last executing test programs: 45.5297472s ago: executing program 3 (id=302): r0 = syz_clone3(&(0x7f0000000280)={0x40084000, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYBLOB='.K']) read$FUSE(0xffffffffffffffff, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x40, 0x52}}, 0x1c}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0xfffffffffffffffe, r2, {0x7, 0x1f, 0x0, 0x2066012, 0x0, 0x96, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200000}}, 0x50) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x2e, 0x6, 0x0, {0x5, 0x1, 0x5, 0x0, 'fuse\x00'}}, 0x2e) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) r5 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r6, r6, 0x0, 0xb) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000003e00070103000000000000000143e145a13de37cce6ccf2de07794ff7c0000040042800cabaa5f6b000600843b000010e6f44f5b6f693c9a039d2ec6fdfb3d6b1c3ff63cf2f42828704a346377e5ea03a00d457c32cf14867a2a2c9377323b473db6878d075488938835"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x800) unshare(0x2a020400) pselect6(0x40, &(0x7f0000000040)={0xc, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0x0, 0x0) r9 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) mount_setattr(r4, &(0x7f00000000c0)='./file0\x00', 0x1800, &(0x7f00000001c0)={0x8a, 0x8, 0x80000, {r8}}, 0x20) rt_sigqueueinfo(r1, 0x21, &(0x7f0000000040)={0x0, 0x0, 0xfffffffb}) 44.819637376s ago: executing program 3 (id=305): shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r0 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/11) shmctl$IPC_RMID(r0, 0x0) r1 = shmget(0x3, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r1, 0xb) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0xfb, 0xb2, 0x0, 0x8, "0e3454a9d21ebf3869963c64178ef98a", "9f54025e18112bd40e7758d3a4b7cee0b003e4ecfdd65a634a4e35ce4eb48cd35d8dda03088437870090328f289251668c176ee46db5a06ff9a9b0a166b95dfe9eed9cf39bc07da231fdf1113c384a5a887274c90138d8c0af08d73b7b0e83df53ee00747cddf45f4a319dd3b80a518bb5622a4b739ad09b3d01d7023ff3906d091308810da95a3b4728506a62c311aa9fb16f32d22e38c7ef4b5cb704"}, 0xb2, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = getuid() read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$fuseblk(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x13, &(0x7f00000022c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{}, {@max_read={'max_read', 0x3d, 0x128f}}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0xe}}, {}, {@allow_other}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x22}}, {@obj_user={'obj_user', 0x3d, 'trusted.overlay.upper\x00'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}}) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000002440)=""/4096) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000003440)=""/126) r5 = shmget(0x3, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_SET(r5, 0x1, 0xfffffffffffffffe) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000034c0), 0x0, 0x0) ioctl$KVM_GET_PIT2(r6, 0x8070ae9f, &(0x7f0000003500)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000003580)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r7 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_UNLOCK(r7, 0xc) r8 = shmget(0x1, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r8, 0xc) r9 = shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r9, 0xb) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f00000035c0)=0x2, 0x5, 0x7) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000003600)=""/174) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f00000036c0)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000003740)={0x22, 0x3, 0x0, {0x6, 0x1, 0x0, '-'}}, 0x22) 44.759193695s ago: executing program 3 (id=307): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYRES16=r1, @ANYBLOB="14000000045fc82ddcc12000b7026a83f85ba789defd543cd36120ec5db9062d9cfb198cadf3623238ee5fe91912a2004bc77e9610c685d908b655c7131e61fbec", @ANYBLOB="ad43f8ffff0ca921b14f38960207002f2463fbddf622c32e5a20b91f6ad0269d4ce3198aad0d490fb9179d6852cba189e1360743660a180f041d579ed3d9c094124697ecbb690565019933dc2ac64f1bd5751f0121952b6de18131ea098177a1206dbfaa6735a4c36f32c1b7bf0b681cb600368c10e992bfe8f5472288d870f01be506281cb2eb542e02242cca09c55f961928cbb62fbc4f69297d392aef1e1a3828fa48b6f9a471d63be85bd594619ac5a08b084badcc7c7f015d25ee9984ac9ae2f96d5173d85baf2a735b96ef4f6700bbf836e08b068b07c8720c44c1f4f2c6db8b92e434fd637aacd7e900c4d37e9214ce2edc0833e81fe4cca624a0ee1a2d8dc5576d59456cf8c3003329d2eca7b3cdd249261dc2d3f93a417130ae62a25249c0a008f0f23860658e11ec0efc72e6b68b7f7f4321ee9f191d6c5f7b1e9f7200"], 0x14}, 0x1, 0x0, 0x0, 0xc086}, 0x20014880) r2 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r2, 