last executing test programs: 3m21.532901563s ago: executing program 32 (id=574): r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000240)="0905e17c995f55e527626c0f189289bcbc1b330571cc2e393d92004aed17b99f2c6df1928640bdf73b0a7d8c375b44ad6d46682dbcfbdadb5b6985ac3714521781c366180b43617622b079888bc21f506b5418ef7157c845e1a0d669895f3ad0e638679a03a2b49759c2a1bbf546e8a6fceb1dd53f9043a3bc42afd0a095c30f937f3d", 0x83, r2) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r1}, 0x0, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="ffe0284b66", 0x5, 0x4008000, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = syz_io_uring_setup(0x77c5, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r4, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x36}, 0x4, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x372c6fbf, 0xa2b9, 0x6, 0x9, 0xe4, 0x9, 0x2, 0x3, 0xbbf, 0x0, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0x7, 0x81, 0x8a, 0xfffffff8, 0x558e0d31, 0x4, 0xfffeffff, 0x91, 0x5, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x0, 0x4a7, 0x81, 0x6, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xfffffff7, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0xf, 0x8, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x8, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x104, 0x0, 0x7, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0xb, 0x2, 0x401, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x7, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x2, 0x8000, 0x5, 0xfffffffb, 0x200004, 0x1000, 0x4, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e63f783, 0x80000001, 0xb, 0x1, 0x491, 0x8d3, 0x6, 0x108, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0x4, 0xd3, 0x7, 0x3435, 0x5, 0x7, 0xfd, 0x401, 0x101, 0x7ff, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x82, 0x4, 0x9d86, 0x9, 0xfefffff7, 0x6, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0xfffffffe, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x806, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x14000, 0x1, 0x1b18]}, 0x45c) sendmsg$inet(r4, &(0x7f00000007c0)={&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000200)="a9b92212f42ea9c9a92c45", 0xb}], 0x1}, 0x40004) io_uring_enter(r5, 0x27e2, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000400)=0x100) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00') write$cgroup_int(r9, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r9, 0x39) getsockopt$sock_cred(r10, 0x1, 0x11, 0x0, &(0x7f0000000080)) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 2m58.030570948s ago: executing program 33 (id=831): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0303000000000000000006001400", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 2m46.017768837s ago: executing program 34 (id=1107): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/mnt\x00') ioctl$BTRFS_IOC_ADD_DEV(r0, 0x8008b705, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000080), 0xe7, 0x203) ioctl$I2C_PEC(r1, 0x708, 0xb) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20020, &(0x7f0000000500)={[{@gid}]}) (async) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0xb, 0x8, &(0x7f0000000000)={0x1, "f0e9751a54215991ecff3947a72cae56a5c0e1702414b5fd2ecd561bbcc49058e0"}}) 2m20.230998053s ago: executing program 1 (id=1674): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000200)=@in={0x2, 0x4e21, @private=0xa010101}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000280)="0d0d929f940b14a91aef694c1b37159d2a42fc3d86806b9d570090a8a4143487dc6d367e89b1a1cb3c8ec65a65a76b275f2965b7d56883f879f48fc5f0f6125b30c4858490fd6e8e3af3503ffc3224d22999b913", 0x54}, {&(0x7f0000000380)="1fa4b111e6cf0c461bb00fbbb69989b5d022c95a38ed760c937e561adbea543d430431938628d8bafed7ae911cff53c21e902f5bd6d71df5d39a184768a995446a0404e43747b57a167cd1a3a89d078d702ae32e2e8c6c8d3694c597159aff", 0x5f}, {&(0x7f0000000400)="1918766cc21eec2804e7b5220ab0bb1babd35e5f0f66586605a509233e36bb7a1397466918cba9b4ef650f39ac3555ec00895cd024ccceb9328bceaad47424bb4c56080fda4be9c9c7c3b4c173079c71c95f256048fac5e5ca5935cf219ba85a0936da7d31", 0x65}, {&(0x7f0000000480)="275c5e3258edd94d0c916c5f3b5de76ad236137f7a6aa2fa669312984b7e36fc9f0a18725a5f3205ca7ecd4fc93422d3b8ba6551ab343c10d5a437be66b6640e1ee6e67d3f63f23541da4d5417340beb1c86885a4bc94a4531e81992a7d642aa6cc3baf1f3e60d89a45344bf8061e5e735280efe35d62d1a2805ce2dfe778d6b0a89bf4e5307066b3c9b5483b830f22bb65f491165cceec4f3df910ed6c6e5", 0x9f}, {&(0x7f00000005c0)="b7acc66674756f823021b961251ad9a31b18c89cf272fbdc9378b1d00c6fdb548e3de93b1b9da00698cf25871e987dde4c4499f80558abf51bbbcbf0fa493451ba5bc50fc86b67764a092538f42a58e394a77c1aac29e6a31a7e228722755b62ad2530231528f6fe5b01faf39ea4229b41e044b0b028647eaa932250f81651bcf1174fe1e79ef6bb8cbc6adcd89c98140cc34228bc51bda10a0a8e1d412f65584e7066554e2b7921bf6fd404e0a60b5c6c67e9", 0xb3}, {&(0x7f0000000680)="c5ea7f61899e1179229a0f3afb1605d80c8b4ec1fece366b1023982375ec60021869443ad2dc91a96dbab90b6dc410216a67010052d0a026251df95cae72acb87d226b60cad4e001e66cf9d2c636efb71e2ccc071a6a453bf9dc9e0ce90a6ba508f6aa09dbb739d3acf6a26edbe62d22ced2b3b06e846a24b644fe2481543f1f81d74e4e493c04ef3b267b53d10923e987d98187490284c0e149ebba6a8774e284dee20d271160f9120d069f57383657fc450229e47aed271a6585ec5cec9e29bf3c6773cca4a78d0932d4ed159a9cb1b2c04fce5ff00a2ba12066c58b749d34f4fecb660754a5a05f4cd680cbde9985b1e201", 0xf3}, {&(0x7f0000000780)="030b889b28700c0eb05862539ef1564ba40703698ec554c22ac7843249babe7109e3af351a8aa49e106c6c1f24993f35cbd6752896f282a8f12b80e6b90d6ef4af4963d20c6440a9d4e5c6a22668b6b6dfbf0d", 0x53}, {&(0x7f0000000300)="c0a0a7ed92ca778295d5bffd876fc7459c107c20a038be73de5c15b1feb4ce91f3f79310f94cb62b6ac19f6ffcbaf4d844090155289c00b1", 0x38}], 0x8, &(0x7f0000000880)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x7fff}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0xa8}, 0x4000) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000008000100c0"]) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="04005b00060065"], 0x28}}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r7, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 2m20.100980229s ago: executing program 1 (id=1680): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r0, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004740)=[{&(0x7f00000022c0)={0x10, 0x2d, 0x200, 0x70bd29}, 0x10}], 0x1, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x20}, 0x0) 2m20.100607095s ago: executing program 1 (id=1681): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x12200, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/238, 0xee}, {&(0x7f0000000140)=""/66, 0x42}, {&(0x7f00000001c0)=""/120, 0x78}], 0x3, 0x0, 0x2) keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffe, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 2m20.017412119s ago: executing program 1 (id=1683): r0 = epoll_create1(0x0) syz_open_dev$media(&(0x7f0000000000), 0x4, 0x62602) close_range(r0, 0xffffffffffffffff, 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000080)={'trans=virtio,', {[{@version_u}]}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001a0013072cbd7000fcdbdf25000000000000000000000000000000f5d68986b297c7253925e08a345cb1012001000000000000000000000000000100", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x9, &(0x7f00000000c0)=[{0x400, 0x7, 0x5, 0xb71}, {0xb08, 0xa, 0x2, 0x1000}, {0x8, 0x5, 0x7, 0x8}, {0x8, 0x40, 0x7, 0x2}, {0x3, 0x8, 0x0, 0x9392}, {0x1, 0x8, 0x7, 0x1}, {0x0, 0x6, 0xc5, 0x7}, {0x4, 0xb, 0xa, 0x2}, {0xafe5, 0x49, 0x6, 0x10}]}, 0x10) 2m19.931248904s ago: executing program 1 (id=1684): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000580)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x71, 0x3f, [{0x5, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x1, 0x6, "7f36c525"}]}]}}, "09000080"}}}}}, 0x0) 2m19.781891361s ago: executing program 1 (id=1687): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x1d) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xcf) listen(r0, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x1d) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xcf) (async) listen(r0, 0x0) (async) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async) 2m17.259563522s ago: executing program 3 (id=1731): creat(&(0x7f00000000c0)='./file0\x00', 0x1ca) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r0, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e02']) close_range(r0, r0, 0x0) 2m17.25916971s ago: executing program 3 (id=1733): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x8005, 0x4}, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) userfaultfd(0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x2, 0x80805, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0xa8681, 0x0) signalfd4(r0, &(0x7f0000000180), 0x8, 0x80800) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 2m17.183849319s ago: executing program 3 (id=1737): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x20000000) r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x2ac, 0x0, 0x0, 0x15, 0x19, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000000d0f08e8ad896ba67a00973defa00", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000db0000000000000000000100", [0xc, 0x2000000]}) syz_open_procfs(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x67682, 0x0) r5 = dup(r4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) fallocate(r5, 0x80, 0x5, 0x967) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r1, 0x0) 2m17.073639238s ago: executing program 3 (id=1743): r0 = inotify_init1(0x0) r1 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r0, 0x8, r1) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') r2 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) fstat(r0, &(0x7f0000000080)) setpgid(0x0, r2) (async) open$dir(&(0x7f0000000340)='./file1\x00', 0x840, 0x80) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 2m17.073169391s ago: executing program 3 (id=1745): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000049c0)={0x2020}, 0xb3b) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x8a}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @broadcast}]}}}]}, 0x4c}, 0x1, 0x2000000000000000}, 0x0) 2m15.851381455s ago: executing program 3 (id=1751): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'macvlan1\x00', @random="0100061f8145"}) readv(r1, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/129, 0x81}], 0x1) socket$kcm(0x10, 0x2, 0x0) 2m15.771305995s ago: executing program 35 (id=1751): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'macvlan1\x00', @random="0100061f8145"}) readv(r1, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/129, 0x81}], 0x1) socket$kcm(0x10, 0x2, 0x0) 2m3.211591591s ago: executing program 36 (id=1687): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x1d) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xcf) listen(r0, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x1d) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xcf) (async) listen(r0, 0x0) (async) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async) 1m58.357882906s ago: executing program 8 (id=1975): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x2b, 0xa, 0x0, "32cfd5010000aa022c1e00f4bf40074000000400000000b00400d800", 0x30385056}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)=0x286d, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000020c0)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x40010041, 0x0) 1m58.25938342s ago: executing program 8 (id=1976): syz_usb_connect(0x0, 0x3ef, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xb4, 0xd2, 0xa2, 0x40, 0x5c6, 0x9231, 0xedb3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3dd, 0x2, 0x8, 0x2, 0x20, 0x1, [{{0x9, 0x4, 0x19, 0xf, 0xa, 0x9b, 0x9e, 0xc1, 0x10, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x4, 0x4, 0x9, "5697", '{'}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x6, 0x80}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x4, 0x1, 0xf2, "", '_'}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x3, 0xc, 0xc1, "acc2"}]}], [{{0x9, 0x5, 0x9, 0x10, 0x200, 0x2, 0x7, 0x1}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x0, 0x3, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x208, 0x5a, 0x6, 0x7, [@generic={0x74, 0x6, "3ec83eb964d7b3d008ece88a2600c7c72f0b568643590ac0f2d96b7629d7fa6f8886bd6772106bf6e72c4d64d119e1b1b364423334ab675c73c394fa6341519ff2a051c76572ab710fa26f71777c206099910cd29b5b99f2f296bd379a6b6477395bf7596a5a72699d24ac38f610a2c61cff"}, @generic={0x98, 0x9, "37573660c67faf00dc3b3c19d795aaf1dd20c17616754f2fd5189b393aebdcd5b145c938e2187fac47cd4b5a625b34a25cff924fc30b637d069e79a63b4f421e2c68fe97561790c7f7170315f87c68c8045180831cdb99457673113e8fe2956d0ca1ae1361a2ebbc273d0067a3a6c349e583311040ff53c6416b91834b020b3a2fb2b480dbfcb8868adb5712f2f0bf64d3b55d27a0c5"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x4, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x1}, @generic={0x25, 0x22, "f65ebb1109ec701f17bec9825357400944206411b16a6055ba0c716cbda8742af190c5"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x0, 0x55, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xb, 0x3, 0x4}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x7, 0x9, 0xd3}}, {{0x9, 0x5, 0x5, 0x1, 0x40, 0x55, 0x21, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x1, 0x8}, @generic={0x98, 0x22, "b3fd488ce3fa3c808f26f954f08553b1bbaa305aae8ff1cd7d5e4a4581801ecccf6adb16b69643881279a5f79a12ce04dc45533b32c1db912fdcb324c9b609311fde5d1328d3391d0c2bd2c3bfb09167dea7ddf896a9df08988bfb8fb59e2b385dd022a03524602cf2ce4665d8789a6bab4150ca767e9a4d9567b99d0ead6c3033102cd2338b48004c84f69c677d81be99d57a83ca6f"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x9, 0x0, 0x4}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x8, 0x0, 0x4, [@generic={0xda, 0x6, "5d0669efc36e4d00a2b887397ebe8f73befc09b1dffa236e9549f86306b443adfc145556fffe5998cdaf7891933871bf81616efc0f09dd5b490810fcdadca7069ffd95c572fb2cd496d0e7122ff205a7829475754e5a7afd8694d4bc5b99d272ddce89ecb6352af56471e9e6014e9464c74e571ab48c6c5dcd7b05618f2368d28ce34e9764470bb39da20e59917872a6978f236653a1a88fea9c318680c8d6eacb19048b36cb0f8b919e3fc0219a5c2cd5522cccd808ac8dd5277b18a5290ed1188334e0367c5351b5ca59cc003cedd882fefb0bf6a7f3e3"}, @generic={0x52, 0x23, "7d802446ca642e8833d8ac5e31f032fa8bbcf0580b586681c175c86b35d0b2b4262496f2184178b1ea36d473d75c2e741ae77f9b13ec33c05275f5462ea77ce0376079b783be34538d6d361d40ae49b1"}]}}]}}, {{0x9, 0x4, 0x37, 0xb0, 0x3, 0x5a, 0x95, 0xc2, 0xd, [@uac_control={{0xa, 0x24, 0x1, 0xb69, 0x3}, [@extension_unit={0xc, 0x24, 0x8, 0x5, 0x0, 0x5, "c22745d218"}]}], [{{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x4, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0xec}]}}, {{0x9, 0x5, 0x9, 0x14, 0x200, 0xfa, 0x7f, 0x4}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0xa, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf9, 0x8}]}}]}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x6b, 0x9, 0x1, 0x10, 0x25}, 0x104, &(0x7f00000006c0)={0x5, 0xf, 0x104, 0x4, [@generic={0xda, 0x10, 0xa, "68f6f6196f85a533c3930212ec5f243708eb83eada819219ad3fd3f24796ba498bcb516c2facb296026c96bffddda91650e695da1c102ce0c62c4043cc4672314c64fbf4b33542ce22e767d2abf9f22110710fe9db22c79f6eec9000e7f8774f9eb4bf318d555a025b0ec9ecd59a6b28c362d146083311d4e10f89e92d86317531503efd8551bef3c987473d3cb3ccb9dc01ecdf59b31514b3a94bee0e2cdbba3fab99aa5c3fb63ac9d550b38594744e2c6924bdc8728ac5f7a89b33f067d7fd552ecf903973354a1131db60d2bcbf4e9613479bbe30eb"}, @generic={0x1b, 0x10, 0x5, "a38cb0942b1f6ccdaf20cae011bb3bba120838ad5a055e5c"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xd, 0xd, 0x20f}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x430}}, {0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="6e03aff56a76dbb4eedac631cd35be8ca4e225f3e03e7e4dce1f76952dd585392248532e6d8e10defa72e9f35c0faaccddf8781a20ca36c05aaa70e3835d0b4f80b7b17e3d57032ebccb6c14f59f6836e4a9a59a36255c0f9de40cf02d4f0835e90fe246fa6728c77b055fd43dd9"]}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000804000/0x1000)=nil) r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) read(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000080)) r2 = io_uring_setup(0x354d, &(0x7f0000000880)={0x0, 0x2d8, 0x800, 0x1, 0x1c5}) syz_io_uring_setup(0x397c, &(0x7f0000000900)={0x0, 0x65f4, 0x4, 0x81, 0x1b3, 0x0, r2}, &(0x7f0000000980), &(0x7f00000009c0)) 1m56.806021569s ago: executing program 8 (id=1999): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x20000000) r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x2ac, 0x0, 0x0, 0x15, 0x19, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000000d0f08e8ad896ba67a00973defa00", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000db000000000000000700", [0xc, 0x2000000]}) syz_open_procfs(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x67682, 0x0) r5 = dup(r4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) fallocate(r5, 0x80, 0x5, 0x967) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r1, 0x0) 1m56.710844589s ago: executing program 8 (id=2000): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183400, 0x119) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='sched_process_fork\x00', r0}, 0x18) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183400, 0x119) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='sched_process_fork\x00', r0}, 0x18) (async) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) 1m56.647853405s ago: executing program 8 (id=2001): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x2ac, 0x0, 0x0, 0x15, 0x19, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000000d0f08e8ad896ba67a00973defa00", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000db00", [0xc, 0x2000000]}) 1m56.388109675s ago: executing program 8 (id=2006): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x44}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) nanosleep(&(0x7f0000000040)={r2, r3+10000000}, &(0x7f0000000100)) 1m56.300155629s ago: executing program 37 (id=2006): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x44}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) nanosleep(&(0x7f0000000040)={r2, r3+10000000}, &(0x7f0000000100)) 1m49.056815231s ago: executing program 2 (id=2089): socketpair(0x15, 0x800, 0x7ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x40, 0x0, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0xa0, 0x7800, 0x0, 0x1}}) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x8, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xa, 0xa}, {0x1, 0x9}, {0xc, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) (async) close(r1) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@RTM_GETNSID={0x1c, 0x5a, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NETNSA_NSID={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x4) (async) recvmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000380)=""/120, 0x78}, {&(0x7f0000000400)=""/40, 0x28}, {&(0x7f0000000440)=""/38, 0x26}], 0x3, &(0x7f00000004c0)=""/7, 0x7}, 0x10040) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xff, 0x15}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x309}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x8, 0x8, 0x80]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x170, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x140, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x170}, 0x1, 0x0, 0x0, 0x4048}, 0x11) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x16, &(0x7f0000000900)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_fd={0x18, 0x2}, @generic={0x1, 0x0, 0x5, 0x44de, 0x80}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffffffd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000}, @exit], &(0x7f00000009c0)='syzkaller\x00', 0x5, 0xc6, &(0x7f0000000a00)=""/198, 0x40f00, 0x73, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x0, 0x4, 0x1000, 0xe1c}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000b80)=[0x1, 0x1], &(0x7f0000000bc0)=[{0x1, 0x3, 0x1, 0x9}, {0x5, 0x2, 0x1, 0xc}, {0x3, 0x5, 0x6, 0x1}, {0x0, 0x1, 0xf, 0x1}, {0x2, 0x2, 0xb, 0x1}, {0x4, 0x2, 0xb, 0xb}, {0x0, 0x3, 0x4, 0x5}], 0x10, 0x7fff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000d00)=r3}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d80), 0x12001, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x30) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001080)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000e00)=@getae={0x224, 0x1f, 0x1, 0x70bd26, 0x25dfdbfc, {{@in6=@private0, 0x4d5, 0xa, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xff, 0x3500}, [@extra_flags={0x8, 0x18, 0x9c}, @tmpl={0x144, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x32}, 0x2, @in=@multicast1, 0x3503, 0x2, 0x2, 0x1, 0x4, 0x101, 0x2d3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x3504, 0x0, 0x0, 0x69, 0x1, 0x4, 0x6baf}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4d2, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3502, 0x2, 0x2, 0xb, 0xc, 0x2, 0x1}, {{@in=@remote, 0x4d2, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3503, 0x1, 0x3, 0xa, 0x3, 0x5, 0x2}, {{@in6=@local, 0x4d2, 0xff}, 0xb10e5f18a20731fe, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x0, 0x1, 0x2, 0x4, 0x72, 0xe0a, 0x9}]}, @algo_crypt={0x95, 0x2, {{'chacha20\x00'}, 0x268, "15e7ad3e8b60a5bc8f2c6dcd4270c4f34e590e8d68e45970fb9ae64fa6cd638ec96b12609e4004fb947272b46f3bc1f5409da202671a6d95b7c5b6c38bf86d684630216105d8279184b6f99115"}}]}, 0x224}, 0x1, 0x0, 0x0, 0x800}, 0x44) (async) mount$bind(&(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)='./file0\x00', &(0x7f0000001140), 0x8000, 0x0) (async) r7 = syz_open_dev$ndb(&(0x7f0000001180), 0x0, 0x40000) (async, rerun: 32) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000011c0), 0x40, 0x0) (rerun: 32) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) (async, rerun: 32) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x6, &(0x7f0000001240)={0x6, 0x0, &(0x7f0000001200)=[r3]}, 0x1) (rerun: 32) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000001440)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001400)={&(0x7f0000001300)={0xf0, r9, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ID={0xbd, 0x3, "c50c0da4cb493d9be0712e57081ae495b3ff4c95655d40fe0d0d79a2a3e669eff7ac67cba812d0179713d2562c8813902b2022d9baca36060da945d0348b18855a2d97d0ba83bed19f8503be5a01854c3168d2c50adf0d307f50e69d30fea9db372d65490b6ab188e551cf21b11d284fad8ca71bd7f73fba756b7944e26fba598a5346b1fb9a67691a526966fd40d5740f3b4d8de35e21c5afb6284652104aca53d136ddeda31713b9beb1f4b1fd3822da75022c9bfde92a15"}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x81) (async) sendmsg$AUDIT_TRIM(r0, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x10, 0x3f6, 0x200, 0x70bd28, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x8800) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001640)={r4, &(0x7f0000001580)="46638acfb2438f1b86e44d1978f6ecc000a79532f9c9beed56fe6193d111f0464e465932a26afc83c6924f9b34dea75e25b09c9d5cec1e280df5f1f83545bace2d65daac23cca075ee14acf1babfec455bdcf2d42de71fe87fa464faf62c55aecc682f1e2fd015f55f6aa91ba4309c53660befa57ba8483dbce82affda0d58a1d0b74634890b28f25e4d29920a336095a86ab51f1d0e6783406cff66b708d84939ca4748e5fb42b702e2e7eaaaf0"}, 0x20) (async) link(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='.