last executing test programs: 1m45.042755399s ago: executing program 2 (id=211): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x7, 0xffffffff, 0x3234564e, 0x4, 0x81, 0x6, 0x5, 0x20000f9b, 0x0, 0x4, 0x0, 0x5}}) 1m44.982598007s ago: executing program 2 (id=214): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000380)={{0x2, 0x4e24, @empty}, {0x306}, 0x8, {0x2, 0x4e21, @private=0xa010102}, 'lo\x00'}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRES32=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r2}, 0x10) socket(0x400000010, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6, 0x7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20f752}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x8, 0x2, 0x3, "a677c17a5a000000009e7379d557d1ea22000000000200000000004000", 0x30314742}) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001200010a8000000000000000070000003df030da5e1918f30f50f7f09683f04bfc7d567fefc6fbe645253976d3acb91b2a0b431a6a20f06b1a9fe29842165a43cc5e7eb413a314c7788becb7bf7d78415699bd2ac6691080496388f47f92c28a7047c97132780f5d876af4db78b3496b1c42f90bdf1205675e2750b34c24721239d5768fc392d9846e922f2af6038684bf5549ba643f"], 0x14}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765000000040002800900010073797a30"], 0x108}}, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x3) 1m44.932244565s ago: executing program 2 (id=217): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x800, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@bridge_getneigh={0x88, 0x1e, 0x100, 0x70bd25, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x0, 0x80}, [@IFLA_PHYS_SWITCH_ID={0x4}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x696a9}, @IFLA_EXT_MASK={0x8, 0x1d, 0x1}, @IFLA_PHYS_SWITCH_ID={0x1e, 0x24, "3b75b55f34ea253fca0c5359046404eaebc9a9ab312fc3470a9a"}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x5}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_EVENT={0x8, 0x2c, 0x6}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x1f}]}, 0x88}}, 0x4000) (async) accept4(0xffffffffffffffff, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x80, 0x0) 1m44.872819127s ago: executing program 2 (id=218): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$CDROMVOLCTRL(r1, 0x530a, &(0x7f0000000040)={0x0, 0x10, 0x5, 0x1}) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) syz_open_dev$vcsa(&(0x7f0000000080), 0xf33b, 0x80c40) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000680)={{0x0, 0x0, 0x80}}) r2 = getpid() syz_pidfd_open(r2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, 0xffffffffffffffff}) setns(r3, 0x8000000) umount2(&(0x7f0000000040)='.\x00', 0x2) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x3f00, 0x0) 1m44.782700744s ago: executing program 2 (id=219): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) (async) wait4(r0, 0x0, 0x8, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) (async) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x14) (async) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560284606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@getlink={0x34, 0x12, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x18400, 0x2004}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x34}}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x100000000000f7) (async) read$watch_queue(r3, &(0x7f0000000000)=""/1, 0x1) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x1}) (async) keyctl$revoke(0x3, r2) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x8, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x81) (async) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000100)={&(0x7f0000000540)=[0xffffffff, 0x9, 0x9, 0x8, 0x4, 0x76b, 0x2, 0x6, 0x6, 0x40, 0x800, 0xf9b2, 0x5, 0x0, 0xc2e1, 0x6, 0xcef, 0x8, 0xf0000000, 0x7, 0x3, 0x132, 0xb3, 0x6, 0x0, 0x200, 0x6065, 0x4, 0x4, 0x9, 0x8001, 0x1, 0x400, 0x1, 0x8000, 0x1, 0xfffffffa, 0x0, 0x6, 0x3, 0x1, 0x0, 0x9, 0x7, 0x1000, 0xa, 0x8, 0x5, 0x3, 0x8, 0xcc4a, 0x2, 0x200, 0xff, 0x2, 0x9, 0x1, 0x4, 0x0, 0x400, 0x7ff, 0x9, 0x7ff, 0x7fffffff, 0x4, 0x9, 0x8, 0x7fffffff, 0xf7, 0x7, 0x7, 0x1, 0x6, 0x6, 0x9, 0x9, 0x4cf, 0x54, 0x8, 0x6, 0x400, 0x5, 0x400, 0x7fffffff, 0x40, 0x80000000, 0x3, 0x8000, 0xfffffffd, 0x2008, 0x100, 0x80000001, 0x7, 0x7, 0x5, 0x2, 0x9, 0x3866, 0x0, 0x5b, 0x7, 0x8, 0x4, 0x80000000, 0xe1, 0x7, 0x724f, 0x73, 0x2, 0x7, 0x3, 0xffff, 0x3ff, 0xffffffff, 0xf2, 0xc, 0x2, 0x81, 0x6f4, 0x8, 0x3a, 0x7, 0x0, 0x7, 0x9, 0x6, 0x5, 0x8, 0x8, 0x6, 0x8f, 0xffffff01, 0x3, 0xa, 0x0, 0x3, 0x9, 0xff, 0x7b, 0x0, 0x7765, 0x77, 0x9e, 0x840, 0x8, 0x8, 0xfff, 0x1, 0x7fffffff, 0x5, 0x9, 0x8059, 0xdf72, 0x2, 0xf237, 0xbe0, 0x4, 0x6e2a, 0x4b89, 0x9, 0x4, 0xa, 0x1000, 0x101, 0x4, 0x0, 0xf8, 0x8, 0x1, 0x7, 0x400, 0x6, 0x2, 0x2, 0x1, 0x9, 0x6, 0xfa, 0x0, 0x1, 0x2, 0x2, 0xc3, 0x4, 0x0, 0x3, 0x5, 0xfffffffd, 0xfffffa97, 0xffff0, 0x9, 0x8, 0x80000000, 0x1ff, 0x4, 0x8000, 0x6, 0x1, 0x2, 0x0, 0x3, 0x3dec, 0x1bb8b79c, 0x6, 0xa, 0x1, 0xf, 0xdd, 0x1, 0x80000001, 0xd4ac, 0x9, 0xd24, 0x1, 0x7, 0x9, 0xbe8, 0x5, 0xf8c, 0x7b, 0x5, 0x5, 0xc90, 0xffffb6d5, 0x7, 0x5, 0x5, 0x3, 0x1ff, 0x6, 0x4, 0x7, 0xfffffffd, 0x2, 0x7f, 0x0, 0x525, 0x2, 0xc, 0x8, 0xfffffa1b, 0x40, 0x9, 0xff, 0xffffff6b, 0xdb2, 0x5, 0xa, 0x80, 0x2, 0x80000001, 0xe9f, 0x0, 0x7, 0x5, 0x8, 0x9, 0x4, 0x8, 0x7, 0xd, 0x94a, 0x0, 0x7ff, 0x2, 0xffffff50, 0x47c, 0x7f, 0xd, 0x0, 0x1ff, 0x5, 0x9, 0x200, 0x6, 0xc04e, 0xd6, 0xc, 0x0, 0x1ff, 0x80000000, 0xd, 0x9, 0x6, 0x5, 0x4, 0x80, 0x7, 0xffffffd0, 0xffffb79f, 0x819, 0x8, 0x2, 0x5, 0xfb2, 0x0, 0x10, 0xd8, 0x0, 0xfffffff7, 0x6, 0xda, 0x1000, 0x8, 0xaf8, 0x7, 0x3, 0x3, 0x6, 0x4e8, 0x6, 0x7f, 0x2, 0x0, 0xbfe4, 0x1ff, 0x10, 0x8001, 0x4, 0x2, 0x80000000, 0x41, 0x5, 0xe7, 0xfffffffd, 0x40, 0x4, 0x6, 0x7, 0xfff, 0x44, 0xffffff4f, 0x2, 0x8, 0x1, 0x55e4595b, 0xba000000, 0x10001, 0x6, 0xffffffff, 0x40, 0x80000000, 0x8, 0xfffffffd, 0x22cc2e6d, 0x0, 0x1, 0x2, 0x9, 0x1, 0xffffffff, 0x8, 0x9, 0x80000001, 0xb, 0x1, 0x0, 0xfffffff2, 0x0, 0x3, 0x1, 0x7, 0x8, 0x7, 0x0, 0x42, 0x3, 0x401, 0x9, 0x9, 0x8ca7, 0xffff, 0x483, 0x2, 0xf, 0x5f3e, 0x80000000, 0x0, 0x0, 0x6, 0x1ff, 0x7fffffff, 0x2, 0x2, 0x7a14ffc8, 0x5, 0x8000, 0xfffff001, 0x101, 0x1, 0xb9, 0x400, 0x4, 0xffffffff, 0x4, 0xfffffff9, 0x3, 0x9338, 0x81, 0x2, 0x0, 0xe, 0x4, 0xffffffff, 0x72, 0xfa6f, 0x6, 0x6, 0x9, 0x4f21, 0x8b6, 0x8001, 0x66, 0x4, 0x3, 0x7, 0x1, 0x7, 0x3, 0x0, 0x10000, 0x117, 0x800, 0x5, 0x10000, 0x0, 0x3, 0xdd29, 0x1ff, 0x6, 0x6, 0x64, 0x8, 0x0, 0x2, 0x6, 0x3, 0xf, 0xb5, 0x9, 0x7, 0x7e6c, 0x1, 0x8, 0x3, 0x10001, 0x1, 0xa5b9, 0xfffffffa, 0xf, 0x10001, 0xedd, 0x2, 0x9, 0x2, 0x6bbb, 0xf0, 0x0, 0x8b, 0x3, 0x1, 0x6, 0xffff, 0xa, 0x0, 0x9, 0x2, 0x7, 0x8, 0x3, 0x5, 0x4, 0xfffffff8, 0xb, 0x1ff, 0x0, 0xf2d, 0x40000, 0x13fa6f00, 0x0, 0x9, 0xffffffdb, 0x9, 0x7, 0xa843, 0x5, 0x2, 0x818, 0x6, 0x0, 0xa, 0x8001, 0xff, 0xa5, 0x6d, 0xfffffff7, 0x0, 0x3078, 0xff, 0x4, 0x1, 0xd, 0x0, 0x4, 0x7, 0x2, 0xfffffff2, 0x6, 0x3, 0x5, 0x0, 0xfffffffb, 0x3b, 0x8, 0x209, 0x6, 0x7, 0x2, 0xa, 0xfffefffb, 0x761, 0x20, 0x7, 0x6, 0x100, 0x6, 0x400, 0x101, 0x2, 0xfffffffb, 0x2, 0x11, 0x67, 0x7, 0x3, 0x1, 0x8, 0x400, 0x5, 0x1, 0xfffffff7, 0x1, 0x1, 0x1, 0x7, 0x1516168d, 0x7, 0x7, 0xffffffff, 0x7fff, 0x7, 0x2, 0xb8a, 0x0, 0xff, 0x5, 0x1, 0x6, 0x4, 0x3, 0x943, 0x100, 0x80000, 0x1, 0x81, 0x1, 0x3cc1343b, 0x4, 0xd06f, 0x5, 0xf3, 0x2, 0x7, 0x3, 0x6, 0x1, 0x8000, 0x2, 0x4, 0x0, 0x100, 0x5, 0x800, 0x7, 0xffffffff, 0x7, 0x1, 0x1, 0x7, 0xbb1, 0x9, 0x3, 0x9, 0x8, 0x80000001, 0x6, 0x5, 0x72, 0x9, 0x5, 0x9, 0x8, 0x4, 0xffffffff, 0xffffffff, 0xffff, 0x89e9, 0x7, 0x10, 0x5, 0x1, 0x40, 0x3ff, 0x8, 0x2, 0x1, 0x7, 0x8001, 0x40, 0xe15, 0xb2e, 0x9, 0x80000001, 0x3ca7, 0xc34, 0x8001, 0x4b1, 0x1, 0x7, 0x6, 0xfffffc01, 0xc0000, 0x0, 0x8001, 0x3, 0x6689, 0x5, 0xfe54, 0x9, 0x5, 0x7, 0x5, 0x2, 0x2, 0x1000, 0x5, 0x0, 0x2, 0x1, 0x3, 0x6, 0xa, 0xa, 0x2, 0x7, 0x6, 0x1000, 0x3ff, 0x0, 0x0, 0x3, 0x1, 0xe, 0x1, 0x8, 0x4, 0x8, 0x8, 0x4000000, 0xffff, 0x9, 0x4, 0x17, 0x3ff, 0x3ff, 0x8, 0xaa9, 0x2, 0x401, 0x1ff, 0xf6f, 0x9, 0x101, 0x7, 0x38060, 0x1991, 0x0, 0x8, 0x8, 0x4, 0x9, 0x800, 0x8, 0x9, 0xf60, 0x6, 0x2, 0x9, 0xfffffffa, 0x7, 0x7f, 0x3ff, 0x7ff, 0x9, 0x0, 0x9, 0x7, 0x3, 0xfff, 0x3, 0x8, 0xa, 0x3c, 0x6, 0x4670, 0x5, 0xffffac3a, 0xbcc3, 0x68b, 0x800, 0x6, 0x1, 0x7, 0x6, 0x0, 0xfffffff7, 0xfffffffa, 0x6, 0x7, 0x2, 0x8, 0x100, 0xfffffff8, 0x5, 0x13, 0x2, 0x1, 0x8, 0x9, 0x3, 0x9333, 0x139, 0xd, 0x0, 0x8e, 0x960c, 0x401, 0x4, 0xdc60, 0x7fffffff, 0x400000, 0x8000, 0x401, 0x328e, 0x5, 0x9, 0x98, 0xfffff363, 0x5, 0x7, 0x8, 0x3, 0x137, 0xfffffffb, 0x40, 0x7, 0x7, 0x0, 0x32cf, 0x10000, 0x401, 0x8, 0x1000, 0x8, 0x5, 0x7, 0x5, 0x3a7, 0x7fffffff, 0x7fff, 0x1, 0xf432, 0x8001, 0x3, 0x3, 0x401, 0xfffffff9, 0xffff8000, 0x9, 0x665029d1, 0x15, 0x6, 0xa1, 0x47b, 0xffffff3b, 0x9, 0xb, 0x220e, 0x5, 0xffffffff, 0xffff, 0xffff, 0x9, 0xfffffff7, 0x100, 0x46, 0x4, 0x9, 0x9, 0x7, 0xffffffff, 0x4, 0x5, 0x2, 0x200, 0x9a6, 0x6, 0x2, 0x8, 0x5, 0xeed, 0x9, 0xffff, 0x4, 0x1000, 0x2, 0x3, 0x9, 0xd3c9, 0x401, 0x0, 0xfffffff8, 0x0, 0x327b, 0x8, 0x4, 0x4, 0x6, 0x3, 0x5e, 0xfffffff7, 0x7, 0xfffff800, 0xa, 0x2, 0x80000000, 0x8001, 0x10, 0x1, 0x84, 0x80000000, 0xfff, 0x7, 0x80000000, 0xfffffe01, 0xfffffffa, 0x6, 0x7, 0x52ed, 0x0, 0x6, 0xac9, 0x80000000, 0x4, 0x60a, 0x8, 0x1, 0x5, 0x7, 0x0, 0x7, 0x8, 0x9635, 0x6, 0x0, 0x1ad1, 0x6, 0x8, 0x4, 0x6, 0x5, 0x8, 0xc, 0x7ff, 0x6, 0x8001, 0x7fff, 0x81, 0xdc4, 0x0, 0x0, 0x936, 0x4, 0x8, 0x2, 0xfffff001, 0x100, 0x401, 0x6, 0xffffffff, 0x2, 0x6, 0xb, 0x3, 0x3, 0x1000, 0x1, 0x4, 0x0, 0x0, 0x4, 0x7, 0x2, 0x73, 0x4, 0x0, 0x2, 0x7f, 0x7, 0x401, 0x1, 0x2, 0xa2, 0x1, 0x100400, 0xfffffff9, 0x45, 0xe0d, 0x8, 0x3, 0x2f8, 0x9, 0x2c5, 0x4, 0xa, 0x7f, 0x9, 0x101, 0xa, 0x2, 0x408, 0x51c, 0x7, 0xbfa, 0xd, 0xf5, 0x3ff, 0x80000000, 0x10001, 0x6, 0xe7, 0x7, 0x7fffffff, 0x5, 0x7, 0x84, 0xffff088a, 0x5, 0x5, 0x4e07, 0xfffffffd, 0x4, 0x1, 0x7, 0x2, 0x0, 0x81, 0x2, 0x2, 0xffffffff, 0xc71, 0xfff, 0x4, 0x1, 0xfffffffe, 0x8, 0x1, 0x7, 0x48d, 0x401, 0x9, 0xff, 0x8000, 0x7, 0xfffffff9, 0x1, 0x4, 0x0, 0x1, 0x8001, 0x5, 0x4, 0x7, 0x3, 0x6325f41f, 0x562, 0x8, 0x0, 0x4, 0x3a, 0x7, 0x21a, 0x1, 0x2, 0x8, 0x5, 0x4, 0x40, 0x8000, 0x1, 0x9, 0x5644, 0x10, 0xfffffffe, 0x8, 0x2, 0x3, 0x3, 0x2, 0x2, 0x2, 0x0, 0x9, 0x3], 0x5, 0x400, 0x6}) (async) preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) 1m44.602720911s ago: executing program 2 (id=221): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xfff1, 0xffff}, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) (async) r4 = socket(0x23, 0x80805, 0x0) accept(r4, 0x0, 0x0) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x80, {[@fastopen={0x1e, 0x12, "2055b627913dcd709c5b32b0696ceb87"}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) 1m44.522754772s ago: executing program 32 (id=221): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xfff1, 0xffff}, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) (async) r4 = socket(0x23, 0x80805, 0x0) accept(r4, 0x0, 0x0) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x80, {[@fastopen={0x1e, 0x12, "2055b627913dcd709c5b32b0696ceb87"}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) 1m18.782698166s ago: executing program 4 (id=474): writev(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000001440)="e679", 0x2}], 0x1) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xff) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080), 0x4) 1m18.782435382s ago: executing program 4 (id=475): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@local}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xd}, [@algo_crypt={0x48, 0x4, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x184}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x7fff}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x2c}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x800000}, 0xc) 1m17.572654484s ago: executing program 4 (id=479): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7f}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001fff000802ee0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000085201001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32=0x0, @ANYBLOB="3e8e4d066948e13b1e0a5db1be7e1af3b9b862e3716616436ff1ff9ea41671a76a5633bbf562d679518d1fb815e31ab57849b19c86635fe4509e2e52735701033d1c38b91363893cfcd27ae23e82b86af9c7cf5f00f915bf1d93ab2e82c8a8c3c943a075c220b22795b75b61d43102c85e26"], 0x3c}}, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1m16.702576219s ago: executing program 4 (id=494): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000000010104000000000002000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000000800048004000380"], 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64=r1, @ANYRES16=r1], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x109, 0x0) chdir(&(0x7f0000000280)='./cgroup\x00') bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r7, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f27a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b7b8776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000580)="55bbeefbb9a13c80e6527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd230aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57712a9a4a6f8e948f5bbcbb8308ae67d57e70daa13148536e5cfe1eec171afbbf0a99f64a3b065896289be98f34a3ac141f9996f71a6c32cd9e930f86b9aa8d31e566b3e6f389abdb6943940ad3a772bf4639838127bd4775b1", 0x92}, {&(0x7f00000001c0)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbe123cb43ed522a35874f4503d56d44c71c7ab62adc0", 0x69}, {&(0x7f0000001880)="b732b06fd220a6dc6eed5ff60b0ebbf5380f98d4a1811f9a17f9b79521cb5554695fb065f2d1ed1bef7971962733ea71dd2bceb1cd2fe48164a445f3bb9289533f5ed32a8dc3a17c7f13e93222784f53df2d7e9f7bf3d47fa6440da1de8ac26628a8e1da8150f1a1d8f56351c6c37d7ad2279ad7d1043400e2281c863c243979070cd3920b5bee", 0x87}, {&(0x7f0000001940)="ac6aed94fbb8c7fecccf1fbe0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc0a3448434dca51f5bc1972720dc071c5c5e2358a62bb3d9ccb581431764476f92bc0dd581a715f7ff8cef23b35dceb96809ab4bfbc85cd9eed4820e2a821913e94ed62ce3b44103e31a82b7c14ea5dae6b42906b14cc21e24fcb7b255b5fd8b3d9eda621defc3f398cc545fb03d6549353921bb4a52b3230008f967ddc1ad8635d58667b82a58ec030a57d199f14b172133", 0xd2}, {&(0x7f0000002300)="0b41dae71fdbfbd927fcefd552617a67c06039347098f690358459d82800ee224faa7dcc81cff086255c05d8d5ee175f635bdb8853bf08b2605ada1c1cf8812456748282d57d86948df219e8422c2853df192f5fceb38fd57788af3fb5284e53393be844bac927edfb43d17da758dc2b9ad2fa87f8521a0f1889b362b32cef609d20392a2e680ae667158a9d831c6acd5854e2420a16ea245a7c26de40c041919f0de146884889aedac056c285012b270a78448caab41053c2017d15dafa284871f716173b8047f8b1ffdc5a8a", 0xcd}], 0x7}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000940)="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", 0x11a}, {&(0x7f0000002480)="9467776b9ec22f06151761843173440c3e9448d40384f222fec952053bd200bbc7ccef8e7c88fb0ae01fa531ad6deb000578a6c82661d5bf15bffe28cf236057bacc915533a7a58c9253414b4eea351e504828a7279ced0949ed778c25ae266f71689f85decb0b7cd62083d9dc4ff648d4fdd2e18f549308c1612433ea604d426ce3fe6b120bb7ec1a", 0x89}], 0x2}}], 0x3, 0x2000c044) sendto$inet(r7, &(0x7f00000004c0)="00031eed7121", 0x6, 0x16000000, 0x0, 0x0) 1m16.701992432s ago: executing program 4 (id=495): r0 = socket(0x40000000015, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_emit_ethernet(0x72, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr=0x64010102, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@remote}, {}, {@dev}, {@local}, {@dev}]}]}}}}}}}, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) r4 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000000)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0xfffffffc, '\x00', @string=&(0x7f0000000080)=0x11}}) sendmsg$rds(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffffffffffcf2}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x40002000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000140)={0x3ffc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, 0x0) setpgid(0x0, r7) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x10000, 0x0) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000080)=@in={0x2, 0x4e20, @local}, 0x80, 0x0}, 0x40) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) bind$inet(r8, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x420000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0xb0, 0x8, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x94, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x40, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1a}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x104, 0x3, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_USERDATA={0x79, 0xc, "983b53e4843eb8412e58e228b6c86cc8a738b1c5c0c3df2dfbf4c454b68ed362432cb05f891387531887859d9995522b61af9498e2f24e4ac94cf39851d9cc2d78c02cf64bb98359ce35fd78b4cf114ef5850ebe8ab70619f511eec9fb084e6a4e2f30bf79ce43c8f2544b38a5967a5bf631de5f00"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xaf}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5f9bfff2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x50184735}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan0\x00'}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x250}, 0x1, 0x0, 0x0, 0x8004}, 0x28090) 1m16.590319124s ago: executing program 4 (id=497): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async, rerun: 32) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) (rerun: 32) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000480)={r0, 0x0, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x12, 0x3, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) (async) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000100)={{0x1, 0x3}, 0x100, './file0\x00'}) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) 1m1.48922345s ago: executing program 33 (id=497): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async, rerun: 32) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) (rerun: 32) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000480)={r0, 0x0, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x12, 0x3, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) (async) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000100)={{0x1, 0x3}, 0x100, './file0\x00'}) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) 39.210499342s ago: executing program 1 (id=23): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000002140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='initcall_start\x00', r0}, 0x10) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r1, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x11) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0xa, 0x3, 0x3a) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r6}, 0xc) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, 0x0, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 31.801361006s ago: executing program 1 (id=23): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000002140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='initcall_start\x00', r0}, 0x10) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r1, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x11) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0xa, 0x3, 0x3a) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r6}, 0xc) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, 0x0, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 23.777495288s ago: executing program 1 (id=23): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000002140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='initcall_start\x00', r0}, 0x10) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r1, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x11) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0xa, 0x3, 0x3a) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r6}, 0xc) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, 0x0, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 18.300306167s ago: executing program 0 (id=1000): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) (async) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) signalfd(r0, &(0x7f0000000100)={[0x40000000000]}, 0x8) (async) r1 = signalfd(r0, &(0x7f0000000100)={[0x40000000000]}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, &(0x7f0000000280)={&(0x7f0000000200)=""/78, 0x4e}) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f00000002c0)) (async) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f00000002c0)) syz_open_dev$dri(&(0x7f0000000300), 0x6, 0x10100) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x3056, 0x10, 0xfffffffffffffff8, 0xfff}, &(0x7f0000000380)=0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000003c0)={r3, 0x1000, "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"}, &(0x7f0000001400)=0x1008) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) (async) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001500)={{r4, 0xffffffffffffffff}, &(0x7f0000001480), &(0x7f00000014c0)=r0}, 0x20) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000001580)={&(0x7f0000001540)=[0x0, 0x0], 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000001580)={&(0x7f0000001540)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000016c0)={&(0x7f00000015c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001600)=[0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x3, 0x5, 0x6}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000016c0)={&(0x7f00000015c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001600)=[0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x3, 0x5, 0x6}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000001740)={r7, 0x0, r10, 0x0, 0x0, 0x0, &(0x7f0000001700)}) poll(&(0x7f0000001780)=[{r5, 0x2000}, {r1, 0x4282}, {r5, 0x440}, {r0, 0x28}, {r4, 0x690}, {r4, 0x202}], 0x6, 0x7) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001800)=[@rthdrdstopts={{0x1020, 0x29, 0x37, {0x2b, 0x200, '\x00', [@generic={0xf9, 0x1000, "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"}, @enc_lim]}}}, @tclass={{0x14, 0x29, 0x43, 0x53494cee}}], 0x1038}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002840)="20e75e3da450391139a4fdae4f15e55a615a68b9f9fe0a1e7ba88e3d23eef3ddc86e4f56530b825649b3d2f9146dd03c35bfbf926bd3c1a5394bd08edfbf91e37a2d83e2f5b93799502272f1c2bb64d025", 0x51}, {&(0x7f00000028c0)="b761", 0x2}, {&(0x7f0000002900)="8d795091ce5a3ed049b9c0abdb55ff06ce9d255b06c232cac1c09744fc575d822799344f904e8e9c", 0x28}, {&(0x7f0000002940)="5585fb39a5151b2b303f7ca5f435045e0ed4a58f26568a3cd1e12a1f5b28edfc0ffc90667ddfbf91c311608fdce3b8f17ac086b2a10c00ad6f26bd520a6f71fdfc8e39869d7c739be95cf18b7ba457391c772ff9bd8ed7043d6c1b060a9055606f5965027532fa5ee717d29d18d81704", 0x70}], 0x4, &(0x7f0000002a00)=[@rthdr={{0x48, 0x29, 0x39, {0x61, 0x6, 0x1, 0x1, 0x0, [@loopback, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}], 0x48}}, {{&(0x7f0000002a80)={0xa, 0x4e24, 0x1, @mcast1, 0x8001}, 0x1c, &(0x7f0000002c40)=[{&(0x7f0000002ac0)="b3b6967842f01b341f0aa61409b43e77fd67728d914eeeb4489418f2c0eace1ca5aac11fc1d18bf7ac957b8379869bb5fa262234153e97ae7a2ebe252c2f6fd8d6102bef96b538bff276c52bee3ae26a0ea6f2fff8c0b33fee9d8c2544ece6aa9d7cac1a527ff2d955d7c79113a752a2857745e3f0b1b19fe84971fb21ed70f0368d72e0ec99b1cf45712abbcc5ae0008eabfde499827782df", 