0x82000000) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x4b2540, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000000000e00000000000000000000000080060000000000000009000000000000000100000000000000ac98000000000000000000000000000000000000000000000002000000000000000000000000000007000000000000000400000000000000f8ffffffffffffff0000000000000000000000000000000002000000000000000000000000000000310a00000000000001000000010000000500000000000000000000f9ffffff0000000000000000000328000000000000000000000000000000000000ffffffff020000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000100000000000900000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000100000000000000060000000000000000000000000000000000000000000000000800"/368]) pipe2$watch_queue(&(0x7f0000000200), 0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="0f08ca1dc27918e0e0f3a4ea000000800200f30f090f01d166baf80cb85435d284ef66bafc0ced66baf80cb8f4cbfa84ef66bafc0cb0d7eec4e1e359cf66ba4300ec", 0x42}], 0x1, 0x1, 0x0, 0x0) r7 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) ioctl$int_in(r8, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r8, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r9}], 0x1, 0x0, 0x0, 0x0) dup2(r8, r9) fcntl$setown(r9, 0x8, r7) tkill(r7, 0x13) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 43.389148474s ago: executing program 0 (id=319): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001280)=ANY=[@ANYBLOB='D'], 0x4c}}, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) (async, rerun: 64) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x88900, 0x0) (async, rerun: 64) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) r4 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r3, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) (async) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000000)={0xc, r3}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f00000004c0)={0x20, 0x2, 0x0, 0x2, 0x5}) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x3) (async, rerun: 64) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) write$yama_ptrace_scope(r4, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000080)={0x6, 0x6, 0xa488, 0x1000, 0x9, 0x4}) 43.265124609s ago: executing program 0 (id=320): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r2, 0x1, 0x22, 0x0, &(0x7f0000001780)) r3 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000003c0)='name', &(0x7f0000000400)='})\x00', 0x0) sendto$inet6(r1, &(0x7f0000000380)="e8b2", 0x2, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x6, 0x4, 0x6, 0x3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000540)={&(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000680)={&(0x7f00000005c0)=[r4, r5], 0x2}) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) shutdown(r1, 0x1) syz_io_uring_setup(0x623f, &(0x7f0000000440)={0x0, 0xe5f4, 0x2, 0x2, 0x1bd}, &(0x7f0000000200), &(0x7f00000002c0)) close(r0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000300)={0x0, 0x38, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r8, 0x0, 0x200, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r9, 0x0, 0x0, r10], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000480)=r11) 43.027483551s ago: executing program 0 (id=322): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1c", 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x41) (async) close(r1) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x70, 0x1, [@m_mirred={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x216, 0x1, 0xffffffffffffffff, 0x7, 0x6}, 0x3, r3}}]}, {0x1d, 0xa, "d6a4eea88e2bb013d594a913e58553e2040204adda3b8da49c"}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x2000a804) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x4884) 43.027224518s ago: executing program 0 (id=323): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x20) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000500)={0x6, 0x9}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x0, 0x1, 0x0, 0x0, 0xe8}, 0x1c) timer_create(0x3, 0x0, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x16}]}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0xbc, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfffffff8}, @ETHTOOL_A_CHANNELS_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x81}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket$packet(0x11, 0xc2340cf684d20d18, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2080}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0x98}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x5a, &(0x7f0000000540)={@random="f6695d836d1d", @remote, @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@canfd={0xd, {{0x3}, 0x24, 0x0, 0x0, 0x0, "f8411084ce82f32ada398d97b04fdd1fc469e6357fa08267cad0955bbd0e6bfafefb6f19388fc417e80873b6a23008a28cd8aaa712d425bc6cf3fad6367b285b"}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20, &(0x7f0000000300)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2c086dc04111d673a3e6285fc2f2a37c4fa1c02045c6bd6a229217acd1c195a93fd28cfd8273c6f9c9aafd85e139c16b"]) 42.229313934s ago: executing program 0 (id=328): openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r0, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f00000000c0)="d8958b659b70d4", 