\x00') (async) name_to_handle_at(r8, &(0x7f0000001700)='./file0\x00', &(0x7f0000001740)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x8000, 0x3ff, 0x3, 0xfffffff7}, 0xffff0001, 0x8}}, &(0x7f0000001780), 0x1200) (async) sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f0000001980)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001800)={0x110, r9, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf48}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c00000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5ffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4}, 0x11) (async) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f00000019c0)={@mcast2, 0x16, r2}) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001a00), 0x10000, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x1d) 1m49.056568624s ago: executing program 2 (id=2090): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x10}]}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02f5ffffff00000000000000000001"], 0x0) 1m49.00363964s ago: executing program 2 (id=2091): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r1, 0x6, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x4, "7255ffc1"}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x81}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xad02, 0x0) close(r7) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m48.928365099s ago: executing program 2 (id=2094): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f00000004c0)=0xffffff81) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000540)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/75, 0x0}) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000070000000000000004"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_setup(0x5, &(0x7f0000000e80)=0x0) syz_io_uring_setup(0x39ef, &(0x7f0000000580), &(0x7f0000000080), 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_getevents(r4, 0x803, 0x0, &(0x7f0000000240), 0x0) io_submit(r4, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r5, &(0x7f0000000080)="8c", 0x1}]) clock_gettime(0xfffffff2, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/96, 0x60}, {&(0x7f00000000c0)=""/58, 0x3a}], 0x2, 0xd, 0x81) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000900), 0x4) ftruncate(r6, 0x5) open(&(0x7f0000000000)='./file0\x00', 0x145140, 0x7c) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007ca20e0000a115000100ff11142603600e12080005007a010401a80016002000034005000000075c0461c9c67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b3d7a37077646f948017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a56e2b0137bdfc65025ccca9ee5358bb798262f3d40fad95667e006dcdf63951f215ce3bb17d809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x8000) socket$igmp6(0xa, 0x3, 0x2) mount(&(0x7f00000004c0)=@sr0, &(0x7f0000000500)='./file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m48.73616549s ago: executing program 2 (id=2097): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m48.212657179s ago: executing program 6 (id=2107): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00806d81e8f6877ea6241156c7e0b1dde0e88086f8c8a93df846c0dedadf30d07586670178d0a9fa699eaa87c0c377d4f71f429f71", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x10000000000) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) 1m48.211644358s ago: executing program 2 (id=2108): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x2ac, 0x0, 0x0, 0x15, 0x19, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000000d0f08e8ad896ba67a00973defa00", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000db00", [0xc, 0x2000000]}) 1m48.157892779s ago: executing program 6 (id=2109): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x10}]}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff020000000000000001000000000001"], 0x0) 1m48.094036114s ago: executing program 38 (id=2108): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x2ac, 0x0, 0x0, 0x15, 0x19, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000000d0f08e8ad896ba67a00973defa00", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000db00", [0xc, 0x2000000]}) 1m48.040542702s ago: executing program 6 (id=2111): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100, 0x5}, 'syz1\x00', 0x2}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) socketpair(0x1, 0x1, 0x0, 0x0) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) accept4(r1, 0x0, 0x0, 0x800) ioctl$UI_DEV_CREATE(r0, 0x5501) 1m47.111206377s ago: executing program 6 (id=2121): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xc0000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000540), 0x4, 0x2) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000600)={'\x00', 0x81, 0x10001, 0x7f, 0x9, 0x8}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e21, 0x5, @loopback, 0x5}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) 1m46.744899527s ago: executing program 6 (id=2122): keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) (async, rerun: 32) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) (rerun: 32) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f0000000080)) (async) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (rerun: 32) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) (rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async, rerun: 64) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x45, 0x2, 0x2}, {0x60}, {}, {0x6}]}) 1m46.587341637s ago: executing program 6 (id=2124): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1, 0x9}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000100)={0xc000000d}) sendmsg$qrtr(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="23c107e6a6eea84de315bb8e83c81f6f2b0f5a5c0db84887ae811a9fb486cbd8dcc3a4e56acd1686f88891395404c18a6fb8b4f6f05b5ea7c4ad260026e462c7dd861cf65cc7cdf324dc6cf512c3d85249bb1b1bb2107dd457ed675e06217e58f93f899376909c2b7fee70cbf33a33dbd3decd53ee7da275463025e047bba6134bfaf33edb7fc0d62736b65f86c3acb601bfa2ff858eb40a08ec37261c297daf6c4bbcb3a61348f94d080092149538e66a32dc0dd7b263ceab777c2a6318745929c8c3a9dc5dc68ed3665f9aaf46", 0xce}], 0x1, &(0x7f0000000280)=[{0x70, 0x1, 0x83, "5e7b1041a7533402e3ee8b45554fe853e1f78d13635eb5ba7079ea4f5963ec639007da00deab4983c9976bb4d5e2cf12d9d6e33dede94fab9e7cac3c2333d588d005560095afaf10f4dba4b579c5c5891ccc459a29ec5ea07a76eb16d0c416b2"}, {0x68, 0x29, 0x62ad, "92fb0c1fe4b605f0cbc7c67a1f4775d4dad5796a4c21f79a93f61795ab0e103951a686cb0d55ac52179da5e7578d8a77d3920ca8160a3fa3e9d924eb4d51ff2905f24514ea897d12e0bb340c3f324dd19a84471abf6016"}], 0xd8, 0x4005}, 0x38) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept4$phonet_pipe(r0, &(0x7f00000003c0), &(0x7f0000000400)=0x10, 0x81800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r4, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x22}}}}, ["", "", "", "", ""]}, 0x20}}, 0x20040002) syz_open_dev$dmmidi(&(0x7f0000000580), 0x5, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000005c0)={r1, 0x3}, 0x8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x18200008}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xc4, r5, 0x219, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x99}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0xa0b180a15325e787}, 0x20000040) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000800)={r1, 0x2, 0x8, [0x6, 0x80, 0x3, 0x0, 0x3, 0x800, 0x6, 0x5]}, 0x18) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000840)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000880)={r1, 0x2b, "7533c18c58e2ccebe3860fa8882e431c0c7822a2dbaed645da1668df0c08210e8ec3873a237a6f6d8160f0"}, &(0x7f00000008c0)=0x33) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000900)=0xf) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000940)={0x8, {{0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x88) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000a00)={0x1, 0x8, 0x200, 0x9, 0x9, 0xde, 0x0, 0xf7, 0x0, 0x77, 0x9, "0ca910105bf5a55c35380926cd2dc4c87f354b1c8b0637912d07f458386af467"}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a40)={'veth1_to_bridge\x00'}) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000a80)=0x1, 0x4) ioctl$VT_RELDISP(r0, 0x5605) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xac, 0x0, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x10}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x180000}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000041) sendmsg$nl_generic(r0, &(0x7f0000001dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001d80)={&(0x7f0000000c80)={0x10e0, 0x38, 0x200, 0x70bd27, 0x25dfdbfe, {0x16}, [@nested={0xca, 0xb5, 0x0, 0x1, [@generic='HK', @generic="58318a0f641359814c9fc636b93c465a41ea52ea58882798245fd2ad4aa0da66ba6b6bbcae1828178fdb94d6b140c80106f28cadc785e9a448ffb618217d50b5c9ddf8b505cab172e028666235c6947997d226b9230c41b3190d20b71e3cd886902e1c20445c3c439e15528b4be86ad098517cea76cf20f6e84dd366cf953d50ed1dbf513525b31b9a225bfef2f3b2994e7e761762ff40fd3798402a42a0432986d266319a93c9854cf6d3f5e7b1570231bcdaedffa5b16fb4604072eda6c567d23d2858"]}, @generic="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"]}, 0x10e0}, 0x1, 0x0, 0x0, 0x40014}, 0x50) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000001e00)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000001e40)={0x1, 0x3, 0x8, 0x1, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000002200)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000021c0)={&(0x7f0000001f00)={0x2b4, r4, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xf3, 0x5d}}}}, [@NL80211_ATTR_FRAME_MATCH={0xba, 0x5b, "aa6ea947233b13f999920778ae590f29ecb7d59942a2b1201fcdf1a509ae782acc0ac1606523d3a953701d9253b659b9c879ce374087957be41519e961838b8d3617e01c111004e89306dc23224710aebe81a04be8f72bb3101577d4858221ca9b525e5d7a608c9f53edb68b0170daaec712592968c618c572fa186e4d70cc0760a53e07a5cfafe5cc5a7d8c6cd603e6aaa12c82912cb4b3e917d8bd836d531b5b83ffcb3c2cd652d707a477046e5d025906d2eae536"}, @NL80211_ATTR_FRAME_MATCH={0x1a, 0x5b, "4a45de90697d6a342b3fffc7f0f0c9075d3629d859d9"}, @NL80211_ATTR_FRAME_MATCH={0x2d, 0x5b, "e0d325b7dc3ab54cd959e7b5691d433510ba6dea9683f92bad0e0665e4faf6127e7a04ebe58fb58402"}, @NL80211_ATTR_FRAME_MATCH={0xd6, 0x5b, "a467ee508f5a2ceb4a60887f22e604bb18576327e0a9cd34f9e3cc05b209e2b9e3d46b5330a4fdd432c4bc32aa74c4a146424317d66e9cd2269ec840f4473fb47de0e564630cc636136d613ad169f1615073dbe6f67b386eac296330c5b7b7f4db13aaa9f22f8ebafd78c915f655a5cd48e7e812a0bb53b2ef5e95c76f71f1460fd77213f33a546be0623ecbe9ee3c3f24b1f52bbf73db0d08addcc1b520d66134ab41c026bd4419ae7519ad35935596fcc25965c4d550a4167412b811551fc6ce47b240795ce8eee22526261f2f06d3f7d9"}, @NL80211_ATTR_FRAME_MATCH={0x99, 0x5b, "a393968e90fff38e51190931881ab27c6f0bf6bac14d30c48c71b0995695cc0c8d77f2067a6b82aa244525cef6f06e614b4792da0cbec79f4ae76d3db3bd47887606488547c25eb6ab45f964411971f1743cd890f4723ac1b16c624074d3c460bedba9c886e37835ea9f852779774ada912a4358eb0908286d728dd2bf5d6c7de18117a95e0d7ceafae37a54954f8b625a64fefd73"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3b}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x488a0}, 0x4000800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000002240)=[@in6={0xa, 0x4e23, 0x4, @mcast1, 0x1ff80}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2f}}, @in6={0xa, 0x4e22, 0xf4b, @empty, 0x3}], 0x78) 1m46.515309596s ago: executing program 39 (id=2124): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1, 0x9}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000100)={0xc000000d}) sendmsg$qrtr(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="23c107e6a6eea84de315bb8e83c81f6f2b0f5a5c0db84887ae811a9fb486cbd8dcc3a4e56acd1686f88891395404c18a6fb8b4f6f05b5ea7c4ad260026e462c7dd861cf65cc7cdf324dc6cf512c3d85249bb1b1bb2107dd457ed675e06217e58f93f899376909c2b7fee70cbf33a33dbd3decd53ee7da275463025e047bba6134bfaf33edb7fc0d62736b65f86c3acb601bfa2ff858eb40a08ec37261c297daf6c4bbcb3a61348f94d080092149538e66a32dc0dd7b263ceab777c2a6318745929c8c3a9dc5dc68ed3665f9aaf46", 0xce}], 0x1, &(0x7f0000000280)=[{0x70, 0x1, 0x83, "5e7b1041a7533402e3ee8b45554fe853e1f78d13635eb5ba7079ea4f5963ec639007da00deab4983c9976bb4d5e2cf12d9d6e33dede94fab9e7cac3c2333d588d005560095afaf10f4dba4b579c5c5891ccc459a29ec5ea07a76eb16d0c416b2"}, {0x68, 0x29, 0x62ad, "92fb0c1fe4b605f0cbc7c67a1f4775d4dad5796a4c21f79a93f61795ab0e103951a686cb0d55ac52179da5e7578d8a77d3920ca8160a3fa3e9d924eb4d51ff2905f24514ea897d12e0bb340c3f324dd19a84471abf6016"}], 0xd8, 0x4005}, 0x38) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept4$phonet_pipe(r0, &(0x7f00000003c0), &(0x7f0000000400)=0x10, 0x81800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r4, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x22}}}}, ["", "", "", "", ""]}, 0x20}}, 0x20040002) syz_open_dev$dmmidi(&(0x7f0000000580), 0x5, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000005c0)={r1, 0x3}, 0x8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x18200008}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xc4, r5, 0x219, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x99}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0xa0b180a15325e787}, 0x20000040) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000800)={r1, 0x2, 0x8, [0x6, 0x80, 0x3, 0x0, 0x3, 0x800, 0x6, 0x5]}, 0x18) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000840)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000880)={r1, 0x2b, "7533c18c58e2ccebe3860fa8882e431c0c7822a2dbaed645da1668df0c08210e8ec3873a237a6f6d8160f0"}, &(0x7f00000008c0)=0x33) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000900)=0xf) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000940)={0x8, {{0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x88) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000a00)={0x1, 0x8, 0x200, 0x9, 0x9, 0xde, 0x0, 0xf7, 0x0, 0x77, 0x9, "0ca910105bf5a55c35380926cd2dc4c87f354b1c8b0637912d07f458386af467"}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a40)={'veth1_to_bridge\x00'}) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000a80)=0x1, 0x4) ioctl$VT_RELDISP(r0, 0x5605) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xac, 0x0, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x10}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x180000}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000041) sendmsg$nl_generic(r0, &(0x7f0000001dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001d80)={&(0x7f0000000c80)={0x10e0, 0x38, 0x200, 0x70bd27, 0x25dfdbfe, {0x16}, [@nested={0xca, 0xb5, 0x0, 0x1, [@generic='HK', @generic="58318a0f641359814c9fc636b93c465a41ea52ea58882798245fd2ad4aa0da66ba6b6bbcae1828178fdb94d6b140c80106f28cadc785e9a448ffb618217d50b5c9ddf8b505cab172e028666235c6947997d226b9230c41b3190d20b71e3cd886902e1c20445c3c439e15528b4be86ad098517cea76cf20f6e84dd366cf953d50ed1dbf513525b31b9a225bfef2f3b2994e7e761762ff40fd3798402a42a0432986d266319a93c9854cf6d3f5e7b1570231bcdaedffa5b16fb4604072eda6c567d23d2858"]}, @generic="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"]}, 0x10e0}, 0x1, 0x0, 0x0, 0x40014}, 0x50) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000001e00)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000001e40)={0x1, 0x3, 0x8, 0x1, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000002200)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000021c0)={&(0x7f0000001f00)={0x2b4, r4, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xf3, 0x5d}}}}, [@NL80211_ATTR_FRAME_MATCH={0xba, 0x5b, "aa6ea947233b13f999920778ae590f29ecb7d59942a2b1201fcdf1a509ae782acc0ac1606523d3a953701d9253b659b9c879ce374087957be41519e961838b8d3617e01c111004e89306dc23224710aebe81a04be8f72bb3101577d4858221ca9b525e5d7a608c9f53edb68b0170daaec712592968c618c572fa186e4d70cc0760a53e07a5cfafe5cc5a7d8c6cd603e6aaa12c82912cb4b3e917d8bd836d531b5b83ffcb3c2cd652d707a477046e5d025906d2eae536"}, @NL80211_ATTR_FRAME_MATCH={0x1a, 0x5b, "4a45de90697d6a342b3fffc7f0f0c9075d3629d859d9"}, @NL80211_ATTR_FRAME_MATCH={0x2d, 0x5b, "e0d325b7dc3ab54cd959e7b5691d433510ba6dea9683f92bad0e0665e4faf6127e7a04ebe58fb58402"}, @NL80211_ATTR_FRAME_MATCH={0xd6, 0x5b, "a467ee508f5a2ceb4a60887f22e604bb18576327e0a9cd34f9e3cc05b209e2b9e3d46b5330a4fdd432c4bc32aa74c4a146424317d66e9cd2269ec840f4473fb47de0e564630cc636136d613ad169f1615073dbe6f67b386eac296330c5b7b7f4db13aaa9f22f8ebafd78c915f655a5cd48e7e812a0bb53b2ef5e95c76f71f1460fd77213f33a546be0623ecbe9ee3c3f24b1f52bbf73db0d08addcc1b520d66134ab41c026bd4419ae7519ad35935596fcc25965c4d550a4167412b811551fc6ce47b240795ce8eee22526261f2f06d3f7d9"}, @NL80211_ATTR_FRAME_MATCH={0x99, 0x5b, "a393968e90fff38e51190931881ab27c6f0bf6bac14d30c48c71b0995695cc0c8d77f2067a6b82aa244525cef6f06e614b4792da0cbec79f4ae76d3db3bd47887606488547c25eb6ab45f964411971f1743cd890f4723ac1b16c624074d3c460bedba9c886e37835ea9f852779774ada912a4358eb0908286d728dd2bf5d6c7de18117a95e0d7ceafae37a54954f8b625a64fefd73"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3b}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x488a0}, 0x4000800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000002240)=[@in6={0xa, 0x4e23, 0x4, @mcast1, 0x1ff80}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2f}}, @in6={0xa, 0x4e22, 0xf4b, @empty, 0x3}], 0x78) 1m12.70710047s ago: executing program 7 (id=2650): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000240)={0x0, 0x0, "b840afb023430934a1c8eeb0f731f0b6"}) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="20002cbd7000fcdbdf43d6bbbc000900030073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x24048440}, 0x4000) mount(&(0x7f0000000200)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='adfs\x00', 0x3cf4fd, 0x0) 1m12.706812351s ago: executing program 7 (id=2651): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x10}]}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000004d000000000000000001"], 0x0) 1m12.632402672s ago: executing program 7 (id=2653): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x5, 0x7, 0x31324d4e, 0x8, 0x7, [{0x9}, {0x1, 0xc}, {0x6, 0x80000001}, {0x6, 0x6}, {0xe, 0x6}, {0x6, 0x8}, {0x2, 0x2}, {0x8001, 0x2}], 0x4, 0xe, 0x6, 0x0, 0x4}}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000000010104000000000000000002000200240001801400018008000100e000000108000200e00000010c000280050001000000000010000580"], 0x48}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000400)=""/249, 0xf9) 1m12.098220453s ago: executing program 7 (id=2665): socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') (async) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r1, 0x800c0910, 0x7) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'veth0_macvtap\x00', 0xdc}) 1m12.097377062s ago: executing program 7 (id=2667): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./bus\x00', 0x180) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a00030000060a010400000000000000000a0000010900010073797a3100000000d4020480d00201800a0001006d61746368000000c00202800e000100636f6e6e6c696d69740000000a00010071756f746100000053000300524fe5f7bfa25e1e47f1c3117c2eae4a49645f9b7406df29429e67f9ddc94aa356735e7babefb4578cf664e11b402b55e7b9d16bfca2d8afc172001988423a8762760891d68cab90ac84fe41a3e116000800024000000001da0003002409bb5468e4f70765c9bcb52a477bfaf974f96d6b0a7833dec945cb62643cfbd9bbd4e3d37640a10fb588a4caba4e8ae63304e3e6bac6df94b98fa8d712744782b3dc22a002194edfe83c86e6b1c50590a0975f5258a81f2d96486c39fb026106a671c9c4c094bb27be60c53487eba7a5ef3c093f5ae446e8883d13fb259f717d516b3c61db4901277716024c2967992f9031459766cf4f9507759a687b2f3c908c2c061e0b5de8e1275832ffcd0f8f412b97c22b44b6dfcd244617fe50403668ab8f0783f9daf2c9472129661f69fc56b067f25d8b00000800024000000003c2000300c26a1f0623dee8c8edb605bce29840447a3d0e5bf1ff02a634342f0ab3ae0b89bebcdd0fe8e052a8151a"], 0x328}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c00fa1a8c0bc0fee1718100000c00000004000000070000000000000a0500000000005f00"], &(0x7f0000000240)=""/142, 0x28, 0x8e, 0x1, 0x8001, 0x10000}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, r0, 0x6}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0xf00, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x47, &(0x7f0000000680)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, {[@ssrr={0x89, 0x3, 0xce}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x1}, {"a48cebdcbe661d331ebb27d14a"}}}}}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x2f, @empty, 0x4e24, 0x3, 'lc\x00', 0x0, 0x81e8, 0x19}, 0x2c) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x20801, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000180)) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000080)=0x4) ptrace(0x10, r5) tkill(r5, 0x17) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x2, 0x0, 0x0, 0x0, 0x0, r5}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e2000000000e9000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ad0000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200740000000000000014000e00e00000010000000000000000000000002400090000000000010000000100000000000080b4000000000000000500000000000000"], 0x128}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80000000000000000000000000001b00000000000000000000ffff0a010102ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000004000b40000000000000200000000000000000000007ffffffe0000000000000000000000000000000000000000000000000000000000000000000100000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e"], 0x104}}, 0x4cc00) tkill(r7, 0x1d) ptrace$peeksig(0x4209, r5, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) 1m11.800091204s ago: executing program 7 (id=2672): unshare(0x20000400) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) (async) mq_open(&(0x7f00000001c0)='.\x00', 0x80, 0x11, &(0x7f0000000200)={0x6, 0x4, 0x14, 0xad}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x200001) (async, rerun: 64) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) (rerun: 64) r2 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) (rerun: 32) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x4, 0x0, 0x3}}, {@canfd={0xd, {{0x2, 0x1, 0x1, 0x1}, 0x21, 0x0, 0x0, 0x0, "c18acc7054148000567113d73947ce5ee20aa0d4c60010000002000000000000000000000003000000000000000000000000000000d400"}}}}, 0x0) (async, rerun: 32) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x7800, 0x7800, 0xfff, 0xfffffffb, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x68, 0x0, 0x10, 0x2f, 0x0, @multicast1, @broadcast, {[@end]}}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x6, 0x3, 0x2, 0x220, 0x1, 0x400, '\x00', r6, 0xffffffffffffffff, 0x2, 0x4, 0x2, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) pread64(r7, &(0x7f00000000c0)=""/214, 0xd6, 0x100) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000140), &(0x7f00000002c0)=""/9, 0x2}, 0x20) (async, rerun: 32) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) (rerun: 32) 1m11.753381685s ago: executing program 40 (id=2672): unshare(0x20000400) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) (async) mq_open(&(0x7f00000001c0)='.