last executing test programs: 42.489591156s ago: executing program 0 (id=176): r0 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x2dd2, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0, 0x0, 0x1}]}, 0x4}, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000c04b780018000900000000000000015f85729600fe0000010000000005001a0009e2c65c3965f7b69bd5af436b9fca33ee0a8965c35f2d4e3f7c9007a4e1982ecf553b663bc20f23faf9a6e4a5a23c431ce69ed216d2ab6acb35ed78a0941a22cf03b92437c5c165386ebd781ac699e9bceb9418d41f481a53662390a49392e9a36cacd133b7c0f3e41a2f20e05735d8b276e1f7d6b4aab8e2f5351e44c2cb6f"], 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r1, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"eb9d8988e81b395b45bd0cba3a8483077474dd3dd0c47bc253e5f8e8b4292aac2796001366e4c71f9f35008b53e42578e610c78571ad7fd714bbf1d6fd513c82063c7b62f80247dae47c5c719fcb141465938af815fb5f2695978afaf02bc89e649ba154d25cd9128fa00c4655085aaa52d42552f2b09df1d9bb0e372396aa8bcb1358797975d0f0609075102a2744764709002ff83c2341d3365f98a022a3adb2984c475f59af4129dbfd9a93d73ebd4e3cb4f1e4ab97495820ac3a2091f1a472e09074da690ef8a1271c19fa97898e3be7b5000d91bbc78a0e2415b557a6ac425159469271188e5adbb631ee32f1c01b8aab308dad8548079f00eb770e058ec6480cb78a47d832ff6f7d23348118d2a8a317c1d0cb05299e4541dd566ca584cbe7508ab24fa6fdd1e5fd301a57f7b01f55543d5289911b1040011acfa9247e9f2b08635fc066b8725bc114c59fdbdd3a35903b19613e3f29ce4457a59c64567f1fea4a17185e7edde0ccc64cf9d0086ef292c318c8a56b28406cdcfd091245a8e0fa721e11aa064b642d9afbcf3dd23c79c466e634e84e0ccf866e8bcc03a6e6ac823fe6056a7aa6aa8622969e263eff3fb74ea46e0bd6a1ce08244e39f59df03e6cdd7fdc2811c4c1719099a56f1c5e07ab0e7d6a07192dcc0d03f6bcbc2323f4606b52950e3ebf54b379a97bb4c0c27db1e0824068a353aa025258f16eec23148997eb0f14ade49c1216cfd2ce324f289ddcf0ff8247984c4567692e9b64c2fbbc1272a3e532122e65f97cec13564ece0b7029c2c34ca9c7a9557d487336d849513afaaaa6c1a0388e72dba891750cebb09747cdadd4228b66ce5972f9c67bc4bd795753bc83fd36897edb29a4d9ca5c5cbb0e92dab163d6c980ef76a5f79f6f05f9a7e0e745a129cbbfc12281f9566f656b1f9de9bec23d3a2bec3852430fb7dcbc692e0fcccb69402639a0e1693a70a5983a462b001131a4774e5e3d8bd9a19389ab7e819a77ae145d2ca8e4477215905e8e1dce02ccd3f8942744313a30b68025844e5a68a9a2dd382a3a32042c232459a776d6e1741eec549b4d2867580fc511393281917f5145952997aebd29d8056d4282586ccd91d633a7c1764012e09d7746fef7246eb56640fef2bdd74b78fbcaa32e6b6f4136431a51229956a8a8149de241511e2760f997886e098fc1847adee880f3ae61a1240581e13758be18a33bde20ffad43a0ae9a4f7144a16993858e445c7c5bc83e13dfeb81ae6fc11be70e0ab490ab976106e3d8e627c44df3ac588239fbf885a2439b69e5a121245fd3c42c86555b198452ffcac7168d789ff3f61da76d389b0fc1e6c39df6608824babcb098c509e0def7f1701e67ab7d6c64ab5150eaaadbe38a11673fee8d286d88ae6f39241966fa6df46464166db4f41d67596d9d67382f1069042ee118b0af630a5e12f07d8cfa4183f2c28b27a6105d69804508235f877693cf1f359ffb95b585496b941c2e3f2170d916ded547beee1ae24e1724f17cb85cfcba15e1cbabe44e60b16c2ac4f4afed9506e25bd35a8897de4ae4a4c929b25289f75b2da34a1b65edfc2dd74b74b8f3d74f1387805cf5933a616798fa890718c9ebd6079c26a5f732298f8e8a2e378fccffd7fc3ecc8b10d1cd013a7340b7842c4b1dff0e9f2ea70329fb9c3013151f43fa5bad0dd5f61a92da5a78e68052ab72c38d915136184a49da2a6b6e248e9d106777c1bde4dfc94f8a4a29dfa95fe7681516061a83650c8b39968bd3a7a34b34e93844fc8ed8a84b59f7e657a025592db7a7252491b18695693a68d178564909e5971b8956479e518a1202af31718fe22f4e65c93a9a08e802e07fd274e5a23cb466a7b48cf344a2176d61ef27d348b40a510e8cc8e372693cb6c1c7cfb4e3972fbe4204f0048bc53793e049b0484b3bbe6d3b6a986bc2c95fdb63f60ebfdbea38b48405a8b85ee84568fb6921a75fb54e9026671ed43b923286d64d60c9060a86c2217f98f049259d99d0c5ce4889b165557fa4536a6d5222eb289a6dd83ff235dbde83897d1627f6d85c3e551997007b5219c5b010d53b92879e19951ba21db665f724d7c45da7c635f3a982047a1ebed638dca4f3e97ee036e18ae68d37cd8fda64fac7dce84587311b2e17420c31d50a5da4d052052ea1b4116aa9a0ef20434420c51887cf2d03a1d578925f19e700451f404413f7371693f2e0a622e1ae49daccd12de5ec59d2acbb635d854ce22a418f143c3a637dc731d45c5d1c38adcb770602a92f3de006a4eef1d838b91178476ff168fa639eb5b420da8a343a0ec6e6144cc802eb08d1833beb6ca18ffa1fd7b019bb2d02c97d62963a8a9180769323d8e45639b68aaa56775306bdc6c020678ecd64e751fb92c85dc474bbde8f94c029d92dea48b837c7b5524dc061374e637e299fef6b1355ce23d0f649f0e61402d375bb444a37a22a812821ade48df3be021ecacff6873654bf21e111d079f5bb140568b5c4b77f1aaa22416ab983eb8fe903286fdf114024622f443686078c8318329aebe5df891a9a91bd5512b3aed59557de62d1a9586e10fa07306f815fc10204200d6282813f729c3f8e8af7c450f55037397125ef5e806306a9ba351a6f3e1dede486bc75ae897581b649ef55f19c97b330c5a61a6f76674722429ea894d1c638074cedb0b863514c19166a5c2baf4ee6d1eaeee85155afd10fdd4361c78b3c0d00d01a37df52be0ed3458bc7a1afa0c8c9a2f3406b1e4607e955f57f626c7ed2efac888e72110e0dc0f79cfdd02bc245f0b3a7939bbdc31229ab99ecd36927e1fdd7b17b5037457856fe3f773b6af24af6d67cbd7978e2f127b86b50153e9b0f13f4942006198d6a6ac335cf7560676fd607e6a3a7b518fa815def5eca1372813f97d6ea9d62b848db37015aa648c8426f26776728332fad5f72c919a6f96d1c3b0a97df4c1892ff814e2e57979da7f7098c42b963ca5929765b1ad2284abd2c1f7ef9570b8c97a513da8f4078130e70f31327708619331571d78d3475b6b41e835dc948f0e809c6610942e4c7d515d9303e6281a3980a742dc85f4528fddc34d22bbd9aa4b4b2351df10884f1dbc877717d984b0b3bafda47801103cda459d006a9a9982f5cf67fc0face3def54d579358e623dae4d9b4248cebd82111cf4c431f8852bcf862a65a124ca709cec2454e4c65514128bc2d6f8cc92624f20c02b008081d334cc7fa0b8e8d9d3dfe2a283600e875c7ecb8e4949f958f6f84f8e52b78e3eae58fa02d85bb8ac52ddf3b262ec52eca50d6d590139c24c042e1c040d8da6c9a2e95055dc91ed65881bc4c43c13c240eb9f6ef9a4cffb44e96c9c055cbbc10b5d63850bc3e2fa46aabb2c732c0c31bf1dba3ad1ce2b1b671259aaaef955d39c420b18d78828248563cacd9417ef2cb63859ebef3936e26803e7ccf5233cb3c0a2f440d898ff258cb03a783415a6f81b1b1a07bb5cef530c78c30ec9adfd2df246d581bc662336d5029f65588995adc3190e97a418c15fa3620eb68cdcc6233f1aa0009ab558b22ae9316003c6af1fe0d7807e583943e48692fcd9fa2525fefe3467d099951c83943312f0e889cef4c1ecf17ad469f5ad683b405eb59230e89df96e8dd94e41e5f62822ba957e065f22d96b1c0c2b83f5a57fbb04d5af399ece3ddd52e5afff783a876e2066fbe30963421acb427c95fd3e7bc6b7d3d731a7e347052cd9636805cab94ad40bdb63a264b3127c7f8d21d25810bd2eadb2c3e31b5c807283ad062d750e5b21ec1e20cc3ac5753ac536faf23e2b5c37e9d021870b0350ecea7187643a00a08ec3ffaf7e6c236c4d694ff41af7b5fbf8a554949f5026a8b2adcf377f94848cd17fbcc0249e796008962d3db16b4bb85483dbe75ef5b301175e052203436b38248fbd1a28a5e2b3ab75c77eb8f853e60e95d5f16cb9858b33b3752b4c69776ec4506ba2bd490a6f17aae1152d8762d86cc0ef32788cf149e8fa9464c3ea588f15d8eb2092254c470acf221cfe680845167fc6778b8af1609681ae4f4e65426ce059b9768eb2e0c89f29de7b91db89a72e4c677c65dd980f9a6bfa656ed01d5e683a33e6b80462139476225cc0fcc309d926c36aa250bdad1454db46cd2536046f909a05b08829cad973bc705231a32a5f2e7ac5e96e2315cb175724607a5af02073fc936272aa724990ba6dcc4ea79da6eb7ec0bbdbd0a878114c493bc4b3e26e24b18553bd0a617981d8ea9e91ed2e3bcbd48f5d67aa913790bf52c31435184d6c73079e964e9ef05194e88b072b372d48cb70dbca99238c4474ed0b6932cc1b233bce0c87d48d478fa3c937c42c8637714e9995041f8b2b7dce17eb2f26c730f5559cf5919b88ee00bbf40726f90e1cf29e0f5fadc64de1bf28d447e8996948dc2fe658620b6fb8cfc592d5e0621b66057eb774c31ab16235456210c5ee7990b71b5b3d51cf13e30361a8cdaa107b13fa6a1c84b172efece3b70753e81e7e9e572d228c7bbcdaba40d8d0eb4de13bda1fca38d3ed667bb0897335aadaa0c3905a1283292c89ef5747ad5462db4011c3f8a4a476aa78d74badf8bf3785997ba9824e21256eed4c2805331fa24c81e28f21e895a0b03e7de52787065faded0f1b59eba1c922dce5576e8ab190ef716c021d8dfa13a1e73b8962d9f9238ba8b9fa2cf84addfe37e78cdb398ee4c0642a716fb8db1e332f873a16c6225ebc51fe05f33273380e64272159bb808336e87b4b0cddb492a992b2e7f423bf37725e1d9dda0dc6b4426172c2a93ee1cc9acea7fe1ece9ba0ddee3e232efb11fc4d4e266cd2a83c017e32315c434b73e9729d5a3a7fe993e72f9bb70d78672493263a2653fe1bfd42d1f97cbf0fffb6705b2e35fe65ceb9ad7ddc525b689027352db9c194939559ebb3b505a58e0404103482ce10f7d67761c13b235b52ad1b25803aa94cf7df5ca8d8bd0d4e6d0ab8bcfb8f72a26cecf071e31c02a1034c0144d850f1732926981dca7a18f0a197da3703d74d3e951ed510ed38a8fcae93eb2bebdf92e0feb0f06dbe1331cb43cfa548ca294ea479ecb325aea7aff8d924745298a3d34f23f40b992995a908130165b44beb8cc9da8390dae2a09cb7e1ac7e95b84f35e7be147b4be04883047cdcaec662aa8b66694ae8914e65edb63696494bff66eacb3aecdb23746a36cec7f832d628d38698ba6b3d4020095eae2a5b36a21039ce50901cdf2582b88ab8c86c6f4a8c345618f10d7aab081edb3ce8e4479e0ac476112d4b261cb8ed952221fb660898491fc7134b091c0565173bebf014caffae12852b5314c930d41e27bcfa7bc536fc4da3b714630e1ac7aaf006755da1da792dcad08f796c2ebdd6427ad3374e25132a103d62f98584462aa164d742b4d7c668a85119480199dd90f0a903f6c76cfca28b84a2279ae6965fdec403072be146d2d1f39b122113fbcfb52cf8c7c1d47a32f437b895bcd7a67ad08f196112a15b07e5b57b4db2b7c7f70a42923d6d0625515375b9281d331bd1e5dd75ff3a6e1ca5b75eb328e6c935f2c8f0c57b0aaf2ad85983160b0e53fca44d95e956ef2726d97acb2da34ca4482bb86aabde6d8b8b85da2e44ae89b8359f7edb88a3e2a9aad23125b8c2bd0c7be0847ac9b1e16db2c395e0c9eb040af710c31d32f7b356bfb6f1704f4d884f37c15b865eda87685ae8926fbf3a4465e7e2968ee18ea1ff5d4f4cbfb55634089687b9f0bce5b9cf10779299893cf64980193fd3a1096507e7a8be", 0x1000}}, 0x1006) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x2dd2, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) (async) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0, 0x0, 0x1}]}, 0x4}, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000c04b780018000900000000000000015f85729600fe0000010000000005001a0009e2c65c3965f7b69bd5af436b9fca33ee0a8965c35f2d4e3f7c9007a4e1982ecf553b663bc20f23faf9a6e4a5a23c431ce69ed216d2ab6acb35ed78a0941a22cf03b92437c5c165386ebd781ac699e9bceb9418d41f481a53662390a49392e9a36cacd133b7c0f3e41a2f20e05735d8b276e1f7d6b4aab8e2f5351e44c2cb6f"], 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r1, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) (async) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 42.38607391s ago: executing program 0 (id=181): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000900000014000400", @ANYRES16=r2], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="e57ea7a1d6d9b3caf7abcc517aa27a2df90e42e2883a71222de63d030a86eefb727821f277657c651de1e80220f237d384796d29d7521ec7f3e17406f94731f8e35cd5d01c567de290e12bdce56209ece5e53ed7bbfe5c872b79cd55f4141827640053f7e101ffd620febfd032cfcead873a958fc469ac482dd71761d981343b71b52693a007dd90b14ba5c4c7a95acd7a9458eb86930f1b284009e021f49444b605b5aa4c28233ecf47c687b9bf107ab11d28a46ab9c50141cb994f0016797e21d8df2dad7859af1980209e69e05fcabcfd6744fb8563dd499127d7b8a4", @ANYRES16=r1, @ANYBLOB="00032cbd7000fcdbdf25280000000c009900070000004e000000b0002a007107010101ff002f080599112708690839d0e3b42d708caab0e0f9dd2cf181d4a56aaed687e8a0badc1d16d0dd03a604cdbe5a139f9533040062521bcb09f7f81a8c4dec5f3f2b24f8436c11ff34518b4a7e7abbab8b7676236f0d9f167f8aadfef116336cfa9bef7c2ecb7af720e1f47e4a95b3e9cb20b3a36444ce7facf9dfee877f79d14ea2dd3b92487c1ed6976d0c400d650291dde3f3b25c653d4bd1d68b8436dd760688801900090004005f000a0034000202020202020000"], 0xe0}, 0x1, 0x0, 0x0, 0x20000810}, 0x804) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x220, 0xb, 0xd0e0011, 0x220, 0xc6, 0x2f8, 0x1d8, 0x190, 0x2f8, 0x1d8, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0xff, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0x1b8, 0x220, 0x2000000, {}, [@common=@unspec=@comment={{0x120}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1a, 0x2, 0xed04, 0x5, 'pptp\x00', 'syz1\x00', {0x100}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3e}, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00', {}, {}, 0x32}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x0, [0x8, 0xa, 0x2]}, &(0x7f0000000080)=0x44) 42.267733228s ago: executing program 0 (id=186): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) (async) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000600)) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000000)=@id, 0x10) recvmsg$can_j1939(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/8, 0x8}], 0x1}, 0x160) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}, 0x1, 0x0, 0x0, 0x20084001}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xa080, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x7ff) 41.526657913s ago: executing program 0 (id=198): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@random="79ee7ca42eea", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) 41.313770154s ago: executing program 0 (id=202): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0xca1, &(0x7f0000000100)={0x0, 0x8de0, 0x10310, 0xfffffffe, 0x4a}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000c80)={0x38, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x8, 0x5, "4480f3ba"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x0) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x43) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r7, 0xffffffffffffffff, 0x0) 41.090176277s ago: executing program 0 (id=203): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x541b, &(0x7f00000007c0)={'netdevsim0\x00', @local}) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459ba", 0x54}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 41.005580462s ago: executing program 32 (id=203): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x541b, &(0x7f00000007c0)={'netdevsim0\x00', @local}) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459ba", 0x54}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 17.709885088s ago: executing program 4 (id=559): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x34, r2, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000844}, 0x40000) syz_open_dev$usbfs(&(0x7f0000000000), 0x9, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002280)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1000000, 0x0, 0x0, 0x200000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x127b, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xd528, 0x1, 0x5, 0x5, 0x3, {0xa, 0x1, 0x0, 0x2, 0x3, 0x5}, {0x3, 0x2, 0x8001, 0x9fb, 0x0, 0xfff}, 0x2, 0x80000001, 0x80000001}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 17.610579434s ago: executing program 4 (id=561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000b0d140c9af9d00765b201ff89400eb09050000000000080000000100000a107c555cf43777a9f97e4f7b315a52e07c365d55df5ab73bc975193a6bd7cc7611c3475b5795bb83830157a068e8dbfc9cda661876e65f7e90457c095dbe91c1e3060189e2a68c86a2df4433f6d5555e6de1b88f5889ba"], 0x14}, 0x1, 0x0, 0x0, 0x8010101}, 0x90) 17.608968009s ago: executing program 4 (id=563): r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x49e, 0x294440) close_range(r0, 0xffffffffffffffff, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000001580)={r2}) write$snapshot(r1, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) syz_open_dev$amidi(&(0x7f0000000040), 0x49e, 0x294440) (async) close_range(r0, 0xffffffffffffffff, 0x2) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000001580)={r2}) (async) write$snapshot(r1, 0x0, 0x0) (async) ioctl$SNAPSHOT_FREE(r1, 0x3305) (async) 17.520466334s ago: executing program 4 (id=564): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0xb, 0x6, '\x00', 0x10, 0x2c, 0x80, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast2, {[@dstopts={0x88, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}]}]}}}}}, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) setfsuid(0x0) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) (async) umount2(&(0x7f00000001c0)='./cgroup\x00', 0x3) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @remote, @remote}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x1d}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 17.458291741s ago: executing program 4 (id=565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000501000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) 17.105059255s ago: executing program 4 (id=574): ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x8010) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$CEC_ADAP_G_PHYS_ADDR(r1, 0x80026101, &(0x7f00000001c0)) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000280), 0x296001, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000002c0)=0x14) sendfile(r2, r1, &(0x7f0000000300)=0x9, 0x9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r1, 0xffffffffffffffff}, 0x4) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ppoll(&(0x7f0000000380)=[{r1, 0x440}, {r1}, {r3, 0x80}, {r0, 0x1000}, {r2, 0x8054}, {r2, 0x8}, {r3, 0x210}, {r3, 0x20}, {0xffffffffffffffff, 0x3244}, {r3, 0x1100}], 0xa, &(0x7f0000000440)={r4, r5+60000000}, &(0x7f0000000480)={[0x4381]}, 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r6, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0xc}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x78be6bae13112fc0}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008000) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000600)=0x14) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x4, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r6, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x61}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000880)={'veth0_virt_wifi\x00', 0x2}) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x88, 0x3, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3b}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x92df}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc22}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x1) writev(r3, &(0x7f0000000b40)=[{&(0x7f0000000a40)="9b4dbe75179d57896b07d9048b48a563824da2ad6f5e81f83cc1cf8963127a43770e6e7848f23016400748b056c4d54119fa6165ecdbb2bc481758741e0c3039a8cfe47a7b19ada025f2576a4ebff52108edf3ab36d0be7a9c6048f97d868272cb4f6758bc74d63921dc", 0x6a}, {&(0x7f0000000ac0)="eea6cbad344465aff8c6b0fc72604ed0e8d214fd1c3c3ced7614e62bd12231019d026bd90fe492b2d8199288de637e7e81a5e917e46e0cbd32bd3eea780dd39047955b1fab5482bcac0535fa7b861562788a", 0x52}], 0x2) write(r2, &(0x7f0000000b80)="c52032400399f2bbbd0260bd64846a6fced2a11130fe8667270a06524447991c29f1e86c9a0515771260049db0142ec55fed536fc85e04dc42dc79a6a1578cd58356be4fd0f557847e81e9d7a9f3449c94e6b7f62ec3690894eab7d198b4db4c7b73d8a04fae1e02fadd3959236e9dec5ae7ab037540be6170f15c7b63469a25258d91015e20cf7ce594214b", 0x8c) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000cc0), 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xc8, r6, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x20}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg2\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b4092caaf24b1ec6b902e8d10deca9b6d04b18b8914d2a04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c9f99239d81f967dbc2eecc858e76dfa0f0b40aed76ccdb6"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4044881}, 0x24000001) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f00)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)=@RTM_GETMDB={0x18, 0x56, 0x2, 0x70bd2b, 0x25dfdbfe, {0x7, r8}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) 17.012803134s ago: executing program 33 (id=574): ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x8010) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$CEC_ADAP_G_PHYS_ADDR(r1, 0x80026101, &(0x7f00000001c0)) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000280), 0x296001, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000002c0)=0x14) sendfile(r2, r1, &(0x7f0000000300)=0x9, 0x9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r1, 0xffffffffffffffff}, 0x4) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ppoll(&(0x7f0000000380)=[{r1, 0x440}, {r1}, {r3, 0x80}, {r0, 0x1000}, {r2, 0x8054}, {r2, 0x8}, {r3, 0x210}, {r3, 0x20}, {0xffffffffffffffff, 0x3244}, {r3, 0x1100}], 0xa, &(0x7f0000000440)={r4, r5+60000000}, &(0x7f0000000480)={[0x4381]}, 