last executing test programs: 1m49.064213633s ago: executing program 3 (id=4): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) syz_usb_connect(0x6, 0x825, &(0x7f0000000b40)={{0x12, 0x1, 0x300, 0x24, 0x38, 0xe1, 0xff, 0x1b3d, 0x1ae, 0x36f3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x813, 0x2, 0xd6, 0x5, 0x0, 0x6, [{{0x9, 0x4, 0xf4, 0xfc, 0xd, 0xd6, 0xb5, 0x70, 0xb, [], [{{0x9, 0x5, 0x7, 0x8, 0x20, 0xc, 0x7, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x1a29}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x4}]}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0x9, 0x5, 0xd3}}, {{0x9, 0x5, 0x1, 0x8, 0x8, 0x9, 0x1, 0x3}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x40, 0xa, 0x4}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x4, 0xf7, 0xea, [@generic={0x2f, 0x21, "51f81c05ebe761caf83a50bcc977e9e4a2f75fdb3060a3a7b702f3043a959df8e5abc27843f133a5c115ca8e54"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x6d, 0x4}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x3, 0xa, 0x1}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x7f, 0x4, 0x7, [@generic={0xdb, 0x26, "22d67a0a36390b9bc057f38342d0fcefa2553bbe63dcf9d19da9ff42ec9b3d237f333f82de9568b99dfdc7c77801c3bf065ae9a112dcafd462ffe55e7f19b7f9abba59eed2cf8f8dd5fc0fe919e6747073dfaa9daee2d8097c336b501e5a3c103bcc96616cf2955f9d384994313079ac328d006b131450129c950bf7567a1dd866a2b2969f225b3d30202801503a4c6dd57e3206dd9d43f664cf6613ee8210e22e42b0aee3e3d7123641545590aef9ad6efbc4a47bd74524bd49a4b25a7f91cbae79f4ab2d009c1903ac5e5d2199e5693913c44ee062046598"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0xfb, 0x4, 0x80, [@generic={0x8f, 0x4, "152db0567609efbf537bb9f5d906268f844510ae66aba90689bcf8733ff8af7665823c4b82e6070854e2175fdaefbaf5554bc5b8eaf9eb58c7d03c612981b847d200023b5323e48b18f17435b81e353cdc2be48d6cba0d00a9bf7d6f9626dfa1360219a39474aad2df22a60e37328ac74a1850c615554b9deeb5c6dedece077d5fefea86460e6e4f15df65b80a"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0x40, 0x1, 0x1}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0xc, 0x9, 0xb4, [@generic={0xbf, 0x22, "fde4fbe7af19ea11ce4edb0b232911c3a80d503fb7f7d07f6cdf029dfa04e45442970d723d0bb7d774e031e2f477f50d172aa930c83d2a9663ef14020a2985969e92160e3b0e2ce9cf629f486640db71b559d583ce90bca97b3880ec009693ec316c8afc8fbf6f6de19ce24fe9ac1aef0e86d99edaabbf52aea437491ac6cabde9c7682e3cc028b4571356351bc77755cd589c42c03f931681f772c07c7f8d46487cdf6492aa755609fa899b2f5b7d0fe89ab57d3fe0a28d0dd74891fd"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0xf, 0x9}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x8, 0xef, 0x69, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x7, 0x3f}, @uac_iso={0x7, 0x25, 0x1, 0x31bf6e776687c9dc, 0xc, 0x4ac1}]}}]}}, {{0x9, 0x4, 0xe5, 0xd9, 0xe, 0x99, 0x5d, 0xe1, 0x30, [], [{{0x9, 0x5, 0x5, 0x4, 0x200, 0xf8, 0x5, 0x7, [@generic={0x5b, 0xe, "0c8e63a685388fde075fbfb56561bb8aa6949e49f526e7f3289fef5fe767db548dc024b58a1065815d0843e7b7389c24059bc6707edf8a501082b9ef0a7c0333bd426387969a2b933f3e81656aab55c041862847d6d7b9d717"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xd}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x3e, 0xfc, 0x81, [@generic={0x6f, 0x1, "8386928d96045a88ef1a849771e31fda9a90b494f678ec4b3ce9b6f6de5c9bf6c8e568b471d69fc0e6ccbed168d550defc201878769200fabe024f5244611be0b0cc39aa4a45e39cb2e690d244a7444ff47147f2c2839632a18d1ae5c2e3feee49173a8ced4e5932d5bfe839cb"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xe, 0x6}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0xe, 0x9, 0x8}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0xfa, 0x30, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe6}]}}, {{0x9, 0x5, 0xa, 0x8, 0x3ff, 0x8, 0x1a, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x85, 0x7}]}}, {{0x9, 0x5, 0xf, 0x2, 0x3ff, 0xf8, 0x8, 0x7e}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x5, 0xa3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7}, @generic={0x5f, 0xa, "8a4aeb69446c09a80308177bdd9aeb67fc4bdaa477c2ee2ba30436c0caa0ba3c0c697ce555a00e9ba39160c94f9940c60d548cb84119f57d26d801e229d8b3087f98fa5b8848e12b86e2b41450029135394737963e3c50d9f7a1214e7b"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0xe8, 0xfc, 0x3, [@generic={0x6c, 0x24, "8835f059df9cb726b50cd6226dd94b13b312993c7463264726fed430fe6f20a8308e70c9da398d602ec5bfb3a3bfc34149ff00474ecdfaa85dd51bc86f5db6845a66c10ddb498f130e6d6d04c5f79ce33bf117cbb3a273c7e3e2f65ca92c80f56b0db3a7ff51e236a56b"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0x9}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x10, 0xba, 0x2, [@generic={0xc1, 0x4, "d77b670ff0afad545c3f68ecd3af29bd7622ad4d8789dd47e07a079b4bcb3d0e11cd66f3e31f19f151e279ce4afd3e9c79de5ae2a11053c4f398b60e540d40c228e424f70042dc5ed35557160b872e2d708fefc8e0c16b598349553a7a5129fa403a35fd6c62aa5ca2130dd270e187e3dfa0e62a5ccfa4adee78cb89a3c57579ad8202fb7e3b71aeb26248d311a921ac2828ec58d3e5e1c564948536fc6529e885be48663d96304a2ee599a6adf44edab16f41be16c1ea046e96029206bddf"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x6, 0x3, 0x7, [@generic={0x78, 0x21, "c8f908db5555208732e39d28bb4c5efa7d86c6ff8cd36abfb472ac734e088ac79b456c3c55e06b475e1c92664e8eb19fa19ad772eb51d72cf2681ff87f3d3b1c304231122e5d94618995dfca59acda04a9f947796e6e6a055b954f83764d0656175678464a9d5c2d686b5ba53af8117783f285df330d"}, @generic={0x26, 0x10, "198ef7c0282f8fee15f711c5624bb8a02a2add6912e806ebfaa4b82b5ceffdf7c33bf830"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x3, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xb6ba}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x6}]}}, {{0x9, 0x5, 0x9, 0x4, 0x200, 0x4, 0x0, 0x88}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x10, 0x6, 0x0, [@generic={0xd7, 0xd, "20557a3eb9341f37d7c7f08b9c88d15b41599ef27d0d18566694a1095f4cc4fd5fbdee00a9383ff49d5357a1e90573e4cbbc351a31a08809122d6757dab54b22a061b2f450f3e27ed2525253c5ba464b2be9f2ea02758fe1610897ab14c915da6c8fb1a40dafb96c36f6721960ae16f5af3cf8435df6071fdc4c8732f9a6ed3c933d1953134388b2590b74f93c0a29a45d907bec1fa527fdf527c840b7059bc3365d8972e205e4e90eb54f99247a0ae8b284321083a6d866208a9e63ae9e39b7c6c447a078833718d086853dd285dcbb92039ef27b"}]}}, {{0x9, 0x5, 0x7, 0x0, 0xe9e6c2dfe6ea3604, 0x1, 0xd, 0x4, [@generic={0x80, 0x24, "69769fce91364716d1fcc0db18852c9bf8ffaf04873e144d8eba3c399b8246afea9642827eb7b4ebff45667e94859cb25ddb611df3c9020be3c527b6f7dbff8d607ccf37f4c9a552d2df4842fc19be74f3c9c69f14ca28bed5e93ca71f30a5d44dc5316ee5b91349f7ebcd84c95dedc6660d5471b7a4940650f79dd1e3b7"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf7, 0x6}]}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x1, 0xa6, 0x7, 0x8, 0x57}, 0x83, &(0x7f0000000140)={0x5, 0xf, 0x83, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "45f88991d30bd9b5fb53ac95fdf3bef5"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "44525a2c44d79c1ef74f23a457b842f5"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0xc7, 0x3, 0x6}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x5, 0xf, 0x0, [0x3f00, 0xc000, 0xc000, 0xffc00f, 0x806080, 0xff00c0]}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x7fffff9, 0x0, 0x10, [0xff0000, 0x0, 0x3f, 0x30, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x9, 0xfc00}]}, 0x4, [{0xe3, &(0x7f0000000580)=@string={0xe3, 0x3, "e8293a0d11082ea18a7359680df04582da7ed4cd474be9ff99131e18645c5d53052c2a0349f848b81d4a23f786d7097198b3c15d754d05ad1e16ba922f2a9b221defc0bf578686b8121fb98cafca6b7a3fc0a7499c37cba7cb0c024297ca499593aebc13bb7bb628e92ae0e3b30cb281052d106e3bb9dbf07ea09d170496182e1ec32019cf96847221b86566d6b0c2f108221a65fffda6033a72ed973574bf598ab5f1cf1f459e89d3208e17a327d30f4c578dc4de797aa957ac7ad91a2b1ba9297e6fef2b8d2554399e3d3ea059e44ad77cd2fc64d1895acaa2e5a518cf4fd3dd"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x437}}, {0xeb, &(0x7f0000000680)=@string={0xeb, 0x3, "be15e68a676fa9abea7ca51c96bbebcc23a64b9017a071cda60069c11f96337bd5ce9fab650f866a36cf37ac6648bdf65f57ce139f9cd3f04c6fd609c51107575a48b5eb693bb2fe6b9ea96ab324a6ab43afa36dd796802aef6f8d82d6312010aeb6a96f5ea00706326dc708ff8cbe921ad38d74d3ea9e1b30a79a500c3f620c85d25690aff296921793711abcb3be3092dbcd1072d120726c1914eefc412996792e1c5090d3a527295d4c7435f095b3ccd6a903eb78031f650af4ea891a1880c0b5ff0a8c1fa12924a9812af976da95344a6f878ea4a7a01fd9aa3178e20967347f4802b5de099aec"}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x17, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800120000e40f3d7a942ce0a0d20bcd8f1d0ccf7c8e515c62b7d49e52b9bef2228a5d372036ffe1bd0c62cd5f452331dd8c85bf90913d3f972956f1a213", @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000500)={0xa, 0x0, 0x101, @dev, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m33.680646191s ago: executing program 32 (id=4): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) syz_usb_connect(0x6, 0x825, &(0x7f0000000b40)={{0x12, 0x1, 0x300, 0x24, 0x38, 0xe1, 0xff, 0x1b3d, 0x1ae, 0x36f3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x813, 0x2, 0xd6, 0x5, 0x0, 0x6, [{{0x9, 0x4, 0xf4, 0xfc, 0xd, 0xd6, 0xb5, 0x70, 0xb, [], [{{0x9, 0x5, 0x7, 0x8, 0x20, 0xc, 0x7, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x1a29}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x4}]}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0x9, 0x5, 0xd3}}, {{0x9, 0x5, 0x1, 0x8, 0x8, 0x9, 0x1, 0x3}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x40, 0xa, 0x4}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x4, 0xf7, 0xea, [@generic={0x2f, 0x21, "51f81c05ebe761caf83a50bcc977e9e4a2f75fdb3060a3a7b702f3043a959df8e5abc27843f133a5c115ca8e54"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x6d, 0x4}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x3, 0xa, 0x1}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x7f, 0x4, 0x7, [@generic={0xdb, 0x26, "22d67a0a36390b9bc057f38342d0fcefa2553bbe63dcf9d19da9ff42ec9b3d237f333f82de9568b99dfdc7c77801c3bf065ae9a112dcafd462ffe55e7f19b7f9abba59eed2cf8f8dd5fc0fe919e6747073dfaa9daee2d8097c336b501e5a3c103bcc96616cf2955f9d384994313079ac328d006b131450129c950bf7567a1dd866a2b2969f225b3d30202801503a4c6dd57e3206dd9d43f664cf6613ee8210e22e42b0aee3e3d7123641545590aef9ad6efbc4a47bd74524bd49a4b25a7f91cbae79f4ab2d009c1903ac5e5d2199e5693913c44ee062046598"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0xfb, 0x4, 0x80, [@generic={0x8f, 0x4, "152db0567609efbf537bb9f5d906268f844510ae66aba90689bcf8733ff8af7665823c4b82e6070854e2175fdaefbaf5554bc5b8eaf9eb58c7d03c612981b847d200023b5323e48b18f17435b81e353cdc2be48d6cba0d00a9bf7d6f9626dfa1360219a39474aad2df22a60e37328ac74a1850c615554b9deeb5c6dedece077d5fefea86460e6e4f15df65b80a"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0x40, 0x1, 0x1}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0xc, 0x9, 0xb4, [@generic={0xbf, 0x22, "fde4fbe7af19ea11ce4edb0b232911c3a80d503fb7f7d07f6cdf029dfa04e45442970d723d0bb7d774e031e2f477f50d172aa930c83d2a9663ef14020a2985969e92160e3b0e2ce9cf629f486640db71b559d583ce90bca97b3880ec009693ec316c8afc8fbf6f6de19ce24fe9ac1aef0e86d99edaabbf52aea437491ac6cabde9c7682e3cc028b4571356351bc77755cd589c42c03f931681f772c07c7f8d46487cdf6492aa755609fa899b2f5b7d0fe89ab57d3fe0a28d0dd74891fd"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0xf, 0x9}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x8, 0xef, 0x69, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x7, 0x3f}, @uac_iso={0x7, 0x25, 0x1, 0x31bf6e776687c9dc, 0xc, 0x4ac1}]}}]}}, {{0x9, 0x4, 0xe5, 0xd9, 0xe, 0x99, 0x5d, 0xe1, 0x30, [], [{{0x9, 0x5, 0x5, 0x4, 0x200, 0xf8, 0x5, 0x7, [@generic={0x5b, 0xe, "0c8e63a685388fde075fbfb56561bb8aa6949e49f526e7f3289fef5fe767db548dc024b58a1065815d0843e7b7389c24059bc6707edf8a501082b9ef0a7c0333bd426387969a2b933f3e81656aab55c041862847d6d7b9d717"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xd}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x3e, 0xfc, 0x81, [@generic={0x6f, 0x1, "8386928d96045a88ef1a849771e31fda9a90b494f678ec4b3ce9b6f6de5c9bf6c8e568b471d69fc0e6ccbed168d550defc201878769200fabe024f5244611be0b0cc39aa4a45e39cb2e690d244a7444ff47147f2c2839632a18d1ae5c2e3feee49173a8ced4e5932d5bfe839cb"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xe, 0x6}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0xe, 0x9, 0x8}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0xfa, 0x30, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe6}]}}, {{0x9, 0x5, 0xa, 0x8, 0x3ff, 0x8, 0x1a, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x85, 0x7}]}}, {{0x9, 0x5, 0xf, 0x2, 0x3ff, 0xf8, 0x8, 0x7e}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x5, 0xa3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7}, @generic={0x5f, 0xa, "8a4aeb69446c09a80308177bdd9aeb67fc4bdaa477c2ee2ba30436c0caa0ba3c0c697ce555a00e9ba39160c94f9940c60d548cb84119f57d26d801e229d8b3087f98fa5b8848e12b86e2b41450029135394737963e3c50d9f7a1214e7b"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0xe8, 0xfc, 0x3, [@generic={0x6c, 0x24, "8835f059df9cb726b50cd6226dd94b13b312993c7463264726fed430fe6f20a8308e70c9da398d602ec5bfb3a3bfc34149ff00474ecdfaa85dd51bc86f5db6845a66c10ddb498f130e6d6d04c5f79ce33bf117cbb3a273c7e3e2f65ca92c80f56b0db3a7ff51e236a56b"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0x9}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x10, 0xba, 0x2, [@generic={0xc1, 0x4, "d77b670ff0afad545c3f68ecd3af29bd7622ad4d8789dd47e07a079b4bcb3d0e11cd66f3e31f19f151e279ce4afd3e9c79de5ae2a11053c4f398b60e540d40c228e424f70042dc5ed35557160b872e2d708fefc8e0c16b598349553a7a5129fa403a35fd6c62aa5ca2130dd270e187e3dfa0e62a5ccfa4adee78cb89a3c57579ad8202fb7e3b71aeb26248d311a921ac2828ec58d3e5e1c564948536fc6529e885be48663d96304a2ee599a6adf44edab16f41be16c1ea046e96029206bddf"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x6, 0x3, 0x7, [@generic={0x78, 0x21, "c8f908db5555208732e39d28bb4c5efa7d86c6ff8cd36abfb472ac734e088ac79b456c3c55e06b475e1c92664e8eb19fa19ad772eb51d72cf2681ff87f3d3b1c304231122e5d94618995dfca59acda04a9f947796e6e6a055b954f83764d0656175678464a9d5c2d686b5ba53af8117783f285df330d"}, @generic={0x26, 0x10, "198ef7c0282f8fee15f711c5624bb8a02a2add6912e806ebfaa4b82b5ceffdf7c33bf830"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x3, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xb6ba}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x6}]}}, {{0x9, 0x5, 0x9, 0x4, 0x200, 0x4, 0x0, 0x88}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x10, 0x6, 0x0, [@generic={0xd7, 0xd, "20557a3eb9341f37d7c7f08b9c88d15b41599ef27d0d18566694a1095f4cc4fd5fbdee00a9383ff49d5357a1e90573e4cbbc351a31a08809122d6757dab54b22a061b2f450f3e27ed2525253c5ba464b2be9f2ea02758fe1610897ab14c915da6c8fb1a40dafb96c36f6721960ae16f5af3cf8435df6071fdc4c8732f9a6ed3c933d1953134388b2590b74f93c0a29a45d907bec1fa527fdf527c840b7059bc3365d8972e205e4e90eb54f99247a0ae8b284321083a6d866208a9e63ae9e39b7c6c447a078833718d086853dd285dcbb92039ef27b"}]}}, {{0x9, 0x5, 0x7, 0x0, 0xe9e6c2dfe6ea3604, 0x1, 0xd, 0x4, [@generic={0x80, 0x24, "69769fce91364716d1fcc0db18852c9bf8ffaf04873e144d8eba3c399b8246afea9642827eb7b4ebff45667e94859cb25ddb611df3c9020be3c527b6f7dbff8d607ccf37f4c9a552d2df4842fc19be74f3c9c69f14ca28bed5e93ca71f30a5d44dc5316ee5b91349f7ebcd84c95dedc6660d5471b7a4940650f79dd1e3b7"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf7, 0x6}]}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x1, 0xa6, 0x7, 0x8, 0x57}, 0x83, &(0x7f0000000140)={0x5, 0xf, 0x83, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "45f88991d30bd9b5fb53ac95fdf3bef5"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "44525a2c44d79c1ef74f23a457b842f5"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0xc7, 0x3, 0x6}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x5, 0xf, 0x0, [0x3f00, 0xc000, 0xc000, 0xffc00f, 0x806080, 0xff00c0]}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x7fffff9, 0x0, 0x10, [0xff0000, 0x0, 0x3f, 0x30, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x9, 0xfc00}]}, 0x4, [{0xe3, &(0x7f0000000580)=@string={0xe3, 0x3, "e8293a0d11082ea18a7359680df04582da7ed4cd474be9ff99131e18645c5d53052c2a0349f848b81d4a23f786d7097198b3c15d754d05ad1e16ba922f2a9b221defc0bf578686b8121fb98cafca6b7a3fc0a7499c37cba7cb0c024297ca499593aebc13bb7bb628e92ae0e3b30cb281052d106e3bb9dbf07ea09d170496182e1ec32019cf96847221b86566d6b0c2f108221a65fffda6033a72ed973574bf598ab5f1cf1f459e89d3208e17a327d30f4c578dc4de797aa957ac7ad91a2b1ba9297e6fef2b8d2554399e3d3ea059e44ad77cd2fc64d1895acaa2e5a518cf4fd3dd"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x437}}, {0xeb, &(0x7f0000000680)=@string={0xeb, 0x3, "be15e68a676fa9abea7ca51c96bbebcc23a64b9017a071cda60069c11f96337bd5ce9fab650f866a36cf37ac6648bdf65f57ce139f9cd3f04c6fd609c51107575a48b5eb693bb2fe6b9ea96ab324a6ab43afa36dd796802aef6f8d82d6312010aeb6a96f5ea00706326dc708ff8cbe921ad38d74d3ea9e1b30a79a500c3f620c85d25690aff296921793711abcb3be3092dbcd1072d120726c1914eefc412996792e1c5090d3a527295d4c7435f095b3ccd6a903eb78031f650af4ea891a1880c0b5ff0a8c1fa12924a9812af976da95344a6f878ea4a7a01fd9aa3178e20967347f4802b5de099aec"}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x17, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800120000e40f3d7a942ce0a0d20bcd8f1d0ccf7c8e515c62b7d49e52b9bef2228a5d372036ffe1bd0c62cd5f452331dd8c85bf90913d3f972956f1a213", @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000500)={0xa, 0x0, 0x101, @dev, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m31.070129806s ago: executing program 2 (id=328): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x21, 0x2, 0x2) ioperm(0x0, 0x6e, 0xe) membarrier(0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000f7dbdf25010000001c0007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c0001638522fe4b", @ANYRES32=r2, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket(0x8, 0x3, 0xffffff7f) 1m30.96141565s ago: executing program 2 (id=332): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x183d43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0xfffffffffffffffc) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x9) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x183d43, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0xfffffffffffffffc) (async) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x9) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x5) (async) 1m30.76956142s ago: executing program 2 (id=338): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x2, 0x48f}, 0x90) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x934a000, 0x4) 1m30.701553921s ago: executing program 2 (id=339): recvfrom(0xffffffffffffffff, &(0x7f0000000000)=""/34, 0x22, 0x40000001, &(0x7f0000000040)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) write(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chdir(&(0x7f0000000280)='./file0/file0/..\x00') mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x7, r3, r4, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@ipmr_delroute={0x8c, 0x19, 0x100, 0x70bd29, 0x25dfdbfc, {0x80, 0x0, 0x20, 0x0, 0xfc, 0x4, 0xfe, 0x8, 0xc00}, [@RTA_DPORT={0x6, 0x1d, 0x4e20}, @RTA_PRIORITY={0x8, 0x6, 0x1}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x42}}, @RTA_UID={0x8, 0x19, r3}, @RTA_UID={0x8, 0x19, r5}, @RTA_TABLE={0x8, 0xf, 0x5}, @RTA_SPORT={0x6, 0x1c, 0x4e22}, @RTA_TABLE={0x8, 0xf, 0xffffffff}, @RTA_DPORT={0x6, 0x1d, 0x4e21}, @RTA_METRICS={0x25, 0x8, 0x0, 0x1, "a33d32ac59aacc3f8c73cf7215493e43c59e53a4086a097b3eb8e0a7299eed193f"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4040) 1m30.700977388s ago: executing program 2 (id=340): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000200)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000180)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0xf4240}, 0x94) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf252b000000180001801400020076657468305f746f5f626174616476"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) (async, rerun: 64) ioctl$TUNSETDEBUG(r6, 0x400454c9, 0xffffffffffffffff) (rerun: 64) ioctl$TUNSETGROUP(r6, 0x400454ce, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000000)={0x980915, 0x8}) (async) getsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x21, &(0x7f0000000000)=0xff, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r7, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f00000002c0)={0x3, @default, r10}) (async) r11 = socket(0x10, 0x3, 0x9) connect$netlink(r11, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r11, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x24008010) (async, rerun: 32) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01005c804beab361de3e030000004c0001800d0001007564703a73797a3000000000380004"], 0x60}}, 0x0) (async, rerun: 64) sendmsg$TIPC_NL_PUBL_GET(r11, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1e4, r13, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x41}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9b33}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xdb2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}]}, @TIPC_NLA_MEDIA_NAME={0x4, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x20000001}, 0x24000811) (rerun: 64) 1m30.431242993s ago: executing program 2 (id=347): mkdir(&(0x7f0000000500)='./file0\x00', 0x0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000015c0)={"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"}) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'veth0_to_batadv\x00', {0x2, 0x4e23, @multicast2}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000080)={&(0x7f00000005c0)="4ed88113703fa58490b52be95b0a1aaa27e306bcc96210ef6e5e9f1e7b57488d50168a38fbe2a1cdf935ac03746c21ed91d1d931018c1b62cb41fce80ff039a3f602df76cb253df26a38a8de3d3af1b4c042cdef20dfdd2deec390dcc8d28fbf9d83f33833f6189b117956c37bfcdb257938ffec1ba283389af6745ecd7de662b80b8174b9ff1407e133ca68fb9b35de479fff4bfb14780fc90c6eb5044f85ac0f6c7a2992a62416bcc0832f2c483220d4924068af17346cbdb328c37c8f1432231beae999f6231daebacd2bd60164f0497397215db4e926fd082b6d0aafa1cd5d57f8223da6a80b3d4252708eca18d76e189621899330d9870195c4dbcba5144deadd091c1e037d156bede190778b07b37cf3259c54e7498a11f3239c9e49263d5dba07115671b449405c810031ca5bcff89adf13ac1f8e23bb35cf47c345c87d469621946180b82d20bcb8fabdef325791feba13613153d4b94fcb828d9a72e95179159215a6901a93baad61677072597a6df8a8b03af5b5e9d9ccdbff8012b7da1b5237bd784677fcbe3599b30faabd0d76b8749723a43f7c5e17a5978ba6878e66efd4248baadbaaa9f882fe033cc1d8a56faf362082b8a6b206ca2e0569cee011f963f69d5bdca8552cdaf9f168b56629aec018bb33ae7af9f210c3fe7ccf9441a65b487f2135845c7bd051a41533141ce64ed62dcf30a74006933110119ccea3c46411b1c3047e5f18ba9df2502df7594b1efba5db2149f3707e8ba2471d9fd57e08678b49924987c9c4024b17767cc6173e7b95d10c79669d472cefc3aac0cb00373f43e27700dfe2001be3a9cf190d327fd6d8ecf327915c147cf93d0ad8a56ff9b9e5c10900a2aad59c38c255f00d4378a20514eeb9b13505aaf5c088e3b369db4a7d342a61ed4e39fced11e4900b1ddf5320438774e5ce25d25705ac9d8442deb2898ddce85b9c52974b4ce8547d86ceb1517a6e6b8672ca12bea1bfb511d865c7d231fc0e6a2e03a6547fa2cdcd2c9be72f3852510722aac15caa7337dbe2aed41f9d6779e2f58d45a1461ccee03cbad357492da33a60cb56feb381ad3daf8c72ecea90b3d66c4ec551e4a3dc3652dc987d6f772c41dca8cfcf166c17e1f24242195496ef75ca72e37becbab4c03232f28d8852bdb7927965d0a96f6f9e04bee687d3135feaf56860035ddc41e255936718cae40cc5baaea6303193ad2329508354ee57e10921d39f83acbafefd41c4e10270d3fd243f491fc3761f10f71f9aea574f554b3bb167cf05c5b922c2c615fbd9a1ef603034117ec46a577ab2a07f600b4e63442cdf8c1505ae97ab5797a410065e472cb3dd2aed09359e626a109c75426c0d2819e8da3a84171c2daeba88a0bd871bd6db452d84b80b59be2004ea142da6351187a1d6b96b1ab7e9f04f7ad1785f19c691888c19ec29d483beb560467e33f3d79cbd5fce92c08c261cede5acf5a59142baa19b532f1fc5b5d699497af45a18cc591cd69937857c95c6a10bfe75c7ce90e1868d71604a81fc5b1b7ab214c30caf3988e41d7a04bd8b55ecdaebb6b87a54667d267871a02b7f064766442a1c4944257f57a0f75d28ecf94125f65e75384b5188ac75e6a14b8f7d06a84f2b95b95bc7e842943739f2e628369b2fbb64c9bce983de5693b0868422f90559dd50a1ce423150f527948365ac3177574dfe75f5a0415c85530f873c1b515189d10f5eead6897a62b05f25aca5e3b3a28a3126be5e1f93cffb0dfbcf96890506d4e8e9082514411b969c9b65dbff570b57b51b1ae0ad742dbf18b83b2bce01045e55477562e41fd865d57e510a8d66b2c1ec9f7a4967cf1e7052759dff82b5b7def1b3fb71be48efd2d1ec92e1728078b246ab1fee03dd3343aabc587774762a9bdd41b0866fcc2fb77d19613815eed1fb4167470f05dee2d1fcb1fb3be15fc7d5466c51c0b442785d157c61d2e2dfe3b3a1498b20cd4e27b6637509df3b843e4af564ad16c46b2762a1560bc2aff936d77d5371ed414e123da6a890eae61c2202cfc4b3b152e3e1b46ff269d9b6601e23c25d6789f1d78027bb41a68efdb4cb45a5df7f1773e1e0320d0e857de03353f9a50d832920a93ed8cf701dcb40cd0af1df7c6270c5ef9895b530be95ac84dea7c448193d37930585ed174e065b606259bbfa48fa6cc279db56c30fd3d0de0762a581fb538cd1280d0337e862a602a91ecf15b86323a254368c8023588822723ffac88f409f4200fb2c8f0d96cb86ae1fe75733c1c5bc494dfb94aca7f145ef8ab5a3d2381388b8588b00d716995c6c05ef1803046fd371a35d23cde8218e546c678926f35c08729723ca53fb1c5cd33dcc6ea2a7f76686ac33f83babea39f90618854634a336cb72e39db1273c620df9e42c8cf9d15fc916fb32fe7dc5d2d2da7c232a30d8cb5581dfeff9b03ffa8b3a6c0682e6e192cfde4fa83be8b4f313407ef03107c3e9c8817d9c8b8c262f5fe9b301d46b6bb4e078cab69853666f886eba9b66e54f1c82491c3953b79b05622f49928b4b8e2dbb990853c47f7db2ad61ceb09a8a56f215896293df612459b017c1905884cdef818832afddcb15488cda448e73d8f6f39d62315b16ad5d8ff65b2802eda481bad89d96926b0deed7dd643b0237e035f27b610536c07ba9f5a444d12a05b657ebed8dd6dd0a647d4c1d59a469616ad38d43c418fb23509dd96c462062fae53b4bda4384b5acc57c950f1ae9eb5ca5842aaa30698b70af2215d4d747c80bb500d3ed488c45d6c6150e5e4f602b3c92d7b430c5c8f66de0dc8ca71847cee4de7350286bfe41c2db9022ae2d84f7274f35094932535987766cf23d08a52b07f672eb4c69d7895f3b855c07dc3c24ee16b97ef186215ba07f6f897158336e4db8c930d0f23b85130918b928248cb01c7c220e5476dbaee1c23449f852404ec70e6b36242297e710bf947853562444b9782d0cc751f84f7a1d991f396c57a6fe39c78f885292eff1c2313c36baa442402437863fc6b5e598c66d5130985e83fca3a2aeced22515099059b1584ac6cc7d928880f8f1c5bf3fb167276aec6e5ccc850c27c4d0443c53ab721018660eb0a299283c4607d3924c784b2bb4f7711cac2262ce77a5c5153362f5119f8a7a1a011e3eb82b7849645c702282144d676330ac6549578ee996df8f6e31f90ea16dc140e6e5e84c35513dde3864607a9b269f1eb6bbb67c2b8f0572b066f9568eeb60ab2c3e5e2f0788b19c9d9355ec09c91ec0758295ecb91fd966514264ee7b5d9e25831eb2b0e135355304a4f4952b0f97fe0ff2eda41e169796b6488a764372558bf833b7a2bf227436eff3610757f9b0242c0e84920791a3e18c218ef408bd8c4d554ad8a58ce6a78cc7946b804d2f8dce51f2204719796516791bb2ff49f90d5295b738316504772eea0ac81ada1e514b8109092aa0a38b54f9f401af7ae135c278aa89f52b5be9b03b696b4169fc54245300d9dd993f9f3b4f2890eff9a8fce214de2f7ddb8590dd58995671b480d1590a2b46025654c8dabd40dcb8b7c9ce033aa90d708a0ce67d68db7719719c53fc8cc1296d01e217b973487e4966f8cc234860ec1f089b3f2788853d411e9aa1607e1987ea74de4fc6abfbe3b517465bf675a6485de327ffb6f2f95babbc603b1176ac89b1f1a410c675b3d1788d525ecd07582441fda68d0389f4512fa24b68c877449d8f2b1e5df992f6d09e2c460f69a31e95a5eea810136afe7ac1625576557e263d142a9ff0c046f0b9f8316aacb0dda669fcf6fb3c9a5f716ef34d11087989bad9cf1976c40ca63e60ed5e93967e57495b017a1bc0247433605856791bfd5201fd1ce51d1d1bec72230f83aa208cab92c78fc332050c8c7fc1ee73f54b9e91e3b05593e515ea8eb0e31c3d321359d9021d0cc195053001272c4a15834edb2bfe7a51acdeb8588e814286ca13357b39d3c8fd004e5a62e5283fef65131a2ef1c005b1353cfd3438280fb85b20b9df19aa92d04ed04f7249bf494a1947f3c13fcd3431f3c3b66de7ec08fd187da122f75ff8bf022f82492ad62e6c9f2c701489bed550d002193d69824adf1b02f69507d673a517dcbafa8de8e2da674a0784ec380b4ec5c70e6155ceecf51e017bf97431d61e4960f2f4653a86e408c968bba2ca4a88128d91f2e2eae8b265a39c00ac415c99f18dacb3000845b7e60fb8c38ddcdc63931efc4d4602286815e2c771472aa68a028daae5af58f2713f1078727fcbdae10828497f283f7e0ae88148e155c914155a0a1400f456cabe3b8e7d9463e32cbeaf4deaff2402d7a62c4a46c785b5f4a6ac958ef3c1f9c2ab821e38887b12b1623c9f89a98b7518389761f62f0c213ee136c61956cd8e99c4392c79c30b60ace82517aa0cb225770014e84b2d6b4c3dbf3ed9411f485f0679996c7a2ee421cdfaa21ae8f691a91f95646b50b87475ddddeb0f29a2c2a7c3687abc6374ae8ec0e88367a366f6709dfa21c3417c2a3595ef76c47e015ab079a9565a12f2a6fde2c8c25a2668a836b3133666967013c60b472f9f911ae633198afdce6c14444ad088b74f873faad0a672fdf5795ce22281ca0ba331664cc0c38bbe8b374597843fd029f24ef0d6685124dbecc05618e9c7d0dd45c2a8f09632cc1bf0fad29c2f982d8c1e16ba3e54432951d10dd5ddbee5a7d970715e33845a2d20474798c883d1dac3cab07b65e5094555a3abe31b43a1749542ac16294c648b2ee3ff8712bd76d1c74cb0a706b1abd7f64c8653c5286c6e7e2a47ab33df708c8463c3762ce59ee99df732cfa08be6d08dcee7b301ac1ecd48fc7cce1ed09885a87e9a42797a26131ae94362cad2601f89339b7d1e415f0fb9d2d9ed253fbbb742148480495f6789b22c3265ed62ad9227f77d0a519ebde5f745a4513fd6a25240a67b1f2ee817dc4a48ddfb9d3013348df36373eab8efe865724a14278cab0dbd047a6594ed7146921a05873438b6e28c3985ab776da388301ce7b32b5c4d59ed44a862206271da5e6e37a592d949986fb8f0a613f8c88abb39d216c2840c29390a959bb1b92278c5d5beb7605bed700fe7b88ec36e0dd4686eaf60d458574955ce162baff524aa9ddec1d455a8574c0d76c5555026d3d0dcdb4da5fed16fe66574e0e936f2e61bbb682a6cae0b859cd6cb2a492c208b4b7f2cebf4c8623668efc55763c6b30f5b6cd2a60843370930e69eada764b75c5dd9343f11f16496994c02f6a7ddcb29842663de8c139c40d09f8d41f0cd861ea563f34b7bc5f3dc47fea125612b1f985fffe03b35fa5e6b07be915ff0950cc602eb74ea9fa361998ef1f1671202aba1724f09d84085c587ccd1fe81a59a2adce70b101b5f37aee20c3d9f2c2ba9593666e357858feade7083c084b5bb292caaa17aef891dd8ac644666dccd35f1e48080d942787ce768f6091fb26677bd33842d1cf73c0a7824e6abfc462d4f13023f37c7b65f86c9267c333515242e1477c601ef5f87b26b8774733c07496185e9545feff3958bfa41fbc1b8734abea81b9ac08c2cc65df00838a5e41d64f3ccfdfb4f152fa850d9d2a78c0c9aa873a66828a49d19e8d055a7c33714e626c064da8823aa8adb46c39c3c8de6d255bccf4939a8af6e0f126b8328c43362046dd56c70bb9d95c2eb06abc46915e555270e4aece15c7cae5a0693e3148658d3d86bbc1fe1ec2fd6b572038022c18c6e865362ba5a4529f6fd80417dc9e0557eca0402b38f143d7609c2e5400903baa97eca673e2eab", 