0x99}, {&(0x7f0000002b80)="1a3dd3f4384ae53e433965644bbaf78ab5d15d971f872efc620562f9f0b8d0497e3fb98c259f785b20a0b15665da2520b8a82b42f5e25e6e5445e02d2dd21c0f7785a97fa1a5944a134abd2bb6baf44efe4a7250f2c76151e16613a3b248c32f35edc6d0b5c4f854682e951de956d892309e1562186030d2211dc643d92d1040e30139341553e031a37ac97e47f2e72de90c16203d8d09fec4120a9c30519329d38e6bf516548edc2e13", 0xaa}], 0x2, &(0x7f0000002c80)=[@tclass={{0x14, 0x29, 0x43, 0x200}}, @rthdr={{0x38, 0x29, 0x39, {0x2f, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local]}}}, @dstopts={{0xf8, 0x29, 0x37, {0x88, 0x1b, '\x00', [@ra={0x5, 0x2, 0x4}, @enc_lim={0x4, 0x1, 0x2b}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x7, 0xc1, "8cf048aec18047338cc8eeb1d6130f5017d31d13cb4f6b952996dad40407e336f9aa8c629151fe5694c8359f0a60d523bbf54e038b548b8d0a37aaf22047430d1b6069d9e74d8c756a1c3018d3459ab7e3c909bb1ed89b4fe815cb92ce3ad2c97f9d43fc8a10179146a18344c9332d8f375b3bfdcc961f9a6d58950d61411fc76da108ccda451959c3c19498921b5136794770b27bf17835a3d4418f8067f7210311de6fede171cbd9992af0510d9cc4a8b94f99fbe62c0c7c1892f7771d89fca9"}, @enc_lim={0x4, 0x1, 0xd3}, @pad1, @ra={0x5, 0x2, 0x8}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}], 0x160}}], 0x3, 0x40841) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000002fc0)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)={0x18, r15, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000801}, 0x20000000) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000002fc0)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)={0x18, r15, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000801}, 0x20000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000003040)={&(0x7f0000003000)=[r6, r8, r13, r9, r7, r9, r14, r13, r12, r11], 0xa, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DBG_G_CHIP_INFO(r16, 0xc0c85666, &(0x7f0000003080)={{0x2, @addr=0x200}, "ed2850ade58f8f163cfb9f22f40237e2cd363309debf38a3b085aaee9f53adb2", 0x999e435bc2240e27}) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r17 = socket$nl_sock_diag(0x10, 0x3, 0x4) r18 = accept(r17, &(0x7f0000003180)=@tipc=@id, &(0x7f0000003200)=0x80) close_range(r18, r4, 0x0) bind$netlink(r17, &(0x7f0000003240)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc) syz_open_dev$dri(&(0x7f0000003280), 0x6, 0x20a001) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000005f80)=[{0x6, 0x1, 0x0, &(0x7f00000036c0)=[{&(0x7f00000032c0)=""/171, 0xab}, {&(0x7f0000003380)=""/178, 0xb2}, {&(0x7f0000003440)=""/222, 0xde}, {&(0x7f0000003540)=""/181, 0xb5}, {&(0x7f0000003600)=""/69, 0x45}, {&(0x7f0000003680)=""/34, 0x22}], &(0x7f0000003740)=[0x2]}, {0x3, 0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000003780)=""/136, 0x88}, {&(0x7f0000003840)=""/73, 0x49}, {&(0x7f00000038c0)=""/204, 0xcc}], &(0x7f0000003a00)=[0x3, 0x3, 0x4, 0x1, 0x21dc]}, {0xa, 0x0, 0x0, &(0x7f0000005d40)=[{&(0x7f0000003a40)=""/12, 0xc}, {&(0x7f0000003a80)=""/27, 0x1b}, {&(0x7f0000003ac0)=""/19, 0x13}, {&(0x7f0000003b00)=""/152, 0x98}, {&(0x7f0000003bc0)=""/20, 0x14}, {&(0x7f0000003c00)=""/147, 0x93}, {&(0x7f0000003cc0)=""/24, 0x18}, {&(0x7f0000003d00)=""/4096, 0x1000}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/28, 0x1c}], &(0x7f0000005e00)=[0x7f, 0x7fe0000000000, 0x0, 0x3c75, 0x4, 0xfffffffffffffffc]}, {0x1, 0x0, 0x0, &(0x7f0000005f00)=[{&(0x7f0000005e40)=""/152, 0x98}], &(0x7f0000005f40)=[0x9]}], 0x4) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000006080)=0x0) read$FUSE(r1, &(0x7f00000060c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lsetxattr$system_posix_acl(&(0x7f0000006000)='./file0\x00', &(0x7f0000006040)='system.posix_acl_default\x00', &(0x7f000000a800)={{}, {0x1, 0x2}, [{0x2, 0x0, r19}, {0x2, 0x9, r20}, {0x2, 0x6}, {0x2, 0x6}, {0x2, 0x5}], {0x4, 0x3}, [{0x8, 0x4}, {0x8, 0x1}, {0x8, 0x2}, {0x8, 0x4}, {0x8, 0x5}, {0x8, 0x6}, {}, {0x8, 0x4}, {}], {0x10, 0x6}, {0x20, 0x1}}, 0x94, 0x2) (async) lsetxattr$system_posix_acl(&(0x7f0000006000)='./file0\x00', &(0x7f0000006040)='system.posix_acl_default\x00', &(0x7f000000a800)={{}, {0x1, 0x2}, [{0x2, 0x0, r19}, {0x2, 0x9, r20}, {0x2, 0x6}, {0x2, 0x6}, {0x2, 0x5}], {0x4, 0x3}, [{0x8, 0x4}, {0x8, 0x1}, {0x8, 0x2}, {0x8, 0x4}, {0x8, 0x5}, {0x8, 0x6}, {}, {0x8, 0x4}, {}], {0x10, 0x6}, {0x20, 0x1}}, 0x94, 0x2) 18.159787816s ago: executing program 0 (id=1003): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000004c80)=[{{&(0x7f0000000400)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000f00)="a845968770", 0x5}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x4009800) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) 18.071743288s ago: executing program 0 (id=1004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, 0x0) fchown(r1, 0xee01, 0x0) prlimit64(0x0, 0x8, &(0x7f0000002000)={0x7, 0x9}, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000380)={0x4, 0x0, 0x9, 0x7}) r2 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@host, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x7fffffff, 0x4) r4 = syz_io_uring_setup(0x57cd, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x7, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) r7 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x22, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xd}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r8, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000180)='./file0\x00', 0x5c) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000000)='xfs\x00', 0x8014, &(0x7f0000000140)='grpquota') syz_extract_tcp_res(&(0x7f0000000140)={0x41424344, 0x41424344}, 0x3c00, 0x10001) syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x1, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x17, 0xe8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @broadcast, @remote, @multicast1]}, @timestamp={0x44, 0x4, 0xef, 0x0, 0x4}]}}, {{0x0, 0x3, 0x41424344, r10, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xffff}}}}}}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[], 0x104}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0xf4, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000050002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140ff"], 0x90}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 17.80159964s ago: executing program 0 (id=1008): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000440)=0xc) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r5) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@private1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000800)=0xe8) r8 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0x0) stat(&(0x7f0000000840)='./file4\x00', &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000880)='./file7\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a40)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000b40)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001000)={{{@in6=@ipv4, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000b80)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file4\x00', &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r15 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r15, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f97b795a9d31e8502cf1669643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r15, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r15, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0xffffffffffffffbf, 0x4000000, 0x0, '\x00', {0x7ff, 0x1, 0xae2, 0x802, r16, 0x0, 0xc000, '\x00', 0x1, 0x4, 0xb4e7, 0x320d3873, {0x8003, 0x403}, {0x4000000000006}, {0x2000000ae7, 0x8000004}, {0xf, 0x7}, 0x408000, 0x7, 0x6, 0x3}}}}) statx(0xffffffffffffffff, &(0x7f0000001280)='./file0/file0\x00', 0x100, 0x800, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) clock_gettime(0x6, &(0x7f00000015c0)) syz_fuse_handle_req(r0, &(0x7f0000002080)="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", 0x2000, &(0x7f0000001500)={&(0x7f0000000040)={0x50, 0x0, 0x8000, {0x7, 0x2b, 0x1ff, 0x2400, 0x5, 0x7fff, 0x4, 0x9, 0x0, 0x0, 0x110, 0x91}}, &(0x7f00000000c0)={0x18, 0x0, 0x3ff, {0x7fffffffffffffff}}, &(0x7f0000000140)={0x18, 0x0, 0x9, {0x10001}}, &(0x7f0000000180)={0x18, 0xfffffffffffffffe, 0x4cd9, {0x9}}, &(0x7f0000000200)={0x18, 0xb614cbcbfc258242, 0x5, {0x7}}, &(0x7f0000000240)={0x28, 0x0, 0x4, {{0xb00a, 0x7, 0x2, r1}}}, &(0x7f0000000280)={0x60, 0xfffffffffffffff5, 0x80000001, {{0x7553b320, 0x3, 0x1ff, 0x2, 0x41, 0x6, 0xf4, 0x7ff}}}, &(0x7f0000000300)={0x18, 0x0, 0x3, {0x1}}, &(0x7f0000000340)={0x14, 0x0, 0xa6c5, {'syz\x00'}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000500)={0x78, 0x0, 0x5, {0x80000001, 0x6, 0x0, {0x4, 0x8, 0x7f, 0xfffffffffffffffb, 0x5, 0x1, 0x27, 0x6, 0xeb22, 0x8000, 0x6, r2, 0xffffffffffffffff, 0x6, 0xfff}}}, &(0x7f0000000580)={0x90, 0xfffffffffffffffe, 0x1, {0x2, 0x3, 0x1160d16f, 0x94, 0x7, 0x100, {0x3, 0x8, 0x3, 0x8000, 0xebc7, 0x3f5, 0xc2, 0x7ff, 0x6, 0xc000, 0x4, r3, r5, 0x6}}}, &(0x7f0000000640)=ANY=[@ANYRESOCT], &(0x7f0000000c40)={0x3c0, 0x0, 0xffffffffffffff4c, [{{0x4, 0x0, 0x9, 0x4, 0x6, 0x5, {0x5, 0x0, 0x7, 0x95, 0xf, 0x4, 0x82, 0x9704, 0x9, 0xa000, 0x8, 0x0, r6, 0x2c5, 0xad}}, {0x2, 0x2, 0x0, 0x7f}}, {{0x3, 0x2, 0x4, 0xd, 0x7fff, 0x1ff, {0x67b3, 0x7fffffff, 0x10000, 0x9, 0xffffffff, 0x9, 0xdc, 0x1, 0x9, 0x1000, 0x4, r7, 0xee01, 0x0, 0x4}}, {0x3, 0xc0000, 0x2, 0x8, '-!'}}, {{0x2, 0x2, 0x400, 0x0, 0x73, 0xf, {0x3, 0xa5, 0x5fd7, 0x288b5985, 0xfffffffffffffffe, 0x3ff, 0x1, 0x10001, 0x1, 0xa000, 0x7, r9, 0xffffffffffffffff, 0x4, 0xc040000}}, {0x2, 0x80000000, 0x0, 0x6}}, {{0x6, 0x2, 0x1d9a, 0x7, 0x6, 0x3, {0xffffffffffffffff, 0x7, 0x400, 0x9d, 0x5, 0x7fff, 0x8000, 0x3e2, 0x9, 0xe000, 0x0, r10, r11, 0x0, 0x567}}, {0x2, 0x1, 0x4, 0x7f, 'syz\x00'}}, {{0x4, 0x0, 0x4, 0x3, 0x390, 0x80000001, {0x1, 0x4, 0xffffffffffffffff, 0x80000000, 0x1, 0xd5, 0x6, 0x6, 0x3, 0x3000, 0x6, r12, 0x0, 0x6, 0x5a67}}, {0x3, 0xe3, 0x3, 0x7ff, '9p\x00'}}, {{0x1, 0x2, 0x2, 0x8c, 0x53, 0x9, {0x5, 0x8, 0x8000000000000000, 0x8, 0x3, 0x9, 0x4d005180, 0x7, 0x6, 0x2000, 0xa, 0xee00, 0x0, 0x6, 0xffffffff}}, {0x0, 0xd34f, 0x3, 0x7, '$.-'}}]}, &(0x7f0000001180)={0xa0, 0x0, 0x3, {{0x1, 0x2, 0xffffffff, 0x3, 0x3, 0xfffffffe, {0x6, 0x80, 0x9, 0x80000001, 0x6, 0x4, 0xffffffff, 0xc, 0x7f, 0x8000, 0x8, r13, r14, 0x800, 0x3}}, {0x0, 0x10}}}, &(0x7f0000001240)={0x20, 0xfffffffffffffff5, 0x95, {0x991, 0x0, 0x40a9, 0x3}}, &(0x7f00000013c0)={0x130, 0x0, 0x4, {0x2, 0x6, 0x0, '\x00', {0x8, 0x5, 0x7, 0x40, r16, r17, 0xa000, '\x00', 0x1, 0x904, 0x1, 0x2e2, {0xc, 0x85a113e}, {0x76e, 0xe8}, {0x2}, {0x1450, 0x9}, 0x4, 0x9, 0x2, 0x2}}}}) mknod$loop(&(0x7f0000000400)='./file4\x00', 0x6000, 0x0) 17.720547801s ago: executing program 0 (id=1009): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x2, 0x2, [0x0, 0x0], [0x0, 0x0, 0x400], [0x0, 0x0, 0x6, 0x3], [0x0, 0x0, 0x8000]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) 17.501273145s ago: executing program 0 (id=1012): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newchain={0x2c, 0x64, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xd, 0xfff2}, {0x8, 0xe}, {0xa, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40) r2 = socket(0x11, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271d, 0x0, &(0x7f0000000040)) 17.359881865s ago: executing program 34 (id=1012): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newchain={0x2c, 0x64, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xd, 0xfff2}, {0x8, 0xe}, {0xa, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40) r2 = socket(0x11, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271d, 0x0, &(0x7f0000000040)) 15.557054299s ago: executing program 1 (id=23): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000002140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='initcall_start\x00', r0}, 0x10) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r1, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x11) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0xa, 0x3, 0x3a) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r6}, 0xc) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, 0x0, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 10.180228343s ago: executing program 6 (id=1069): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) getpriority(0x1, r1) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000180)={@rand_addr=0x64010100, @multicast2, 0x1, 0x1, [@multicast1]}, 0x14) move_pages(r1, 0x4, &(0x7f00000001c0)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000200)=[0xce], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={[&(0x7f00000002c0)='*+\x00', &(0x7f0000000300)='\x95-\x00']}, &(0x7f0000000480)={[&(0x7f0000000380)='/\x00', &(0x7f00000003c0)='y\x00', &(0x7f0000000400)='\v\x00', &(0x7f0000000440)='y\x00']}) execve(&(0x7f00000004c0)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000500)='trusted.overlay.origin\x00', &(0x7f0000000540)='y\x00', &(0x7f0000000580)='\x95-\x00']}, &(0x7f0000000680)={[&(0x7f0000000600)='\xf9-:\x00', &(0x7f0000000640)='D@,@:}$!\x00']}) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000700), 0x106, 0x2}}, 0x20) setpriority(0x1, r1, 0x7fffffff) (async) r3 = gettid() move_pages(r3, 0x9, &(0x7f0000000780)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil], &(0x7f0000000800)=[0x9, 0x7, 0x3, 0x9, 0x61, 0x7ff, 0x5, 0x0], &(0x7f0000000840)=[0x0], 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async, rerun: 32) setsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f00000008c0)={@empty, @multicast1, @remote}, 0xc) (async) move_pages(r1, 0x5, &(0x7f0000000900)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000940)=[0x9, 0x400, 0x9, 0x542, 0xfffff801, 0x7dff, 0x8, 0x7, 0x7, 0x4], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) execve(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000bc0)={[&(0x7f0000000a00)='\x00', &(0x7f0000000a40)=':&\xa9}\x00', &(0x7f0000000a80)='trusted.overlay.origin\x00', &(0x7f0000000ac0)='*+\x00', &(0x7f0000000b00)='+\x00', &(0x7f0000000b40)='[\x00', &(0x7f0000000b80)='/proc/sys/net/ipv4/vs/secure_tcp\x00']}, &(0x7f0000000e00)={[&(0x7f0000000c00)='\\-%.#[,*\x99$$\x00', &(0x7f0000000c40)='\x00', &(0x7f0000000c80)='#())@@^.\x00', &(0x7f0000000cc0)='/\x00', &(0x7f0000000d00)='D@,@:}$!\x00', &(0x7f0000000d40)='\v\x00', &(0x7f0000000d80)='\x00', &(0x7f0000000dc0)='/proc/sys/net/ipv4/vs/secure_tcp\x00']}) (async) write$cgroup_int(r4, &(0x7f0000000e80)=0x2de, 0x12) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000ec0)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x3, 0x400, 0x7, 0x9ce, 0xe, 0xa66}, {0xff4, 0x84fb0000, 0x6, 0x89c, 0x5, 0x247}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001180)=@generic={&(0x7f0000001140)='./file0\x00', r2}, 0x18) (async) getsockname$packet(r2, &(0x7f00000011c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001200)=0x14) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000001240)={@loopback, @empty, r5}, 0xc) mq_open(&(0x7f0000001280)='\x00', 0x80, 0xd0, &(0x7f00000012c0)={0x98ea, 0x4, 0x7, 0x6}) (async) accept4$unix(r4, 0x0, &(0x7f0000001300), 0x80800) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x17) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) preadv(r6, &(0x7f0000001680)=[{&(0x7f0000001340)=""/158, 0x9e}, {&(0x7f0000001400)=""/245, 0xf5}, {&(0x7f0000001500)=""/206, 0xce}, {&(0x7f0000001600)=""/16, 0x10}, {&(0x7f0000001640)=""/37, 0x25}], 0x5, 0x100, 0x9) 10.179355446s ago: executing program 6 (id=1071): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = inotify_init() r4 = inotify_add_watch(r3, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r3, r4) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r5 = accept4(r2, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x204, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x240400e0}, 0x4042811) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0x10448) connect$pppoe(r0, &(0x7f00000016c0)={0x18, 0x0, {0x3, @random="3c38448f3736", 'macvlan1\x00'}}, 0x1e) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f00000021c0)='wg0\x00', 0x4) setsockopt$inet_mreq(r6, 0x0, 0x20, &(0x7f0000019400)={@local, @dev={0xac, 0x14, 0x14, 0x11}}, 0x8) 10.041818061s ago: executing program 6 (id=1072): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000006000000eb00000008"], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3b73393044c0b1f3}}, [@NFT_MSG_NEWRULE={0x278, 0x6, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x15c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_LAST_SET={0x8}]}}}, {0x70, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000001}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x1ff}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7ff}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xd}]}}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x3c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x94}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x849a}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_USERDATA={0xe4, 0x7, 0x1, 0x0, "eb06b1650e002aed3d412c894efdd1573f22dc46818b14b90a69649fee5180ca2ec03182b90a8fde1e9f8f6e4990fa7add09b54ed3ccaad51b4c40c48dcbd60fee78b6c69f31733e672d12db8409124fdeb74d25fad770c55bb0cd6f07be0fd6f3c31016fe586df4898761f3aba6de812c253dffbb6fea4d2387ad53f8747c4402c017c2ce4d82aaac4271268ca2609ce700712144993ba5cfb11de244d984f1503a906eeafc03d1d67e93c20b16b75613f80440e4b0d9685761259a79622f5e223e33895b706c8cf04b8ab0b34ebcbf438a3bc33f85d9c3472e669f5a77274b"}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x2bc}, 0x1, 0x0, 0x0, 0x40}, 0xc000) listen(r0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004020000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvfrom$inet6(r0, 0x0, 0x0, 0x2002, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0), &(0x7f0000000280)=0x4) 9.977617465s ago: executing program 6 (id=1073): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x28, 0xe, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004081}, 0x4040) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x8, 0x20000000, 0x1ff, 0x8}, 0x41}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x15, 0x0, &(0x7f0000000100)) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="78224fc427ed619f319b73733d616e792c63616368653d66736361636865"]) chdir(&(0x7f00000000c0)='./file0\x00') r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x101000, 0x56) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000600), &(0x7f0000000480), 0x63, 0x88, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0xf, r8, 0xc, &(0x7f0000000240)) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x8, 0x101, 0x3}, 0x10, 0x1cba3, 0xffffffffffffffff, 0x3, &(0x7f00000007c0)=[r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000800)=[{0x5, 0x1, 0x6, 0xa}, {0x1, 0x4, 0x4, 0x5}, {0x2, 0x5, 0x8, 0x7}], 0x10, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x11, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x2, 0x3, 0x3, 0x9, 0x3, 0x4, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x3f}], {{}, {}, {0x85, 0x0, 0x0, 0x109}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5a, '\x00', r4, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0xa, 0x4, 0x2}, 0x10, r7, r9, 0x3, &(0x7f0000000900)=[r0, r0], &(0x7f0000000940)=[{0x2, 0x1, 0xd, 0x9}, {0x1, 0x4, 0x9, 0x2}, {0x4, 0x1, 0xf, 0x5}], 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) getsockname$packet(r10, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b40)=0x14) 9.912343353s ago: executing program 6 (id=1074): mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x104) (async) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x440, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xb) 9.229938738s ago: executing program 6 (id=1084): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) write$sequencer(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0293"], 0x9) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff70}], {0x95, 0x0, 0xb}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff4d, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 9.187954204s ago: executing program 35 (id=1084): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) write$sequencer(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0293"], 0x9) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff70}], {0x95, 0x0, 0xb}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff4d, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 7.694644482s ago: executing program 1 (id=23): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000002140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='initcall_start\x00', r0}, 0x10) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r1, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x11) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0xa, 0x3, 0x3a) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r6}, 0xc) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, 0x0, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.72513701s ago: executing program 7 (id=1140): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000240)=0x2, 0x4) (async) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="a93dec87a460b408ba4a94055896ad877b25d6bdd3c8cacf7aa70ac43296305ad1e127ccdd023ded019321ab398ed8135091f21f0db59764df338255c65b59e3b1642b02eebff1b6f35d704eb7a4edcca16fc6ba6d7f7929169982b0128db4b0e3ac418dd8f41b0f56ff5434f3cd5cb85f2d736a7d42ce58d494d241bf066beec581dfdbc1ad81e226b52e6bb57fbfe477e62fa457628e55b7d874bb074ac73ccacd5744d24dca7747107185d95ffd813d7b2a4308ddc1900f45435bec94953e9ed114595ed071196b34cdf69e00ecb701008b73eed1", @ANYRES16=r0, @ANYBLOB="01042cbd7000000800011400000018000180140002006e657464657673696d3000000000000008001300090a0000"], 0x34}}, 0x0) 1.722905482s ago: executing program 7 (id=1141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000003a"]) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0xfff, 0x5, 0xb0, 0xb}, {0xfff, 0x4, 0x40}, {0x13, 0xfc, 0x3a, 0x5}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) (async) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={r4, 0x1, r3, 0x9, 0x80000}) (async) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) (async) r7 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000340)) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xf9, 0xfd, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r9, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r9, 0x0, 0x0, 0x6, 0x0, 0x1c, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x3}, 0x7, 0x0, 0xfffffffc}}) r10 = dup(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x7, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x1, r10}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) (async) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f00000003c0)={0x1}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x0, 0x0, {r5}, {0xffffffffffffffff}, 0x0, 0x3}) r13 = syz_open_procfs$userns(r12, &(0x7f00000000c0)) ioctl$NS_GET_USERNS(r13, 0xb701, 0x0) 1.621578869s ago: executing program 7 (id=1143): r0 = socket$inet(0x2, 0x2, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f00000000c0)=[@request_death], 0x0, 0x0, 0x0}) (async) r5 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="0c000000fe00030007"], 