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r6, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0xc}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x78be6bae13112fc0}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008000) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000600)=0x14) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x4, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r6, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x61}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000880)={'veth0_virt_wifi\x00', 0x2}) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x88, 0x3, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3b}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x92df}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc22}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x1) writev(r3, &(0x7f0000000b40)=[{&(0x7f0000000a40)="9b4dbe75179d57896b07d9048b48a563824da2ad6f5e81f83cc1cf8963127a43770e6e7848f23016400748b056c4d54119fa6165ecdbb2bc481758741e0c3039a8cfe47a7b19ada025f2576a4ebff52108edf3ab36d0be7a9c6048f97d868272cb4f6758bc74d63921dc", 0x6a}, {&(0x7f0000000ac0)="eea6cbad344465aff8c6b0fc72604ed0e8d214fd1c3c3ced7614e62bd12231019d026bd90fe492b2d8199288de637e7e81a5e917e46e0cbd32bd3eea780dd39047955b1fab5482bcac0535fa7b861562788a", 0x52}], 0x2) write(r2, &(0x7f0000000b80)="c52032400399f2bbbd0260bd64846a6fced2a11130fe8667270a06524447991c29f1e86c9a0515771260049db0142ec55fed536fc85e04dc42dc79a6a1578cd58356be4fd0f557847e81e9d7a9f3449c94e6b7f62ec3690894eab7d198b4db4c7b73d8a04fae1e02fadd3959236e9dec5ae7ab037540be6170f15c7b63469a25258d91015e20cf7ce594214b", 0x8c) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000cc0), 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xc8, r6, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x20}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg2\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b4092caaf24b1ec6b902e8d10deca9b6d04b18b8914d2a04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c9f99239d81f967dbc2eecc858e76dfa0f0b40aed76ccdb6"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4044881}, 0x24000001) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f00)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)=@RTM_GETMDB={0x18, 0x56, 0x2, 0x70bd2b, 0x25dfdbfe, {0x7, r8}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) 4.489827392s ago: executing program 1 (id=724): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r1, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000007100004000000000eb0304"]) 4.3208298s ago: executing program 1 (id=725): unshare(0x6a040000) r0 = landlock_create_ruleset(&(0x7f0000000000)={0x8000, 0x1, 0x2}, 0x18, 0x3) sync_file_range(r0, 0x2, 0x401, 0x6) 4.218288424s ago: executing program 1 (id=726): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x9, 0x6, 0x0, 0x6, 0x19, "f44327189019f4ba9c2d666c378d75463e665e"}) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r2, 0x400455c8, 0x1) syz_usb_connect(0x3, 0x36, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.510822628s ago: executing program 5 (id=737): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async) getpeername$qrtr(r0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYRESDEC], 0x48) 2.509794716s ago: executing program 5 (id=738): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x0, 0x81, 0x4a}, 0x9c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000015c0)={0x130, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x3d}}}}, [@NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x6}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0xb}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x2}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x40}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xfffffffffffffff2}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x3}]}, @NL80211_ATTR_TX_RATES={0xcc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5635, 0x7f, 0x15, 0x7, 0xc89d, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x1, 0x1, 0x2, 0x200, 0x6, 0x6, 0x98b9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x5}, {0x7, 0x8}, {0x1, 0x5}, {0x3, 0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x6}, {0x6, 0x7}, {0x5, 0x1}, {0x2}, {0x0, 0x2}, {0x5, 0x1}, {0x0, 0x8}, {0x7, 0x6}, {0x0, 0x9}, {0x4, 0x7}, {0x2, 0x4}, {0x0, 0x3}, {0x1, 0x5}, {0x2}, {0x3, 0x8}, {0x6, 0x2}, {0x0, 0x1}, {0x4, 0x6}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x7, 0x6}, {0x7, 0x9}, {0x7, 0x5}, {0x0, 0xa}, {0x6, 0x2}, {0x4, 0x2}, {0x7, 0x4}, {0x4, 0x5}, {0x0, 0x5}, {0x7, 0xa}, {0x2, 0x9}, {0x6, 0x5}, {0x2, 0x3}, {0x6, 0x2}, {0x2, 0x3}, {0x6, 0x2}, {0x2, 0x4}, {0x3, 0x12}, {0x2, 0x4}, {0x2, 0x6}, {0x2, 0x6}, {0x4, 0x8}, {0x3, 0x3}, {0x5, 0x8}, {0x5, 0x9}, {0x4}, {0x5, 0xa}, {0x4}, {0x7, 0x5}, {0x6}, {0x0, 0xa}, {0x7}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x4}, {0x3, 0x4}, {0x2, 0x3}, {0x0, 0x4}, {0x4, 0x2}, {}, {0x3, 0x1}, {0x0, 0x3}, {0x3, 0xa}, {0x3, 0x1}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3, 0x1, 0x9, 0x8, 0x9, 0xf, 0x101]}}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmsg$unix(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x10020) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close(r2) 2.440425497s ago: executing program 5 (id=739): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r1, 0x1, 0x70bd30, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x1b, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xfffffffffffffee5}, 0x48) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000001340)={0x28, r1, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xe, 0xfffffff8}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40081) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r3, 0x0, 0x2a, &(0x7f00000002c0)=""/130, &(0x7f0000000100)=0x82) 2.439953081s ago: executing program 5 (id=740): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)=0x1e) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[], 0x125) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x90) 2.350545127s ago: executing program 5 (id=741): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) socketpair(0x1d, 0x3, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'veth1_virt_wifi\x00'}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'nr0\x00', 0xf49}) 1.631666525s ago: executing program 1 (id=750): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) getsockname$packet(r1, 0x0, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x2000, &(0x7f0000010000/0x2000)=nil}) 1.270214294s ago: executing program 1 (id=753): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc49c}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) creat(&(0x7f00000001c0)='./file0\x00', 0x0) (async) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r1) read$FUSE(r1, &(0x7f000000c400)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f000000c400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0x0, r2, {0x7, 0x1f, 0xfffffffb, 0x4503230, 0x0, 0x0, 0x0, 0x4, 0x16, 0x0, 0x14c, 0x94a4}}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x3c, r4, 0x431, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x3c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x3c, r4, 0x431, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x3c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010023010000340200000600000008000100", @ANYRES32=0x0, @ANYBLOB="08000e00c200000017ea59e068204a3ed6eb24575862031181f91b5dea6709aeae690cfe1ca10ae1ee772e59e78a08f950e5054a0408f16a159527bccee38ae4d923bfb80c1c96d4048b22ef6f99a3513bdc08b03c9a56425471c28b91"], 0x24}}, 0x0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000003c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20808009}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4001) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) write$sndseq(r1, &(0x7f0000000080)=[{0x7, 0x5, 0x4, 0xd, @tick=0x7, {0x3, 0xa8}, {0x5, 0x5}, @time=@time={0x5c4a, 0x101}}, {0x4, 0x14, 0x9, 0x7e, @time={0xffffff08, 0x2}, {0x4, 0x9}, {0xe0, 0x9}, @time=@tick=0x1ff}, {0x6, 0x4, 0x5, 0x7, @time={0x5, 0x6}, {0xba, 0xf}, {0x4a}, @raw8={"12c84e44ee9e81aff3407820"}}, {0x3, 0x60, 0x0, 0x5, @tick=0xfffffffe, {0x8, 0xbb}, {0x40, 0x2}, @time=@tick=0x7}], 0x70) 1.269382262s ago: executing program 1 (id=754): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) getdents(r3, &(0x7f0000000280)=""/4096, 0x9005) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff1}, {0xffff}, {0x0, 0xc}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xd7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0x10}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x10, 0xf}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40008cc}, 0x20004804) 1.139947851s ago: executing program 5 (id=756): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000007c0)=@overlay={0xb, 0x2, 0x4, 0x102, 0x9, {0x0, 0xea60}, {0x3, 0x8, 0xc0, 0x9, 0x7, 0x8, "10a826d3"}, 0x4, 0x3, {}, 0x5}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x20801, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180)) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r4 = dup(r2) write$UHID_INPUT(r4, &(0x7f0000000280)={0xf, {"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", 0x1000}}, 0x1006) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000d1200"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 620.598106ms ago: executing program 2 (id=766): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x41) r1 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x7], [{0x600, 0xffffffff}, {0x2, 0x7fff}, {0x0, 0xffff}, {0x6}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x42}, {}, {}, {0x0, 0xa9}, {0x0, 0x10200000}], 0x10}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port0\x00', 0xe3, 0x1b1c07}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x4, 0x10b003) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f00000001c0)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f00000004c0)={{0x2, 0x0, 0x0, 0xfd, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x4000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x2000, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x80}, {}, {}, 0x0, 0x0, 0x0, 0x100}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000002100010027bd7000fbdbdf25ff010000000000000000000000000001fe8000000000000000000000000000bb4e2100004e219ffd070080201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a86b7e00b3000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004040) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) 460.299008ms ago: executing program 2 (id=767): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r2]) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x32) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="660fc77000f2640f20e3ba4200b89c7beff30faeea2e0f2304f0f6945a4b66b8103b00000f23c00f21f8663501000d000f23f8ba4300b8c64bef08d40f0dbed3a6", 0x41}], 0x1, 0x60, &(0x7f0000000340)=[@cstype0={0x4, 0xc}, @cr0={0x0, 0x20040002}], 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=ANY=[@ANYBLOB="4400fcff12000300000800"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060005000000000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) madvise(&(0x7f00001a9000/0x1000)=nil, 0x1000, 0xb) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000004a0001000000342b000000940a85bb6ea6030b67c0b61fe01271d6cb2b28c6b0537a95fd40ad226f3d3fc4beb9e8d8888a45a25af7cd33524985fa3259c17b953b2fbb633fbd3416f32eb5fd739ad250dd4a3c5adb0090c093e59979ff57e27c24bdddacc0599bb5bdd1d737eed98798e2a6793c5f5c97ca65d2eeddfd65f05c3cbf8a882420932191aebf5238deb2c56c5a6b269ec0f4c71295f2b2607f591e96f6405a28befd5e15717be02fb51e0228ecfc43f5ff1a00acd920a5aa6efb"], 0x14}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, &(0x7f0000001980)={{0x3, 0x0, 0x80, {0x80a0000, 0x5000, 0x3}}, "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", "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"}) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r2]) (async) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x32) (async) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="660fc77000f2640f20e3ba4200b89c7beff30faeea2e0f2304f0f6945a4b66b8103b00000f23c00f21f8663501000d000f23f8ba4300b8c64bef08d40f0dbed3a6", 0x41}], 0x1, 0x60, &(0x7f0000000340)=[@cstype0={0x4, 0xc}, @cr0={0x0, 0x20040002}], 0x2) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=ANY=[@ANYBLOB="4400fcff12000300000800"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060005000000000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) madvise(&(0x7f00001a9000/0x1000)=nil, 0x1000, 0xb) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000004a0001000000342b000000940a85bb6ea6030b67c0b61fe01271d6cb2b28c6b0537a95fd40ad226f3d3fc4beb9e8d8888a45a25af7cd33524985fa3259c17b953b2fbb633fbd3416f32eb5fd739ad250dd4a3c5adb0090c093e59979ff57e27c24bdddacc0599bb5bdd1d737eed98798e2a6793c5f5c97ca65d2eeddfd65f05c3cbf8a882420932191aebf5238deb2c56c5a6b269ec0f4c71295f2b2607f591e96f6405a28befd5e15717be02fb51e0228ecfc43f5ff1a00acd920a5aa6efb"], 0x14}}, 0x0) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, &(0x7f0000001980)={{0x3, 0x0, 0x80, {0x80a0000, 0x5000, 0x3}}, "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", "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"}) (async) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) (async) 209.653324ms ago: executing program 3 (id=768): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0}, 0x94) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x21, 0x800000}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x4e, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a600200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 160.464913ms ago: executing program 3 (id=769): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xe6, 0xffffffffffffffff, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x40004) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x75507}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20008010) 159.21701ms ago: executing program 2 (id=770): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x290}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x40090}, 0x4000080) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000440), 0x80001, 0x0) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000500)={0x2, 0x1, 0x33, &(0x7f00000004c0)=""/51}) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) recvfrom(r5, &(0x7f0000000540)=""/4096, 0x1000, 0x40000000, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, &(0x7f0000001540)={0x37, 0x100000001, 0x2, 0x3, 0x2, [0x4, 0xc, 0x9a, 0xffff8001]}) syz_open_dev$MSR(&(0x7f0000001580), 0x7, 0x0) r6 = accept$unix(r3, &(0x7f00000015c0), &(0x7f0000001640)=0x6e) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680), 0x102, 0x0) statx(r3, &(0x7f00000016c0)='./file0\x00', 0x4000, 0x20, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r7, 0x400454ce, r8) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000001800)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f0000001880), r3) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001940)={'syztnl1\x00', &(0x7f00000018c0)={'erspan0\x00', 0x0, 0x8, 0x8, 0x4, 0xd504, {{0x13, 0x4, 0x0, 0x10, 0x4c, 0x65, 0x0, 0x1, 0x2, 0x0, @local, @remote, {[@rr={0x7, 0x2b, 0xed, [@local, @rand_addr=0x64010101, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @private=0xa010101, @rand_addr=0x64010102, @multicast1, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0x1a, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001a00)={'syztnl1\x00', &(0x7f0000001980)={'erspan0\x00', 0x0, 0x700, 0x80, 0x2, 0x40, {{0xf, 0x4, 0x3, 0x9, 0x3c, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0xc, 0xbf, 0x0, 0xc, [0x0, 0x7d]}, @generic={0x88, 0xd, "3519be7ae87ba76cd1156f"}, @rr={0x7, 0x7, 0x38, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x7, 0x4c, [@dev={0xac, 0x14, 0x14, 0x43}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001ac0)={'ip6_vti0\x00', &(0x7f0000001a40)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x7, 0xfffffff7, 0x6, @private2, @mcast2, 0x10, 0x7800, 0x2, 0x668}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001b00)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001bc0)={'ip6tnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x2f, 0x5d, 0x9, 0x888d, 0x24, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x8000, 0xe3, 0xfffffffd}}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001c00)={'team0\x00', 0x0}) getsockname$packet(r3, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001c80)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001d40)={'gretap0\x00', &(0x7f0000001cc0)={'gre0\x00', 0x0, 0x8007, 0x1, 0x100, 0x3, {{0x9, 0x4, 0x3, 0x8, 0x24, 0x66, 0x0, 0xa, 0x4, 0x0, @local, @remote, {[@noop, @timestamp_prespec={0x44, 0xc, 0x64, 0x3, 0xf, [{@private=0xa010101, 0xc0000000}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000002640)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002600)={&(0x7f00000020c0)={0x528, r10, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x90}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7e6}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r16}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x528}, 0x1, 0x0, 0x0, 0x4801}, 0x20008000) 156.95215ms ago: executing program 3 (id=771): syz_emit_ethernet(0xda, &(0x7f0000000000)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@generic={0x6007, "045300be4547c8b0f8389dff43ffcc888c27f1bae160281eec9309a686a7c26eb7ad7e4b11c399676cde31cadcb3826e529b57c4f734ce04fc1db09511affd2f3a8e41472db8571e824e91372291f8dee56a9af8c98420249efb9ef0e2951125bd205500df3fe9a0d442ca3e3dc84e3eade52fa087937c12dc4519e84ea052ea14832d658f7b3e904b08452938873a5227a33799d9b0131634f5736417ada104049089c3e104a678e0ef2b3db096c0372014d2ce51349f2ea8d0f5b96719db135d3f908f6521e971d84a3aa5"}}}, &(0x7f0000000100)={0x1, 0x4, [0x7f4, 0x3b9, 0x6a7, 0xc61]}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000140)="260fc77500baf80c66b80380f38866efbafc0cecf30f2afd2e2e6536f20fd6f30f01c56467f3f20f00956300000066b9800000c00f326635000800000f303e640f3266b8000000000f23c80f21f866350800c0000f23f80f01c4", 0x5a}], 0x1, 0x5, &(0x7f0000000200)=[@cstype3={0x5, 0x4}, @cr0={0x0, 0x20}], 0x2) (async) r2 = syz_init_net_socket$llc(0x1a, 0x4, 0x0) bind$llc(r2, &(0x7f0000000240)={0x1a, 0x310, 0x9, 0x8, 0xb, 0x9, @multicast}, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000840)={0x9, 0x0, [{0xdbe80d34959590a7, 0xa, &(0x7f0000000280)=""/10}, {0x10000, 0x60, &(0x7f00000002c0)=""/96}, {0xd000, 0x4f, &(0x7f0000000340)=""/79}, {0xdddd1000, 0x58, &(0x7f00000003c0)=""/88}, {0xdddd1000, 0xcd, &(0x7f0000000440)=""/205}, {0x2, 0xd0, &(0x7f0000000540)=""/208}, {0x2000, 0x13, &(0x7f0000000640)=""/19}, {0xdddd1000, 0xfe, &(0x7f0000000680)=""/254}, {0xeeef0000, 0xb5, &(0x7f0000000780)=""/181}]}) (async) bind$llc(r2, &(0x7f0000000980)={0x1a, 0x108, 0xb, 0x0, 0x6, 0x7}, 0x10) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000a00)={0x3, &(0x7f00000009c0)=[{0x1000, 0x8, 0x8, 0x8cc}, {0x1, 0x6b, 0xbf, 0xfffffffa}, {0x1, 0xff, 0x2, 0x4}]}) (async) shutdown(r2, 0x1) (async) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) write$rfkill(r3, &(0x7f0000000a80)={0x2, 0x4}, 0x8) (async) preadv(r3, &(0x7f0000001c00)=[{&(0x7f0000000ac0)=""/30, 0x1e}, {&(0x7f0000000b00)=""/118, 0x76}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/112, 0x70}], 0x4, 0x8, 0x7ff) (async) ioctl$sock_ifreq(r3, 0x8910, 0xfffffffffffffffe) (async) timer_create(0x0, &(0x7f0000001c40)={0x0, 0x2, 0x4}, &(0x7f0000001c80)=0x0) (async) clock_gettime(0x0, &(0x7f0000001cc0)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000001d00)={{r5, r6+10000000}, {0x77359400}}, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001d80), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r7, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x3c, r8, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x54}, 