0x1000}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r5, 0x2cb3b0415539fbbb, 0x70bd2b, 0x21dfdbfd, {{}, {@val={0x8, 0x1, 0x78}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) 1m30.400711608s ago: executing program 33 (id=347): mkdir(&(0x7f0000000500)='./file0\x00', 0x0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000015c0)={"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"}) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'veth0_to_batadv\x00', {0x2, 0x4e23, @multicast2}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000080)={&(0x7f00000005c0)="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", 0x1000}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r5, 0x2cb3b0415539fbbb, 0x70bd2b, 0x21dfdbfd, {{}, {@val={0x8, 0x1, 0x78}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) 33.450897278s ago: executing program 5 (id=1533): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) (async) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) (async, rerun: 64) write$tun(r0, &(0x7f0000000400)=ANY=[], 0x22) (rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x30, r0, 0x8000000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x6) (async) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) (async) r4 = memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x0, 0x0, 0xf, 0xd, "eeddb7c25540993ad642248c7b0157ce0dc9b4d500476312cd6cb416f686ce0058265f66cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a9", "a863a5170a11d26a730cb3d1e9fb18cb0e58986d58e881bbe5e4230de84eea7a", [0x3, 0x5]}) (async) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) 33.161817779s ago: executing program 5 (id=1535): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x24008800) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) getpid() r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r3) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000020017000000090006"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) 31.08076729s ago: executing program 5 (id=1542): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001e80)={0x28, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c093}, 0xc000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040c1}, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000000, 0x13, 0xffffffffffffffff, 0x8000000) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x703a00, 0x0) r4 = io_uring_setup(0x669, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_MSG_RING={0x28, 0x80, 0x0, r3, 0x0, &(0x7f00000001c0)="3c9684705a3b6993d8563e2b72f61cfddf99ffe952276d8bc2456ed28c16b3080f9c87a45ea507f24df61b2b09d8c774f15670f8bda694c2cb895e7e4b662e33683b057b34fa453a4d6608bf008e963c12488a5f692713effcb9d283446afa0a06e0cea912c18b74e7a24cf976add897d13749b1b64d85aa8c891ae529bc3e1d9ba7", 0x82, 0x1, 0x0, {0x0, r5}}) 31.079014078s ago: executing program 5 (id=1545): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x80003, 0x0) r4 = socket$inet6(0x2d, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x11d, 0x20, 0x0, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r2, 0xffffffffffffffff, 0x0) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x2, 0x1, 0x3}, 0xfd}, 0x18) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x448}, 0x1, 0x0, 0x0, 0x805}, 0x4000) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) 31.011228698s ago: executing program 5 (id=1546): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd6}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0xff, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd6}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan1\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0xff, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) 30.770903059s ago: executing program 5 (id=1549): r0 = socket(0x22, 0x2, 0x2) syz_clone(0x91a0200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)="24ab3f9fadf08a2bff49ec2208104e0c6339b39cda51a6b76683d93f1ad6a9b71cb8184fda55f020976ab9417b4afb12") r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad000008"], 0x125) ioctl$IMGETCOUNT(r0, 0x80044944, &(0x7f0000000000)) r2 = fsopen(&(0x7f00000003c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000006c0)={0x6, 0x15, 0x7, 0x5, 0x8, 0x1, 0xcc7f, 0x7f}, &(0x7f0000000700)={0x0, 0x989680}, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x400) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) r4 = fsmount(r2, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r4, &(0x7f00000000c0)='./file0\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x44, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 30.719318198s ago: executing program 34 (id=1549): r0 = socket(0x22, 0x2, 0x2) syz_clone(0x91a0200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)="24ab3f9fadf08a2bff49ec2208104e0c6339b39cda51a6b76683d93f1ad6a9b71cb8184fda55f020976ab9417b4afb12") r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad000008"], 0x125) ioctl$IMGETCOUNT(r0, 0x80044944, &(0x7f0000000000)) r2 = fsopen(&(0x7f00000003c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000006c0)={0x6, 0x15, 0x7, 0x5, 0x8, 0x1, 0xcc7f, 0x7f}, &(0x7f0000000700)={0x0, 0x989680}, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x400) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) r4 = fsmount(r2, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r4, &(0x7f00000000c0)='./file0\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x44, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 26.320446572s ago: executing program 4 (id=1646): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c00010062"], 0x3c}}, 0x40000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x20, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0x400fe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 26.249261185s ago: executing program 4 (id=1648): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) syz_genetlink_get_family_id$devlink(0x0, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff0000/0xe000)=nil, 0xe000, 0x100000a, 0x80010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100), &(0x7f00000000c0)) close_range(r0, 0xffffffffffffffff, 0x0) 26.091078666s ago: executing program 4 (id=1651): socket$key(0xf, 0x3, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/56, 0x38, 0x35) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random="9cc9de102100"}) getsockname$packet(r3, &(0x7f0000000000), &(0x7f0000000040)=0x14) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 26.090640924s ago: executing program 4 (id=1653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff}, {0x1, 0x0, 0x40000000000000}}, [@tmpl={0x84, 0x5, [{{@in=@empty, 0x4d3, 0x6c}, 0x2, @in6=@empty, 0x3507, 0x1, 0x3, 0xf9, 0x5, 0xc}, {{@in=@rand_addr=0x64010101, 0x4d3, 0x6c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3503, 0x2, 0x0, 0x0, 0x9, 0x247, 0xf}]}]}, 0x13c}}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x224}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@can_newroute={0x134, 0x18, 0x404, 0x70bd26, 0x25dfdbfe, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x48, 0x12, 0x7d, 0x8, 0xad, "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", 0x0, "a31769007ab8c8fe366b2905aa449833f928fd89"}}]}, 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x24040004) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100), &(0x7f0000000140)=0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0xd}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x92, &(0x7f0000000240)=""/146}, 0x80) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd70000000e6ff24000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) 25.328588169s ago: executing program 4 (id=1670): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000300), 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0xde, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0xa8, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x2a, 0xc2, 0x0, 0x0, 0x1, {[@mptcp=@remove_addr={0x1e, 0x91, 0x2, 0x0, "5922ef63dde1079a8da9d0150b14b8903280907e74a583beee77af67d1bbd7396988f9aa1d636de6ef3c0a0731115163553914933c232d7bd9ea1fa32f04683bb525f5a9b5c2dc75ebef37e7d9e2a196e9cd7c58d613d62084a69fae248c0e98de4c0cd48e0468ba9cfe6a12ada31bbc5fa5fc0da8cb427f8f5c3072a18dceb95cc28e26808ef7844b42303676ae"}]}}}}}}}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r3, 0x3) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r2, 0x3) close(0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff000}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000300), 0x4000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) syz_emit_ethernet(0xde, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0xa8, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x2a, 0xc2, 0x0, 0x0, 0x1, {[@mptcp=@remove_addr={0x1e, 0x91, 0x2, 0x0, "5922ef63dde1079a8da9d0150b14b8903280907e74a583beee77af67d1bbd7396988f9aa1d636de6ef3c0a0731115163553914933c232d7bd9ea1fa32f04683bb525f5a9b5c2dc75ebef37e7d9e2a196e9cd7c58d613d62084a69fae248c0e98de4c0cd48e0468ba9cfe6a12ada31bbc5fa5fc0da8cb427f8f5c3072a18dceb95cc28e26808ef7844b42303676ae"}]}}}}}}}}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x80001, 0x84) (async) socket$inet(0x2, 0x80001, 0x84) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) (async) bind$inet(r3, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) (async) listen(r3, 0x3) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) (async) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) (async) listen(r2, 0x3) (async) close(0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff000}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) (async) 25.271428732s ago: executing program 4 (id=1673): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00, 0xffffff3f}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0}, 0x94) 12.690472337s ago: executing program 6 (id=1845): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@uexit={0x0, 0x18, 0x5}, @cpuid={0x2, 0x18, {0x3, 0x1000}}, @code={0x1, 0x57, {"430f01f8660f73da2b0f0135000000008fe978808cb15be00000430f01d59866baf80cb850bf1a89ef66bafc0cb800300000ef440f015c7927f264f0438019003e2e420f01c3"}}, @code={0x1, 0x62, {"c4227d5a320f01df0fa9b805000000b9000000000f01c166baf80cb81c82d58fef66bafc0c66b8b60066ef0f2259440f20c03506000000440f22c0b9fd0800000f32c4223bf54612654c0fc7a90001c0fe"}}, @cpuid={0x2, 0x18, {0x31f, 0x101}}, @uexit={0x0, 0x18, 0xfffffffffffffffa}, @cpuid={0x2, 0x18, {0x3, 0x2}}], 0x131}) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) (async) sync_file_range(r0, 0x2, 0x0, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000240)={0x358, 0x28, 0x200, 0x70bd26, 0x25dfdbfd, {0x3}, [@generic="193c309e6314c96a3df2c9b16232214eecec3ee8a9f94cd3f97742a6bdd4840ff26f5017db57e8449e738b1ecf1e14c846b15f6fe6d7", @typed={0x8, 0x4b, 0x0, 0x0, @u32=0x9}, @typed={0xc, 0xa7, 0x0, 0x0, @u64=0x5}, @generic="a8ff46bfc76fa71d25ab91462a6074b0ffddb7b241f0fb1050a5572f30d28fe1ba431eef1c863019cd2de71c60d0bcdc9c941d3b701a901f58652fd4d5a78a5a8a50b470994150a7368043e0f5221b32846e5e9e8b7e54222f4c26d80c28a2803674a3be7a75852e5341d1f5328d1504467ecd8fd2c48ca1e24ddead853442e392ad9f22c63e6f19bdb7635b2f9c57ee45c056389571e48f13ee39882c853ccc7abfb2d1dad6c1a8c559ce6dbf33d98b9212ddde0eb655a40b68f4825c8134234b0e858ef6ba46cb53341be3680edcd6ae5557b136517475416a0c0a49", @typed={0x8, 0x6d, 0x0, 0x0, @u32=0x9}, @generic="989563cd1fd5ba14b9dd27ab0a2e75b437ae68007ef57b1536cfcb5168b1961da68f070f326e29e54794f52159cef18f4f9628bb1512cfdf013241e317245295f3bf54d62cbfde02b746ffd865b4834b5bf5490eef9922fc31f386126cd1fe5a3918fe9f00abaf781ad6de09de0976f8087a", @nested={0x18d, 0x13, 0x0, 0x1, [@generic="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", @generic="09bbc12939f9754c1280f84b304bf488959f8ee9f73a9caa281ddebcd34c0510630120321c9a4ba5a982e6d5b4f966aa60f9f84927e932e601458ab5b89c609964459a08d54a53c2df36801e08f6f5eac0102261b904e61fb5c1b160204e5cc3719f9ca9eb507aaa565b591c907edd8a9ca4896c94ca0b6c5ad4e81f1d9e1eae1fc6a590c67d25c33ffd0c8666717f"]}, @typed={0x4, 0x38}, @typed={0xc, 0xa4, 0x0, 0x0, @u64}]}, 0x358}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) r4 = getpid() r5 = creat(&(0x7f0000000640)='./file0\x00', 0x88) ioctl$CDROMREADTOCENTRY(r5, 0x5306, &(0x7f0000000680)={0x2, 0x5, 0x6, 0x1, @msf={0x0, 0x0, 0x1}, 0x6}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000780)={0x80000000, &(0x7f00000006c0)=[{}, {0x80000000}], &(0x7f0000000700)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000880)={0x80000000, &(0x7f00000007c0)=[{0x80000000, 0x0}], &(0x7f0000000800)}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000e80)={0x0, 0x7, 0x0, &(0x7f00000008c0)=[{}, {0x80000000}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000b80)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000dc0)=[{}], 0x3, 0x0, &(0x7f0000000e00)=[{}, {}, {}]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000001780)={0x0, 0x6, 0x0, &(0x7f0000000f00)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000001140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000015c0)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x9, 0x0, &(0x7f0000001600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000001800)={{r6, r7, 0x6, [0x3, 0xfff]}, {r8, r9, 0x6, [0x4bda, 0x2]}, 0x0, [0x5271, 0x7]}) (async) ioctl$CDROMPLAYTRKIND(r5, 0x5304, &(0x7f0000001840)={0x5, 0x3, 0x9}) (async) getsockopt$inet_mreqsrc(r5, 0x0, 0x25, 0xfffffffffffffffe, &(0x7f0000001880)) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) flistxattr(r10, &(0x7f0000001900)=""/56, 0x38) (async) syz_io_uring_setup(0x7ef0, &(0x7f0000001940)={0x0, 0xfc54, 0x8000, 0x0, 0xc9, 0x0, r5}, &(0x7f00000019c0)=0x0, &(0x7f0000001a00)) r13 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x100010, r10, 0x10000000) syz_io_uring_submit(r12, r13, &(0x7f0000001a40)=@IORING_OP_MADVISE={0x19, 0x24, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x1}) (async) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000001a80)={0x8001, 0x7}) ioctl$sock_SIOCBRADDBR(r11, 0x89a0, &(0x7f0000001ac0)='dvmrp1\x00') (async) lseek(r5, 0x0, 0x0) r14 = gettid() kcmp(r4, r14, 0x9280ce75526c9415, r2, r5) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b40), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x34, r15, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$CDROMMULTISESSION(r11, 0x5310, &(0x7f0000001c40)={@lba=0xb, 0x1, 0x1}) 12.630623819s ago: executing program 6 (id=1846): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff5ffc}]}) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000140)={0xa0000001}) epoll_wait(r3, &(0x7f0000000280)=[{}], 0x1, 0x4000005) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) r5 = socket$inet6(0xa, 0x5, 0xc4) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in=@private=0xa010100, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x29}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1000000}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x38}, 0x2000000, 0x3c}, 0x0, @in6=@empty, 0x3504, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd17}}, 0xe8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f000000c540)=ANY=[@ANYBLOB="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"], 0x710}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_int(r5, 0x29, 0x0, &(0x7f0000000200)=0x7, 0x4) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000040), 0x4) connect$inet6(r5, &(0x7f00000000c0), 0x1c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x3, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x64}}, 0x800) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='net/bnep\x00') lseek(r10, 0x2, 0x0) ioctl$NBD_CLEAR_QUE(r10, 0xab05) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0xe) 12.431103815s ago: executing program 6 (id=1847): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x701200, 0x0) epoll_create(0x5e) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xf6, 0x6, 0x7, 0x1000, r1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0xd}, 0x50) r2 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e61, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffffc}, 0x1c) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 12.380966293s ago: executing program 6 (id=1848): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1930bd, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x1}}, './file1\x00'}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r2, 0x200, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000}) 12.330443051s ago: executing program 6 (id=1849): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, r1, 0x1c, 0x3, 0x2}) r2 = userfaultfd(0x801) r3 = socket$nl_generic(0x10, 0x3, 0x10) waitid(0x2, 0x0, 0xfffffffffffffffe, 0x8, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x29, 0xb, 0x70bd27, 0x4000, {0x3}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="78a449a0"]}]}, 0x1c}}, 0x4040080) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r4) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0xc, 0x4b, 0x0, 0x0, 0x2e}) 11.320019962s ago: executing program 6 (id=1871): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYRES64=r0], 0x34}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000011c0), r2) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r3, 0x301, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x40004) 11.246011993s ago: executing program 35 (id=1871): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="b4050000000000007110580000000000060000000000000095000000000000001f3d4eb3edc86c04e323b24d9426e5339e162b4915ca4c92ec3a4a3935b6d581c304908f84d3f0e99ac4402141407b980e454bd575dd0dc0f1a682f6ba574e0700000000000000515ec25d0b1f1c8c9cd8eb72385ad6136789dcd5a694d3cfb4cec510d0d4d980e649aa4492032c5888f5f9b246b9f5117cb89f3ff246280a1ab186bbd42370e30e9a2028d82bd071a329b281c4393e1e8ce723f67552961cd23f056542399289825a0d3e13b1401cda214d8f87ba4e8a5fff7be68fe15f3c1df84f2086f79ab69bbb072848357dc3bbc144cca554fdf459a2b6dd58c29bafe29a5b1d630a94c14753a1b0d26203185b5735d393c9a6367767ff9f9edf5e6e7e94aefd0d49ad707a4a7027185086a66c0a321f386bc40caed35d63967e3809ad3187a72972c5c22c085f0a481e7ce9458e8c21647d100c9fc91eb8fe87d05e6545dcbe6cd28444fcdaac12f6469abc71af781f79c7aeafcdcadda97413e2539860ae46370405f742edd486fc26697c52d18f7adeaf79101b3da624ef12673df25d15d6f3f0be93636d8ea88eaafe20257812496258c87d3e97c35fbf3967e1ae86639489758fa8759006669c0d7ed1710d80bf8424e190cb78e36dd7e2e01034991761ff243405d75021155bf4e831208f0a845897ac198e36dc9e0928727ea3a6dc3f2f64aa4007cf52c41ffff9c7a51dc635d7d34f509725530e2f1d1f5ba90c325591f90c354764997bd47abcab66966d683c392ea96668506002589df1c948237f1533f3157fec94ebf2ce6347f6516a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYRES64=r0], 0x34}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000011c0), r2) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r3, 0x301, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x40004) 10.139602465s ago: executing program 36 (id=1673): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00, 0xffffff3f}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0}, 0x94) 2.099560343s ago: executing program 1 (id=1998): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x1600}]}]}, 0x30}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_delvlan={0x30, 0x71, 0x400, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x7}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) r9 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\xf3\xeb\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xbd\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfKn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92$\x14a\xf4\x15_\x19Kt\r\xe3\xd9\xb4\x15mWl\xeb', 0x5) fallocate(r9, 0x3, 0x0, 0x3) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r11 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_LOCK(r11, 0x6405) ioctl$COMEDI_SUBDINFO(r11, 0x80486402, &(0x7f0000000040)) sendmmsg$inet(r10, &(0x7f0000000300)=[{{&(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400d4) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r12, 0x800455cc, 0x20000000008) r13 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ppoll(&(0x7f0000000000)=[{r13, 0x20}], 0x1, &(0x7f0000000080), 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="640000001000010000000002000000000000000a04000000120001"], 0x64}}, 0x4004000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r7, 0x84, 0x65, &(0x7f0000000380)=[@in6={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x10001}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e23, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd7}], 0x48) 1.919668008s ago: executing program 1 (id=2003): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$CDROMPLAYTRKIND(r1, 0x5304, &(0x7f0000000040)={0x1, 0xa7, 0x9, 0x8}) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x7fff, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x24d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0xf, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x1000, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbcf, 0xea4, 0x0, 0x4, 0x7, 0x7ffb, 0x6, 0x400, 0x401, 0x7, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x7, 0x3, 0x8, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x1, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x0, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x0, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x7f, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0x8fff]}, 0x45c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0x60, 0xd0e0000, 0x0, 0x100, 0x3c0, 0x1d8, 0x1d8, 0x3c0, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x9400, 0x70, 0xd8, 0x94}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1d48f913f8b22a30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec9dd375031ba5ae65e31f0", 0xf9, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r4}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000180)={0xf0f03c, 