0x88800) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0xb8}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587", @ANYRES16], 0x0) (async) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r7, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'sit0\x00', 'ip6_vti0\x00', {}, {}, 0x6, 0x0, 0x4a}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x20, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xffff, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) 700.630598ms ago: executing program 5 (id=1153): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x3, 0x0, 0xffeff012}, {0x6, 0x7, 0xc, 0x6}]}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 631.030464ms ago: executing program 5 (id=1154): socket(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x280a6080, &(0x7f0000000180)="28a76925fe4b4b57c30d1ad7a9d27d618abff9520d82af5e95046ac8a6d50f85ab90c14829d42cf9c12eb338f346a78be63eb64c66e9ad89a795772545cd022c8fe9a7", 0x43, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240)="d70d01c43033b2ced71f1e1700ec990878fa1b10b3c3f06aea39a5d2ba61e7f593bd7c1f3d61a8984937d86ab057a78c2663b5f6bea351") syz_open_procfs(r1, &(0x7f0000000140)='auxv\x00') 629.604351ms ago: executing program 5 (id=1155): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x8000) (async) socket$netlink(0x10, 0x3, 0xc) 561.958853ms ago: executing program 3 (id=1156): r0 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r1 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x2}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x8b}]}}]}, 0x48}}, 0x0) (async) r3 = geteuid() (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x6, 0x2, 0x100, 0x606c, 0x180107, r6}) (async, rerun: 32) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r3, &(0x7f0000000040)) (rerun: 32) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$alg(0x26, 0x5, 0x0) (async) r8 = gettid() tgkill(r8, r8, 0x2a) (async, rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f0000001300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 64) r10 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) (async) r11 = syz_clone(0x2000000, &(0x7f00000003c0)="776076fc020240c2649a940ce2c899000468fe2b03455d80fb6d3f4841ddf9207fb5a9196230bedd100b75ea361d32d3a4749328cb47713c048f5b3ec3d8054fc3a55fd02ef02b64cfb3b4dc1f31c0b085bfc2b3ec668e89e478998e5af75a54e5430acd", 0x64, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="5325d127abfbda2d03304e8475fdfd76479b06897c3e4ad6d4573235d8ae497e55d27cc388896f44cd5684eba693356b5823b40f72fd1e237003f8cbf1b010637f88b574b499ef3b25c67bf0eefa98c8f2209d89d73e6b5fb99a42416add228569056e95656385498dc80e31ff6981d628cc9014ce6522e80633b18a4d92dbda7eed3f606878fbe5660d1789cc69576c3bcb4b0491e5fc7249581272c21f55cbaac7990bd0b40f196c7af78665e650105f") (async, rerun: 32) r12 = syz_clone(0x10b28500, &(0x7f0000000580)="7824e09d8b4afac2be9358f14496f3a6a454bdc9538af3d12eb150c10b2abd90ce6a3701202d2d77a5b2ff1a19a4ff", 0x2f, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="39feaaab3be6ae30fcf706c0c829bb1222231009eeb61dc1264f9973f0a511dacfe1da1a4ad6f965c1af3f04864a8298668d22bc91470ecfdfc3c9b5dbfae7ba4cacf5a20f36dd26f09b70ac8d3dbe50514cf9ef501719d0f65df3aba8e1f2fb4386b526a5d384b902227d24258e86ffd22f47eca40a4f013838d59190d7a5e58ee36aa9124f654d8eb611571a2e187b43eea317c71506a25953aa83704848ca81cb806cf930763a9e9130a6bf0fa4f029fb068b039ecfaac3d86e58976005515b07c1e07e16a521c27cf67f8b5295ab55ad52c15da7abd041affd") (async, rerun: 32) newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) sendmmsg$unix(r1, &(0x7f0000000800)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000240)="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", 0xff}], 0x1, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [r0, r4, r7, r7]}}, @cred={{0x1c, 0x1, 0x2, {r8, r3, r9}}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, r0, r10]}}, @cred={{0x1c, 0x1, 0x2, {r11, r3}}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r12, r3, r13}}}], 0xd8, 0x4000000}}], 0x1, 0x20040080) (async) r14 = socket(0x10, 0x3, 0x0) write(r14, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) (async) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x1a2d65) 511.45339ms ago: executing program 3 (id=1157): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x3) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000140)={0x2, 0x0, 0x1001}) (async) getsockname$ax25(r0, 0x0, &(0x7f0000003840)) r2 = syz_open_dev$video4linux(&(0x7f0000000780), 0x2000000000002, 0x111101) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYRES32=r4, @ANYBLOB="5209787c04697fd5019f4a0a3e59785e9dcac6233620bb87a51c869e24cb174f5f7e9326689a65f7169b8cf3b3970000000000002ef07be62f396c624890c30282f9455b70d84679c5a8fc8986278a2bf50400039b7b5355a11c2930efe9ae894316b581ecd63497aafa3bf4d94848ef8d72edd961834c568c181f89847398d6725167440f0ca320206cf25bb96bc5399591bd36bc4e7935fe4f4eb10a6d68c0bf8fca23f668c4203f88e0d6a4acdc044ece5db3b2271690de116a7b1667b687bd", @ANYBLOB="f2ff03000000000000002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000a0006000802110000000000040046001000b000000010000600440702000800"], 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x60940, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56545, 0x70bd26, 0xfffffffe, {0x0, 0x0, 0x0, r8, {0x0, 0x1c}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) syz_emit_ethernet(0xd6, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0f0800481500c8006600000711907864010105e0000002890f2f000000007f000001e0000001443cbde1e000000100000002ac1414bb000000010a01010200000008ac1414360000aa69ffffffff00000009e00000020000000bac1414bb00000008004e204e2400689078bc4510cdd79099451e0fca46cde6a922bd206f122efe92a342c1538dc273bb01a7fb7609c606f3ab67a678a3853a92b0c83364cf503edf7c932329782f6b6fdcba9b9434726a42250026e7dd089c80e728bffec049b001affba050538e299066"], &(0x7f0000000280)={0x0, 0x4, [0x947, 0xeab, 0x30b, 0xb91]}) (async) r9 = socket$alg(0x26, 0x5, 0x0) (async) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r10, 0x3ba0, &(0x7f0000000b80)={0x48}) (async) bind$alg(r9, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000680)="93378efcd17301726272853a9fa88608996042ab60ae09f9a90efedde424f36d", 0x20) (async) accept4(r9, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r11 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x10600, 0x0) read$msr(r11, &(0x7f00000001c0)=""/147, 0x93) (async) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0xca, 0xffffffff, 0x1012, 0x0, 0xa, 0x6, 0x0, 0x17}}) (async) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000000080)={0x0, 0x1, 0x1a0, '\x00', &(0x7f0000000000)=0xe}) (async) r12 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r12, 0xc2604110, &(0x7f0000000300)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffe], [0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x7]], '\x00', [{0xffffffff}, {0x0, 0x10}, {0x0, 0x4e}, {0x0, 0x80000000, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x5e, 0x1}, {}, {}, {0x0, 0x3}, {0x0, 0xfffffffe}, {0x0, 0xfffffffd}, {0x0, 0x2}], '\x00', 0x1000}) setfsgid(0xee00) 511.011569ms ago: executing program 5 (id=1158): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="a00000001900010000000000000000001c140000fe00e4f86f5f1154000100000000840012000000000000000000fd8b03f8538974b400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000400"/166], 0xa0}}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x7d, &(0x7f0000000000)={0x0, 0xffff0006}, 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x8001, 0x101, 0x3, 0x8, 0x0, 0x7, 0x7}, 0x9c) 462.033352ms ago: executing program 5 (id=1159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0xffffff3d, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1f}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYBLOB="d68f0c24b4eee2c30f3a34a036899ad546fb67", @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000a00", @ANYRES32], 0x58}}, 0x0) 461.741305ms ago: executing program 3 (id=1160): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a090000cd95a69c00000000000000000000ffff"], 0x4c}}, 0x0) (async) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt(r1, 0xf1178ca7, 0x7, 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000001500)='./file1\x00', 0xc2c0, 0x5) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x100, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000014c0)=0x2) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001900)={&(0x7f0000001700)={0x1e8, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1000}, @NL80211_ATTR_VENDOR_DATA={0x91, 0xc5, "4047427ad6312c75e2f2fe3780fc68abd35ce7bdad5237e8cdfab0618884aee0512c92550f6c808b106fcc786f5d702f27e8bf509090dd38223ac9c515f78125e114e6206bf11fb39a6510a6224d4cab245b2261cfc7351b753eda49b2e875b813426aa2a680f85efe8bed3c18fd00173f9cc2d889d080d0a4ccd111e2e0fc905a4de5fa76a18c3df9e55dfd3e"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x76, 0xc5, "43f1b1b745c66d6e2ee358df77dff03bdd2fad8535bb747a78f3e817fdd1d1217dd66b497b217e6d05aaf005e65aabbb03fafdd566dd7a0c964dad7bca862defa032e54d3ac9b8e8eec892e57b637bab07e1977ad5c58aba80dba362d9a04731430624b29abf4f7f4ea47118aeaae0fa905c"}, @NL80211_ATTR_VENDOR_DATA={0xa0, 0xc5, "438f77a8d580cb511b914a3f886ffd0e21b193954a6e99f74fbd4bb194f95e6e4c3d997c1ec0cadff8b7760867d3ac8a4d630fb33d29564821bc63976c9eabc4b81aa86cc7f9e91f62329059e7d5790872951ad6cc3fafa20e6be37394605652e9b67ab650ede07e56f8255e4a35dedaf8f3f67da823f1937e90da0c406c379bd552348aaa2e14aab7a6c3540efba94781d2b255383bbc430661f20b"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}]}, 0x1e8}}, 0x40000) unlink(&(0x7f0000000040)='./file0\x00') (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) (async, rerun: 32) setxattr$security_selinux(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100), &(0x7f0000000180)='system_u:object_r:systemd_logind_var_run_t:s0\x00', 0x2e, 0x2) (async, rerun: 32) r5 = userfaultfd(0x80001) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r6, r7, 0x4, 0x0, @void}, 0x10) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async, rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x1a, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000240)='GPL\x00', 0x3182, 0x1000, &(0x7f0000000340)=""/4096, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x2e, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x7, 0xa4, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001340)=[0x1], 0x0, 0x10, 0x400, @void, @value}, 0x94) (rerun: 64) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0xe) (async) ioctl$TIOCL_SCROLLCONSOLE(r9, 0x541c, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r8, 0x4008941a, &(0x7f0000001440)=0x2) (async, rerun: 32) open(&(0x7f0000000000)='./file0\x00', 0x80100, 0x25) (async, rerun: 32) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) 461.274869ms ago: executing program 5 (id=1161): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xc003f, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r3, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x1d0, 0x234, 0x1d0, 0x1d0, 0x2a8, 0x2a0, 0x2a0, 0x2a8, 0x2a0, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'batadv_slave_0\x00', 'lo\x00'}, 0x0, 0x1b0, 0x1d0, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'Q.931\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "68885c7e79e21ca3170307e20889528706fbd349db09f530731c372fea7998b354ddc27b5da5f5f7965996a329d8e388b8baf015c7dba738176fa9cb0b0827f67eb37d666cf959ae24d15bbfd8b9565d0182f21fa8c64136ec8c086f3afdb3ac32b23fca167f540ca3e00102301fdbbf4a4cba14bf1bd2e224e6ac797ac22a53", 0x68, 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) bind$inet6(r4, &(0x7f0000002f40)={0xa, 0x4e24, 0xa, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r9 = io_uring_setup(0x208c, &(0x7f0000000380)={0x0, 0x6d90, 0x40, 0x0, 0x29e}) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r9, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) r10 = epoll_create1(0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) epoll_pwait(r10, &(0x7f0000000100)=[{}], 0x1, 0x5, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xa4, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfd, {0x20}, [@generic="e98ad8c0a3a0a1e16a31ae1fbe6290df8be129ea80416ffb1a99694499d7391b010705b6af84b10de93325b32fd898301ca48e7fcd9d0101e92a944c8499229652da921ce8ce067111b1b1a122eeece193350973eb9d305360e32494daf9c891ea14b432f5af663ed6e2c0894d084a621b8e84f9d5c1ee1bc140b3e6b2269fc2bb85030f670167883918947587de8e20"]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0xc800) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x14, 0x13, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) 381.218283ms ago: executing program 7 (id=1162): syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x822341) pipe2$9p(&(0x7f0000000080), 0x80880) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000000c0)=@bpq0, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaac986dd60010100000c1101fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22000c907861fa0001"], 0x0) syz_io_uring_setup(0x5d5a, &(0x7f00000001c0)={0x0, 0xed6f, 0x1, 0x3, 0x3dc}, &(0x7f0000000100), &(0x7f0000000240)) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) poll(&(0x7f00000000c0)=[{r7, 0x722}], 0x1, 0x6) write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0xfc, 0x0, 0x0, 0x0, @time={0x0, 0x101}, {0x0, 0xb8}, {0x0, 0x9}, @control={0x9, 0x9, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0xb92a}, {0x6, 0xfd}, {0x0, 0x8}, @control={0x7, 0x9fa, 0x7}}], 0x38) r8 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r8, 0x89ef, &(0x7f00000000c0)=0x7) mmap$fb(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10010, r5, 0x4f000) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x50440, 0x80) 381.037097ms ago: executing program 3 (id=1163): r0 = socket(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)={[{@noswap}, {@mpol={'mpol', 0x3d, {'interleave', '', @void}}}]}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x1, {0x7}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x2b, 0xc, 0x200000, 0xfc00, 0x8, 0x2, 0x8, 0x0, 0x0, 0x40, 0x1000}}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f0000000180)="3cbd6cee", &(0x7f0000000300)=""/211}, 0x20) (async) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x141002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000a00)=0x40000) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)=0x2) 320.470289ms ago: executing program 3 (id=1164): socket(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x280a6080, &(0x7f0000000180)="28a76925fe4b4b57c30d1ad7a9d27d618abff9520d82af5e95046ac8a6d50f85ab90c14829d42cf9c12eb338f346a78be63eb64c66e9ad89a795772545cd022c8fe9a7", 0x43, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240)="d70d01c43033b2ced71f1e1700ec990878fa1b10b3c3f06aea39a5d2ba61e7f593bd7c1f3d61a8984937d86ab057a78c2663b5f6bea351") syz_open_procfs(r1, &(0x7f0000000140)='auxv\x00') 271.714933ms ago: executing program 3 (id=1165): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0}]) r1 = io_uring_setup(0x30dc, &(0x7f0000000600)={0x0, 0x0, 0x40, 0x2, 0x300}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x73682a85, 0x0, r4}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000000c0), 0x4f) r6 = syz_open_dev$swradio(&(0x7f0000000940), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000a80)={0xb, @win={{0x38305543, 0x9, 0xfff, 0x2}, 0x1, 0x2, 0x0, 0x5, 0x0, 0x8f}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r7, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x100, 0x0, 0x2, 0xfffffffd, 0x2}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x20050800) 271.539624ms ago: executing program 7 (id=1166): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r1 = socket$inet6(0xa, 0x1, 0x84) shutdown(r1, 0x1) (async) shutdown(r1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x807, 0x83, 0x6, 0xfffa}, 0x2000001d, [0x8000, 0xc95a, 0x12, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x4, 0x8, 0x2, 0x4, 0x3c5b, 0x90, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x2, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x1000, 0x71, 0x7, 0x7, 0x1, 0x7, 0x0, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x0, 0x8, 0x0, 0x5, 0x0, 0x5, 0x6, 0xb, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012d, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcd, 0x40c, 0x9, 0x2bf, 0x6c9, 0x8, 0xfffffffc, 0x3, 0x0, 0x7, 0xeb, 0x5573, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xda7a, 0x4, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x7, 0x4, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x0, 0x6, 0x7, 0x8000, 0x0, 0xfe000000, 0xffff, 0x2, 0x7f, 0x8, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x3, 0x0, 0x4, 0xfffffffe, 0x9, 0x8d2, 0x8, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x20004, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xfffffffd, 0xd, 0x4, 0x6d01, 0x5, 0x9, 0x800000, 0x1fd, 0x80, 0x3, 0x400, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x5, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x3, 0x6, 0x1e, 0x120000, 0x3, 0x3, 0xa2ed, 0x404, 0x25], [0x9, 0xbb31, 0x296, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x53f53814, 0x2, 0x7, 0x22, 0x3, 0x101, 0x10000, 0x6, 0x207fff, 0xffff, 0x2, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x20100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x50080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x8000, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0x7]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4004, r0}) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x11, r2, 0x2000) 263.861738ms ago: executing program 7 (id=1167): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000000)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "3377f877c734c40400", "000100", '\x00', "be4da400", ["c3d452871700", "51f3ffcb3a1000", "e100"]}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)={0x50, r4, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffffffb, 0xfffffffc}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x10) 0s ago: executing program 1 (id=23): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000002140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='initcall_start\x00', r0}, 0x10) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r1, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x11) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0xa, 0x3, 0x3a) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r6}, 0xc) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, 0x0, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) kernel console output (not intermixed with test programs): _slave_1) entered blocking state [ 115.671698][ T90] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.690265][ T1147] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.752910][ T1147] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.816901][ T1147] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.852161][ T8438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.890347][ T1147] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.909706][ T8438] veth0_vlan: entered promiscuous mode [ 115.918296][ T8438] veth1_vlan: entered promiscuous mode [ 115.943097][ T8438] veth0_macvtap: entered promiscuous mode [ 115.948538][ T8438] veth1_macvtap: entered promiscuous mode [ 115.971953][ T8438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.990014][ T8438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.996546][ T1147] bridge_slave_1: left allmulticast mode [ 115.998370][ T1147] bridge_slave_1: left promiscuous mode [ 116.000209][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.004638][ T1147] bridge_slave_0: left allmulticast mode [ 116.006443][ T1147] bridge_slave_0: left promiscuous mode [ 116.008396][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.245047][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.251379][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.257034][ T1147] bond0 (unregistering): Released all slaves [ 116.268721][ T8438] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.271600][ T8438] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.274633][ T8438] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.277404][ T8438] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.369494][ T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.372057][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.372608][ T8591] netlink: 124 bytes leftover after parsing attributes in process `syz.0.622'. [ 116.372799][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'. [ 116.409508][ T40] audit: type=1400 audit(116.311:508): avc: denied { map } for pid=8592 comm="syz.0.623" path="socket:[30344]" dev="sockfs" ino=30344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.409520][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.409557][ T40] audit: type=1400 audit(116.311:509): avc: denied { read accept } for pid=8592 comm="syz.0.623" path="socket:[30344]" dev="sockfs" ino=30344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.416671][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.546060][ T8593] kvm: pic: non byte write [ 116.558527][ T40] audit: type=1400 audit(116.461:510): avc: denied { map } for pid=8592 comm="syz.0.623" path="/dev/cuse" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 116.579920][ T1147] hsr_slave_0: left promiscuous mode [ 116.585532][ T1147] hsr_slave_1: left promiscuous mode [ 116.588489][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.591670][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.596618][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.599833][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.637851][ T1147] veth1_macvtap: left promiscuous mode [ 116.640302][ T1147] veth0_macvtap: left promiscuous mode [ 116.642950][ T1147] veth1_vlan: left promiscuous mode [ 116.645285][ T1147] veth0_vlan: left promiscuous mode [ 116.978615][ T8602] FAULT_INJECTION: forcing a failure. [ 116.978615][ T8602] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 116.984353][ T8602] CPU: 1 UID: 0 PID: 8602 Comm: syz.3.625 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 116.984377][ T8602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.984388][ T8602] Call Trace: [ 116.984394][ T8602] [ 116.984401][ T8602] dump_stack_lvl+0x16c/0x1f0 [ 116.984432][ T8602] should_fail_ex+0x512/0x640 [ 116.984459][ T8602] should_fail_alloc_page+0xe7/0x130 [ 116.984487][ T8602] prepare_alloc_pages+0x3c2/0x610 [ 116.984506][ T8602] ? rcu_is_watching+0x12/0xc0 [ 116.984531][ T8602] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 116.984558][ T8602] ? __lock_acquire+0x622/0x1c90 [ 116.984591][ T8602] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 116.984609][ T8602] ? __lock_acquire+0x622/0x1c90 [ 116.984640][ T8602] ? __lock_acquire+0x622/0x1c90 [ 116.984665][ T8602] ? __lock_acquire+0x622/0x1c90 [ 116.984688][ T8602] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.984711][ T8602] ? policy_nodemask+0xea/0x4e0 [ 116.984739][ T8602] alloc_pages_mpol+0x1fb/0x550 [ 116.984765][ T8602] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 116.984797][ T8602] folio_alloc_mpol_noprof+0x36/0x2f0 [ 116.984826][ T8602] vma_alloc_folio_noprof+0xed/0x1e0 [ 116.984851][ T8602] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 116.984875][ T8602] ? find_held_lock+0x2b/0x80 [ 116.984889][ T8602] ? __handle_mm_fault+0x1092/0x5490 [ 116.984904][ T8602] __handle_mm_fault+0x2f21/0x5490 [ 116.984920][ T8602] ? __pfx___handle_mm_fault+0x10/0x10 [ 116.984933][ T8602] ? __pte_offset_map_lock+0x174/0x310 [ 116.984950][ T8602] ? find_held_lock+0x2b/0x80 [ 116.984963][ T8602] ? find_held_lock+0x2b/0x80 [ 116.984979][ T8602] ? follow_page_pte+0x3af/0x14c0 [ 116.984993][ T8602] handle_mm_fault+0x589/0xd10 [ 116.985008][ T8602] __get_user_pages+0x589/0x3b80 [ 116.985024][ T8602] ? __pfx___get_user_pages+0x10/0x10 [ 116.985035][ T8602] ? __pfx_down_read_killable+0x10/0x10 [ 116.985046][ T8602] ? kernel_text_address+0x8d/0x100 [ 116.985059][ T8602] ? __lock_acquire+0x622/0x1c90 [ 116.985077][ T8602] __gup_longterm_locked+0x20d/0x1850 [ 116.985092][ T8602] ? __pfx___gup_longterm_locked+0x10/0x10 [ 116.985105][ T8602] ? find_held_lock+0x2b/0x80 [ 116.985118][ T8602] ? sanity_check_pinned_pages+0x23/0x1200 [ 116.985138][ T8602] gup_fast_fallback+0x1ab3/0x29e0 [ 116.985159][ T8602] ? __pfx_gup_fast_fallback+0x10/0x10 [ 116.985178][ T8602] pin_user_pages_fast+0xa7/0xf0 [ 116.985188][ T8602] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 116.985198][ T8602] ? __kmalloc_noprof+0x242/0x510 [ 116.985220][ T8602] rds_info_getsockopt+0x39f/0x4f0 [ 116.985234][ T8602] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 116.985244][ T8602] ? find_held_lock+0x2b/0x80 [ 116.985257][ T8602] ? __might_fault+0x13b/0x190 [ 116.985275][ T8602] rds_getsockopt+0x173/0x2d0 [ 116.985288][ T8602] ? __pfx_rds_getsockopt+0x10/0x10 [ 116.985303][ T8602] do_sock_getsockopt+0x3fc/0x800 [ 116.985317][ T8602] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 116.985327][ T8602] ? __fget_files+0x204/0x3c0 [ 116.985349][ T8602] __sys_getsockopt+0x12f/0x260 [ 116.985368][ T8602] __x64_sys_getsockopt+0xbd/0x160 [ 116.985382][ T8602] ? do_syscall_64+0x91/0x4c0 [ 116.985398][ T8602] ? lockdep_hardirqs_on+0x7c/0x110 [ 116.985413][ T8602] do_syscall_64+0xcd/0x4c0 [ 116.985430][ T8602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.985442][ T8602] RIP: 0033:0x7f305b38e929 [ 116.985453][ T8602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.985464][ T8602] RSP: 002b:00007f305c24a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 116.985475][ T8602] RAX: ffffffffffffffda RBX: 00007f305b5b5fa0 RCX: 00007f305b38e929 [ 116.985482][ T8602] RDX: 0000000000002720 RSI: 0000200000000114 RDI: 0000000000000003 [ 116.985488][ T8602] RBP: 00007f305c24a090 R08: 0000200000000000 R09: 0000000000000000 [ 116.985494][ T8602] R10: 0000200000019580 R11: 0000000000000246 R12: 0000000000000001 [ 116.985500][ T8602] R13: 0000000000000000 R14: 00007f305b5b5fa0 R15: 00007ffcdba2e978 [ 116.985514][ T8602] [ 117.056700][ T40] audit: type=1400 audit(116.961:511): avc: denied { map } for pid=8603 comm="syz.5.626" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 117.160838][ T40] audit: type=1400 audit(116.981:512): avc: denied { execute } for pid=8603 comm="syz.5.626" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 117.233352][ T63] Bluetooth: hci3: unknown advertising packet type: 0x82 [ 117.234309][ T63] Bluetooth: hci3: Dropping invalid advertising data [ 117.242594][ T63] Bluetooth: hci3: unknown advertising packet type: 0xff [ 117.242619][ T63] Bluetooth: hci3: Malformed LE Event: 0x02 [ 117.598240][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 117.632380][ T63] Bluetooth: hci3: command tx timeout [ 117.680784][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 118.273757][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'. [ 118.297790][ T8629] xt_hashlimit: size too large, truncated to 1048576 [ 118.436693][ T40] audit: type=1400 audit(118.341:513): avc: denied { connect } for pid=8636 comm="syz.5.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 118.443619][ T40] audit: type=1400 audit(118.351:514): avc: denied { execmod } for pid=8636 comm="syz.5.633" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=30950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 118.620785][ T6901] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.234881][ T63] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 119.237938][ T63] Bluetooth: hci0: Injecting HCI hardware error event [ 119.241192][ T63] Bluetooth: hci0: hardware error 0x00 [ 119.712701][ T5938] Bluetooth: hci3: command tx timeout [ 119.756095][ T6901] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.847038][ T5938] Bluetooth: hci2: unexpected event for opcode 0x204e [ 119.847666][ T8654] netlink: 14 bytes leftover after parsing attributes in process `syz.3.638'. [ 119.850993][ T5938] Bluetooth: hci2: unexpected event for opcode 0x204e [ 119.937262][ T40] audit: type=1400 audit(119.841:515): avc: denied { create } for pid=8661 comm="syz.0.640" name="#1b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 119.945694][ T40] audit: type=1400 audit(119.841:516): avc: denied { link } for pid=8661 comm="syz.0.640" name="#1b" dev="tmpfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 119.954890][ T40] audit: type=1400 audit(119.841:517): avc: denied { rename } for pid=8661 comm="syz.0.640" name="#1c" dev="tmpfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 120.009566][ T5935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.022692][ T5935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.026497][ T5935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.033819][ T5935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.038409][ T5935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.116795][ T6901] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.158731][ T40] audit: type=1400 audit(120.061:518): avc: denied { ioctl } for pid=8684 comm="syz.3.647" path="socket:[31021]" dev="sockfs" ino=31021 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 120.206991][ T6901] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.244634][ T8669] chnl_net:caif_netlink_parms(): no params data found [ 120.360923][ T8669] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.365300][ T8669] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.368509][ T8669] bridge_slave_0: entered allmulticast mode [ 120.372356][ T8669] bridge_slave_0: entered promiscuous mode [ 120.378465][ T8669] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.381562][ T8669] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.385416][ T8669] bridge_slave_1: entered allmulticast mode [ 120.389359][ T8669] bridge_slave_1: entered promiscuous mode [ 120.389386][ T40] audit: type=1400 audit(120.291:519): avc: denied { bind } for pid=8697 comm="syz.3.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 120.402354][ T40] audit: type=1400 audit(120.301:520): avc: denied { accept } for pid=8697 comm="syz.3.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 120.408842][ T40] audit: type=1400 audit(120.301:521): avc: denied { connect } for pid=8697 comm="syz.3.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 120.469886][ T8669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.484916][ T8669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.526693][ T6901] bridge_slave_1: left allmulticast mode [ 120.529046][ T6901] bridge_slave_1: left promiscuous mode [ 120.531473][ T6901] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.537516][ T6901] bridge_slave_0: left allmulticast mode [ 120.539895][ T6901] bridge_slave_0: left promiscuous mode [ 120.542391][ T6901] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.771700][ T6901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.776259][ T6901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.780145][ T6901] bond0 (unregistering): Released all slaves [ 120.809053][ T8669] team0: Port device team_slave_0 added [ 120.814514][ T8669] team0: Port device team_slave_1 added [ 120.861914][ T8709] syzkaller1: entered promiscuous mode [ 120.869917][ T8709] syzkaller1: entered allmulticast mode [ 120.874532][ T8669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.877531][ T8669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.888249][ T8669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.894385][ T8669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.897233][ T8669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.906668][ T8669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.996964][ T8669] hsr_slave_0: entered promiscuous mode [ 120.999921][ T8669] hsr_slave_1: entered promiscuous mode [ 121.029460][ T8717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.656'. [ 121.196805][ T6901] hsr_slave_0: left promiscuous mode [ 121.200012][ T6901] hsr_slave_1: left promiscuous mode [ 121.202023][ T6901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.204676][ T6901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.207530][ T6901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.210093][ T6901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.270490][ T6901] veth1_macvtap: left promiscuous mode [ 121.273014][ T6901] veth0_macvtap: left promiscuous mode [ 121.275506][ T6901] veth1_vlan: left promiscuous mode [ 121.277859][ T6901] veth0_vlan: left promiscuous mode [ 121.304316][ T8733] kvm: pic: non byte write [ 121.315136][ T63] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 122.112413][ T63] Bluetooth: hci1: command tx timeout [ 122.206238][ T63] Bluetooth: hci2: unknown advertising packet type: 0x82 [ 122.206262][ T63] Bluetooth: hci2: Dropping invalid advertising data [ 122.210974][ T63] Bluetooth: hci2: unknown advertising packet type: 0xff [ 122.210994][ T63] Bluetooth: hci2: Malformed LE Event: 0x02 [ 122.607749][ T6901] team0 (unregistering): Port device team_slave_1 removed [ 122.693282][ T6901] team0 (unregistering): Port device team_slave_0 removed [ 122.781556][ T8739] Set syz1 is full, maxelem 65536 reached [ 123.256235][ T8774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.675'. [ 123.332470][ T63] Bluetooth: hci3: unknown advertising packet type: 0x82 [ 123.332494][ T63] Bluetooth: hci3: Dropping invalid advertising data [ 123.337500][ T63] Bluetooth: hci3: unknown advertising packet type: 0xff [ 123.337516][ T63] Bluetooth: hci3: Malformed LE Event: 0x02 [ 123.480536][ T8789] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 123.489799][ T8789] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 123.710327][ T8669] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 123.719430][ T8669] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 123.723317][ T8669] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 123.727271][ T8669] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 123.768159][ T8795] binder: 8794:8795 ioctl c0306201 0 returned -14 [ 123.770979][ T8669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.780259][ T8669] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.786673][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.789083][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.795770][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.798856][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.960122][ T8669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.984626][ T8669] veth0_vlan: entered promiscuous mode [ 123.989507][ T8669] veth1_vlan: entered promiscuous mode [ 124.011629][ T8669] veth0_macvtap: entered promiscuous mode [ 124.017222][ T8669] veth1_macvtap: entered promiscuous mode [ 124.031027][ T8669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.039529][ T8669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.046097][ T8669] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.048882][ T8669] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.051601][ T8669] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.055903][ T8669] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.089692][ T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.095481][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.110242][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.113917][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.118538][ T40] audit: type=1400 audit(124.021:522): avc: denied { execute } for pid=8812 comm="syz.0.684" path="/dev/audio1" dev="devtmpfs" ino=1317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 124.128943][ T8814] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 124.288592][ T40] audit: type=1400 audit(124.191:523): avc: denied { read } for pid=8817 comm="syz.3.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 124.418331][ T8827] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.467495][ T8831] netlink: 'syz.5.691': attribute type 9 has an invalid length. [ 124.479101][ T8831] netlink: 96 bytes leftover after parsing attributes in process `syz.5.691'. [ 124.524111][ T8833] usb usb9: check_ctrlrecip: process 8833 (syz.3.692) requesting ep 01 but needs 81 [ 124.527625][ T8833] usb usb9: usbfs: process 8833 (syz.3.692) did not claim interface 0 before use [ 124.536206][ T8833] loop6: detected capacity change from 0 to 63 [ 124.538547][ T40] audit: type=1400 audit(124.441:524): avc: denied { map } for pid=8832 comm="syz.3.692" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.539431][ T8833] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.548137][ T40] audit: type=1400 audit(124.441:525): avc: denied { execute } for pid=8832 comm="syz.3.692" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.553522][ T8833] Buffer I/O error on dev loop6, logical block 1, async page read [ 124.563604][ T8833] Buffer I/O error on dev loop6, logical block 2, async page read [ 124.566951][ T8833] Buffer I/O error on dev loop6, logical block 3, async page read [ 124.570438][ T8833] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.573954][ T8833] Buffer I/O error on dev loop6, logical block 1, async page read [ 124.577143][ T8833] Buffer I/O error on dev loop6, logical block 2, async page read [ 124.580485][ T8833] Buffer I/O error on dev loop6, logical block 3, async page read [ 124.585047][ T8833] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.588331][ T8833] Buffer I/O error on dev loop6, logical block 1, async page read [ 124.979109][ T8842] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 124.981857][ T8842] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 124.987252][ T8842] vhci_hcd vhci_hcd.0: Device attached [ 125.076374][ T8843] vhci_hcd: connection closed [ 125.076552][ T90] vhci_hcd: stop threads [ 125.080322][ T90] vhci_hcd: release socket [ 125.082228][ T90] vhci_hcd: disconnect device [ 125.462244][ T63] Bluetooth: hci3: unknown advertising packet type: 0x82 [ 125.462443][ T63] Bluetooth: hci3: Dropping invalid advertising data [ 125.468118][ T63] Bluetooth: hci3: unknown advertising packet type: 0xff [ 125.468165][ T63] Bluetooth: hci3: Malformed LE Event: 0x02 [ 125.532897][ T8855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.699'. [ 125.734688][ T8868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.702'. [ 125.738617][ T8868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.702'. [ 125.845371][ T8872] 9pnet_virtio: no channels available for device syz [ 126.481494][ T1140] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.888094][ T40] audit: type=1400 audit(127.791:526): avc: denied { mount } for pid=8914 comm="syz.0.718" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 127.908986][ T40] audit: type=1400 audit(127.811:527): avc: denied { mounton } for pid=8914 comm="syz.0.718" path="/254/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 127.926112][ T8915] devpts: Unknown parameter 'mode 0000000' [ 127.926165][ T40] audit: type=1400 audit(127.831:528): avc: denied { remount } for pid=8914 comm="syz.0.718" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 127.955912][ T40] audit: type=1400 audit(127.861:529): avc: denied { unmount } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 128.008373][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.016838][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.020689][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 128.024162][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 128.027528][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 128.028908][ T40] audit: type=1400 audit(127.931:530): avc: denied { bind } for pid=8923 comm="syz.0.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 128.081453][ T1140] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.084019][ T40] audit: type=1400 audit(127.981:531): avc: denied { getopt } for pid=8932 comm="syz.3.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 128.125660][ T8943] netlink: 56 bytes leftover after parsing attributes in process `syz.3.727'. [ 128.126348][ T8942] netlink: 'syz.0.726': attribute type 10 has an invalid length. [ 128.175964][ T1140] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.176759][ T8948] netlink: 'syz.0.729': attribute type 1 has an invalid length. [ 128.182030][ T8948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.186197][ T8948] program syz.0.729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.230552][ T8927] chnl_net:caif_netlink_parms(): no params data found [ 128.277019][ T1140] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.353176][ T8927] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.356102][ T8927] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.358470][ T8927] bridge_slave_0: entered allmulticast mode [ 128.361089][ T8927] bridge_slave_0: entered promiscuous mode [ 128.364419][ T8927] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.366676][ T8927] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.368996][ T8927] bridge_slave_1: entered allmulticast mode [ 128.371566][ T8927] bridge_slave_1: entered promiscuous mode [ 128.418130][ T8927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.425212][ T8927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.488104][ T8927] team0: Port device team_slave_0 added [ 128.497934][ T8927] team0: Port device team_slave_1 added [ 128.500022][ T1140] bridge_slave_1: left allmulticast mode [ 128.501916][ T1140] bridge_slave_1: left promiscuous mode [ 128.506481][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.510849][ T1140] bridge_slave_0: left allmulticast mode [ 128.512853][ T1140] bridge_slave_0: left promiscuous mode [ 128.514841][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.798625][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.807124][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.813419][ T1140] bond0 (unregistering): Released all slaves [ 128.917842][ T8927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.920715][ T8927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.922678][ T72] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 128.931160][ T8927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.939238][ T8927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.942088][ T8927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.954656][ T8927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.039566][ T8927] hsr_slave_0: entered promiscuous mode [ 129.041809][ T8927] hsr_slave_1: entered promiscuous mode [ 129.045787][ T8927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.048710][ T8927] Cannot create hsr debugfs directory [ 129.094632][ T72] usb 8-1: device descriptor read/64, error -71 [ 129.192657][ T1140] hsr_slave_0: left promiscuous mode [ 129.195674][ T1140] hsr_slave_1: left promiscuous mode [ 129.198594][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.201786][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.207561][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.210629][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.244263][ T1140] veth1_macvtap: left promiscuous mode [ 129.246191][ T1140] veth0_macvtap: left promiscuous mode [ 129.248431][ T1140] veth1_vlan: left promiscuous mode [ 129.250129][ T1140] veth0_vlan: left promiscuous mode [ 129.342471][ T72] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 129.472513][ T72] usb 8-1: device descriptor read/64, error -71 [ 129.587261][ T72] usb usb8-port1: attempt power cycle [ 129.705903][ T5938] Bluetooth: hci2: unknown advertising packet type: 0x82 [ 129.705939][ T5938] Bluetooth: hci2: Dropping invalid advertising data [ 129.712042][ T5938] Bluetooth: hci2: unknown advertising packet type: 0xff [ 129.712065][ T5938] Bluetooth: hci2: Malformed LE Event: 0x02 [ 129.932895][ T72] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 129.952802][ T72] usb 8-1: device descriptor read/8, error -71 [ 129.985384][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 130.061437][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 130.112574][ T5938] Bluetooth: hci1: command tx timeout [ 130.222456][ T72] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 130.258172][ T72] usb 8-1: device descriptor read/8, error -71 [ 130.363892][ T72] usb usb8-port1: unable to enumerate USB device [ 130.643530][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.742'. [ 130.711250][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 130.711265][ T40] audit: type=1400 audit(130.611:536): avc: denied { cmd } for pid=9014 comm="syz.0.745" path="socket:[33568]" dev="sockfs" ino=33568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 130.724271][ T9019] netlink: 14 bytes leftover after parsing attributes in process `syz.5.746'. [ 130.808702][ T9019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.816266][ T9019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.820247][ T9019] bond0 (unregistering): Released all slaves [ 131.018630][ T5938] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 131.156435][ T8927] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 131.160545][ T8927] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 131.164602][ T8927] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 131.169330][ T8927] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 131.249499][ T8927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.259761][ T8927] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.266960][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.270024][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.278264][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.281328][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.432725][ T8927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.453016][ T8927] veth0_vlan: entered promiscuous mode [ 131.460163][ T8927] veth1_vlan: entered promiscuous mode [ 131.478494][ T8927] veth0_macvtap: entered promiscuous mode [ 131.482132][ T8927] veth1_macvtap: entered promiscuous mode [ 131.490619][ T8927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.496188][ T8927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.501288][ T8927] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.510137][ T8927] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.512897][ T8927] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.515786][ T8927] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.566450][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.568846][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.590679][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.594496][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.918216][ T40] audit: type=1400 audit(131.821:537): avc: denied { ioctl } for pid=9085 comm="syz.3.760" path="socket:[34934]" dev="sockfs" ino=34934 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 131.961717][ T9088] Cache volume key already in use (9p,syz,) [ 132.288179][ T9114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=9114 comm=syz.5.768 [ 132.295805][ T40] audit: type=1400 audit(132.201:538): avc: denied { unmount } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 132.348462][ T40] audit: type=1400 audit(132.251:539): avc: denied { ioctl } for pid=9118 comm="syz.5.770" path="socket:[34572]" dev="sockfs" ino=34572 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.369600][ T40] audit: type=1400 audit(132.271:540): avc: denied { mounton } for pid=9118 comm="syz.5.770" path="/66/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 132.423995][ T9126] netlink: 12 bytes leftover after parsing attributes in process `syz.5.770'. [ 132.597274][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.599418][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.680596][ T40] audit: type=1400 audit(132.581:541): avc: denied { ioctl } for pid=9130 comm="syz.0.774" path="socket:[34591]" dev="sockfs" ino=34591 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.894111][ T9144] sctp: [Deprecated]: syz.0.777 (pid 9144) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.894111][ T9144] Use struct sctp_sack_info instead [ 133.011888][ T40] audit: type=1400 audit(132.911:542): avc: denied { read } for pid=9154 comm="syz.0.