0x4) (async) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000001e80)={0xc}) (async) read$FUSE(r3, &(0x7f0000001ec0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r3, &(0x7f0000003f00)={0x18, 0xfffffffffffffffe, r9, {0x6}}, 0x18) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003f40)) (async) clock_gettime(0x0, &(0x7f0000003fc0)={0x0, 0x0}) ppoll(&(0x7f0000003f80)=[{r2, 0x10b}, {r0, 0x8020}], 0x2, &(0x7f0000004000)={r10, r11+60000000}, &(0x7f0000004040)={[0xfff]}, 0x8) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000004080)) (async) timer_gettime(r4, &(0x7f00000040c0)) (async) close_range(r1, r1, 0x0) (async) open$dir(&(0x7f0000004100)='./file0\x00', 0x0, 0x0) 78.939263ms ago: executing program 2 (id=772): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_aio12_8\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$binfmt_aout(r2, &(0x7f0000000280)={{0x10b, 0x5, 0x7, 0x93, 0x2f8, 0x0, 0x251, 0x4}, "6096ed3ffc38382333afca50e2799f812c302ec2fad43e4e9de516118b51e5349c2a36b2499c8e9ed8dd3b1bf9af15b18c197f3e0a961ce3cebb5e3fc78b959d33963c88628a74bb7540eb7ba3afc88cbb7971799cc46235940811a56923588dc12b83335326af3431c67d851feccc273325117a3ac3417f81e7d8a6dbfcaeb040f33b401108bec1c464fc73914a6cb831ce61a18d0227f54069205550f664715f138faa6d59e10cc840714632df8ede6a38301a74de6c3c443a56453a28ab153ee967d7a750b3dc1058109dbd8d0416c4", ['\x00', '\x00', '\x00']}, 0x3f1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x40, 0x10, 0x10, 0x1, {{0x7, 0x4, 0x0, 0x5, 0x1c, 0x68, 0x0, 0x1, 0x29, 0x0, @private=0xa010101, @remote, {[@generic={0x89, 0x8, "1e715ef2f77b"}]}}}}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[], 0x13) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001680)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x70bd2a, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}}]}, 0x3c}}, 0x0) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x8}, 0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x28, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x5}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7c}}, @call={0x85, 0x0, 0x0, 0x11}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000003ff6)='GPL\x00', 0xffff1c3a, 0xbc, &(0x7f000000cf3d)=""/188, 0x41000, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x94) 78.35372ms ago: executing program 3 (id=773): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x80f00, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x481}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000180)={0x0, 0xfffffffc, 0x1000, 0xfffffffb, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) close_range(r1, r1, 0x0) 73.728691ms ago: executing program 2 (id=774): socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x8012, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4043, 0x3e) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x105, 0x5000003a, r1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x1000000d) r3 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0xc32a4cddd557707a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeed, 0x80010, r3, 0x5000) 73.475372ms ago: executing program 3 (id=775): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000280)={0x17, 0x5, 0xf7}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="b805000000b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f00d0", 0x49}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 460.808µs ago: executing program 3 (id=776): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000dc0)={'wpan0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xfc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x14, 0x7, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4008800}, 0x40) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000080030800400018008000300", @ANYRES32=r2], 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x62040200) 0s ago: executing program 2 (id=777): mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYBLOB="28040000130001000000000000000000000000000000000000000000000000017f0000010000000000000000000000000000000000000000020020202b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x428}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYBLOB="28040000130001000000000000000000000000000000000000000000000000017f0000010000000000000000000000000000000000000000020020202b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x428}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x100000000, 0x1ff, 0xfffffffffffffffe, 0xfff, 0x9, 0x6, 0x2, 0x9}, &(0x7f00000001c0)={0x95, 0x1000, 0x8, 0x6, 0x4, 0x5, 0x1, 0x7d80}, &(0x7f0000000300)={0xfffffffffffffffd, 0x7fffffff, 0x1, 0x9, 0x6, 0x9, 0x6, 0x913a}, &(0x7f0000000340), &(0x7f0000000400)={&(0x7f00000003c0)={[0x7]}, 0x8}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) (async) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000880)=[@request_death], 0x0, 0x200000000000000, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0x9, 0x10000000003a, 0x9, 0x9], 0x0, 0x2a80}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x65, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) kernel console output (not intermixed with test programs): [ 52.947630][ T40] audit: type=1400 audit(1753649533.091:61): avc: denied { siginh } for pid=5934 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:8082' (ED25519) to the list of known hosts. [ 55.341771][ T40] audit: type=1400 audit(1753649535.511:62): avc: denied { name_bind } for pid=5946 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.376912][ T40] audit: type=1400 audit(1753649535.551:63): avc: denied { write } for pid=5947 comm="sh" path="pipe:[7287]" dev="pipefs" ino=7287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 55.397537][ T40] audit: type=1400 audit(1753649535.571:64): avc: denied { execute } for pid=5947 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 55.406134][ T40] audit: type=1400 audit(1753649535.571:65): avc: denied { execute_no_trans } for pid=5947 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 57.863420][ T40] audit: type=1400 audit(1753649538.031:66): avc: denied { mounton } for pid=5947 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.868984][ T5947] cgroup: Unknown subsys name 'net' [ 58.012123][ T5947] cgroup: Unknown subsys name 'cpuset' [ 58.021926][ T5947] cgroup: Unknown subsys name 'rlimit' [ 58.249766][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 58.249784][ T40] audit: type=1400 audit(1753649538.421:69): avc: denied { setattr } for pid=5947 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.260139][ T40] audit: type=1400 audit(1753649538.421:70): avc: denied { create } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.267729][ T40] audit: type=1400 audit(1753649538.421:71): avc: denied { write } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.275505][ T40] audit: type=1400 audit(1753649538.421:72): avc: denied { read } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.283402][ T40] audit: type=1400 audit(1753649538.441:73): avc: denied { mounton } for pid=5947 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.292926][ T40] audit: type=1400 audit(1753649538.441:74): avc: denied { mount } for pid=5947 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 58.302708][ T40] audit: type=1400 audit(1753649538.441:75): avc: denied { read } for pid=5666 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 58.330778][ T5950] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.337451][ T40] audit: type=1400 audit(1753649538.511:76): avc: denied { relabelto } for pid=5950 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 58.347234][ T40] audit: type=1400 audit(1753649538.511:77): avc: denied { write } for pid=5950 comm="mkswap" path="/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 58.357756][ T40] audit: type=1400 audit(1753649538.521:78): avc: denied { read } for pid=5947 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 59.092702][ T5947] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.634769][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 63.634785][ T40] audit: type=1400 audit(1753649543.801:80): avc: denied { execmem } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 63.984603][ T40] audit: type=1400 audit(1753649544.151:81): avc: denied { create } for pid=5956 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.992838][ T40] audit: type=1400 audit(1753649544.151:82): avc: denied { create } for pid=5957 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.001483][ T40] audit: type=1400 audit(1753649544.151:83): avc: denied { read write } for pid=5957 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 64.011458][ T40] audit: type=1400 audit(1753649544.151:84): avc: denied { read write } for pid=5956 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 64.021246][ T40] audit: type=1400 audit(1753649544.151:85): avc: denied { open } for pid=5957 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 64.030821][ T40] audit: type=1400 audit(1753649544.151:86): avc: denied { open } for pid=5956 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 64.040796][ T40] audit: type=1400 audit(1753649544.181:87): avc: denied { ioctl } for pid=5956 comm="syz-executor" path="socket:[5351]" dev="sockfs" ino=5351 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.058330][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.062549][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.066695][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.070473][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.070822][ T5973] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.071720][ T5972] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.074438][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.076589][ T5970] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.077917][ T5970] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.078582][ T5973] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.078953][ T5973] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.079679][ T5973] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.080778][ T5972] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.080930][ T5973] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.081431][ T5973] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.084152][ T5315] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.089585][ T40] audit: type=1400 audit(1753649544.251:88): avc: denied { read } for pid=5956 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.089995][ T5970] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.091566][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.094162][ T5966] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.095041][ T40] audit: type=1400 audit(1753649544.261:89): avc: denied { open } for pid=5956 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.099877][ T5970] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.444228][ T5957] chnl_net:caif_netlink_parms(): no params data found [ 64.561003][ T5956] chnl_net:caif_netlink_parms(): no params data found [ 64.588261][ T5965] chnl_net:caif_netlink_parms(): no params data found [ 64.689717][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.693406][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.697150][ T5957] bridge_slave_0: entered allmulticast mode [ 64.699971][ T5957] bridge_slave_0: entered promiscuous mode [ 64.709186][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 64.753696][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.756359][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.758673][ T5957] bridge_slave_1: entered allmulticast mode [ 64.761353][ T5957] bridge_slave_1: entered promiscuous mode [ 64.882023][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.885339][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.888465][ T5956] bridge_slave_0: entered allmulticast mode [ 64.892434][ T5956] bridge_slave_0: entered promiscuous mode [ 64.967726][ T5957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.971783][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.975177][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.978381][ T5956] bridge_slave_1: entered allmulticast mode [ 64.982292][ T5956] bridge_slave_1: entered promiscuous mode [ 65.023291][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.028716][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.031957][ T5965] bridge_slave_0: entered allmulticast mode [ 65.035990][ T5965] bridge_slave_0: entered promiscuous mode [ 65.042826][ T5957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.104775][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.107890][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.110993][ T5965] bridge_slave_1: entered allmulticast mode [ 65.114953][ T5965] bridge_slave_1: entered promiscuous mode [ 65.158781][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.240547][ T5957] team0: Port device team_slave_0 added [ 65.245248][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.249218][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.252501][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.256017][ T5959] bridge_slave_0: entered allmulticast mode [ 65.259923][ T5959] bridge_slave_0: entered promiscuous mode [ 65.266337][ T5965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.271714][ T5957] team0: Port device team_slave_1 added [ 65.323824][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.327014][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.330071][ T5959] bridge_slave_1: entered allmulticast mode [ 65.333977][ T5959] bridge_slave_1: entered promiscuous mode [ 65.339840][ T5965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.394265][ T5956] team0: Port device team_slave_0 added [ 65.445411][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.448474][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.459373][ T5957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.466517][ T5956] team0: Port device team_slave_1 added [ 65.515061][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.518121][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.531562][ T5957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.556720][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.561587][ T5965] team0: Port device team_slave_0 added [ 65.571861][ T5965] team0: Port device team_slave_1 added [ 65.606936][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.668654][ T5959] team0: Port device team_slave_0 added [ 65.697690][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.700779][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.713369][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.719821][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.722839][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.733659][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.743334][ T5959] team0: Port device team_slave_1 added [ 65.877943][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.880930][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.892002][ T5965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.898981][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.901892][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.912576][ T5965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.922515][ T5957] hsr_slave_0: entered promiscuous mode [ 65.926129][ T5957] hsr_slave_1: entered promiscuous mode [ 65.930245][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.932535][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.941018][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.945920][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.948146][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.958629][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.039110][ T5956] hsr_slave_0: entered promiscuous mode [ 66.042352][ T5956] hsr_slave_1: entered promiscuous mode [ 66.049588][ T5956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.052199][ T5956] Cannot create hsr debugfs directory [ 66.165448][ T5962] Bluetooth: hci3: command tx timeout [ 66.167137][ T5966] Bluetooth: hci2: command tx timeout [ 66.167607][ T5315] Bluetooth: hci1: command tx timeout [ 66.169072][ T5959] hsr_slave_0: entered promiscuous mode [ 66.169813][ T5959] hsr_slave_1: entered promiscuous mode [ 66.170367][ T5959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.170380][ T5970] Bluetooth: hci0: command tx timeout [ 66.183899][ T5959] Cannot create hsr debugfs directory [ 66.251308][ T5965] hsr_slave_0: entered promiscuous mode [ 66.254705][ T5965] hsr_slave_1: entered promiscuous mode [ 66.257537][ T5965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.260613][ T5965] Cannot create hsr debugfs directory [ 66.680650][ T5957] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.687218][ T5957] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.691820][ T5957] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.705988][ T5957] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.743666][ T5956] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.757105][ T5956] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.777233][ T5956] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.781762][ T5956] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.803094][ T5959] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.808300][ T5959] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.814147][ T5959] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.819604][ T5959] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.905589][ T5965] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.915579][ T5965] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.922296][ T5965] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.930156][ T5965] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.008560][ T5957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.041887][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.055832][ T5957] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.061641][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.074708][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.077953][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.095155][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.101038][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.104185][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.117108][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.128499][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.131587][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.146137][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.148878][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.153646][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.156008][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.170783][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.173089][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.190805][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.250855][ T5965] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.267676][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.270343][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.275589][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.278741][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.381188][ T5957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.409906][ T5957] veth0_vlan: entered promiscuous mode [ 67.419526][ T5957] veth1_vlan: entered promiscuous