0x4}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001020020044400000100000000080002000a010101000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x110a}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000340)=[@acquire_done={0x40106309, 0x2}], 0x0, 0x0, 0x0}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r10, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x56, &(0x7f0000000940)=ANY=[@ANYBLOB="0380c2000000bbbbbb9bbbbb000d030000603f0200009de893f561321842b3aa9ba2caa13331844dadb7994eeb89f14224882a0c56db55c3a3d83a3ceb726c3dfa810beabaa8c44da7c7196d28feb7d1bb3fa8a05f8f856ce8ee829908736e6cb68740"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pipe2$watch_queue(&(0x7f0000000100), 0x80) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 1.809942276s ago: executing program 1 (id=2006): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0x0, r3, r3) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x4000, 0x2000, &(0x7f0000004000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000140)="0f316526f0016600815a0e8fe858ec800000000017660fd26653242e0f7d517979800000c00f3235008000000f300f01c58fea40128c0a1c00000000300000", 0x3f}], 0x1, 0xd54cccd90f9c7753, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = getpgrp(0xffffffffffffffff) write$cgroup_pid(r2, &(0x7f0000000080)=r7, 0x12) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x6000) (async) setresuid(0x0, r3, r3) (async) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r4, 0x0, 0x0) (async) fchdir(r5) (async) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x4000, 0x2000, &(0x7f0000004000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000140)="0f316526f0016600815a0e8fe858ec800000000017660fd26653242e0f7d517979800000c00f3235008000000f300f01c58fea40128c0a1c00000000300000", 0x3f}], 0x1, 0xd54cccd90f9c7753, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) getpgrp(0xffffffffffffffff) (async) write$cgroup_pid(r2, &(0x7f0000000080)=r7, 0x12) (async) 1.52077231s ago: executing program 1 (id=2013): sched_setparam(0xffffffffffffffff, &(0x7f0000000000)=0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) timer_create(0x5, &(0x7f0000000080)={0x0, 0x39, 0x2, @tid=r0}, &(0x7f00000000c0)=0x0) timer_create(0x5, &(0x7f00000002c0)={0x0, 0x1, 0x2, @thr={&(0x7f0000000100)="ddc2edec0607d5aba28ae2bcddb6091752d4030e42f2f38ef073bb8009c3cb51c2284da2f248611073b8cd5a849ed13615ef6a1a6681e0a83e19b4b634ae0dc0c4f3088eea545df8b093e49caa58aba6348005c0f9f16b0a0c69ecf0c69c2bb4ce2e05c843fe910235ea29fdffb5823de24a70e911794a98781da7a918ece623374db27e486ab6107bd81e34c58ae237953f52b532da2527a70f38f8eb9284b48b6d19b3af8d43f980e2dea4776d58e67afcf05df2", &(0x7f00000001c0)="33decfa3ba61abd80db3a93b1c7955237528a845a6cb7e7e65be0b3e3890482e1d97bc82c4d6fe30c4e97e44310b9fff0a3e6148f67a6e5e8c4127e1b413469d87bd17f5740d2e6403c1ef24597770c580887c43dce506b31b09f743f61af3734bf874801d5aa6ef135edeb261c5a26f4263e50a764ebf69224c9dfbe462a6e877ede78eeac23fcf64ecdf7db0744bea756bcaaff0512398e00e40987241b5d349077b115e37e4768dd26d9a9fcafe206f8018342be6e29aa9ab75b05fcfda2d1c240483a4cca35a43092bccf6808f05aa63d1de69"}}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340), &(0x7f0000000380)) gettid() mq_notify(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x6, 0x4, @thr={&(0x7f00000003c0)="0d45e4481655d599767fe4a439c79f9de496c65b4345c68a065cfe71fff732eb074ffbd85fd7d6a51a4da9d0a2904864a34a3052c44b96639345a980045867ac91e2f87b4d83ee95bcc10ea1379e96e881f80383cd86530c172f6f8ca34287422a60867bcb16a9aa9c1e3743f49fb6b513ba78190e4e2e648b1ff41ad0792166e2f2e89c4987ab89a107862a3d8d83c7319a3497edda9b8f1f61c6d9bd0af4b5e7f565f4784f734e6de5d975a2fc2d9e7a166176d4ea37ee1540fbc861d67bdd91bd8d10e23b993eefb1345cd1f817a3a831eba1d5f15e08429ed9703374453278603844c317871217cf23f19eea0e4384a45dd107999106fb", &(0x7f00000004c0)="26e8c27e92d5afac44a107a7f7e7a6ede5819faaf89f4819333f52d54ef8bdc7eea9b0b0172f2e3f79ebefdf76ec8035beb1767a55be5f77b17e0c9c2ffc843f0ff4457a3fc871d862fc4382f617fa34ed1e0c163ad5db785d2b28660314a8899e28fc89cd562be1537140b5b7f03d2236de5f01984ed5af2410bc75281b83f54e33d746fd41d70fd591130562bce4dd9915aa2d06e1fd26fd917e26f70093c7511f42970ecf21f2afe34ea8be836488c8e2636b26ac76ed71bb2b58552100e26de5f24791ed625aeb5407929504545aa7"}}) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000600), 0x210800, 0x0) ioctl$CDROMREADRAW(r3, 0x5314, &(0x7f0000000640)={0x9, 0x7, 0x32, 0x6, 0x3, 0x7}) r4 = syz_io_uring_setup(0x7, &(0x7f00000010c0)={0x0, 0x3ed, 0x4000, 0x3, 0x197}, &(0x7f0000001140)=0x0, &(0x7f0000001180)=0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f00000011c0)={r3}, 0x1) r7 = epoll_create1(0x80000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000001240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x11, 0x0, r7, &(0x7f0000001200)={0x20000000}, r3, 0x1, 0x0, 0x0, {0x0, r8}}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r7, 0x8010671f, &(0x7f0000001380)={&(0x7f0000001280)=""/202, 0xca}) timer_create(0x5, &(0x7f00000015c0)={0x0, 0x1c, 0x1, @thr={&(0x7f00000013c0)="c97a1a33679d4978a17654ef8483110e7e940e147e2896b323f3fb820eebc0d143660cafe3574ef281c275bd1026512e5fd4d7675acec24f84080c09e63a8336b99e194a0ac3276c5eb6bc9fbeef624a7a3989a170c7915f7cbe26bd52196f3a38ed189179609da9986a6c7f6693354dc55a67623d493aacfd131d8a0f9dca5104132784cf8ae8c8f6e94ee61c03b4f6abff10b9a537513020081296a3aea78b00eedc104fd32b5a16fa713391eb1fee90e21f24af0ad8b39497e4d44711fa1bcc11d6440206f6989eefebbd444029074217fc", &(0x7f00000014c0)="77ba75d2522a4f8f8f40f36272d419bbf3a660b9b7a755145046e72952bddca15c4d52c0908ee3fa82b3295a6a9847d919dc02bb1f1b4f9667b83a7df681fc308e9adbf6c86e55824bd5315015a3dd3670d77a01cbb17fe796b4a235af8cb826d1c80a1ed91796bef3943721a765c4c9b4ba1757179d115e40e2976efb1e1a4afbb9151f45b414733fea2f27f5831a4a494ff53b9d0638c01969205ff26b7b661c6f11b171a11d2e99c56baa1553bf50a29654a4c6fe8eac6fdb8bd89190dac9ff506095e473e1766e664ad71a843676125507143f80bbd269a1622b312ff9eae1e483afc63c14cbf4a2"}}, &(0x7f0000001600)=0x0) timer_getoverrun(r9) timer_getoverrun(r9) r10 = syz_open_dev$vcsn(&(0x7f0000001640), 0x7a02, 0x40) write$binfmt_aout(r10, &(0x7f0000001680)={{0x108, 0x2, 0x90, 0x344, 0x50, 0x5, 0x33a, 0x1}, "b8fcb90580597a39860231af74f74eb1be3814a5b43026e9da6a67a3df8fef6105c7c37b39e168d5e470e64fa4fbb475b8d227a96fcb3a5dd4d0eac827308413ab12892e86b893735b8c73343898854e68c336090143e0fc72e8371f142480eaac876ba24fd2b50ef0d3272eb24480c72540827dae8e13f21b5cb1d0e4c92fa6952af2db9b9ef16bae17518332d0d8b9e18460bbf5fd0771d1c53afdd3d5"}, 0xbe) clock_gettime(0x0, &(0x7f0000001740)={0x0, 0x0}) timer_settime(r9, 0x1, &(0x7f0000001780)={{r11, r12+60000000}, {0x0, 0x3938700}}, 0x0) ioctl$FBIOPUT_CON2FBMAP(r10, 0x4610, &(0x7f00000017c0)={0x34}) io_setup(0xfffffffc, &(0x7f0000001800)=0x0) io_getevents(r13, 0xab8, 0x2, &(0x7f0000001840)=[{}, {}], &(0x7f0000001880)) timer_gettime(r1, &(0x7f00000018c0)) mknod(&(0x7f0000001900)='./file0\x00', 0x200, 0x1941) io_getevents(r13, 0xad9f, 0x6, &(0x7f0000001940)=[{}, {}, {}, {}, {}, {}], &(0x7f0000001a00)={0x77359400}) close_range(r7, r3, 0x0) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r4, &(0x7f0000001a40)={0x6000000a}) 1.520460724s ago: executing program 1 (id=2014): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) (async) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="bcac9117519ee5acbb56dc68e69db56e86", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf25110000000c0009800800010008000000"], 0x20}, 0x1, 0x0, 0x0, 0x24008090}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) epoll_create1(0x0) (async) r6 = epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xa800}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) epoll_pwait(r6, &(0x7f0000000100)=[{}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, 0x0) (async) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e) socket(0x2, 0xa, 0x4) (async) socket(0x2, 0xa, 0x4) 1.349518642s ago: executing program 1 (id=2018): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x1000000, {0x0, 0x0, 0x12, 0x0, {0x0, 0x300}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x7a00, 0x0, 0x4000081}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x10) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x0) syz_usb_disconnect(r3) (async) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0xfffffffc, 0x81, 0xfffffffb, 0x3}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x1b, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xfffffffffffffee5}, 0x48) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r3, 0x81, 0xfffffffffffffdca, &(0x7f0000000080)="c0") (async) read$char_usb(r4, &(0x7f0000001080)=""/215, 0xd7) (async) listen(0xffffffffffffffff, 0xffffffff) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r7}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r9], &(0x7f0000000200), &(0x7f0000000580)=[r8], &(0x7f0000000040)}) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r10 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000000280)=0x8) getsockopt(r0, 0x7, 0x1, &(0x7f00000001c0)=""/197, &(0x7f0000000100)=0xc5) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e1209004000f8ff0700a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) 1.218938105s ago: executing program 8 (id=2023): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11011, r2, 0x2000) read$usbfs(r2, &(0x7f00000000c0)=""/103, 0x67) bind$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r3], 0x50}, 0x1, 0xba01}, 0x0) socket$inet(0x2, 0x6, 0x3) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04226a07"], 0x6d) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004874) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000001140)=ANY=[@ANYBLOB="030000000000000002004e23e0"], 0x90) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x90b, 0x7f, 0x6, 0x3b44}, {0x3, 0x3, 0x4, 0x4}, {0xec40, 0x1, 0x0, 0xe}, {0xfff8, 0x6, 0xb, 0xb55c}, {0xf000, 0xb2, 0x7, 0xf}]}) 1.090650345s ago: executing program 8 (id=2025): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006a00831300000000fcdbcf25000000000000000008000500d47021fb"], 0x20}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x6}, 0x1c) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x3ff, @loopback, 0x90}}, 0x4, 0xffff0d5b, 0x7fffffff, 0x101, 0x7}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x3b5, 0x1, 0x10, 0x3, r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0) syz_emit_ethernet(0x9e, &(0x7f00000002c0)={@empty, @empty, @void, {@x25={0x805, {0x3, 0x5, 0x1, "7f77fd452c57738619ec2af552e29bf336796611ec2f3676f12a76f75a63e70d54b7182143103d19fe9c5390254ff538bef5e648f3656f584f69d75a1e3eaee19033a18908ccef0aa76da3dd4a83e6dc4fb6ef61963095c0bf357ffc6523bb42851882d92612c35e20c44c6226b85a5e4bd87d8227166cc8958953e30627a719a0a78b74a17214f9a28a30b0e7"}}}}, &(0x7f0000000100)={0x1, 0x1, [0xe20, 0x4d, 0x45, 0x827]}) prctl$PR_GET_IO_FLUSHER(0x3a) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 940.840886ms ago: executing program 8 (id=2026): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x800, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x800, 0x0) r6 = io_uring_setup(0x24e1, &(0x7f00000000c0)={0x0, 0x7354, 0x4000, 0x2, 0x387}) io_uring_enter(r6, 0x296e, 0x83fa, 0x4b, &(0x7f0000000140)={[0x7fffffff]}, 0x8) (async) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000001ff0), 0x10) (async) sendmsg$can_bcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYBLOB="000000000700000000000000ae"], 0x20000078}}, 0x0) sendmsg$can_bcm(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}, 0x1, 0x0, 0x0, 0x20009810}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRES8=0x0], 0x1cdc}, 0x1, 0x0, 0x0, 0xc801}, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000240), 0x843, 0x0) 936.875235ms ago: executing program 8 (id=2028): r0 = userfaultfd(0x80001) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha384-avx)\x00'}, 0x58) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r3 = syz_open_dev$rtc(&(0x7f0000000040), 0x2, 0xa00) ioctl$RTC_VL_CLR(r3, 0x7014) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 850.738279ms ago: executing program 0 (id=2030): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="08000200"], 0x24}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a0, 0x2a8, 0x390, 0x2a8, 0x1d8, 0x390, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0x0, 0x0, 0x0, 0xff000000], 'macvlan1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@common=@mh={{0x28}, {"4ef5"}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x0, 0x3}, {0x0, 0x10}, 0x203, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0xc, 0x0, 0x1, [0xc, 0xd9, 0x5, 0xd0, 0x7, 0x9, 0x4, 0xfff8, 0x4, 0x10, 0x9, 0x5a43, 0x5, 0x7, 0x0, 0x4], 0x10}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) read$eventfd(r9, &(0x7f0000000100), 0xfffffd79) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/kexec_crash_size', 0x183e42, 0x3) write$cgroup_int(r11, &(0x7f00000003c0)=0x4, 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x33, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1bcbc740}}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @printk={@ld}, @exit, @jmp={0x5, 0x1, 0x6, 0x2, 0x2, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6a617a5b}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x7f303b1e, 0x29, &(0x7f0000000280)=""/41, 0x41000, 0x8, '\x00', r8, 0x17, r9, 0x8, &(0x7f00000002c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x2, 0x8, 0x7fffffff}, 0x10, 0x24476, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r11], 0x0, 0x10, 0x6}, 0x94) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r14, @ANYBLOB="0103000000470000000027"], 0x14}}, 0x0) r15 = socket$alg(0x26, 0x5, 0x0) bind$alg(r15, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r15, 0x117, 0x1, &(0x7f0000000080)="0849ae43", 0x4) sendmsg$nl_xfrm(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004880)=@polexpire={0xc0, 0x28, 0xffffffffffffffff, 0x8000, 0x25dfdbfb, {{{@in6=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x80, 0x20}, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xe180}, 0x0, 0x6e6bb4, 0x0, 0x0, 0x0, 0x2}, 0x6a}}, 0xc0}}, 0x4000000) 849.614559ms ago: executing program 8 (id=2031): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, @short={0x2, 0x696260df2df97e76, 0xffff}}, 0x14, &(0x7f0000000140)={&(0x7f0000000080)="1338077512fc9d374b2c393bd69c9a2630fca91b2bd814dd4cefdda19cba77e20612d7eef8a9f330cb89173ef72b40ba76b803e227270566896abea9f35cf5aa4e9697f751dd7a4bb5b01c2fc8f5ef24d00a198972e919bb2f19bf071d58682b29b43ed493c457ffa27961407b4cd5c223f8f1fb576040cf7e258b235ab3c0eb", 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x541b, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth1_virt_wifi\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000) socket(0x1d, 0x2, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtfilter={0x24, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x6, 0x9}, {0x4, 0x9}, {0xffe0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x44084) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r9, 0xc0045006, &(0x7f0000000180)=0x6f) r10 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r10, 0x5001, 0x0) write$dsp(r9, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) read$dsp(r10, &(0x7f0000001380)=""/229, 0xe5) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r11 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_timeval(r11, 0x1, 0x48, &(0x7f0000000040), 0x10) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000008000000020000000600000040800000", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r8, @ANYRESDEC=r3, @ANYBLOB="04000000050000000500"/20, @ANYRES32=r12, @ANYBLOB="7736eb77bea068f73bb5e3c1a406a7b357db48d2949ff566b9f73b88aa831fb51ddc6dc17ed4dce548fb7e885215c3065ddf062affe0f77a06b3176438011ffe26847ab608048cf1856b7ad097ddc7833f753a6b4e0ec9f6a422c6a4fd3ec1b7533d9439"], 0x50) 800.947866ms ago: executing program 0 (id=2032): r0 = getpid() timer_create(0x3, &(0x7f0000000040)={0x0, 0xa, 0x4, @tid=r0}, &(0x7f0000000080)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace$cont(0x20, r1, 0x9, 0x3) (async) ptrace$getregs(0xc, r1, 0x21aa, &(0x7f0000000000)=""/56) 798.626566ms ago: executing program 0 (id=2034): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x141200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x4, 0x0, 0x6, 0x10, 0xfc3}}}}}, @NHA_BLACKHOLE={0x4}]}, 0x34}}, 0x90) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x80800) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000840)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) (async) r5 = socket$kcm(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000000c0)}, 0x9cdc2384256b48a8) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf250a000000080001007063690011000200303030303a30303a31302e30000000000800030002000000080001007063690011000200303030303a30303a31302e300000000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x84}}, 0x80) (async) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r6) sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010027bd7000fddbde250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x40000) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x11c, r7, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x4}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x4}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x21}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x42}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000094) (async) recvfrom$inet6(r3, &(0x7f0000000400)=""/188, 0xbc, 0x40000000, 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000640)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000540)="8ab7d5850000", 0x0, 0x0, 0x10010, 0x0, 0x0}) 730.831898ms ago: executing program 0 (id=2035): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x68300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0xef, &(0x7f0000000000)=""/239, 0x40f00, 0x40}, 0x94) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r3, &(0x7f0000000080), 0xffffff1c) getpeername$netlink(r3, &(0x7f00000001c0), &(0x7f0000000200)=0xc) 440.213275ms ago: executing program 0 (id=2041): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$UHID_INPUT(r0, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000006000000611014000000000095000000000000009be27f53f53db53728e06281ee13d204b2ce95e3d1c11f6bdb33b57fb4566066b2a77bab14579afdffd7958871c358c9c2768ef2af"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21}, 0x90) pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0x400fe, 0x16, 0x3, 0x200, &(0x7f0000000640)="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"}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYRES8, @ANYRES32=r3, @ANYBLOB="0800a0009e08000008009f000400000008002600800900000800a18a99"], 0x3c}}, 0x44000) 439.759365ms ago: executing program 7 (id=2042): r0 = socket$netlink(0x10, 0x3, 0xf) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002"], 0x44}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x20040884}, 0x40000) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) utime(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)={0x9, 0x3}) sendmsg$nl_route_sched(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001600)=@deltfilter={0x840, 0x2d, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xd, 0xffe0}, {0xffe0, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x810, 0x2, [@TCA_ROUTE4_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x32006d63, 0xfffff00a, 0xff, 0x101, 0x8, 0x200, 0xbb, 0x2, 0x3, 0xfffffffb, 0x3f, 0x3, 0x5, 0xfffffff9, 0x0, 0x7, 0x5, 0x7, 0xfffffffa, 0x800, 0x7fff, 0x4, 0x1, 0x1, 0x519f, 0x0, 0x6, 0x0, 0x8, 0x3, 0x1, 0x4, 0x4, 0x5, 0xfffffff7, 0x7fff, 0x1, 0x8, 0x7, 0x3b1f, 0x5, 0x9, 0xb, 0x5, 0x400, 0x4, 0x3, 0xffffffff, 0x8, 0xffffffff, 0x3, 0x68, 0x4, 0x1, 0x7, 0x5, 0x853d642, 0x3, 0x7, 0x8, 0x64b1, 0xf59, 0xa, 0x2, 0x1, 0x4, 0x36, 0x6, 0xa, 0x5, 0x4, 0x7fff, 0x7, 0x10000, 0xa, 0x200, 0x8, 0x9, 0x10, 0x3ff, 0x9, 0x9, 0x70, 0x4, 0xd, 0x1, 0xffffb0d4, 0x2, 0x1ff, 0x7, 0x3, 0x7, 0x1, 0x1, 0x1, 0x3, 0x4, 0xc, 0x8, 0xfffffffa, 0x8aa0, 0xe0f, 0x9, 0x3, 0x1000, 0xffff, 0x10000, 0x8000, 0xd, 0x5, 0xff, 0xf, 0xd0a3, 0x80, 0x7, 0x5b72, 0x0, 0x5, 0xfffffff7, 0x6, 0x7, 0x1ff, 0x5, 0x4, 0x2, 0xb52b, 0x2, 0x3, 0x3ff, 0x1, 0x2dd9, 0x8001, 0x8, 0x5, 0x0, 0x7, 0x81, 0x80000000, 0x3, 0xe8d6, 0xffff, 0xc0eb, 0x6, 0x1, 0x7, 0x4b0, 0x8, 0x3cf1a96c, 0x6, 0x6, 0x80000000, 0x9, 0xfffffcea, 0x9, 0x10000, 0x6ce9, 0x9, 0x4e5, 0x7, 0x369c, 0x3f99, 0xffffffff, 0x4, 0x8, 0x3, 0xff, 0x1, 0x0, 0x5, 0x2, 0x5000000, 0x62, 0x10001, 0xcf8c, 0x3f18476d, 0x1f300220, 0x3, 0x4224, 0x7ff, 0x1, 0x2, 0x4, 0xfffffff7, 0x80000000, 0x5, 0xe, 0x5, 0x1, 0xdf60da4, 0x3, 0x82d0, 0x6, 0x4, 0x800, 0x100, 0x80000001, 0x6, 0x3, 0x7, 0x80000001, 0x7fffffff, 0x3, 0xffffffff, 0x7, 0x2, 0xfffffffd, 0x4, 0x9, 0x6, 0x0, 0xfffffe00, 0x39, 0x2, 0x8000, 0x80, 0x3, 0x4, 0x9, 0x8, 0x4, 0x3, 0x9, 0x100, 0x7, 0x2, 0x7, 0x2, 0x9, 0x19000000, 0x5, 0x4, 0x9, 0x3, 0x80000000, 0x2, 0x2, 0x7, 0x0, 0x7, 0xfff, 0xc83b, 0x401, 0xe4f0, 0xd09, 0x80000001, 0xfffffff7, 0x7812, 0x80, 0xfffffffc, 0x7, 0x0, 0xfffffffc, 0x81, 0xffff, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x0, 0x0, 0xc4e6, 0xfffffc01, 0x459, 0x6, 0x4, 0xc, 0x3, 0x1, 0xde8, 0x4, 0x6, 0x7, 0x2, 0x7, 0x3, 0x2, 0x5, 0x339c04a7, 0x1, 0x9, 0x0, 0x5, 0x4, 0x1, 0x6, 0x5, 0x5, 0x9, 0x9, 0x2, 0x0, 0x80000001, 0x9, 0x84b250eb, 0x2, 0x5, 0x3, 0x4, 0x2f5, 0x10, 0x5, 0x7a4e, 0x5, 0xb9, 0xffffffff, 0x8, 0x8000, 0x8, 0x8, 0xff, 0xff, 0x4, 0x40, 0x7, 0x17, 0x80, 0x3, 0x4, 0x5, 0x7b34, 0x2ce, 0xb8, 0x3ff, 0xb46, 0x4, 0x8, 0x1, 0x2fce, 0x0, 0x5, 0x3, 0x4, 0x8, 0x5, 0x1, 0x0, 0xf, 0x2c8, 0x2, 0xffffffc0, 0x5ed96db, 0x400, 0x7, 0x6, 0x400, 0x1, 0x6, 0x0, 0x5, 0x2, 0x200, 0x1ff, 0x8163, 0x4306ded, 0x1de7, 0x831, 0x5, 0xffffffff, 0x7, 0x5, 0x10000, 0xfffffffc, 0x6cf, 0xf, 0x1, 0x1, 0x401, 0x8000, 0x80, 0xe, 0x6, 0x6, 0x4, 0x7, 0x7fffffff, 0xd5f3, 0x0, 0x14, 0xc23, 0xd, 0x1, 0x3, 0x1, 0x9, 0x8, 0xf, 0x800, 0x1, 0xffff, 0x9, 0xfffffff7, 0x4, 0x6, 0xc3, 0x5, 0x3, 0x2, 0x10000, 0xfff, 0x8, 0x32f4, 0x9, 0x2, 0x4, 0x0, 0xa, 0x5, 0x0, 0x3, 0x8, 0x79a9, 0x8, 0x7, 0x6, 0x3, 0x1, 0x3e91, 0x6, 0x5, 0x6, 0xfffffff9, 0x0, 0x7, 0x5, 0x360c4ca1, 0x5, 0x40f, 0x8, 0x7ff, 0x7, 0x2, 0x1, 0xff, 0x96, 0x1, 0x2, 0xc95af3b, 0x6813, 0x4, 0x9, 0x3f, 0x5, 0x8, 0x7, 0x8, 0x1a74, 0x10000, 0x101, 0x8, 0x2, 0x13, 0x6, 0xff, 0x1, 0x0, 0x4, 0x9, 0xa, 0x7, 0x9, 0xffffff00, 0x9, 0x7, 0x1, 0x0, 0x1, 0x0, 0xfffffff8, 0x1000, 0x100000, 0x80000000, 0xffffffff, 0x80000001, 0x3ed, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0xb, 0x5, 0x9, 0xd, 0x8, 0x4, 0x0, 0x1000, 0x72, 0x8, 0x5, 0x2, 0x4, 0x1, 0x0, 0xdcc, 0x7, 0x5, 0x5, 0x2, 0x10, 0x2, 0x217, 0x3ff, 0x200000, 0xd, 0xa990, 0x1, 0x9, 0x4, 0x2932, 0x5dd, 0x1ff, 0xe3]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x20000814}, 0x8000) 360.823443ms ago: executing program 7 (id=2043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x4dc}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 360.491713ms ago: executing program 0 (id=2044): r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.log\x00', 0x700, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x182) writev(r1, &(0x7f0000000800)=[{&(0x7f0000000040)="ac", 0x1}], 0x1) r2 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fchown(r1, r2, r4) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioperm(0x0, 0x2, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) capset(&(0x7f0000000200)={0x20071026, r5}, &(0x7f0000000140)) getgroups(0x2, &(0x7f0000000040)=[0xee00, 0xffffffffffffffff]) setgid(r7) read$FUSE(0xffffffffffffffff, &(0x7f00000012c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000280)={0x338, 0x0, r8, [{{0x0, 0x0, 0x4, 0x80000000, 0x3000, 0x89b6, {0x6, 0xaff, 0xe1ba, 0x53f, 0xa2d, 0x0, 0x7, 0x7, 0x81, 0xa000, 0x800, r3, r7, 0x7, 0x8000}}, {0x2, 0x6ef, 0x5, 0xe613, '.log\x00'}}, {{0x1, 0x0, 0x8, 0x5, 0x7fffffff, 0x3, {0x0, 0xc040000000000000, 0xdc2, 0xd, 0x8dd8, 0x3, 0x0, 0xc, 0x20000, 0xc000, 0x3, r3, r4, 0x0, 0x7fff}}, {0x1, 0x2d, 0xc, 0x342, '/dev/media#\x00'}}, {{0x2, 0x2, 0x1, 0x4, 0x59, 0x7, {0x5, 0x5, 0xd4, 0xa, 0xfffffffffffffffc, 0x4, 0x5, 0x5, 0x6, 0xc000, 0x8, r2, r4, 0x46e, 0x29}}, {0x4, 0xffff, 0x6, 0x7, '*%.