\x00', 0x80, 0x11, &(0x7f0000000200)={0x6, 0x4, 0x14, 0xad}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x200001) (async, rerun: 64) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) (rerun: 64) r2 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) (rerun: 32) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x4, 0x0, 0x3}}, {@canfd={0xd, {{0x2, 0x1, 0x1, 0x1}, 0x21, 0x0, 0x0, 0x0, "c18acc7054148000567113d73947ce5ee20aa0d4c60010000002000000000000000000000003000000000000000000000000000000d400"}}}}, 0x0) (async, rerun: 32) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x7800, 0x7800, 0xfff, 0xfffffffb, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x68, 0x0, 0x10, 0x2f, 0x0, @multicast1, @broadcast, {[@end]}}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x6, 0x3, 0x2, 0x220, 0x1, 0x400, '\x00', r6, 0xffffffffffffffff, 0x2, 0x4, 0x2, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) pread64(r7, &(0x7f00000000c0)=""/214, 0xd6, 0x100) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000140), &(0x7f00000002c0)=""/9, 0x2}, 0x20) (async, rerun: 32) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) (rerun: 32) 1.539693155s ago: executing program 4 (id=3565): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xd3b]}, 0x8) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) io_uring_enter(r0, 0x4211, 0x68e6, 0x0, &(0x7f0000000200)={[0x8]}, 0x8) r4 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r4, r3, 0x0, 0xf, &(0x7f0000000140)='contention_end\x00'}, 0x30) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x84890}, 0x20000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x2, 0x10}, {0xd, 0x4}, {0xe, 0x9}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000808}, 0x0) 1.23767571s ago: executing program 4 (id=3570): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1a"], 0x0, 0x5af7dd1f, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = dup3(r0, r0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x237a, &(0x7f0000000180)=ANY=[@ANYBLOB="5ae92b5fce2d6aa98940c085146af319cbd8e3fd109956b5c0d0939ec6eeadd8d67acaa47c62d802d24ab308173b22d461842a3e0fe4d5dece4cea26086e3cb37393354044cc8717", @ANYRES16=r4, @ANYRESHEX=r2, @ANYRES32=r1, @ANYRES16, @ANYRES32=r3], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r6}, 0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r7}, 0x10) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) r11 = socket(0x10, 0x803, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@delchain={0x24, 0x65, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x4, 0xc}, {0x5, 0xfff1}, {0xf, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8810}, 0x4040084) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000080000000400000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffc01, 0x0, r14}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101}, [@generic={0x2, 0x1, 0x8, 0x8}, @ldst={0x2, 0x0, 0x3, 0x7, 0xd, 0xfffffffffffffffe, 0xffffffffffffffff}]}, &(0x7f0000000340)='GPL\x00', 0xc, 0x0, 0x0, 0x40f00, 0x0, '\x00', r13, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xb, 0x4, 0xcb55}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000540)=[r4, r14], &(0x7f0000000580)=[{0x2, 0x5, 0x6, 0x7}, {0x3, 0x2, 0xf, 0xa}, {0x4, 0x3, 0x10, 0x1}], 0x10, 0xfffffffb}, 0x94) 1.154787844s ago: executing program 4 (id=3572): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x59, 0x0, 0x200, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0xa}, 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x8, 0x0, 0x0, 0x2044}, 0x60) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x0, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)='\f', 0x1}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r1], 0x7c}}, 0x8) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) socket$packet(0x11, 0x3, 0x300) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x550b6c) socket$inet6(0xa, 0x80001, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRES32=r3], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x3d}, 0x94) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x1c, 0x14, 0x1, 0x800000, 0x0, "", [@typed={0xa, 0x15, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x80000001, 0x0, 0x1000001000, 0x80000000009}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000005, 0x9, 0xc93, 0xf, 0xf4e0, 0x2}, 0x0, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000af8000000020a0102000000000000000001000002d6000600c6100518c7bdd9f3be92860f5ff7902c0e9b332e82ac4ae691676028dd9b6cb9fa9485b2999845934861179f7811352386036a907e52481feaf995b1e3963fc3742c199da8e7f17e7a0b2476f8a89db117456ed132bca5d159ed1e266efe0c82462862a7791c0949743808568ab718ea8b3e2fb96f74f7044392afa617ba0e76cf430e94b3acaa33b720fc6efc57f5c4ac9b75680b5f53ae1f8e2bce3a2a8e3a90c460f5ef31c5ae234d095c32670e7749a5b8de655bd409efd35153ac131aff0c9421b32fecc5cdd6b4db0c49d41700b7a000000c0004400000000000000002140000001100010000000000000000000000000a3c4f75005bf009b56d88087ab1d00b278fd9b35f425b148c573b026bfc8700b1eb592cea89212bb6d945c61807ed6f6793acfe5df4f667154c4952a3782ac8bb78ef620eb4deaa78bd56b1fb153f18f06644530ce8f642829ada4462e3f1311933d4fb2c"], 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x4810) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 995.042926ms ago: executing program 9 (id=3578): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x42000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = eventfd2(0x8001, 0x0) socket$inet6(0xa, 0x1, 0x9) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)="f6fffdffffffffff", 0x8}, {&(0x7f0000000000)="4821cd0232189da3", 0x8}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000400)="440f01df430f32660f284e4bc7442400cf000000c744240203000000ff2c2466b84a008ec8470f01c50f01cb6666440f388299d3b9939366b8e1000f00d8460fc7bdf0286d53", 0x46}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x42000, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) eventfd2(0x8001, 0x0) (async) socket$inet6(0xa, 0x1, 0x9) (async) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)="f6fffdffffffffff", 0x8}, {&(0x7f0000000000)="4821cd0232189da3", 0x8}], 0x2) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000400)="440f01df430f32660f284e4bc7442400cf000000c744240203000000ff2c2466b84a008ec8470f01c50f01cb6666440f388299d3b9939366b8e1000f00d8460fc7bdf0286d53", 0x46}], 0x1, 0x10, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) 634.370873ms ago: executing program 9 (id=3584): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) 577.751874ms ago: executing program 9 (id=3587): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x2, 0x70bd25, 0x25dfdbff, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x20004082) syz_emit_ethernet(0xc0, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffbbbbbb2e9359bbbbbb88a84100810025000004faf80000fb8e58f6bd788b37ff4391d157dc1185e08275f654abce9b3c83654cdccbdda80eec919ad807325730ce7689972dcff9158a39204eb8595d9b2d0edd011291d0bb220ec5310cad2c1a21db5e48e00857089128f8f70691052bd14f23f055d1585e75e4efffae97ef7798233c297a14e487a8fca3d3cdc3e9085c0e85bbd51d1bb5bb9c2b6343570efc470531e70970981df7fd3fa799ac5977578b0be41c3c7a1f044cbb7276"], 0x0) 577.57754ms ago: executing program 0 (id=3588): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r1, 0x0) setregid(r1, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vxfs\x00', 0x208000, 0x0) 577.373331ms ago: executing program 5 (id=3589): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x78, 0x30, 0xffff, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500007400", @ANYRESDEC=r0, @ANYRES16=r1, @ANYRES16=r0], 0x40}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x48081, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0xa0}], 0x1, 0x40800) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x7}) pwrite64(r4, 0x0, 0x0, 0x5) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket(0x2, 0x2, 0x0) getsockopt$inet_opts(r8, 0x0, 0x5, 0x0, &(0x7f0000000140)) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001b00)=ANY=[@ANYBLOB="03b30900", @ANYRES16=r7, @ANYBLOB="671d00000000fbdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00020000000c008f00faffffffffffffff0c009000f8ffffffffffffff"], 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x44004) 514.249097ms ago: executing program 9 (id=3590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000c40)={0x0, [{0x0, 0x0, 0x6, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x601d, 0x0}, {0x2, 0x0, 0x81, 0x0}, {0x2, 0x0, 0xa, 0x0}, {0x2, 0x0, 0xffffffc0, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x10001, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x538, 0x0}, {0x0, 0x0, 0x6, 0x0}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000c40)={0x0, [{0x0, 0x0, 0x6, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x601d, 0x0}, {0x2, 0x0, 0x81, 0x0}, {0x2, 0x0, 0xa, 0x0}, {0x2, 0x0, 0xffffffc0, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x10001, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x538, 0x0}, {0x0, 0x0, 0x6, 0x0}]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) 513.822811ms ago: executing program 5 (id=3591): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000340)={0xa20000, 0x9, 0x0, r3, 0x0, &(0x7f0000000200)={0x9a0918, 0x101, '\x00', @p_u8=&(0x7f00000001c0)=0x9}}) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xfffffffd}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0x8000, '\x00', @p_u16=&(0x7f00000000c0)=0xfffe}}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x20, 0x20, 0x34, 0x7, {{0x38, 0x4, 0x3, 0x1, 0xe0, 0x67, 0x0, 0xca, 0x29, 0x0, @remote, @private=0xa010100, {[@timestamp_prespec={0x44, 0x2c, 0xb7, 0x3, 0xa, [{@rand_addr=0x64010100, 0x1}, {@broadcast, 0xf0718b8}, {@remote, 0x8}, {@empty, 0x5}, {@local, 0x9af}]}, @cipso={0x86, 0x5d, 0xffffffffffffffff, [{0x7, 0x10, "3cd9a84f56270615e5e8932fd859"}, {0x2, 0x6, "8e3b6337"}, {0x2, 0xf, "0eefe8e710a13966b886f8f0a1"}, {0x2, 0x2}, {0x0, 0xe, "957ab476ebc31109a2bf4ad8"}, {0x2, 0x12, "509c309ab952e7061303b4feb72ee1e7"}, {0x0, 0x10, "4819f9f1513734233d9fe1a8c2c0"}]}, @rr={0x7, 0x1b, 0x8a, [@empty, @dev={0xac, 0x14, 0x14, 0xd}, @remote, @multicast1, @rand_addr=0x64010102, @loopback]}, @cipso={0x86, 0x20, 0xffffffffffffffff, [{0x5, 0x12, "19e2be923d7a3ecbce7e632c5163d514"}, {0x5, 0x8, "608d934be8f4"}]}, @noop, @ra={0x94, 0x4}]}}}}}) (async) r6 = syz_open_pts(r3, 0x800) ioctl$KDFONTOP_SET_DEF(r6, 0x4b72, &(0x7f0000000780)={0x2, 0x0, 0x18, 0xe, 0x65, &(0x7f0000000380)="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"}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000001480)) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000007200000829bd70003dfbdf25070000003e857a6dc8adee8982073ae8f52b5435a763a6464a1a59e4e0edfc7a3a0b88bfeb", @ANYRES32=r7], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4040001) 418.210772ms ago: executing program 0 (id=3592): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000040)="640f7927660f3880b0c9d300002e454f01b60018000066460f3acfc8aa410f01cab9850800000f322e470f01cb3e0f01d1c4e20129100f20c035000001000f22c0", 0x41}], 0x1, 0x43, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001280)={0xffffffffffffffe9, r4, 0x100, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0x9}, {}, {0xc, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x20000000, 0xffffffff, 0xf761, 0x10000, {0xff, 0x2, 0x6f83, 0x57e, 0x5}, {0x1, 0x1, 0x1000, 0x280, 0x8, 0x2}, 0x2, 0xfffffdde, 0x7}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x200008e2) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000100)=r8) 417.897207ms ago: executing program 5 (id=3593): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x4a}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff}, 0x20000, 0x0, 0x4000007, 0x8, 0x101, 0x14, 0x0, 0x0, 0x0, 0x2000, {0x1, 0xed, 0x0, 0x0, 0x5}}}}]}, 0x78}}, 0x4080) close(r0) 343.110648ms ago: executing program 5 (id=3594): membarrier(0x10, 0x0) (async, rerun: 32) membarrier(0x20, 0x0) (async, rerun: 32) membarrier(0x2, 0x0) (async) membarrier(0x1, 0x0) membarrier(0x10, 0x0) (async, rerun: 64) membarrier(0x10, 0x0) (async, rerun: 64) membarrier(0x20, 0x0) (async, rerun: 32) membarrier(0x1, 0x0) (async, rerun: 32) membarrier(0x40, 0x0) (async, rerun: 64) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) (async, rerun: 64) membarrier(0x2, 0x0) (async, rerun: 64) membarrier(0x1, 0x0) (async) membarrier(0x1, 0x0) (async) membarrier(0x0, 0x0) prlimit64(0x0, 0x2, &(0x7f00000000c0)={0x10000, 0x9}, &(0x7f0000000100)) (async) setrlimit(0x7, &(0x7f0000000140)={0x800, 0x3}) (async) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1) (async, rerun: 64) getrlimit(0x1, &(0x7f00000001c0)) (rerun: 64) membarrier(0x0, 0x0) (async) membarrier(0x1, 0x0) (async, rerun: 64) membarrier(0x8, 0x0) (async, rerun: 64) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000200)=0x6) (async) sendmsg$alg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)="34fb2e73b7b8b1364e2cd8eb288e37f2330ab8e1806dce33fceab9b19b6792eb0aab682a19ae94590cfb5958d2d84a7ed350a3411adf85e601751f91edfe786b198c5be881b1437ddea8b61dd378280a56d6e6268d1c42e3c8872eab6aaf4e51d7f9f33d299cccd79dce1c03483c634026714d6ec72dc4dbecc9d7636170e2529007d029d0935916ff635e085a15a0f05709b3cf2b7e0fd601e63b", 0x9b}, {&(0x7f0000000300)="ad1c30d22c2d1895efbfe9b790ac74a3e893d2e6a9bc59c79f34db67f217dbfa6f19952b5561ea3d6d6ef38353614fdda0c433ad13ae809c9c234e6c1a69454c9364a107f33591f71ae5c87674a482a49191491d6fd64316170699cb8f700b53a06aa4071981b7", 0x67}, {&(0x7f0000000380)="68c256c6343de778636f0310b4d56394c84b82ade4fe03f69aa146ce5c4ba369b2e4e96fb4e0f2a70453020ccbee1efad9b06e128ee9dc71d71f2dc36f6eb83f5f058d401b0ac13c71d2d72230657bda324394208541eb12c8e19e697789cdd3b42b08f9ee9094418be6939a566d511584e27c2305dc9cc68c313bb6987fbe2cffbcb32896d2536e52c05b404055bc628b033c2e0da18558", 0x98}, {&(0x7f0000000440)="c42f30983bf807b99671b305e667e6f3b944e4c096c51db2ee5e2bb7c5524fac86235dea308011476e4b1146aee39e6711aff1217973c667596b3f61bfeea84a61250696e770998758de117d700b6eab0f1b8eb3570ddfedb24123f62e02fef90ed83dfb0c", 0x65}, {&(0x7f00000004c0)="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", 0xff}], 0x5, 0x0, 0x0, 0x10}, 0x20004800) (async) membarrier(0x20, 0x0) membarrier(0x2, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) (rerun: 32) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40b313a0fac89940}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x80, r1, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "a6832109"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "cec163501f"}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x4010030}, 0x10) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000800)='xfrm0\x00') membarrier(0x10, 0x0) 342.951627ms ago: executing program 5 (id=3595): r0 = socket(0x3, 0x2, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x700, 0x20, 0x5, 0x0, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x66, 0x0, 0x26, 0x2f, 0x0, @multicast2, @empty}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', r1, 0xda7322e1f362a59c, 0x9, 0x41, 0xfffff758, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x40, 0x7, 0x6, 0x2}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000280003802400008004000180040002800c0004"], 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 279.400101ms ago: executing program 5 (id=3596): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) 193.159919ms ago: executing program 9 (id=3597): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x4, 0x0) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x80) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000000c0)=""/179) (async) ioperm(0x3, 0x4, 0x1000008) fanotify_init(0x1200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000030000004c1db7a6c0498a"], 0x0, 0x27, 0x0, 0x1, 0x80}, 0x28) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r2, &(0x7f0000000240)='./file0\x00') 192.960147ms ago: executing program 9 (id=3598): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4f}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000040}, 0xc000) prctl$PR_SET_THP_DISABLE(0x41, 0x3) lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:clock_device_t:s0\x00', 0x24, 0x1) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xd) prctl$PR_SET_THP_DISABLE(0x29, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 192.426527ms ago: executing program 0 (id=3599): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) close(r0) 136.35963ms ago: executing program 0 (id=3600): ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x98, 0x30, 0xb, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x80, 0x1, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "ddc812dee0d8c4c4b6325f1ea28eddbc"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 120.591194ms ago: executing program 4 (id=3601): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x100000007, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x2, 0x184) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50}, 0xffd3) read$FUSE(r2, &(0x7f00000079c0)={0x2020}, 0x2020) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000200)={0x0, 0x0, {0xfffffffb, 0x24d457e6, 0x100c, 0x5, 0x7, 0xe, 0x2, 0x4}}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x79, 0x161141) ioctl$USBDEVFS_RESET(r4, 0x5514) 54.687719ms ago: executing program 4 (id=3602): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6393, 0x101200) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x12, 0x1, 0x0, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 54.310044ms ago: executing program 0 (id=3603): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x161200, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)='$', 0x1}], 0x1}}], 0x1, 0x4004804) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x7, @remote, 0x0, 0x4}, 0x20) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) fcntl$setflags(r1, 0x2, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = fsmount(0xffffffffffffffff, 0x1, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) syz_io_uring_setup(0x3d11, &(0x7f0000000700)={0x0, 0x3d26, 0x2000, 0x3, 0x23f, 0x0, r3}, &(0x7f00000000c0), &(0x7f0000000540)) r8 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/83, 0x53}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5a86dd60f900f5e1170600fe8000000000000000000000000000bbfe80000069cf76430000000000000000000000aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000907800001e020000"], 0x0) 482.906µs ago: executing program 0 (id=3604): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x700, 0x760, 0x436fa3a6, 0x60, {{0x20, 0x4, 0x1, 0x30, 0x80, 0x66, 0x0, 0x8, 0x4, 0x0, @local, @remote, {[@cipso={0x86, 0xd, 0x3, [{0x6, 0x5, "529fd9"}, {0x6, 0x2}]}, @ra={0x94, 0x4, 0x1}, @end, @timestamp_prespec={0x44, 0x2c, 0xa8, 0x3, 0x7, [{@broadcast}, {@multicast1, 0x80}, {@loopback, 0xf1}, {@multicast2, 0xfffffffb}, {@broadcast}]}, @lsrr={0x83, 0x7, 0x85, [@empty]}, @ra={0x94, 0x4, 0x1}, @generic={0x83, 0x4, "b013"}, @rr={0x7, 0x13, 0x35, [@loopback, @empty, @local, @dev={0xac, 0x14, 0x14, 0x1d}]}, @timestamp={0x44, 0xc, 0x48, 0x0, 0x1, [0x7, 0x6]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x10, 0x1, 0x2, 0x8cb, {{0x10, 0x4, 0x1, 0x1e, 0x40, 0x66, 0x0, 0x9, 0x29, 0x0, @empty, @multicast2, {[@timestamp={0x44, 0xc, 0x51, 0x0, 0x7, [0x6, 0x6]}, @timestamp={0x44, 0x10, 0x1d, 0x0, 0x9, [0x4445, 0x5, 0xffffffff]}, @timestamp_prespec={0x44, 0xc, 0x3f, 0x3, 0xd, [{@loopback, 0x10001}]}, @end, @noop]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x32, &(0x7f0000000300)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x8000, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x20, 0x7, 0x6, 0x5, {{0x1a, 0x4, 0x0, 0x13, 0x68, 0x65, 0x0, 0x5, 0x0, 0x0, @loopback, @broadcast, {[@noop, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x2}, @generic={0x82, 0x12, "d05dd8238e16b40f1e118621a4573696"}, @generic={0x88, 0x2}, @rr={0x7, 0x2b, 0xba, [@private=0xa010102, @remote, @remote, @broadcast, @empty, @multicast2, @rand_addr=0x64010102, @private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x7, 0x8c, [@multicast1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'sit0\x00', 0x0, 0x20, 0x10, 0x0, 0x1, {{0xa, 0x4, 0x2, 0x1, 0x28, 0x65, 0x0, 0x1, 0x29, 0x0, @broadcast, @private=0xa010101, {[@rr={0x7, 0x13, 0x22, [@broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @local, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x118, r0, 0x226, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4001}, 0x48000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x70, r0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a00), r6) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000b80)={0x2, 0x0, {&(0x7f0000000a40)=""/122, 0x7a, &(0x7f0000000ac0)=""/137, 0x2, 0x4}}, 0x48) pread64(r6, &(0x7f0000000c00)=""/147, 0x93, 0x10000) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000d00), r6) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r8, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x889}, 0xd1) r9 = syz_open_dev$vcsu(&(0x7f0000000e00), 0x9, 0x408100) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e80), r6) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r9, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r10, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004045) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000fc0), r6) sendmsg$TIPC_NL_KEY_FLUSH(r11, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0xd0, r12, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd0}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xdf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfda}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'virt_wifi0\x00'}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8090}, 0x90) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, r13, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x27}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000001300)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000002d40)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002d00)={&(0x7f0000001340)={0x1990, r0, 0x630, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0xc4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x68e3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}]}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^[-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x12, 0x4, "a2ec887f8de0621a7d71e9dc1e7f"}]}, @ETHTOOL_A_FEATURES_WANTED={0x1ec, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0xa4, 0x4, "5d34ee1f63782bcf7e13c884208f7465477f67f7b6877ae3a5f76f247360430fe3004f2708714aae0556615a4d148cfb78142d8afe3720f20ed3f359acae2df1dd818fc251a94d0c6974181ba282ca1fc39e7f115871fb87d845c9b5105e1ac9242799fd310f1b4315ec5b21e8fa7f9c6e06d0a1336493e491c128318c970cc162a67a26854dd391f51cb68870cfa653833e545dd0596d88e6723b4b8bf882e4"}, @ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#*I\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/@J-$\xb6%@*}^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'eth'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x2dc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x59, 0x5, "11e3e646d75a2c8a365b53c6340f299907d63847c1684b83a9d1bb0d0a6763197fcebf57f3d5281d5279bf1c8723b3f39830cb2a95e2dc9bf15d908037a2f52b9555b4bced02e3dd9c246fb7d8220d35ec085333f5"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x92d3}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x356070fc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{@'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}]}, @ETHTOOL_A_BITSET_MASK={0x41, 0x5, "08685cb7086a2d11c30ddc15fb6ca5830ca93cb68c44e1b5b59949b658aa3fc5040a477dd365ee3697eee40cce8d53a1fc632bc3f94a05a2867bcc6786"}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc0}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '(.$])))\",(@-)@!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}]}, @ETHTOOL_A_BITSET_VALUE={0x8a, 0x4, "84a6ee59f6e76c0655cd1d5c9a8da3666944e39c960dbfd91772260c004ce46e582b232263607884d6af5a875b58c4827047a775dfe1b71c27acaf06af84381a5b23df3f110e403b1f981085571bebb00796ed5952a54647c596f4e84cdb424ece9d0462d417a3666d2c4cab660605de091fd65841d646225d433e9002fee3a61388114f9996"}, @ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '+@.@@\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x934}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']{\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x11, 0x5, "e5699c33ba87001f6512d71c3d"}]}, @ETHTOOL_A_FEATURES_WANTED={0x12b0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x90, 0x5, "276553592d381759f319644df6c37fb70954a1abef54f15e4ff70a5491a7b5cd59ffb7e2a456a5cc09e8509da9bd2f0cdd1142500c1e569fe0093e4b0a9a9e3821203dec91f0155dd579fc330fbf5abde038f832a21b37ccc8749ec396ffccff8766f20ca5b5fe011715259a9d335763d90ae47a5dc2ee9fdca39fc7542623d90c8b451f7871d5aea5e06f30"}, @ETHTOOL_A_BITSET_MASK={0xb7, 0x5, "d1aea82ca1d3004e729782b086b1b2e39ae6ca65f16d9d443ac5855dea554f6251471f36e0139a77b5e83a6529b57b33d4a8e45e3ea7c6a096c45dee46a8960f5bb44f5fe3586627ff2290515752b66cba12538d0494aa18a601a7135c7830a7f4781f11d6212d206e5cbb7ac6d2e43516809dc46cb294bef85edaf97dd0e1f482aff3badc7ec337fd01e4038358cf7c7baeac3c3960b67a1b2db7f21f3aa308593e3dfc1a273c518fc67d8a754c348ac049ff"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0x7e, 0x4, "c4f4458adaa92973b7c02a58c77f85d9edcc45070371a1da3e1e9bc39e76537da153ed891499b102dafde207d602f12607abcf0babea7c3a62e3648915dd0e593d2a03837dfcd596f8bfb28fece9dea1dc4d13cfed5ce51dfc365c3c6fb671ed5cd2d219b974d7fb43c1ef8fbb2480f7a5fd7156e37e6c4c65a3"}, @ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8fd}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'virt_wifi0\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'veth1_vlan\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2d7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2f0}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '$\xb5-)\".