mode [ 67.440634][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.453450][ T5957] veth0_macvtap: entered promiscuous mode [ 67.458856][ T5957] veth1_macvtap: entered promiscuous mode [ 67.466914][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.488780][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.500314][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.509180][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.516549][ T5957] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.519543][ T5957] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.522480][ T5957] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.526765][ T5957] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.548789][ T5959] veth0_vlan: entered promiscuous mode [ 67.585462][ T5959] veth1_vlan: entered promiscuous mode [ 67.627788][ T5965] veth0_vlan: entered promiscuous mode [ 67.632910][ T5956] veth0_vlan: entered promiscuous mode [ 67.646311][ T5965] veth1_vlan: entered promiscuous mode [ 67.650861][ T5956] veth1_vlan: entered promiscuous mode [ 67.663675][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.667378][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.693193][ T5959] veth0_macvtap: entered promiscuous mode [ 67.702944][ T5959] veth1_macvtap: entered promiscuous mode [ 67.714814][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.719620][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.720695][ T5956] veth0_macvtap: entered promiscuous mode [ 67.730539][ T5965] veth0_macvtap: entered promiscuous mode [ 67.737280][ T5956] veth1_macvtap: entered promiscuous mode [ 67.742314][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.750385][ T5965] veth1_macvtap: entered promiscuous mode [ 67.757290][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.765591][ T5959] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.768328][ T5959] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.771037][ T5959] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.773733][ T5959] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.790610][ T5957] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.792064][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.816014][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.820676][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.838875][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.843787][ T5956] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.847862][ T5956] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.851428][ T5956] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.855603][ T5956] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.872274][ T5965] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.876207][ T5965] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.879834][ T5965] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.883498][ T5965] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.902117][ T6048] tipc: Started in network mode [ 67.904316][ T6048] tipc: Node identity 4, cluster identity 4711 [ 67.907394][ T6048] tipc: Node number set to 4 [ 67.917309][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.920752][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.973355][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.980240][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.012587][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.020139][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.073632][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.083254][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.096074][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.098911][ T6054] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.102643][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.119803][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.123472][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.227610][ T6064] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.245800][ T5315] Bluetooth: hci0: command tx timeout [ 68.245827][ T5962] Bluetooth: hci3: command tx timeout [ 68.246510][ T5966] Bluetooth: hci2: command tx timeout [ 68.246558][ T5970] Bluetooth: hci1: command tx timeout [ 68.316146][ T6074] netlink: 'syz.3.8': attribute type 2 has an invalid length. [ 68.319056][ T6074] netlink: 100 bytes leftover after parsing attributes in process `syz.3.8'. [ 68.322904][ T6074] netlink: 'syz.3.8': attribute type 2 has an invalid length. [ 68.325748][ T6074] netlink: 100 bytes leftover after parsing attributes in process `syz.3.8'. [ 68.329871][ T6074] Zero length message leads to an empty skb [ 68.411867][ T6081] random: crng reseeded on system resumption [ 68.421455][ T6081] Restarting kernel threads ... [ 68.424086][ T6081] Done restarting kernel threads. [ 68.503097][ T6089] capability: warning: `syz.1.13' uses deprecated v2 capabilities in a way that may be insecure [ 68.565985][ T6091] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 68.603273][ T6095] sctp: [Deprecated]: syz.3.15 (pid 6095) Use of struct sctp_assoc_value in delayed_ack socket option. [ 68.603273][ T6095] Use struct sctp_sack_info instead [ 68.653115][ T40] kauditd_printk_skb: 74 callbacks suppressed [ 68.653130][ T40] audit: type=1400 audit(1753649548.821:164): avc: denied { create } for pid=6100 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.671551][ T6101] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16'. [ 68.676641][ T6101] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16'. [ 68.727519][ T40] audit: type=1400 audit(1753649548.901:165): avc: denied { write } for pid=6100 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.746084][ T6104] netlink: 72 bytes leftover after parsing attributes in process `syz.3.16'. [ 68.750299][ T40] audit: type=1400 audit(1753649548.921:166): avc: denied { create } for pid=6100 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.758569][ T40] audit: type=1400 audit(1753649548.921:167): avc: denied { setopt } for pid=6100 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.770340][ T40] audit: type=1400 audit(1753649548.941:168): avc: denied { watch watch_reads } for pid=6105 comm="syz.1.18" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.787832][ T40] audit: type=1400 audit(1753649548.961:169): avc: denied { unmount } for pid=5965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.847451][ T6120] netlink: 'syz.3.21': attribute type 1 has an invalid length. [ 68.853132][ T40] audit: type=1400 audit(1753649549.021:170): avc: denied { create } for pid=6119 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 68.882735][ T40] audit: type=1400 audit(1753649549.051:171): avc: denied { create } for pid=6123 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.892952][ T40] audit: type=1400 audit(1753649549.051:172): avc: denied { ioctl } for pid=6123 comm="syz.1.23" path="socket:[9330]" dev="sockfs" ino=9330 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.906965][ T40] audit: type=1400 audit(1753649549.081:173): avc: denied { allowed } for pid=6126 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 68.989375][ T6134] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 69.023543][ T6134] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.028508][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'. [ 69.093150][ T6145] 9pnet_fd: Insufficient options for proto=fd [ 69.160057][ T6156] capability: warning: `syz.1.31' uses 32-bit capabilities (legacy support in use) [ 69.205299][ T6162] netlink: 'syz.1.32': attribute type 9 has an invalid length. [ 69.590588][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 69.657884][ T6194] veqh0_vir`Yti: renamed from veth0_vlan (while UP) [ 69.897464][ T6212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.902500][ T6212] netlink: 144 bytes leftover after parsing attributes in process `syz.0.46'. [ 69.933378][ T6215] team0: No ports can be present during mode change [ 70.205761][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'. [ 70.208517][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 70.211401][ T6237] netlink: 'syz.0.55': attribute type 11 has an invalid length. [ 70.250164][ T6246] syz.3.57: attempt to access beyond end of device [ 70.250164][ T6246] loop3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 70.261412][ T6246] MINIX-fs: unable to read superblock [ 70.273139][ T6252] netlink: 'syz.0.58': attribute type 1 has an invalid length. [ 70.296306][ T6252] vlan2: entered allmulticast mode [ 70.300280][ T6252] veth1: entered allmulticast mode [ 70.324973][ T5962] Bluetooth: hci0: command tx timeout [ 70.327287][ T5962] Bluetooth: hci1: command tx timeout [ 70.327698][ T5315] Bluetooth: hci2: command tx timeout [ 70.327762][ T5970] Bluetooth: hci3: command tx timeout [ 70.377158][ T6261] netlink: 'syz.1.60': attribute type 10 has an invalid length. [ 70.384814][ T6261] hsr_slave_0: left promiscuous mode [ 70.388073][ T6261] hsr_slave_1: left promiscuous mode [ 70.429938][ T6269] tipc: Started in network mode [ 70.432111][ T6269] tipc: Node identity 000000000000000003, cluster identity 4711 [ 70.555771][ T6281] af_packet: tpacket_rcv: packet too big, clamped from 57 to 4294967272. macoff=96 [ 70.577001][ T6285] syz.0.66: attempt to access beyond end of device [ 70.577001][ T6285] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 70.582345][ T6285] vxfs: unable to read disk superblock at 1 [ 70.587174][ T6285] syz.0.66: attempt to access beyond end of device [ 70.587174][ T6285] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 70.592442][ T6285] vxfs: unable to read disk superblock at 8 [ 70.595558][ T6285] vxfs: can't find superblock. [ 70.674344][ T6300] 9pnet_virtio: no channels available for device syz [ 70.982995][ T6331] : renamed from bond0 (while UP) [ 71.323338][ T6360] process 'syz.3.84' launched './file0' with NULL argv: empty string added [ 71.327667][ T6362] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 71.336783][ T6362] set match dimension is over the limit! [ 71.641155][ T6382] trusted_key: syz.2.93 sent an empty control message without MSG_MORE. [ 71.784350][ T6390] binder: 6389:6390 ioctl c0285443 200000000180 returned -22 [ 71.998632][ T6400] program syz.2.100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.075593][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.139752][ T6406] kvm: MWAIT instruction emulated as NOP! [ 72.224741][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 72.240074][ T6410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.244215][ T6392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.246477][ T6410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.256255][ T6392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.300581][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 72.304044][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 72.306653][ T24] usb 5-1: can't read configurations, error -71 [ 72.405739][ T5315] Bluetooth: hci1: command tx timeout [ 72.408235][ T5315] Bluetooth: hci2: command tx timeout [ 72.414674][ T5962] Bluetooth: hci0: command tx timeout [ 72.417207][ T5315] Bluetooth: hci3: command tx timeout [ 73.112876][ T6434] netlink: 'syz.2.111': attribute type 1 has an invalid length. [ 73.135490][ T6434] hub 9-0:1.0: USB hub found [ 73.137691][ T6434] hub 9-0:1.0: 1 port detected [ 73.254892][ T6440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6440 comm=syz.2.113 [ 73.344264][ T6444] syz.0.114: attempt to access beyond end of device [ 73.344264][ T6444] loop0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 73.351717][ T6444] isofs_fill_super: bread failed, dev=loop0, iso_blknum=16, block=32 [ 73.369620][ T6444] __nla_validate_parse: 4 callbacks suppressed [ 73.369636][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 73.472599][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 73.486227][ T6450] syz.3.116 uses obsolete (PF_INET,SOCK_PACKET) [ 73.671138][ T40] kauditd_printk_skb: 144 callbacks suppressed [ 73.671154][ T40] audit: type=1400 audit(1753649553.841:318): avc: denied { append } for pid=6454 comm="syz.3.118" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 73.673052][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.118'. [ 73.894941][ T6462] netlink: 'syz.3.121': attribute type 10 has an invalid length. [ 73.897446][ T6462] team0: Device bond0 is up. Set it down before adding it as a team port [ 74.061598][ T6485] netlink: 57 bytes leftover after parsing attributes in process `syz.3.122'. [ 74.121107][ T40] audit: type=1400 audit(1753649554.291:319): avc: denied { map } for pid=6488 comm="syz.2.126" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.136484][ T40] audit: type=1400 audit(1753649554.291:320): avc: denied { execute } for pid=6488 comm="syz.2.126" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.143953][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.126'. [ 74.170875][ T6492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.125'. [ 74.171304][ T40] audit: type=1400 audit(1753649554.341:321): avc: denied { create } for pid=6486 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.183194][ T40] audit: type=1400 audit(1753649554.341:322): avc: denied { setopt } for pid=6486 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.202722][ T6487] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6487 comm=syz.1.125 [ 74.254563][ T40] audit: type=1400 audit(1753649554.421:323): avc: denied { create } for pid=6493 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.270933][ T40] audit: type=1400 audit(1753649554.441:324): avc: denied { ioctl } for pid=6493 comm="syz.3.127" path="socket:[10849]" dev="sockfs" ino=10849 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.303648][ T40] audit: type=1400 audit(1753649554.441:325): avc: denied { bind } for pid=6493 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.312616][ T6499] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.128'. [ 74.383161][ T6503] netlink: 84 bytes leftover after parsing attributes in process `syz.3.130'. [ 74.418131][ T6499] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.128'. [ 74.485809][ T6509] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 74.489956][ T6509] overlayfs: missing 'lowerdir' [ 74.510635][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 74.552640][ T6515] ip6t_srh: unknown srh invflags 7D00 [ 74.574145][ T40] audit: type=1400 audit(1753649554.731:326): avc: denied { map } for pid=6513 comm="syz.3.133" path="/dev/comedi2" dev="devtmpfs" ino=1304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.613089][ T40] audit: type=1400 audit(1753649554.781:327): avc: denied { create } for pid=6518 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 74.687584][ T6512] bond0: entered promiscuous mode [ 74.692894][ T6512] bond_slave_0: entered promiscuous mode [ 74.699652][ T6512] bond_slave_1: entered promiscuous mode [ 74.702212][ T6512] bond0: entered allmulticast mode [ 74.704339][ T6512] bond_slave_0: entered allmulticast mode [ 74.709314][ T6512] bond_slave_1: entered allmulticast mode [ 74.715820][ T6526] netlink: 'syz.3.136': attribute type 2 has an invalid length. [ 74.834727][ T6533] loop2: detected capacity change from 0 to 7 [ 74.835495][ T6536] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 74.841463][ T6533] loop2: [ 74.842888][ T6533] loop2: partition table partially beyond EOD, truncated [ 74.853934][ T6537] netlink: 'syz.0.138': attribute type 10 has an invalid length. [ 74.863895][ T6529] tmpfs: Cannot disable swap on remount [ 74.871105][ T6537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.878874][ T6537] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 74.883402][ T6529] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 74.987946][ T6547] netlink: zone id is out of range [ 75.007353][ T6547] netlink: set zone limit has 4 unknown bytes [ 75.091619][ T6552] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 75.202884][ T6562] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.303669][ T6562] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.310322][ T6568] fuse: Bad value for 'user_id' [ 75.311989][ T6568] fuse: Bad value for 'user_id' [ 75.391110][ T6562] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.499710][ T6562] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.636774][ T6562] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.660693][ T6562] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.687197][ T6562] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.698031][ T6562] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.753789][ T6592] netlink: 'syz.0.156': attribute type 13 has an invalid length. [ 75.757735][ T6599] netlink: 'syz.3.159': attribute type 1 has an invalid length. [ 75.780598][ T6599] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 75.785037][ T6599] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 75.840123][ T6603] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.901158][ T6599] macvlan2: entered promiscuous mode [ 75.903968][ T6599] macvlan2: entered allmulticast mode [ 76.037605][ T6626] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 76.187411][ T6650] 9pnet_virtio: no channels available for device syz [ 76.273387][ T6665] tmpfs: Bad value for 'mpol' [ 76.293871][ T6669] netlink: 'syz.0.181': attribute type 11 has an invalid length. [ 76.320511][ T6674] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 76.345342][ T6669] xt_CT: No such helper "pptp" [ 76.346905][ T6678] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 76.361318][ T6678] CIFS: Unable to determine destination address [ 76.386287][ T6681] netem: change failed [ 76.411840][ T6681] block device autoloading is deprecated and will be removed. [ 76.417481][ T6681] syz.1.182: attempt to access beyond end of device [ 76.417481][ T6681] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 76.443834][ T6693] sock: sock_set_timeout: `syz.2.188' (pid 6693) tries to set negative timeout [ 76.454356][ T6698] netlink: 'syz.1.190': attribute type 22 has an invalid length. [ 76.466130][ T6698] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.469974][ T6698] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.473680][ T6698] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.477608][ T6698] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.483739][ T6698] netlink: 'syz.1.190': attribute type 22 has an invalid length. [ 76.489880][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.492760][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.529398][ T6695] bridge_slave_1: left allmulticast mode [ 76.531770][ T6695] bridge_slave_1: left promiscuous mode [ 76.534668][ T6695] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.541176][ T6695] bridge_slave_0: left allmulticast mode [ 76.543406][ T6695] bridge_slave_0: left promiscuous mode [ 76.547510][ T6695] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.701392][ T6709] syz.1.193 (6709): attempted to duplicate a private mapping with mremap. This is not supported. [ 76.707291][ T6709] tmpfs: Bad value for 'mpol' [ 77.424894][ T6731] sch_tbf: peakrate 6 is lower than or equals to rate 13184179348106243712 ! [ 77.488935][ T6742] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.492868][ T6742] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.496766][ T6742] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.500443][ T6742] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.505202][ T6742] vxlan0: entered promiscuous mode [ 