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 133.021593][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.781'. [ 133.065548][ T9159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.782'. [ 133.069633][ T9159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.782'. [ 133.129580][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'. [ 133.470037][ T63] Bluetooth: hci2: unknown advertising packet type: 0x82 [ 133.470061][ T63] Bluetooth: hci2: Dropping invalid advertising data [ 133.474598][ T63] Bluetooth: hci2: unknown advertising packet type: 0xff [ 133.474622][ T63] Bluetooth: hci2: Malformed LE Event: 0x02 [ 133.577464][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.272511][ T63] Bluetooth: hci1: command 0xfc11 tx timeout [ 134.275515][ T5938] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 135.068108][ T9192] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 135.073459][ T9192] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 135.094388][ T40] audit: type=1400 audit(134.991:543): avc: denied { mounton } for pid=9193 comm="syz.0.794" path="/288/bus" dev="tmpfs" ino=1577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 135.095253][ T9195] ntfs3(nbd0): try to read out of volume at offset 0x0 [ 135.096547][ T5935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 135.100026][ T5935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 135.100777][ T5935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 135.101609][ T5935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 135.102148][ T5935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 135.159070][ T5935] Bluetooth: hci2: unknown advertising packet type: 0x82 [ 135.159105][ T5935] Bluetooth: hci2: Dropping invalid advertising data [ 135.165102][ T5935] Bluetooth: hci2: unknown advertising packet type: 0xff [ 135.165125][ T5935] Bluetooth: hci2: Malformed LE Event: 0x02 [ 135.296956][ T9194] chnl_net:caif_netlink_parms(): no params data found [ 135.339780][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.411244][ T9194] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.414283][ T9194] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.416990][ T9194] bridge_slave_0: entered allmulticast mode [ 135.419849][ T9194] bridge_slave_0: entered promiscuous mode [ 135.446937][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.456154][ T9194] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.459173][ T9194] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.462506][ T9194] bridge_slave_1: entered allmulticast mode [ 135.467438][ T9194] bridge_slave_1: entered promiscuous mode [ 135.514278][ T9194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.525942][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.534086][ T9194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.575501][ T9194] team0: Port device team_slave_0 added [ 135.579458][ T9194] team0: Port device team_slave_1 added [ 135.618583][ T9194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.620870][ T9194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.629900][ T9194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.636670][ T9194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.639662][ T9194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.650168][ T9194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.703543][ T12] bridge_slave_1: left allmulticast mode [ 135.705514][ T12] bridge_slave_1: left promiscuous mode [ 135.707398][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.710964][ T12] bridge_slave_0: left allmulticast mode [ 135.713008][ T12] bridge_slave_0: left promiscuous mode [ 135.714797][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.974438][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.978910][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.985010][ T12] bond0 (unregistering): Released all slaves [ 136.027818][ T9194] hsr_slave_0: entered promiscuous mode [ 136.029953][ T9194] hsr_slave_1: entered promiscuous mode [ 136.044801][ T40] audit: type=1400 audit(135.951:544): avc: denied { mount } for pid=9213 comm="syz.5.798" name="/" dev="hugetlbfs" ino=36271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 136.073066][ T40] audit: type=1400 audit(135.981:545): avc: denied { unmount } for pid=8407 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 136.140324][ T40] audit: type=1400 audit(136.041:546): avc: denied { firmware_load } for pid=9218 comm="syz.5.799" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 136.192503][ T9219] syz.5.799 (9219) used greatest stack depth: 19640 bytes left [ 136.207139][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.802'. [ 136.221365][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.802'. [ 136.307782][ T9236] netlink: 24 bytes leftover after parsing attributes in process `syz.5.803'. [ 136.329767][ T12] hsr_slave_0: left promiscuous mode [ 136.342506][ T12] hsr_slave_1: left promiscuous mode [ 136.345409][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.347855][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.350969][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.360486][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.399621][ T12] veth1_macvtap: left promiscuous mode [ 136.401574][ T12] veth0_macvtap: left promiscuous mode [ 136.403593][ T12] veth1_vlan: left promiscuous mode [ 136.405355][ T12] veth0_vlan: left promiscuous mode [ 136.465404][ T40] audit: type=1400 audit(136.371:547): avc: denied { create } for pid=9228 comm="syz.0.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 136.483818][ T9229] ptrace attach of "/syz-executor exec"[9241] was attempted by "/syz-executor exec"[9229] [ 136.525253][ T40] audit: type=1400 audit(136.431:548): avc: denied { watch } for pid=9242 comm="syz.0.806" path="/293" dev="tmpfs" ino=1599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 136.531651][ T40] audit: type=1400 audit(136.431:549): avc: denied { watch_sb } for pid=9242 comm="syz.0.806" path="/293" dev="tmpfs" ino=1599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 136.549223][ T40] audit: type=1400 audit(136.441:550): avc: denied { mounton } for pid=9242 comm="syz.0.806" path="/proc/850/task" dev="proc" ino=36437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 136.568453][ T40] audit: type=1400 audit(136.451:551): avc: denied { associate } for pid=9244 comm="syz.0.806" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 137.005576][ T5935] Bluetooth: hci3: command 0x0405 tx timeout [ 137.166537][ T5935] Bluetooth: hci1: command tx timeout [ 137.361188][ T12] team0 (unregistering): Port device team_slave_1 removed [ 137.439968][ T12] team0 (unregistering): Port device team_slave_0 removed [ 137.599724][ T5935] Bluetooth: hci3: unknown advertising packet type: 0x82 [ 137.599753][ T5935] Bluetooth: hci3: Dropping invalid advertising data [ 137.605091][ T5935] Bluetooth: hci3: unknown advertising packet type: 0xff [ 137.605116][ T5935] Bluetooth: hci3: Malformed LE Event: 0x02 [ 137.727852][ T40] audit: type=1400 audit(137.631:552): avc: denied { write } for pid=9258 comm="syz.5.811" name="usbmon6" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 137.737029][ T40] audit: type=1400 audit(137.641:553): avc: denied { ioctl } for pid=9258 comm="syz.5.811" path="/dev/usbmon6" dev="devtmpfs" ino=757 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 138.046377][ T9249] netlink: 64 bytes leftover after parsing attributes in process `syz.3.807'. [ 138.054720][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.814'. [ 138.060526][ T9267] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 138.113558][ T9272] Mount JFS Failure: -22 [ 138.117783][ T9272] netlink: 'syz.3.816': attribute type 1 has an invalid length. [ 138.119005][ T9276] 9pnet_virtio: no channels available for device syz [ 138.121091][ T9272] netlink: 224 bytes leftover after parsing attributes in process `syz.3.816'. [ 138.193601][ T5935] Bluetooth: hci3: unknown advertising packet type: 0x82 [ 138.193632][ T5935] Bluetooth: hci3: Dropping invalid advertising data [ 138.198933][ T5935] Bluetooth: hci3: unknown advertising packet type: 0xff [ 138.198954][ T5935] Bluetooth: hci3: Malformed LE Event: 0x02 [ 138.290219][ T9281] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 138.340295][ T9288] afs: Unknown parameter 'dynoup.stat' [ 138.348954][ T9283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.355740][ T9283] bond0: (slave rose0): Enslaving as an active interface with an up link [ 138.433656][ T9194] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 138.439116][ T9194] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 138.446697][ T9194] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 138.451154][ T9194] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 138.504497][ T9194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.513794][ T9194] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.518503][ T6873] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.520841][ T6873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.535199][ T6873] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.537632][ T6873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.578865][ T5935] Bluetooth: hci3: unknown advertising packet type: 0x82 [ 138.578898][ T5935] Bluetooth: hci3: Dropping invalid advertising data [ 138.585933][ T5935] Bluetooth: hci3: unknown advertising packet type: 0xff [ 138.585956][ T5935] Bluetooth: hci3: Malformed LE Event: 0x02 [ 138.654389][ T9194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.676960][ T9194] veth0_vlan: entered promiscuous mode [ 138.681610][ T9194] veth1_vlan: entered promiscuous mode [ 138.716283][ T9194] veth0_macvtap: entered promiscuous mode [ 138.730478][ T9194] veth1_macvtap: entered promiscuous mode [ 138.744574][ T9194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.754423][ T9194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.761618][ T9194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.769437][ T9194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.772073][ T9194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.774884][ T9194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.832244][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.836779][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.855032][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.858277][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.987492][ T9359] FAULT_INJECTION: forcing a failure. [ 138.987492][ T9359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.994342][ T9359] CPU: 3 UID: 0 PID: 9359 Comm: syz.0.835 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 138.994367][ T9359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 138.994379][ T9359] Call Trace: [ 138.994386][ T9359] [ 138.994394][ T9359] dump_stack_lvl+0x16c/0x1f0 [ 138.994446][ T9359] should_fail_ex+0x512/0x640 [ 138.994482][ T9359] _copy_to_user+0x32/0xd0 [ 138.994511][ T9359] simple_read_from_buffer+0xcb/0x170 [ 138.994538][ T9359] proc_fail_nth_read+0x197/0x270 [ 138.994560][ T9359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.994585][ T9359] ? rw_verify_area+0xcf/0x680 [ 138.994605][ T9359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.994629][ T9359] vfs_read+0x1e1/0xc60 [ 138.994654][ T9359] ? __pfx___mutex_lock+0x10/0x10 [ 138.994679][ T9359] ? __pfx_vfs_read+0x10/0x10 [ 138.994707][ T9359] ? __fget_files+0x20e/0x3c0 [ 138.994737][ T9359] ksys_read+0x12a/0x250 [ 138.994757][ T9359] ? __pfx_ksys_read+0x10/0x10 [ 138.994782][ T9359] do_syscall_64+0xcd/0x4c0 [ 138.994826][ T9359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.994842][ T9359] RIP: 0033:0x7fc0fed8d33c [ 138.994854][ T9359] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 138.994870][ T9359] RSP: 002b:00007fc0ffcc1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.994889][ T9359] RAX: ffffffffffffffda RBX: 00007fc0fefb5fa0 RCX: 00007fc0fed8d33c [ 138.994902][ T9359] RDX: 000000000000000f RSI: 00007fc0ffcc10a0 RDI: 0000000000000004 [ 138.994913][ T9359] RBP: 00007fc0ffcc1090 R08: 0000000000000000 R09: 0000000000000000 [ 138.994925][ T9359] R10: 0000200000019400 R11: 0000000000000246 R12: 0000000000000001 [ 138.994936][ T9359] R13: 0000000000000000 R14: 00007fc0fefb5fa0 R15: 00007ffc4d875e68 [ 138.994961][ T9359] [ 139.161828][ T9363] openvswitch: netlink: Key type 30 is not supported [ 139.302877][ T7169] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 139.471097][ T9380] netlink: 232 bytes leftover after parsing attributes in process `syz.3.843'. [ 139.509479][ T9380] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.843'. [ 139.538995][ T9384] netlink: 36 bytes leftover after parsing attributes in process `syz.3.845'. [ 139.582087][ T9387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.638161][ T9387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.696035][ T9387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.310530][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.850'. [ 140.402284][ T9405] xt_hashlimit: size too large, truncated to 1048576 [ 140.561843][ T9430] TCP: TCP_TX_DELAY enabled [ 140.641001][ T9441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.644440][ T9441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.757670][ T9454] kernel read not supported for file /policy (pid: 9454 comm: syz.0.868) [ 140.872391][ T9463] loop2: detected capacity change from 0 to 7 [ 140.875375][ T9463] Dev loop2: unable to read RDB block 7 [ 140.877157][ T9463] loop2: AHDI p1 p2 p3 [ 140.878480][ T9463] loop2: partition table partially beyond EOD, truncated [ 140.880875][ T9463] loop2: p1 start 1601398130 is beyond EOD, truncated [ 140.883692][ T9463] loop2: p2 start 1702059890 is beyond EOD, truncated [ 140.971538][ T6873] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.516377][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 142.516392][ T40] audit: type=1400 audit(142.421:558): avc: denied { accept } for pid=9476 comm="syz.5.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 142.544919][ T9474] netlink: 'syz.3.877': attribute type 21 has an invalid length. [ 142.581183][ T6873] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.636912][ T40] audit: type=1400 audit(142.541:559): avc: denied { shutdown } for pid=9482 comm="syz.0.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 142.691110][ T6873] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.700027][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 142.707916][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 142.711445][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 142.717210][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 142.720217][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 142.788973][ T6873] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.902100][ T9494] chnl_net:caif_netlink_parms(): no params data found [ 142.951776][ T40] audit: type=1400 audit(142.851:560): avc: denied { bind } for pid=9519 comm="syz.5.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 142.959476][ T40] audit: type=1400 audit(142.861:561): avc: denied { listen } for pid=9519 comm="syz.5.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.012556][ T9527] __nla_validate_parse: 2 callbacks suppressed [ 143.012568][ T9527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.884'. [ 143.017331][ T9527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.111950][ T9494] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.115089][ T9494] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.118286][ T9494] bridge_slave_0: entered allmulticast mode [ 143.122162][ T9494] bridge_slave_0: entered promiscuous mode [ 143.145464][ T9494] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.148379][ T9494] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.151394][ T9494] bridge_slave_1: entered allmulticast mode [ 143.155762][ T9494] bridge_slave_1: entered promiscuous mode [ 143.198440][ T6873] bridge_slave_1: left allmulticast mode [ 143.201067][ T6873] bridge_slave_1: left promiscuous mode [ 143.206930][ T6873] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.214414][ T6873] bridge_slave_0: left allmulticast mode [ 143.216884][ T6873] bridge_slave_0: left promiscuous mode [ 143.219246][ T6873] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.406414][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.888'. [ 143.412389][ T40] audit: type=1400 audit(143.311:562): avc: denied { mount } for pid=9541 comm="syz.5.888" name="/" dev="configfs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 143.498466][ T9546] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 143.501851][ T6873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.507649][ T6873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.510517][ T9546] kvm: pic: level sensitive irq not supported [ 143.511133][ T9546] kvm: pic: non byte read [ 143.511967][ T6873] bond0 (unregistering): Released all slaves [ 143.551766][ T9494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.559563][ T9494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.662458][ T5979] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 143.705472][ T9494] team0: Port device team_slave_0 added [ 143.710838][ T9494] team0: Port device team_slave_1 added [ 143.784022][ T9494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.786954][ T9494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.792439][ T5979] usb 10-1: device descriptor read/64, error -71 [ 143.809865][ T9494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.815133][ T9494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.817131][ T9494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.824444][ T9494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.888963][ T9494] hsr_slave_0: entered promiscuous mode [ 143.891062][ T9494] hsr_slave_1: entered promiscuous mode [ 143.894823][ T9494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.897089][ T9494] Cannot create hsr debugfs directory [ 143.942190][ T6873] hsr_slave_0: left promiscuous mode [ 143.944529][ T6873] hsr_slave_1: left promiscuous mode [ 143.946609][ T6873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.946628][ T6873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.953291][ T6873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.953306][ T6873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.991587][ T6873] veth1_macvtap: left promiscuous mode [ 143.991676][ T6873] veth0_macvtap: left promiscuous mode [ 143.991823][ T6873] veth1_vlan: left promiscuous mode [ 143.991920][ T6873] veth0_vlan: left promiscuous mode [ 144.052619][ T5979] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 144.192412][ T5979] usb 10-1: device descriptor read/64, error -71 [ 144.302719][ T5979] usb usb10-port1: attempt power cycle [ 144.662450][ T5979] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 144.688326][ T5979] usb 10-1: device descriptor read/8, error -71 [ 144.764476][ T5935] Bluetooth: hci1: command tx timeout [ 144.839441][ T6873] team0 (unregistering): Port device team_slave_1 removed [ 144.907821][ T6873] team0 (unregistering): Port device team_slave_0 removed [ 144.923449][ T5979] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 144.945064][ T5979] usb 10-1: device descriptor read/8, error -71 [ 145.056587][ T5979] usb usb10-port1: unable to enumerate USB device [ 145.522009][ T9589] netlink: 64 bytes leftover after parsing attributes in process `syz.3.898'. [ 145.567110][ T9598] netlink: 160 bytes leftover after parsing attributes in process `syz.3.900'. [ 145.795356][ T9608] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 145.799395][ T9608] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 145.971049][ T9494] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 145.977422][ T9494] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 145.983195][ T9494] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 145.989412][ T9494] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 146.126653][ T9494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.142046][ T9494] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.149572][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.152684][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.179495][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.182525][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.370351][ T40] audit: type=1400 audit(146.271:563): avc: denied { write } for pid=9639 comm="syz.0.