+#\xb7}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x1990}, 0x1, 0x0, 0x0, 0x20010}, 0x0) r15 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r15, &(0x7f0000003080)={&(0x7f0000002d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002e00)=""/50, 0x32}, {&(0x7f0000002e40)=""/102, 0x66}, {&(0x7f0000002ec0)=""/24, 0x18}, {&(0x7f0000002f00)=""/19, 0x13}], 0x4, &(0x7f0000002f80)=""/234, 0xea}, 0x40000100) sendmsg$DEVLINK_CMD_RATE_DEL(r11, &(0x7f00000031c0)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003180)={&(0x7f0000003100)={0x68, r7, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x20040810) setsockopt$IP_VS_SO_SET_EDITDEST(r16, 0x0, 0x489, &(0x7f0000003200)={{0x11, @multicast1, 0x4e20, 0x1, 'wrr\x00', 0xb, 0x10, 0x34}, {@multicast2, 0x4e21, 0x10000, 0x3, 0x9, 0x2}}, 0x44) r17 = syz_genetlink_get_family_id$smc(&(0x7f00000032c0), r9) sendmsg$SMC_PNETID_ADD(r16, &(0x7f00000033c0)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003380)={&(0x7f0000003300)={0x48, r17, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x48010) 0s ago: executing program 4 (id=3605): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc8}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x41a, 0x8004, 0x6, 0x4004, 0x9, 0x1ed, 0x2, 0x2, 0x3, 0xc58f, 0x2060, 0xfed, 0xfffffffb, 0x1ac, 0xfffffffc], 0x0, 0x2}) kernel console output (not intermixed with test programs): enied { read write } for pid=14305 comm="syz.4.2634" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 216.234789][ T5982] Bluetooth: hci4: unexpected event for opcode 0x041b [ 216.276636][ T5982] Bluetooth: hci4: unexpected event for opcode 0x041b [ 216.369209][T14325] fuse: Bad value for 'fd' [ 217.159424][T14333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2640'. [ 217.162886][T14333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2640'. [ 217.167563][T14333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2640'. [ 217.172150][T14333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2640'. [ 217.619854][T14381] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2653'. [ 218.011907][T14414] netlink: 696 bytes leftover after parsing attributes in process `syz.4.2664'. [ 218.377198][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.381260][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.503429][T14436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=14436 comm=syz.0.2675 [ 218.521888][T14437] openvswitch: netlink: IP tunnel TTL not specified. [ 218.539568][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.543854][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.608518][T14442] bridge_slave_1: left allmulticast mode [ 218.610970][T14442] bridge_slave_1: left promiscuous mode [ 218.614660][T14442] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.620803][T14442] bridge_slave_0: left allmulticast mode [ 218.623976][T14442] bridge_slave_0: left promiscuous mode [ 218.625957][T14442] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.670160][ T5983] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.674445][ T5983] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.678182][ T5983] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.681197][ T5983] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.683813][ T5983] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.724413][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.727745][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.746974][T14447] lo speed is unknown, defaulting to 1000 [ 218.851846][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.856350][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.875139][T14452] block nbd4: Attempted send on invalid socket [ 218.878599][T14452] I/O error, dev nbd4, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 218.882667][T14452] gfs2: error -5 reading superblock [ 218.924372][T14455] IPv6: addrconf: prefix option has invalid lifetime [ 218.934612][T14455] /dev/nullb0: Can't open blockdev [ 218.989986][T14460] fuse: Bad value for 'user_id' [ 218.992036][T14460] fuse: Bad value for 'user_id' [ 219.298340][T14477] input: syz1 as /devices/virtual/input/input18 [ 219.492882][ T13] bond3 (unregistering): (slave bridge0): Releasing active interface [ 219.629757][ T13] bond0 (unregistering): Released all slaves [ 219.642466][ T13] bond1 (unregistering): Released all slaves [ 219.765513][ T13] bond2 (unregistering): Released all slaves [ 219.776222][ T13] bond3 (unregistering): Released all slaves [ 219.787422][ T13] bond4 (unregistering): Released all slaves [ 219.798332][ T13] bond5 (unregistering): Released all slaves [ 219.897408][T14447] chnl_net:caif_netlink_parms(): no params data found [ 220.048978][T14447] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.052728][T14447] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.060768][T14447] bridge_slave_0: entered allmulticast mode [ 220.066946][T14447] bridge_slave_0: entered promiscuous mode [ 220.087800][T14447] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.090494][T14447] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.092802][T14447] bridge_slave_1: entered allmulticast mode [ 220.095702][T14447] bridge_slave_1: entered promiscuous mode [ 220.166250][T14447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.173885][T14518] netfs: Couldn't get user pages (rc=-14) [ 220.195474][T14518] __nla_validate_parse: 5 callbacks suppressed [ 220.195491][T14518] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2700'. [ 220.207443][T14447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.211246][T14524] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2702'. [ 220.291678][T14447] team0: Port device team_slave_0 added [ 220.297296][T14447] team0: Port device team_slave_1 added [ 220.365538][T14532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2706'. [ 220.474205][T14536] /dev/nullb0: Can't open blockdev [ 220.526196][T14447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.528617][T14447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.539799][T14447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.547228][T14447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.549702][T14447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.559828][T14447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.617627][T14543] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 220.622741][T14543] efs: cannot read volume header [ 220.645913][T14447] hsr_slave_0: entered promiscuous mode [ 220.648501][T14447] hsr_slave_1: entered promiscuous mode [ 220.651190][T14447] debugfs: 'hsr0' already exists in 'hsr' [ 220.654296][T14447] Cannot create hsr debugfs directory [ 220.661034][T14541] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2708'. [ 220.810729][T14551] kAFS: No cell specified [ 220.838381][ T13] hsr_slave_0: left promiscuous mode [ 220.845605][ T13] hsr_slave_1: left promiscuous mode [ 220.865840][ T13] veth1_macvtap: left promiscuous mode [ 220.871172][T14554] 9pnet_fd: Insufficient options for proto=fd [ 220.877737][ T5983] Bluetooth: hci3: command tx timeout [ 220.878151][ T13] veth0_macvtap: left promiscuous mode [ 220.882701][ T13] veth1_vlan: left promiscuous mode [ 220.884428][ T13] veth0_vlan: left promiscuous mode [ 220.993179][ T13] pimreg (unregistering): left allmulticast mode [ 221.015501][ T13] pim6reg13 (unregistering): left allmulticast mode [ 221.282472][T14543] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2709'. [ 221.571995][ T40] kauditd_printk_skb: 830 callbacks suppressed [ 221.572012][ T40] audit: type=1400 audit(1758546482.783:11507): avc: denied { read write } for pid=12564 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.591867][ T40] audit: type=1400 audit(1758546482.783:11508): avc: denied { open } for pid=12564 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.602159][ T40] audit: type=1400 audit(1758546482.783:11509): avc: denied { ioctl } for pid=12564 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.613595][ T40] audit: type=1400 audit(1758546482.802:11510): avc: denied { create } for pid=14564 comm="syz.0.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 221.622980][ T40] audit: type=1400 audit(1758546482.802:11511): avc: denied { prog_load } for pid=14564 comm="syz.0.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 221.632072][ T40] audit: type=1400 audit(1758546482.802:11512): avc: denied { bpf } for pid=14564 comm="syz.0.2715" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 221.674328][ T40] audit: type=1400 audit(1758546482.876:11513): avc: denied { create } for pid=14564 comm="syz.0.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 221.674968][T14566] netlink: 'syz.0.2715': attribute type 1 has an invalid length. [ 221.681505][ T40] audit: type=1400 audit(1758546482.876:11514): avc: denied { write } for pid=14564 comm="syz.0.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 221.686984][T14566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.698235][ T40] audit: type=1400 audit(1758546482.904:11515): avc: denied { create } for pid=14564 comm="syz.0.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 221.710243][ T40] audit: type=1400 audit(1758546482.914:11516): avc: denied { prog_load } for pid=14564 comm="syz.0.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 222.725747][T14562] lo speed is unknown, defaulting to 1000 [ 222.772526][T14447] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.920679][T14447] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.970681][T14571] netlink: 'syz.9.2717': attribute type 7 has an invalid length. [ 222.973422][T14571] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2717'. [ 222.998026][T14571] bridge0: port 1(bond1) entered blocking state [ 223.000609][T14571] bridge0: port 1(bond1) entered disabled state [ 223.002827][T14571] bond1: entered allmulticast mode [ 223.038336][T14447] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.112164][ T5983] Bluetooth: hci3: command tx timeout [ 223.142976][T14447] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.320453][T14447] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 223.330112][T14447] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 223.339729][T14447] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 223.344671][T14447] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 223.404541][T14447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.417248][T14447] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.425266][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.428372][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.439090][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.442129][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.606993][T14447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.835227][T14447] veth0_vlan: entered promiscuous mode [ 223.858742][T14447] veth1_vlan: entered promiscuous mode [ 223.891485][T14447] veth0_macvtap: entered promiscuous mode [ 223.898440][T14447] veth1_macvtap: entered promiscuous mode [ 223.912785][T14447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.920411][T14447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.928710][ T82] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.932907][ T82] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.937825][ T82] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.940932][ T82] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.998940][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.001981][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.030900][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.034350][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.352258][ T34] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 224.374488][ T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 224.533892][ T34] usb 14-1: Using ep0 maxpacket: 8 [ 224.537994][ T34] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 224.542264][ T34] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 224.544808][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 224.547076][ T34] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.552176][ T34] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.552908][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.558815][ T34] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 224.561167][ T24] usb 10-1: config 0 has no interfaces? [ 224.565145][ T34] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.570987][ T24] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 224.574166][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.583646][ T24] usb 10-1: config 0 descriptor?? [ 224.790122][ T34] usb 14-1: GET_CAPABILITIES returned 0 [ 224.792040][ T34] usbtmc 14-1:16.0: can't read capabilities [ 224.835138][T14608] kvm: emulating exchange as write [ 224.915409][ T29] usb 10-1: USB disconnect, device number 3 [ 225.022919][ T10] usb 14-1: USB disconnect, device number 7 [ 225.297669][T14629] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 225.325313][ T5983] Bluetooth: hci3: command tx timeout [ 225.422838][T14636] Bluetooth: hci0: unsupported parameter 75 [ 225.425254][T14636] Bluetooth: hci0: unsupported parameter 75 [ 225.565746][ C0] vcan0: j1939_tp_txtimer: 0xffff888054202c00: tx aborted with unknown reason: -2 [ 225.572752][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888054938400: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 225.584353][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888054202c00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 225.628518][T14650] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2737'. [ 225.693247][T14654] random: crng reseeded on system resumption [ 225.763098][T14656] afs: Unknown parameter 'dflock' [ 225.907015][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2744'. [ 225.910985][T14666] netlink: 'syz.0.2744': attribute type 30 has an invalid length. [ 225.927547][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.935377][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.941827][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.950207][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.050197][T14674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2743'. [ 226.068568][T14675] netlink: 'syz.0.2746': attribute type 1 has an invalid length. [ 226.130027][T14675] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 226.140912][T14675] 8021q: adding VLAN 0 to HW filter on device bond2 [ 226.153305][ T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 226.243617][T14683] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 226.273799][T14683] lo speed is unknown, defaulting to 1000 [ 226.290172][ T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 226.507878][T14692] lo speed is unknown, defaulting to 1000 [ 226.586903][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 226.590983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 226.597802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 226.603382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 226.890514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 226.915505][T14698] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 226.920394][ T40] kauditd_printk_skb: 515 callbacks suppressed [ 226.920406][ T40] audit: type=1400 audit(1758546487.787:12032): avc: denied { name_bind } for pid=14697 comm="syz.5.2752" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 226.941544][ T40] audit: type=1400 audit(1758546487.787:12033): avc: denied { create } for pid=14697 comm="syz.5.2752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 226.949015][ T40] audit: type=1400 audit(1758546487.787:12034): avc: denied { write } for pid=14697 comm="syz.5.2752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 226.960645][ T40] audit: type=1400 audit(1758546487.806:12035): avc: denied { read write } for pid=14447 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 226.969943][ T40] audit: type=1400 audit(1758546487.806:12036): avc: denied { open } for pid=14447 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 226.979293][ T40] audit: type=1400 audit(1758546487.806:12037): avc: denied { ioctl } for pid=14447 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 226.995083][ T40] audit: type=1400 audit(1758546487.862:12038): avc: denied { read write } for pid=14447 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.003792][ T40] audit: type=1400 audit(1758546487.862:12039): avc: denied { open } for pid=14447 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.012169][ T40] audit: type=1400 audit(1758546487.862:12040): avc: denied { ioctl } for pid=14447 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.020560][ T40] audit: type=1400 audit(1758546487.871:12041): avc: denied { create } for pid=14701 comm="syz.5.2754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 227.082450][T14702] orangefs: client-core tried to read wrong size [ 227.179359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 227.206704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 227.214140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 227.217881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 227.227957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 227.248981][T14710] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.254188][T14710] efs: cannot read volume header [ 227.276867][T14713] fuse: Bad value for 'group_id' [ 227.278702][T14713] fuse: Bad value for 'group_id' [ 227.281189][T14717] netlink: 4388 bytes leftover after parsing attributes in process `syz.9.2758'. [ 227.439979][T14733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2762'. [ 227.443716][T14733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2762'. [ 227.462670][T14733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2762'. [ 227.466539][T14733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2762'. [ 227.510347][T14747] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2766'. [ 227.514604][T14747] netem: unknown loss type 12 [ 227.517304][T14747] netem: change failed [ 227.550701][ T5983] Bluetooth: hci3: command tx timeout [ 227.735317][T14769] fuse: Bad value for 'fd' [ 227.735361][T14768] fuse: Bad value for 'fd' [ 227.736455][T14757] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 227.736491][T14757] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 227.796937][T14757] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 227.802516][T14757] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 227.808123][T14772] netlink: 'syz.0.2773': attribute type 1 has an invalid length. [ 227.809857][T14757] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 227.819989][T14757] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 228.117866][T14800] Invalid source name [ 228.119272][T14800] UBIFS error (pid: 14800): cannot open "./file0", error -22 [ 228.158998][T14804] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2782'. [ 228.165698][T14802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=14802 comm=syz.5.2781 [ 228.360205][T14818] netem: incorrect gi model size [ 228.452491][T14823] kvm: apic: phys broadcast and lowest prio [ 228.690877][T14839] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 228.698892][T14839] block device autoloading is deprecated and will be removed. [ 228.759460][T14836] md0: using deprecated bitmap file support [ 228.763071][T14836] md0: error: bitmap file must be a regular file [ 229.772606][ T5982] Bluetooth: hci3: command 0x0405 tx timeout [ 229.779441][T14757] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 229.781893][T14757] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 243.558035][ T40] kauditd_printk_skb: 620 callbacks suppressed [ 243.558050][ T40] audit: type=1400 audit(1758546503.352:12662): avc: denied { read write } for pid=14870 comm="syz.0.2806" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 243.574662][ T40] audit: type=1400 audit(1758546503.352:12663): avc: denied { open } for pid=14870 comm="syz.0.2806" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 243.583011][ T40] audit: type=1400 audit(1758546503.352:12664): avc: denied { ioctl } for pid=14870 comm="syz.0.2806" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 243.591454][ T40] audit: type=1400 audit(1758546503.362:12665): avc: denied { read write } for pid=14871 comm="syz.9.2805" name="vbi6" dev="devtmpfs" ino=1016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 243.601862][ T40] audit: type=1400 audit(1758546503.362:12666): avc: denied { open } for pid=14871 comm="syz.9.2805" path="/dev/vbi6" dev="devtmpfs" ino=1016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 243.616060][ T40] audit: type=1400 audit(1758546503.362:12667): avc: denied { prog_load } for pid=14876 comm="syz.5.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 243.622791][ T40] audit: type=1400 audit(1758546503.362:12668): avc: denied { bpf } for pid=14876 comm="syz.5.2807" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 243.632137][ T40] audit: type=1400 audit(1758546503.362:12669): avc: denied { perfmon } for pid=14876 comm="syz.5.2807" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 243.645310][ T40] audit: type=1400 audit(1758546503.362:12670): avc: denied { create } for pid=14872 comm="syz.4.2804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 243.653483][ T40] audit: type=1400 audit(1758546503.362:12671): avc: denied { setopt } for pid=14872 comm="syz.4.2804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 243.699687][T14888] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 243.706213][T14888] __nla_validate_parse: 2 callbacks suppressed [ 243.706224][T14888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2810'. [ 243.757682][T14884] orangefs_devreq_write_iter: failed to copy head. [ 243.762420][T14891] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2811'. [ 243.851180][T14895] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2813'. [ 243.965854][T14895] kvm: kvm [14894]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 243.972889][T14895] kvm: kvm [14894]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 243.996070][T14895] kvm: kvm [14894]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 244.049317][T14900] netlink: 'syz.4.2815': attribute type 2 has an invalid length. [ 244.052826][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2815'. [ 244.053527][T14895] kvm: kvm [14894]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 244.062640][T14895] kvm: kvm [14894]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 244.109324][T14903] loop7: detected capacity change from 0 to 7 [ 244.177059][T14906] netlink: 'syz.4.2815': attribute type 2 has an invalid length. [ 244.180231][T14906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2815'. [ 244.293927][T14903] Dev loop7: unable to read RDB block 7 [ 244.296004][T14903] loop7: unable to read partition table [ 244.297407][ C3] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 244.298283][T14903] loop7: partition table beyond EOD, [ 244.301353][ C3] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 244.307143][T14903] truncated [ 244.308548][T14903] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 244.344058][T14911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14911 comm=syz.5.2818 [ 244.544421][T14922] netlink: 'syz.9.2822': attribute type 4 has an invalid length. [ 244.559237][T14922] netlink: 'syz.9.2822': attribute type 4 has an invalid length. [ 244.756993][T14937] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 244.913129][T14941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2829'. [ 244.916875][T14941] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2829'. [ 244.982459][T14945] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2831'. [ 245.008480][T14947] tmpfs: User quota inode hardlimit too large. [ 245.179190][T14973] batman_adv: batadv0: Adding interface: dummy0 [ 245.181879][T14973] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.194629][T14973] batman_adv: batadv0: Interface activated: dummy0 [ 245.202156][T14969] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2839'. [ 245.378662][T14992] syz.4.2842 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 245.419406][T14993] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2843'. [ 245.954714][T15003] @: renamed from vlan0 (while UP) [ 245.965351][ T5983] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 245.971513][ T5983] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 245.975408][ T5983] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 245.981741][ T5983] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 245.985926][ T5983] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.002595][ T5982] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.006304][ T5982] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.010466][ T5982] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.013333][ T5982] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.015984][ T5982] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.047060][T15005] lo speed is unknown, defaulting to 1000 [ 246.143139][T15019] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 246.293835][T15005] chnl_net:caif_netlink_parms(): no params data found [ 