77.550310][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.638415][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.726791][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.805682][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.835206][ T5962] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.840415][ T5962] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.843985][ T5962] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.847757][ T5962] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.851932][ T5962] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.951155][ T13] bridge_slave_1: left allmulticast mode [ 77.953789][ T13] bridge_slave_1: left promiscuous mode [ 77.957281][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.965674][ T13] bridge_slave_0: left allmulticast mode [ 77.968102][ T13] bridge_slave_0: left promiscuous mode [ 77.970608][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.014774][ T5315] Bluetooth: hci3: command tx timeout [ 78.301460][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.310948][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.318447][ T13] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 78.327750][ T13] bond0 (unregistering): Released all slaves [ 78.331266][ T6752] ======================================================= [ 78.331266][ T6752] WARNING: The mand mount option has been deprecated and [ 78.331266][ T6752] and is ignored by this kernel. Remove the mand [ 78.331266][ T6752] option from the mount to silence this warning. [ 78.331266][ T6752] ======================================================= [ 78.350447][ T6752] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 78.352546][ T6753] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 78.443373][ T6744] chnl_net:caif_netlink_parms(): no params data found [ 78.619291][ T6774] __nla_validate_parse: 16 callbacks suppressed [ 78.619309][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'. [ 78.703395][ T6744] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.706991][ T6744] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.710266][ T6744] bridge_slave_0: entered allmulticast mode [ 78.714205][ T6744] bridge_slave_0: entered promiscuous mode [ 78.719993][ T6744] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.723438][ T6744] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.726059][ T40] kauditd_printk_skb: 60 callbacks suppressed [ 78.726073][ T40] audit: type=1400 audit(1753649558.901:388): avc: denied { getopt } for pid=6781 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.728000][ T6744] bridge_slave_1: entered allmulticast mode [ 78.741968][ T6744] bridge_slave_1: entered promiscuous mode [ 78.773784][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.213'. [ 78.787109][ T13] hsr_slave_0: left promiscuous mode [ 78.789565][ T13] hsr_slave_1: left promiscuous mode [ 78.791842][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.794392][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.801387][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.804803][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.823252][ T13] veth1_macvtap: left promiscuous mode [ 78.825711][ T13] veth0_macvtap: left promiscuous mode [ 78.827713][ T13] veth1_vlan: left promiscuous mode [ 78.857292][ T40] audit: type=1400 audit(1753649559.031:389): avc: denied { write } for pid=6788 comm="syz.1.215" path="socket:[13402]" dev="sockfs" ino=13402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.483911][ T13] team0 (unregistering): Port device team_slave_1 removed [ 79.582978][ T13] team0 (unregistering): Port device team_slave_0 removed [ 79.925069][ T5315] Bluetooth: hci2: command tx timeout [ 80.168119][ T6744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.291515][ T6744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.296477][ T6793] netlink: 'syz.2.216': attribute type 29 has an invalid length. [ 80.316822][ T6013] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 80.324120][ T6793] netlink: 'syz.2.216': attribute type 29 has an invalid length. [ 80.332018][ T40] audit: type=1400 audit(1753649560.501:390): avc: denied { read write } for pid=6795 comm="syz.1.217" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 80.341984][ T40] audit: type=1400 audit(1753649560.501:391): avc: denied { open } for pid=6795 comm="syz.1.217" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 80.352772][ T40] audit: type=1400 audit(1753649560.511:392): avc: denied { getopt } for pid=6795 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.354080][ T6793] netlink: 604 bytes leftover after parsing attributes in process `syz.2.216'. [ 80.373667][ T6794] netlink: 'syz.2.216': attribute type 29 has an invalid length. [ 80.380558][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'. [ 80.383430][ T6744] team0: Port device team_slave_0 added [ 80.385090][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'. [ 80.390766][ T6744] team0: Port device team_slave_1 added [ 80.391573][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'. [ 80.397671][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'. [ 80.453993][ T6744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.458106][ T6744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.470597][ T6744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.478739][ T6744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.481921][ T6744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.492202][ T6744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.514791][ T40] audit: type=1400 audit(1753649560.691:393): avc: denied { execute_no_trans } for pid=6812 comm="syz.2.221" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.530869][ T6811] kvm: emulating exchange as write [ 80.569246][ T6744] hsr_slave_0: entered promiscuous mode [ 80.572463][ T6744] hsr_slave_1: entered promiscuous mode [ 80.576088][ T6744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.578699][ T6744] Cannot create hsr debugfs directory [ 80.622596][ T6819] binder: 6818:6819 ioctl c0306201 2000000003c0 returned -14 [ 80.759073][ T6744] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.765503][ T6744] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.771698][ T6744] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.778731][ T6744] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.822905][ T6744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.841460][ T6744] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.848452][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.850853][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.858434][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.860892][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.996033][ T6744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.162303][ T6744] veth0_vlan: entered promiscuous mode [ 81.171611][ T6744] veth1_vlan: entered promiscuous mode [ 81.190600][ T6744] veth0_macvtap: entered promiscuous mode [ 81.195873][ T6744] veth1_macvtap: entered promiscuous mode [ 81.209000][ T6744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.218727][ T6744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.225663][ T6744] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.228688][ T6744] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.231814][ T6744] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.236021][ T6744] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.297610][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.300251][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.320659][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.323951][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.339464][ T40] audit: type=1400 audit(1753649561.511:394): avc: denied { mounton } for pid=6744 comm="syz-executor" path="/syzkaller.osdaD2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 81.399412][ T40] audit: type=1400 audit(1753649561.571:395): avc: denied { read } for pid=6852 comm="syz.2.227" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 81.409657][ T40] audit: type=1400 audit(1753649561.571:396): avc: denied { open } for pid=6852 comm="syz.2.227" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 81.420023][ T40] audit: type=1400 audit(1753649561.571:397): avc: denied { ioctl } for pid=6852 comm="syz.2.227" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 81.449068][ T6861] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 81.452274][ T6861] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 81.452458][ T6859] afs: Unknown parameter 'fsuuid' [ 81.459879][ T6861] overlayfs: failed to set uuid (60/file1, err=-13); falling back to uuid=null. [ 81.500273][ T6864] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 81.504324][ T6865] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio0-cursor) [ 81.556693][ T6873] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 81.623785][ T6881] netlink: 'syz.4.237': attribute type 15 has an invalid length. [ 81.812374][ T6888] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 81.815441][ T6888] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 81.821688][ T6888] vhci_hcd vhci_hcd.0: Device attached [ 81.827073][ T6893] vhci_hcd: connection closed [ 81.828324][ T1142] vhci_hcd: stop threads [ 81.833431][ T1142] vhci_hcd: release socket [ 81.835623][ T1142] vhci_hcd: disconnect device [ 82.004727][ T5315] Bluetooth: hci2: command tx timeout [ 82.007335][ T6906] macvlan3: entered promiscuous mode [ 82.009633][ T6906] macvlan3: entered allmulticast mode [ 82.017040][ T6907] macvlan4: entered promiscuous mode [ 82.019233][ T6907] macvlan4: entered allmulticast mode [ 82.027113][ T6906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.245'. [ 82.048647][ T6909] loop6: detected capacity change from 0 to 524287999 [ 82.052782][ T6909] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.057576][ T6909] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.061000][ T6909] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.064215][ T6909] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.068478][ T6909] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.071698][ T6909] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.075102][ T6909] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.079578][ T6909] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.082620][ T6909] ldm_validate_partition_table(): Disk read failed. [ 82.086449][ T6909] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.089804][ T6909] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.093328][ T6909] Dev loop6: unable to read RDB block 0 [ 82.096500][ T6909] loop6: unable to read partition table [ 82.099064][ T6909] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 82.099390][ T6912] IPv6: addrconf: prefix option has invalid lifetime [ 82.277250][ T6928] netlink: 'syz.4.250': attribute type 30 has an invalid length. [ 82.280919][ T6928] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 82.286394][ T6928] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 82.385963][ T6936] netlink: 'syz.2.252': attribute type 30 has an invalid length. [ 82.450896][ T6941] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 82.453784][ T6941] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 82.459602][ T6941] vhci_hcd vhci_hcd.0: Device attached [ 82.471950][ T6943] vhci_hcd: connection closed [ 82.473627][ T1177] vhci_hcd: stop threads [ 82.478633][ T1177] vhci_hcd: release socket [ 82.480530][ T1177] vhci_hcd: disconnect device [ 82.546088][ T6955] netlink: 52 bytes leftover after parsing attributes in process `syz.2.258'. [ 82.617795][ T6961] fuse: Unknown parameter 'roѕotmode' [ 82.618796][ T6964] netlink: 156 bytes leftover after parsing attributes in process `syz.1.257'. [ 82.622447][ T6963] misc userio: Can't change port type on an already running userio instance [ 82.626629][ T6961] erspan0: entered promiscuous mode [ 82.630393][ T6961] batadv_slave_1: entered promiscuous mode [ 82.896550][ T6979] netlink: 'syz.1.266': attribute type 21 has an invalid length. [ 83.068827][ T6987] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20004 [ 83.074788][ T6988] IPVS: Error joining to the multicast group [ 83.080107][ T6988] fuse: Bad value for 'group_id' [ 83.082015][ T6988] fuse: Bad value for 'group_id' [ 83.154678][ T9] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 83.218628][ T6993] block device autoloading is deprecated and will be removed. [ 83.309732][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.313400][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.323686][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 83.327875][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.550420][ T9] usb 7-1: usb_control_msg returned -32 [ 83.553386][ T9] usbtmc 7-1:16.0: can't read capabilities [ 83.721548][ T7009] Cannot find set identified by id 0 to match [ 83.838144][ T7015] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 83.905691][ T7015] syzkaller0: entered promiscuous mode [ 83.907904][ T7015] syzkaller0: entered allmulticast mode [ 83.914013][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 83.914024][ T40] audit: type=1400 audit(1753649564.081:413): avc: denied { watch_mount } for pid=7014 comm="syz.4.281" path="/18" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 83.914783][ T7015] __nla_validate_parse: 5 callbacks suppressed [ 83.914796][ T7015] netlink: 182632 bytes leftover after parsing attributes in process `syz.4.281'. [ 83.922843][ T40] audit: type=1400 audit(1753649564.091:414): avc: denied { bind } for pid=7018 comm="syz.3.282" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.938517][ T40] audit: type=1400 audit(1753649564.091:415): avc: denied { node_bind } for pid=7018 comm="syz.3.282" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 84.084674][ T5315] Bluetooth: hci2: command tx timeout [ 84.933551][ T7030] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 85.034871][ T40] audit: type=1400 audit(1753649565.211:416): avc: denied { shutdown } for pid=7033 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.167491][ T40] audit: type=1400 audit(1753649565.341:417): avc: denied { create } for pid=7047 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 85.169560][ T7048] use of bytesused == 0 is deprecated and will be removed in the future, [ 85.179806][ T7048] use the actual size instead. [ 85.188808][ T40] audit: type=1400 audit(1753649565.361:418): avc: denied { listen } for pid=7045 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.230772][ T7052] netlink: 168 bytes leftover after parsing attributes in process `syz.1.291'. [ 85.234765][ T7052] netlink: 168 bytes leftover after parsing attributes in process `syz.1.291'. [ 85.249567][ T40] audit: type=1400 audit(1753649565.421:419): avc: denied { accept } for pid=7045 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.259622][ T40] audit: type=1400 audit(1753649565.431:420): avc: denied { create } for pid=7045 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.268501][ T40] audit: type=1400 audit(1753649565.431:421): avc: denied { create } for pid=7045 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 85.571517][ T7071] cdrom: dropping to single frame dma [ 85.617630][ T7080] random: crng reseeded on system resumption [ 85.619031][ T40] audit: type=1400 audit(1753649565.791:422): avc: denied { append } for pid=7079 comm="syz.1.297" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 85.638256][ T7080] netlink: 108 bytes leftover after parsing attributes in process `syz.1.297'. [ 85.643248][ T7080] netlink: 108 bytes leftover after parsing attributes in process `syz.1.297'. [ 85.646925][ T7080] netlink: 84 bytes leftover after parsing attributes in process `syz.1.297'. [ 85.852875][ T7081] block nbd1: shutting down sockets [ 85.908817][ T1346] usb 7-1: USB disconnect, device number 2 [ 85.949185][ T7091] program syz.2.303 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.958306][ T7089] ref_ctr going negative. vaddr: 0x200000ffc004, curr val: -29824, delta: 1 [ 85.963209][ T7089] ref_ctr increment failed for inode: 0x9d offset: 0x7 ref_ctr_offset: 0x4 of mm: 0xffff88805a483200 [ 86.006460][ T7095] block nbd2: Unsupported socket: shutdown callout must be supported. [ 86.009488][ T7093] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 86.016059][ T7093] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 86.160950][ T7108] cgroup: Name too long [ 86.165341][ T5315] Bluetooth: hci0: command 0x0c20 tx timeout [ 86.165361][ T5962] Bluetooth: hci2: command tx timeout [ 86.215672][ T7115] comedi comedi0: Minor 48 is invalid! [ 86.556858][ T7133] syz_tun: entered allmulticast mode [ 86.594986][ T7132] syz_tun: left allmulticast mode [ 86.729521][ T55] cfg80211: failed to load regulatory.db [ 86.734915][ T7142] netlink: 'syz.1.317': attribute type 4 has an invalid length. [ 86.940816][ T7151] fuse: Bad value for 'fd' [ 87.063894][ T7169] netlink: 52 bytes leftover after parsing attributes in process `syz.3.327'. [ 87.146212][ T5962] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 87.150840][ T5962] CPU: 3 UID: 0 PID: 5962 Comm: kworker/u33:2 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 87.150867][ T5962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.150880][ T5962] Workqueue: hci1 hci_rx_work [ 87.150924][ T5962] Call Trace: [ 87.150932][ T5962] [ 87.150939][ T5962] dump_stack_lvl+0x16c/0x1f0 [ 87.150971][ T5962] sysfs_warn_dup+0x7f/0xa0 [ 87.151013][ T5962] sysfs_create_dir_ns+0x24b/0x2b0 [ 87.151042][ T5962] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 87.151070][ T5962] ? find_held_lock+0x2b/0x80 [ 87.151100][ T5962] ? do_raw_spin_unlock+0x172/0x230 [ 87.151124][ T5962] kobject_add_internal+0x2c4/0x9b0 [ 87.151148][ T5962] kobject_add+0x16e/0x240 [ 87.151167][ T5962] ? __pfx_kobject_add+0x10/0x10 [ 87.151188][ T5962] ? do_raw_spin_unlock+0x172/0x230 [ 87.151209][ T5962] ? kobject_put+0xab/0x5a0 [ 87.151234][ T5962] device_add+0x288/0x1a70 [ 87.151256][ T5962] ? __pfx_dev_set_name+0x10/0x10 [ 87.151279][ T5962] ? __pfx_device_add+0x10/0x10 [ 87.151317][ T5962] ? mgmt_send_event_skb+0x2fb/0x460 [ 87.151355][ T5962] hci_conn_add_sysfs+0x17e/0x230 [ 87.151377][ T5962] le_conn_complete_evt+0x1075/0x1d70 [ 87.151412][ T5962] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 87.151439][ T5962] ? hci_event_packet+0x459/0x11c0 [ 87.151474][ T5962] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 87.151504][ T5962] ? skb_pull_data+0x166/0x210 [ 87.151533][ T5962] hci_le_meta_evt+0x357/0x5e0 [ 87.151551][ T5962] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 87.151583][ T5962] hci_event_packet+0x682/0x11c0 [ 87.151615][ T5962] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 87.151635][ T5962] ? __pfx_hci_event_packet+0x10/0x10 [ 87.151667][ T5962] ? kcov_remote_start+0x3c9/0x6d0 [ 87.151687][ T5962] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.151721][ T5962] hci_rx_work+0x2c5/0x16b0 [ 87.151741][ T5962] ? rcu_is_watching+0x12/0xc0 [ 87.151765][ T5962] process_one_work+0x9cc/0x1b70 [ 87.151794][ T5962] ? __pfx_process_one_work+0x10/0x10 [ 87.151821][ T5962] ? assign_work+0x1a0/0x250 [ 87.151841][ T5962] worker_thread+0x6c8/0xf10 [ 87.151870][ T5962] ? __pfx_worker_thread+0x10/0x10 [ 87.151889][ T5962] kthread+0x3c2/0x780 [ 87.151907][ T5962] ? __pfx_kthread+0x10/0x10 [ 87.151926][ T5962] ? rcu_is_watching+0x12/0xc0 [ 87.151948][ T5962] ? __pfx_kthread+0x10/0x10 [ 87.151966][ T5962] ret_from_fork+0x5d4/0x6f0 [ 87.151992][ T5962] ? __pfx_kthread+0x10/0x10 [ 87.152017][ T5962] ret_from_fork_asm+0x1a/0x30 [ 87.152052][ T5962] [ 87.152776][ T5962] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 