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 146.405502][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.5.917'. [ 146.411529][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.917'. [ 146.424929][ T9494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.469281][ T9494] veth0_vlan: entered promiscuous mode [ 146.480165][ T9494] veth1_vlan: entered promiscuous mode [ 146.514762][ T9494] veth0_macvtap: entered promiscuous mode [ 146.521305][ T9494] veth1_macvtap: entered promiscuous mode [ 146.527979][ T9665] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 146.542145][ T9494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.553315][ T9669] tmpfs: Bad value for 'mpol' [ 146.560732][ T9494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.576633][ T9494] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.580330][ T9494] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.585189][ T9494] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.589047][ T9494] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.595316][ T9671] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 146.654560][ T6901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.657872][ T6901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.681429][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.685731][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.702549][ T40] audit: type=1400 audit(146.601:564): avc: denied { mounton } for pid=9494 comm="syz-executor" path="/syzkaller.JmOpuG/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=41091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 146.713926][ T40] audit: type=1400 audit(146.611:565): avc: denied { mount } for pid=9494 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 146.780986][ T9681] netlink: 'syz.3.927': attribute type 2 has an invalid length. [ 146.788101][ T9681] netlink: 119 bytes leftover after parsing attributes in process `syz.3.927'. [ 146.793542][ T9681] xt_hashlimit: size too large, truncated to 1048576 [ 146.830055][ T9683] syz.0.928: attempt to access beyond end of device [ 146.830055][ T9683] sr0: rw=0, sector=0, nr_sectors = 4 limit=0 [ 146.836006][ T9683] (syz.0.928,9683,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 146.839236][ T9683] (syz.0.928,9683,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 146.842158][ T9683] (syz.0.928,9683,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 146.847234][ T9683] (syz.0.928,9683,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 147.037720][ T40] audit: type=1400 audit(146.941:566): avc: denied { execute } for pid=9700 comm="syz.0.933" path="/proc/sys/fs/binfmt_misc/register" dev="binfmt_misc" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=file permissive=1 [ 147.058095][ T9703] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 147.065551][ T9703] fuse: Unknown parameter 'rootmodo' [ 147.128725][ T40] audit: type=1400 audit(147.031:567): avc: denied { append } for pid=9708 comm="syz.3.936" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 147.720614][ T9730] xt_CONNSECMARK: invalid mode: 0 [ 147.781543][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 147.781559][ T40] audit: type=1400 audit(147.681:570): avc: denied { accept } for pid=9729 comm="syz.0.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 147.866655][ T40] audit: type=1400 audit(147.771:571): avc: denied { connect } for pid=9734 comm="syz.3.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 148.140979][ T9753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.951'. [ 148.140980][ T9752] netlink: 28 bytes leftover after parsing attributes in process `syz.0.951'. [ 148.141010][ T9752] netlink: 'syz.0.951': attribute type 7 has an invalid length. [ 148.143948][ T9753] netlink: 'syz.0.951': attribute type 7 has an invalid length. [ 148.143964][ T9753] netlink: 'syz.0.951': attribute type 8 has an invalid length. [ 148.143971][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.951'. [ 148.162999][ T9752] netlink: 'syz.0.951': attribute type 8 has an invalid length. [ 148.166894][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.951'. [ 148.313200][ T9757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'. [ 148.619248][ T40] audit: type=1400 audit(148.521:572): avc: denied { watch_reads } for pid=9768 comm="syz.5.956" path="/116/file0" dev="tmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 148.672196][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.956'. [ 148.677765][ T40] audit: type=1400 audit(148.581:573): avc: denied { append } for pid=9768 comm="syz.5.956" name="video7" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 148.691027][ T9777] KVM: debugfs: duplicate directory 9777-5 [ 148.818978][ T40] audit: type=1400 audit(148.721:574): avc: denied { mount } for pid=9782 comm="syz.0.960" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 148.896152][ T40] audit: type=1400 audit(148.801:575): avc: denied { write } for pid=9787 comm="syz.0.962" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 148.900537][ T9788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.909712][ T9788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.916008][ T9788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.922380][ T9788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.943204][ T5935] Bluetooth: hci2: unknown advertising packet type: 0x82 [ 148.943234][ T5935] Bluetooth: hci2: Dropping invalid advertising data [ 148.947885][ T5935] Bluetooth: hci2: unknown advertising packet type: 0xff [ 148.947898][ T5935] Bluetooth: hci2: Malformed LE Event: 0x02 [ 148.980140][ T9793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.025912][ T6873] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.649551][ T40] audit: type=1400 audit(150.551:576): avc: denied { accept } for pid=9803 comm="syz.0.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 150.778771][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.783854][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.786767][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.790045][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.790176][ T9805] team0 (unregistering): Port device team_slave_0 removed [ 150.794137][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.806277][ T9805] team0 (unregistering): Port device team_slave_1 removed [ 150.842995][ T6873] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.921122][ T6873] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.999658][ T6873] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.019111][ T9815] chnl_net:caif_netlink_parms(): no params data found [ 151.138796][ T9815] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.141811][ T9815] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.145271][ T9815] bridge_slave_0: entered allmulticast mode [ 151.149059][ T9815] bridge_slave_0: entered promiscuous mode [ 151.153714][ T9815] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.156824][ T9815] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.159980][ T9815] bridge_slave_1: entered allmulticast mode [ 151.164301][ T9815] bridge_slave_1: entered promiscuous mode [ 151.232221][ T9815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.239242][ T9815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.244717][ T6873] bridge_slave_1: left allmulticast mode [ 151.247160][ T6873] bridge_slave_1: left promiscuous mode [ 151.249643][ T6873] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.256546][ T6873] bridge_slave_0: left allmulticast mode [ 151.258496][ T6873] bridge_slave_0: left promiscuous mode [ 151.260944][ T6873] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.635760][ T5935] Bluetooth: hci2: unknown advertising packet type: 0x82 [ 151.635793][ T5935] Bluetooth: hci2: Dropping invalid advertising data [ 151.643969][ T5935] Bluetooth: hci2: Malformed LE Event: 0x02 [ 151.647178][ T9837] netlink: 'syz.5.973': attribute type 5 has an invalid length. [ 151.647541][ T6873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.656837][ T6873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.662434][ T6873] bond0 (unregistering): Released all slaves [ 151.733897][ T9815] team0: Port device team_slave_0 added [ 151.749271][ T9815] team0: Port device team_slave_1 added [ 151.821930][ T9844] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.976'. [ 151.827488][ T60] IPVS: starting estimator thread 0... [ 151.874775][ T9815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.877740][ T9815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.889240][ T9815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.898127][ T9815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.901475][ T9815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.912237][ T9815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.922902][ T9848] IPVS: using max 26 ests per chain, 62400 per kthread [ 151.967443][ T40] audit: type=1326 audit(151.871:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9852 comm="syz.5.978" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61b778e929 code=0x7ffc0000 [ 151.970208][ T9855] netlink: 64 bytes leftover after parsing attributes in process `syz.3.979'. [ 151.978751][ T40] audit: type=1326 audit(151.871:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9852 comm="syz.5.978" exe="/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f61b778e929 code=0x7ffc0000 [ 151.980782][ T9815] hsr_slave_0: entered promiscuous mode [ 151.991970][ T40] audit: type=1326 audit(151.871:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9852 comm="syz.5.978" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61b778e929 code=0x7ffc0000 [ 151.994807][ T9815] hsr_slave_1: entered promiscuous mode [ 152.007356][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.978'. [ 152.105564][ T6873] hsr_slave_0: left promiscuous mode [ 152.108719][ T6873] hsr_slave_1: left promiscuous mode [ 152.111522][ T6873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.115503][ T6873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.121609][ T6873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.124562][ T6873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.147558][ T6873] veth1_macvtap: left promiscuous mode [ 152.149340][ T6873] veth0_macvtap: left promiscuous mode [ 152.151141][ T6873] veth1_vlan: left promiscuous mode [ 152.152914][ T6873] veth0_vlan: left promiscuous mode [ 152.251131][ T9870] block nbd5: not configured, cannot reconfigure [ 152.314717][ T52] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 152.467570][ T52] usb 5-1: not running at top speed; connect to a high speed hub [ 152.471959][ T52] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 152.476398][ T52] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 152.485205][ T52] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.492392][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.495834][ T52] usb 5-1: Product: à°„ [ 152.497590][ T52] usb 5-1: Manufacturer: 潎é½è¢žä”‹ç§œæ·†î³¤æ‡‘ë é»‡ä¹Žá½£ç¤¯ëœ‹ãž¾ã‚䪒駽龶쬖ấ镲笔芴磢䈬ꂾâ¤å‘ƒî‹íˆ–터廤é«ä°ˆì¸å¸‚ᶩè¹ã„¡è€²è«¯çµžç¥ä¶ªç”½Ñšã’䉫섌ꞧ孡蜦檚霒Ὠ敕鎽땓᠂ᯤ鞸꒺㟫혫풕딙㙽埬ꙫ㠰䔂餚콮㔎㴞嚧â”⿾鿯晈섕빆矛㫉屉෡췶䢷ᠶᴵ꺾ᥧ⊊든軎י摪젶ê༢â–ꂆ⊓ [ 152.510044][ T52] usb 5-1: SerialNumber: †[ 152.517616][ T9861] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.832636][ T5935] Bluetooth: hci1: command tx timeout [ 152.950163][ T52] cdc_ncm 5-1:1.0: bind() failure [ 152.960814][ T52] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 152.965896][ T52] cdc_ncm 5-1:1.1: bind() failure [ 152.971032][ T52] usb 5-1: USB disconnect, device number 7 [ 152.993607][ T6873] team0 (unregistering): Port device team_slave_1 removed [ 153.077522][ T6873] team0 (unregistering): Port device team_slave_0 removed [ 153.150937][ T9877] netlink: 48 bytes leftover after parsing attributes in process `syz.3.986'. [ 153.272393][ T52] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 153.422604][ T52] usb 5-1: Using ep0 maxpacket: 32 [ 153.426507][ T52] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 153.432812][ T52] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 153.436611][ T52] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 153.440010][ T52] usb 5-1: Product: syz [ 153.441823][ T52] usb 5-1: Manufacturer: syz [ 153.444009][ T52] usb 5-1: SerialNumber: syz [ 153.456992][ T52] usb 5-1: config 0 descriptor?? [ 153.459937][ T9874] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.463827][ T52] hub 5-1:0.0: bad descriptor, ignoring hub [ 153.466483][ T52] hub 5-1:0.0: probe with driver hub failed with error -5 [ 153.772703][ T10] usb 5-1: USB disconnect, device number 8 [ 153.794151][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 153.794165][ T40] audit: type=1326 audit(153.701:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.5.987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61b778e929 code=0x7ffc0000 [ 153.806379][ T40] audit: type=1326 audit(153.711:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.5.987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61b778e929 code=0x7ffc0000 [ 153.816215][ T40] audit: type=1326 audit(153.721:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.5.987" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f61b778e929 code=0x7ffc0000 [ 153.826940][ T40] audit: type=1326 audit(153.721:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.5.987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61b778e929 code=0x7ffc0000 [ 153.829021][ T9879] IPv4: Oversized IP packet from 127.202.26.0 [ 153.840359][ T40] audit: type=1326 audit(153.721:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.5.987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61b778e929 code=0x7ffc0000 [ 153.850165][ T40] audit: type=1326 audit(153.721:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.5.987" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f61b778e929 code=0x7ffc0000 [ 153.859576][ T40] audit: type=1326 audit(153.721:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.5.987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61b778e929 code=0x7ffc0000 [ 153.869130][ T40] audit: type=1326 audit(153.721:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.5.987" exe="/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f61b778e929 code=0x7ffc0000 [ 153.881979][ T40] audit: type=1326 audit(153.721:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.5.987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61b778e929 code=0x7ffc0000 [ 153.889726][ T40] audit: type=1326 audit(153.721:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.5.987" exe="/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f61b778e929 code=0x7ffc0000 [ 154.005727][ T9890] Driver unsupported XDP return value 0 on prog (id 200) dev N/A, expect packet loss! [ 154.289797][ T9815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 154.298588][ T9815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 154.305995][ T9815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 154.311951][ T9815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 154.351373][ T9917] mkiss: ax0: crc mode is auto. [ 154.387636][ T9815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.418436][ T9815] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.435646][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.438709][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.451080][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.454118][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.533091][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1001'. [ 154.535284][ T9909] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.997'. [ 154.618439][ T9941] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 154.657985][ T9815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.700730][ T9815] veth0_vlan: entered promiscuous mode [ 154.716957][ T9815] veth1_vlan: entered promiscuous mode [ 154.748593][ T9815] veth0_macvtap: entered promiscuous mode [ 154.754665][ T9815] veth1_macvtap: entered promiscuous mode [ 154.775308][ T9815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.784339][ T9815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.790213][ T9815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.795575][ T9815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.796958][ T9948] syz.0.1004: attempt to access beyond end of device [ 154.796958][ T9948] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 154.799159][ T9815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.807609][ T9815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.817411][ T5935] Bluetooth: hci3: unknown advertising packet type: 0x82 [ 154.817445][ T5935] Bluetooth: hci3: Dropping invalid advertising data [ 154.827956][ T5935] Bluetooth: hci3: Malformed LE Event: 0x02 [ 154.886904][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.890095][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.912412][ T5935] Bluetooth: hci1: command tx timeout [ 154.915985][ T6873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.918634][ T6873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.350811][ T9969] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1011'. [ 155.385132][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.490482][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.579977][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.581219][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.588630][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.593781][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.598969][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.602600][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.695000][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 155.714954][ T9971] chnl_net:caif_netlink_parms(): no params data found [ 155.831514][ T9971] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.834732][ T9971] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.838139][ T9971] bridge_slave_0: entered allmulticast mode [ 155.842155][ T9971] bridge_slave_0: entered promiscuous mode [ 155.850317][ T9971] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.853128][ T9971] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.855422][ T9971] bridge_slave_1: entered allmulticast mode [ 155.858091][ T9971] bridge_slave_1: entered promiscuous mode [ 155.906911][ T9971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.937062][ T9971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.995057][ T12] team0: left allmulticast mode [ 155.997347][ T12] team_slave_0: left allmulticast mode [ 155.999967][ T12] team_slave_1: left allmulticast mode [ 156.003554][ T12] bridge0: port 3(team0) entered disabled state [ 156.008384][ T12] bridge_slave_1: left allmulticast mode [ 156.010771][ T12] bridge_slave_1: left promiscuous mode [ 156.014478][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.020201][ T12] bridge_slave_0: left allmulticast mode [ 156.023279][ T12] bridge_slave_0: left promiscuous mode [ 156.025871][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.229894][ T9993] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1018'. [ 156.264592][ T12] bridge0 (unregistering): left allmulticast mode [ 156.609397][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.615639][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.621722][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 156.633241][ T12] bond0 (unregistering): Released all slaves [ 156.727782][ T12] bond1 (unregistering): Released all slaves [ 156.739353][ T12] bond2 (unregistering): Released all slaves [ 156.754379][ T9971] team0: Port device team_slave_0 added [ 156.770312][ T9971] team0: Port device team_slave_1 added [ 156.832030][ T9971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.835440][ T9971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.847640][ T9971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.853769][ T9971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.853777][ T9990] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 156.856665][ T9971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.859303][ T9990] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 156.870032][ T9971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.879629][ T12] tipc: Disabling bearer [ 156.882589][ T9990] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 156.883248][ T12] tipc: Left network mode [ 156.907555][ T9990] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 156.910164][ T9990] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 156.915543][ T9990] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 156.997417][ T9971] hsr_slave_0: entered promiscuous mode [ 157.000571][ T9971] hsr_slave_1: entered promiscuous mode [ 157.003596][ T9971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.012405][ T9971] Cannot create hsr debugfs directory [ 157.127963][T10006] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1023'. [ 157.136471][T10006] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 157.141753][T10009] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1023'. [ 157.182754][ T12] hsr_slave_0: left promiscuous mode [ 157.186155][ T12] hsr_slave_1: left promiscuous mode [ 157.189000][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.192203][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.196337][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.199447][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.230087][ T12] veth1_macvtap: left promiscuous mode [ 157.233346][ T12] veth0_macvtap: left promiscuous mode [ 157.304476][ T12] pim6reg (unregistering): left allmulticast mode [ 157.844000][ T12] team_slave_1 (unregistering): left promiscuous mode [ 157.849394][ T12] team0 (unregistering): Port device team_slave_1 removed [ 157.925070][ T12] team_slave_0 (unregistering): left promiscuous mode [ 157.928385][ T12] team0 (unregistering): Port device team_slave_0 removed [ 158.414391][ T9971] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 158.418926][ T9971] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 158.424367][ T9971] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 158.428574][ T9971] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 158.517814][ T9971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.532101][ T9971] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.539162][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.542222][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.553176][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.555971][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.705973][ T9971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.751606][ T1147] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.847030][ T1147] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.887439][ T9971] veth0_vlan: entered promiscuous mode [ 158.895151][ T9971] veth1_vlan: entered promiscuous mode [ 158.912550][ T5935] Bluetooth: hci1: command 0x041b tx timeout [ 158.915923][ T5935] Bluetooth: hci3: command 0x0405 tx timeout [ 158.916996][ T9971] veth0_macvtap: entered promiscuous mode [ 158.922204][ T5938] Bluetooth: hci3: unknown advertising packet type: 0x82 [ 158.922235][ T5938] Bluetooth: hci3: Dropping invalid advertising data [ 158.928322][ T5938] Bluetooth: hci3: Malformed LE Event: 0x02 [ 158.947923][ T1147] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.956472][ T9971] veth1_macvtap: entered promiscuous mode [ 158.971024][ T9971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.979151][ T9971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.985163][ T9971] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.988844][ T9971] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.993306][ T9971] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.997001][ T9971] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.025642][ T1147] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.041952][T10046] IPVS: length: 235 != 24 [ 159.069984][ T5935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 159.070522][ T6905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.074925][ T5935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 159.075081][ T6905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.078824][ T5935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 159.081760][ T40] kauditd_printk_skb: 61 callbacks suppressed [ 159.081772][ T40] audit: type=1400 audit(158.981:685): avc: denied { ioctl } for pid=10053 comm="syz.5.1031" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 159.087720][ T5935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 159.093172][ T6905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.093186][ T6905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.096293][T10055] overlayfs: conflicting options: userxattr,redirect_dir=on [ 159.099325][ T5935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 159.161738][ T1147] bridge_slave_1: left allmulticast mode [ 159.164412][ T1147] bridge_slave_1: left promiscuous mode [ 159.166937][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.171904][ T1147] bridge_slave_0: left allmulticast mode [ 159.174852][ T1147] bridge_slave_0: left promiscuous mode [ 159.177330][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.303223][T10067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=10067 comm=syz.3.1034 [ 159.450249][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.456076][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.459800][ T1147] bond0 (unregistering): Released all slaves [ 159.477525][T10065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1034'. [ 159.480377][T10065] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1034'. [ 159.519988][T10071] bridge1: entered promiscuous mode [ 159.568220][T10051] chnl_net:caif_netlink_parms(): no params data found [ 159.614963][T10077] netlink: 'syz.3.1037': attribute type 11 has an invalid length. [ 159.632521][ T7169] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 159.694790][T10051] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.697083][T10051] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.699368][T10051] bridge_slave_0: entered allmulticast mode [ 159.702030][T10051] bridge_slave_0: entered promiscuous mode [ 159.705411][T10051] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.707674][T10051] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.710088][T10051] bridge_slave_1: entered allmulticast mode [ 159.712706][T10051] bridge_slave_1: entered promiscuous mode [ 159.760600][T10086] trusted_key: encrypted_key: insufficient parameters specified [ 159.773227][T10051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.778132][T10051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.793501][ T7169] usb 10-1: Using ep0 maxpacket: 8 [ 159.802576][ T7169] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 159.805427][ T7169] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.807939][ T7169] usb 10-1: Product: syz [ 159.809373][ T7169] usb 10-1: Manufacturer: syz [ 159.810871][ T7169] usb 10-1: SerialNumber: syz [ 159.814883][ T7169] usb 10-1: config 0 descriptor?? [ 159.830644][T10051] team0: Port device team_slave_0 added [ 159.846010][ T1147] hsr_slave_0: left promiscuous mode [ 159.848132][ T1147] hsr_slave_1: left promiscuous mode [ 159.850102][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.852759][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.855967][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.858447][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.878545][ T1147] veth1_macvtap: left promiscuous mode [ 159.880348][ T1147] veth0_macvtap: left promiscuous mode [ 159.882232][ T1147] veth1_vlan: left promiscuous mode [ 159.884656][ T1147] veth0_vlan: left promiscuous mode [ 160.054977][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1041'. [ 160.100322][T10098] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1041'. [ 160.382572][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1041'. [ 160.601267][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 160.696651][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 160.837118][ T7169] dvb_usb_rtl28xxu 10-1:0.0: chip type detection failed -110 [ 160.839486][ T7169] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 160.993220][ T5935] Bluetooth: hci3: command 0x0405 tx timeout [ 160.993253][ T5938] Bluetooth: hci1: command 0x041b tx timeout [ 161.041762][T10120] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 161.165668][ T5938] Bluetooth: hci2: command tx timeout [ 161.352710][T10051] team0: Port device team_slave_1 added [ 161.386659][ T52] usb 10-1: USB disconnect, device number 6 [ 161.446548][T10051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.448823][T10051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.464116][T10051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.471016][T10051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.473422][T10051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.481597][T10051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.545870][T10051] hsr_slave_0: entered promiscuous mode [ 161.548248][T10051] hsr_slave_1: entered promiscuous mode [ 161.585605][ T40] audit: type=1400 audit(161.481:686): avc: denied { map } for pid=10129 comm="syz.3.1050" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 161.992432][T10144] netlink: 'syz.5.1055': attribute type 29 has an invalid length. [ 161.996204][T10144] netlink: 'syz.5.1055': attribute type 29 has an invalid length. [ 162.044303][ T40] audit: type=1400 audit(161.951:687): avc: denied { setopt } for pid=10148 comm="syz.3.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 162.085918][T10152] /dev/sg0: Can't lookup blockdev [ 162.238192][T10051] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 162.242331][T10051] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 162.251684][T10051] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 162.257987][T10051] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 162.350388][T10051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.381611][T10051] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.391041][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.391122][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.397861][ T6901] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.397910][ T6901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.478242][T10177] xt_socket: unknown flags 0xc [ 162.483890][T10185] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1067'. [ 162.493020][T10185] openvswitch: netlink: Flow actions attr not present in new flow. [ 162.495672][T10185] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1067'. [ 162.498575][T10185] openvswitch: netlink: Flow actions attr not present in new flow. [ 162.506454][T10185] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1067'. [ 162.510256][T10185] openvswitch: netlink: Flow actions attr not present in new flow. [ 162.528470][T10191] binder: 10190:10191 ioctl c0046209 100000000000000 returned -22 [ 162.551453][T10051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.577588][T10051] veth0_vlan: entered promiscuous mode [ 162.587005][T10051] veth1_vlan: entered promiscuous mode [ 162.620928][T10051] veth0_macvtap: entered promiscuous mode [ 162.625308][T10051] veth1_macvtap: entered promiscuous mode [ 162.638865][T10051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.645763][T10051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.652596][T10202] bond0: entered promiscuous mode [ 162.654624][T10202] bond_slave_0: entered promiscuous mode [ 162.657072][T10202] bond_slave_1: entered promiscuous mode [ 162.666233][T10051] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.669173][T10051] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.671869][T10051] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.675175][T10051] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.726257][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.728737][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.748025][ T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.751327][ T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.779893][ T40] audit: type=1804 audit(162.681:688): pid=10213 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1073" name="/newroot/10/file0/file0" dev="9p" ino=36047782 res=1 errno=0 [ 162.796920][ T40] audit: type=1400 audit(162.701:689): avc: denied { ioctl } for pid=10212 comm="syz.6.1073" path="/10/file0/file0" dev="9p" ino=36047782 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 162.989046][ T40] audit: type=1400 audit(162.891:690): avc: denied { map } for pid=10215 comm="syz.5.1075" path="socket:[42719]" dev="sockfs" ino=42719 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.072446][ T5938] Bluetooth: hci3: command 0x0405 tx timeout [ 163.308096][T10229] smc: net device bond0 applied user defined pnetid SYZ0 [ 163.380368][T10233] uprobe: syz.5.1081:10233 failed to unregister, leaking uprobe [ 163.493246][ T90] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.631905][ T90] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.693124][ T5935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 163.696135][ T5935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 163.699057][ T5935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 163.704548][ T5935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 163.707594][ T5935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 163.736602][ T90] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.796819][ T90] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.845055][T10241] chnl_net:caif_netlink_parms(): no params data found [ 163.925420][T10241] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.928196][T10241] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.930527][T10241] bridge_slave_0: entered allmulticast mode [ 163.934005][T10241] bridge_slave_0: entered promiscuous mode [ 163.937264][T10241] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.939573][T10241] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.941858][T10241] bridge_slave_1: entered allmulticast mode [ 163.945511][T10241] bridge_slave_1: entered promiscuous mode [ 164.015089][T10241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.025691][T10241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.046603][T10257] openvswitch: netlink: Flow actions attr not present in new flow. [ 164.072891][ T90] bridge_slave_1: left allmulticast mode [ 164.075107][ T90] bridge_slave_1: left promiscuous mode [ 164.077555][ T90] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.080745][ T40] audit: type=1400 audit(163.981:691): avc: denied { read } for pid=10259 comm="syz.3.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 164.088568][ T90] bridge_slave_0: left allmulticast mode [ 164.089676][ T40] audit: type=1400 audit(163.991:692): avc: denied { write } for pid=10259 comm="syz.3.1089" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 164.090479][ T90] bridge_slave_0: left promiscuous mode [ 164.098273][ T40] audit: type=1400 audit(163.991:693): avc: denied { ioctl } for pid=10259 comm="syz.3.1089" path="/dev/input/mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 164.108552][ T90] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.378491][ T90] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.381919][ T90] bond_slave_0: left promiscuous mode [ 164.385681][ T90] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.389107][ T90] bond_slave_1: left promiscuous mode [ 164.394016][ T90] bond0 (unregistering): Released all slaves [ 164.407395][T10241] team0: Port device team_slave_0 added [ 164.443378][T10241] team0: Port device team_slave_1 added [ 164.453633][T10266] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 164.506636][T10241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.509082][T10241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.517851][T10241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.545592][T10241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.547786][T10241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.558508][T10241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.623866][T10241] hsr_slave_0: entered promiscuous mode [ 164.626095][T10241] hsr_slave_1: entered promiscuous mode [ 164.628136][T10241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.630467][T10241] Cannot create hsr debugfs directory [ 164.672318][ T40] audit: type=1400 audit(164.571:694): avc: denied { listen } for pid=10274 comm="syz.5.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.725707][ T90] hsr_slave_0: left promiscuous mode [ 164.727926][ T90] hsr_slave_1: left promiscuous mode [ 164.729918][ T90] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.732218][ T90] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.743923][ T90] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.746345][ T90] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.767493][ T90] veth1_macvtap: left promiscuous mode [ 164.769282][ T90] veth0_macvtap: left promiscuous mode [ 164.771051][ T90] veth1_vlan: left promiscuous mode [ 164.772856][ T90] veth0_vlan: left promiscuous mode [ 165.441129][ T90] team0 (unregistering): Port device team_slave_1 removed [ 165.511261][ T90] team0 (unregistering): Port device team_slave_0 removed [ 165.795159][ T5938] Bluetooth: hci1: command tx timeout [ 166.134353][T10241] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 166.138753][T10241] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 166.143294][T10241] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 166.148236][T10241] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 166.197217][T10241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.206381][T10241] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.213163][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.215357][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.220394][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.222670][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.359263][T10241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.495302][T10241] veth0_vlan: entered promiscuous mode [ 166.504240][T10241] veth1_vlan: entered promiscuous mode [ 166.522230][T10241] veth0_macvtap: entered promiscuous mode [ 166.527336][T10241] veth1_macvtap: entered promiscuous mode [ 166.536344][T10241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.544364][T10241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.549305][T10241] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.552045][T10241] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.554959][T10241] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.557688][T10241] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.581045][ T90] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.612113][ T6901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.616779][ T6901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.630005][ T6905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.633234][ T6905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.777771][ T90] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.840125][ T90] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.954314][ T90] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.968304][T10307] overlay: filesystem on ./bus not supported as upperdir [ 166.974013][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1085'. [ 166.978588][T10308] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1085'. [ 166.982612][T10308] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 166.986470][T10308] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (5) [ 167.040161][ T5935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.045072][ T5935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.047890][ T5935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.052036][ T5935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.055415][ T5935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.075420][ T90] bridge_slave_1: left allmulticast mode [ 167.079466][ T90] bridge_slave_1: left promiscuous mode [ 167.082130][ T90] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.093949][ T90] bridge_slave_0: left allmulticast mode [ 167.096390][ T90] bridge_slave_0: left promiscuous mode [ 167.098934][ T90] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.136037][ T40] audit: type=1400 audit(167.041:695): avc: denied { write } for pid=10316 comm="syz.5.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 167.393249][ T90] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.398069][ T90] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.402563][ T90] bond0 (unregistering): Released all slaves [ 167.532595][T10314] chnl_net:caif_netlink_parms(): no params data found [ 167.659963][T10314] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.663070][T10314] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.663153][T10339] netlink: 'syz.7.1102': attribute type 11 has an invalid length. [ 167.665347][T10314] bridge_slave_0: entered allmulticast mode [ 167.667909][T10339] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.1102'. [ 167.670714][T10314] bridge_slave_0: entered promiscuous mode [ 167.673242][T10338] netlink: 'syz.7.1102': attribute type 10 has an invalid length. [ 167.677226][T10314] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.680083][T10314] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.683350][T10314] bridge_slave_1: entered allmulticast mode [ 167.686658][T10314] bridge_slave_1: entered promiscuous mode [ 167.705313][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1105'. [ 167.716192][T10338] team0: Port device wlan1 added [ 167.719616][T10336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.756847][T10347] erspan0: entered promiscuous mode [ 167.758855][T10347] macvtap1: entered promiscuous mode [ 167.760566][T10347] macvtap1: entered allmulticast mode [ 167.762228][T10347] erspan0: entered allmulticast mode [ 167.795242][T10314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.800056][T10314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.873122][ T5935] Bluetooth: hci1: command tx timeout [ 167.882945][T10347] erspan0: left allmulticast mode [ 167.885254][T10347] erspan0: left promiscuous mode [ 167.889048][T10352] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 167.893956][T10352] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 167.917080][T10314] team0: Port device team_slave_0 added [ 167.952184][ T90] hsr_slave_0: left promiscuous mode [ 167.955182][ T90] hsr_slave_1: left promiscuous mode [ 167.957971][ T90] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.960992][ T90] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.968937][ T90] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.971965][ T90] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.991574][ T40] audit: type=1400 audit(167.891:696): avc: denied { setcurrent } for pid=10357 comm="syz.3.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 167.997186][ T90] veth1_macvtap: left promiscuous mode [ 167.999078][ T90] veth0_macvtap: left promiscuous mode [ 168.000792][ T90] veth1_vlan: left promiscuous mode [ 168.002764][ T90] veth0_vlan: left promiscuous mode [ 168.705512][ T90] team0 (unregistering): Port device team_slave_1 removed [ 168.788796][ T90] team0 (unregistering): Port device team_slave_0 removed [ 169.152445][ T5935] Bluetooth: hci2: command tx timeout [ 169.320449][T10314] team0: Port device team_slave_1 added [ 169.329309][T10366] dummy0: entered promiscuous mode [ 169.333333][T10371] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 169.380373][T10314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.383107][T10314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.391320][T10314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.395852][T10314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.398054][T10314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.406880][T10314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.475431][T10314] hsr_slave_0: entered promiscuous mode [ 169.477654][T10314] hsr_slave_1: entered promiscuous mode [ 169.490095][T10391] xt_ecn: cannot match TCP bits for non-tcp packets [ 169.496881][T10389] netlink: 'syz.5.1117': attribute type 3 has an invalid length. [ 169.732406][ T24] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 169.894102][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 169.898266][ T24] usb 8-1: config 8 has an invalid interface number: 135 but max is 0 [ 169.901682][ T24] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 169.907795][ T24] usb 8-1: config 8 has no interface number 0 [ 169.910415][ T24] usb 8-1: config 8 interface 135 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 8 [ 169.915182][ T24] usb 8-1: config 8 interface 135 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 16 [ 169.918342][ T24] usb 8-1: config 8 interface 135 altsetting 8 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 169.921949][ T24] usb 8-1: config 8 interface 135 altsetting 8 endpoint 0x82 has invalid maxpacket 26904, setting to 1024 [ 169.925691][ T24] usb 8-1: config 8 interface 135 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 1024 [ 169.928925][ T24] usb 8-1: config 8 interface 135 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 169.932312][ T24] usb 8-1: config 8 interface 135 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 169.935703][ T24] usb 8-1: config 8 interface 135 altsetting 8 bulk endpoint 0x9 has invalid maxpacket 0 [ 169.938941][ T24] usb 8-1: config 8 interface 135 has no altsetting 0 [ 169.942968][ T24] usb 8-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=4f.58 [ 169.945776][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.948311][ T24] usb 8-1: Product: syz [ 169.949635][ T24] usb 8-1: Manufacturer: syz [ 169.951110][ T24] usb 8-1: SerialNumber: syz [ 169.952682][ T5935] Bluetooth: hci1: command tx timeout [ 169.955266][T10386] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 169.955368][T10386] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 169.959955][T10386] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 170.020159][T10314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 170.029452][T10314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 170.029481][ T40] audit: type=1400 audit(169.931:697): avc: denied { mounton } for pid=10430 comm="syz.5.1133" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 170.029524][T10431] binder: Bad value for 'max' [ 170.041972][T10314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 170.047292][T10314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 