246.456227][T15005] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.458610][T15005] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.461189][T15005] bridge_slave_0: entered allmulticast mode [ 246.464450][T15005] bridge_slave_0: entered promiscuous mode [ 246.468161][T15005] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.470647][T15005] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.473097][T15005] bridge_slave_1: entered allmulticast mode [ 246.475745][T15005] bridge_slave_1: entered promiscuous mode [ 246.522602][T15005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.529011][T15005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.582211][T15005] team0: Port device team_slave_0 added [ 246.587102][T15005] team0: Port device team_slave_1 added [ 246.628892][T15005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.632553][T15005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.642295][T15005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.647537][T15005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.649700][T15005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.658699][T15005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.732395][T15005] hsr_slave_0: entered promiscuous mode [ 246.735593][T15005] hsr_slave_1: entered promiscuous mode [ 246.738928][T15005] debugfs: 'hsr0' already exists in 'hsr' [ 246.741243][T15005] Cannot create hsr debugfs directory [ 246.914143][T15005] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.015051][T15005] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.102162][T15005] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.497133][T15005] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 247.516718][T15005] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 247.524411][T15005] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 247.532296][T15005] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 247.568845][T15070] program syz.5.2861 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.604025][T15005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.606296][ T29] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 247.619809][T15005] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.625816][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.628505][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.646332][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.649418][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.660465][T15070] overlay: Unknown parameter 'pcr' [ 247.792609][ T29] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 247.802460][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 247.806646][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 247.811845][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.817220][ T29] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.823648][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.829801][ T29] usb 9-1: config 0 descriptor?? [ 247.870349][T15005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.889803][T15091] bond5: entered allmulticast mode [ 248.021445][T15105] ptrace attach of "/syz-executor exec"[12564] was attempted by ""[15105] [ 248.120022][T15005] veth0_vlan: entered promiscuous mode [ 248.125833][T15005] veth1_vlan: entered promiscuous mode [ 248.141578][T15005] veth0_macvtap: entered promiscuous mode [ 248.150812][T15005] veth1_macvtap: entered promiscuous mode [ 248.169719][T15005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.176235][T15005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.185043][ T1174] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.187809][ T1174] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.191303][ T1174] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.194870][ T1174] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.246121][ T5983] Bluetooth: hci4: command tx timeout [ 248.248423][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.251819][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.272368][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.273061][ T29] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 248.275023][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.277991][ T29] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 248.284243][ T29] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 248.286667][ T29] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 248.290694][ T29] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 248.293183][ T29] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 248.296862][ T29] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 248.299895][ T29] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 248.302312][ T29] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 248.304677][ T29] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 248.315244][ T29] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 248.603326][T15134] netlink: 'syz.4.2860': attribute type 1 has an invalid length. [ 248.677787][ T24] usb 9-1: USB disconnect, device number 8 [ 248.723526][T15140] loop4: detected capacity change from 0 to 2560 [ 248.727862][T15140] binder: 15139:15140 unknown command 0 [ 248.730273][T15140] binder: 15139:15140 ioctl c0306201 200000000300 returned -22 [ 248.741665][ T6572] Buffer I/O error on dev loop4, logical block 0, async page read [ 248.746473][ T6572] Buffer I/O error on dev loop4, logical block 0, async page read [ 248.750838][ T6572] Buffer I/O error on dev loop4, logical block 0, async page read [ 248.754224][ T6572] Buffer I/O error on dev loop4, logical block 0, async page read [ 248.758274][ T6572] Buffer I/O error on dev loop4, logical block 0, async page read [ 248.885650][T15160] binder: 15159:15160 unknown command 0 [ 248.888550][T15160] binder: 15159:15160 ioctl c0306201 200000000080 returned -22 [ 248.897414][T15160] fuse: Unknown parameter '' [ 248.903556][T15160] veth0: entered promiscuous mode [ 248.906083][T15159] veth0: left promiscuous mode [ 248.924838][ T40] kauditd_printk_skb: 931 callbacks suppressed [ 248.924851][ T40] audit: type=1400 audit(1758546508.366:13603): avc: denied { read write } for pid=15005 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.936912][ T40] audit: type=1400 audit(1758546508.366:13604): avc: denied { open } for pid=15005 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.948925][ T40] audit: type=1400 audit(1758546508.366:13605): avc: denied { ioctl } for pid=15005 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.962207][ T40] audit: type=1400 audit(1758546508.403:13606): avc: denied { read write } for pid=15161 comm="syz.9.2884" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 248.970903][ T40] audit: type=1400 audit(1758546508.403:13607): avc: denied { open } for pid=15161 comm="syz.9.2884" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 248.984136][ T40] audit: type=1400 audit(1758546508.403:13608): avc: denied { mounton } for pid=15161 comm="syz.9.2884" path="/7/file0" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 248.993379][ T40] audit: type=1400 audit(1758546508.403:13609): avc: denied { mount } for pid=15161 comm="syz.9.2884" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 249.002496][ T40] audit: type=1400 audit(1758546508.413:13610): avc: denied { read write } for pid=12613 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.010951][ T40] audit: type=1400 audit(1758546508.413:13611): avc: denied { open } for pid=12613 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.019909][ T40] audit: type=1400 audit(1758546508.413:13612): avc: denied { ioctl } for pid=12613 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.071870][T15170] __nla_validate_parse: 4 callbacks suppressed [ 249.071887][T15170] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2886'. [ 249.078232][T15170] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2886'. [ 249.124648][T15174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2888'. [ 249.128403][T15174] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2888'. [ 249.205672][T15185] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2893'. [ 249.259855][T15188] tun0: tun_chr_ioctl cmd 1074025677 [ 249.263018][T15188] tun0: linktype set to 825 [ 249.486339][T15212] gfs2: gfs2 mount does not exist [ 249.587251][T15221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2903'. [ 249.625741][ T13] bond2: (slave ip6gretap1): link status up again after 0 ms [ 249.630827][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 249.742658][ T46] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 249.860668][ T46] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 249.919833][T15245] fuseblk: Bad value for 'group_id' [ 249.921533][T15245] fuseblk: Bad value for 'group_id' [ 249.932737][T15245] netlink: 'syz.4.2912': attribute type 10 has an invalid length. [ 249.936875][T15245] netlink: 4924 bytes leftover after parsing attributes in process `syz.4.2912'. [ 249.978486][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 250.065107][T15247] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.068565][T15247] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.095261][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 250.145530][T15247] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.151261][T15247] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.213479][ T1174] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 250.230978][T15247] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.235880][T15247] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.310186][T15251] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.317051][T15251] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.364894][T15247] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.369309][T15247] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.389083][T15251] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2914'. [ 250.469391][ T5983] Bluetooth: hci4: command tx timeout [ 250.505933][T15251] team0: Port device team_slave_0 removed [ 250.533428][ T46] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 250.547878][ T1144] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.550570][ T1144] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.557203][ T1144] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.560390][ T1144] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.580731][ T46] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.583369][ T46] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.586014][ T46] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.589168][ T46] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.607065][T15254] syzkaller1: entered promiscuous mode [ 250.614025][T15254] syzkaller1: entered allmulticast mode [ 250.672500][ T82] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 250.744056][T15270] devtmpfs: Cannot change global quota limit on remount [ 250.768472][T15274] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2920'. [ 250.801416][ T82] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 250.973576][T15280] kvm: pic: non byte write [ 250.977652][T15280] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3722248192 (7444496384 ns) > initial count (18 ns). Using initial count to start timer. [ 251.045114][T15292] block nbd5: Attempted send on invalid socket [ 251.050225][T15292] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.054644][T15292] block nbd5: Attempted send on invalid socket [ 251.057381][T15292] I/O error, dev nbd5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.061072][T15292] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 251.065594][T15292] block nbd5: Attempted send on invalid socket [ 251.068355][T15292] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.072142][T15292] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 251.075979][T15292] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 251.079021][T15292] UDF-fs: Scanning with blocksize 512 failed [ 251.084246][T15292] block nbd5: Attempted send on invalid socket [ 251.086731][T15292] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.090650][T15292] block nbd5: Attempted send on invalid socket [ 251.093161][T15292] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.093447][T15301] 9p: Unknown access argument 18446744073709551615: -34 [ 251.096270][T15292] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 251.102914][T15292] block nbd5: Attempted send on invalid socket [ 251.104930][T15292] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.108682][T15292] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 251.112667][T15292] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 251.115681][T15292] UDF-fs: Scanning with blocksize 1024 failed [ 251.118477][T15292] block nbd5: Attempted send on invalid socket [ 251.120537][T15292] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.123595][T15292] block nbd5: Attempted send on invalid socket [ 251.124751][T15303] netlink: 'syz.9.2927': attribute type 2 has an invalid length. [ 251.125602][T15292] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.131180][T15292] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 251.136621][T15292] block nbd5: Attempted send on invalid socket [ 251.138689][T15292] I/O error, dev nbd5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.141644][T15292] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 251.146172][T15292] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 251.148822][T15292] UDF-fs: Scanning with blocksize 2048 failed [ 251.152967][T15292] block nbd5: Attempted send on invalid socket [ 251.155423][T15292] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.158624][T15292] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 251.162325][T15292] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 251.165782][T15292] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 251.168247][T15292] UDF-fs: Scanning with blocksize 4096 failed [ 251.170316][T15292] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 251.274792][T15308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15308 comm=syz.4.2929 [ 251.285908][T15308] ip6tnl1: entered promiscuous mode [ 251.288146][T15308] ip6tnl1: entered allmulticast mode [ 251.545027][T15320] binder: 15319:15320 ioctl 4018620d 0 returned -22 [ 251.609765][T15321] tipc: Enabling not permitted [ 251.612064][T15321] tipc: Enabling of bearer rejected, failed to enable media [ 251.818245][T15326] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2935'. [ 251.867593][T15328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3856 sclass=netlink_route_socket pid=15328 comm=syz.0.2936 [ 252.215504][T15351] netlink: 'syz.0.2944': attribute type 6 has an invalid length. [ 252.224568][T15352] autofs4:pid:15352:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 252.262750][T15356] FAULT_INJECTION: forcing a failure. [ 252.262750][T15356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.269104][T15356] CPU: 0 UID: 0 PID: 15356 Comm: syz.9.2946 Not tainted syzkaller #0 PREEMPT(full) [ 252.269123][T15356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 252.269131][T15356] Call Trace: [ 252.269136][T15356] [ 252.269141][T15356] dump_stack_lvl+0x16c/0x1f0 [ 252.269182][T15356] should_fail_ex+0x512/0x640 [ 252.269207][T15356] _copy_from_user+0x2e/0xd0 [ 252.269226][T15356] move_addr_to_kernel+0x65/0x170 [ 252.269248][T15356] __sys_sendto+0x1be/0x520 [ 252.269263][T15356] ? __pfx___sys_sendto+0x10/0x10 [ 252.269291][T15356] ? ksys_write+0x1ac/0x250 [ 252.269304][T15356] ? __pfx_ksys_write+0x10/0x10 [ 252.269319][T15356] __x64_sys_sendto+0xe0/0x1c0 [ 252.269333][T15356] ? do_syscall_64+0x91/0x4e0 [ 252.269355][T15356] ? lockdep_hardirqs_on+0x7c/0x110 [ 252.269372][T15356] do_syscall_64+0xcd/0x4e0 [ 252.269389][T15356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.269402][T15356] RIP: 0033:0x7fd098f8ec29 [ 252.269413][T15356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.269425][T15356] RSP: 002b:00007fd099e48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 252.269438][T15356] RAX: ffffffffffffffda RBX: 00007fd0991d5fa0 RCX: 00007fd098f8ec29 [ 252.269446][T15356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 252.269453][T15356] RBP: 00007fd099e48090 R08: 0000200000e68000 R09: 0000000000000010 [ 252.269461][T15356] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 252.269468][T15356] R13: 00007fd0991d6038 R14: 00007fd0991d5fa0 R15: 00007ffe4aa9eb78 [ 252.269486][T15356] [ 252.334816][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.487137][ T5381] Dev loop6: unable to read RDB block 1 [ 252.489115][ T5381] loop6: unable to read partition table [ 252.492533][ T5381] loop6: partition table beyond EOD, truncated [ 252.617933][T15374] tmpfs: Bad value for 'mpol' [ 252.665793][T15377] netlink: 'syz.4.2951': attribute type 21 has an invalid length. [ 252.668641][T15377] netlink: 'syz.4.2951': attribute type 4 has an invalid length. [ 252.671090][T15377] netlink: 'syz.4.2951': attribute type 5 has an invalid length. [ 252.693299][ T5983] Bluetooth: hci4: command tx timeout [ 252.933283][T15391] bond0: entered allmulticast mode [ 252.935012][T15391] bond_slave_0: entered allmulticast mode [ 252.936803][T15391] bond_slave_1: entered allmulticast mode [ 253.015796][T15394] netlink: 'syz.5.2957': attribute type 1 has an invalid length. [ 253.396592][T15414] QAT: Device 2 not found [ 253.483141][ T4887] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz1] on syz0 [ 253.708561][ T6064] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 253.869171][ T6064] usb 10-1: Using ep0 maxpacket: 8 [ 253.873354][ T6064] usb 10-1: config 0 interface 0 has no altsetting 0 [ 253.875555][ T6064] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 253.878570][ T6064] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.888542][ T6064] usb 10-1: config 0 descriptor?? [ 253.936030][T15458] netlink: 'syz.0.2977': attribute type 10 has an invalid length. [ 253.939915][T15453] 9pnet_fd: Insufficient options for proto=fd [ 254.172887][T15470] tipc: Enabling of bearer rejected, failed to enable media [ 254.277995][ T40] kauditd_printk_skb: 1193 callbacks suppressed [ 254.278007][ T40] audit: type=1400 audit(1758546513.380:14806): avc: denied { prog_load } for pid=15478 comm="syz.4.2984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 254.295022][ T40] audit: type=1400 audit(1758546513.380:14807): avc: denied { bpf } for pid=15478 comm="syz.4.2984" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 254.303736][ T40] audit: type=1400 audit(1758546513.380:14808): avc: denied { perfmon } for pid=15478 comm="syz.4.2984" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 254.311336][ T40] audit: type=1400 audit(1758546513.380:14809): avc: denied { bpf } for pid=15478 comm="syz.4.2984" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 254.318593][ T40] audit: type=1400 audit(1758546513.380:14810): avc: denied { prog_load } for pid=15480 comm="syz.9.2985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 254.324916][ T40] audit: type=1400 audit(1758546513.380:14811): avc: denied { bpf } for pid=15480 comm="syz.9.2985" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 254.338218][T15477] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.346770][T15477] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.347651][ T40] audit: type=1400 audit(1758546513.380:14812): avc: denied { perfmon } for pid=15480 comm="syz.9.2985" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 254.361772][ T40] audit: type=1400 audit(1758546513.380:14813): avc: denied { create } for pid=15480 comm="syz.9.2985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 254.368311][ T40] audit: type=1400 audit(1758546513.399:14814): avc: denied { read write } for pid=15005 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 254.380148][ T40] audit: type=1400 audit(1758546513.399:14815): avc: denied { open } for pid=15005 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 254.381702][ T6064] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 254.459112][T15491] __nla_validate_parse: 8 callbacks suppressed [ 254.459129][T15491] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2990'. [ 254.525117][T15477] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.528472][T15477] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.563453][T15432] binder: 15431:15432 ioctl c0306201 2000000004c0 returned -14 [ 254.569716][T15432] binder: 15431:15432 ioctl c0306201 2000000001c0 returned -14 [ 254.574090][T15432] binder: 15431:15432 ioctl c018620c 200000000240 returned -22 [ 254.581390][ T6064] usb 10-1: USB disconnect, device number 4 [ 254.642635][T15477] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.647320][T15477] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.749866][T15477] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 254.753527][T15477] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.757061][T15477] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.839447][T15500] bridge3: entered promiscuous mode [ 254.844555][T15500] bridge3: entered allmulticast mode [ 254.857017][ T82] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.860348][ T82] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.869826][ T82] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.873102][ T82] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.893047][ T46] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.896213][ T46] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.897278][T15502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2994'. [ 254.909355][ T1144] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.913052][ T1144] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.916581][ T5983] Bluetooth: hci4: command tx timeout [ 254.990372][T15506] bpf: Bad value for 'uid' [ 255.032228][T15512] netlink: 'syz.4.2997': attribute type 3 has an invalid length. [ 255.035337][T15512] netlink: 'syz.4.2997': attribute type 1 has an invalid length. [ 255.037936][T15512] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2997'. [ 255.055806][ T82] net_ratelimit: 34 callbacks suppressed [ 255.055827][ T82] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 255.168186][T15517] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2998'. [ 255.185414][ T82] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 255.301525][ T1174] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 255.411079][T15544] program syz.9.3008 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.421345][ T1174] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 255.462896][T15548] batman_adv: batadv0: Interface deactivated: dummy0 [ 255.465882][T15548] dummy0: entered promiscuous mode [ 255.547789][ T1144] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 255.558367][ T24] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 255.665812][ T1174] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 255.718389][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 255.722210][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.725805][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.728847][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 255.733011][ T24] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 255.735970][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.740302][ T24] usb 9-1: config 0 descriptor?? [ 255.782714][ T82] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 255.858305][T15563] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 255.860967][T15563] overlayfs: missing 'lowerdir' [ 255.912312][ T82] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 255.933424][T15567] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3017'. [ 255.968299][ T24] usbhid 9-1:0.0: can't add hid device: -71 [ 255.975159][ T24] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 255.980211][ T24] usb 9-1: USB disconnect, device number 9 [ 256.039791][ T1144] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 256.089299][T15584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3022'. [ 256.090843][T15583] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3022'. [ 256.157502][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 256.241344][T15605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.300028][T15605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.387546][T15610] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 