 comm="syz.3.99" path="/40/file0" dev="tmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.782060][ T6351] tmpfs: Unknown parameter '!9K*' [ 55.783623][ T40] audit: type=1400 audit(1761414184.189:290): avc: denied { read } for pid=6343 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.826931][ T6344] tipc: Started in network mode [ 55.828535][ T6344] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 55.832504][ T6344] tipc: Enabling of bearer rejected, failed to enable media [ 55.939433][ T6367] sp0: Synchronizing with TNC [ 55.942862][ T40] audit: type=1400 audit(1761414184.349:291): avc: denied { mounton } for pid=6366 comm="syz.2.106" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 55.950055][ T6367] Invalid source name [ 55.952239][ T40] audit: type=1400 audit(1761414184.359:292): avc: denied { search } for pid=5644 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.955119][ T6367] UBIFS error (pid: 6367): cannot open "/dev/nbd2", error -22 [ 55.962156][ T40] audit: type=1400 audit(1761414184.359:293): avc: denied { search } for pid=5644 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.976204][ T40] audit: type=1400 audit(1761414184.359:294): avc: denied { search } for pid=5644 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.985362][ T40] audit: type=1400 audit(1761414184.359:295): avc: denied { read } for pid=5644 comm="dhcpcd" name="n103" dev="tmpfs" ino=2488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.097556][ T6371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.108'. [ 56.149962][ T6377] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 56.155613][ T6377] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 56.643778][ T6000] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 56.696888][ T6388] : entered promiscuous mode [ 56.707905][ T6388] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.763856][ T5931] Bluetooth: hci2: command 0x0c1a tx timeout [ 56.763880][ T5293] Bluetooth: hci0: command 0x0c1a tx timeout [ 56.774937][ T5293] Bluetooth: hci3: command 0x0c1a tx timeout [ 56.825985][ T6000] usb 7-1: Using ep0 maxpacket: 8 [ 56.829682][ T6000] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 56.832765][ T6000] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 56.836105][ T6000] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 56.839219][ T6000] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 56.843357][ T6000] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 56.847473][ T6000] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.952400][ T6397] kvm: emulating exchange as write [ 56.958345][ T6397] ======================================================= [ 56.958345][ T6397] WARNING: The mand mount option has been deprecated and [ 56.958345][ T6397] and is ignored by this kernel. Remove the mand [ 56.958345][ T6397] option from the mount to silence this warning. [ 56.958345][ T6397] ======================================================= [ 57.059055][ T6000] usb 7-1: GET_CAPABILITIES returned 0 [ 57.060926][ T6000] usbtmc 7-1:16.0: can't read capabilities [ 57.073482][ T6405] afs: Unknown parameter '00000000000000000004' [ 57.079616][ T6405] overlayfs: overlapping lowerdir path [ 57.247941][ T6409] sd 0:0:0:0: PR command failed: 1026 [ 57.249805][ T6409] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 57.251973][ T6409] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 57.256443][ T6409] netlink: 52 bytes leftover after parsing attributes in process `syz.1.122'. [ 57.417159][ T6419] 9pnet_fd: Insufficient options for proto=fd [ 57.558841][ T6423] 9pnet_virtio: no channels available for device qY3aK [ 57.562036][ T6423] trusted_key: encrypted_key: insufficient parameters specified [ 57.765525][ T6430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=6430 comm=syz.1.128 [ 58.114619][ T6448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5134 sclass=netlink_route_socket pid=6448 comm=syz.3.131 [ 58.120771][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 58.843709][ T5293] Bluetooth: hci3: command 0x0c1a tx timeout [ 58.843732][ T5931] Bluetooth: hci0: command 0x0c1a tx timeout [ 58.845666][ T5293] Bluetooth: hci2: command 0x0c1a tx timeout [ 58.943065][ T6458] qnx4: no qnx4 filesystem (no root dir). [ 58.948050][ T6458] overlayfs: missing 'lowerdir' [ 59.009637][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.085517][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.100670][ T6469] netlink: 32 bytes leftover after parsing attributes in process `syz.1.140'. [ 59.161208][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.246704][ T5928] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.246827][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.249865][ T5928] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.257680][ T5928] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.260768][ T5928] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.263440][ T5928] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.383673][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.394813][ T6386] Process accounting resumed [ 59.401459][ T6475] chnl_net:caif_netlink_parms(): no params data found [ 59.403620][ T919] usb 7-1: USB disconnect, device number 2 [ 59.544000][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 59.548142][ T9] usb 6-1: config 9 has an invalid interface number: 36 but max is 3 [ 59.551003][ T9] usb 6-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 59.555597][ T13] bridge_slave_1: left allmulticast mode [ 59.557945][ T9] usb 6-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 59.558242][ T13] bridge_slave_1: left promiscuous mode [ 59.560851][ T9] usb 6-1: config 9 has an invalid interface number: 26 but max is 3 [ 59.564070][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.566335][ T9] usb 6-1: config 9 has an invalid interface number: 212 but max is 3 [ 59.571749][ T9] usb 6-1: config 9 has an invalid interface number: 12 but max is 3 [ 59.574424][ T9] usb 6-1: config 9 has an invalid descriptor of length 216, skipping remainder of the config [ 59.577652][ T9] usb 6-1: config 9 has no interface number 0 [ 59.579876][ T9] usb 6-1: config 9 has no interface number 1 [ 59.582302][ T9] usb 6-1: config 9 has no interface number 2 [ 59.584318][ T9] usb 6-1: config 9 has no interface number 3 [ 59.586265][ T9] usb 6-1: config 9 interface 36 altsetting 205 endpoint 0xE has an invalid bInterval 242, changing to 7 [ 59.589718][ T9] usb 6-1: config 9 interface 36 altsetting 205 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 59.593160][ T9] usb 6-1: config 9 interface 36 altsetting 205 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 59.597561][ T9] usb 6-1: config 9 interface 36 altsetting 205 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 59.600754][ T13] bridge_slave_0: left allmulticast mode [ 59.600968][ T9] usb 6-1: config 9 interface 36 altsetting 205 bulk endpoint 0x5 has invalid maxpacket 16 [ 59.603376][ T13] bridge_slave_0: left promiscuous mode [ 59.608124][ T9] usb 6-1: config 9 interface 36 altsetting 205 has a duplicate endpoint with address 0x5, skipping [ 59.611376][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.612576][ T9] usb 6-1: config 9 interface 36 altsetting 205 has a duplicate endpoint with address 0x5, skipping [ 59.618890][ T9] usb 6-1: config 9 interface 36 altsetting 205 has a duplicate endpoint with address 0xE, skipping [ 59.621984][ T6484] trusted_key: encrypted_key: insufficient parameters specified [ 59.622655][ T9] usb 6-1: config 9 interface 36 altsetting 205 has a duplicate endpoint with address 0xE, skipping [ 59.629121][ T9] usb 6-1: config 9 interface 36 altsetting 205 has 13 endpoint descriptors, different from the interface descriptor's value: 15 [ 59.633197][ T9] usb 6-1: too many endpoints for config 9 interface 26 altsetting 219: 233, using maximum allowed: 30 [ 59.636729][ T9] usb 6-1: config 9 interface 26 altsetting 219 has a duplicate endpoint with address 0x4, skipping [ 59.640033][ T9] usb 6-1: config 9 interface 26 altsetting 219 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 59.643746][ T9] usb 6-1: config 9 interface 26 altsetting 219 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 59.647425][ T9] usb 6-1: config 9 interface 26 altsetting 219 has 2 endpoint descriptors, different from the interface descriptor's value: 233 [ 59.652007][ T9] usb 6-1: config 9 interface 212 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 59.655767][ T9] usb 6-1: config 9 interface 212 altsetting 3 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 59.659094][ T9] usb 6-1: config 9 interface 212 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 59.662467][ T9] usb 6-1: config 9 interface 12 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 59.666700][ T9] usb 6-1: config 9 interface 36 has no altsetting 0 [ 59.668797][ T9] usb 6-1: config 9 interface 26 has no altsetting 0 [ 59.670973][ T9] usb 6-1: config 9 interface 212 has no altsetting 0 [ 59.673498][ T9] usb 6-1: config 9 interface 12 has no altsetting 0 [ 59.677289][ T9] usb 6-1: New USB device found, idVendor=12d1, idProduct=14c6, bcdDevice=e3.93 [ 59.681189][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.683924][ T9] usb 6-1: Product: 渂䥗鶏翍ﱑ㦉楈稙럶鷅幛歧뮡븦ꪴ䦴봴寬ገ妩҉쟝顇⡯襅짠켏∿ゝꮫ撧㵥⍶坭릭⠭掃⺓規팚䀢솑ㅹ鉈䁵ᙫ䶨觹둼ᮒ碅鬽㋉畋‭쾖Ⲡ爃퍿પ벤얃㞝껪䅸씑演乩躔員꣚詸臧婱녧륑䙫睍ഓǴ㛌Rस૨畂ร詩쬧⇃좐䠹고⬃諧滣ၾ涑腯貣ⳳ鎕鲩笹漏 [ 59.695373][ T9] usb 6-1: Manufacturer: 䡬୺柼圴⥆莧劢⥡啡棞塸䏀厙࡟ퟱ᩺ [ 59.699072][ T9] usb 6-1: SerialNumber: х [ 59.711102][ T6474] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 59.898241][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.902203][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.908313][ T13] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 59.917544][ T13] bond0 (unregistering): Released all slaves [ 59.935555][ T6474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.940251][ T6475] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.941246][ T6474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.942577][ T6475] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.947900][ T6475] bridge_slave_0: entered allmulticast mode [ 59.950717][ T6475] bridge_slave_0: entered promiscuous mode [ 59.953963][ T9] option 6-1:9.36: GSM modem (1-port) converter detected [ 59.957180][ T6475] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.959485][ T6475] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.961718][ T6475] bridge_slave_1: entered allmulticast mode [ 59.964666][ T6475] bridge_slave_1: entered promiscuous mode [ 59.980751][ T9] usb 6-1: USB disconnect, device number 2 [ 60.007146][ T9] option 6-1:9.36: device disconnected [ 60.027989][ T13] : left promiscuous mode [ 60.057584][ T6475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.063241][ T6475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.132791][ T6475] team0: Port device team_slave_0 added [ 60.137461][ T6475] team0: Port device team_slave_1 added [ 60.176411][ T6475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.179105][ T6475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.189252][ T6475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.199501][ T6475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.204646][ T6475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.219310][ T6475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.258238][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 60.258248][ T40] audit: type=1400 audit(1761414188.669:336): avc: denied { remove_name } for pid=6506 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2696 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.268646][ T40] audit: type=1400 audit(1761414188.669:337): avc: denied { unlink } for pid=6506 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2696 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.308239][ T6475] hsr_slave_0: entered promiscuous mode [ 60.312978][ T6475] hsr_slave_1: entered promiscuous mode [ 60.317774][ T6475] debugfs: 'hsr0' already exists in 'hsr' [ 60.320302][ T6475] Cannot create hsr debugfs directory [ 60.330599][ T13] hsr_slave_0: left promiscuous mode [ 60.333792][ T13] hsr_slave_1: left promiscuous mode [ 60.336986][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.339582][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.342505][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.345710][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.362295][ T13] veth1_macvtap: left promiscuous mode [ 60.365010][ T13] veth0_macvtap: left promiscuous mode [ 60.367251][ T13] veth1_vlan: left promiscuous mode [ 60.369422][ T13] veth0_vlan: left promiscuous mode [ 60.419745][ T13] team0 (unregistering): Port device vlan2 removed [ 60.552951][ T6513] netlink: 16 bytes leftover after parsing attributes in process `syz.1.148'. [ 60.828385][ T13] team0 (unregistering): Port device team_slave_1 removed [ 60.883131][ T13] team0 (unregistering): Port device team_slave_0 removed [ 60.923702][ T5928] Bluetooth: hci0: command 0x0c1a tx timeout [ 61.323761][ T5928] Bluetooth: hci1: command tx timeout [ 61.335393][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 61.338537][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 61.371542][ T40] audit: type=1400 audit(1761414189.779:338): avc: denied { mount } for pid=6523 comm="syz.1.151" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 61.379172][ T841] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 61.382515][ T40] audit: type=1400 audit(1761414189.789:339): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 61.421205][ T40] audit: type=1400 audit(1761414189.829:340): avc: denied { execute } for pid=6528 comm="syz.1.152" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=12041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 61.581093][ T6548] 9pnet_virtio: no channels available for device syz [ 61.598600][ T40] audit: type=1400 audit(1761414190.009:341): avc: denied { create } for pid=6546 comm="syz.2.157" name="cgroup" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.608667][ T6475] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.612669][ T6475] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.625601][ T6475] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.636796][ T6475] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.657576][ T40] audit: type=1400 audit(1761414190.069:342): avc: denied { map } for pid=6546 comm="syz.2.157" path="/44/file0/pids.current" dev="9p" ino=71827941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.665692][ T40] audit: type=1400 audit(1761414190.069:343): avc: denied { write } for pid=6546 comm="syz.2.157" path="/44/file0/pids.current" dev="9p" ino=71827941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.693629][ T40] audit: type=1400 audit(1761414190.099:344): avc: denied { getopt } for pid=6540 comm="syz.1.154" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.700082][ T40] audit: type=1400 audit(1761414190.099:345): avc: denied { create } for pid=6540 comm="syz.1.