170.087193][T10314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.100674][T10314] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.106445][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.109574][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.123563][ T90] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.126499][ T90] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.146714][T10440] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1134'. [ 170.151772][T10440] nft_compat: unsupported protocol 0 [ 170.155154][T10440] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1134'. [ 170.177260][ T24] sierra 8-1:8.135: Sierra USB modem converter detected [ 170.190671][ T24] usb 8-1: Sierra USB modem converter now attached to ttyUSB0 [ 170.195517][ T24] usb 8-1: Sierra USB modem converter now attached to ttyUSB1 [ 170.201600][ T24] usb 8-1: USB disconnect, device number 11 [ 170.210939][ T24] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 170.216458][ T24] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 170.219550][ T24] sierra 8-1:8.135: device disconnected [ 170.269233][T10314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.301654][T10314] veth0_vlan: entered promiscuous mode [ 170.307431][T10314] veth1_vlan: entered promiscuous mode [ 170.323373][T10314] veth0_macvtap: entered promiscuous mode [ 170.327392][T10314] veth1_macvtap: entered promiscuous mode [ 170.337727][T10314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.348194][T10314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.353094][T10314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.355843][T10314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.358542][T10314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.361212][T10314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.397549][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.400632][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.420294][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.423068][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.774880][T10454] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1137'. [ 171.161652][T10477] xt_ecn: cannot match TCP bits for non-tcp packets [ 171.212623][T10479] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 171.357819][ T40] audit: type=1400 audit(171.261:698): avc: denied { write } for pid=10487 comm="syz.5.1147" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 171.363145][T10488] 9pnet_fd: Insufficient options for proto=fd [ 171.402640][ T5997] usb 12-1: new full-speed USB device number 2 using dummy_hcd [ 171.456572][ T5935] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 171.526144][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1149'. [ 171.532792][T10494] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.555842][ T5997] usb 12-1: config index 0 descriptor too short (expected 156, got 27) [ 171.559092][ T5997] usb 12-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 171.562979][ T5997] usb 12-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 171.566675][ T5997] usb 12-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 171.570245][ T5997] usb 12-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 171.577727][ T5997] usb 12-1: config 0 interface 0 has no altsetting 0 [ 171.581678][ T5997] usb 12-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 171.584939][ T5997] usb 12-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 171.587838][ T5997] usb 12-1: Product: syz [ 171.589317][ T5997] usb 12-1: Manufacturer: syz [ 171.590897][ T5997] usb 12-1: SerialNumber: syz [ 171.593764][ T5997] usb 12-1: config 0 descriptor?? [ 171.596020][T10475] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 171.599415][ T5997] ldusb 12-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 171.603711][ T5997] ldusb 12-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 171.616512][T10494] bridge_slave_1 (unregistering): left allmulticast mode [ 171.618779][T10494] bridge_slave_1 (unregistering): left promiscuous mode [ 171.620937][T10494] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.635570][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1149'. [ 171.799529][ T7169] usb 12-1: USB disconnect, device number 2 [ 171.806532][ T7169] ldusb 12-1:0.0: LD USB Device #0 now disconnected [ 172.042548][ T5935] Bluetooth: hci1: command tx timeout [ 172.147717][T10515] ip6gretap0: entered promiscuous mode [ 172.149977][T10515] macsec2: entered promiscuous mode [ 172.151835][T10515] macsec2: entered allmulticast mode [ 172.154147][T10515] ip6gretap0: entered allmulticast mode [ 172.158154][T10515] ip6gretap0: left allmulticast mode [ 172.160585][T10515] ip6gretap0: left promiscuous mode [ 172.248723][T10528] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1158'. [ 172.281892][T10530] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1159'. [ 172.314311][T10532] SELinux: Context system_u:object_r:systemd_logind_var_run_t:s0 is not valid (left unmapped). [ 172.319426][ T40] audit: type=1400 audit(172.221:699): avc: denied { relabelto } for pid=10531 comm="syz.3.1160" name="file1" dev="tmpfs" ino=2253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:systemd_logind_var_run_t:s0" [ 172.329349][ T40] audit: type=1400 audit(172.221:700): avc: denied { associate } for pid=10531 comm="syz.3.1160" name="file1" dev="tmpfs" ino=2253 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logind_var_run_t:s0" [ 172.338930][ T40] audit: type=1400 audit(172.231:701): avc: denied { unlink } for pid=5933 comm="syz-executor" name="file1" dev="tmpfs" ino=2253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:systemd_logind_var_run_t:s0" [ 172.350385][ T40] audit: type=1400 audit(172.251:702): avc: denied { read } for pid=5334 comm="acpid" name="event4" dev="devtmpfs" ino=3055 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 172.358132][ T40] audit: type=1400 audit(172.251:703): avc: denied { open } for pid=5334 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3055 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 172.365259][ T40] audit: type=1400 audit(172.251:704): avc: denied { ioctl } for pid=5334 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3055 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 172.372825][ T40] audit: type=1400 audit(172.251:705): avc: denied { setopt } for pid=10538 comm="syz.7.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 172.562328][ T5997] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 172.712353][ T5997] usb 10-1: Using ep0 maxpacket: 16 [ 172.712590][ T24] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 172.715448][ T5997] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.720141][ T5997] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.723434][ T5997] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 172.727683][ T5997] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 172.730704][ T5997] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.734846][ T5997] usb 10-1: config 0 descriptor?? [ 172.788596][ T1140] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.864336][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.868929][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.882432][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.887811][ T24] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.891553][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.898424][ T24] usb 8-1: config 0 descriptor?? [ 173.144352][ T5997] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 173.147317][ T5997] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 173.150016][ T5997] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 173.153193][ T5997] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 173.156018][ T5997] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 173.160391][ T5997] input: HID 0955:7214 Haptics as /devices/virtual/input/input12 [ 173.174457][ T5997] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 173.178826][ T5997] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 173.311805][ T24] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 173.316271][ T24] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 173.320299][ T24] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 173.340927][T10537] random: crng reseeded on system resumption [ 173.359231][ T8442] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 173.359890][ T34] usb 10-1: USB disconnect, device number 7 [ 173.365363][ T8442] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 173.371318][ T34] ------------[ cut here ]------------ [ 173.371634][ T8442] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 173.373609][ T34] workqueue: work disable count underflowed [ 173.373683][ T34] WARNING: CPU: 3 PID: 34 at kernel/workqueue.c:4328 enable_work+0x2f8/0x340 [ 173.378414][ T8442] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 173.380623][ T34] Modules linked in: [ 173.392744][ T34] CPU: 3 UID: 0 PID: 34 Comm: kworker/3:0 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 173.397526][ T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 173.401789][ T34] Workqueue: usb_hub_wq hub_event [ 173.403841][ T34] RIP: 0010:enable_work+0x2f8/0x340 [ 173.405993][ T34] Code: 89 ee e8 cb 28 38 00 45 84 ed 0f 85 29 fe ff ff e8 dd 2d 38 00 c6 05 e2 7f 0c 0f 01 90 48 c7 c7 00 00 ac 8b e8 89 f2 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 c7 06 9f 00 e9 aa fe ff ff [ 173.413781][ T34] RSP: 0018:ffffc900006df3c0 EFLAGS: 00010086 [ 173.416388][ T34] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae248 [ 173.419649][ T34] RDX: ffff88801eaac880 RSI: ffffffff817ae255 RDI: 0000000000000001 [ 173.422986][ T34] RBP: ffff888036e69730 R08: 0000000000000001 R09: 0000000000000000 [ 173.426217][ T34] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920000dbe79 [ 173.429447][ T34] R13: 0000000000000000 R14: ffff888036e69728 R15: ffffffff8fe68920 [ 173.432688][ T34] FS: 0000000000000000(0000) GS:ffff8880d6a53000(0000) knlGS:0000000000000000 [ 173.436348][ T34] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.439154][ T34] CR2: 00007f2579b63f98 CR3: 000000004eb88000 CR4: 0000000000352ef0 [ 173.442464][ T34] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 173.445697][ T34] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 173.448968][ T34] Call Trace: [ 173.450396][ T34] [ 173.451677][ T34] ? __pfx_enable_work+0x10/0x10 [ 173.453749][ T34] ? __thermal_zone_cdev_unbind+0x6c/0x6a0 [ 173.456223][ T34] __cancel_work_sync+0xe7/0x130 [ 173.458276][ T34] thermal_zone_device_unregister+0x239/0x450 [ 173.460767][ T34] ? __pfx_shield_remove+0x10/0x10 [ 173.462815][ T34] power_supply_unregister+0x10a/0x150 [ 173.465001][ T34] shield_remove+0x75/0x130 [ 173.466782][ T34] ? __pfx_shield_remove+0x10/0x10 [ 173.468781][ T34] hid_device_remove+0xd1/0x260 [ 173.470725][ T34] ? __pfx_hid_device_remove+0x10/0x10 [ 173.472861][ T34] device_remove+0xcb/0x170 [ 173.474718][ T34] device_release_driver_internal+0x44b/0x620 [ 173.477093][ T34] bus_remove_device+0x22f/0x420 [ 173.479086][ T34] device_del+0x396/0x9f0 [ 173.480803][ T34] ? __pfx_device_del+0x10/0x10 [ 173.482824][ T34] ? do_raw_spin_lock+0x12c/0x2b0 [ 173.484826][ T34] ? find_held_lock+0x2b/0x80 [ 173.486736][ T34] hid_destroy_device+0x19c/0x240 [ 173.488714][ T34] usbhid_disconnect+0xa0/0xe0 [ 173.490679][ T34] usb_unbind_interface+0x1da/0x9a0 [ 173.492716][ T34] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 173.494925][ T34] ? __pfx_usb_unbind_interface+0x10/0x10 [ 173.497224][ T34] device_remove+0x122/0x170 [ 173.499061][ T34] device_release_driver_internal+0x44b/0x620 [ 173.501435][ T34] bus_remove_device+0x22f/0x420 [ 173.503383][ T34] device_del+0x396/0x9f0 [ 173.505135][ T34] ? __pfx_device_del+0x10/0x10 [ 173.507081][ T34] ? kobject_put+0x210/0x5a0 [ 173.508917][ T34] usb_disable_device+0x355/0x7d0 [ 173.510855][ T34] usb_disconnect+0x2e1/0x920 [ 173.512686][ T34] hub_event+0x1c57/0x4fa0 [ 173.514456][ T34] ? __lock_acquire+0xb8a/0x1c90 [ 173.516457][ T34] ? __pfx_hub_event+0x10/0x10 [ 173.518272][ T34] ? devm_ioremap+0x60/0x100 [ 173.520178][ T34] ? finish_task_switch.isra.0+0x221/0xc10 [ 173.522541][ T34] ? rcu_is_watching+0x12/0xc0 [ 173.524542][ T34] process_one_work+0x9cc/0x1b70 [ 173.526644][ T34] ? __pfx_process_one_work+0x10/0x10 [ 173.528857][ T34] ? assign_work+0x1a0/0x250 [ 173.530824][ T34] worker_thread+0x6c8/0xf10 [ 173.532778][ T34] ? __pfx_worker_thread+0x10/0x10 [ 173.534912][ T34] kthread+0x3c2/0x780 [ 173.536597][ T34] ? __pfx_kthread+0x10/0x10 [ 173.538471][ T34] ? rcu_is_watching+0x12/0xc0 [ 173.540418][ T34] ? __pfx_kthread+0x10/0x10 [ 173.542302][ T34] ret_from_fork+0x5d4/0x6f0 [ 173.544264][ T34] ? __pfx_kthread+0x10/0x10 [ 173.546325][ T34] ret_from_fork_asm+0x1a/0x30 [ 173.548343][ T34] [ 173.549645][ T34] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 173.552225][ T34] CPU: 3 UID: 0 PID: 34 Comm: kworker/3:0 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 173.555753][ T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 173.559022][ T34] Workqueue: usb_hub_wq hub_event [ 173.560543][ T34] Call Trace: [ 173.561577][ T34] [ 173.562502][ T34] dump_stack_lvl+0x3d/0x1f0 [ 173.563944][ T34] panic+0x71c/0x800 [ 173.565172][ T34] ? __pfx_panic+0x10/0x10 [ 173.566587][ T34] ? show_trace_log_lvl+0x29b/0x3e0 [ 173.568208][ T34] ? check_panic_on_warn+0x1f/0xb0 [ 173.569843][ T34] ? enable_work+0x2f8/0x340 [ 173.571291][ T34] check_panic_on_warn+0xab/0xb0 [ 173.572864][ T34] __warn+0xf6/0x3c0 [ 173.574097][ T34] ? __pfx_vprintk_emit+0x10/0x10 [ 173.575679][ T34] ? enable_work+0x2f8/0x340 [ 173.577170][ T34] report_bug+0x3c3/0x580 [ 173.578578][ T34] ? enable_work+0x2f8/0x340 [ 173.580040][ T34] handle_bug+0x184/0x210 [ 173.581394][ T34] exc_invalid_op+0x17/0x50 [ 173.582842][ T34] asm_exc_invalid_op+0x1a/0x20 [ 173.584383][ T34] RIP: 0010:enable_work+0x2f8/0x340 [ 173.586031][ T34] Code: 89 ee e8 cb 28 38 00 45 84 ed 0f 85 29 fe ff ff e8 dd 2d 38 00 c6 05 e2 7f 0c 0f 01 90 48 c7 c7 00 00 ac 8b e8 89 f2 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 c7 06 9f 00 e9 aa fe ff ff [ 173.592022][ T34] RSP: 0018:ffffc900006df3c0 EFLAGS: 00010086 [ 173.593930][ T34] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae248 [ 173.596471][ T34] RDX: ffff88801eaac880 RSI: ffffffff817ae255 RDI: 0000000000000001 [ 173.598947][ T34] RBP: ffff888036e69730 R08: 0000000000000001 R09: 0000000000000000 [ 173.601418][ T34] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920000dbe79 [ 173.603900][ T34] R13: 0000000000000000 R14: ffff888036e69728 R15: ffffffff8fe68920 [ 173.606394][ T34] ? __warn_printk+0x198/0x350 [ 173.607932][ T34] ? __warn_printk+0x1a5/0x350 [ 173.609460][ T34] ? __pfx_enable_work+0x10/0x10 [ 173.611023][ T34] ? __thermal_zone_cdev_unbind+0x6c/0x6a0 [ 173.612827][ T34] __cancel_work_sync+0xe7/0x130 [ 173.614361][ T34] thermal_zone_device_unregister+0x239/0x450 [ 173.616285][ T34] ? __pfx_shield_remove+0x10/0x10 [ 173.617905][ T34] power_supply_unregister+0x10a/0x150 [ 173.619631][ T34] shield_remove+0x75/0x130 [ 173.621074][ T34] ? __pfx_shield_remove+0x10/0x10 [ 173.622696][ T34] hid_device_remove+0xd1/0x260 [ 173.624237][ T34] ? __pfx_hid_device_remove+0x10/0x10 [ 173.625950][ T34] device_remove+0xcb/0x170 [ 173.627399][ T34] device_release_driver_internal+0x44b/0x620 [ 173.629311][ T34] bus_remove_device+0x22f/0x420 [ 173.630887][ T34] device_del+0x396/0x9f0 [ 173.632264][ T34] ? __pfx_device_del+0x10/0x10 [ 173.633825][ T34] ? do_raw_spin_lock+0x12c/0x2b0 [ 173.635427][ T34] ? find_held_lock+0x2b/0x80 [ 173.636959][ T34] hid_destroy_device+0x19c/0x240 [ 173.638560][ T34] usbhid_disconnect+0xa0/0xe0 [ 173.640087][ T34] usb_unbind_interface+0x1da/0x9a0 [ 173.641734][ T34] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 173.643500][ T34] ? __pfx_usb_unbind_interface+0x10/0x10 [ 173.645288][ T34] device_remove+0x122/0x170 [ 173.646790][ T34] device_release_driver_internal+0x44b/0x620 [ 173.648705][ T34] bus_remove_device+0x22f/0x420 [ 173.650245][ T34] device_del+0x396/0x9f0 [ 173.651611][ T34] ? __pfx_device_del+0x10/0x10 [ 173.653135][ T34] ? kobject_put+0x210/0x5a0 [ 173.654596][ T34] usb_disable_device+0x355/0x7d0 [ 173.656201][ T34] usb_disconnect+0x2e1/0x920 [ 173.657651][ T34] hub_event+0x1c57/0x4fa0 [ 173.659038][ T34] ? __lock_acquire+0xb8a/0x1c90 [ 173.660603][ T34] ? __pfx_hub_event+0x10/0x10 [ 173.662115][ T34] ? devm_ioremap+0x60/0x100 [ 173.663587][ T34] ? finish_task_switch.isra.0+0x221/0xc10 [ 173.665425][ T34] ? rcu_is_watching+0x12/0xc0 [ 173.666950][ T34] process_one_work+0x9cc/0x1b70 [ 173.668516][ T34] ? __pfx_process_one_work+0x10/0x10 [ 173.670210][ T34] ? assign_work+0x1a0/0x250 [ 173.671690][ T34] worker_thread+0x6c8/0xf10 [ 173.673170][ T34] ? __pfx_worker_thread+0x10/0x10 [ 173.674807][ T34] kthread+0x3c2/0x780 [ 173.676114][ T34] ? __pfx_kthread+0x10/0x10 [ 173.677572][ T34] ? rcu_is_watching+0x12/0xc0 [ 173.679093][ T34] ? __pfx_kthread+0x10/0x10 [ 173.680528][ T34] ret_from_fork+0x5d4/0x6f0 [ 173.681989][ T34] ? __pfx_kthread+0x10/0x10 [ 173.683435][ T34] ret_from_fork_asm+0x1a/0x30 [ 173.684921][ T34] [ 173.686409][ T34] Kernel Offset: disabled [ 173.687765][ T34] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:44:56 Registers: info registers vcpu 0 CPU#0 RAX=0000000000191021 RBX=0000000000000000 RCX=ffffffff8b801c19 RDX=0000000000000000 RSI=ffffffff8de19da0 RDI=ffffffff8c1579e0 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a81550 R15=0000000000000000 RIP=ffffffff8b80077f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6753000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c26aec7 CR3=00000000373f8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000497 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010000680032010 0006100020100006 0073820c0000032b 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0f80030010000fff ffffffffff040010 0002100006800401 08000c0167ee1a02 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0806800306800400 10000010000fffff ffffffff04080141 e400000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001ffffffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffbf0806c00308 100006b003048010 0006a00304808080 8080821000069003 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 736797079fe9f92d 970dcf78a002adb9 dda3e958ec7548d7 caddeb405a1137f1 ZMM25=3ad90bb73ad90bb7 3ad90bb73ad90bb7 3ad90bb73ad90bb7 3ad90bb73ad90bb7 3ad90bb73ad90bb7 3ad90bb73ad90bb7 3ad90bb73ad90bb7 3ad90bb73ad90bb7 ZMM26=33c3795b33c3795b 33c3795b33c3795b 33c3795b33c3795b 33c3795b33c3795b 33c3795b33c3795b 33c3795b33c3795b 33c3795b33c3795b 33c3795b33c3795b ZMM27=ee8e0102ee8e0102 ee8e0102ee8e0102 ee8e0102ee8e0102 ee8e0102ee8e0102 ee8e0102ee8e0102 ee8e0102ee8e0102 ee8e0102ee8e0102 ee8e0102ee8e0102 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0906000009060000 0906000009060000 0906000009060000 0906000009060000 0906000009060000 0906000009060000 0906000009060000 0906000009060000 info registers vcpu 1 CPU#1 RAX=0000000080000001 RBX=ffff88806a523a00 RCX=ffffffff81ac7db2 RDX=ffff88802250c880 RSI=ffffffff81ac7dc0 RDI=0000000000000007 RBP=00000000000fff1d RSP=ffffc900040a7b18 R8 =0000000000000007 R9 =0000000000000000 R10=00000000000fff1d R11=0000000000000001 R12=0000000000000001 R13=0000000000000001 R14=0000000000000000 R15=ffff88806a527c80 RIP=ffffffff81bc1c07 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555580713500 ffffffff 00c00000 GS =0000 ffff8880d6853000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2bc5ffff CR3=0000000054e05000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000014 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00006765726d6970 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2578e11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2578e11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2578e11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2578e11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2578e11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2578e11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2578f84488 00007f2578f84480 00007f2578f84478 00007f2578f84450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2579aed100 00007f2578f84440 00007f2578f80004 00080000000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2578f84498 00007f2578f84490 00007f2578f84488 00007f2578f84480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000080000 RBX=ffff88806a743a20 RCX=ffffc9002fb30000 RDX=0000000000080000 RSI=ffffffff81b00039 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc90003c57368 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed100d4e8745 R15=ffff88806a63cf40 RIP=ffffffff81b0003b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f61b86466c0 ffffffff 00c00000 GS =0000 ffff8880d6953000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3c5918 CR3=000000004eb88000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f2097ca54f77386 7f2097ca54f77386 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d50130569e8d0d7c a52998e39c243c71 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cfa8d5bab5449251 242fe6cadc403d22 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 524a8b4c7c1e5bb4 4b8223c0a56d45d3 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d57ce944c35d1ce1 d0063ddfdef1fe88 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b5b3ea01796248b6 f773f68af92d603d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b8af1ed895fdcf8f 4bd1103d0dabe797 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dc403d22242fe6ca 9c243c71a52998e3 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c0d0e0f08090a0b 0405060700010203 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a92fe9756aeeffe5 8b9512bd5afc97ad ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fb833a7a1931b46d ca40ce233ee1ff4a ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000352e63 64755f796d6d7564 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b9f55 RDI=ffffffff9b089360 RBP=ffffffff9b089320 RSP=ffffc900006ded20 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000072 R14=ffffffff9b089320 R15=ffffffff855b9ef0 RIP=ffffffff855b9f7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2579b63f98 CR3=000000004eb88000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c65c200026e2c877 61fd33c8cf1b8bfd ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 58bed49c6e8e503b bb82778285b55730 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5432e46d5e541d27 bca9950de833e126 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dd45322298e2c689 7d5b793043eca45c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f8c1eb60ac242a4d 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 289f651900000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cd9668fd892a08e3 5adb6effd540fc13 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000091813c9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856b08c647 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000352e63 64755f796d6d7564 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000