256.439060][T15610] bridge_slave_0: left allmulticast mode [ 256.440916][T15610] bridge_slave_0: left promiscuous mode [ 256.444344][T15610] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.448888][T15610] bridge_slave_1: left allmulticast mode [ 256.450678][T15610] bridge_slave_1: left promiscuous mode [ 256.452540][T15610] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.458926][T15610] bond0: (slave bond_slave_0): Releasing backup interface [ 256.463211][T15610] bond0: (slave bond_slave_1): Releasing backup interface [ 256.471608][T15610] team0: Port device team_slave_0 removed [ 256.476283][T15610] team0: Port device team_slave_1 removed [ 256.479230][T15610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.482506][T15610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.486746][T15610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.492873][T15610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.621537][T15614] can0: slcan on ttyS3. [ 256.737497][T15613] can0 (unregistered): slcan off ttyS3. [ 256.820200][T15625] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 256.914288][T10834] hid_parser_main: 6 callbacks suppressed [ 256.914301][T10834] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 256.924618][T10834] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 257.265415][T15648] netlink: 'syz.4.3045': attribute type 3 has an invalid length. [ 257.371093][T15662] fuse: Bad value for 'fd' [ 257.614403][T15697] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3060'. [ 257.711579][T15711] netlink: 'syz.5.3065': attribute type 1 has an invalid length. [ 257.719436][T15711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3065'. [ 257.763070][T15723] bridge0: entered allmulticast mode [ 257.765096][T15723] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3069'. [ 257.778934][T15723] bridge0 (unregistering): left allmulticast mode [ 258.461424][T15752] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 258.518935][T15754] netlink: 'syz.0.3079': attribute type 13 has an invalid length. [ 258.626580][T15769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=15769 comm=syz.9.3084 [ 258.916527][ T5722] e1000 0000:00:06.0 eth0: Reset adapter [ 259.036868][T15816] veth1_to_batadv: entered promiscuous mode [ 259.054344][ T5722] e1000 0000:00:06.0 eth0: Reset adapter [ 259.097673][T15826] program syz.9.3093 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.109083][ T1122] sr 2:0:0:0: [sr0] tag#7 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 259.113152][ T1122] sr 2:0:0:0: [sr0] tag#7 Sense Key : Illegal Request [current] [ 259.116379][ T1122] sr 2:0:0:0: [sr0] tag#7 Add. Sense: Logical block address out of range [ 259.120349][ T1122] sr 2:0:0:0: [sr0] tag#7 CDB: Read(10) 28 00 00 00 00 20 00 00 02 00 [ 259.123383][ T1122] blk_print_req_error: 2 callbacks suppressed [ 259.123396][ T1122] I/O error, dev sr0, sector 128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 259.180980][T15830] block device autoloading is deprecated and will be removed. [ 259.186685][ T1122] sr 2:0:0:0: [sr0] tag#8 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 259.190327][ T1122] sr 2:0:0:0: [sr0] tag#8 Sense Key : Illegal Request [current] [ 259.195032][ T1122] sr 2:0:0:0: [sr0] tag#8 Add. Sense: Logical block address out of range [ 259.198473][ T1122] sr 2:0:0:0: [sr0] tag#8 CDB: Read(10) 28 00 00 00 00 20 00 00 02 00 [ 259.201181][ T1122] I/O error, dev sr0, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.204351][T15819] hpfs: hpfs_map_sector(): read error [ 260.411897][ T9814] net_ratelimit: 32 callbacks suppressed [ 260.411917][ T9814] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 260.529386][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 260.646926][T15795] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 260.764663][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 260.882035][T15795] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 260.999899][ T9814] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 261.117338][ T9814] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 261.235093][T15809] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 261.352809][T15809] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 261.417570][ T5722] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 261.470007][T15809] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 261.774412][ T40] kauditd_printk_skb: 1066 callbacks suppressed [ 261.774422][ T40] audit: type=1400 audit(1758546520.386:15882): avc: denied { read } for pid=15832 comm="syz.4.3096" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 261.785644][T15836] tipc: Enabling of bearer rejected, failed to enable media [ 261.787187][ T40] audit: type=1400 audit(1758546520.386:15883): avc: denied { read open } for pid=15832 comm="syz.4.3096" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 261.796295][ T40] audit: type=1400 audit(1758546520.386:15884): avc: denied { ioctl } for pid=15832 comm="syz.4.3096" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 261.806029][ T40] audit: type=1400 audit(1758546520.386:15885): avc: denied { bpf } for pid=15833 comm="syz.0.3098" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 261.813054][ T40] audit: type=1400 audit(1758546520.405:15886): avc: denied { create } for pid=15833 comm="syz.0.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.819698][ T40] audit: type=1400 audit(1758546520.405:15887): avc: denied { write } for pid=15833 comm="syz.0.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.826361][ T40] audit: type=1400 audit(1758546520.405:15888): avc: denied { read } for pid=15833 comm="syz.0.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.833943][ T40] audit: type=1400 audit(1758546520.405:15889): avc: denied { create } for pid=15834 comm="syz.9.3097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 261.842038][ T40] audit: type=1400 audit(1758546520.405:15890): avc: denied { ioctl } for pid=15834 comm="syz.9.3097" path="socket:[83641]" dev="sockfs" ino=83641 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 261.851791][ T40] audit: type=1400 audit(1758546520.414:15891): avc: denied { prog_load } for pid=15833 comm="syz.0.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 263.760401][T15860] __nla_validate_parse: 4 callbacks suppressed [ 263.760412][T15860] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3104'. [ 263.799763][T15868] netlink: 'syz.4.3106': attribute type 21 has an invalid length. [ 263.804071][T15868] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3106'. [ 263.836229][T15871] IPv6: Can't replace route, no match found [ 263.922874][T15886] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3112'. [ 263.922895][T15884] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3112'. [ 263.935664][T15882] block nbd0: Unsupported socket: shutdown callout must be supported. [ 264.019141][T15897] PKCS8: Unsupported PKCS#8 version [ 264.093618][T15876] binder: BC_ATTEMPT_ACQUIRE not supported [ 264.095553][T15876] binder: 15874:15876 ioctl c0306201 200000000300 returned -22 [ 264.223878][T15904] netlink: 'syz.0.3120': attribute type 3 has an invalid length. [ 264.226412][T15904] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3120'. [ 264.227455][T15905] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 264.233117][T15907] /dev/nullb0: Can't open blockdev [ 264.300999][T15904] overlayfs: upper fs does not support tmpfile. [ 264.318375][T15914] sctp: [Deprecated]: syz.4.3122 (pid 15914) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.318375][T15914] Use struct sctp_sack_info instead [ 264.326407][T15914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15914 comm=syz.4.3122 [ 264.418649][T15919] block nbd9: shutting down sockets [ 264.419681][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3128'. [ 264.428715][T15934] netlink: 'syz.5.3128': attribute type 1 has an invalid length. [ 264.433139][T15935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3129'. [ 264.482149][T15934] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 264.494949][T15935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3129'. [ 264.595049][T15959] netlink: 'syz.5.3134': attribute type 1 has an invalid length. [ 264.682535][T15972] lo speed is unknown, defaulting to 1000 [ 264.689218][T15975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3141'. [ 264.694252][T15975] F2FS-fs: Conflicting test_dummy_encryption options [ 264.710197][T15968] vivid-004: disconnect [ 264.712522][T15966] vivid-004: reconnect [ 264.816772][T15985] overlayfs: failed to resolve './file0': -2 [ 264.861653][T15988] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.864550][T15988] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.922847][T15988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.931068][T15988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.979693][T15988] geneve2: left allmulticast mode [ 264.987156][ T59] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 264.991073][T15988] bond5: left allmulticast mode [ 265.150387][ T59] usb 10-1: config 0 has no interfaces? [ 265.153855][ T59] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 265.156990][ T59] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.160428][ T59] usb 10-1: Product: syz [ 265.161774][ T59] usb 10-1: Manufacturer: syz [ 265.163247][ T59] usb 10-1: SerialNumber: syz [ 265.166977][ T59] usb 10-1: config 0 descriptor?? [ 265.198377][T15809] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.201483][T15809] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.204256][T15809] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.206985][T15809] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.222211][T15809] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.225501][T15809] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.228190][T15809] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.230843][T15809] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.411662][T15972] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.484373][ T9] usb 10-1: USB disconnect, device number 5 [ 265.680116][T16014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3149'. [ 265.749391][T16019] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 265.754417][T16019] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 265.762412][T16019] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 266.185679][T16039] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 266.386635][T16052] input: syz1 as /devices/virtual/input/input20 [ 266.398645][T16052] overlayfs: conflicting lowerdir path [ 266.689169][T16064] XFS (nbd4): no-recovery mounts must be read-only. [ 267.068000][T16093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16093 comm=syz.4.3177 [ 267.079078][T16093] loop9: detected capacity change from 0 to 7 [ 267.084762][T16093] Dev loop9: unable to read RDB block 7 [ 267.086642][T16093] loop9: unable to read partition table [ 267.088588][T16093] loop9: partition table beyond EOD, truncated [ 267.090610][T16093] loop_reread_partitions: partition scan of loop9 (3 xC) failed (rc=-5) [ 267.100430][T16093] Dev loop9: unable to read RDB block 7 [ 267.102254][T16093] loop9: unable to read partition table [ 267.104581][T16093] loop9: partition table beyond EOD, truncated [ 267.128078][ T40] kauditd_printk_skb: 818 callbacks suppressed [ 267.128090][ T40] audit: type=1400 audit(1758546525.400:16710): avc: denied { read write } for pid=12613 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.138928][ T40] audit: type=1400 audit(1758546525.400:16711): avc: denied { open } for pid=12613 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.146525][ T40] audit: type=1400 audit(1758546525.400:16712): avc: denied { ioctl } for pid=12613 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.148469][T16095] /dev/nullb0: Can't open blockdev [ 267.158680][ T40] audit: type=1400 audit(1758546525.409:16713): avc: denied { read } for pid=16094 comm="syz.4.3178" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 267.166100][ T40] audit: type=1400 audit(1758546525.409:16714): avc: denied { open } for pid=16094 comm="syz.4.3178" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 267.176841][ T40] audit: type=1400 audit(1758546525.409:16715): avc: denied { map_create } for pid=16094 comm="syz.4.3178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 267.183121][ T40] audit: type=1400 audit(1758546525.409:16716): avc: denied { bpf } for pid=16094 comm="syz.4.3178" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 267.191801][ T40] audit: type=1400 audit(1758546525.409:16717): avc: denied { map_read map_write } for pid=16094 comm="syz.4.3178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 267.198145][ T40] audit: type=1400 audit(1758546525.409:16718): avc: denied { prog_load } for pid=16094 comm="syz.4.3178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 267.204535][ T40] audit: type=1400 audit(1758546525.409:16719): avc: denied { perfmon } for pid=16094 comm="syz.4.3178" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 267.596936][T16113] dlm: no local IP address has been set [ 267.598908][T16113] dlm: cannot start dlm midcomms -107 [ 267.603410][T16113] comedi: valid board names for 8255 driver are: [ 267.605589][T16113] 8255 [ 267.606955][T16113] comedi: valid board names for vmk80xx driver are: [ 267.609650][T16113] vmk80xx [ 267.610788][T16113] comedi: valid board names for usbduxsigma driver are: [ 267.613615][T16113] usbduxsigma [ 267.614823][T16113] comedi: valid board names for usbduxfast driver are: [ 267.617518][T16113] usbduxfast [ 267.618617][T16113] comedi: valid board names for usbdux driver are: [ 267.620706][T16113] usbdux [ 267.621660][T16113] comedi: valid board names for ni6501 driver are: [ 267.623813][T16113] ni6501 [ 267.624784][T16113] comedi: valid board names for dt9812 driver are: [ 267.626842][T16113] dt9812 [ 267.628395][T16113] comedi: valid board names for ni_labpc_cs driver are: [ 267.631189][T16113] ni_labpc_cs [ 267.632564][T16113] comedi: valid board names for ni_daq_700 driver are: [ 267.635299][T16113] ni_daq_700 [ 267.636638][T16113] comedi: valid board names for labpc_pci driver are: [ 267.639480][T16113] labpc_pci [ 267.640802][T16113] comedi: valid board names for adl_pci9118 driver are: [ 267.643542][T16113] pci9118dg [ 267.644849][T16113] pci9118hg [ 267.646201][T16113] pci9118hr [ 267.647290][T16113] comedi: valid board names for 8255_pci driver are: [ 267.649836][T16113] 8255_pci [ 267.650921][T16113] comedi: valid board names for s526 driver are: [ 267.652981][T16113] s526 [ 267.653906][T16113] comedi: valid board names for multiq3 driver are: [ 267.656151][T16113] multiq3 [ 267.657455][T16113] comedi: valid board names for pcmuio driver are: [ 267.660269][T16113] pcmuio48 [ 267.661336][T16113] pcmuio96 [ 267.662365][T16113] comedi: valid board names for pcmmio driver are: [ 267.664455][T16113] pcmmio [ 267.665426][T16113] comedi: valid board names for pcmda12 driver are: [ 267.667629][T16113] pcmda12 [ 267.668698][T16113] comedi: valid board names for pcmad driver are: [ 267.670968][T16113] pcmad12 [ 267.672021][T16113] pcmad16 [ 267.673045][T16113] comedi: valid board names for ni_labpc driver are: [ 267.675209][T16113] lab-pc-1200 [ 267.676339][T16113] lab-pc-1200ai [ 267.677521][T16113] lab-pc+ [ 267.678620][T16113] comedi: valid board names for atmio16 driver are: [ 267.680834][T16113] atmio16 [ 267.681906][T16113] atmio16d [ 267.683219][T16113] comedi: valid board names for ni_at_ao driver are: [ 267.685608][T16113] at-ao-6 [ 267.686878][T16113] at-ao-10 [ 267.687986][T16113] comedi: valid board names for ni_at_a2150 driver are: [ 267.690269][T16113] ni_at_a2150 [ 267.691397][T16113] comedi: valid board names for adq12b driver are: [ 267.694062][T16113] adq12b [ 267.695052][T16113] comedi: valid board names for mpc624 driver are: [ 267.697135][T16113] mpc624 [ 267.698133][T16113] comedi: valid board names for c6xdigio driver are: [ 267.700326][T16113] c6xdigio [ 267.701446][T16113] comedi: valid board names for aio_iiro_16 driver are: [ 267.703850][T16113] aio_iiro_16 [ 267.705163][T16113] comedi: valid board names for aio_aio12_8 driver are: [ 267.707376][T16113] aio_aio12_8 [ 267.708521][T16113] aio_ai12_8 [ 267.709626][T16113] aio_ao12_4 [ 267.710731][T16113] comedi: valid board names for fl512 driver are: [ 267.712903][T16113] fl512 [ 267.713975][T16113] comedi: valid board names for dmm32at driver are: [ 267.716175][T16113] dmm32at [ 267.717231][T16113] comedi: valid board names for dt282x driver are: [ 267.719306][T16113] dt2821 [ 267.720514][T16113] dt2821-f [ 267.721588][T16113] dt2821-g [ 267.722638][T16113] dt2823 [ 267.723704][T16113] dt2824-pgh [ 267.724885][T16113] dt2824-pgl [ 267.726000][T16113] dt2825 [ 267.726984][T16113] dt2827 [ 267.727989][T16113] dt2828 [ 267.728948][T16113] dt2829 [ 267.729981][T16113] dt21-ez [ 267.731019][T16113] dt23-ez [ 267.732244][T16113] dt24-ez [ 267.733265][T16113] dt24-ez-pgl [ 267.734736][T16113] comedi: valid board names for dt2817 driver are: [ 267.737213][T16113] dt2817 [ 267.738248][T16113] comedi: valid board names for dt2815 driver are: [ 267.740429][T16113] dt2815 [ 267.741444][T16113] comedi: valid board names for dt2814 driver are: [ 267.743554][T16113] dt2814 [ 267.744579][T16113] comedi: valid board names for dt2811 driver are: [ 267.746744][T16113] dt2811-pgh [ 267.747891][T16113] dt2811-pgl [ 267.749004][T16113] comedi: valid board names for dt2801 driver are: [ 267.751050][T16113] dt2801 [ 267.752090][T16113] comedi: valid board names for das6402 driver are: [ 267.754199][T16113] das6402-12 [ 267.755294][T16113] das6402-16 [ 267.756477][T16113] comedi: valid board names for das1800 driver are: [ 267.758911][T16113] das-1701st [ 267.760079][T16113] das-1701st-da [ 267.761249][T16113] das-1702st [ 267.762353][T16113] das-1702st-da [ 267.763548][T16113] das-1702hr [ 267.764685][T16113] das-1702hr-da [ 267.765860][T16113] das-1701ao [ 267.767048][T16113] das-1702ao [ 267.768200][T16113] das-1801st [ 267.769340][T16113] das-1801st-da [ 267.770543][T16113] das-1802st [ 267.771668][T16113] das-1802st-da [ 267.772875][T16113] das-1802hr [ 267.773999][T16113] das-1802hr-da [ 267.775177][T16113] das-1801hc [ 267.776267][T16113] das-1802hc [ 267.777523][T16113] das-1801ao [ 267.778869][T16113] das-1802ao [ 267.780201][T16113] comedi: valid board names for das800 driver are: [ 267.782760][T16113] das-800 [ 267.784026][T16113] cio-das800 [ 267.785354][T16113] das-801 [ 267.786587][T16113] cio-das801 [ 267.787956][T16113] das-802 [ 267.789095][T16113] cio-das802 [ 267.790175][T16113] cio-das802/16 [ 267.791374][T16113] comedi: valid board names for isa-das08 driver are: [ 267.793532][T16113] isa-das08 [ 267.794592][T16113] das08-pgm [ 267.795622][T16113] das08-pgh [ 267.796683][T16113] das08-pgl [ 267.797757][T16113] das08-aoh [ 267.798891][T16113] das08-aol [ 267.799920][T16113] das08-aom [ 267.800996][T16113] das08/jr-ao [ 267.802111][T16113] das08jr-16-ao [ 267.803274][T16113] pc104-das08 [ 267.804456][T16113] das08jr/16 [ 267.805559][T16113] comedi: valid board names for das16m1 driver are: [ 267.807615][T16113] das16m1 [ 267.808636][T16113] comedi: valid board names for dac02 driver are: [ 267.810742][T16113] dac02 [ 267.811727][T16113] comedi: valid board names for rti802 driver are: [ 267.813797][T16113] rti802 [ 267.814797][T16113] comedi: valid board names for rti800 driver are: [ 267.816870][T16113] rti800 [ 267.817846][T16113] rti815 [ 267.818849][T16113] comedi: valid board names for pcm3724 driver are: [ 267.821068][T16113] pcm3724 [ 267.822062][T16113] comedi: valid board names for pcl818 driver are: [ 267.824174][T16113] pcl818l [ 267.825190][T16113] pcl818h [ 267.826195][T16113] pcl818hd [ 267.827265][T16113] pcl818hg [ 267.828321][T16113] pcl818 [ 267.829299][T16113] pcl718 [ 267.830308][T16113] pcm3718 [ 267.831500][T16113] comedi: valid board names for pcl816 driver are: [ 267.833639][T16113] pcl816 [ 267.834615][T16113] pcl814b [ 267.835653][T16113] comedi: valid board names for pcl812 driver are: [ 267.837758][T16113] pcl812 [ 267.838740][T16113] pcl812pg [ 267.839814][T16113] acl8112pg [ 267.840929][T16113] acl8112dg [ 267.842081][T16113] acl8112hg [ 267.843145][T16113] a821pgl [ 267.844220][T16113] a821pglnda [ 267.845354][T16113] a821pgh [ 267.846370][T16113] a822pgl [ 267.847387][T16113] a822pgh [ 267.848410][T16113] a823pgl [ 267.849413][T16113] a823pgh [ 267.850421][T16113] pcl813 [ 267.851386][T16113] pcl813b [ 267.852527][T16113] acl8113 [ 267.853567][T16113] iso813 [ 267.854564][T16113] acl8216 [ 267.855600][T16113] a826pg [ 267.856567][T16113] comedi: valid board names for pcl730 driver are: [ 267.858607][T16113] pcl730 [ 267.859574][T16113] iso730 [ 267.860559][T16113] acl7130 [ 267.861580][T16113] pcm3730 [ 267.862634][T16113] pcl725 [ 267.863680][T16113] p8r8dio [ 267.864719][T16113] acl7225b [ 267.865747][T16113] p16r16dio [ 267.866810][T16113] pcl733 [ 267.867763][T16113] pcl734 [ 267.868755][T16113] opmm-1616-xt [ 267.869910][T16113] pearl-mm-p [ 267.871011][T16113] ir104-pbf [ 267.872086][T16113] comedi: valid board names for pcl726 driver are: [ 267.874261][T16113] pcl726 [ 267.875247][T16113] pcl727 [ 267.876218][T16113] pcl728 [ 267.877217][T16113] acl6126 [ 267.878236][T16113] acl6128 [ 267.879267][T16113] comedi: valid board names for pcl724 driver are: [ 267.881368][T16113] pcl724 [ 267.882339][T16113] pcl722 [ 267.883292][T16113] pcl731 [ 267.884354][T16113] acl7122 [ 267.885373][T16113] acl7124 [ 267.886400][T16113] pet48dio [ 267.887449][T16113] pcmio48 [ 267.888500][T16113] onyx-mm-dio [ 267.889634][T16113] comedi: valid board names for pcl711 driver are: [ 267.891685][T16113] pcl711 [ 267.892660][T16113] pcl711b [ 267.893685][T16113] acl8112hg [ 267.894793][T16113] acl8112dg [ 267.895953][T16113] comedi: valid board names for amplc_pc263 driver are: [ 267.898153][T16113] pc263 [ 267.899148][T16113] comedi: valid board names for amplc_pc236 driver are: [ 267.901349][T16113] pc36at [ 267.902324][T16113] comedi: valid board names for amplc_dio200 driver are: [ 267.904582][T16113] pc212e [ 267.905670][T16113] pc214e [ 267.906591][T16113] pc215e [ 267.907569][T16113] pc218e [ 267.908573][T16113] pc272e [ 267.909522][T16113] comedi: valid board names for comedi_parport driver are: [ 267.911820][T16113] comedi_parport [ 267.913038][T16113] comedi: valid board names for comedi_test driver are: [ 267.915241][T16113] comedi_test [ 267.916420][T16113] comedi: valid board names for comedi_bond driver are: [ 267.918594][T16113] comedi_bond [ 268.033220][T16124] netlink: 'syz.9.3187': attribute type 4 has an invalid length. [ 268.317719][T16141] geneve2: entered promiscuous mode [ 268.319449][T16141] geneve2: entered allmulticast mode [ 268.323494][T16144] NILFS (loop0): device size too small [ 268.414470][T16151] netlink: 'syz.0.3196': attribute type 27 has an invalid length. [ 268.432878][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.487424][T16151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.490587][T16151] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.498000][T16151] net_ratelimit: 30 callbacks suppressed [ 268.498006][T16151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.717918][T16192] unsupported nlmsg_type 40 [ 268.742051][T16194] binder: BINDER_SET_CONTEXT_MGR already set [ 268.744085][T16194] binder: 16193:16194 ioctl 4018620d 2000000000c0 returned -16 [ 268.746830][T16194] binder: BINDER_SET_CONTEXT_MGR already set [ 268.748752][T16194] binder: 16193:16194 ioctl 4018620d 2000000000c0 returned -16 [ 268.755887][T16194] binder: BINDER_SET_CONTEXT_MGR already set [ 268.757948][T16194] binder: 16193:16194 ioctl 4018620d 2000000000c0 returned -16 [ 268.761505][T16194] binder: BINDER_SET_CONTEXT_MGR already set [ 268.763977][T16194] binder: 16193:16194 ioctl 4018620d 2000000000c0 returned -16 [ 268.767181][T16194] binder: BINDER_SET_CONTEXT_MGR already set [ 268.769574][T16194] binder: 16193:16194 ioctl 4018620d 2000000000c0 returned -16 [ 268.773830][T16194] binder: BINDER_SET_CONTEXT_MGR already set [ 268.776051][T16194] binder: 16193:16194 ioctl 4018620d 2000000000c0 returned -16 [ 