(./'}}, {{0x6, 0x0, 0x106, 0x9, 0x8001, 0x10001, {0x5, 0xfffffffffffffffa, 0x9, 0x1, 0x1, 0x8, 0x7, 0x3, 0x9, 0xa000, 0x7, r2, r6, 0xbb3, 0x1}}, {0x4, 0x401, 0x2, 0x80000000, '}{'}}, {{0x0, 0x0, 0x5, 0x7, 0x10, 0x6, {0x1, 0x4, 0x2, 0x3, 0x3, 0x65c1, 0x9, 0x1, 0x7, 0x1000, 0x8, r2, r7, 0x40000006, 0xfffffff9}}, {0x0, 0x10001, 0x5, 0x93, '.log\x00'}}]}, 0x338) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x400000000000272, 0x0, 0x0) r11 = socket$kcm(0x10, 0x2, 0x10) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r12, 0xc004743e, 0x110e22fff6) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r13, 0xc004743e, &(0x7f0000000140)) sendmsg$kcm(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="3504000040000511d25a35400c00020001ffe420370000000c04018006041000450000002a560000e7ff00000000", 0x2e}, {&(0x7f0000000e80)="d4fa0c511aad03aa5ed217677bc41c027d5bdcfb3a9c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b85a14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844ed7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626cf50d4563848b34deeaf2aa76c6ef7b13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a0267f3bf8efa11287d2f407edddb6205093ccc7dbedfd75e34f3f9eb3c7833734a59acada6dd2ff364475e03f2219deedb5d0c941f2177a23167adcc5a15f4e5441ed537f26a1620df057aeb55b2ad3a00a77e23d304ed6034dd5ec9b2cfe777e1319d94b129be71a1637c7f874f6dca21ec4f48abdafa0d66a78d653068ef871bdc6598fd32edcba60c675a1e8f4e81e83f73414c179bfb7f329d71fe6e291fb2eaa59b9636cb6a74d0deb46a18c77f37abf0894a7083e0e4c237ff7c24872668ac40e307569a975b2765af8d3268d11b473d5d7544edd1ed0e507c119e128daf7e75c349c9b3de603580d52a6c118acf924216130364bfab8d59969e4dbee0a9208adb7bfa855556be06a666334a0612e4ff3fc6f4ddb9a0c209301081f34824496480d688ae9bd0c3c28ea8ecfe01a2a86dcb3750686a89891d9abf0d584c854b4bc6096293fbc8707312f424996361ef9261ef3ba7cd2ddffb0e3c81e6b962d680e02f7a672dc26476c256459e2c2ed94b8461b56ff944edc1a8cd93d0258fcc2f094615", 0x407}], 0x2}, 0x10009004) 240.754739ms ago: executing program 7 (id=2045): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)={0x1}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)={0xdb8, 0x7, 0x0, 0x3f25, 0x1}) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x1, 0x1}) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f00000013c0)={0x50, 0x0, r2, {0x7, 0x2b, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) writev(r4, &(0x7f0000001380)=[{&(0x7f00000002c0)="3cfd", 0x2}], 0x1) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x550, 0x3c0, 0x280, 0x40, 0x968f, 0x0, 0x2, 0x2, {0xffff, 0x1000}, {0x2, 0x2}, {0x6, 0x5c8}, {0x11bb020f}, 0x3, 0x40, 0x10000, 0x3, 0x0, 0xfffffffe, 0x0, 0x2, 0x100, 0x8, 0x2, 0x1, 0x10, 0x200, 0x2, 0x3}) 150.91986ms ago: executing program 7 (id=2046): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000580)={r0, &(0x7f0000000600)="68d2449c8965ac377c6e07200f173a8612c542be1d9c167040a90c1ff5a162fcf1101a7ff16bf9f1cec331e1286d94c7a178cf0d49aff15577948047c6fd0937992d6b55e4243d8f88e56aba4dbfc01e4ee237946768f5b348a0c780eeb3808f5b2737ea7dceb81cbc41124c16ff86abd2f39cb3093690f74a0152ad3558da1c1c112111b795bb145f24f4e44b59b4b49ab2015ed0e1a9a782ecb3def4b1432eec045daffee61103fa952c4a34375d4eda80d6d42bb9957efbe931818e30135d6ebdf1f92cbec6c204e91acb45316974eaa8822bd197962b16540166179791b0e7527219c4b8783a05"}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x1c, r2, 0x83625fc5352ba305, 0xfffffffd, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004804}, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0xb2, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xb9, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x4c, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_WOL_SOPASS={0x7, 0x3, "b5d2d0"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004801}, 0x24040005) 149.390153ms ago: executing program 7 (id=2047): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) (async) io_setup(0x8f0, &(0x7f0000002400)=0x0) (async) r3 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x1, 0x1, 'queue1\x00', 0x4}) (async) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) getsockopt$packet_int(r0, 0x107, 0x7, 0x0, &(0x7f0000000080)) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038400000000c0a0101000000000000000007000000090002006688194b49bb7af20900010073797a3000000000140003"], 0xd4}}, 0x0) 812.158µs ago: executing program 7 (id=2048): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x8000000000000003, {}, 0xfd}, 0x18) socket(0xf, 0x6, 0x80000) r4 = socket(0x10, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) socket$netlink(0x10, 0x3, 0x400000000000004) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471080300000078581acb6c0101ff0000000309", 0x48}, {&(0x7f0000000840)="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", 0x15b}], 0x2) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0xffff, 0x801, 0x400007, 0x7, 0x1}) mkdirat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) 0s ago: executing program 8 (id=2049): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r9 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x610}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r9, 0xc020aa07, &(0x7f0000000340)={{&(0x7f0000cc6000/0x1000)=nil, 0x1000}, 0x1}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r8, @ANYBLOB="0700130006c4e0000a0006000802110000010000060010008005000006001200"], 0x40}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r5) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000400)={&(0x7f0000000100), 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000426bd7000ffdbdf250900000008002b0003000000050029000100000008000100040000000000000005002e0000000000050029000000000005002f00010000000a000900aaaaaaaaaabb00000500350003000000"], 0x68}, 0x1, 0x0, 0x0, 0x48084}, 0x800) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x11, r10, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) r12 = gettid() r13 = epoll_create(0x400) r14 = eventfd(0xfffffffe) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r14, &(0x7f0000000000)) kcmp$KCMP_EPOLL_TFD(r12, r12, 0x7, r14, &(0x7f00000000c0)={r13, r14, 0x5}) io_uring_enter(r1, 0x68be, 0x5002, 0x4, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r15, 0x5761, &(0x7f0000000f40)={0x5, 0x0, [{0x8000, 0x7, 0xfffff714, [0x9, 0x9, 0x1af, 0xb9a2, 0x1, 0x10, 0x8, 0x2]}, {0xfffff78a, 0x6, 0x9, [0x9f7, 0x3, 0x1, 0x0, 0x4, 0xf, 0x8, 0x200]}, {0x1ff, 0x9, 0x1ff, [0x94f, 0x1, 0x73e5d9cb, 0x9, 0x0, 0x9, 0xfffffff7, 0x400]}, {0x5, 0x7fffffff, 0xf, [0xbf, 0x100, 0x0, 0x10000, 0x8001, 0xca, 0x100, 0xf08b9bb]}, {0x2e, 0x3, 0x8, [0x8, 0x6, 0xb1, 0x7, 0x7, 0x0, 0x100, 0x4]}]}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@gettaction={0x9c, 0x32, 0x89910f7975f42df, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb8f}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x9c}}, 0x0) kernel console output (not intermixed with test programs): vc: denied { execmem } for pid=9166 comm="syz.5.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 95.134649][ T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 95.284906][ T24] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 95.287627][ T24] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 95.290685][ T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 95.302805][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 95.306609][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 95.311295][ T24] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 95.314194][ T24] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 95.316698][ T24] usb 9-1: Product: syz [ 95.318019][ T24] usb 9-1: Manufacturer: syz [ 95.327703][ T24] cdc_wdm 9-1:1.0: skipping garbage [ 95.329382][ T24] cdc_wdm 9-1:1.0: skipping garbage [ 95.333437][ T24] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 95.335320][ T24] cdc_wdm 9-1:1.0: Unknown control protocol [ 95.540133][ T5985] usb 9-1: USB disconnect, device number 8 [ 96.050825][ T9189] netlink: 96 bytes leftover after parsing attributes in process `syz.0.933'. [ 96.379898][ T9231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.948'. [ 96.382743][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.948'. [ 96.385800][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.948'. [ 96.388512][ T9231] netlink: 5 bytes leftover after parsing attributes in process `syz.0.948'. [ 96.582370][ T40] audit: type=1400 audit(1752908384.292:610): avc: denied { mounton } for pid=9257 comm="syz.0.958" path="/247/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 96.607313][ T9266] macsec0: entered promiscuous mode [ 96.609100][ T9266] macsec0: entered allmulticast mode [ 96.610726][ T9266] veth1_macvtap: entered allmulticast mode [ 96.621336][ T9271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.625031][ T9271] batadv_slave_0: entered promiscuous mode [ 96.626954][ T9271] batadv_slave_0: entered allmulticast mode [ 96.639011][ T9271] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 96.686939][ T9279] No such timeout policy "syz1" [ 96.692775][ T40] audit: type=1400 audit(1752908384.402:611): avc: denied { read write } for pid=9278 comm="syz.4.963" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 96.694034][ T9279] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.823817][ T9298] /dev/nullb0: Can't open blockdev [ 97.056990][ T9318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=9318 comm=syz.4.974 [ 97.323617][ T29] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 97.452893][ T6032] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 97.472782][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 97.475731][ T29] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 97.478342][ T29] usb 5-1: config 0 has no interface number 0 [ 97.480268][ T29] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 97.484233][ T29] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 97.488606][ T29] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 97.491403][ T29] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 97.494695][ T29] usb 5-1: Product: syz [ 97.496484][ T29] usb 5-1: SerialNumber: syz [ 97.500744][ T29] usb 5-1: config 0 descriptor?? [ 97.506769][ T29] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 97.510902][ T29] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input10 [ 97.603332][ T6032] usb 9-1: Using ep0 maxpacket: 32 [ 97.608210][ T6032] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.611521][ T6032] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.618056][ T6032] usb 9-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 97.621642][ T6032] usb 9-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 97.624947][ T6032] usb 9-1: Product: syz [ 97.626603][ T6032] usb 9-1: Manufacturer: syz [ 97.628486][ T6032] usb 9-1: SerialNumber: syz [ 97.641893][ T6032] input: appletouch as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/input/input11 [ 97.708330][ T9320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.712031][ T9320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.718805][ T9320] gfs2: path_lookup on 6(+dQnB!eUV!`: 8DSE y|YT{-,mb/ returned error -2 [ 97.723928][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 97.723957][ T9] usb 5-1: USB disconnect, device number 5 [ 97.726610][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 97.733570][ T9] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 97.827441][ T9359] netlink: 'syz.1.986': attribute type 1 has an invalid length. [ 97.838233][ T9359] bond3: entered promiscuous mode [ 97.840051][ T9359] 8021q: adding VLAN 0 to HW filter on device bond3 [ 97.850513][ T9359] 8021q: adding VLAN 0 to HW filter on device bond3 [ 97.852973][ T9359] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 97.856151][ T9359] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 97.861463][ T9359] bond3: (slave ip6gre1): making interface the new active one [ 97.866619][ T9359] ip6gre1: entered promiscuous mode [ 97.869373][ T9359] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 97.943628][ T9368] netlink: 'syz.1.988': attribute type 21 has an invalid length. [ 97.949090][ T6033] usb 9-1: USB disconnect, device number 9 [ 97.955651][ T6033] appletouch 9-1:1.0: input: appletouch disconnected [ 98.120448][ T9383] bond0: (slave wlan1): Releasing backup interface [ 98.124573][ T9383] bond1: (slave ip6gretap2): Releasing backup interface [ 98.129935][ T9383] bond3: (slave ip6gre1): Releasing backup interface [ 98.132004][ T9383] ip6gre1: left promiscuous mode [ 98.196437][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 98.196447][ T40] audit: type=1400 audit(1752908385.912:617): avc: denied { mount } for pid=9384 comm="syz.1.993" name="/" dev="rpc_pipefs" ino=25552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 98.444319][ T9397] xt_ecn: cannot match TCP bits for non-tcp packets [ 98.479384][ T9400] __nla_validate_parse: 13 callbacks suppressed [ 98.479396][ T9400] netlink: 16 bytes leftover after parsing attributes in process `syz.4.999'. [ 98.485922][ T9402] netlink: 16 bytes leftover after parsing attributes in process `syz.4.999'. [ 98.520106][ T40] audit: type=1400 audit(1752908386.232:618): avc: denied { accept } for pid=9406 comm="syz.4.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 98.550528][ T40] audit: type=1400 audit(1752908386.262:619): avc: denied { setattr } for pid=9412 comm="syz.0.1002" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.557433][ T40] audit: type=1400 audit(1752908386.262:620): avc: denied { write } for pid=9412 comm="syz.0.1002" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.558089][ T9413] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 98.565405][ T40] audit: type=1400 audit(1752908386.272:621): avc: denied { open } for pid=9412 comm="syz.0.1002" path="/255/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.565814][ T9413] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 98.575248][ T9413] vhci_hcd vhci_hcd.0: Device attached [ 98.579102][ T9418] vhci_hcd: connection closed [ 98.579272][ T8063] vhci_hcd: stop threads [ 98.582270][ T8063] vhci_hcd: release socket [ 98.585746][ T8063] vhci_hcd: disconnect device [ 98.602796][ T9417] cgroup: Unknown subsys name 'xprt_reserve' [ 98.787852][ T40] audit: type=1400 audit(1752908386.502:622): avc: denied { create } for pid=9440 comm="syz.1.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.795122][ T40] audit: type=1400 audit(1752908386.502:623): avc: denied { write } for pid=9440 comm="syz.1.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.922889][ T29] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 99.046424][ T9457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1014'. [ 99.094560][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.098014][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.101234][ T29] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 99.109317][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.114497][ T29] usb 9-1: config 0 descriptor?? [ 99.233940][ T40] audit: type=1400 audit(1752908386.952:624): avc: denied { map } for pid=9464 comm="syz.0.1016" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.241968][ T40] audit: type=1400 audit(1752908386.952:625): avc: denied { execute } for pid=9464 comm="syz.0.1016" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.271670][ T40] audit: type=1400 audit(1752908386.982:626): avc: denied { setopt } for pid=9466 comm="syz.0.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 99.323663][ T29] usbhid 9-1:0.0: can't add hid device: -71 [ 99.326361][ T29] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 99.329757][ T29] usb 9-1: USB disconnect, device number 10 [ 99.393957][ T9474] netlink: 'syz.0.1019': attribute type 1 has an invalid length. [ 99.414993][ T9474] 8021q: adding VLAN 0 to HW filter on device bond6 [ 99.417953][ T9474] bond5: (slave bond6): making interface the new active one [ 99.421593][ T9474] bond5: (slave bond6): Enslaving as an active interface with an up link [ 100.390588][ T5958] Bluetooth: hci0: unexpected event for opcode 0x0407 [ 100.506602][ T9501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9501 comm=syz.1.1026 [ 100.510813][ T9501] netlink: 'syz.1.1026': attribute type 1 has an invalid length. [ 100.525494][ T9501] 8021q: adding VLAN 0 to HW filter on device bond4 [ 100.536477][ T9502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1026'. [ 100.536509][ T9501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1026'. [ 100.544607][ T9502] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 100.556422][ T9502] bond4: (slave batadv1): making interface the new active one [ 100.559300][ T9502] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 100.569023][ T9501] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 100.573842][ T9501] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 101.031515][ T9550] vxcan1 speed is unknown, defaulting to 1000 [ 101.039172][ T9552] uprobe: syz.0.1042:9552 failed to unregister, leaking uprobe [ 101.185889][ T9568] netlink: 57 bytes leftover after parsing attributes in process `syz.0.1048'. [ 101.189443][ T9568] fuse: Bad value for 'group_id' [ 101.191112][ T9568] fuse: Bad value for 'group_id' [ 101.255995][ T9577] binder: BINDER_SET_CONTEXT_MGR already set [ 101.258146][ T9577] binder: 9576:9577 ioctl 4018620d 200000000040 returned -16 [ 101.261393][ T9577] binder: 9576:9577 ioctl 4601 2000000006c0 returned -22 [ 101.265303][ T9577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1051'. [ 101.268790][ T9577] binder: 9576:9577 ioctl c0306201 200000000240 returned -11 [ 101.280540][ T9578] /dev/sg0: Can't lookup blockdev [ 101.369908][ T9587] kvm: kvm [9579]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x40000012) = 0x6e6d0a3230303030 [ 101.714824][ T9614] tipc: Enabled bearer , priority 10 [ 101.935344][ T9628] xt_cgroup: xt_cgroup: no path or classid specified [ 102.038609][ T5958] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 102.074022][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1067'. [ 102.076929][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1067'. [ 102.457808][ T9649] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 102.583428][ T9651] macvlan2: entered promiscuous mode [ 102.585221][ T9651] macvlan2: entered allmulticast mode [ 102.970857][ T9668] netlink: 'syz.1.1079': attribute type 32 has an invalid length. [ 102.974200][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'. [ 102.978146][ T9668] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 103.105409][ T5958] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 103.176253][ T9685] netlink: 'syz.0.1086': attribute type 1 has an invalid length. [ 103.296677][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 103.296687][ T40] audit: type=1400 audit(1752908391.012:652): avc: denied { read append open } for pid=9688 comm="syz.0.1087" path="/288/file0/memory.events.local" dev="9p" ino=36047896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.306775][ T9689] netfs: Couldn't get user pages (rc=-14) [ 103.307625][ T40] audit: type=1400 audit(1752908391.012:653): avc: denied { map } for pid=9688 comm="syz.0.1087" path="/288/file0/memory.events.local" dev="9p" ino=36047896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.318476][ T40] audit: type=1400 audit(1752908391.012:654): avc: denied { write } for pid=9688 comm="syz.0.1087" path="/288/file0/memory.events.local" dev="9p" ino=36047896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.635446][ T40] audit: type=1400 audit(1752908391.352:655): avc: denied { bind } for pid=9696 comm="syz.4.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 103.668359][ T9699] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9699 comm=syz.4.1091 [ 103.672189][ T9699] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9699 comm=syz.4.1091 [ 103.676728][ T40] audit: type=1400 audit(1752908391.392:656): avc: denied { audit_write } for pid=9698 comm="syz.4.1091" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 103.706592][ T9702] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9702 comm=syz.4.1091 [ 103.711411][ T9702] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9702 comm=syz.4.1091 [ 103.810815][ T40] audit: type=1400 audit(1752908391.522:657): avc: denied { write } for pid=9709 comm="syz.5.1093" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 103.867202][ T9714] netlink: 'syz.4.1096': attribute type 1 has an invalid length. [ 103.880670][ T9714] 8021q: adding VLAN 0 to HW filter on device bond4 [ 103.909024][ T9714] bond4: (slave veth3): Enslaving as an active interface with a down link [ 103.913568][ T9714] __nla_validate_parse: 1 callbacks suppressed [ 103.913577][ T9714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1096'. [ 103.922200][ T9714] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 103.929734][ T9714] bond4: (slave batadv1): making interface the new active one [ 103.932993][ T9714] batadv1: entered promiscuous mode [ 103.935621][ T9714] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 103.973716][ T9730] cgroup: name respecified [ 103.975183][ T9730] cgroup: name respecified [ 103.976614][ T9730] cgroup: name respecified [ 103.978025][ T9730] cgroup: name respecified [ 103.979434][ T9730] cgroup: name respecified [ 103.980856][ T9730] cgroup: name respecified [ 103.982351][ T9730] cgroup: name respecified [ 103.983894][ T9730] cgroup: name respecified [ 103.985307][ T9730] cgroup: name respecified [ 103.986700][ T9730] cgroup: name respecified [ 103.988110][ T9730] cgroup: name respecified [ 103.989496][ T9730] cgroup: name respecified [ 103.990895][ T9730] cgroup: name respecified [ 103.992403][ T9730] cgroup: name respecified [ 103.995610][ T9730] cgroup: name respecified [ 103.997092][ T9730] cgroup: name respecified [ 103.998558][ T9730] cgroup: name respecified [ 103.999957][ T9730] cgroup: name respecified [ 104.001353][ T9730] cgroup: name respecified [ 104.002908][ T9730] cgroup: name respecified [ 104.004334][ T9730] cgroup: name respecified [ 104.005834][ T9730] cgroup: name respecified [ 104.007489][ T9730] cgroup: name respecified [ 104.009032][ T9730] cgroup: name respecified [ 104.011083][ T9730] cgroup: name respecified [ 104.012638][ T9730] cgroup: name respecified [ 104.019468][ T9730] cgroup: name respecified [ 104.021118][ T9730] cgroup: name respecified [ 104.098840][ T9743] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1101'. [ 104.156794][ T9750] netfs: Couldn't get user pages (rc=-14) [ 104.333612][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1108'. [ 104.336478][ T9754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1108'. [ 104.342265][ T9754] geneve2: entered promiscuous mode [ 104.343328][ T40] audit: type=1326 audit(1752908392.052:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.5.1109" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d178e9a9 code=0x7ffc0000 [ 104.344068][ T9754] geneve2: entered allmulticast mode [ 104.351174][ T40] audit: type=1326 audit(1752908392.052:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.5.1109" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d178e9a9 code=0x7ffc0000 [ 104.360959][ T40] audit: type=1326 audit(1752908392.062:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.5.1109" exe="/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f72d178e9a9 code=0x7ffc0000 [ 104.368608][ T40] audit: type=1326 audit(1752908392.062:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.5.1109" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d178e9a9 code=0x7ffc0000 [ 104.402336][ T9758] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 104.624121][ T9770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 104.882786][ T24] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 104.953142][ T9687] overlayfs: failed to clone upperpath [ 105.012859][ T24] usb 5-1: device descriptor read/64, error -71 [ 105.154368][ T9793] tmpfs: Unknown parameter '' [ 105.181456][ T9797] netlink: 'syz.5.1122': attribute type 21 has an invalid length. [ 105.184192][ T9797] netlink: 'syz.5.1122': attribute type 6 has an invalid length. [ 105.186595][ T9797] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1122'. [ 105.234097][ T9803] netlink: 'syz.4.1125': attribute type 3 has an invalid length. [ 105.236538][ T9803] netlink: 'syz.4.1125': attribute type 3 has an invalid length. [ 105.240638][ T9803] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 105.254084][ T24] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 105.278937][ T9807] xt_hashlimit: size too large, truncated to 1048576 [ 105.382806][ T24] usb 5-1: device descriptor read/64, error -71 [ 105.392315][ T9807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33022 sclass=netlink_route_socket pid=9807 comm=syz.4.1126 [ 105.459876][ T9815] ipt_rpfilter: unknown options [ 105.462452][ T9815] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1128'. [ 105.465429][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1128'. [ 105.492890][ T24] usb usb5-port1: attempt power cycle [ 105.624288][ T9818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1129'. [ 105.663181][ C2] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 105.752038][ T9820] netlink: 'syz.4.1130': attribute type 10 has an invalid length. [ 105.758879][ T9820] team0: Device ipvlan1 failed to register rx_handler [ 105.832803][ T24] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 105.881783][ T24] usb 5-1: device descriptor read/8, error -71 [ 106.071795][ T9829] vxcan1 speed is unknown, defaulting to 1000 [ 106.132771][ T24] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 106.153157][ T24] usb 5-1: device descriptor read/8, error -71 [ 106.263659][ T24] usb usb5-port1: unable to enumerate USB device [ 106.578599][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1144'. [ 106.702825][ C2] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 106.806806][ T9876] netlink: 'syz.5.1150': attribute type 10 has an invalid length. [ 106.936917][ T5952] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 106.940611][ T5952] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 106.944462][ T5952] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 106.948737][ T5952] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 106.951997][ T5952] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 106.977980][ T9883] vxcan1 speed is unknown, defaulting to 1000 [ 106.984108][ T9887] netlink: 'syz.1.1152': attribute type 1 has an invalid length. [ 107.164810][ T9883] chnl_net:caif_netlink_parms(): no params data found [ 107.238827][ T9883] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.241920][ T9883] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.244673][ T9883] bridge_slave_0: entered allmulticast mode [ 107.247352][ T9883] bridge_slave_0: entered promiscuous mode [ 107.250507][ T9883] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.253336][ T9883] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.256423][ T9883] bridge_slave_1: entered allmulticast mode [ 107.259067][ T9883] bridge_slave_1: entered promiscuous mode [ 107.266799][ T9911] 9pnet: p9_errstr2errno: server reported unknown error @@ [ 107.291985][ T9883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.296780][ T9883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.334203][ T9883] team0: Port device team_slave_0 added [ 107.338057][ T9883] team0: Port device team_slave_1 added [ 107.343204][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1160'. [ 107.371995][ T9883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.375074][ T9883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.383053][ T9883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.388006][ T9883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.390758][ T9883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.399456][ T9883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.440081][ T9921] overlayfs: failed to clone upperpath [ 107.457080][ T9883] hsr_slave_0: entered promiscuous mode [ 107.459344][ T9883] hsr_slave_1: entered promiscuous mode [ 107.573698][ T9883] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.641641][ T9883] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.714582][ T9883] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.746584][ T9946] IPVS: set_ctl: invalid protocol: 5 5.0.0.0:12032 [ 107.767060][ T9948] vlan3: entered allmulticast mode [ 107.768714][ T9948] geneve1: entered allmulticast mode [ 107.798464][ T9883] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.848225][ T9968] xt_l2tp: v2 tid > 0xffff: 150994944 [ 107.919344][ T9883] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.924127][ T9883] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.928731][ T9883] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.935172][ T9883] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.967904][ T9981] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.971823][ T9981] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.974966][ T9981] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.977693][ T9981] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.981524][ T9981] bond8: (slave geneve3): making interface the new active one [ 107.984387][ T9981] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 107.992016][ T9982] 8021q: adding VLAN 0 to HW filter on device bond8 [ 108.010833][ T9883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.019978][ T9883] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.025074][ T8063] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.027261][ T8063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.034241][ T8062] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.036407][ T8062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.080467][ T9991] hfsplus: unable to find HFS+ superblock [ 108.143575][ T9883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.277627][ T9883] veth0_vlan: entered promiscuous mode [ 108.285500][ T9883] veth1_vlan: entered promiscuous mode [ 108.299801][ T9883] veth0_macvtap: entered promiscuous mode [ 108.304249][ T9883] veth1_macvtap: entered promiscuous mode [ 108.313107][ T9883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.318759][ T9883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.323750][ T9883] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.326514][ T9883] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.329199][ T9883] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.331877][ T9883] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.371267][ T8065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.373807][ T8065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.388549][ T8066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.391206][ T8066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.396230][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 108.396238][ T40] audit: type=1400 audit(108.272:690): avc: denied { mounton } for pid=10007 comm="syz.0.1185" path="/309/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 108.397111][T10008] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 108.580526][T10037] validate_nla: 4 callbacks suppressed [ 108.580537][T10037] netlink: 'syz.0.1195': attribute type 1 has an invalid length. [ 108.592932][ T40] audit: type=1400 audit(108.472:691): avc: denied { listen } for pid=10039 comm="syz.4.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.620573][ T40] audit: type=1400 audit(108.492:692): avc: denied { bind } for pid=10041 comm="syz.0.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.723394][ T40] audit: type=1400 audit(108.602:693): avc: denied { map } for pid=10043 comm="syz.4.1198" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 108.911164][ T40] audit: type=1400 audit(108.782:694): avc: denied { checkpoint_restore } for pid=10065 comm="syz.5.1202" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 109.013360][T10069] __nla_validate_parse: 10 callbacks suppressed [ 109.013371][T10069] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1203'. [ 109.018483][T10068] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1203'. [ 109.023571][ T5952] Bluetooth: hci4: command tx timeout [ 109.033614][ T5952] Bluetooth: hci3: command tx timeout [ 109.048871][ T40] audit: type=1400 audit(108.922:695): avc: denied { getopt } for pid=10073 comm="syz.1.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 109.056806][ T40] audit: type=1400 audit(108.932:696): avc: denied { write } for pid=10073 comm="syz.1.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 109.060195][T10078] netlink: 'syz.5.1206': attribute type 1 has an invalid length. [ 109.214569][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1209'. [ 109.305322][ T40] audit: type=1400 audit(109.182:697): avc: denied { map } for pid=10098 comm="syz.5.1213" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 109.372683][T10107] netlink: 'syz.4.1215': attribute type 1 has an invalid length. [ 109.497153][T10115] binder_alloc: binder_alloc_mmap_handler: 10113 200000ff9000-200000ffd000 already mapped failed -16 [ 109.500976][T10114] binder: BINDER_SET_CONTEXT_MGR already set [ 109.505666][T10114] binder: 10113:10114 ioctl 4018620d 2000000001c0 returned -16 [ 109.509481][T10114] binder: 10113:10114 ioctl c0306201 200000000480 returned -22 [ 109.603370][ T34] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 109.632884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.712964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.716382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.719882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.773502][ T34] usb 10-1: Using ep0 maxpacket: 8 [ 109.777708][ T34] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 109.780458][ T34] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.783767][ T34] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 109.789757][ T34] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.793770][ T34] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.797831][ T34] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 109.804457][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.912991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 109.915534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 109.918053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 109.920558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 109.949250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.025406][ T34] usb 10-1: usb_control_msg returned -32 [ 110.027249][ T34] usbtmc 10-1:16.0: can't read capabilities [ 110.051825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 110.380900][ T29] usb 10-1: USB disconnect, device number 6 [ 110.384291][T10169] usbtmc 10-1:16.0: usb_control_msg returned -71 [ 110.504423][T10173] netlink: 'syz.0.1225': attribute type 1 has an invalid length. [ 110.530503][T10177] tmpfs: Unknown parameter 'nvrvѠwaW5`8' [ 110.676674][T10202] binder: 10201:10202 ioctl c0046209 0 returned -22 [ 110.754052][T10208] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 110.756264][T10208] overlayfs: failed to set xattr on upper [ 110.758037][T10208] overlayfs: ...falling back to redirect_dir=nofollow. [ 110.760156][T10208] overlayfs: ...falling back to index=off. [ 110.761992][T10208] overlayfs: ...falling back to uuid=null. [ 110.768737][T10208] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 110.855274][T10218] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 111.057257][ T40] audit: type=1400 audit(110.932:698): avc: denied { write } for pid=10226 comm="syz.5.1244" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 111.087871][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1245'. [ 111.091106][T10230] ipt_ECN: cannot use operation on non-tcp rule [ 111.113074][ T5952] Bluetooth: hci4: command tx timeout [ 111.308908][T10248] ip6t_srh: unknown srh invflags 7D00 [ 111.356992][T10250] batadv_slave_0: entered promiscuous mode [ 111.391125][T10252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1254'. [ 111.394482][T10252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1254'. [ 111.401226][T10252] geneve2: entered promiscuous mode [ 111.404280][T10252] geneve2: entered allmulticast mode [ 111.468765][T10260] sp0: Synchronizing with TNC [ 111.474475][T10260] sp0: Found TNC [ 111.549930][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1257'. [ 111.712239][T10281] erofs (device loop0): cannot find valid erofs superblock [ 111.814831][T10290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10290 comm=syz.4.1267 [ 111.819324][T10290] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1267'. [ 111.822947][T10290] netlink: 'syz.4.1267': attribute type 13 has an invalid length. [ 111.825414][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1267'. [ 112.004595][ T40] audit: type=1400 audit(111.882:699): avc: denied { append } for pid=10299 comm="syz.5.1269" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 112.080826][T10307] netlink: 'syz.4.1271': attribute type 10 has an invalid length. [ 112.087090][T10307] team0: Cannot enslave team device to itself [ 112.097523][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1271'. [ 112.099319][T10310] netlink: 'syz.5.1272': attribute type 1 has an invalid length. [ 112.166739][T10317] overlay: filesystem on ./bus is read-only [ 112.175245][T10316] xfrm1: entered promiscuous mode [ 112.177002][T10316] xfrm1: entered allmulticast mode [ 112.234908][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 112.382949][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 112.391717][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 112.394818][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.397415][ T9] usb 5-1: Product: syz [ 112.398751][ T9] usb 5-1: Manufacturer: syz [ 112.400322][ T9] usb 5-1: SerialNumber: syz [ 112.403295][ T9] usb 5-1: config 0 descriptor?? [ 112.443861][ T6014] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 112.531052][T10350] netlink: 'syz.1.1281': attribute type 1 has an invalid length. [ 112.572678][T10355] tipc: Enabled bearer , priority 0 [ 112.593119][ T6014] usb 9-1: Using ep0 maxpacket: 16 [ 112.601451][ T6014] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 112.604391][ T6014] usb 9-1: config 0 has no interface number 0 [ 112.608097][ T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 112.617088][ T6014] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 112.620120][ T6014] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.625464][ T6014] usb 9-1: Product: syz [ 112.626872][ T6014] usb 9-1: Manufacturer: syz [ 112.628393][ T6014] usb 9-1: SerialNumber: syz [ 112.631401][ T6014] usb 9-1: config 0 descriptor?? [ 112.641998][ T6014] hub 9-1:0.132: bad descriptor, ignoring hub [ 112.647134][T10363] input: syz1 as /devices/virtual/input/input13 [ 112.650299][ T6014] hub 9-1:0.132: probe with driver hub failed with error -5 [ 112.658777][ T6014] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.132/input/input14 [ 112.758452][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 112.763174][ T9] usb 5-1: USB disconnect, device number 10 [ 112.899175][T10322] xt_recent: Unsupported userspace flags (000000c7) [ 112.902072][T10322] xt_recent: Unsupported userspace flags (000000c7) [ 112.905333][T10322] xt_recent: Unsupported userspace flags (000000c7) [ 112.908140][T10322] xt_recent: Unsupported userspace flags (000000c7) [ 112.910955][T10322] xt_recent: Unsupported userspace flags (000000c7) [ 112.913952][T10322] xt_recent: Unsupported userspace flags (000000c7) [ 112.916770][T10322] xt_recent: Unsupported userspace flags (000000c7) [ 112.919575][T10322] xt_recent: Unsupported userspace flags (000000c7) [ 112.922413][T10322] xt_recent: Unsupported userspace flags (000000c7) [ 112.925333][T10322] xt_recent: Unsupported userspace flags (000000c7) [ 113.182792][ T5952] Bluetooth: hci4: command tx timeout [ 113.307213][T10371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10371 comm=syz.0.1288 [ 113.319533][T10371] netlink: 'syz.0.1288': attribute type 1 has an invalid length. [ 113.492469][T10377] netlink: 'syz.4.1290': attribute type 1 has an invalid length. [ 113.588354][T10389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=10389 comm=syz.1.1295 [ 113.653315][T10401] ipvlan2: entered promiscuous mode [ 113.655151][T10401] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 113.678637][T10405] netlink: 'syz.4.1301': attribute type 1 has an invalid length. [ 113.723439][T10417] tipc: Trying to set illegal importance in message [ 113.798248][T10425] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 113.805314][ T5952] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260 [ 113.823441][ T40] audit: type=1400 audit(113.692:700): avc: denied { read } for pid=10420 comm="syz.5.1307" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 113.832464][ T40] audit: type=1400 audit(113.692:701): avc: denied { open } for pid=10420 comm="syz.5.1307" path="/190/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 113.904805][ T40] audit: type=1400 audit(113.782:702): avc: denied { create } for pid=10432 comm="syz.4.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 113.919072][ T40] audit: type=1400 audit(113.792:703): avc: denied { getopt } for pid=10432 comm="syz.4.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 113.973356][ T40] audit: type=1400 audit(113.852:704): avc: denied { mounton } for pid=10436 comm="syz.4.1312" path="/34/file0" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 113.973597][T10437] Invalid source name [ 113.981751][T10437] UBIFS error (pid: 10437): cannot open "./file0", error -22 [ 114.056892][T10444] netlink: 'syz.4.1314': attribute type 1 has an invalid length. [ 114.099772][T10447] netlink: 'syz.4.1315': attribute type 2 has an invalid length. [ 114.177659][T10451] raw_sendmsg: syz.4.1317 forgot to set AF_INET. Fix it! [ 114.339758][T10456] __nla_validate_parse: 5 callbacks suppressed [ 114.339769][T10456] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1319'. [ 114.584197][T10465] binder: 10464:10465 ioctl c0306201 200000000640 returned -22 [ 114.587180][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1323'. [ 114.679824][T10478] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1326'. [ 114.694427][T10485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57113 sclass=netlink_route_socket pid=10485 comm=syz.1.1327 [ 114.738456][ T5952] Bluetooth: Wrong link type (-71) [ 114.745470][T10499] binder: Bad value for 'max' [ 114.758212][T10496] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1331'. [ 114.805104][T10508] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1329'. [ 114.825048][T10510] netlink: 'syz.1.1334': attribute type 11 has an invalid length. [ 114.827657][T10510] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1334'. [ 114.858468][T10514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1336'. [ 114.876035][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1336'. [ 114.883710][T10514] veth4: entered allmulticast mode [ 114.893571][T10514] veth5: entered promiscuous mode [ 114.901772][ T40] audit: type=1400 audit(114.772:705): avc: denied { ioctl } for pid=10513 comm="syz.1.1336" path="socket:[33562]" dev="sockfs" ino=33562 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 114.902313][T10514] veth0: entered promiscuous mode [ 114.912472][T10514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10514 comm=syz.1.1336 [ 114.916750][T10513] veth0: left promiscuous mode [ 114.979107][ T40] audit: type=1400 audit(114.852:706): avc: denied { create } for pid=10521 comm="syz.1.1338" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 114.986574][ T40] audit: type=1400 audit(114.862:707): avc: denied { mounton } for pid=10521 comm="syz.1.1338" path="/475/file0" dev="tmpfs" ino=2536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 114.994771][ T40] audit: type=1400 audit(114.872:708): avc: denied { append } for pid=10521 comm="syz.1.1338" name="file0" dev="tmpfs" ino=2536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.002819][ T40] audit: type=1400 audit(114.872:709): avc: denied { open } for pid=10521 comm="syz.1.1338" path="/475/file0" dev="tmpfs" ino=2536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.104614][T10146] batadv1: left promiscuous mode [ 115.265798][ T5952] Bluetooth: hci4: command tx timeout [ 115.864710][T10549] kvm: kvm [10548]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x11e) = 0x2300200005 [ 115.884496][T10549] kvm: kvm [10548]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x186) = 0x2300200005 [ 115.887632][T10549] kvm: kvm [10548]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x187) = 0x2300200005 [ 115.904670][T10549] kvm_intel: kvm [10548]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x1d9) = 0x2300200005 [ 116.159800][T10573] netlink: 'syz.0.1354': attribute type 15 has an invalid length. [ 116.162352][T10573] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1354'. [ 116.236206][T10577] ata1.00: invalid multi_count 128 ignored [ 116.287453][ T9] usb 9-1: USB disconnect, device number 11 [ 116.289709][T10578] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 116.912835][T10588] tipc: Started in network mode [ 116.914400][T10588] tipc: Node identity ac14142f, cluster identity 4711 [ 116.916643][T10588] tipc: New replicast peer: 0.0.0.0 [ 116.919475][T10588] tipc: Enabled bearer , priority 10 [ 116.959975][T10595] netlink: 'syz.1.1358': attribute type 15 has an invalid length. [ 116.977736][T10590] fuse: Bad value for 'rootmode' [ 117.106781][T10609] netlink: 'syz.0.1366': attribute type 1 has an invalid length. [ 117.573837][T10620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1369'. [ 117.605637][T10622] openvswitch: netlink: IP tunnel dst address not specified [ 117.914910][T10656] afs: Unknown parameter 'appraise_type' [ 118.032869][ T34] tipc: Node number set to 2886997039 [ 118.242935][ T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 118.394720][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.398914][ T9] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 118.402673][ T9] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.406474][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.419754][ T9] usb 9-1: config 0 descriptor?? [ 118.945852][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 118.945868][ T40] audit: type=1326 audit(118.822:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10709 comm="syz.5.1397" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72d178e9a9 code=0x0 [ 119.004742][T10711] netlink: 'syz.4.1386': attribute type 1 has an invalid length. [ 119.007287][T10711] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.009751][T10711] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.012059][T10711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.176524][ T40] audit: type=1400 audit(119.052:720): avc: denied { write } for pid=10716 comm="syz.0.1399" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 119.342881][T10723] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 119.345837][T10723] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 119.545211][T10738] __nla_validate_parse: 2 callbacks suppressed [ 119.545228][T10738] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1406'. [ 119.780049][T10749] ufs: You didn't specify the type of your ufs filesystem [ 119.780049][T10749] [ 119.780049][T10749] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 119.780049][T10749] [ 119.780049][T10749] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 119.789802][T10749] ufs: ufstype=old is supported read-only [ 119.792370][T10749] ufs: ufs_fill_super(): bad magic number [ 119.802355][T10749] netlink: zone id is out of range [ 119.805866][T10749] netlink: zone id is out of range [ 119.807979][T10749] netlink: zone id is out of range [ 119.809699][T10749] netlink: zone id is out of range [ 119.829000][T10749] netlink: set zone limit has 4 unknown bytes [ 119.839476][T10751] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 119.968978][T10756] syzkaller0: entered allmulticast mode [ 120.000352][ T40] audit: type=1400 audit(119.872:721): avc: denied { ioctl } for pid=10758 comm="syz.5.1414" path="socket:[35275]" dev="sockfs" ino=35275 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 120.025452][ T40] audit: type=1400 audit(119.902:722): avc: denied { write } for pid=10755 comm="syz.0.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 120.031195][T10757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.031219][T10762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.031437][T10762] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1413'. [ 120.320224][T10772] binder: 10770:10772 ioctl c0306201 200000000080 returned -14 [ 120.351612][T10777] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1419'. [ 120.386330][T10783] 9pnet_fd: Insufficient options for proto=fd [ 120.392302][T10784] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1422'. [ 120.419297][T10789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10789 comm=syz.0.1425 [ 120.443663][T10794] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1426'. [ 120.537017][ T40] audit: type=1326 audit(120.412:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.0.1432" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ef1b8e9a9 code=0x0 [ 120.776231][T10832] overlayfs: failed to clone upperpath [ 120.801032][T10837] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1443'. [ 120.816729][T10834] NILFS (nullb0): couldn't find nilfs on the device [ 120.959806][ T40] audit: type=1400 audit(120.832:724): avc: denied { watch } for pid=10855 comm="syz.5.1450" path="pipe:[36207]" dev="pipefs" ino=36207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 120.961709][T10856] bridge0: port 2(syz_tun) entered blocking state [ 120.968271][ T40] audit: type=1400 audit(120.832:725): avc: denied { relabelfrom } for pid=10855 comm="syz.5.1450" name="" dev="pipefs" ino=36208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 120.970110][T10856] bridge0: port 2(syz_tun) entered disabled state [ 120.979137][T10856] syz_tun: entered allmulticast mode [ 120.981718][T10856] syz_tun: entered promiscuous mode [ 120.984816][T10857] netlink: 'syz.1.1447': attribute type 21 has an invalid length. [ 120.985169][T10856] bridge0: port 2(syz_tun) entered blocking state [ 120.989849][T10856] bridge0: port 2(syz_tun) entered forwarding state [ 121.015974][ T9] usb 9-1: USB disconnect, device number 12 [ 121.053582][T10863] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1453'. [ 121.066278][T10865] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 121.070582][T10865] Error validating options; rc = [-22] [ 121.096744][T10870] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 121.121383][T10863] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10863 comm=syz.5.1453 [ 121.216675][T10889] No control pipe specified [ 121.284301][T10891] overlayfs: failed to get inode (-116) [ 121.288061][T10891] overlayfs: failed to get inode (-116) [ 121.293413][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1461'. [ 121.296213][T10891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1461'. [ 121.298984][T10891] netlink: 'syz.4.1461': attribute type 7 has an invalid length. [ 121.465328][T10906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1467'. [ 122.068381][T10930] syz.5.1473: attempt to access beyond end of device [ 122.068381][T10930] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 122.073543][T10930] syz.5.1473: attempt to access beyond end of device [ 122.073543][T10930] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 122.080901][T10930] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 122.091147][T10930] syz.5.1473: attempt to access beyond end of device [ 122.091147][T10930] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 122.097499][T10930] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 122.102413][T10930] syz.5.1473: attempt to access beyond end of device [ 122.102413][T10930] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 122.111985][T10930] syz.5.1473: attempt to access beyond end of device [ 122.111985][T10930] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 122.118453][T10930] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 122.122457][T10930] syz.5.1473: attempt to access beyond end of device [ 122.122457][T10930] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 122.130535][T10930] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 122.135249][T10930] syz.5.1473: attempt to access beyond end of device [ 122.135249][T10930] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 122.140484][T10930] syz.5.1473: attempt to access beyond end of device [ 122.140484][T10930] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 122.148876][T10930] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 122.156683][T10930] syz.5.1473: attempt to access beyond end of device [ 122.156683][T10930] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 122.162144][T10930] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 122.167719][T10930] syz.5.1473: attempt to access beyond end of device [ 122.167719][T10930] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 122.178039][T10930] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 122.182156][T10930] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 122.186235][T10930] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 122.304743][ T40] audit: type=1400 audit(122.182:726): avc: denied { create } for pid=10938 comm="syz.5.