87.262378][ T5962] Bluetooth: hci1: failed to register connection device [ 87.434842][ T7207] random: crng reseeded on system resumption [ 87.443586][ T7207] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 87.449325][ T7207] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 87.453430][ T7207] overlayfs: missing 'lowerdir' [ 87.584729][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 87.746582][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.752605][ T9] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 87.761487][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.766614][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.773117][ T9] usb 7-1: Product: syz [ 87.775525][ T9] usb 7-1: Manufacturer: syz [ 87.777646][ T9] usb 7-1: SerialNumber: syz [ 87.880372][ T7234] netlink: 20 bytes leftover after parsing attributes in process `syz.3.347'. [ 87.885941][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.347'. [ 87.936019][ T7237] sctp: [Deprecated]: syz.1.348 (pid 7237) Use of int in maxseg socket option. [ 87.936019][ T7237] Use struct sctp_assoc_value instead [ 87.991529][ T7188] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 87.997042][ T7237] gretap1: entered allmulticast mode [ 88.000920][ T7237] bridge0: port 3(gretap1) entered blocking state [ 88.004408][ T7237] bridge0: port 3(gretap1) entered disabled state [ 88.010169][ T7237] gretap1: entered promiscuous mode [ 88.013016][ T7237] bridge0: port 3(gretap1) entered blocking state [ 88.015951][ T7237] bridge0: port 3(gretap1) entered forwarding state [ 88.202845][ T7246] tipc: Enabling of bearer rejected, failed to enable media [ 88.218256][ T9] cdc_ncm 7-1:1.0: bind() failure [ 88.234953][ T9] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 88.240005][ T9] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 88.246112][ T7211] ceph: No mds server is up or the cluster is laggy [ 88.246700][ T7203] ceph: No mds server is up or the cluster is laggy [ 88.252193][ T9] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 88.262012][ T9] usb 7-1: USB disconnect, device number 3 [ 88.345408][ T7262] No such timeout policy "syz0" [ 88.372525][ T1177] tipc: Subscription rejected, illegal request [ 88.420461][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.359'. [ 88.467320][ T7273] Bluetooth: MGMT ver 1.23 [ 88.531922][ T7276] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 88.548130][ T7278] futex_wake_op: syz.3.363 tries to shift op by 32; fix this program [ 88.635042][ T7280] ptrace attach of "/syz-executor exec"[5957] was attempted by ""[7280] [ 88.880377][ T87] Bluetooth: (null): Too short H5 packet [ 88.890634][ T87] Bluetooth: (null): Invalid header checksum [ 88.899137][ T87] Bluetooth: (null): Invalid header checksum [ 88.987927][ T1177] Bluetooth: (null): Invalid header checksum [ 89.047078][ T7300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.369'. [ 89.050041][ T7300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.369'. [ 89.080601][ T7291] syzkaller1: entered promiscuous mode [ 89.083002][ T7291] syzkaller1: entered allmulticast mode [ 89.105975][ T87] Bluetooth: (null): Invalid header checksum [ 89.136293][ T7305] netlink: 'syz.3.371': attribute type 10 has an invalid length. [ 89.162671][ T7305] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 89.170526][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.174008][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.178686][ T7305] team0: Device gtp0 is of different type [ 89.203207][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 89.310884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.346105][ T7311] netlink: 32 bytes leftover after parsing attributes in process `syz.1.374'. [ 89.570727][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 89.570741][ T40] audit: type=1400 audit(1753649825.735:448): avc: denied { listen } for pid=7337 comm="syz.3.384" lport=38769 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.579872][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.381'. [ 89.625876][ T40] audit: type=1400 audit(1753649825.795:449): avc: denied { accept } for pid=7337 comm="syz.3.384" lport=38769 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.650615][ T40] audit: type=1400 audit(1753649825.815:450): avc: denied { write } for pid=7337 comm="syz.3.384" lport=38769 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 89.660318][ T40] audit: type=1400 audit(1753649825.815:451): avc: denied { setopt } for pid=7337 comm="syz.3.384" lport=38769 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 89.678814][ T40] audit: type=1400 audit(1753649825.845:452): avc: denied { override_creds } for pid=7344 comm="syz.1.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 89.699868][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'. [ 89.703764][ T7345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.385'. [ 89.771579][ T7347] netlink: 60 bytes leftover after parsing attributes in process `syz.3.386'. [ 89.841870][ T7353] kvm: pic: non byte write [ 89.845621][ T1177] wlan1: Trigger new scan to find an IBSS to join [ 89.845973][ T7353] kvm: pic: non byte write [ 89.849735][ T7356] IPv6: addrconf: prefix option has invalid lifetime [ 89.851018][ T7353] kvm: pic: non byte write [ 89.914687][ T34] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 90.050592][ T7364] IPVS: persistence engine module ip_vs_pe_s not found [ 90.054618][ T34] usb 9-1: device descriptor read/64, error -71 [ 90.055854][ T7368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.391'. [ 90.068586][ T7362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7362 comm=syz.3.391 [ 90.215604][ T7370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5121 sclass=netlink_route_socket pid=7370 comm=syz.1.393 [ 90.222685][ T7370] netlink: 'syz.1.393': attribute type 11 has an invalid length. [ 90.289056][ T7377] netlink: 36 bytes leftover after parsing attributes in process `syz.1.394'. [ 90.324891][ T34] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 90.334778][ T40] audit: type=1400 audit(1753649826.495:453): avc: denied { map } for pid=7378 comm="syz.1.395" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.344343][ T40] audit: type=1400 audit(1753649826.495:454): avc: denied { execute } for pid=7378 comm="syz.1.395" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.466749][ T34] usb 9-1: device descriptor read/64, error -71 [ 90.508453][ T7390] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 90.511105][ T7390] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 90.514427][ T7390] vhci_hcd vhci_hcd.0: Device attached [ 90.518218][ T7391] vhci_hcd: cannot find a urb of seqnum 4294967226 max seqnum 0 [ 90.521679][ T93] vhci_hcd: stop threads [ 90.523187][ T93] vhci_hcd: release socket [ 90.526937][ T93] vhci_hcd: disconnect device [ 90.578323][ T34] usb usb9-port1: attempt power cycle [ 90.580854][ T40] audit: type=1400 audit(1753649826.745:455): avc: denied { setattr } for pid=7396 comm="syz.2.400" name="[io_uring]" dev="anon_inodefs" ino=18516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 90.676327][ T40] audit: type=1400 audit(1753649826.845:456): avc: denied { relabelfrom } for pid=7402 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 90.684432][ T40] audit: type=1400 audit(1753649826.845:457): avc: denied { relabelto } for pid=7402 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 90.822446][ T7411] netlink: 'syz.3.405': attribute type 4 has an invalid length. [ 90.924677][ T34] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 90.946773][ T34] usb 9-1: device descriptor read/8, error -71 [ 91.184640][ T34] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 91.205492][ T34] usb 9-1: device descriptor read/8, error -71 [ 91.325922][ T34] usb usb9-port1: unable to enumerate USB device [ 91.385925][ T7437] devtmpfs: Cannot change global quota limit on remount [ 91.389986][ T7437] devtmpfs: Cannot change global quota limit on remount [ 91.575400][ T7452] gfs2: Unknown parameter 'barrer' [ 91.693437][ T7458] warning: `syz.1.421' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.807879][ T7461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.985418][ T7477] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.989978][ T7477] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.072921][ T7477] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.077737][ T7477] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.204337][ T7477] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.208699][ T7477] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.275594][ T7477] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.279899][ T7477] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.368359][ T7477] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.372384][ T7477] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.385979][ T7477] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.389486][ T7477] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.401129][ T7477] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.405006][ T7477] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.412282][ T7477] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.415178][ T7477] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.538438][ T7490] netlink: 226 bytes leftover after parsing attributes in process `syz.2.432'. [ 92.542773][ T7490] sctp: [Deprecated]: syz.2.432 (pid 7490) Use of struct sctp_assoc_value in delayed_ack socket option. [ 92.542773][ T7490] Use struct sctp_sack_info instead [ 92.580689][ T34] IPVS: starting estimator thread 0... [ 92.666639][ T7495] IPVS: using max 45 ests per chain, 108000 per kthread [ 92.717444][ T7514] ipt_rpfilter: unknown options [ 93.454329][ T7553] No buffer was provided with the request [ 93.515186][ T7554] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 93.554603][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 93.706375][ T9] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 93.711834][ T9] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 93.717050][ T9] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 93.721331][ T9] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.725549][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.732315][ T7551] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 93.740179][ T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 94.346889][ T87] Bluetooth: Error in BCSP hdr checksum [ 94.361443][ T7591] __nla_validate_parse: 2 callbacks suppressed [ 94.361453][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.462'. [ 94.391726][ T7591] bond2: entered promiscuous mode [ 94.394204][ T7591] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.415815][ T7591] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.419054][ T7591] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 94.424103][ T7591] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 94.605878][ T93] Bluetooth: Error in BCSP hdr checksum [ 94.723562][ T7605] mmap: syz.3.465 (7605) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.729214][ T87] wlan1: Trigger new scan to find an IBSS to join [ 95.284708][ T5962] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 95.286046][ T5970] Bluetooth: hci0: command 0x0c20 tx timeout [ 95.615483][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.164806][ T5970] Bluetooth: hci4: command 0x1003 tx timeout [ 96.165090][ T5315] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 96.267471][ T7620] netlink: 212396 bytes leftover after parsing attributes in process `syz.2.468'. [ 96.397310][ T6006] usb 9-1: USB disconnect, device number 6 [ 96.434935][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 96.434983][ T40] audit: type=1400 audit(1753649832.595:479): avc: denied { write } for pid=7631 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 96.472936][ T7639] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 96.480166][ T40] audit: type=1400 audit(1753649832.645:480): avc: denied { write } for pid=7637 comm="syz.1.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.550347][ T40] audit: type=1400 audit(1753649832.715:481): avc: denied { mount } for pid=7644 comm="syz.1.476" name="/" dev="ramfs" ino=16716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 96.732670][ T40] audit: type=1400 audit(1753649832.895:482): avc: denied { append } for pid=7662 comm="syz.2.481" name="event3" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 96.743612][ T40] audit: type=1400 audit(1753649832.905:483): avc: denied { bind } for pid=7653 comm="syz.4.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.753151][ T40] audit: type=1400 audit(1753649832.915:484): avc: denied { setattr } for pid=7655 comm="syz.1.479" name="/" dev="9p" ino=35913909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.763283][ T40] audit: type=1400 audit(1753649832.925:485): avc: denied { associate } for pid=7655 comm="syz.1.479" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 96.847550][ T40] audit: type=1400 audit(1753649833.015:486): avc: denied { setattr } for pid=7669 comm="syz.4.483" path="socket:[18841]" dev="sockfs" ino=18841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.890591][ T7677] openvswitch: netlink: Flow actions attr not present in new flow. [ 96.934061][ T7680] openvswitch: netlink: Missing key (keys=40, expected=100) [ 97.154625][ T40] audit: type=1400 audit(1753649833.315:487): avc: denied { getattr } for pid=7683 comm="syz.4.487" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 97.168374][ T40] audit: type=1400 audit(1753649833.315:488): avc: denied { getopt } for pid=7683 comm="syz.4.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.194212][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.199200][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.202162][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.205304][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.207948][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.210577][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.213090][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.216075][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.218748][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.222153][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.225160][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.228802][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.232163][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.236425][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.239836][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.243245][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.247855][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.251376][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.258406][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.261930][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.265727][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.269110][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.272561][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.277422][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.280754][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.284155][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.289795][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.293900][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.298058][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.301552][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.305210][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.308178][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.311458][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.315018][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.318530][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.321901][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.326122][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.329453][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.332917][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.336639][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.340072][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.343375][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.347025][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.350313][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.353657][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.357685][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.361074][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.364323][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.368550][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.371897][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.375587][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.378885][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.382082][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.386124][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.389475][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.392711][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.397017][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.400395][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.403723][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.407485][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.410802][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.414067][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.418978][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.422322][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.425898][ T7690] binder: 7688:7690 ioctl c00c620f 200000000400 returned -22 [ 97.662427][ T7703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.672901][ T7707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.495'. [ 97.746133][ T7722] bad cache= option: none [ 97.746133][ T7722] [ 97.751293][ T7722] CIFS: VFS: bad cache= option: none [ 97.783294][ T7731] netlink: 28 bytes leftover after parsing attributes in process `syz.3.502'. [ 97.823959][ T7740] netlink: 'syz.3.506': attribute type 23 has an invalid length. [ 97.869396][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.508'. [ 97.888840][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.505'. [ 97.892864][ T7746] netlink: 'syz.4.505': attribute type 2 has an invalid length. [ 97.896360][ T7746] netlink: 'syz.4.505': attribute type 1 has an invalid length. [ 97.902055][ T7746] netlink: 'syz.4.505': attribute type 1 has an invalid length. [ 97.911460][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.505'. [ 97.942833][ T7743] netlink: 'syz.2.503': attribute type 2 has an invalid length. [ 97.946454][ T7743] netlink: 'syz.2.503': attribute type 1 has an invalid length. [ 97.949177][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'. [ 97.971896][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'. [ 98.375786][ T7773] syz.4.515: attempt to access beyond end of device [ 98.375786][ T7773] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 98.383285][ T7773] syz.4.515: attempt to access beyond end of device [ 98.383285][ T7773] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 98.389511][ T7773] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 98.393705][ T7773] syz.4.515: attempt to access beyond end of device [ 98.393705][ T7773] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 98.399093][ T7773] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 98.403154][ T7773] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 98.408426][ T7773] UDF-fs: Scanning