268.846705][T16198] overlayfs: failed to resolve './file0': -2 [ 268.969338][T16222] overlayfs: failed to resolve './file1': -2 [ 269.025121][T16231] 9pnet: Unknown protocol version 9p20\++} [ 269.303601][T16257] __nla_validate_parse: 8 callbacks suppressed [ 269.303612][T16257] netlink: 22 bytes leftover after parsing attributes in process `syz.9.3227'. [ 269.449375][T16270] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.491133][T16264] mkiss: ax0: crc mode is auto. [ 269.530629][ T6432] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 269.659578][T16274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16274 comm=syz.9.3231 [ 269.841141][T16279] netlink: 'syz.0.3233': attribute type 1 has an invalid length. [ 269.844540][T16279] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3233'. [ 269.878316][T16281] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3234'. [ 270.144002][T16317] dlm: plock device version mismatch: kernel (1.2.0), user (20.65552.0) [ 270.147875][T16317] program syz.0.3245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.151892][T16319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.257765][T16322] binder: 16321:16322 ioctl c0306201 200000000640 returned -22 [ 270.293033][T16325] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3248'. [ 270.311126][ T5722] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 270.491010][T16332] tmpfs: Bad value for 'mpol' [ 270.494214][ T5722] usb 14-1: too many configurations: 9, using maximum allowed: 8 [ 270.495815][T16332] tmpfs: Bad value for 'mpol' [ 270.497562][ T5722] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 270.501809][ T5722] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 270.506235][ T5722] usb 14-1: config 0 interface 0 has no altsetting 0 [ 270.510601][ T5722] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 270.513953][ T5722] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 270.518049][ T5722] usb 14-1: config 0 interface 0 has no altsetting 0 [ 270.521135][ T5722] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 270.524312][ T5722] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 270.531255][ T5722] usb 14-1: config 0 interface 0 has no altsetting 0 [ 270.534547][ T5722] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 270.537760][ T5722] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 270.541259][ T5722] usb 14-1: config 0 interface 0 has no altsetting 0 [ 270.544495][ T5722] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 270.548022][ T5722] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 270.551409][ T5722] usb 14-1: config 0 interface 0 has no altsetting 0 [ 270.551645][T16338] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3252'. [ 270.554595][ T5722] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 270.559713][T16338] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3252'. [ 270.560916][ T5722] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 270.567518][ T5722] usb 14-1: config 0 interface 0 has no altsetting 0 [ 270.569990][T16338] bridge_slave_0: left allmulticast mode [ 270.571245][ T5722] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 270.572346][T16338] bridge_slave_0: left promiscuous mode [ 270.572528][T16338] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.575220][ T5722] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 270.583429][ T5722] usb 14-1: config 0 interface 0 has no altsetting 0 [ 270.586126][T16338] bridge_slave_1: left allmulticast mode [ 270.586716][ T5722] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 270.588132][T16338] bridge_slave_1: left promiscuous mode [ 270.591333][ T5722] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 270.594313][T16338] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.597491][ T5722] usb 14-1: config 0 interface 0 has no altsetting 0 [ 270.603176][ T5722] usb 14-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 270.603410][T16338] bond0: (slave bond_slave_0): Releasing backup interface [ 270.606116][ T5722] usb 14-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 270.611275][ T5722] usb 14-1: Product: syz [ 270.612647][ T5722] usb 14-1: Manufacturer: syz [ 270.613126][T16338] bond0: (slave bond_slave_1): Releasing backup interface [ 270.614128][ T5722] usb 14-1: SerialNumber: syz [ 270.622384][T16338] team0: Port device team_slave_0 removed [ 270.622846][ T5722] usb 14-1: config 0 descriptor?? [ 270.626386][T16338] team0: Port device team_slave_1 removed [ 270.628812][T16338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.630201][ T5722] yurex 14-1:0.0: USB YUREX device now attached to Yurex #0 [ 270.634230][T16338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.637892][T16338] bond2: (slave ip6gretap1): Removing an active aggregator [ 270.640982][T16338] bond2: (slave ip6gretap1): Releasing backup interface [ 270.649066][T16341] team0: Mode changed to "loadbalance" [ 270.688967][T16344] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3254'. [ 270.768632][T16355] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=16355 comm=syz.5.3258 [ 270.816318][T16355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3258'. [ 270.819175][T16355] bridge_slave_1: left allmulticast mode [ 270.821560][T16355] bridge_slave_1: left promiscuous mode [ 270.823492][T16355] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.828913][T16355] bridge_slave_0: left allmulticast mode [ 270.830824][T16355] bridge_slave_0: left promiscuous mode [ 270.832835][T16355] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.847488][T16363] netlink: 'syz.4.3261': attribute type 7 has an invalid length. [ 270.907537][ C1] usb 14-1: yurex_control_callback - control failed: -71 [ 270.907880][ T59] usb 14-1: USB disconnect, device number 8 [ 270.915801][ T59] yurex 14-1:0.0: USB YUREX #0 now disconnected [ 270.949636][T16363] : entered promiscuous mode [ 270.979959][T16363] fuse: Unknown parameter 'fd' [ 271.422935][ T4887] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 271.455187][T16379] netlink: 'syz.4.3265': attribute type 12 has an invalid length. [ 271.499032][T16379] program syz.4.3265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.594262][ T4887] usb 10-1: Using ep0 maxpacket: 8 [ 271.598645][ T4887] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 271.601669][ T4887] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 271.606363][ T4887] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.610904][ T4887] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 271.614344][ T4887] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 271.618919][ T4887] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 271.621912][ T4887] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 271.626788][ T4887] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.627418][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 271.630448][ T4887] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 271.630467][ T4887] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 271.631311][ T4887] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 271.633053][ T1113] ata1.00: irq_stat 0x40000000 [ 271.636552][ T4887] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 271.640207][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 271.642613][ T4887] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.644072][ T1113] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 23 [ 271.644072][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 271.647817][ T4887] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 271.649657][ T1113] ata1.00: status: { DRDY ERR } [ 271.653276][ T4887] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 271.659017][ T1113] ata1.00: error: { ABRT } [ 271.664745][ T4887] usb 10-1: string descriptor 0 read error: -22 [ 271.667080][ T1113] ata1.00: device reported invalid CHS sector 0 [ 271.668645][ T4887] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 271.675598][ T4887] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.691439][ T4887] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 271.898569][ T59] usb 10-1: USB disconnect, device number 7 [ 272.101947][T16422] futex_wake_op: syz.9.3277 tries to shift op by 32; fix this program [ 272.145163][T16424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3278'. [ 272.148161][T16424] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3278'. [ 272.151162][T16424] netlink: 'syz.5.3278': attribute type 18 has an invalid length. [ 272.154062][T16424] netlink: 'syz.5.3278': attribute type 18 has an invalid length. [ 272.187369][T16427] overlayfs: failed to resolve './file0': -2 [ 272.509981][ T40] kauditd_printk_skb: 1187 callbacks suppressed [ 272.509996][ T40] audit: type=1400 audit(1758546530.432:17907): avc: denied { module_request } for pid=16445 comm="syz.5.3286" kmod="rtnl-link-bridge_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 272.583612][ T40] audit: type=1400 audit(1758546530.498:17908): avc: denied { read write } for pid=14447 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.592833][ T40] audit: type=1400 audit(1758546530.498:17909): avc: denied { open } for pid=14447 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.601758][ T40] audit: type=1400 audit(1758546530.498:17910): avc: denied { ioctl } for pid=14447 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.611457][ T40] audit: type=1400 audit(1758546530.516:17911): avc: denied { create } for pid=16449 comm="syz.5.3287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 272.617879][ T40] audit: type=1400 audit(1758546530.516:17912): avc: denied { write } for pid=16449 comm="syz.5.3287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 272.624550][ T40] audit: type=1400 audit(1758546530.526:17913): avc: denied { create } for pid=16449 comm="syz.5.3287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 272.632810][ T40] audit: type=1400 audit(1758546530.526:17914): avc: denied { setopt } for pid=16449 comm="syz.5.3287" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 272.639711][ T40] audit: type=1400 audit(1758546530.526:17915): avc: denied { connect } for pid=16449 comm="syz.5.3287" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 272.647982][ T40] audit: type=1400 audit(1758546530.526:17916): avc: denied { write } for pid=16449 comm="syz.5.3287" laddr=fe80::b4f6:36ff:fe51:bf08 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 272.856853][T16467] netlink: 'syz.4.3292': attribute type 7 has an invalid length. [ 272.859332][T16467] netlink: 'syz.4.3292': attribute type 8 has an invalid length. [ 272.944648][T16471] loop3: detected capacity change from 0 to 7 [ 272.950173][T16471] Dev loop3: unable to read RDB block 7 [ 272.952592][T16471] loop3: unable to read partition table [ 272.954552][T16471] loop3: partition table beyond EOD, truncated [ 272.956659][T16471] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 273.027687][T16473] usb usb4: usbfs: interface 0 claimed by hub while 'syz.4.3295' sets config #1 [ 273.123785][T16482] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 273.206039][T16483] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 273.713513][T16517] loop7: detected capacity change from 0 to 7 [ 273.789368][T16524] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 273.825777][T16517] Dev loop7: unable to read RDB block 7 [ 273.825949][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 273.831062][T16517] loop7: unable to read partition table [ 273.833911][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 273.836056][T16517] loop7: partition table beyond EOD, truncated [ 273.843121][T16517] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 274.101776][T16540] hfs: can't find a HFS filesystem on dev sr0 [ 274.394903][ T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 274.435178][T16550] netlink: 'syz.5.3318': attribute type 4 has an invalid length. [ 274.445225][T16550] netlink: 'syz.5.3318': attribute type 4 has an invalid length. [ 274.555264][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 274.560593][ T9] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 274.565062][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 274.569563][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 274.573316][ T9] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.578130][ T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 274.581842][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.636100][ C2] ata1: illegal qc_active transition (00000000->00000100) [ 274.809975][ T9] usb 9-1: GET_CAPABILITIES returned 0 [ 274.813618][ T9] usbtmc 9-1:16.0: can't read capabilities [ 274.878865][T16565] ieee802154 phy1 wpan1: encryption failed: -22 [ 274.946066][T16569] 9p: Unknown access argument 18446744073709551615: -34 [ 274.984900][ T1113] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 274.987997][ T1113] ata1.00: configured for UDMA/100 [ 275.034316][ T5977] usb 9-1: USB disconnect, device number 10 [ 275.175963][T16588] __nla_validate_parse: 5 callbacks suppressed [ 275.175974][T16588] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3326'. [ 275.219884][T16593] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3330'. [ 275.231869][T16593] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3330'. [ 275.369587][T16602] binder: BINDER_SET_CONTEXT_MGR already set [ 275.371423][T16602] binder: 16601:16602 ioctl 4018620d 200000000040 returned -16 [ 275.491656][T16619] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3337'. [ 275.494832][T16619] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (133) [ 275.553655][T16623] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3338'. [ 275.553686][T16624] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3338'. [ 275.896076][T16644] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000007 [ 276.286426][T16660] overlayfs: failed to resolve './file1': -2 [ 276.292078][T16660] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 276.294911][T16660] overlayfs: missing 'lowerdir' [ 276.331386][T16662] binder: 16661:16662 ioctl c0306201 2000000003c0 returned -14 [ 276.343149][T16662] binder: BINDER_SET_CONTEXT_MGR already set [ 276.345199][T16662] binder: 16661:16662 ioctl 4018620d 200000000080 returned -16 [ 276.532463][T16672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.534888][T16672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.827479][T16678] mac80211_hwsim hwsim31 wlan1: entered promiscuous mode [ 276.829745][T16678] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 276.834161][T16678] netlink: 'syz.4.3354': attribute type 10 has an invalid length. [ 276.839116][T16678] mac80211_hwsim hwsim31 wlan1: left promiscuous mode [ 276.841338][T16678] mac80211_hwsim hwsim31 wlan1: left allmulticast mode [ 276.846954][T16678] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 276.904699][T16683] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3356'. [ 277.006734][T16688] ./cgroup: Can't lookup blockdev [ 277.361800][T16705] netlink: 'syz.5.3361': attribute type 3 has an invalid length. [ 277.365272][T16705] netlink: 'syz.5.3361': attribute type 3 has an invalid length. [ 277.369762][T16712] overlayfs: failed to resolve './file0/file0': -2 [ 277.408595][T16715] netlink: 'syz.9.3368': attribute type 3 has an invalid length. [ 277.435744][T16716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3369'. [ 277.438721][T16716] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3369'. [ 277.910619][ T40] kauditd_printk_skb: 1024 callbacks suppressed [ 277.910633][ T40] audit: type=1400 audit(1758546535.483:18941): avc: denied { map_create } for pid=16742 comm="syz.4.3378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 277.918957][ T40] audit: type=1400 audit(1758546535.483:18942): avc: denied { perfmon } for pid=16742 comm="syz.4.3378" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 277.926801][ T40] audit: type=1400 audit(1758546535.483:18943): avc: denied { map_read map_write } for pid=16742 comm="syz.4.3378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 277.933849][ T40] audit: type=1400 audit(1758546535.493:18944): avc: denied { prog_load } for pid=16742 comm="syz.4.3378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 277.939740][ T40] audit: type=1400 audit(1758546535.493:18945): avc: denied { bpf } for pid=16742 comm="syz.4.3378" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 277.947711][ T40] audit: type=1400 audit(1758546535.493:18946): avc: denied { prog_run } for pid=16742 comm="syz.4.3378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 277.954626][ T40] audit: type=1400 audit(1758546535.493:18947): avc: denied { read } for pid=16742 comm="syz.4.3378" dev="nsfs" ino=4026533966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 277.961409][ T40] audit: type=1400 audit(1758546535.493:18948): avc: denied { open } for pid=16742 comm="syz.4.3378" path="net:[4026533966]" dev="nsfs" ino=4026533966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 277.970695][ T40] audit: type=1400 audit(1758546535.493:18949): avc: denied { create } for pid=16742 comm="syz.4.3378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 277.978534][ T40] audit: type=1400 audit(1758546535.502:18950): avc: denied { bind } for pid=16742 comm="syz.4.3378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 278.415592][T16759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3382'. [ 278.522787][T16736] orangefs_mount: mount request failed with -4 [ 278.630212][T16782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.819899][ T5381] Dev loop6: unable to read RDB block 1 [ 278.825077][ T5381] loop6: unable to read partition table [ 278.827065][ T5381] loop6: partition table beyond EOD, truncated [ 279.172678][T16838] ufs: You didn't specify the type of your ufs filesystem [ 279.172678][T16838] [ 279.172678][T16838] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 279.172678][T16838] [ 279.172678][T16838] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 279.185749][T16838] ufs: ufstype=old is supported read-only [ 279.190759][T16838] nbd_handle_cmd: 2 callbacks suppressed [ 279.190782][T16838] block nbd9: Attempted send on invalid socket [ 279.195360][T16838] I/O error, dev nbd9, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 279.213456][T16839] ufs: You didn't specify the type of your ufs filesystem [ 279.213456][T16839] [ 279.213456][T16839] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 279.213456][T16839] [ 279.213456][T16839] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 279.223579][T16839] ufs: ufstype=old is supported read-only [ 279.225645][T16839] block nbd9: Attempted send on invalid socket [ 279.229492][T16839] I/O error, dev nbd9, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 281.250062][T16940] netlink: 'syz.4.3435': attribute type 21 has an invalid length. [ 281.252657][T16940] __nla_validate_parse: 6 callbacks suppressed [ 281.252666][T16940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3435'. [ 281.307004][T16943] syzkaller1: entered promiscuous mode [ 281.309321][T16943] syzkaller1: entered allmulticast mode [ 281.313790][T16940] netlink: 'syz.4.3435': attribute type 21 has an invalid length. [ 281.316563][T16940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3435'. [ 281.345964][T16892] delete_channel: no stack [ 281.437639][ T5983] Bluetooth: hci4: unknown advertising packet type: 0x82 [ 281.437694][ T5983] Bluetooth: hci4: Malformed LE Event: 0x02 [ 281.695545][T16964] qnx4: no qnx4 filesystem (no root dir). [ 281.851874][T16971] XFS (nbd9): no-recovery mounts must be read-only. [ 282.047066][T16989] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3451'. [ 282.047086][T16986] netlink: 'syz.9.3450': attribute type 10 has an invalid length. [ 282.050976][T16990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16990 comm=syz.5.3451 [ 282.067613][T16986] team0: Device ipvlan1 failed to register rx_handler [ 282.249629][T17011] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3457'. [ 282.249704][T17012] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3457'. [ 282.252720][T17011] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3457'. [ 282.255468][T17012] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3457'. [ 282.476677][T17019] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3459'. [ 282.637224][T17037] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3465'. [ 282.643794][T17034] usb usb4: usbfs: process 17034 (syz.4.3464) did not claim interface 0 before use [ 282.698442][T17044] netlink: 9 bytes leftover after parsing attributes in process `syz.9.3468'. [ 282.703762][T17044] 0: renamed from hsr0 (while UP) [ 282.707916][T17044] 0: entered allmulticast mode [ 282.709847][T17044] hsr_slave_0: entered allmulticast mode [ 282.712166][T17044] hsr_slave_1: entered allmulticast mode [ 282.714837][T17044] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 283.260692][ T40] kauditd_printk_skb: 1188 callbacks suppressed [ 283.260711][ T40] audit: type=1400 audit(1758546540.488:20139): avc: denied { read write } for pid=12613 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.280721][ T40] audit: type=1400 audit(1758546540.488:20140): avc: denied { open } for pid=12613 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.288811][ T40] audit: type=1400 audit(1758546540.488:20141): avc: denied { ioctl } for pid=12613 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.300353][ T40] audit: type=1400 audit(1758546540.506:20142): avc: denied { read } for pid=17102 comm="syz.4.3483" dev="nsfs" ino=4026533966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 283.307324][ T40] audit: type=1400 audit(1758546540.506:20143): avc: denied { read write } for pid=17102 comm="syz.4.3483" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 283.315972][ T40] audit: type=1400 audit(1758546540.506:20144): avc: denied { open } for pid=17102 comm="syz.4.3483" path="net:[4026533966]" dev="nsfs" ino=4026533966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 283.326424][ T40] audit: type=1400 audit(1758546540.506:20145): avc: denied { open } for pid=17102 comm="syz.4.3483" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 283.330563][T17108] IPv6: addrconf: prefix option has invalid lifetime [ 283.334349][ T40] audit: type=1400 audit(1758546540.506:20146): avc: denied { create } for pid=17102 comm="syz.4.