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 122.350314][T10944] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 122.353049][T10944] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 122.360656][T10944] vhci_hcd vhci_hcd.0: Device attached [ 122.368056][T10945] vhci_hcd: connection closed [ 122.368441][T10149] vhci_hcd: stop threads [ 122.371417][T10149] vhci_hcd: release socket [ 122.377263][T10149] vhci_hcd: disconnect device [ 122.714431][T10972] CIFS: Unable to determine destination address [ 122.718575][T10972] openvswitch: netlink: nsh attr 0 has unexpected len 4 expected 0 [ 122.721020][T10972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.753695][T10974] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10974 comm=syz.1.1489 [ 123.016765][T11009] 9pnet_fd: Insufficient options for proto=fd [ 123.248799][T11024] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 123.251148][T11024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.363493][T11034] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 123.365961][T11034] PKCS7: Only support pkcs7_signedData type [ 123.441819][T11044] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 123.455421][T11046] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 123.500834][T11051] netlink: 'syz.5.1516': attribute type 1 has an invalid length. [ 123.504532][T11051] netlink: 'syz.5.1516': attribute type 1 has an invalid length. [ 123.605092][T11057] ALSA: mixer_oss: invalid OSS volume '' [ 123.687148][ T40] audit: type=1400 audit(123.562:727): avc: denied { accept } for pid=11064 comm="syz.0.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.726744][T11070] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.729090][T11070] IPv6: NLM_F_CREATE should be set when creating new route [ 123.831021][ T40] audit: type=1400 audit(123.702:728): avc: denied { read } for pid=11073 comm="syz.5.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.033723][T11083] Unsupported ieee802154 address type: 0 [ 124.131354][ T40] audit: type=1400 audit(124.002:729): avc: denied { setopt } for pid=11084 comm="syz.5.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.173360][ T54] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 124.235284][ T40] audit: type=1400 audit(124.112:730): avc: denied { listen } for pid=11086 comm="syz.5.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.238391][ T5952] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 124.245787][ T5952] CPU: 3 UID: 0 PID: 5952 Comm: kworker/u33:2 Not tainted 6.16.0-rc6-syzkaller-00237-gc7de79e662b8 #0 PREEMPT(full) [ 124.245812][ T5952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 124.245825][ T5952] Workqueue: hci3 hci_rx_work [ 124.245863][ T5952] Call Trace: [ 124.245868][ T5952] [ 124.245875][ T5952] dump_stack_lvl+0x16c/0x1f0 [ 124.245905][ T5952] sysfs_warn_dup+0x7f/0xa0 [ 124.245939][ T5952] sysfs_create_dir_ns+0x24b/0x2b0 [ 124.245956][ T5952] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 124.245971][ T5952] ? find_held_lock+0x2b/0x80 [ 124.246012][ T5952] ? do_raw_spin_unlock+0x172/0x230 [ 124.246033][ T5952] kobject_add_internal+0x2c4/0x9b0 [ 124.246057][ T5952] kobject_add+0x16e/0x240 [ 124.246075][ T5952] ? __pfx_kobject_add+0x10/0x10 [ 124.246094][ T5952] ? do_raw_spin_unlock+0x172/0x230 [ 124.246112][ T5952] ? kobject_put+0xab/0x5a0 [ 124.246136][ T5952] device_add+0x288/0x1a70 [ 124.246158][ T5952] ? __pfx_dev_set_name+0x10/0x10 [ 124.246182][ T5952] ? __pfx_device_add+0x10/0x10 [ 124.246202][ T5952] ? mgmt_send_event_skb+0x2fb/0x460 [ 124.246237][ T5952] hci_conn_add_sysfs+0x17e/0x230 [ 124.246302][ T5952] le_conn_complete_evt+0x1075/0x1d70 [ 124.246440][ T5952] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 124.246543][ T5952] ? hci_event_packet+0x459/0x11c0 [ 124.246627][ T5952] hci_le_conn_complete_evt+0x23c/0x370 [ 124.246665][ T5952] hci_le_meta_evt+0x354/0x5e0 [ 124.246685][ T5952] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 124.246716][ T5952] hci_event_packet+0x685/0x11c0 [ 124.246751][ T5952] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 124.246771][ T5952] ? __pfx_hci_event_packet+0x10/0x10 [ 124.246801][ T5952] ? kcov_remote_start+0x3c9/0x6d0 [ 124.246821][ T5952] ? lockdep_hardirqs_on+0x7c/0x110 [ 124.246856][ T5952] hci_rx_work+0x2c5/0x16b0 [ 124.246875][ T5952] ? rcu_is_watching+0x12/0xc0 [ 124.246901][ T5952] process_one_work+0x9cf/0x1b70 [ 124.246931][ T5952] ? __pfx_process_one_work+0x10/0x10 [ 124.246958][ T5952] ? assign_work+0x1a0/0x250 [ 124.246978][ T5952] worker_thread+0x6c8/0xf10 [ 124.247009][ T5952] ? __pfx_worker_thread+0x10/0x10 [ 124.247029][ T5952] kthread+0x3c5/0x780 [ 124.247048][ T5952] ? __pfx_kthread+0x10/0x10 [ 124.247067][ T5952] ? rcu_is_watching+0x12/0xc0 [ 124.247088][ T5952] ? __pfx_kthread+0x10/0x10 [ 124.247104][ T5952] ret_from_fork+0x5d4/0x6f0 [ 124.247125][ T5952] ? __pfx_kthread+0x10/0x10 [ 124.247138][ T5952] ret_from_fork_asm+0x1a/0x30 [ 124.247163][ T5952] [ 124.247212][ T5952] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 124.285722][T11089] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 124.286432][ T5952] Bluetooth: hci3: failed to register connection device [ 124.326879][ T54] usb 5-1: config 0 has no interfaces? [ 124.338631][ T54] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.342081][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.345160][ T54] usb 5-1: Product: syz [ 124.346626][ T54] usb 5-1: Manufacturer: syz [ 124.348103][ T54] usb 5-1: SerialNumber: syz [ 124.351105][ T54] usb 5-1: config 0 descriptor?? [ 124.364854][T11087] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.366777][T11087] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.368659][T11087] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.370495][T11087] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.377298][T11087] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.382258][T11087] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.386365][T11087] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 124.388266][T11087] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 124.390819][T11087] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 124.395442][T11099] IPVS: Error joining to the multicast group [ 124.462684][T11102] uprobe: syz.5.1533:11102 failed to unregister, leaking uprobe [ 124.631404][T11113] netlink: 'syz.1.1534': attribute type 29 has an invalid length. [ 124.638640][ T40] audit: type=1400 audit(124.502:731): avc: denied { create } for pid=11112 comm="syz.1.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 124.649339][ T40] audit: type=1400 audit(124.512:732): avc: denied { getopt } for pid=11112 comm="syz.1.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.663083][T11118] cgroup: noprefix used incorrectly [ 126.382847][ T5958] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.382944][ T5961] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.384380][ T5952] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.462933][ T5961] Bluetooth: hci4: command 0x0c1a tx timeout [ 126.726862][T11071] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.757023][ T34] usb 5-1: USB disconnect, device number 11 [ 126.779921][T11147] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 126.814975][ T40] audit: type=1400 audit(126.692:733): avc: denied { getopt } for pid=11151 comm="syz.5.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 126.866349][ T7137] bridge0: port 2(syz_tun) entered disabled state [ 126.876192][ T7137] syz_tun (unregistering): left allmulticast mode [ 126.878242][ T7137] syz_tun (unregistering): left promiscuous mode [ 126.880245][ T7137] bridge0: port 2(syz_tun) entered disabled state [ 126.925520][T11159] __nla_validate_parse: 6 callbacks suppressed [ 126.925531][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1548'. [ 126.930256][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1548'. [ 127.280829][ T5958] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 127.285464][ T5958] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 127.288691][ T5958] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.292614][ T5958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 127.298033][ T5958] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 127.321847][T11164] vxcan1 speed is unknown, defaulting to 1000 [ 127.470976][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'. [ 127.500500][T11164] chnl_net:caif_netlink_parms(): no params data found [ 127.503200][T11184] afs: Unknown parameter 'dynX>aY{Ntnhƾ{/iRB:u1⭌>U !UbjQ&yZTi' [ 127.506950][T11184] overlayfs: failed to clone lowerpath [ 127.535228][T11188] tmpfs: Group quota inode hardlimit too large. [ 127.562968][T11164] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.565225][T11164] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.567553][T11164] bridge_slave_0: entered allmulticast mode [ 127.570132][T11164] bridge_slave_0: entered promiscuous mode [ 127.573305][T11164] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.575741][T11164] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.577971][T11164] bridge_slave_1: entered allmulticast mode [ 127.580537][T11164] bridge_slave_1: entered promiscuous mode [ 127.616091][T11164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.621482][T11164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.639263][T11195] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.642120][ T40] audit: type=1400 audit(127.512:734): avc: denied { bind } for pid=11194 comm="syz.0.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 127.648242][ T40] audit: type=1400 audit(127.512:735): avc: denied { write } for pid=11194 comm="syz.0.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 127.660370][T11164] team0: Port device team_slave_0 added [ 127.664550][T11164] team0: Port device team_slave_1 added [ 127.696253][T11164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.698942][T11164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.709342][T11164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.714513][T11164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.717190][T11164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.727796][T11164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.766300][T11164] hsr_slave_0: entered promiscuous mode [ 127.768477][T11164] hsr_slave_1: entered promiscuous mode [ 127.770488][T11164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.773465][T11164] Cannot create hsr debugfs directory [ 127.911900][T11216] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1565'. [ 127.925456][T11215] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 127.938669][T11164] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 127.944486][T11164] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 127.948805][T11164] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 127.952189][T11221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1566'. [ 127.952877][T11164] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 127.998113][T11164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.008904][T11164] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.015771][T10159] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.018051][T10159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.025030][T10159] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.027338][T10159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.056820][T11164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.156610][T11164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.291611][T11256] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1575'. [ 128.312433][T11164] veth0_vlan: entered promiscuous mode [ 128.322041][T11164] veth1_vlan: entered promiscuous mode [ 128.342373][T11164] veth0_macvtap: entered promiscuous mode [ 128.347655][T11164] veth1_macvtap: entered promiscuous mode [ 128.357827][T11164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.365187][T11164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.369755][ T5958] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 128.371596][T11164] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.377937][T11164] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.383803][T11164] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.386559][T11164] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.456908][ T8076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.459365][ T8076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.485225][T10159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.487658][T10159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.543343][ T5958] Bluetooth: hci4: command 0x0c1a tx timeout [ 128.632175][ T40] audit: type=1400 audit(128.502:736): avc: denied { map } for pid=11280 comm="syz.6.1585" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.640514][ T40] audit: type=1400 audit(128.502:737): avc: denied { execute } for pid=11280 comm="syz.6.1585" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.650883][T11284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1586'. [ 128.673028][ T54] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 128.703846][T11291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.738753][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1588'. [ 128.775912][ T40] audit: type=1804 audit(128.652:738): pid=11305 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1591" name="file0" dev="tmpfs" ino=3034 res=1 errno=0 [ 128.823956][ T54] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 128.827433][ T54] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 128.830645][ T54] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 128.834152][ T54] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.838298][T11272] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 128.845805][ T54] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 128.955951][T11309] vxcan1 speed is unknown, defaulting to 1000 [ 128.972862][ T6033] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 129.046890][ T7167] usb 9-1: USB disconnect, device number 13 [ 129.146366][ T6033] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 129.149486][ T6033] usb 11-1: config 0 interface 0 has no altsetting 0 [ 129.153497][ T6033] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 129.156425][ T6033] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 129.158966][ T6033] usb 11-1: Product: syz [ 129.160307][ T6033] usb 11-1: Manufacturer: syz [ 129.161796][ T6033] usb 11-1: SerialNumber: syz [ 129.167339][ T6033] usb 11-1: config 0 descriptor?? [ 129.171856][ T6033] usb 11-1: selecting invalid altsetting 0 [ 129.234352][T11324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1598'. [ 129.305983][T11272] kvm: pic: non byte write [ 129.343474][ T5958] Bluetooth: hci3: command tx timeout [ 129.387135][ T53] usb 11-1: USB disconnect, device number 2 [ 129.661668][ T40] audit: type=1400 audit(129.532:739): avc: denied { map } for pid=11334 comm="syz.0.1602" path="socket:[38987]" dev="sockfs" ino=38987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 129.681619][T11335] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 129.971166][T11342] could not allocate digest TFM handle cryptd(blake2b-160) [ 130.238852][T11347] overlayfs: missing 'workdir' [ 130.273071][T11350] xt_ecn: cannot match TCP bits for non-tcp packets [ 130.300759][T11352] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1607'. [ 130.342195][T11354] RDS: rds_bind could not find a transport for ::ffff:172.20.20.35, load rds_tcp or rds_rdma? [ 130.633217][ T5958] Bluetooth: hci4: command 0x0c1a tx timeout [ 130.672116][T11377] can: request_module (can-proto-0) failed. [ 130.867011][ T40] audit: type=1800 audit(130.742:740): pid=11395 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1622" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 130.918626][T11402] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 130.920456][T11402] PKCS7: Only support pkcs7_signedData type [ 131.302244][T11441] netlink: 'syz.6.1638': attribute type 7 has an invalid length. [ 131.305330][T11441] netlink: 'syz.6.1638': attribute type 8 has an invalid length. [ 131.349577][ T5359] pmem0: [POWERTEC] [ 131.423796][ T5958] Bluetooth: hci3: command tx timeout [ 131.473644][T11458] netlink: 'syz.6.1644': attribute type 1 has an invalid length. [ 131.705980][T11480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.708324][T11480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.711121][T11480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.717953][T11480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.772033][T11483] netlink: 'syz.4.1651': attribute type 1 has an invalid length. [ 131.879097][T11499] loop2: detected capacity change from 0 to 7 [ 131.898351][ T5956] Dev loop2: unable to read RDB block 7 [ 131.900634][ T5956] loop2: unable to read partition table [ 131.904528][ T5956] loop2: partition table beyond EOD, truncated [ 131.919858][T11499] Dev loop2: unable to read RDB block 7 [ 131.922244][T11499] loop2: unable to read partition table [ 131.925107][T11499] loop2: partition table beyond EOD, truncated [ 131.927654][T11499] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 132.333594][T11526] netlink: 'syz.0.1665': attribute type 1 has an invalid length. [ 132.347628][T11526] 8021q: adding VLAN 0 to HW filter on device bond11 [ 132.352462][T11526] __nla_validate_parse: 9 callbacks suppressed [ 132.352476][T11526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1665'. [ 132.365208][T11526] gretap1: entered promiscuous mode [ 132.370806][T11526] bond11: (slave gretap1): making interface the new active one [ 132.375761][T11526] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 132.385010][T11526] bond11: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 132.473920][T11529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1666'. [ 132.545972][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.548569][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.599328][T11548] binder: 11547:11548 ioctl c0306201 200000000640 returned -22 [ 132.605066][T11548] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.897777][ T5961] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 132.905049][ T5961] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 132.907985][ T5961] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 132.911828][ T5961] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 132.914531][ T5961] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 132.936775][T11562] vxcan1 speed is unknown, defaulting to 1000 [ 132.973145][T11565] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1678'. [ 133.134412][T11562] chnl_net:caif_netlink_parms(): no params data found [ 133.222278][T11562] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.224908][T11562] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.227206][T11562] bridge_slave_0: entered allmulticast mode [ 133.229854][T11562] bridge_slave_0: entered promiscuous mode [ 133.234437][T11562] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.236737][T11562] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.238935][T11562] bridge_slave_1: entered allmulticast mode [ 133.241515][T11562] bridge_slave_1: entered promiscuous mode [ 133.272144][T11562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.279917][T11562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.316522][T11562] team0: Port device team_slave_0 added [ 133.320150][T11562] team0: Port device team_slave_1 added [ 133.350470][T11562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.354120][T11562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.362063][T11562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.366542][T11562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.368618][T11562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.376863][T11562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.413453][T11562] hsr_slave_0: entered promiscuous mode [ 133.415668][T11562] hsr_slave_1: entered promiscuous mode [ 133.417671][T11562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.419986][T11562] Cannot create hsr debugfs directory [ 133.502884][ T5961] Bluetooth: hci3: command tx timeout [ 133.526036][T11562] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.529195][T11562] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.598214][T11587] SELinux: syz.0.1682 (11587) set checkreqprot to 1. This is no longer supported. [ 133.598248][ T40] audit: type=1400 audit(133.475:741): avc: denied { setcheckreqprot } for pid=11586 comm="syz.0.1682" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 133.644442][T11562] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.647251][T11562] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.738627][T11562] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.741486][T11562] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.807689][T11562] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.810512][T11562] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.967339][T11562] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 133.975275][T11562] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 133.986149][T11562] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 133.990007][T11602] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1686'. [ 133.992001][T11562] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 134.024547][T11562] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.027781][T11562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.030928][T11562] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.033475][T11562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.065769][T10144] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.069610][T10144] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.079771][T11611] "syz.6.1687" (11611) uses obsolete ecb(arc4) skcipher [ 134.083865][ T40] audit: type=1400 audit(133.965:742): avc: denied { listen } for pid=11610 comm="syz.6.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 134.089837][ T40] audit: type=1400 audit(133.965:743): avc: denied { accept } for pid=11610 comm="syz.6.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 134.102215][T11562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.113406][T11562] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.117924][ T8076] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.120221][ T8076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.127694][T10146] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.129679][T10146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.239549][T11562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.265700][T11562] veth0_vlan: entered promiscuous mode [ 134.270484][T11562] veth1_vlan: entered promiscuous mode [ 134.285369][T11562] veth0_macvtap: entered promiscuous mode [ 134.289817][T11562] veth1_macvtap: entered promiscuous mode [ 134.298081][T11562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.305149][T11562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.309474][T11562] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.312183][T11562] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.316804][T11562] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.319506][T11562] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.357547][T10159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.359986][T10159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.375685][T10146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.378431][T10146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.410671][ T40] audit: type=1400 audit(134.285:744): avc: denied { ioctl } for pid=11619 comm="syz.1.1677" path="socket:[40431]" dev="sockfs" ino=40431 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 134.413566][T11620] gfs2: gfs2 mount does not exist [ 134.652716][ T5819] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 134.813009][ T5819] usb 6-1: Using ep0 maxpacket: 8 [ 134.817167][ T5819] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 134.820121][ T5819] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 134.826403][ T5819] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.829158][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.831590][ T5819] usb 6-1: Product: ࿧꣔殟쁱謁淖뙻䩫ꎠ︝ζ㛿ཱུ瑑쁮勑ｄ㧝鞥㤄጖봎䨥ᄙ꠴ұ훗欧㫔㢮葚䕪๋ꮱ騲爠ᦍ낷崺哯툽깠釒꼺ᨻ䜻⟦ό⣤侳槳戒䟶ῥ﷤췇겯ᐠ㛃ꢞ啉򝿌枼⌣Ằ䵘ꡭ㉴娶鬻﬛⪿窡㜳釈뙦뙄漓꟏估쿆瀾ꐚ䌠ᇪ편䦞寖牕䉙쨈爵嫺䬌 [ 134.841239][ T5819] usb 6-1: Manufacturer: Ь [ 134.842981][ T5819] usb 6-1: SerialNumber: 羘Ζ씕ᤡ➚줔ꂻ츀龾怽耘칝꧌得ᆴ렾凢闢塎퇽밲곤㙘똅櫖ཆਾࡸꢔ㨨꼌꨻콴蹗㜿鮽곺劭츩ꧽ綌냹섹傍⛸犟㌍跠ﺍ겄ꑨȫ澒䳛陉匾鋭ጮ锛㘌귔ⅸ쐹㢚ሣ⎵졻ȥ੣䜧㨸羘긱暭⚀폹꧃ኧ잧䃂綡렇藀뺭铐謧ࡾṣ㍥䟌㊢쵤䥖녊苷 [ 135.059141][ T5819] cdc_ncm 6-1:1.0: bind() failure [ 135.063978][ T5819] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 135.066188][ T5819] cdc_ncm 6-1:1.1: bind() failure [ 135.070208][ T5819] usb 6-1: USB disconnect, device number 3 [ 135.582895][ T5961] Bluetooth: hci3: command tx timeout [ 135.636333][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1690'. [ 135.812626][ T40] audit: type=1326 audit(391.688:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11634 comm="syz.1.1692" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74b3d8e9a9 code=0x0 [ 135.902321][T11647] overlayfs: failed to resolve './file2': -2 [ 135.918229][ T40] audit: type=1800 audit(391.798:746): pid=11647 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1694" name="bus" dev="overlay" ino=54 res=0 errno=0 [ 135.955401][ T40] audit: type=1400 audit(391.838:747): avc: denied { create } for pid=11649 comm="syz.6.