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 61.704936][ T6545] netlink: 'syz.1.154': attribute type 3 has an invalid length. [ 61.731921][ T6475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.760390][ T6475] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.776812][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.779148][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.782415][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.784821][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.886260][ T6562] netlink: 'syz.1.158': attribute type 10 has an invalid length. [ 61.900659][ T6475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.042922][ T6475] veth0_vlan: entered promiscuous mode [ 62.051489][ T6475] veth1_vlan: entered promiscuous mode [ 62.052362][ T6588] binder: 6587:6588 ioctl 4018620d 0 returned -22 [ 62.069239][ T6475] veth0_macvtap: entered promiscuous mode [ 62.072923][ T6475] veth1_macvtap: entered promiscuous mode [ 62.082492][ T6475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.088206][ T6475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.093344][ T1185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.098684][ T1185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.103233][ T1185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.106818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.109522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.112119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.115565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.116915][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 62.118760][ T1185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.212603][ T6596] xt_TPROXY: Can be used only with -p tcp or -p udp [ 62.218117][ T6594] cdrom: dropping to single frame dma [ 62.233802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.264604][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.267107][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.294019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.344335][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.351209][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.364163][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 62.444062][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 62.533761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.581695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 62.594172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.614134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.071159][ T6616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.169'. [ 63.155056][ T6621] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 63.368190][ T6635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 63.415178][ T5928] Bluetooth: hci1: command tx timeout [ 63.424889][ T6000] IPVS: starting estimator thread 0... [ 63.428021][ T6638] IPVS: set_ctl: invalid protocol: 25647 47.107.118.109:31 [ 63.507064][ T6639] ptm ptm30: ldisc open failed (-12), clearing slot 30 [ 63.509805][ T6644] netlink: 'syz.2.175': attribute type 1 has an invalid length. [ 63.540661][ T6644] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 63.545156][ T6640] IPVS: using max 46 ests per chain, 110400 per kthread [ 63.545221][ T6644] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 63.552950][ T6644] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 63.756226][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'. [ 63.966972][ T5293] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.972217][ T5293] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.978608][ T5293] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.983096][ T5293] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.985987][ T5293] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.043980][ T5293] Bluetooth: hci0: command 0x0c1a tx timeout [ 64.105227][ T6675] chnl_net:caif_netlink_parms(): no params data found [ 64.157355][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.194131][ T6675] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.196468][ T6675] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.198729][ T6675] bridge_slave_0: entered allmulticast mode [ 64.201391][ T6675] bridge_slave_0: entered promiscuous mode [ 64.206172][ T6675] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.209060][ T6675] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.211874][ T6675] bridge_slave_1: entered allmulticast mode [ 64.215251][ T6675] bridge_slave_1: entered promiscuous mode [ 64.244990][ T6675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.250271][ T6675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.279976][ T6675] team0: Port device team_slave_0 added [ 64.283932][ T6675] team0: Port device team_slave_1 added [ 64.347789][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.355284][ T6675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.360230][ T6675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.371229][ T6675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.375958][ T6691] tipc: Enabling of bearer rejected, failed to enable media [ 64.390776][ T6675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.392789][ T6675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.400984][ T6675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.417304][ T6694] hfsplus: unable to find HFS+ superblock [ 64.461225][ T6675] hsr_slave_0: entered promiscuous mode [ 64.463767][ T6675] hsr_slave_1: entered promiscuous mode [ 64.465997][ T6675] debugfs: 'hsr0' already exists in 'hsr' [ 64.467835][ T6675] Cannot create hsr debugfs directory [ 64.481051][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.574733][ T6709] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 64.581087][ T6709] bond2 (unregistering): Released all slaves [ 64.606425][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.707625][ T6715] random: crng reseeded on system resumption [ 64.758182][ T6720] FAT-fs (nullb0): bogus number of reserved sectors [ 64.760301][ T6720] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 64.785772][ T6675] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 64.794529][ T6675] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 64.817145][ T6675] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 64.822391][ T46] bridge_slave_1: left allmulticast mode [ 64.825479][ T46] bridge_slave_1: left promiscuous mode [ 64.827994][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.833498][ T46] bridge_slave_0: left allmulticast mode [ 64.837709][ T46] bridge_slave_0: left promiscuous mode [ 64.840272][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.868461][ T6727] overlayfs: failed lookup in lower (newroot/71, name='file1', err=-40): overlapping layers [ 64.874743][ T6727] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 64.989469][ T6731] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 65.054778][ T6163] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 65.087376][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.094039][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.099440][ T46] bond0 (unregistering): Released all slaves [ 65.115781][ T6675] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 65.180506][ T6736] sctp: [Deprecated]: syz.4.207 (pid 6736) Use of struct sctp_assoc_value in delayed_ack socket option. [ 65.180506][ T6736] Use struct sctp_sack_info instead [ 65.202869][ T6675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.208840][ T6749] netlink: 68 bytes leftover after parsing attributes in process `syz.1.209'. [ 65.210708][ T6163] usb 7-1: unable to get BOS descriptor or descriptor too short [ 65.211955][ T5293] Bluetooth: hci0: adv larger than maximum supported [ 65.215711][ T5293] Bluetooth: hci0: Malformed LE Event: 0x0d [ 65.223197][ T6163] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 65.226588][ T6675] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.231524][ T1185] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.232558][ T6163] usb 7-1: can't read configurations, error -71 [ 65.233960][ T1185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.248648][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.251082][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.422549][ T46] hsr_slave_0: left promiscuous mode [ 65.426659][ T46] hsr_slave_1: left promiscuous mode [ 65.429477][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.432656][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.436662][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.439674][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.460826][ T46] veth1_macvtap: left promiscuous mode [ 65.462735][ T46] veth0_macvtap: left promiscuous mode [ 65.465535][ T46] veth1_vlan: left promiscuous mode [ 65.467965][ T46] veth0_vlan: left promiscuous mode [ 65.493865][ T5293] Bluetooth: hci1: command tx timeout [ 65.723787][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 65.742973][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 65.742983][ T40] audit: type=1400 audit(1761414194.149:385): avc: denied { create } for pid=6768 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 65.875487][ T6772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50210 sclass=netlink_route_socket pid=6772 comm=syz.2.216 [ 65.977389][ T46] team0 (unregistering): Port device team_slave_1 removed [ 66.031944][ T46] team0 (unregistering): Port device team_slave_0 removed [ 66.053966][ T5293] Bluetooth: hci4: command tx timeout [ 66.413945][ T6675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.456589][ T6778] netlink: 68 bytes leftover after parsing attributes in process `syz.2.218'. [ 66.461282][ T6778] usb usb9: usbfs: process 6778 (syz.2.218) did not claim interface 33 before use [ 66.542726][ T40] audit: type=1400 audit(1761414194.949:386): avc: denied { shutdown } for pid=6782 comm="syz.4.