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 283.343666][ T40] audit: type=1400 audit(1758546540.506:20147): avc: denied { write } for pid=17102 comm="syz.4.3483" name="ptype" dev="proc" ino=4026534722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 283.350821][ T40] audit: type=1400 audit(1758546540.534:20148): avc: denied { read write } for pid=12613 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.521863][T17118] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 283.563946][T17120] x_tables: ip_tables: SNAT target: only valid in nat table, not syz0 [ 283.568112][T17120] netlink: 'syz.4.3488': attribute type 9 has an invalid length. [ 283.658497][T17128] 9p: Unknown Cache mode or invalid value fs [ 284.232523][T17142] netlink: zone id is out of range [ 284.234538][T17142] netlink: zone id is out of range [ 284.236712][T17142] netlink: zone id is out of range [ 284.238872][T17142] netlink: zone id is out of range [ 284.240770][T17142] netlink: zone id is out of range [ 284.243205][T17142] netlink: zone id is out of range [ 284.245428][T17142] netlink: zone id is out of range [ 284.247648][T17142] netlink: zone id is out of range [ 284.249477][T17142] netlink: zone id is out of range [ 284.251258][T17142] netlink: zone id is out of range [ 284.258151][T17142] netlink: 'syz.0.3494': attribute type 15 has an invalid length. [ 284.347410][T17151] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 284.419502][T17155] lo speed is unknown, defaulting to 1000 [ 284.711358][ T5977] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 284.847349][T17184] kvm: kvm [17183]: vcpu0, guest rIP: 0x9139 Unhandled WRMSR(0xc1) = 0x1 [ 284.850819][T17184] kvm: kvm [17183]: vcpu0, guest rIP: 0x9139 Unhandled WRMSR(0xc2) = 0x1 [ 284.880017][T17184] kvm: kvm [17183]: vcpu0, guest rIP: 0x9139 Unhandled WRMSR(0x11e) = 0x1 [ 284.882437][ T5977] usb 14-1: Using ep0 maxpacket: 8 [ 284.889512][ T5977] usb 14-1: unable to get BOS descriptor or descriptor too short [ 284.892907][ T5977] usb 14-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 284.896503][ T5977] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 284.896887][T17193] xt_l2tp: missing protocol rule (udp|l2tpip) [ 284.899874][ T5977] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 284.907444][ T5977] usb 14-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 284.910548][ T5977] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 284.913520][T17184] kvm: kvm [17183]: vcpu0, guest rIP: 0x9139 Unhandled WRMSR(0x186) = 0x1 [ 284.916724][T17184] kvm: kvm [17183]: vcpu0, guest rIP: 0x9139 Unhandled WRMSR(0x187) = 0x1 [ 284.919152][ T5977] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 284.922124][ T5977] usb 14-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 284.929326][ T5977] usb 14-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 284.932238][ T5977] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.934878][ T5977] usb 14-1: Product: syz [ 284.936450][ T5977] usb 14-1: Manufacturer: syz [ 284.938323][ T5977] usb 14-1: SerialNumber: syz [ 284.943048][ T5977] usb 14-1: config 0 descriptor?? [ 284.943243][T17184] kvm_intel: kvm [17183]: vcpu0, guest rIP: 0x9139 Unhandled WRMSR(0x1d9) = 0x1 [ 284.945710][T17158] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 284.956614][ T5977] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 285.029917][ T5977] snd-usb-audio 14-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 285.067494][ T6583] udevd[6583]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.079960][T17199] tmpfs: Bad value for 'mpol' [ 285.124854][T17203] netlink: 'syz.5.3514': attribute type 13 has an invalid length. [ 285.142013][T17203] gretap0: refused to change device tx_queue_len [ 285.380595][T17212] netlink: 'syz.5.3517': attribute type 1 has an invalid length. [ 285.391433][T15798] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.391882][T17212] netlink: 'syz.5.3517': attribute type 1 has an invalid length. [ 285.394524][T15798] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.401130][T15798] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.664531][T17236] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 285.670588][T17238] macvlan2: entered promiscuous mode [ 285.672476][T17238] macvlan2: entered allmulticast mode [ 286.026092][T17285] netlink: 'syz.0.3538': attribute type 1 has an invalid length. [ 286.095607][T17300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17300 comm=syz.9.3541 [ 286.135292][T17298] block nbd9: not configured, cannot reconfigure [ 286.162465][T17299] netlink: 'syz.0.3538': attribute type 1 has an invalid length. [ 286.185297][T17299] bond6: entered promiscuous mode [ 286.190469][T17299] 8021q: adding VLAN 0 to HW filter on device bond6 [ 286.206939][T17299] 8021q: adding VLAN 0 to HW filter on device bond6 [ 286.210167][T17299] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 286.213660][T17299] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 286.218243][T17299] bond6: (slave ip6gre1): making interface the new active one [ 286.223643][T17299] ip6gre1: entered promiscuous mode [ 286.226679][T17299] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 286.342863][T17311] ipvlan0: entered promiscuous mode [ 286.345355][T17311] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 286.348181][T17311] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 286.589193][T17324] overlayfs: overlapping lowerdir path [ 286.609751][T17324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17324 comm=syz.0.3549 [ 286.654189][T17324] program syz.0.3549 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 286.716807][T17328] team0 (unregistering): Port device team_slave_0 removed [ 286.725663][T17328] team0 (unregistering): Port device team_slave_1 removed [ 286.898134][T17335] netlink: 'syz.0.3551': attribute type 16 has an invalid length. [ 286.900951][T17335] __nla_validate_parse: 12 callbacks suppressed [ 286.900960][T17335] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.3551'. [ 287.876676][T17345] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3556'. [ 287.913135][T17348] netlink: 'syz.0.3557': attribute type 8 has an invalid length. [ 288.299604][T17369] 9pnet_virtio: no channels available for device syz [ 288.582583][T17377] netlink: 'syz.4.3563': attribute type 6 has an invalid length. [ 288.585077][T17377] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3563'. [ 288.619462][ T40] kauditd_printk_skb: 904 callbacks suppressed [ 288.619479][ T40] audit: type=1400 audit(1758546545.501:21053): avc: denied { prog_run } for pid=17379 comm="syz.4.3565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 288.630246][ T40] audit: type=1400 audit(1758546545.501:21054): avc: denied { ioctl } for pid=17378 comm="syz.5.3564" path="/dev/video2" dev="devtmpfs" ino=957 ioctlcmd=0x5648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 288.675602][T17382] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3564'. [ 288.682265][T17381] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.685709][T17381] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.811629][ T40] audit: type=1400 audit(1758546545.679:21055): avc: denied { read write } for pid=15005 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 288.819634][ T40] audit: type=1400 audit(1758546545.679:21056): avc: denied { open } for pid=15005 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 288.828506][ T40] audit: type=1400 audit(1758546545.679:21057): avc: denied { ioctl } for pid=15005 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 288.837647][ T40] audit: type=1400 audit(1758546545.698:21058): avc: denied { create } for pid=17383 comm="syz.9.3566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 288.844463][ T40] audit: type=1400 audit(1758546545.698:21059): avc: denied { setopt } for pid=17383 comm="syz.9.3566" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 288.854285][ T40] audit: type=1400 audit(1758546545.717:21060): avc: denied { read write } for pid=15005 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 288.863018][ T40] audit: type=1400 audit(1758546545.717:21061): avc: denied { open } for pid=15005 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 288.870822][ T40] audit: type=1400 audit(1758546545.717:21062): avc: denied { ioctl } for pid=15005 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 288.900518][T17382] macvtap0: entered allmulticast mode [ 288.903322][T17382] veth0_macvtap: entered allmulticast mode [ 288.906655][ T9814] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.909979][ T9814] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.914115][ T9814] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.917535][ T9814] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.925494][ T9809] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.930681][ T9809] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.934733][ T9814] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.938087][ T9814] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.982691][T17395] bridge: RTM_NEWNEIGH with invalid ether address [ 289.045880][T17405] 9pnet: Could not find request transport: vi [ 289.489414][T17440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3572'. [ 289.641413][T17464] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3589'. [ 289.646294][T17466] block nbd0: Attempted send on invalid socket [ 289.648705][T17466] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 289.668624][T17466] block nbd0: Attempted send on invalid socket [ 289.670973][T17466] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 289.851629][T17491] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3595'. [ 289.856162][T17491] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3595'. [ 289.993408][T10834] usb 14-1: USB disconnect, device number 9 [ 290.299138][T17510] comedi: No check for data length of config insn id 1050 is implemented [ 290.301487][T17510] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 290.304433][T17510] comedi: Assuming n=15 is correct [ 290.324069][ C1] ================================================================== [ 290.326709][ C1] BUG: KASAN: slab-use-after-free in rose_send_frame+0x26c/0x2c0 [ 290.329095][ C1] Read of size 8 at addr ffff8880333cc420 by task swapper/1/0 [ 290.331972][ C1] [ 290.333396][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 290.333421][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 290.333433][ C1] Call Trace: [ 290.333440][ C1] [ 290.333448][ C1] dump_stack_lvl+0x116/0x1f0 [ 290.333476][ C1] print_report+0xcd/0x630 [ 290.333509][ C1] ? __virt_addr_valid+0x81/0x610 [ 290.333534][ C1] ? __phys_addr+0xe8/0x180 [ 290.333560][ C1] ? rose_send_frame+0x26c/0x2c0 [ 290.333586][ C1] kasan_report+0xe0/0x110 [ 290.333609][ C1] ? rose_send_frame+0x26c/0x2c0 [ 290.333637][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 290.333662][ C1] rose_send_frame+0x26c/0x2c0 [ 290.333687][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 290.333714][ C1] rose_transmit_restart_request+0x1b8/0x240 [ 290.333740][ C1] rose_t0timer_expiry+0x1d/0x150 [ 290.333764][ C1] call_timer_fn+0x197/0x620 [ 290.333808][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 290.333837][ C1] ? rcu_is_watching+0x12/0xc0 [ 290.333860][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 290.333880][ C1] __run_timers+0x6ef/0x960 [ 290.333897][ C1] ? __pfx___run_timers+0x10/0x10 [ 290.333916][ C1] run_timer_base+0x114/0x190 [ 290.333925][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 290.333940][ C1] ? rcu_is_watching+0x12/0xc0 [ 290.333953][ C1] run_timer_softirq+0x1a/0x40 [ 290.333962][ C1] handle_softirqs+0x219/0x8e0 [ 290.333976][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 290.333990][ C1] __irq_exit_rcu+0x109/0x170 [ 290.334002][ C1] irq_exit_rcu+0x9/0x30 [ 290.334014][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 290.334037][ C1] [ 290.334041][ C1] [ 290.334045][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 290.334057][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 290.334071][ C1] Code: 6d 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 46 15 00 fb f4 cc 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 290.334083][ C1] RSP: 0018:ffffc90000177df8 EFLAGS: 00000282 [ 290.334093][ C1] RAX: 0000000000261673 RBX: 0000000000000001 RCX: ffffffff8b94cb49 [ 290.334100][ C1] RDX: 0000000000000000 RSI: ffffffff8de52cd1 RDI: ffffffff8c163400 [ 290.334107][ C1] RBP: ffffed1003bd7488 R08: 0000000000000001 R09: ffffed100d4a6655 [ 290.334114][ C1] R10: ffff88806a5332ab R11: 0000000000000000 R12: 0000000000000001 [ 290.334121][ C1] R13: ffff88801deba440 R14: ffffffff90ab7590 R15: 0000000000000000 [ 290.334129][ C1] ? ct_kernel_exit+0x139/0x190 [ 290.334145][ C1] default_idle+0x13/0x20 [ 290.334158][ C1] default_idle_call+0x6d/0xb0 [ 290.334172][ C1] do_idle+0x391/0x510 [ 290.334186][ C1] ? __pfx_do_idle+0x10/0x10 [ 290.334198][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 290.334210][ C1] cpu_startup_entry+0x4f/0x60 [ 290.334223][ C1] start_secondary+0x21d/0x2b0 [ 290.334238][ C1] ? __pfx_start_secondary+0x10/0x10 [ 290.334254][ C1] common_startup_64+0x13e/0x148 [ 290.334269][ C1] [ 290.334273][ C1] [ 290.440532][ C1] Allocated by task 7865: [ 290.442272][ C1] kasan_save_stack+0x33/0x60 [ 290.444146][ C1] kasan_save_track+0x14/0x30 [ 290.446040][ C1] __kasan_kmalloc+0xaa/0xb0 [ 290.447913][ C1] rose_rt_ioctl+0x880/0x2580 [ 290.449795][ C1] rose_ioctl+0x64d/0x7d0 [ 290.451535][ C1] sock_do_ioctl+0x115/0x280 [ 290.453421][ C1] sock_ioctl+0x227/0x6b0 [ 290.455214][ C1] __x64_sys_ioctl+0x18e/0x210 [ 290.457237][ C1] do_syscall_64+0xcd/0x4e0 [ 290.459051][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.461371][ C1] [ 290.462373][ C1] Freed by task 0: [ 290.463842][ C1] kasan_save_stack+0x33/0x60 [ 290.465748][ C1] kasan_save_track+0x14/0x30 [ 290.467694][ C1] kasan_save_free_info+0x3b/0x60 [ 290.469761][ C1] __kasan_slab_free+0x60/0x70 [ 290.471685][ C1] kfree+0x2b4/0x4d0 [ 290.473288][ C1] rose_timer_expiry+0x53f/0x630 [ 290.475289][ C1] call_timer_fn+0x197/0x620 [ 290.477166][ C1] __run_timers+0x6ef/0x960 [ 290.479011][ C1] run_timer_base+0x114/0x190 [ 290.480889][ C1] run_timer_softirq+0x1a/0x40 [ 290.482810][ C1] handle_softirqs+0x219/0x8e0 [ 290.484770][ C1] __irq_exit_rcu+0x109/0x170 [ 290.486676][ C1] irq_exit_rcu+0x9/0x30 [ 290.488403][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 290.490628][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 290.493016][ C1] [ 290.494010][ C1] The buggy address belongs to the object at ffff8880333cc400 [ 290.494010][ C1] which belongs to the cache kmalloc-512 of size 512 [ 290.499526][ C1] The buggy address is located 32 bytes inside of [ 290.499526][ C1] freed 512-byte region [ffff8880333cc400, ffff8880333cc600) [ 290.504836][ C1] [ 290.505816][ C1] The buggy address belongs to the physical page: [ 290.508372][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x333cc [ 290.511792][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 290.515103][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 290.518139][ C1] page_type: f5(slab) [ 290.519798][ C1] raw: 00fff00000000040 ffff88801b842c80 ffffea00009beb00 dead000000000002 [ 290.522804][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 290.525494][ C1] head: 00fff00000000040 ffff88801b842c80 ffffea00009beb00 dead000000000002 [ 290.528112][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 290.530926][ C1] head: 00fff00000000002 ffffea0000ccf301 00000000ffffffff 00000000ffffffff [ 290.533579][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 290.536358][ C1] page dumped because: kasan: bad access detected [ 290.538478][ C1] page_owner tracks the page as allocated [ 290.540320][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5976, tgid 5976 (syz-executor), ts 54215911554, free_ts 54177775450 [ 290.546768][ C1] post_alloc_hook+0x1c0/0x230 [ 290.548323][ C1] get_page_from_freelist+0x132b/0x38e0 [ 290.550099][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 290.552619][ C1] alloc_pages_mpol+0x1fb/0x550 [ 290.554672][ C1] new_slab+0x247/0x330 [ 290.556365][ C1] ___slab_alloc+0xcf2/0x1750 [ 290.558284][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 290.560471][ C1] __kmalloc_noprof+0x2f2/0x510 [ 290.562435][ C1] fib6_info_alloc+0x40/0x160 [ 290.564326][ C1] ip6_route_info_create+0x14c/0x870 [ 290.566467][ C1] ip6_route_add.part.0+0x22/0x1d0 [ 290.568561][ C1] ip6_route_add+0x45/0x60 [ 290.570295][ C1] addrconf_add_mroute+0x1dd/0x350 [ 290.572293][ C1] addrconf_add_dev+0x14e/0x1c0 [ 290.574210][ C1] inet6_addr_add+0xfe/0x960 [ 290.576057][ C1] inet6_rtm_newaddr+0x1619/0x1c70 [ 290.578021][ C1] page last free pid 5975 tgid 5975 stack trace: [ 290.580494][ C1] __free_frozen_pages+0x7d5/0x10f0 [ 290.582590][ C1] __put_partials+0x165/0x1c0 [ 290.584457][ C1] qlist_free_all+0x4d/0x120 [ 290.586291][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 290.588437][ C1] __kasan_slab_alloc+0x69/0x90 [ 290.590326][ C1] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 290.592567][ C1] __alloc_skb+0x2b2/0x380 [ 290.594336][ C1] netlink_ack+0x15d/0xb80 [ 290.596144][ C1] netlink_rcv_skb+0x332/0x420 [ 290.598102][ C1] netlink_unicast+0x5a7/0x870 [ 290.599958][ C1] netlink_sendmsg+0x8d1/0xdd0 [ 290.601429][ C1] __sys_sendto+0x4a3/0x520 [ 290.602856][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 290.604373][ C1] do_syscall_64+0xcd/0x4e0 [ 290.605777][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.607632][ C1] [ 290.608420][ C1] Memory state around the buggy address: [ 290.610192][ C1] ffff8880333cc300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 290.612672][ C1] ffff8880333cc380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 290.615304][ C1] >ffff8880333cc400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 290.617748][ C1] ^ [ 290.619338][ C1] ffff8880333cc480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 290.621835][ C1] ffff8880333cc500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 290.624311][ C1] ================================================================== [ 290.626955][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 290.629240][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 290.632062][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 290.635327][ C1] Call Trace: [ 290.636366][ C1] [ 290.637277][ C1] dump_stack_lvl+0x3d/0x1f0 [ 290.638716][ C1] vpanic+0x6e8/0x7a0 [ 290.640021][ C1] ? _raw_spin_unlock+0x28/0x50 [ 290.641501][ C1] ? __pfx_vpanic+0x10/0x10 [ 290.642903][ C1] ? rose_send_frame+0x26c/0x2c0 [ 290.644412][ C1] panic+0xca/0xd0 [ 290.645546][ C1] ? __pfx_panic+0x10/0x10 [ 290.646910][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 290.648463][ C1] check_panic_on_warn+0xab/0xb0 [ 290.650003][ C1] end_report+0x107/0x170 [ 290.651307][ C1] kasan_report+0xee/0x110 [ 290.652715][ C1] ? rose_send_frame+0x26c/0x2c0 [ 290.654274][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 290.656036][ C1] rose_send_frame+0x26c/0x2c0 [ 290.657611][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 290.659430][ C1] rose_transmit_restart_request+0x1b8/0x240 [ 290.661317][ C1] rose_t0timer_expiry+0x1d/0x150 [ 290.662855][ C1] call_timer_fn+0x197/0x620 [ 290.664322][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 290.665924][ C1] ? rcu_is_watching+0x12/0xc0 [ 290.667574][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 290.669589][ C1] __run_timers+0x6ef/0x960 [ 290.671055][ C1] ? __pfx___run_timers+0x10/0x10 [ 290.672606][ C1] run_timer_base+0x114/0x190 [ 290.674109][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 290.675771][ C1] ? rcu_is_watching+0x12/0xc0 [ 290.677349][ C1] run_timer_softirq+0x1a/0x40 [ 290.678859][ C1] handle_softirqs+0x219/0x8e0 [ 290.680442][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 290.682140][ C1] __irq_exit_rcu+0x109/0x170 [ 290.683632][ C1] irq_exit_rcu+0x9/0x30 [ 290.685004][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 290.686760][ C1] [ 290.687743][ C1] [ 290.688682][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 290.690544][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 290.692297][ C1] Code: 6d 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 46 15 00 fb f4 cc 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 290.698049][ C1] RSP: 0018:ffffc90000177df8 EFLAGS: 00000282 [ 290.699950][ C1] RAX: 0000000000261673 RBX: 0000000000000001 RCX: ffffffff8b94cb49 [ 290.702420][ C1] RDX: 0000000000000000 RSI: ffffffff8de52cd1 RDI: ffffffff8c163400 [ 290.704787][ C1] RBP: ffffed1003bd7488 R08: 0000000000000001 R09: ffffed100d4a6655 [ 290.707248][ C1] R10: ffff88806a5332ab R11: 0000000000000000 R12: 0000000000000001 [ 290.709802][ C1] R13: ffff88801deba440 R14: ffffffff90ab7590 R15: 0000000000000000 [ 290.712189][ C1] ? ct_kernel_exit+0x139/0x190 [ 290.713687][ C1] default_idle+0x13/0x20 [ 290.715031][ C1] default_idle_call+0x6d/0xb0 [ 290.716511][ C1] do_idle+0x391/0x510 [ 290.717779][ C1] ? __pfx_do_idle+0x10/0x10 [ 290.719210][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 290.720896][ C1] cpu_startup_entry+0x4f/0x60 [ 290.722370][ C1] start_secondary+0x21d/0x2b0 [ 290.723908][ C1] ? __pfx_start_secondary+0x10/0x10 [ 290.725544][ C1] common_startup_64+0x13e/0x148 [ 290.727055][ C1] [ 290.728692][ C1] Kernel Offset: disabled [ 290.730131][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:05:05 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=00000000000452dd RCX=ffffffff822ddc48 RDX=ffff888106452440 RSI=000000000000001f RDI=0000000000000005 RBP=00000000000000dd RSP=ffffc9000e277078 R8 =0000000000000005 R9 =000000000000001f R10=0000000000000009 R11=0000000000000000 R12=ffff88801dd9e510 R13=ffff88801dd9e50c R14=0000000000000009 R15=dffffc0000000000 RIP=ffffffff81bb9711 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe4da7f6d58 CR3=0000000048835000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000009951 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000e0000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd689f7ac0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd689f7c46 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd689f7c46 00007ffd689f7c4c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4dc612e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4dc612e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4dc612e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4dc612e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4dc612f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4dc612fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8564c2d0 RDI=ffffffff9b118120 RBP=ffffffff9b1180e0 RSP=ffffc900006a0670 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=ffffffff9b118130 R14=ffffffff9b1180e0 R15=ffffffff9b1183a0 RIP=ffffffff8564c2f7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe4da7f4fb8 CR3=0000000045074000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec5133936 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec5133936 00007ffec513393c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4071612e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4071612e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4071612e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4071612e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4071612f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4071612fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40717a74a8 00007f40717a74a0 00007f40717a7498 00007f40717a7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f407230d100 00007f40717a7460 00007f40717a0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40717a74b8 00007f40717a74b0 00007f40717a74a8 00007f40717a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000026a84f RBX=0000000000000002 RCX=ffffffff8b94cb49 RDX=0000000000000000 RSI=ffffffff8de52cd1 RDI=ffffffff8c163400 RBP=ffffed1003bd7910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801debc880 R14=ffffffff90ab7590 R15=0000000000000000 RIP=ffffffff8b94b68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe4dd3056c0 CR3=0000000013d57000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000006800 DR2=0000000000009951 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000002fefcf8 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec51337b0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec5133936 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec5133936 00007ffec513393c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4071612e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4071612e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4071612e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4071612e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4071612f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4071612fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001f8001 RBX=0000000000000003 RCX=ffffffff8b94cb49 RDX=0000000000000000 RSI=ffffffff8de52cd1 RDI=ffffffff8c163400 RBP=ffffed1003bda000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801ded0000 R14=ffffffff90ab7590 R15=0000000000000000 RIP=ffffffff8b94b68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe4dc5749c0 CR3=000000003ed58000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000006800 DR2=0000000000009951 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd92de3546 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd92de3546 00007ffd92de354c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20e2212e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20e2212e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20e2212e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20e2212e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20e2212f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20e2212fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20e23a74a8 00007f20e23a74a0 00007f20e23a7498 00007f20e23a7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20e2f0d100 00007f20e23a7460 00007f20e23a0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20e23a74b8 00007f20e23a74b0 00007f20e23a74a8 00007f20e23a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000