with blocksize 512 failed [ 98.411508][ T7773] syz.4.515: attempt to access beyond end of device [ 98.411508][ T7773] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 98.415885][ T7773] syz.4.515: attempt to access beyond end of device [ 98.415885][ T7773] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 98.420523][ T7773] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 98.424196][ T7773] syz.4.515: attempt to access beyond end of device [ 98.424196][ T7773] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 98.434628][ T7773] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 98.438208][ T7773] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 98.441108][ T7773] UDF-fs: Scanning with blocksize 1024 failed [ 98.443829][ T7773] syz.4.515: attempt to access beyond end of device [ 98.443829][ T7773] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 98.450223][ T7773] syz.4.515: attempt to access beyond end of device [ 98.450223][ T7773] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 98.454940][ T7773] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 98.458205][ T7773] syz.4.515: attempt to access beyond end of device [ 98.458205][ T7773] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 98.462352][ T7773] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 98.465873][ T7773] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 98.468430][ T7773] UDF-fs: Scanning with blocksize 2048 failed [ 98.470997][ T7773] syz.4.515: attempt to access beyond end of device [ 98.470997][ T7773] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 98.477349][ T7773] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 98.481378][ T7773] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 98.485540][ T7773] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 98.488647][ T7773] UDF-fs: Scanning with blocksize 4096 failed [ 98.491205][ T7773] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 98.803880][ T7781] team0 (unregistering): Port device team_slave_0 removed [ 98.813639][ T7781] team0 (unregistering): Port device team_slave_1 removed [ 98.984915][ T7796] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 98.989608][ T7796] netlink: 'syz.4.521': attribute type 6 has an invalid length. [ 98.993570][ T7796] netlink: 'syz.4.521': attribute type 6 has an invalid length. [ 99.028836][ T7796] SELinux: failed to load policy [ 99.088729][ T7809] netlink: 277 bytes leftover after parsing attributes in process `syz.3.525'. [ 99.152672][ T7815] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.158138][ T7815] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.162811][ T7815] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.167068][ T7815] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.173472][ T7815] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.177240][ T7815] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.180420][ T7815] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.183743][ T7815] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.296339][ T7826] overlay: ./file0 is not a directory [ 99.401884][ T7840] fuse: Unknown parameter '`0x000000000000000c' [ 99.773556][ T7851] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7851 comm=syz.2.539 [ 99.832782][ T7852] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7852 comm=syz.2.539 [ 100.209238][ T7857] x_tables: duplicate underflow at hook 2 [ 100.227072][ T7864] Cannot find set identified by id 3 to match [ 100.438454][ T7886] vlan2: entered promiscuous mode [ 100.440626][ T7886] hsr_slave_1: entered promiscuous mode [ 100.443148][ T7886] vlan2: entered allmulticast mode [ 100.445898][ T7886] hsr_slave_1: entered allmulticast mode [ 100.574880][ T5970] Bluetooth: hci2: command 0x0405 tx timeout [ 100.823858][ T7907] syz.1.556 (7907) used greatest stack depth: 20744 bytes left [ 101.043715][ T7927] __nla_validate_parse: 2 callbacks suppressed [ 101.043732][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'. [ 101.053704][ T7929] random: crng reseeded on system resumption [ 101.068497][ T7929] Restarting kernel threads ... [ 101.071120][ T7929] Done restarting kernel threads. [ 101.077955][ T7929] Restarting kernel threads ... [ 101.080529][ T7929] Done restarting kernel threads. [ 101.265881][ T7945] 9pnet: Could not find request transport: virio [ 101.323570][ T7951] netlink: 72 bytes leftover after parsing attributes in process `syz.2.569'. [ 101.487584][ T1142] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.524215][ T7964] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 101.604004][ T1142] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.653196][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 101.653211][ T40] audit: type=1400 audit(1753649837.815:503): avc: denied { execute } for pid=7968 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 101.667912][ T40] audit: type=1400 audit(1753649837.825:504): avc: denied { execute_no_trans } for pid=7968 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 101.694435][ T1142] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.818937][ T1142] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.854689][ T5970] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 101.861265][ T5970] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 101.866276][ T5970] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 101.871968][ T5970] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 101.875713][ T5970] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.975212][ T1142] bridge_slave_1: left allmulticast mode [ 101.977886][ T1142] bridge_slave_1: left promiscuous mode [ 101.980305][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.986868][ T1142] bridge_slave_0: left allmulticast mode [ 101.989398][ T1142] bridge_slave_0: left promiscuous mode [ 101.992054][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.178613][ T1142] erspan0 (unregistering): left promiscuous mode [ 102.610690][ T7989] xt_hashlimit: size too large, truncated to 1048576 [ 103.936256][ T5315] Bluetooth: hci2: command tx timeout [ 105.862647][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.869829][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.875552][ T1142] bond0 (unregistering): Released all slaves [ 105.886443][ T7975] netlink: 36 bytes leftover after parsing attributes in process `syz.1.577'. [ 105.969136][ T8008] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 106.015535][ T5315] Bluetooth: hci2: command tx timeout [ 106.022090][ T7971] chnl_net:caif_netlink_parms(): no params data found [ 106.039262][ T8013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8013 comm=syz.1.584 [ 106.203573][ T7971] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.206256][ T7971] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.208740][ T7971] bridge_slave_0: entered allmulticast mode [ 106.211796][ T7971] bridge_slave_0: entered promiscuous mode [ 106.235116][ T7971] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.237561][ T7971] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.239959][ T7971] bridge_slave_1: entered allmulticast mode [ 106.243961][ T7971] bridge_slave_1: entered promiscuous mode [ 106.283912][ T7971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.297924][ T7971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.304037][ T1142] batadv_slave_1: left promiscuous mode [ 106.312639][ T1142] hsr_slave_0: left promiscuous mode [ 106.317724][ T1142] hsr_slave_1: left promiscuous mode [ 106.320599][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.323708][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.329815][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.332924][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.353418][ T1142] veth1_macvtap: left promiscuous mode [ 106.355624][ T1142] veth0_macvtap: left promiscuous mode [ 106.357582][ T1142] veth1_vlan: left promiscuous mode [ 106.359527][ T1142] veth0_vlan: left promiscuous mode [ 106.365234][ T40] audit: type=1400 audit(1753649842.535:505): avc: denied { write } for pid=8037 comm="syz.2.591" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 106.937436][ T40] audit: type=1800 audit(1753649843.095:506): pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.587" name="/" dev="fuse" ino=5 res=0 errno=0 [ 107.100468][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 107.191872][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 107.324680][ T55] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 107.464631][ T55] usb 6-1: device descriptor read/64, error -71 [ 107.535616][ T8054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.595'. [ 107.554944][ T40] audit: type=1400 audit(1753649843.715:507): avc: denied { write } for pid=8053 comm="syz.3.595" path="socket:[21531]" dev="sockfs" ino=21531 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.704684][ T55] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 107.802498][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 107.802521][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 107.809568][ T8043] netlink: 'syz.2.592': attribute type 30 has an invalid length. [ 107.845787][ T55] usb 6-1: device descriptor read/64, error -71 [ 107.855001][ T7971] team0: Port device team_slave_0 added [ 107.858519][ T7971] team0: Port device team_slave_1 added [ 107.927599][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 107.938749][ T40] audit: type=1400 audit(1753649844.105:508): avc: denied { mount } for pid=8064 comm="syz.3.599" name="/" dev="hugetlbfs" ino=21541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 107.939338][ T7971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.951397][ T7971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.963032][ T55] usb usb6-port1: attempt power cycle [ 107.964620][ T7971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.971005][ T7971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.974050][ T7971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.985240][ T7971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.067122][ T7971] hsr_slave_0: entered promiscuous mode [ 108.070361][ T7971] hsr_slave_1: entered promiscuous mode [ 108.073313][ T7971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.076986][ T7971] Cannot create hsr debugfs directory [ 108.087057][ T5315] Bluetooth: hci2: command tx timeout [ 108.113592][ T8074] netlink: 64 bytes leftover after parsing attributes in process `syz.3.603'. [ 108.122130][ T8074] netlink: 'syz.3.603': attribute type 11 has an invalid length. [ 108.125928][ T8074] netlink: 44 bytes leftover after parsing attributes in process `syz.3.603'. [ 108.146070][ T8077] misc userio: No port type given on /dev/userio [ 108.238099][ T8087] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 108.241395][ T8087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.607'. [ 108.280116][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.608'. [ 108.284115][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.608'. [ 108.291858][ T40] audit: type=1400 audit(1753649844.465:509): avc: denied { bind } for pid=8089 comm="syz.2.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 108.293211][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.608'. [ 108.306954][ T40] audit: type=1400 audit(1753649844.465:510): avc: denied { getopt } for pid=8089 comm="syz.2.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 108.328767][ T55] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 108.350389][ T7971] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.355274][ T55] usb 6-1: device descriptor read/8, error -71 [ 108.355577][ T7971] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 108.361833][ T8095] IPVS: set_ctl: invalid protocol: 41 172.30.0.4:20001 [ 108.363494][ T7971] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.370276][ T7971] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.418394][ T7971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.436555][ T7971] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.445891][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.448413][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.457650][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.460788][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.594746][ T55] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 108.628180][ T55] usb 6-1: device descriptor read/8, error -71 [ 108.628816][ T7971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.665136][ T8132] kvm: user requested TSC rate below hardware speed [ 108.683129][ T5315] Bluetooth: Wrong link type (-22) [ 108.693624][ T8132] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856151591 (22849212728 ns) > initial count (5743301600 ns). Using initial count to start timer. [ 108.733537][ T8140] netlink: 'syz.3.621': attribute type 4 has an invalid length. [ 108.739067][ T8140] wlan1: mtu less than device minimum [ 108.746643][ T55] usb usb6-port1: unable to enumerate USB device [ 108.748661][ T8140] netlink: 'syz.3.621': attribute type 2 has an invalid length. [ 108.752406][ T8140] netlink: 'syz.3.621': attribute type 1 has an invalid length. [ 108.759504][ T40] audit: type=1326 audit(1753649844.925:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8139 comm="syz.3.621" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a8a58e9a9 code=0x0 [ 108.822018][ T7971] veth0_vlan: entered promiscuous mode [ 108.836766][ T7971] veth1_vlan: entered promiscuous mode [ 108.859411][ T7971] veth0_macvtap: entered promiscuous mode [ 108.873384][ T7971] veth1_macvtap: entered promiscuous mode [ 108.876864][ T8145] overlayfs: failed to clone upperpath [ 108.890170][ T7971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.901154][ T7971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.909149][ T7971] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.912702][ T7971] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.915685][ T7971] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.918603][ T7971] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.960170][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.963595][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.991414][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.995232][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.068208][ T8148] netfs: Couldn't get user pages (rc=-14) [ 109.074522][ T40] audit: type=1400 audit(1753649845.235:512): avc: denied { map } for pid=8147 comm="syz.2.623" path="/154/file0/cpu.stat" dev="9p" ino=35913974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.093924][ T40] audit: type=1400 audit(1753649845.235:513): avc: denied { execute } for pid=8147 comm="syz.2.623" path="/154/file0/cpu.stat" dev="9p" ino=35913974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.333640][ T8161] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 109.333640][ T8161] The task syz.5.625 (8161) triggered the difference, watch for misbehavior. [ 109.414781][ T8167] random: crng reseeded on system resumption [ 109.415168][ T40] audit: type=1400 audit(1753649845.575:514): avc: denied { read } for pid=8166 comm="syz.2.628" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 109.429640][ T8167] fuse: Bad value for 'user_id' [ 109.431424][ T8167] fuse: Bad value for 'user_id' [ 109.628470][ T8184] MTD: Attempt to mount non-MTD device "/dev/md0" [ 109.633410][ T8184] bio_check_eod: 2 callbacks suppressed [ 109.633427][ T8184] syz.2.633: attempt to access beyond end of device [ 109.633427][ T8184] md0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 109.929468][ T40] audit: type=1400 audit(1753649846.095:515): avc: denied { mounton } for pid=8187 comm="syz.2.634" path="/163/file0/file0" dev="9p" ino=35913914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.943352][ T8188] cgroup2: Unknown parameter 'euid' [ 110.052945][ T8190] binder: 8189:8190 ioctl 8924 200000001400 returned -22 [ 110.164804][ T5315] Bluetooth: hci2: command tx timeout [ 110.221136][ T8200] binder: BINDER_SET_CONTEXT_MGR already set [ 110.226044][ T8200] binder: 8196:8200 ioctl 4018620d 2000000002c0 returned -16 [ 110.468107][ T8226] overlayfs: failed to clone upperpath [ 110.505650][ T8229] sctp: [Deprecated]: syz.1.643 (pid 8229) Use of int in maxseg socket option. [ 110.505650][ T8229] Use struct sctp_assoc_value instead [ 111.041931][ T8199] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.045678][ T8199] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.051032][ T8199] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.054935][ T8199] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.056933][ T8199] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.061346][ T8199] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.064986][ T8199] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.068395][ T8199] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.070601][ T8199] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.075071][ T8199] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.078596][ T8199] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.080692][ T8199] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 111.084900][ T8199] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 111.145136][ T8262] netlink: 'syz.5.655': attribute type 12 has an invalid length. [ 111.179340][ T8267] x_tables: duplicate underflow at hook 1 [ 111.182806][ T8269] macsec0: entered promiscuous mode [ 111.185614][ T8269] macsec0: entered allmulticast mode [ 111.187559][ T8269] veth1_macvtap: entered allmulticast mode [ 111.196561][ T8270] binder: 8255:8270 ioctl c0306201 200000000540 returned -14 [ 111.347658][ T8300] Invalid source name [ 111.349564][ T8300] UBIFS error (pid: 8300): cannot open "ubifs", error -22 [ 111.427748][ T87] bond0: (slave bond_slave_0): interface is now down [ 111.435063][ T87] bond0: (slave bond_slave_1): interface is now down [ 111.437995][ T87] bond0: (slave wlan1): interface is now down [ 111.446786][ T87] bond0: now running without any active interface! [ 111.447233][ T8307] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 111.452051][ T8307] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 111.456401][ T8307] vhci_hcd vhci_hcd.0: Device attached [ 111.634656][ T24] vhci_hcd: vhci_device speed not set [ 111.664408][ T8331] overlayfs: failed to clone upperpath [ 111.694565][ T24] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 111.715486][ T8328] binder: 8327:8328 ioctl c0306201 200000000080 returned -22 [ 112.036707][ T5970] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 112.173266][ T8364] batadv_slave_1: entered promiscuous mode [ 112.187298][ T8363] batadv_slave_1: left promiscuous mode [ 112.265735][ T8309] vhci_hcd: connection reset by peer [ 112.275766][ T87] vhci_hcd: stop threads [ 112.277623][ T87] vhci_hcd: release socket [ 112.281173][ T87] vhci_hcd: disconnect device [ 112.308132][ T5970] Bluetooth: hci0: unexpected event for opcode 0x0c2d [ 112.521903][ T8385] raw_sendmsg: syz.3.691 forgot to set AF_INET. Fix it! [ 112.525773][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 112.525787][ T40] audit: type=1400 audit(1753649848.695:526): avc: denied { nlmsg_read } for pid=8384 comm="syz.3.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 112.536983][ T40] audit: type=1400 audit(1753649848.695:527): avc: denied { read } for pid=8384 comm="syz.3.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.545495][ T40] audit: type=1400 audit(1753649848.695:528): avc: denied { read } for pid=8384 comm="syz.3.