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.607372][ T6675] veth0_vlan: entered promiscuous mode [ 66.612399][ T6675] veth1_vlan: entered promiscuous mode [ 66.631860][ T6803] netlink: 'syz.4.223': attribute type 1 has an invalid length. [ 66.631992][ T6675] veth0_macvtap: entered promiscuous mode [ 66.635207][ T6803] netlink: 224 bytes leftover after parsing attributes in process `syz.4.223'. [ 66.638941][ T6675] veth1_macvtap: entered promiscuous mode [ 66.651703][ T6675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.658522][ T6675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.667385][ T1185] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.670321][ T1185] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.677807][ T1185] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.680610][ T1185] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.687833][ T6808] mkiss: ax0: crc mode is auto. [ 66.694338][ T6808] netlink: 56 bytes leftover after parsing attributes in process `syz.2.225'. [ 66.698256][ T6808] openvswitch: netlink: Message has 592 unknown bytes. [ 66.700550][ T6808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 66.727573][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.730084][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.744747][ T6812] netlink: 16 bytes leftover after parsing attributes in process `syz.4.226'. [ 66.746772][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.748689][ T6812] netlink: 'syz.4.226': attribute type 1 has an invalid length. [ 66.750330][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.767408][ T6812] ufs: You didn't specify the type of your ufs filesystem [ 66.767408][ T6812] [ 66.767408][ T6812] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 66.767408][ T6812] [ 66.767408][ T6812] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 66.778535][ T6812] ufs: failed to set blocksize [ 66.792995][ T6814] input: syz0 as /devices/virtual/input/input7 [ 66.829769][ T40] audit: type=1400 audit(1761414195.239:387): avc: denied { ioctl } for pid=6817 comm="syz.5.186" path="socket:[14665]" dev="sockfs" ino=14665 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.842420][ T40] audit: type=1400 audit(1761414195.249:388): avc: denied { bind } for pid=6817 comm="syz.5.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.851825][ T40] audit: type=1400 audit(1761414195.259:389): avc: denied { append } for pid=6823 comm="syz.2.230" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.862296][ T6824] input: syz0 as /devices/virtual/input/input8 [ 66.866239][ T40] audit: type=1400 audit(1761414195.269:390): avc: denied { create } for pid=6825 comm="syz.5.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 66.873713][ T6824] netlink: 48 bytes leftover after parsing attributes in process `syz.2.230'. [ 66.876660][ T6824] netlink: 48 bytes leftover after parsing attributes in process `syz.2.230'. [ 66.900376][ T6826] raw_sendmsg: syz.5.231 forgot to set AF_INET. Fix it! [ 67.043774][ T40] audit: type=1400 audit(1761414195.459:391): avc: denied { mounton } for pid=6841 comm="syz.5.236" path="/proc/11/task" dev="proc" ino=14691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 67.056901][ T40] audit: type=1400 audit(1761414195.469:392): avc: denied { associate } for pid=6845 comm="syz.5.236" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.178745][ T6842] sp0: Synchronizing with TNC [ 67.297472][ T5928] Bluetooth: unknown link type 128 [ 67.298122][ T6848] netlink: 24 bytes leftover after parsing attributes in process `syz.5.238'. [ 67.307832][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.5.238'. [ 67.361018][ T6848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.366662][ T6848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.371570][ T6848] bond0 (unregistering): Released all slaves [ 67.513652][ T6163] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 67.563856][ T5928] Bluetooth: hci1: command tx timeout [ 67.662472][ T40] audit: type=1400 audit(1761414196.069:393): avc: denied { mounton } for pid=6853 comm="syz.5.241" path="/6/file0" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.662501][ T6854] fuse: blksize only supported for fuseblk [ 67.679093][ T40] audit: type=1400 audit(1761414196.089:394): avc: denied { map } for pid=6853 comm="syz.5.241" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.683827][ T6163] usb 6-1: Using ep0 maxpacket: 8 [ 67.694317][ T6163] usb 6-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 67.697222][ T6163] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.699696][ T6163] usb 6-1: Product: syz [ 67.701030][ T6163] usb 6-1: Manufacturer: syz [ 67.702629][ T6163] usb 6-1: SerialNumber: syz [ 67.706225][ T6163] usb 6-1: config 0 descriptor?? [ 67.712305][ T6163] option 6-1:0.0: GSM modem (1-port) converter detected [ 68.130015][ T6880] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:19969 [ 68.198844][ T6886] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 68.204112][ T6887] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 68.245244][ T6891] kernel read not supported for file /policy (pid: 6891 comm: syz.2.255) [ 68.394028][ T841] usb 6-1: USB disconnect, device number 3 [ 68.398832][ T841] option 6-1:0.0: device disconnected [ 68.455369][ T6918] netlink: zone id is out of range [ 68.520391][ T6925] Invalid source name [ 68.522565][ T6925] UBIFS error (pid: 6925): cannot open "./file0", error -22 [ 68.623233][ T6932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=6932 comm=syz.5.269 [ 68.634012][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.269'. [ 68.642231][ T6932] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 68.645414][ T6932] team0: Device ipvlan2 is already an upper device of the team interface [ 68.668371][ T6935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.670954][ T6935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.675645][ T6935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.678655][ T6935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.723681][ T6013] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 68.874863][ T6013] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 68.878427][ T6013] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 68.881784][ T6013] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 68.884721][ T6013] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.890187][ T6922] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 68.892571][ T6922] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 68.897444][ T6013] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 69.022294][ T6943] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 69.097002][ T6000] usb 7-1: USB disconnect, device number 5 [ 69.298123][ T6971] gtp0: entered promiscuous mode [ 69.643624][ T5928] Bluetooth: hci1: command tx timeout [ 70.242955][ T6984] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 70.245875][ T6984] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 70.248743][ T6984] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 70.251426][ T6984] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.256938][ T6984] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.260448][ T6984] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 70.262959][ T6984] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 70.265663][ T6984] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 70.318681][ T7014] input input10: cannot allocate more than FF_MAX_EFFECTS effects [ 70.372934][ T7017] QAT: Invalid ioctl 62724 [ 70.544025][ T7033] __nla_validate_parse: 4 callbacks suppressed [ 70.544037][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.300'. [ 70.549265][ T7033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7033 comm=syz.5.300 [ 70.563715][ T7033] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 70.778110][ T7038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35348 sclass=netlink_route_socket pid=7038 comm=syz.2.302 [ 71.089498][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.091690][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.431061][ T7045] syz.2.302 (7045): drop_caches: 1 [ 71.458014][ T7045] syz.2.302 (7045): drop_caches: 1 [ 71.563643][ T5928] Bluetooth: hci0: command 0x0c1a tx timeout [ 71.565871][ T6984] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 71.584942][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 71.584950][ T40] audit: type=1400 audit(1761414199.999:429): avc: denied { write } for pid=7052 comm="syz.4.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.615253][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.308'. [ 71.618153][ T7055] netlink: 3 bytes leftover after parsing attributes in process `syz.4.308'. [ 71.661000][ T7057] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 71.717507][ T7063] could not open pipe file descriptor [ 71.720841][ T40] audit: type=1400 audit(1761414200.129:430): avc: denied { connect } for pid=7062 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 71.728454][ T40] audit: type=1400 audit(1761414200.139:431): avc: denied { bind } for pid=7062 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 71.731219][ T7067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 71.738379][ T7067] netlink: 44 bytes leftover after parsing attributes in process `syz.4.314'. [ 71.738691][ T7068] netlink: 44 bytes leftover after parsing attributes in process `syz.4.314'. [ 71.750181][ T40] audit: type=1400 audit(1761414200.159:432): avc: denied { map } for pid=7066 comm="syz.4.314" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 71.756474][ T7068] netlink: 9 bytes leftover after parsing attributes in process `syz.4.314'. [ 71.762221][ T40] audit: type=1400 audit(1761414200.159:433): avc: denied { execute } for pid=7066 comm="syz.4.314" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 71.762782][ T7068] 0: renamed from hsr0 (while UP) [ 71.772350][ T40] audit: type=1400 audit(1761414200.159:434): avc: denied { sqpoll } for pid=7066 comm="syz.4.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 71.772390][ T40] audit: type=1400 audit(1761414200.169:435): avc: denied { getopt } for pid=7066 comm="syz.4.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 71.789379][ T7068] 0: entered allmulticast mode [ 71.790930][ T7068] hsr_slave_0: entered allmulticast mode [ 71.792694][ T7068] hsr_slave_1: entered allmulticast mode [ 71.794570][ T7074] program syz.1.315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.795519][ T7068] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 71.825729][ T40] audit: type=1400 audit(1761414200.239:436): avc: denied { ioctl } for pid=7079 comm="syz.1.317" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 72.111694][ T7115] netlink: 'syz.1.327': attribute type 9 has an invalid length. [ 72.148115][ T40] audit: type=1400 audit(1761414200.559:437): avc: denied { read write } for pid=7119 comm="syz.1.328" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 72.156000][ T40] audit: type=1400 audit(1761414200.559:438): avc: denied { open } for pid=7119 comm="syz.1.328" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 72.243741][ T841] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 72.283684][ T5293] Bluetooth: hci2: command 0x0c1a tx timeout [ 72.283712][ T5931] Bluetooth: hci4: command 0x040f tx timeout [ 72.283744][ T5933] Bluetooth: hci1: command 0x0c1a tx timeout [ 72.324008][ T7123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.329'. [ 72.397007][ T841] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 72.400019][ T841] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 72.404048][ T841] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 72.407614][ T841] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 72.411236][ T841] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.416052][ T841] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.418987][ T841] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.424842][ T841] usb 9-1: config 0 descriptor?? [ 72.427465][ T7107] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 72.429739][ T6163] hid-generic 000C:0009:000C.0002: unknown main item tag 0x0 [ 72.432794][ T6163] hid-generic 000C:0009:000C.0002: unknown main item tag 0x0 [ 72.435483][ T6163] hid-generic 000C:0009:000C.0002: unknown main item tag 0x0 [ 72.437814][ T6163] hid-generic 000C:0009:000C.0002: unknown main item tag 0x0 [ 72.440092][ T6163] hid-generic 000C:0009:000C.0002: unknown main item tag 0x0 [ 72.442384][ T6163] hid-generic 000C:0009:000C.0002: unknown main item tag 0x0 [ 72.445400][ T6163] hid-generic 000C:0009:000C.0002: unknown main item tag 0x0 [ 72.447711][ T6163] hid-generic 000C:0009:000C.0002: unknown main item tag 0x0 [ 72.450013][ T6163] hid-generic 000C:0009:000C.0002: unknown main item tag 0x0 [ 72.452295][ T6163] hid-generic 000C:0009:000C.0002: unknown main item tag 0x0 [ 72.458368][ T6163] hid-generic 000C:0009:000C.0002: hidraw1: HID v14.24 Device [syz1] on syz0 [ 72.835820][ T841] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 72.845215][ T841] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 72.993690][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 73.102495][ T841] usb 9-1: USB disconnect, device number 2 [ 73.163731][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 73.166651][ T9] usb 7-1: config 2 interface 0 has no altsetting 0 [ 73.171128][ T9] usb 7-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 73.176855][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.180080][ T9] usb 7-1: Product: syz [ 73.181816][ T9] usb 7-1: Manufacturer: syz [ 73.183816][ T9] usb 7-1: SerialNumber: syz [ 73.454153][ T9] usb 7-1: USB disconnect, device number 6 [ 73.587418][ T7176] usb usb9: usbfs: process 7176 (syz.5.339) did not claim interface 0 before use [ 73.590453][ T7175] 9pnet_virtio: no channels available for device syz [ 73.630887][ T7182] 9pnet_virtio: no channels available for device syz [ 73.643952][ T5931] Bluetooth: hci0: command 0x0c1a tx timeout [ 74.203656][ T54] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 74.343907][ T54] usb 10-1: device descriptor read/64, error -71 [ 74.363663][ T5931] Bluetooth: hci1: command 0x0c1a tx timeout [ 74.363776][ T5928] Bluetooth: hci4: command 0x040f tx timeout [ 74.516312][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 74.593688][ T54] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 74.609227][ T7225] netlink: 'syz.4.354': attribute type 10 has an invalid length. [ 74.617222][ T7225] macvlan0: entered promiscuous mode [ 74.619549][ T7225] macvlan0: entered allmulticast mode [ 74.625631][ T7225] veth1_vlan: entered allmulticast mode [ 74.629165][ T7225] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 74.633191][ T7225] netlink: 'syz.4.354': attribute type 10 has an invalid length. [ 74.636738][ T7225] veth1_vlan: left allmulticast mode [ 74.656808][ T7231] : renamed from vlan0 (while UP) [ 74.683640][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 74.686584][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 74.689212][ T9] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 74.692629][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 