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 135.957471][T11650] netlink: 'syz.6.1695': attribute type 11 has an invalid length. [ 135.961769][ T40] audit: type=1400 audit(391.838:748): avc: denied { ioctl } for pid=11649 comm="syz.6.1695" path="socket:[40497]" dev="sockfs" ino=40497 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 136.458631][T11672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11672 comm=syz.1.1702 [ 136.529456][T11678] random: crng reseeded on system resumption [ 136.608383][T11687] wg2: entered promiscuous mode [ 136.611562][T11687] wg2: entered allmulticast mode [ 136.821819][T11712] x_tables: duplicate underflow at hook 1 [ 137.088823][T11730] 9p: Unknown uid 00000000004294967295 [ 137.141506][T11735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11735 comm=syz.1.1723 [ 137.217283][ T40] audit: type=1400 audit(393.151:749): avc: denied { write } for pid=11740 comm="syz.6.1725" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 137.233430][T11743] tipc: Started in network mode [ 137.235015][T11743] tipc: Node identity 62f8cefa6eb, cluster identity 4711 [ 137.237214][T11743] tipc: Enabled bearer , priority 0 [ 137.239608][T11743] syzkaller0: entered promiscuous mode [ 137.241626][T11743] syzkaller0: entered allmulticast mode [ 137.502617][T11748] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1727'. [ 137.506832][T11748] unsupported nlmsg_type 40 [ 137.515343][T11748] pimreg: entered allmulticast mode [ 137.556236][T11750] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 137.558390][T11750] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 137.562010][T11750] vhci_hcd vhci_hcd.0: Device attached [ 137.802761][ T24] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 137.941688][ T40] audit: type=1400 audit(393.871:750): avc: denied { unmount } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 138.012751][T11737] tipc: Resetting bearer [ 138.025183][T11737] tipc: Disabling bearer [ 138.047752][T11758] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1731'. [ 138.052183][T11760] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1731'. [ 138.106424][T11751] vhci_hcd: connection reset by peer [ 138.111150][ T8076] vhci_hcd: stop threads [ 138.122685][ T8076] vhci_hcd: release socket [ 138.124434][ T8076] vhci_hcd: disconnect device [ 138.185949][ T40] audit: type=1400 audit(394.121:751): avc: denied { ioctl } for pid=11765 comm="syz.6.1734" path="socket:[39657]" dev="sockfs" ino=39657 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 138.349008][ T40] audit: type=1400 audit(394.281:752): avc: denied { ioctl } for pid=11773 comm="syz.1.1736" path="socket:[39664]" dev="sockfs" ino=39664 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.465430][ T5961] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 138.468396][ T5961] Bluetooth: hci5: Injecting HCI hardware error event [ 138.471903][ T5961] Bluetooth: hci5: hardware error 0x00 [ 138.574816][T11792] random: crng reseeded on system resumption [ 138.761964][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1747'. [ 138.765013][T11805] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 138.767758][T11805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.061607][T11815] syzkaller1: entered promiscuous mode [ 139.064735][T11815] syzkaller1: entered allmulticast mode [ 139.168751][T11818] netlink: 'syz.6.1752': attribute type 10 has an invalid length. [ 139.183637][T11818] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 139.209623][ T40] audit: type=1400 audit(395.141:753): avc: denied { getopt } for pid=11819 comm="syz.0.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 139.650450][T11823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1754'. [ 139.742097][T11826] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 139.751211][T11826] overlayfs: missing 'lowerdir' [ 140.042324][T11820] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.045362][T11820] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 140.047322][T11820] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.049196][T11820] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 140.054897][T11820] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 140.156506][T11845] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 140.161515][T11845] loop6: detected capacity change from 0 to 524287999 [ 140.168842][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1759'. [ 140.443658][T11857] pim6reg: entered allmulticast mode [ 140.489623][T11861] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11861 comm=syz.1.1764 [ 140.543187][ T5961] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 140.588693][T11865] misc userio: No port type given on /dev/userio [ 141.146115][T11893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1773'. [ 141.169584][T11893] netlink: zone id is out of range [ 141.171365][T11893] netlink: zone id is out of range [ 141.173448][T11893] netlink: zone id is out of range [ 141.175063][T11893] netlink: zone id is out of range [ 141.176982][T11893] netlink: zone id is out of range [ 141.178577][T11893] netlink: zone id is out of range [ 141.180224][T11893] netlink: zone id is out of range [ 141.181858][T11893] netlink: zone id is out of range [ 141.226718][ T40] audit: type=1400 audit(397.161:754): avc: denied { getopt } for pid=11898 comm="syz.1.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 141.326020][T11916] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1781'. [ 141.343509][ T5961] Bluetooth: hci1: command 0x0c1a tx timeout [ 141.472946][T11923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1784'. [ 141.476433][T11923] ptrace attach of "/syz-executor exec"[11924] was attempted by "/syz-executor exec"[11923] [ 141.598329][T11938] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 141.623677][T11941] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 141.801202][T11961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1796'. [ 142.072979][ T5961] Bluetooth: hci3: command 0x0c1a tx timeout [ 142.074929][ T5961] Bluetooth: hci4: command 0x0c1a tx timeout [ 142.125817][ T40] audit: type=1400 audit(398.061:755): avc: denied { read } for pid=11975 comm="syz.6.1801" path="socket:[40832]" dev="sockfs" ino=40832 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 142.196154][T11981] binder: 11980:11981 unknown command 0 [ 142.198507][T11981] binder: 11980:11981 ioctl c0306201 200000000080 returned -22 [ 142.942817][ T24] vhci_hcd: vhci_device speed not set [ 143.128183][ T40] audit: type=1400 audit(399.061:756): avc: denied { create } for pid=11992 comm="syz.6.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 143.140740][ T40] audit: type=1400 audit(399.071:757): avc: denied { write } for pid=11992 comm="syz.6.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 143.736458][T12019] __nla_validate_parse: 4 callbacks suppressed [ 143.736468][T12019] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1816'. [ 143.761526][T12019] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1816'. [ 143.802254][T12021] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 144.060329][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1821'. [ 144.132844][ T40] audit: type=1400 audit(400.061:758): avc: denied { connect } for pid=12034 comm="syz.6.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 144.143025][ T5958] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.313489][T12049] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1826'. [ 144.316518][T12049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 144.318790][T12049] IPv6: NLM_F_CREATE should be set when creating new route [ 144.510353][T12069] bio_check_eod: 2 callbacks suppressed [ 144.510365][T12069] syz.6.1832: attempt to access beyond end of device [ 144.510365][T12069] nbd6: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 144.517022][T12069] SQUASHFS error: Failed to read block 0x0: -5 [ 144.519027][T12069] unable to read squashfs_super_block [ 144.567964][T12074] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1835'. [ 144.585268][T12076] vxcan1 speed is unknown, defaulting to 1000 [ 144.778440][ T40] audit: type=1400 audit(400.701:759): avc: denied { ioctl } for pid=12082 comm="syz.1.1837" path="socket:[45127]" dev="sockfs" ino=45127 ioctlcmd=0x940d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 144.805147][T12087] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 144.976917][T12094] ata1.00: invalid multi_count 128 ignored [ 145.127765][T12098] IPv6: NLM_F_CREATE should be specified when creating new route [ 145.390027][T12107] netlink: 596 bytes leftover after parsing attributes in process `syz.6.1846'. [ 145.394635][ T40] audit: type=1400 audit(401.331:760): avc: denied { bind } for pid=12106 comm="syz.6.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.429197][T12113] netlink: 'syz.6.1847': attribute type 10 has an invalid length. [ 145.442535][T12113] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 145.652829][ T40] audit: type=1400 audit(401.581:761): avc: denied { setopt } for pid=12117 comm="syz.1.1850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 146.016651][T12147] netlink: 'syz.0.1859': attribute type 1 has an invalid length. [ 146.078611][ T40] audit: type=1400 audit(402.011:762): avc: denied { setopt } for pid=12156 comm="syz.0.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 146.141161][ T40] audit: type=1400 audit(402.071:763): avc: denied { write } for pid=12162 comm="syz.0.1863" path="socket:[45230]" dev="sockfs" ino=45230 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 146.183549][T12160] vxcan1 speed is unknown, defaulting to 1000 [ 146.232973][ T5961] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.408830][T12176] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 146.411427][T12176] overlayfs: missing 'lowerdir' [ 146.418498][T12177] netlink: 'syz.0.1866': attribute type 5 has an invalid length. [ 146.482511][T12188] xt_hashlimit: size too large, truncated to 1048576 [ 146.814552][ T5961] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.818896][ T5961] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.822120][T12203] sp0: Synchronizing with TNC [ 146.825529][ T5961] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.829354][ T5961] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.832022][ T5961] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.841799][T12206] syzkaller0: entered promiscuous mode [ 146.843759][T12206] syzkaller0: entered allmulticast mode [ 146.853036][T12206] [U] binder binder rw,max=1048576 [ 146.854921][T12206] [U] [ 146.855823][T12206] [U] [ 146.856758][T12206] [U] [ 146.857842][T12206] [U] [ 146.858722][T12206] [U] [ 146.859620][T12206] [U] [ 146.860568][T12206] [U] [ 146.861455][T12206] [U] [ 146.862398][T12206] [U] [ 146.863292][T12206] [U] [ 146.864181][T12206] [U] [ 146.865066][T12206] [U] [ 146.872064][T12206] [U] [ 146.873019][T12206] [U] [ 146.873905][T12206] [U] [ 146.874783][T12206] [U] [ 146.918077][T12204] vxcan1 speed is unknown, defaulting to 1000 [ 147.055112][T12205] [U] [ 147.194465][T12204] chnl_net:caif_netlink_parms(): no params data found [ 147.311396][T12204] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.317565][ T40] audit: type=1400 audit(403.251:764): avc: denied { accept } for pid=12225 comm="syz.1.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 147.320608][T12204] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.328267][T12204] bridge_slave_0: entered allmulticast mode [ 147.332553][T12204] bridge_slave_0: entered promiscuous mode [ 147.341633][T12204] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.345051][T12204] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.347433][T12204] bridge_slave_1: entered allmulticast mode [ 147.350114][T12204] bridge_slave_1: entered promiscuous mode [ 147.382875][T12204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.388810][T12204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.440765][T12204] team0: Port device team_slave_0 added [ 147.445327][T12204] team0: Port device team_slave_1 added [ 147.492263][T12204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.495130][T12204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.504245][T12204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.509009][T12204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.511168][T12204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.519706][T12204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.564027][T12204] hsr_slave_0: entered promiscuous mode [ 147.566457][T12204] hsr_slave_1: entered promiscuous mode [ 147.569105][T12204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.571477][T12204] Cannot create hsr debugfs directory [ 147.598252][ T5819] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 147.733236][T12204] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 147.758837][ T5819] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.767750][ T5819] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 147.770595][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.780517][ T5819] usb 6-1: Product: syz [ 147.782367][ T5819] usb 6-1: Manufacturer: syz [ 147.788772][ T5819] usb 6-1: SerialNumber: syz [ 147.790760][T12204] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 147.801293][T12204] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 147.807885][ T5819] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 147.814383][T12204] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 147.842802][ T40] audit: type=1400 audit(403.771:765): avc: denied { firmware_load } for pid=10 comm="kworker/0:1" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 147.857956][ T10] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 147.864086][ T5958] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.868198][ T5958] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.871232][ T5958] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.874952][ T5958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.879758][ T5958] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.950976][T12204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.957606][T12245] vxcan1 speed is unknown, defaulting to 1000 [ 147.968963][T12204] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.979371][ T8047] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.981725][ T8047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.994115][ T8047] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.997136][ T8047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.079841][ T5819] usb 6-1: USB disconnect, device number 4 [ 148.133215][T12204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.153928][T12245] chnl_net:caif_netlink_parms(): no params data found [ 148.230609][T12245] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.235562][T12245] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.238470][T12245] bridge_slave_0: entered allmulticast mode [ 148.241303][T12245] bridge_slave_0: entered promiscuous mode [ 148.246301][T12245] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.248634][T12245] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.250833][T12245] bridge_slave_1: entered allmulticast mode [ 148.253603][T12245] bridge_slave_1: entered promiscuous mode [ 148.289293][T12245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.293835][T12245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.340814][T12245] team0: Port device team_slave_0 added [ 148.345513][T12245] team0: Port device team_slave_1 added [ 148.405271][T12245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.408307][T12245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.417371][T12245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.422065][T12245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.424356][T12245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.434087][T12245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.517543][ T40] audit: type=1400 audit(404.451:766): avc: denied { create } for pid=12289 comm="syz.0.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 148.519381][T12245] hsr_slave_0: entered promiscuous mode [ 148.526654][T12245] hsr_slave_1: entered promiscuous mode [ 148.529223][T12245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.532384][T12245] Cannot create hsr debugfs directory [ 148.602043][T12204] veth0_vlan: entered promiscuous mode [ 148.606196][ T40] audit: type=1400 audit(404.541:767): avc: denied { read write } for pid=11562 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.617233][ T40] audit: type=1400 audit(404.541:768): avc: denied { open } for pid=11562 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.626871][ T40] audit: type=1400 audit(404.541:769): avc: denied { ioctl } for pid=11562 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.631190][T12204] veth1_vlan: entered promiscuous mode [ 148.643070][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1896'. [ 148.702397][T12204] veth0_macvtap: entered promiscuous mode [ 148.740594][T12204] veth1_macvtap: entered promiscuous mode [ 148.775996][T12204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.780410][T12245] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 148.790030][T12245] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 148.800409][T12245] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 148.814234][T12245] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 148.822181][T12204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.830544][T12204] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.834523][T12204] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.837983][T12204] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.841626][T12204] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.934733][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.938029][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.939506][ T40] audit: type=1400 audit(404.871:770): avc: denied { setopt } for pid=12303 comm="syz.1.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 148.952839][ T5958] Bluetooth: hci2: command tx timeout [ 148.953344][ T10] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 148.957286][ T10] ath9k_htc: Failed to initialize the device [ 148.962228][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.964875][ T5819] usb 6-1: ath9k_htc: USB layer deinitialized [ 148.965595][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.002025][T12245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.018887][T12245] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.028533][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.031430][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.042314][ T7561] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.045310][ T7561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.065768][T12304] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.100487][T12304] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.103707][T12304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.108854][T12304] bridge_slave_1: left allmulticast mode [ 149.111568][T12304] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.130993][T12316] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1902'. [ 149.136311][T12245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.278902][T12245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.325431][ T40] audit: type=1400 audit(405.261:771): avc: denied { accept } for pid=12332 comm="syz.0.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 149.383497][ T40] audit: type=1400 audit(405.321:772): avc: denied { name_bind 0x1000000 } for pid=12332 comm="syz.0.1905" path="socket:[43719]" dev="sockfs" ino=43719 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 149.446905][T12245] veth0_vlan: entered promiscuous mode [ 149.452942][T12245] veth1_vlan: entered promiscuous mode [ 149.471438][T12245] veth0_macvtap: entered promiscuous mode [ 149.478098][T12245] veth1_macvtap: entered promiscuous mode [ 149.486968][T12245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.493039][T12245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.500734][T12245] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.505921][T12245] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.508718][T12245] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.511670][T12245] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.559338][T10140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.561857][T10140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.588683][T10140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.602974][T10140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.604029][ T34] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 149.615365][T12332] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 149.685227][T12345] hfsplus: unable to find HFS+ superblock [ 149.686286][T12348] sctp: [Deprecated]: syz.0.1908 (pid 12348) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.686286][T12348] Use struct sctp_sack_info instead [ 149.774364][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 149.780680][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 149.791121][ T34] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 149.794842][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.804114][ T34] usb 6-1: config 0 descriptor?? [ 149.890132][T12356] overlayfs: empty lowerdir [ 149.913006][ T5958] Bluetooth: hci3: command tx timeout [ 149.990162][ T40] audit: type=1400 audit(405.921:773): avc: denied { setopt } for pid=12357 comm="syz.8.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 150.216626][ T34] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 150.242179][T12369] xt_hashlimit: size too large, truncated to 1048576 [ 150.478750][T12339] Device name not specified. [ 150.478750][T12339] [ 150.487586][ T34] usb 6-1: USB disconnect, device number 5 [ 150.663809][T12380] cgroup: Need name or subsystem set [ 150.843682][T12353] syz.0.1910 (12353) used greatest stack depth: 19880 bytes left [ 151.022793][ T5958] Bluetooth: hci2: command tx timeout [ 151.129448][T12403] netlink: 'syz.1.1923': attribute type 13 has an invalid length. [ 151.132976][T12403] macvtap0: entered promiscuous mode [ 151.136640][T12403] macvtap0: refused to change device tx_queue_len [ 151.207084][T12405] mkiss: ax0: crc mode is auto. [ 151.387113][T12408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1925'. [ 151.387575][T12409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1925'. [ 151.721814][T12424] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.1931'. [ 151.862287][T12430] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1933'. [ 151.866299][T12430] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1933'. [ 151.869472][T12430] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1933'. [ 151.872393][T12430] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1933'. [ 151.965753][T12435] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1934'. [ 151.968800][T12435] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1934'. [ 151.982768][ T5958] Bluetooth: hci3: command tx timeout [ 152.316562][T12443] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 152.319205][T12468] xt_hashlimit: Unknown mode mask 180, kernel too old? [ 152.333010][T12465] netlink: 'syz.8.1945': attribute type 10 has an invalid length. [ 152.340365][T12465] team0: Device ipvlan1 failed to register rx_handler [ 152.352617][T12465] SELinux: Context system_u:object_r:hwclock_exec_t:s0 is not valid (left unmapped). [ 152.357929][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 152.357942][ T40] audit: type=1400 audit(408.291:777): avc: denied { relabelto } for pid=12464 comm="syz.8.1945" name="cgroup.procs" dev="cgroup" ino=584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hwclock_exec_t:s0" [ 152.368641][ T40] audit: type=1400 audit(408.291:778): avc: denied { associate } for pid=12464 comm="syz.8.1945" name="cgroup.procs" dev="cgroup" ino=584 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwclock_exec_t:s0" [ 152.542703][ T40] audit: type=1400 audit(408.471:779): avc: denied { getopt } for pid=12493 comm="syz.0.