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.585649][ T8393] __nla_validate_parse: 18 callbacks suppressed [ 112.585665][ T8393] netlink: 820 bytes leftover after parsing attributes in process `syz.3.693'. [ 112.592979][ T8393] netlink: 820 bytes leftover after parsing attributes in process `syz.3.693'. [ 112.603062][ T40] audit: type=1400 audit(1753649848.765:529): avc: denied { nlmsg_read } for pid=8391 comm="syz.3.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.613771][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.693'. [ 112.761530][ T8414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.822259][ C3] Unknown status report in ack skb [ 113.066146][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 113.124951][ T5970] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.125012][ T5962] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.125034][ T5966] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.194629][ T9] usb 10-1: device descriptor read/64, error -71 [ 113.377897][ T8425] x_tables: duplicate underflow at hook 2 [ 113.381771][ T8426] x_tables: duplicate underflow at hook 2 [ 113.437574][ T8434] netlink: 'syz.1.705': attribute type 10 has an invalid length. [ 113.437600][ T8432] netlink: 'syz.1.705': attribute type 10 has an invalid length. [ 113.454673][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 113.463752][ T8434] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 113.472029][ T8434] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 113.486372][ T8434] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 113.513408][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.516883][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.595072][ T9] usb 10-1: device descriptor read/64, error -71 [ 113.717114][ T9] usb usb10-port1: attempt power cycle [ 113.722228][ T40] audit: type=1400 audit(1753649849.885:530): avc: denied { map } for pid=8456 comm="syz.2.712" path="socket:[21872]" dev="sockfs" ino=21872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.821282][ T40] audit: type=1400 audit(1753649849.985:531): avc: denied { watch } for pid=8458 comm="syz.1.713" path="/183/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 113.873644][ T8468] mac80211_hwsim hwsim9 `: renamed from wlan1 (while UP) [ 113.908041][ T8464] veth3: entered promiscuous mode [ 113.992927][ T8480] overlay: ./file0 is not a directory [ 114.039772][ T8486] overlayfs: failed to clone upperpath [ 114.054681][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 114.075882][ T40] audit: type=1400 audit(1753649850.245:532): avc: denied { connect } for pid=8487 comm="syz.3.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 114.084476][ T40] audit: type=1400 audit(1753649850.245:533): avc: denied { unmount } for pid=5965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 114.085447][ T9] usb 10-1: device descriptor read/8, error -71 [ 114.112025][ T8494] ucma_write: process 575 (syz.1.722) changed security contexts after opening file descriptor, this is not allowed. [ 114.147065][ T40] audit: type=1326 audit(1753649850.315:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8497 comm="syz.2.723" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f772218e9a9 code=0x0 [ 114.346875][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 114.365943][ T9] usb 10-1: device descriptor read/8, error -71 [ 114.485095][ T9] usb usb10-port1: unable to enumerate USB device [ 115.001594][ T8513] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 115.204673][ T5962] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.204915][ T5966] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.205863][ T5970] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.436088][ T8525] loop4: detected capacity change from 0 to 2560 [ 115.604852][ T8525] Invalid logical block size (-1) [ 115.887811][ T8527] sctp: [Deprecated]: syz.5.732 (pid 8527) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.887811][ T8527] Use struct sctp_sack_info instead [ 116.436019][ T8515] netlink: 'syz.3.727': attribute type 21 has an invalid length. [ 116.484676][ T5315] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 116.484692][ T5966] Bluetooth: hci4: command 0x1003 tx timeout [ 116.544803][ T5960] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 116.636100][ T8561] netem: incorrect ge model size [ 116.639293][ T8561] netem: change failed [ 116.684323][ T8564] bridge0: entered allmulticast mode [ 116.699869][ T5960] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 116.703738][ T5960] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.708824][ T5960] usb 10-1: Product: syz [ 116.710729][ T5960] usb 10-1: Manufacturer: syz [ 116.712806][ T5960] usb 10-1: SerialNumber: syz [ 116.721832][ T5960] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 116.750287][ T40] audit: type=1400 audit(1753649852.915:535): avc: denied { firmware_load } for pid=55 comm="kworker/1:1" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 116.769431][ T55] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 116.815132][ T24] vhci_hcd: vhci_device speed not set [ 116.957013][ T8577] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.976612][ T836] usb 10-1: USB disconnect, device number 6 [ 117.284778][ T5315] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.295024][ T5315] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.295376][ T5966] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.314749][ T8598] netlink: 'syz.2.752': attribute type 1 has an invalid length. [ 117.343089][ T8596] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 117.347767][ T8596] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 117.351595][ T8596] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 117.355661][ T8596] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 117.361580][ T8596] bond3: (slave geneve2): making interface the new active one [ 117.366386][ T8596] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 117.378189][ T8598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.752'. [ 117.466115][ T87] Bluetooth: hci4: Frame reassembly failed (-84) [ 117.507194][ T8607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.755'. [ 117.511164][ T8607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.755'. [ 117.653794][ T8623] libceph: resolve '40' (ret=-3): failed [ 117.702542][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 117.702557][ T40] audit: type=1400 audit(1753649853.865:537): avc: denied { accept } for pid=8626 comm="syz.2.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 117.718691][ T8628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.762'. [ 117.746451][ T8630] netlink: 56 bytes leftover after parsing attributes in process `syz.2.764'. [ 117.844789][ T55] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 117.849507][ T55] ath9k_htc: Failed to initialize the device [ 117.853263][ T836] usb 10-1: ath9k_htc: USB layer deinitialized [ 117.907506][ T40] audit: type=1400 audit(1753649854.075:538): avc: denied { bind } for pid=8633 comm="syz.2.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 117.914342][ T8634] geneve3: entered promiscuous mode [ 117.917538][ T8634] geneve3: entered allmulticast mode [ 118.433424][ T8646] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 118.439281][ T8646] netlink: 188348 bytes leftover after parsing attributes in process `syz.3.768'. [ 118.554935][ T8657] netlink: 'syz.2.772': attribute type 5 has an invalid length. [ 118.590031][ T40] audit: type=1400 audit(1753649854.755:539): avc: denied { watch } for pid=8660 comm="syz.2.774" path="/202/file0" dev="tmpfs" ino=1082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.601024][ T40] audit: type=1400 audit(1753649854.765:540): avc: denied { watch_sb } for pid=8660 comm="syz.2.774" path="/202/file0" dev="tmpfs" ino=1082 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.634947][ T8667] netlink: 344 bytes leftover after parsing attributes in process `syz.2.777'. [ 118.638346][ T8666] netlink: 344 bytes leftover after parsing attributes in process `syz.2.777'. [ 118.722059][ T8667] binder: 8664:8667 ioctl 401054d6 0 returned -22 [ 118.725034][ T8666] ------------[ cut here ]------------ [ 118.727243][ T8666] WARNING: CPU: 2 PID: 8666 at arch/x86/kvm/x86.c:11649 kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 118.730931][ T8666] Modules linked in: [ 118.733506][ T8666] CPU: 2 UID: 0 PID: 8666 Comm: syz.2.777 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 118.740481][ T8666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.744631][ T8666] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 118.747159][ T8666] Code: 0a 00 00 00 00 00 00 ff d5 0f 1f 00 31 ff 89 c5 89 c6 e8 47 5d 7a 00 85 ed 0f 8f f4 f0 ff ff e9 f5 f1 ff ff e8 f5 61 7a 00 90 <0f> 0b 90 e9 9c f0 ff ff e8 e7 61 7a 00 90 0f 0b 90 e9 d3 f0 ff ff [ 118.753515][ T40] audit: type=1400 audit(1753649854.915:541): avc: denied { module_request } for pid=8672 comm="syz.3.778" kmod="net-pf-16-proto-31" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 118.755100][ T8666] RSP: 0018:ffffc90003377c38 EFLAGS: 00010293 [ 118.766950][ T8666] RAX: 0000000000000000 RBX: ffff88805920d280 RCX: ffffffff81417737 [ 118.770217][ T8666] RDX: ffff888026ba0000 RSI: ffffffff8141869b RDI: 0000000000000007 [ 118.773300][ T8666] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 118.776766][ T8666] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88803482b000 [ 118.780079][ T8666] R13: ffff88805920d358 R14: 0000000000000000 R15: ffff88803482b120 [ 118.783505][ T8666] FS: 00007f7722f4f6c0(0000) GS:ffff8880d6920000(0000) knlGS:0000000000000000 [ 118.787586][ T8666] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.790192][ T8666] CR2: 000000005200000c CR3: 0000000033a60000 CR4: 0000000000352ef0 [ 118.793512][ T8666] Call Trace: [ 118.794769][ T8666] [ 118.795794][ T8666] kvm_vcpu_ioctl+0x5eb/0x1690 [ 118.797543][ T8666] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 118.799698][ T8666] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 118.802437][ T8666] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 118.805596][ T8666] ? hook_file_ioctl_common+0x145/0x410 [ 118.807932][ T8666] ? selinux_file_ioctl+0x180/0x270 [ 118.809973][ T8666] ? selinux_file_ioctl+0xb4/0x270 [ 118.812054][ T8666] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 118.814104][ T8666] __x64_sys_ioctl+0x18e/0x210 [ 118.816213][ T8666] do_syscall_64+0xcd/0x4c0 [ 118.818114][ T8666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.820540][ T8666] RIP: 0033:0x7f772218e9a9 [ 118.822033][ T8666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.829061][ T8666] RSP: 002b:00007f7722f4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.832553][ T8666] RAX: ffffffffffffffda RBX: 00007f77223b5fa0 RCX: 00007f772218e9a9 [ 118.835933][ T8666] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c [ 118.839273][ T8666] RBP: 00007f7722210d69 R08: 0000000000000000 R09: 0000000000000000 [ 118.842619][ T8666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.845864][ T8666] R13: 0000000000000000 R14: 00007f77223b5fa0 R15: 00007ffcf51f1d38 [ 118.849157][ T8666] [ 118.850456][ T8666] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 118.853411][ T8666] CPU: 2 UID: 0 PID: 8666 Comm: syz.2.777 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 118.858118][ T8666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.862605][ T8666] Call Trace: [ 118.863969][ T8666] [ 118.865168][ T8666] dump_stack_lvl+0x3d/0x1f0 [ 118.867025][ T8666] panic+0x71c/0x800 [ 118.868336][ T8666] ? __pfx_panic+0x10/0x10 [ 118.869831][ T8666] ? show_trace_log_lvl+0x29b/0x3e0 [ 118.871366][ T8666] ? check_panic_on_warn+0x1f/0xb0 [ 118.873031][ T8666] ? kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 118.875190][ T8666] check_panic_on_warn+0xab/0xb0 [ 118.876949][ T8666] __warn+0xf6/0x3c0 [ 118.878203][ T8666] ? kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 118.880135][ T8666] report_bug+0x3c3/0x580 [ 118.881570][ T8666] ? kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 118.883435][ T8666] handle_bug+0x184/0x210 [ 118.884834][ T8666] exc_invalid_op+0x17/0x50 [ 118.886521][ T8666] asm_exc_invalid_op+0x1a/0x20 [ 118.888067][ T8666] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x13bc/0x18c0 [ 118.890145][ T8666] Code: 0a 00 00 00 00 00 00 ff d5 0f 1f 00 31 ff 89 c5 89 c6 e8 47 5d 7a 00 85 ed 0f 8f f4 f0 ff ff e9 f5 f1 ff ff e8 f5 61 7a 00 90 <0f> 0b 90 e9 9c f0 ff ff e8 e7 61 7a 00 90 0f 0b 90 e9 d3 f0 ff ff [ 118.896210][ T8666] RSP: 0018:ffffc90003377c38 EFLAGS: 00010293 [ 118.898171][ T8666] RAX: 0000000000000000 RBX: ffff88805920d280 RCX: ffffffff81417737 [ 118.900960][ T8666] RDX: ffff888026ba0000 RSI: ffffffff8141869b RDI: 0000000000000007 [ 118.903550][ T8666] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 118.906394][ T8666] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88803482b000 [ 118.909299][ T8666] R13: ffff88805920d358 R14: 0000000000000000 R15: ffff88803482b120 [ 118.912238][ T8666] ? kvm_arch_vcpu_ioctl_run+0x457/0x18c0 [ 118.914395][ T8666] ? kvm_arch_vcpu_ioctl_run+0x13bb/0x18c0 [ 118.916568][ T8666] ? kvm_arch_vcpu_ioctl_run+0x13bb/0x18c0 [ 118.918726][ T8666] kvm_vcpu_ioctl+0x5eb/0x1690 [ 118.920479][ T8666] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 118.922341][ T8666] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 118.924757][ T8666] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 118.927392][ T8666] ? hook_file_ioctl_common+0x145/0x410 [ 118.929527][ T8666] ? selinux_file_ioctl+0x180/0x270 [ 118.931417][ T8666] ? selinux_file_ioctl+0xb4/0x270 [ 118.933266][ T8666] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 118.935166][ T8666] __x64_sys_ioctl+0x18e/0x210 [ 118.936998][ T8666] do_syscall_64+0xcd/0x4c0 [ 118.938706][ T8666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.941083][ T8666] RIP: 0033:0x7f772218e9a9 [ 118.943024][ T8666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.950550][ T8666] RSP: 002b:00007f7722f4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.953911][ T8666] RAX: ffffffffffffffda RBX: 00007f77223b5fa0 RCX: 00007f772218e9a9 [ 118.957211][ T8666] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c [ 118.960450][ T8666] RBP: 00007f7722210d69 R08: 0000000000000000 R09: 0000000000000000 [ 118.963695][ T8666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.966883][ T8666] R13: 0000000000000000 R14: 00007f77223b5fa0 R15: 00007ffcf51f1d38 [ 118.970122][ T8666] [ 118.972183][ T8666] Kernel Offset: disabled [ 118.973973][ T8666] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:53:19 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000008 RCX=0000000000000008 RDX=0000000000000008 RSI=ffff88802a475438 RDI=ffff88802a474880 RBP=ffffc9000167f0b8 RSP=ffffc9000167f020 R8 =0000000000000001 R9 =0000000000000001 R10=00000000000000c8 R11=0000000000000001 R12=ffff88802a475438 R13=0000000000000100 R14=0000000000000005 R15=ffff88802a474880 RIP=ffffffff81985c6d RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6720000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f771fff5f98 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1e4472bc0b9aed81 5708c1d337a0df55 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 54a3b876986f99d5 e887824e13de3603 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b76f6f5009abb82d 66b168081cdf805a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7583546074fde072 fc5fbebc792b8457 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000036c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2044c8e42e0633c2 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d84f1a000000492e 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5c88ae81ff7b4ee2 6f3e7b000000492e ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f511e5f651ca562d 344e6d4e29507d9e ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0fc01dc0957b3e 4db3d83920c148cf ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc900069c0000 RBX=0000000000000000 RCX=ffff8881064c1070 RDX=000000000000009d RSI=ffffffff86a77118 RDI=ffff8881064c12d0 RBP=0000000000000001 RSP=ffffc900006a0b60 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000002c00 R12=0000000000000001 R13=0000000000004e20 R14=ffff8881064c1070 R15=0000000000000001 RIP=ffffffff86a77155 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6820000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0a8b2e56c0 CR3=0000000032e50000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c4fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555577d3f550 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555577d4269d 0000555577d41930 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555577d459a4 0000555577d446c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 006c28000000b740 d808198003198004 5f90031c08005f88 032a08005f800310 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000fff0a47900 000000fff00a7bff fffe400000032400 0000000000a3bc00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e608000100000008 0606013bec000000 0000000000000000 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffdf08 3780030100000008 06368004040273e6 003435313230386c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e01ffffffffffff ffffed0836800304 8080100004800401 000000080606015a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030fffffffffffff 0403800303800404 a003180800049003 0180080010030008 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d62080a0080004e0 0300100004d00300 100004c003021000 04b0030010000390 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e01ffffffffffff ffffed0836800304 8080100004800401 000000080606015a ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010ca0a088801000 020176f818100005 8abfe8040100000c 0806060101da5fff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000043 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855a57c5 RDI=ffffffff9b0b9e60 RBP=ffffffff9b0b9e20 RSP=ffffc900033775a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000043 R14=ffffffff9b0b9e20 R15=ffffffff855a5760 RIP=ffffffff855a57ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f7722f4f6c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d6920000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005200000c CR3=0000000033a60000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7722211d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7722211d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7722211d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7722211d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7722211de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7722211ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff9adf87c0 RBX=0000000000000001 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8e5c4e00 RBP=ffff88802aa6a440 RSP=ffffc900041b6f78 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=ffffffff8e5c4e00 RIP=ffffffff819864fd RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f0a8b4c86c0 ffffffff 00c00000 GS =0000 ffff8880d6a20000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0a8b4c7f98 CR3=0000000033675000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002000 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf51f20c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7722211d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7722211d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7722211d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7722211d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7722211de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7722211ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000