74.697028][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 74.700281][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 74.705982][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 74.708839][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.716982][ T9] usbtmc 6-1:16.0: bulk endpoints not found [ 74.733618][ T54] usb 10-1: device descriptor read/64, error -71 [ 74.845297][ T54] usb usb10-port1: attempt power cycle [ 74.882382][ T7244] xt_hashlimit: max too large, truncated to 1048576 [ 74.924063][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 75.083441][ T7255] netlink: 68 bytes leftover after parsing attributes in process `syz.4.363'. [ 75.093967][ T7257] netlink: 68 bytes leftover after parsing attributes in process `syz.4.363'. [ 75.121744][ T7260] tipc: Can't bind to reserved service type 1 [ 75.154934][ T7263] netlink: 28 bytes leftover after parsing attributes in process `syz.4.365'. [ 75.204503][ T54] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 75.244314][ T54] usb 10-1: device descriptor read/8, error -71 [ 75.483703][ T54] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 75.514303][ T54] usb 10-1: device descriptor read/8, error -71 [ 75.624689][ T54] usb usb10-port1: unable to enumerate USB device [ 75.823456][ T7297] ip6erspan0: entered promiscuous mode [ 75.990611][ T7311] __nla_validate_parse: 1 callbacks suppressed [ 75.990622][ T7311] netlink: 56 bytes leftover after parsing attributes in process `syz.2.377'. [ 76.420068][ T7326] netlink: 40 bytes leftover after parsing attributes in process `syz.2.381'. [ 76.443656][ T5928] Bluetooth: hci4: command 0x040f tx timeout [ 76.443674][ T5931] Bluetooth: hci1: command 0x0c1a tx timeout [ 76.967829][ T7328] netlink: 'syz.4.382': attribute type 8 has an invalid length. [ 76.970404][ T7329] netlink: 'syz.4.382': attribute type 8 has an invalid length. [ 77.011195][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 77.015202][ T7329] netlink: 24 bytes leftover after parsing attributes in process `syz.4.382'. [ 77.090504][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 77.090515][ T40] audit: type=1400 audit(1761414205.499:460): avc: denied { append } for pid=7342 comm="syz.4.384" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 77.104773][ T40] audit: type=1400 audit(1761414205.519:461): avc: denied { ioctl } for pid=7342 comm="syz.4.384" path="socket:[17961]" dev="sockfs" ino=17961 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 77.138751][ T7347] Bluetooth: hci0: invalid len left 7, exp >= 112 [ 77.154532][ T40] audit: type=1400 audit(1761414205.569:462): avc: denied { name_bind } for pid=7344 comm="syz.5.385" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 77.186551][ T40] audit: type=1400 audit(1761414205.599:463): avc: denied { connect } for pid=7349 comm="syz.4.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.192748][ T7350] netlink: 32 bytes leftover after parsing attributes in process `syz.4.387'. [ 77.231203][ T7352] tipc: Started in network mode [ 77.233239][ T7352] tipc: Node identity 1a3b3055dd2b, cluster identity 4711 [ 77.236459][ T7352] tipc: Enabled bearer , priority 0 [ 77.239669][ T7352] syzkaller0: entered promiscuous mode [ 77.241808][ T7352] syzkaller0: entered allmulticast mode [ 77.255478][ T7352] netlink: 2 bytes leftover after parsing attributes in process `syz.4.388'. [ 77.261764][ T7352] tipc: Resetting bearer [ 77.266516][ T7351] tipc: Resetting bearer [ 77.275624][ T7351] tipc: Disabling bearer [ 77.286734][ T40] audit: type=1400 audit(1761414205.699:464): avc: denied { bind } for pid=7353 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.290119][ T24] usb 6-1: USB disconnect, device number 4 [ 77.421691][ T7373] overlayfs: missing 'workdir' [ 77.471554][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.398'. [ 77.474767][ T7380] netlink: 24 bytes leftover after parsing attributes in process `syz.1.398'. [ 77.481120][ T7380] netlink: 20 bytes leftover after parsing attributes in process `syz.1.398'. [ 77.509583][ T7391] nbd: must specify a device to reconfigure [ 77.509712][ T7390] syz.2.401 uses obsolete (PF_INET,SOCK_PACKET) [ 77.520781][ T7390] NILFS (nbd2): device size too small [ 77.527735][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.401'. [ 77.702662][ T40] audit: type=1400 audit(1761414206.109:465): avc: denied { read } for pid=7423 comm="syz.4.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.735111][ T40] audit: type=1400 audit(1761414206.149:466): avc: denied { setopt } for pid=7418 comm="syz.1.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.735476][ T7420] tmpfs: Bad value for 'mpol' [ 77.972703][ T40] audit: type=1400 audit(1761414206.379:467): avc: denied { mount } for pid=7433 comm="syz.5.415" name="/" dev="ramfs" ino=18660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 77.997492][ T40] audit: type=1400 audit(1761414206.409:468): avc: denied { accept } for pid=7433 comm="syz.5.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.998833][ T7434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.009540][ T7434] batadv_slave_0: entered promiscuous mode [ 78.023181][ T7434] capability: warning: `syz.5.415' uses deprecated v2 capabilities in a way that may be insecure [ 78.038520][ T7438] program syz.1.417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.070738][ T7442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7442 comm=syz.5.418 [ 78.191855][ T40] audit: type=1400 audit(1761414206.599:469): avc: denied { mounton } for pid=7449 comm="syz.1.422" path="/112/file0" dev="gadgetfs" ino=10304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 78.195716][ T7450] bridge_slave_0: left allmulticast mode [ 78.204020][ T61] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 78.204516][ T7450] bridge_slave_0: left promiscuous mode [ 78.210035][ T7450] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.220538][ T7450] bridge_slave_1: left allmulticast mode [ 78.222890][ T7450] bridge_slave_1: left promiscuous mode [ 78.226101][ T7450] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.234830][ T7450] team0: Port device team_slave_0 removed [ 78.240647][ T7450] team0: Port device team_slave_1 removed [ 78.242952][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.246257][ T7450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.248620][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.251474][ T7450] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 78.284958][ T7450] sit0: entered promiscuous mode [ 78.307531][ T7450] team0: Port device sit0 added [ 78.363669][ T61] usb 7-1: Using ep0 maxpacket: 32 [ 78.367323][ T61] usb 7-1: config 92 has an invalid interface number: 215 but max is 1 [ 78.370056][ T61] usb 7-1: config 92 contains an unexpected descriptor of type 0x2, skipping [ 78.372818][ T61] usb 7-1: config 92 has an invalid descriptor of length 215, skipping remainder of the config [ 78.379602][ T61] usb 7-1: config 92 has 1 interface, different from the descriptor's value: 2 [ 78.382453][ T61] usb 7-1: config 92 has no interface number 0 [ 78.385867][ T61] usb 7-1: config 92 interface 215 altsetting 1 endpoint 0x1 has an invalid bInterval 130, changing to 7 [ 78.389363][ T61] usb 7-1: config 92 interface 215 altsetting 1 endpoint 0x1 has invalid maxpacket 42474, setting to 1024 [ 78.392958][ T61] usb 7-1: config 92 interface 215 altsetting 1 has an endpoint descriptor with address 0xED, changing to 0x8D [ 78.397309][ T61] usb 7-1: config 92 interface 215 altsetting 1 endpoint 0x8D has invalid maxpacket 19332, setting to 64 [ 78.400766][ T61] usb 7-1: config 92 interface 215 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 78.404714][ T61] usb 7-1: config 92 interface 215 has no altsetting 0 [ 78.411442][ T61] usb 7-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=b8.d2 [ 78.414552][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.417119][ T61] usb 7-1: Product: 䡫ﭽޢ쏾냎죔扚㬬䚇㢉콰眵쏊܍ꪏᐊ熊勺坜檆ꦹᗮ巂⠒ꏞ敦ꐁᷘ作Ꞟ뱤蔯䲊鴶რﰨῃ䁝흷쾩艌껪ꨖ嶪垵ꓫ⾆䍇᷏ﾺ좎ꔃ㘻韈〔溅鑭沽 [ 78.423377][ T61] usb 7-1: Manufacturer: 㐊 [ 78.425097][ T61] usb 7-1: SerialNumber: 巢휸ի·䤅ꆘ苁檙⍺ཎ魹蘻激쁸槿략꼂㵐ᐈ颫냝蒮簭忤莅꼢⫳뢣홸樵릪⟃阠ⰼ熳힂蜲侁⇱ﱿ譜ѻꖙ栫娿芢쵑챲舟䄠큢篔Ꮷ쇻쓆ꐗ횳ꅚ [ 78.519689][ T7475] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 78.523640][ T5928] Bluetooth: hci4: command 0x040f tx timeout [ 78.538692][ T7478] MINIX-fs: blocksize too small for device [ 78.649014][ T61] usb 7-1: USB disconnect, device number 7 [ 78.655867][ T61] ================================================================== [ 78.658550][ T61] BUG: KASAN: slab-use-after-free in hdm_disconnect+0x227/0x250 [ 78.660935][ T61] Read of size 8 at addr ffff888053fbd8a0 by task kworker/1:1/61 [ 78.664131][ T61] [ 78.665533][ T61] CPU: 1 UID: 0 PID: 61 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 78.665546][ T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.665553][ T61] Workqueue: usb_hub_wq hub_event [ 78.665568][ T61] Call Trace: [ 78.665572][ T61] [ 78.665576][ T61] dump_stack_lvl+0x116/0x1f0 [ 78.665592][ T61] print_report+0xcd/0x630 [ 78.665604][ T61] ? __virt_addr_valid+0x81/0x610 [ 78.665617][ T61] ? __phys_addr+0xe8/0x180 [ 78.665630][ T61] ? hdm_disconnect+0x227/0x250 [ 78.665642][ T61] kasan_report+0xe0/0x110 [ 78.665653][ T61] ? hdm_disconnect+0x227/0x250 [ 78.665666][ T61] hdm_disconnect+0x227/0x250 [ 78.665678][ T61] usb_unbind_interface+0x1dd/0x9e0 [ 78.665693][ T61] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 78.665709][ T61] ? __pfx_usb_unbind_interface+0x10/0x10 [ 78.665723][ T61] device_remove+0x125/0x170 [ 78.665739][ T61] device_release_driver_internal+0x44b/0x620 [ 78.665751][ T61] bus_remove_device+0x22f/0x420 [ 78.665766][ T61] device_del+0x396/0x9f0 [ 78.665776][ T61] ? __pfx_device_del+0x10/0x10 [ 78.665784][ T61] ? kobject_put+0x210/0x5a0 [ 78.665795][ T61] usb_disable_device+0x355/0x7d0 [ 78.665808][ T61] usb_disconnect+0x2e1/0x9c0 [ 78.665820][ T61] hub_event+0x1c81/0x4fe0 [ 78.665836][ T61] ? __lock_acquire+0xb8a/0x1c90 [ 78.665853][ T61] ? __pfx_hub_event+0x10/0x10 [ 78.665864][ T61] ? assoc_array_insert+0xb70/0x3970 [ 78.665881][ T61] ? rcu_is_watching+0x12/0xc0 [ 78.665895][ T61] process_one_work+0x9cf/0x1b70 [ 78.665908][ T61] ? __pfx_hub_event+0x10/0x10 [ 78.665919][ T61] ? __pfx_process_one_work+0x10/0x10 [ 78.665932][ T61] ? assign_work+0x1a0/0x250 [ 78.665941][ T61] worker_thread+0x6c8/0xf10 [ 78.665954][ T61] ? __pfx_worker_thread+0x10/0x10 [ 78.665964][ T61] kthread+0x3c5/0x780 [ 78.665974][ T61] ? __pfx_kthread+0x10/0x10 [ 78.665983][ T61] ? rcu_is_watching+0x12/0xc0 [ 78.665995][ T61] ? __pfx_kthread+0x10/0x10 [ 78.666004][ T61] ret_from_fork+0x675/0x7d0 [ 78.666013][ T61] ? __pfx_kthread+0x10/0x10 [ 78.666022][ T61] ret_from_fork_asm+0x1a/0x30 [ 78.666039][ T61] [ 78.666043][ T61] [ 78.737639][ T61] Allocated by task 61: [ 78.738963][ T61] kasan_save_stack+0x33/0x60 [ 78.740470][ T61] kasan_save_track+0x14/0x30 [ 78.741968][ T61] __kasan_kmalloc+0xaa/0xb0 [ 78.743449][ T61] hdm_probe+0xb3/0x19a0 [ 78.744829][ T61] usb_probe_interface+0x303/0xa40 [ 78.746497][ T61] really_probe+0x241/0xa90 [ 78.747938][ T61] __driver_probe_device+0x1de/0x440 [ 78.749632][ T61] driver_probe_device+0x4c/0x1b0 [ 78.751233][ T61] __device_attach_driver+0x1df/0x310 [ 78.752886][ T61] bus_for_each_drv+0x159/0x1e0 [ 78.754315][ T61] __device_attach+0x1e4/0x4b0 [ 78.755831][ T61] bus_probe_device+0x17f/0x1c0 [ 78.757394][ T61] device_add+0x1148/0x1aa0 [ 78.758831][ T61] usb_set_configuration+0x1187/0x1e20 [ 78.760553][ T61] usb_generic_driver_probe+0xb1/0x110 [ 78.762265][ T61] usb_probe_device+0xef/0x3e0 [ 78.763776][ T61] really_probe+0x241/0xa90 [ 78.765222][ T61] __driver_probe_device+0x1de/0x440 [ 78.766912][ T61] driver_probe_device+0x4c/0x1b0 [ 78.768507][ T61] __device_attach_driver+0x1df/0x310 [ 78.770214][ T61] bus_for_each_drv+0x159/0x1e0 [ 78.771735][ T61] __device_attach+0x1e4/0x4b0 [ 78.773256][ T61] bus_probe_device+0x17f/0x1c0 [ 78.774796][ T61] device_add+0x1148/0x1aa0 [ 78.776259][ T61] usb_new_device+0xd07/0x1a60 [ 78.777776][ T61] hub_event+0x2f34/0x4fe0 [ 78.779196][ T61] process_one_work+0x9cf/0x1b70 [ 78.780775][ T61] worker_thread+0x6c8/0xf10 [ 78.782242][ T61] kthread+0x3c5/0x780 [ 78.783680][ T61] ret_from_fork+0x675/0x7d0 [ 78.785184][ T61] ret_from_fork_asm+0x1a/0x30 [ 78.786732][ T61] [ 78.787505][ T61] Freed by task 61: [ 78.788730][ T61] kasan_save_stack+0x33/0x60 [ 78.790241][ T61] kasan_save_track+0x14/0x30 [ 78.791743][ T61] __kasan_save_free_info+0x3b/0x60 [ 78.793408][ T61] __kasan_slab_free+0x5f/0x80 [ 78.794926][ T61] kfree+0x2b8/0x6d0 [ 78.796156][ T61] device_release+0xa4/0x240 [ 78.797624][ T61] kobject_put+0x1e7/0x5a0 [ 78.799040][ T61] device_unregister+0x2f/0xc0 [ 78.800569][ T61] hdm_disconnect+0x10b/0x250 [ 78.802059][ T61] usb_unbind_interface+0x1dd/0x9e0 [ 78.803707][ T61] device_remove+0x125/0x170 [ 78.805197][ T61] device_release_driver_internal+0x44b/0x620 [ 78.807123][ T61] bus_remove_device+0x22f/0x420 [ 78.808711][ T61] device_del+0x396/0x9f0 [ 78.810085][ T61] usb_disable_device+0x355/0x7d0 [ 78.812126][ T61] usb_disconnect+0x2e1/0x9c0 [ 78.813944][ T61] hub_event+0x1c81/0x4fe0 [ 78.815703][ T61] process_one_work+0x9cf/0x1b70 [ 78.817681][ T61] worker_thread+0x6c8/0xf10 [ 78.819519][ T61] kthread+0x3c5/0x780 [ 78.821140][ T61] ret_from_fork+0x675/0x7d0 [ 78.822935][ T61] ret_from_fork_asm+0x1a/0x30 [ 78.824841][ T61] [ 78.825834][ T61] The buggy address belongs to the object at ffff888053fbc000 [ 78.825834][ T61] which belongs to the cache kmalloc-8k of size 8192 [ 78.831213][ T61] The buggy address is located 6304 bytes inside of [ 78.831213][ T61] freed 8192-byte region [ffff888053fbc000, ffff888053fbe000) [ 78.836529][ T61] [ 78.837480][ T61] The buggy address belongs to the physical page: [ 78.839678][ T61] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x53fb8 [ 78.842533][ T61] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 78.845190][ T61] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 78.847529][ T61] page_type: f5(slab) [ 78.848805][ T61] raw: 00fff00000000040 ffff88801b443180 dead000000000122 0000000000000000 [ 78.851463][ T61] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 78.854144][ T61] head: 00fff00000000040 ffff88801b443180 dead000000000122 0000000000000000 [ 78.856858][ T61] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 78.859544][ T61] head: 00fff00000000003 ffffea00014fee01 00000000ffffffff 00000000ffffffff [ 78.862235][ T61] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 78.864927][ T61] page dumped because: kasan: bad access detected [ 78.866962][ T61] page_owner tracks the page as allocated [ 78.868755][ T61] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7450, tgid 7448 (syz.5.421), ts 78268933955, free_ts 78189139921 [ 78.874546][ T61] post_alloc_hook+0x1c0/0x230 [ 78.876087][ T61] get_page_from_freelist+0x10a3/0x3a30 [ 78.877836][ T61] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 78.879686][ T61] alloc_pages_mpol+0x1fb/0x550 [ 78.881231][ T61] new_slab+0x24a/0x360 [ 78.882553][ T61] ___slab_alloc+0xdae/0x1a60 [ 78.884038][ T61] __slab_alloc.constprop.0+0x63/0x110 [ 78.885777][ T61] __kmalloc_cache_noprof+0x477/0x780 [ 78.887462][ T61] audit_log_d_path+0xed/0x200 [ 78.888999][ T61] audit_log_lsm_data+0xacf/0x1fe0 [ 78.890610][ T61] common_lsm_audit+0x238/0x300 [ 78.892129][ T61] slow_avc_audit+0x186/0x210 [ 78.893567][ T61] avc_has_perm+0x1b5/0x1f0 [ 78.894996][ T61] inode_has_perm+0x168/0x1d0 [ 78.896518][ T61] file_has_perm+0x2e4/0x350 [ 78.897985][ T61] file_map_prot_check+0x24e/0x360 [ 78.899591][ T61] page last free pid 7449 tgid 7449 stack trace: [ 78.901575][ T61] __free_frozen_pages+0x7df/0x1160 [ 78.903202][ T61] __put_partials+0x130/0x170 [ 78.904693][ T61] qlist_free_all+0x4d/0x120 [ 78.906169][ T61] kasan_quarantine_reduce+0x195/0x1e0 [ 78.907872][ T61] __kasan_slab_alloc+0x69/0x90 [ 78.909435][ T61] kmem_cache_alloc_noprof+0x250/0x6e0 [ 78.911144][ T61] __pmd_alloc+0xbf/0x8b0 [ 78.912551][ T61] __handle_mm_fault+0xada/0x2aa0 [ 78.914132][ T61] handle_mm_fault+0x589/0xd10 [ 78.915663][ T61] do_user_addr_fault+0x60c/0x1370 [ 78.917283][ T61] exc_page_fault+0x64/0xc0 [ 78.918718][ T61] asm_exc_page_fault+0x26/0x30 [ 78.920265][ T61] [ 78.921030][ T61] Memory state around the buggy address: [ 78.922786][ T61] ffff888053fbd780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.925291][ T61] ffff888053fbd800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.927779][ T61] >ffff888053fbd880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.930267][ T61] ^ [ 78.931861][ T61] ffff888053fbd900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.934356][ T61] ffff888053fbd980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.936857][ T61] ================================================================== [ 78.941059][ T61] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 78.943361][ T61] CPU: 1 UID: 0 PID: 61 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 78.946230][ T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.949555][ T61] Workqueue: usb_hub_wq hub_event [ 78.951141][ T61] Call Trace: [ 78.952204][ T61] [ 78.953141][ T61] dump_stack_lvl+0x3d/0x1f0 [ 78.954503][ T61] vpanic+0x640/0x6f0 [ 78.955792][ T61] panic+0xca/0xd0 [ 78.957003][ T61] ? __pfx_panic+0x10/0x10 [ 78.958421][ T61] ? hdm_disconnect+0x227/0x250 [ 78.959962][ T61] ? preempt_schedule_common+0x44/0xc0 [ 78.961479][ T61] ? preempt_schedule_thunk+0x16/0x30 [ 78.962962][ T61] ? check_panic_on_warn+0x1f/0xb0 [ 78.964589][ T61] check_panic_on_warn+0xab/0xb0 [ 78.966181][ T61] end_report+0x107/0x170 [ 78.967544][ T61] kasan_report+0xee/0x110 [ 78.969035][ T61] ? hdm_disconnect+0x227/0x250 [ 78.970577][ T61] hdm_disconnect+0x227/0x250 [ 78.972065][ T61] usb_unbind_interface+0x1dd/0x9e0 [ 78.973705][ T61] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 78.975461][ T61] ? __pfx_usb_unbind_interface+0x10/0x10 [ 78.977288][ T61] device_remove+0x125/0x170 [ 78.978761][ T61] device_release_driver_internal+0x44b/0x620 [ 78.980947][ T61] bus_remove_device+0x22f/0x420 [ 78.982511][ T61] device_del+0x396/0x9f0 [ 78.983872][ T61] ? __pfx_device_del+0x10/0x10 [ 78.985418][ T61] ? kobject_put+0x210/0x5a0 [ 78.986911][ T61] usb_disable_device+0x355/0x7d0 [ 78.988505][ T61] usb_disconnect+0x2e1/0x9c0 [ 78.990004][ T61] hub_event+0x1c81/0x4fe0 [ 78.991419][ T61] ? __lock_acquire+0xb8a/0x1c90 [ 78.992995][ T61] ? __pfx_hub_event+0x10/0x10 [ 78.994501][ T61] ? assoc_array_insert+0xb70/0x3970 [ 78.996201][ T61] ? rcu_is_watching+0x12/0xc0 [ 78.997709][ T61] process_one_work+0x9cf/0x1b70 [ 78.999265][ T61] ? __pfx_hub_event+0x10/0x10 [ 79.000788][ T61] ? __pfx_process_one_work+0x10/0x10 [ 79.002466][ T61] ? assign_work+0x1a0/0x250 [ 79.003927][ T61] worker_thread+0x6c8/0xf10 [ 79.005393][ T61] ? __pfx_worker_thread+0x10/0x10 [ 79.007015][ T61] kthread+0x3c5/0x780 [ 79.008319][ T61] ? __pfx_kthread+0x10/0x10 [ 79.009786][ T61] ? rcu_is_watching+0x12/0xc0 [ 79.011267][ T61] ? __pfx_kthread+0x10/0x10 [ 79.012734][ T61] ret_from_fork+0x675/0x7d0 [ 79.014185][ T61] ? __pfx_kthread+0x10/0x10 [ 79.015662][ T61] ret_from_fork_asm+0x1a/0x30 [ 79.017177][ T61] [ 79.018733][ T61] Kernel Offset: disabled [ 79.020084][ T61] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:43:27 Registers: info registers vcpu 0 CPU#0 RAX=00000000000f902b RBX=0000000000000000 RCX=ffffffff8b6052a9 RDX=0000000000000000 RSI=ffffffff8da29e99 RDI=ffffffff8bf06cc0 RBP=fffffbfff1c12f40 RSP=ffffffff8e007df8 R8 =0000000000000001 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e097a00 R14=ffffffff9081f5d0 R15=0000000000000000 RIP=ffffffff8b603d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004eb77000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f329b212fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f329b212fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f329b212fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f329b212ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f329b21307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f329b21315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000120 0000000800000084 0000000000000020 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f329bf1d100 00007f329b3b7460 00007f329b3b0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f329b3b74b8 00007f329b3b74b0 00007f329b3b74a8 00007f329b3b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85294dd5 RDI=ffffffff9add6740 RBP=ffffffff9add6700 RSP=ffffc90000cf7150 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000006b R14=ffffffff9add6700 R15=ffffffff85294d70 RIP=ffffffff85294dff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6b0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffa6b775a38 CR3=00000000499fd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed22a0660 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29a2612fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29a2612fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29a2612fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29a2612ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29a261307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f29a261315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=00000000ef9d33e4 RDX=0ac0d5affe09d4ff RSI=0000000068c1bacb RDI=0000000086db7919 RBP=ffff88802d5e0000 RSP=ffffc90003d7f888 R8 =0ac0d5affe09d4ff R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=ffff88802d5e0b30 R13=ffff88802d5e0b30 R14=000000005a44979c R15=0000000000000001 RIP=ffffffff8198cba5 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc9bebf6e9c CR3=000000004b9be000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffbdaf0320 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39f2412fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39f2412fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39f2412fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39f2412ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39f241307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f39f241315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000060 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000060 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff897eaf35 RDX=ffff888026df2480 RSI=0000000000000000 RDI=0000000000000005 RBP=dffffc0000000000 RSP=ffffc90004e47b18 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffc90004e47bc0 R13=000000000000c90a R14=ffff88810a3e4850 R15=0000000000000000 RIP=ffffffff8b6347a0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6d0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2e5975 CR3=000000004b9be000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040101000 Opmask01=0000000000000002 Opmask02=00000000bfefefff Opmask03=0000000000010000 Opmask04=00000000fefeffe0 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fd4d5149e0 000055fd4d523e90 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fd4d5149e0 000055fd4d523e90 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fd4d68c288 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa6bff1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a7fd767786bca 2a2a7fd727bc5ddf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a55d041c06131 2a2a7fd7677057ab ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312d372f37627375 2f322e6463685f79 6d6d75642f6d726f 6674616c702f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 004a4c415044005c 55554a4943004c55 4451440046475700 464c57404b404200 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20706968636f7263 694d3d4553414241 5441445f4d4f5246 5f524f444e45565f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 009a80efbdb2e6ad 91e985bae69480e3 889fe9bb98e38394 ea8ea2ecbabeef8f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b7e1878de486bee2 ab93eab59ee5aab6 e596a8eaaabbea8c 89e8a9beecb79ded ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9d81e483bfe1a8b0 efa083e1b6b4e98a b2e4af94e896a9ee a4b1eb9e9eea9cbd ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e498b7e1afa3ef81 90eaa695e69e8fea bf82ee92a0e282b7 e5ae97e1b9a6ea86 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000