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 152.572731][ T7161] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 152.767600][ T7161] usb 6-1: config 1 interface 0 has no altsetting 0 [ 152.771357][ T7161] usb 6-1: New USB device found, idVendor=056a, idProduct=010d, bcdDevice= 0.40 [ 152.780054][ T7161] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.782521][ T7161] usb 6-1: Product: syz [ 152.784207][ T7161] usb 6-1: Manufacturer: 瓋錅킜쬓宜褴䬋鱞퍐畃쬲蔔홺纬崌꾵⫱ྶm乾全暪齟ጜ䆢㥒圾쩒맺᚟잱毂˄핸睒ﻳ㛤租ͳ初䠒࡜镹ꏶד撀㢁귂숨岣ᜭ蘻䳰衆⍰⩣쾸ﯮ铢ᗅ냉䃝ࢇ锧㡭뛶瞮蒾鉽쥒鴆뫋떎콣ẇ賐冟䏥䐁 [ 152.792152][ T7161] usb 6-1: SerialNumber: syz [ 152.803408][T12511] 8021q: adding VLAN 0 to HW filter on device bond13 [ 152.829243][T12510] vivid-000: ================= START STATUS ================= [ 152.832067][T12510] vivid-000: Test Pattern: 75% Colorbar [ 152.834257][T12510] vivid-000: Fill Percentage of Frame: 1 [ 152.836153][T12510] vivid-000: Horizontal Movement: No Movement [ 152.842157][T12510] vivid-000: Vertical Movement: No Movement [ 152.845748][T12510] vivid-000: OSD Text Mode: All [ 152.847306][T12510] vivid-000: Show Border: false [ 152.848836][T12510] vivid-000: Show Square: false [ 152.850373][T12510] vivid-000: Sensor Flipped Horizontally: false [ 152.852362][T12510] vivid-000: Sensor Flipped Vertically: false [ 152.854532][T12510] vivid-000: Insert SAV Code in Image: true [ 152.856379][T12510] vivid-000: Insert EAV Code in Image: false [ 152.858236][T12510] vivid-000: Insert Video Guard Band: false [ 152.860069][T12510] vivid-000: Reduced Framerate: false [ 152.861982][T12510] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 152.864685][T12510] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 152.867351][T12510] vivid-000: Enable Capture Cropping: true [ 152.869233][T12510] vivid-000: Enable Capture Composing: true [ 152.871160][T12510] vivid-000: Enable Capture Scaler: true [ 152.873410][T12510] vivid-000: Timestamp Source: End of Frame [ 152.875422][T12510] vivid-000: Colorspace: sRGB [ 152.876985][T12510] vivid-000: Transfer Function: Default [ 152.878795][T12510] vivid-000: Y'CbCr Encoding: Default [ 152.880537][T12510] vivid-000: HSV Encoding: Hue 0-179 [ 152.882317][T12510] vivid-000: Quantization: Default [ 152.882905][ T40] audit: type=1400 audit(408.811:780): avc: denied { append } for pid=12521 comm="syz.7.1964" name="nbd7" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.884105][T12510] vivid-000: Apply Alpha To Red Only: false [ 152.895866][T12510] vivid-000: Standard Aspect Ratio: 4x3 [ 152.897627][T12510] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 152.900019][T12510] vivid-000: DV Timings: 640x480p59 inactive [ 152.901980][T12510] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 152.907724][T12510] vivid-000: Maximum EDID Blocks: 2 [ 152.909361][T12510] vivid-000: Limited RGB Range (16-235): false [ 152.911304][T12510] vivid-000: Rx RGB Quantization Range: Automatic [ 152.913368][T12510] vivid-000: Power Present: 0x00000001 [ 152.915625][T12510] tpg source WxH: 320x180 (R'G'B) [ 152.917244][T12510] tpg field: 1 [ 152.918393][T12510] tpg crop: (0,0)/320x180 [ 152.919691][T12510] tpg compose: (0,0)/320x180 [ 152.921131][T12510] tpg colorspace: 8 [ 152.922286][T12510] tpg transfer function: 0/2 [ 152.924000][T12510] tpg quantization: 0/1 [ 152.925282][T12510] tpg RGB range: 0/2 [ 152.926489][T12510] vivid-000: ================== END STATUS ================== [ 152.974098][T12531] netlink: 'syz.7.1967': attribute type 11 has an invalid length. [ 152.976938][T12531] netlink: 'syz.7.1967': attribute type 11 has an invalid length. [ 152.987806][ T40] audit: type=1400 audit(408.921:781): avc: denied { getopt } for pid=12532 comm="syz.0.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 152.990165][T12533] Unsupported ieee802154 address type: 0 [ 153.011698][T12531] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.087662][T12546] overlayfs: failed to resolve './file0': -2 [ 153.113408][ T5958] Bluetooth: hci2: command tx timeout [ 153.218990][ T7161] usbhid 6-1:1.0: can't add hid device: -71 [ 153.221171][ T7161] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 153.228763][ T7161] usb 6-1: USB disconnect, device number 6 [ 153.489877][T12561] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 153.492886][T12561] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 153.496502][T12561] overlayfs: missing 'lowerdir' [ 153.766933][T12569] netlink: 'syz.1.1979': attribute type 1 has an invalid length. [ 153.802095][T12569] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 153.974862][T12583] usb usb9: usbfs: process 12583 (syz.0.1984) did not claim interface 0 before use [ 154.063018][ T5958] Bluetooth: hci3: command tx timeout [ 154.099176][ T40] audit: type=1400 audit(410.031:782): avc: denied { bind } for pid=12590 comm="syz.0.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 154.608696][T12599] __nla_validate_parse: 6 callbacks suppressed [ 154.608710][T12599] netlink: 80 bytes leftover after parsing attributes in process `syz.8.1988'. [ 154.614322][ T40] audit: type=1400 audit(410.551:783): avc: denied { listen } for pid=12598 comm="syz.8.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 154.620475][ T40] audit: type=1400 audit(410.551:784): avc: denied { accept } for pid=12598 comm="syz.8.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 154.754662][ T40] audit: type=1326 audit(410.691:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12602 comm="syz.8.1989" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35c918e9a9 code=0x0 [ 154.807121][T12605] netlink: 'syz.8.1989': attribute type 1 has an invalid length. [ 154.810349][T12605] netlink: 228 bytes leftover after parsing attributes in process `syz.8.1989'. [ 155.182894][ T5958] Bluetooth: hci2: command tx timeout [ 155.197957][ T40] audit: type=1400 audit(411.131:786): avc: denied { ioctl } for pid=12612 comm="syz.0.1992" path="socket:[48273]" dev="sockfs" ino=48273 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 155.266886][T12614] SELinux: Context system_u:object_r:hald_exec_t:s0 is not valid (left unmapped). [ 155.647475][T12607] overlayfs: statfs failed on './file0' [ 155.711643][T12624] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1996'. [ 155.717323][T12622] netlink: 180 bytes leftover after parsing attributes in process `syz.8.1994'. [ 155.720477][T12622] netlink: 180 bytes leftover after parsing attributes in process `syz.8.1994'. [ 155.764894][T12629] cgroup: Unknown subsys name 'uid' [ 155.866166][T12646] netlink: 'syz.1.1998': attribute type 1 has an invalid length. [ 155.868633][T12646] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1998'. [ 155.905705][T12634] Falling back ldisc for ttyS3. [ 155.977590][T12654] vivid-007: ================= START STATUS ================= [ 155.980009][T12654] vivid-007: Generate PTS: true [ 155.981834][T12654] vivid-007: Generate SCR: true [ 155.985263][T12654] tpg source WxH: 320x240 (Y'CbCr) [ 155.987051][T12654] tpg field: 1 [ 155.988147][T12654] tpg crop: (0,0)/320x240 [ 155.989509][T12654] tpg compose: (0,0)/320x240 [ 155.991000][T12654] tpg colorspace: 8 [ 155.992222][T12654] tpg transfer function: 0/0 [ 155.994145][T12654] tpg Y'CbCr encoding: 0/0 [ 155.995667][T12654] tpg quantization: 0/0 [ 155.996976][T12654] tpg RGB range: 0/2 [ 155.998210][T12654] vivid-007: ================== END STATUS ================== [ 156.104953][T12667] random: crng reseeded on system resumption [ 156.114964][T12668] syz.7.2007: attempt to access beyond end of device [ 156.114964][T12668] loop7: rw=0, sector=2, nr_sectors = 2 limit=0 [ 156.119185][T12668] MINIX-fs: unable to read superblock [ 156.142770][ T5958] Bluetooth: hci3: command tx timeout [ 156.152439][T12670] netlink: 'syz.0.2009': attribute type 10 has an invalid length. [ 156.164129][T12670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.168751][T12670] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 156.173257][T12670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.176528][T12670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.179419][T12670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.198829][T12670] bond0: (slave batadv0): Releasing backup interface [ 156.369773][T12686] random: crng reseeded on system resumption [ 156.400789][T12686] netlink: 'syz.1.2014': attribute type 10 has an invalid length. [ 156.408488][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2015'. [ 156.410053][T12686] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2014'. [ 156.411318][T12692] net_ratelimit: 398 callbacks suppressed [ 156.411326][T12692] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 156.419800][T12692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.433561][T12686] team0: Port device geneve0 added [ 156.476010][T12695] nvme_fabrics: missing parameter 'transport=%s' [ 156.481893][T12695] nvme_fabrics: missing parameter 'nqn=%s' [ 156.601544][T12705] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2019'. [ 156.640681][T12712] gretap1: entered promiscuous mode [ 156.752773][ T34] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 156.864237][T12720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.883080][ T34] usb 6-1: device descriptor read/64, error -71 [ 156.987557][T12735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12735 comm=syz.7.2027 [ 157.018561][T12737] SET target dimension over the limit! [ 157.026676][T12737] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2030'. [ 157.132773][ T34] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 157.188345][T12755] overlayfs: statfs failed on './file0' [ 157.263752][ T34] usb 6-1: device descriptor read/64, error -71 [ 157.282946][T12760] input: syz1 as /devices/virtual/input/input17 [ 157.326441][T12762] fuse: Unknown parameter '' [ 157.374761][ T34] usb usb6-port1: attempt power cycle [ 157.499208][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 157.499218][ T40] audit: type=1400 audit(413.431:801): avc: denied { setattr } for pid=12775 comm="syz.0.2044" name="media7" dev="devtmpfs" ino=1024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.562994][T12779] netlink: 'syz.0.2044': attribute type 1 has an invalid length. [ 157.668984][ T40] audit: type=1400 audit(413.601:802): avc: denied { write } for pid=12780 comm="syz.7.2045" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 157.670141][T12781] < [ 157.732815][ T34] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 157.753195][ T34] usb 6-1: device descriptor read/8, error -71 [ 157.894921][T12792] ------------[ cut here ]------------ [ 157.896963][T12792] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 5 MHz (6) [ 157.900792][T12792] WARNING: CPU: 2 PID: 12792 at drivers/net/wireless/virtual/mac80211_hwsim.c:2650 mac80211_hwsim_sta_rc_update+0x60b/0x850 [ 157.905076][T12792] Modules linked in: [ 157.906585][T12792] CPU: 2 UID: 0 PID: 12792 Comm: syz.8.2049 Not tainted 6.16.0-rc6-syzkaller-00237-gc7de79e662b8 #0 PREEMPT(full) [ 157.911908][T12792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.915856][T12792] RIP: 0010:mac80211_hwsim_sta_rc_update+0x60b/0x850 [ 157.917973][T12792] Code: 8b 44 24 20 89 da 48 c7 c7 40 54 6b 8c 44 8b 89 a8 01 00 00 41 54 48 8d b0 72 04 00 00 41 55 44 8b 44 24 14 e8 86 8b 72 fa 90 <0f> 0b 90 90 58 5a e9 36 fc ff ff e8 65 84 b3 fa e8 30 fd 7d 04 31 [ 157.924496][T12792] RSP: 0018:ffffc9000370f1a8 EFLAGS: 00010282 [ 157.926384][T12792] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90038804000 [ 157.928849][T12792] RDX: 0000000000080000 RSI: ffffffff817af1b5 RDI: 0000000000000001 [ 157.931317][T12792] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 157.934003][T12792] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000006 [ 157.936520][T12792] R13: 0000000000000005 R14: ffff88803dee9020 R15: ffff88803c8d30a0 [ 157.938977][T12792] FS: 00007f35c9fe96c0(0000) GS:ffff8880d6922000(0000) knlGS:0000000000000000 [ 157.941781][T12792] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.944095][T12792] CR2: 0000200000001080 CR3: 0000000029bf0000 CR4: 0000000000352ef0 [ 157.946614][T12792] Call Trace: [ 157.947798][T12792] [ 157.948748][T12792] mac80211_hwsim_sta_add+0xc9/0x2c0 [ 157.950408][T12792] ? __pfx_mac80211_hwsim_sta_add+0x10/0x10 [ 157.952309][T12792] drv_sta_state+0xa05/0x1940 [ 157.953912][T12792] sta_info_insert_rcu+0xc8d/0x1b70 [ 157.955682][T12792] sta_info_insert+0x16/0xd0 [ 157.957149][T12792] ieee80211_add_station+0x46d/0x6c0 [ 157.958802][T12792] nl80211_new_station+0x14cc/0x1c50 [ 157.960491][T12792] ? __pfx_nl80211_new_station+0x10/0x10 [ 157.962255][T12792] ? nl80211_pre_doit+0x1b0/0xb10 [ 157.964035][T12792] genl_family_rcv_msg_doit+0x206/0x2f0 [ 157.965775][T12792] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 157.967694][T12792] ? bpf_lsm_capable+0x9/0x10 [ 157.968482][ T40] audit: type=1400 audit(413.901:803): avc: denied { read } for pid=12791 comm="syz.8.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 157.969246][T12792] ? security_capable+0x7e/0x260 [ 157.976901][T12792] ? ns_capable+0xd7/0x110 [ 157.978362][T12792] genl_rcv_msg+0x55c/0x800 [ 157.979818][T12792] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.981432][T12792] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 157.983215][T12792] ? __pfx_nl80211_new_station+0x10/0x10 [ 157.985033][T12792] ? __pfx_nl80211_post_doit+0x10/0x10 [ 157.986695][T12792] netlink_rcv_skb+0x155/0x420 [ 157.988192][T12792] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.989751][T12792] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.990362][T12793] tc_dump_action: action bad kind [ 157.991433][T12792] ? netlink_deliver_tap+0x1ae/0xd30 [ 157.991451][T12792] genl_rcv+0x28/0x40 [ 157.991465][T12792] netlink_unicast+0x58d/0x850 [ 157.991480][T12792] ? __pfx_netlink_unicast+0x10/0x10 [ 157.999988][T12792] netlink_sendmsg+0x8d1/0xdd0 [ 158.001592][T12792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.003482][T12792] ____sys_sendmsg+0xa98/0xc70 [ 158.004989][T12792] ? copy_msghdr_from_user+0x10a/0x160 [ 158.006701][T12792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.008365][T12792] ? try_to_wake_up+0xa2f/0x1680 [ 158.009929][T12792] ___sys_sendmsg+0x134/0x1d0 [ 158.011447][T12792] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.012724][ T34] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 158.013157][T12792] ? __lock_acquire+0x622/0x1c90 [ 158.017188][T12792] __sys_sendmsg+0x16d/0x220 [ 158.018709][T12792] ? __pfx___sys_sendmsg+0x10/0x10 [ 158.020405][T12792] ? __x64_sys_futex+0x1e0/0x4c0 [ 158.022353][T12792] do_syscall_64+0xcd/0x4c0 [ 158.023890][T12792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.025771][T12792] RIP: 0033:0x7f35c918e9a9 [ 158.027177][T12792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.033245][ T34] usb 6-1: device descriptor read/8, error -71 [ 158.035226][T12792] RSP: 002b:00007f35c9fe9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.037799][T12792] RAX: ffffffffffffffda RBX: 00007f35c93b5fa0 RCX: 00007f35c918e9a9 [ 158.040230][T12792] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000007 [ 158.042740][T12792] RBP: 00007f35c9210d69 R08: 0000000000000000 R09: 0000000000000000 [ 158.045161][T12792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.047541][T12792] R13: 0000000000000000 R14: 00007f35c93b5fa0 R15: 00007fffb6bd01a8 [ 158.049979][T12792] [ 158.050980][T12792] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 158.053243][T12792] CPU: 2 UID: 0 PID: 12792 Comm: syz.8.2049 Not tainted 6.16.0-rc6-syzkaller-00237-gc7de79e662b8 #0 PREEMPT(full) [ 158.056820][T12792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 158.060572][T12792] Call Trace: [ 158.061790][T12792] [ 158.062785][T12792] dump_stack_lvl+0x3d/0x1f0 [ 158.064255][T12792] panic+0x71c/0x800 [ 158.065469][T12792] ? __pfx_panic+0x10/0x10 [ 158.066866][T12792] ? show_trace_log_lvl+0x29b/0x3e0 [ 158.068530][T12792] ? mac80211_hwsim_sta_rc_update+0x60b/0x850 [ 158.070583][T12792] check_panic_on_warn+0xab/0xb0 [ 158.072256][T12792] __warn+0xf6/0x3c0 [ 158.073519][T12792] ? mac80211_hwsim_sta_rc_update+0x60b/0x850 [ 158.075481][T12792] report_bug+0x3c3/0x580 [ 158.077057][T12792] ? mac80211_hwsim_sta_rc_update+0x60b/0x850 [ 158.079158][T12792] handle_bug+0x184/0x210 [ 158.080576][T12792] exc_invalid_op+0x17/0x50 [ 158.082008][T12792] asm_exc_invalid_op+0x1a/0x20 [ 158.083541][T12792] RIP: 0010:mac80211_hwsim_sta_rc_update+0x60b/0x850 [ 158.085601][T12792] Code: 8b 44 24 20 89 da 48 c7 c7 40 54 6b 8c 44 8b 89 a8 01 00 00 41 54 48 8d b0 72 04 00 00 41 55 44 8b 44 24 14 e8 86 8b 72 fa 90 <0f> 0b 90 90 58 5a e9 36 fc ff ff e8 65 84 b3 fa e8 30 fd 7d 04 31 [ 158.091538][T12792] RSP: 0018:ffffc9000370f1a8 EFLAGS: 00010282 [ 158.093414][T12792] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90038804000 [ 158.096239][T12792] RDX: 0000000000080000 RSI: ffffffff817af1b5 RDI: 0000000000000001 [ 158.098760][T12792] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 158.101231][T12792] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000006 [ 158.103684][T12792] R13: 0000000000000005 R14: ffff88803dee9020 R15: ffff88803c8d30a0 [ 158.106126][T12792] ? __warn_printk+0x1a5/0x350 [ 158.107637][T12792] ? mac80211_hwsim_sta_rc_update+0x60a/0x850 [ 158.109524][T12792] mac80211_hwsim_sta_add+0xc9/0x2c0 [ 158.111189][T12792] ? __pfx_mac80211_hwsim_sta_add+0x10/0x10 [ 158.113039][T12792] drv_sta_state+0xa05/0x1940 [ 158.114519][T12792] sta_info_insert_rcu+0xc8d/0x1b70 [ 158.116150][T12792] sta_info_insert+0x16/0xd0 [ 158.117585][T12792] ieee80211_add_station+0x46d/0x6c0 [ 158.119226][T12792] nl80211_new_station+0x14cc/0x1c50 [ 158.120913][T12792] ? __pfx_nl80211_new_station+0x10/0x10 [ 158.122659][T12792] ? nl80211_pre_doit+0x1b0/0xb10 [ 158.124272][T12792] genl_family_rcv_msg_doit+0x206/0x2f0 [ 158.125994][T12792] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 158.127896][T12792] ? bpf_lsm_capable+0x9/0x10 [ 158.129376][T12792] ? security_capable+0x7e/0x260 [ 158.130931][T12792] ? ns_capable+0xd7/0x110 [ 158.132341][T12792] genl_rcv_msg+0x55c/0x800 [ 158.133765][T12792] ? __pfx_genl_rcv_msg+0x10/0x10 [ 158.135343][T12792] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 158.137015][T12792] ? __pfx_nl80211_new_station+0x10/0x10 [ 158.138737][T12792] ? __pfx_nl80211_post_doit+0x10/0x10 [ 158.140520][T12792] netlink_rcv_skb+0x155/0x420 [ 158.142017][T12792] ? __pfx_genl_rcv_msg+0x10/0x10 [ 158.143632][T12792] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 158.145277][T12792] ? netlink_deliver_tap+0x1ae/0xd30 [ 158.146989][T12792] genl_rcv+0x28/0x40 [ 158.148281][T12792] netlink_unicast+0x58d/0x850 [ 158.149787][T12792] ? __pfx_netlink_unicast+0x10/0x10 [ 158.151501][T12792] netlink_sendmsg+0x8d1/0xdd0 [ 158.152967][T12792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.154647][T12792] ____sys_sendmsg+0xa98/0xc70 [ 158.156394][T12792] ? copy_msghdr_from_user+0x10a/0x160 [ 158.158115][T12792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.159787][T12792] ? try_to_wake_up+0xa2f/0x1680 [ 158.161364][T12792] ___sys_sendmsg+0x134/0x1d0 [ 158.162849][T12792] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.164485][T12792] ? __lock_acquire+0x622/0x1c90 [ 158.166051][T12792] __sys_sendmsg+0x16d/0x220 [ 158.167520][T12792] ? __pfx___sys_sendmsg+0x10/0x10 [ 158.169124][T12792] ? __x64_sys_futex+0x1e0/0x4c0 [ 158.170685][T12792] do_syscall_64+0xcd/0x4c0 [ 158.172120][T12792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.174019][T12792] RIP: 0033:0x7f35c918e9a9 [ 158.175434][T12792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.181323][T12792] RSP: 002b:00007f35c9fe9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.183894][T12792] RAX: ffffffffffffffda RBX: 00007f35c93b5fa0 RCX: 00007f35c918e9a9 [ 158.186320][T12792] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000007 [ 158.188759][T12792] RBP: 00007f35c9210d69 R08: 0000000000000000 R09: 0000000000000000 [ 158.191259][T12792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.193713][T12792] R13: 0000000000000000 R14: 00007f35c93b5fa0 R15: 00007fffb6bd01a8 [ 158.196164][T12792] [ 158.197729][T12792] Kernel Offset: disabled [ 158.199076][T12792] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:00:45 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000046 RBX=ffffffff8e5c4e00 RCX=ffffc9000331faec RDX=0000000000000002 RSI=ffffffff8de0ab05 RDI=ffffffff8c157260 RBP=0000000000000141 RSP=ffffc9000331fae0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff8b53a2f5 R13=0000000000000206 R14=ffff888024e00000 R15=0000000000000003 RIP=ffffffff819884d4 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6722000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555557b1d808 CR3=0000000059b02000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000006 DR2=0000000000000004 DR3=0000000000001000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ef1c11d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ef1c11d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ef1c11d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ef1c11d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ef1c11de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ef1c11ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 87247cff37c2e4e0 83704a89f0ab377f c7186ab4ded0746a cb36969ba5eab21f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 129e117c500eedd1 ed44755d3d471bd1 68328daf65270004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 be4d9e96598dabbf 640313164292cf8a 116c2ad5803560de b3c949c3757eaf8d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f381103009c2a0b9 ddf4c63fffe41206 4a3366a606be5655 85fa7bdb8a20a9e0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1546092fcc8f25d0 93cda8c1ed44f96f b561844bd92e2c9e 4556c27664c22d67 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7a2fe080d662b9e6 813c0efbdf2dcda7 3bef6192ef616399 24f4127370c8fb93 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6209c64b4b854c58 0dbf9a1d89896a68 5037cb6da8a201fe eca88ec2c3d09bae ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 88d68064492448f3 81103009c2a0b9dd f4c63fffe412064a 3366a606be565585 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffffc90000177d48 RCX=ffffffff81c3ba6f RDX=0000000000000000 RSI=ffffffff8ba93f60 RDI=0000000000010000 RBP=0000000000000001 RSP=ffffc900006a0fe0 R8 =0000000000000000 R9 =fffffbfff21527aa R10=ffffffff90a93d57 R11=ffffc900006a0ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81897224 RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6822000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5b43518360 CR3=0000000041e88000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000006 DR2=0000000000000004 DR3=0000000000001000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00306765726d6970 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5b43611d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5b43611d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5b43611d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5b43611d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5b43611de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5b43611ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 53eb69f8250be936 438961aac7bfea48 027f654d0b7d000e 84f0f60ea58ef4fd ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1192c16cd6017f0f f7cdff06dc9fcfc9 58a0e7f3e66b0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 63e6a9e87af409ea cacd8c0782c9eaff 17964c6fef0e22d2 e952000000038c6a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 be1b860c2b9dfd60 23fe38c0e9122176 9996dfcfd4227430 57e92978853dad09 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8e38e4a98f7242c5 684a191797752bec 16d7d251be672d91 b37cc5d720099ea9 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 622f25abcf025f49 84c47c2803ddb47b d7fd85599ad500a4 aaa4490a6f0dbe1b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 860c2b9dfd6023fe 38c0e91221769996 dfcfd422743057e9 2978853dad0963e6 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a9e87af409eacacd 8c0782c9eaff1796 4c6fef0e22d2e952 000000038c6a1192 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855a3e65 RDI=ffffffff9b0b7e20 RBP=ffffffff9b0b7de0 RSP=ffffc9000370eb10 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b0b7de0 R15=ffffffff855a3e00 RIP=ffffffff855a3e8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f35c9fe96c0 ffffffff 00c00000 GS =0000 ffff8880d6922000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001080 CR3=0000000029bf0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff80 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35c9211d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35c9211d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35c9211d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35c9211d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35c9211de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35c9211ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35c9386488 00007f35c9386480 00007f35c9386478 00007f35c9386450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35c9eed100 00007f35c9386440 00007f35c9386458 00007f35c93864a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35c9386498 00007f35c9386490 00007f35c9386488 00007f35c9386480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000004 RBX=0000000000000001 RCX=0000000000000001 RDX=1ffff11009068009 RSI=ffffffff8bacc0c0 RDI=ffffffff8c157260 RBP=ffff888048340014 RSP=ffffc9000365fa60 R8 =0000000000000001 R9 =fffffbfff21527aa R10=ffffffff90a93d57 R11=0000000000000001 R12=0000000000000070 R13=0000000000000070 R14=ffff888048340000 R15=0000000000000001 RIP=ffffffff818ce465 RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5b444556c0 ffffffff 00c00000 GS =0000 ffff8880d6a22000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f35c9fe8f98 CR3=0000000041e88000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74b1bf3f70 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74b3e11d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74b3e11d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74b3e11d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74b3e11d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74b3e11de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f74b3e11ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000