0x7}, {&(0x7f0000000100)="5a32d47b11c24def722247cf5277191c62ad2da1b778c59b01de2c08d03f3407af57e81d9b5b5c54d7ef428c8822289b03b00ec52c8a02e46a07c359c050a943921fa51ae2bc0cf61742d8b6ec01d6f1ae1d11c3f623161d28a0d3604a", 0x5d}, {&(0x7f0000000180)="253e749760721cbb01fe8e55ce4ed62a605a", 0x12}, {&(0x7f0000000200)="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", 0x382}, {0x0, 0x700}], 0x5}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)=[{0x10, 0x116, 0xf}], 0x10}}], 0x2, 0x48d4) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344, 0x41424344}, 0x1, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r4 = syz_io_uring_setup(0x61ac, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1010"], 0x1010}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r4, 0x92, 0x2, 0x9, 0x0, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) ppoll(&(0x7f0000000280)=[{r8, 0x210}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x102, &(0x7f00000005c0)={@link_local, @empty, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x3, 0x14, 0xf4, 0x64, 0x0, 0x7, 0x6, 0x0, @broadcast, @loopback, {[@ssrr={0x89, 0x7, 0xe4, [@multicast2]}]}}, {{0x4e23, 0x4e20, 0x41424344, r3, 0x0, 0x0, 0x14, 0x2, 0x800, 0x0, 0x3, {[@generic={0x13, 0x4, "40d7"}, @window={0x3, 0x3}, @sack_perm={0x4, 0x2}, @eol, @mss={0x2, 0x4, 0x8000}, @mptcp=@mp_fclose={0x1e, 0xc, 0x2, 0x0, 0x10000}, @mptcp=@mp_fclose={0x1e, 0xc, 0x6, 0x0, 0x84}, @exp_fastopen={0xfe, 0xc, 0xf989, "adfe55cf5744229f"}, @timestamp={0x8, 0xa, 0x51, 0xcb}]}}, {"091007ab28b9f7f3bb11fea0a66529c825503b16928ee61e356d94d6d88c130b26a6c3a6bab854a2a9cace7962c93bf7e77249d6247c12bdcc57bf7486a055ac2aa52481ea45a845733e47e4905595bb309dc3344eabf034b2619cf0c94601c65f846027752a2c8dabdd8743a7c3407ca4863d12029eab4a453f34cd7940538ba8c6cadc10e0feca"}}}}}}, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000000), 0x800, 0x2000) ioctl$USBDEVFS_BULK(r9, 0xc0185502, &(0x7f0000000140)={{{0xd, 0x1}}, 0xd8, 0x7, &(0x7f0000000040)="0433efc3b01bb75f3c2914a23e657d94269df20d3b137a24c08762d5ee09af933ad55cb05d2ea81fbec83a125c457e88cfc50124d7e0e31e7ed55a93cbf0be8621934ba251e5134ea8320680eca602f71144f62fced58501974f175418f8c0ee73645d2576dd284f9f89f6f774f79b13593cbf1109f61a02a8e664e1b9e0751551bd94cd307aff0508d26c4ad25342e1ceaafbe8cce9e225b9b431c4c270a9d66cc60cae20ce4bada3618f6b9450da16ebacbef81b36991e494581fe04f6054920330d4c10e97f071de9c7023b37661b4d772445680f2952"}) 41.715183224s ago: executing program 3 (id=330): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000140)=""/151, 0x97}, {&(0x7f0000000200)=""/223, 0xdf}, {&(0x7f00000025c0)=""/4105, 0x1009}, {&(0x7f0000000340)=""/157, 0x9d}, {&(0x7f0000003e00)=""/101, 0x65}, {&(0x7f0000001480)=""/62, 0x3e}], 0x6}}, {{0x0, 0x0, 0x0}}], 0x2, 0x34000, 0x0) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x10, 0x0) chroot(&(0x7f0000000040)='./file0\x00') mount(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x1218081, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) statfs(&(0x7f0000000380)='./file0\x00', 0x0) 41.659604427s ago: executing program 3 (id=331): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x7, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0x8f, &(0x7f0000000040)=""/143}, 0x94) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = memfd_create(&(0x7f0000000300)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ftruncate(r2, 0x400000) finit_module(r2, 0x0, 0x0) write(r1, &(0x7f0000000340)="07000000010003", 0x7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x111, 0x4b4, 0x120, 0xd4feffff, 0x258, 0x20a, 0x278, 0x258, 0x278, 0x3, 0x0, {[{{@ipv6={@private0, @empty, [], [], 'syz_tun\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @local, [], [], 'netdevsim0\x00', 'veth1_to_bridge\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f00000005c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r6, 0xae80, 0x0) madvise(&(0x7f0000a82000/0x3000)=nil, 0x3000, 0x12) 41.367858042s ago: executing program 0 (id=334): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0401220c"], 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f00000007c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f00000007c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 41.309396633s ago: executing program 3 (id=335): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="de879477ecd5afb47062864e5737f6e1"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b547347bd467c98e1372a1e05b63b4774b7b799aff0af7c0"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "98ce2b874a858ddd"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4020}, 0x4080) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x58, r6, 0x1, 0x70bd25, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x58}, 0x1, 0xf000, 0x0, 0x3000011}, 0x8c0) 41.266027778s ago: executing program 32 (id=335): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="de879477ecd5afb47062864e5737f6e1"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b547347bd467c98e1372a1e05b63b4774b7b799aff0af7c0"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "98ce2b874a858ddd"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4020}, 0x4080) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x58, r6, 0x1, 0x70bd25, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x58}, 0x1, 0xf000, 0x0, 0x3000011}, 0x8c0) 36.229292398s ago: executing program 4 (id=392): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r1, 0x400, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = getpgid(0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x800000, &(0x7f0000000300)={'trans=virtio,', {[{@access_client}, {@version_u}]}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1100, 0x1}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x3, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x17}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x1000000, &(0x7f0000000440)="9771"}) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/time\x00') 36.047634853s ago: executing program 4 (id=395): r0 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'netdevsim0\x00', @random="010000201000"}) (async) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 35.819278342s ago: executing program 4 (id=398): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$CDROMVOLREAD(r0, 0x5313, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000014c0)=@newtfilter={0x3c, 0x2c, 0x52f, 0x3, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {}, {0xd, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x9, 0xfff2}}]}}]}, 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0xfffffffa) ioctl$CDROM_GET_MCN(r5, 0x5311, &(0x7f0000000040)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (async) ioctl$CDROMVOLREAD(r0, 0x5313, &(0x7f0000000000)) (async) sched_setscheduler(0x0, 0x1, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) socket(0x2a, 0x2, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000014c0)=@newtfilter={0x3c, 0x2c, 0x52f, 0x3, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {}, {0xd, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x9, 0xfff2}}]}}]}, 0x3c}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (async) read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0xfffffffa) (async) ioctl$CDROM_GET_MCN(r5, 0x5311, &(0x7f0000000040)) (async) 35.748256482s ago: executing program 4 (id=400): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) chdir(&(0x7f00000001c0)='./bus\x00') chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88c42, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) (async) r2 = syz_pidfd_open(r1, 0x0) syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x400) (async) r3 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x40050) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x40050) ioctl$RTC_WKALM_RD(r3, 0x40187013, &(0x7f0000000440)) (async) ioctl$RTC_WKALM_RD(r3, 0x40187013, &(0x7f0000000440)) pidfd_getfd(r2, r0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000b88ae4ef00000001000000080005"], 0x20}}, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file1\x00'}, 0x6e) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) 35.74658133s ago: executing program 4 (id=402): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xc8c1) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x120) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000000d0aac00000000000000000000000000090002"], 0x20}}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000040)=0x0) timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000d80), 0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={'cryptd(blake2b-160)\x00'}}) r8 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r9, 0x0, 0x0) syz_usb_disconnect(r8) sendmsg$netlink(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000f80)={0x58, r1, 0x801, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x20048050) 35.439145034s ago: executing program 4 (id=405): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000009, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 35.398723758s ago: executing program 33 (id=405): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000009, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.343650841s ago: executing program 34 (id=334): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0401220c"], 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f00000007c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f00000007c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13.576166979s ago: executing program 5 (id=680): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xa4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000400)={@dev, 0x0}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_newaddr={0x64, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, {0xa, 0x38, 0x8, 0xfe, r1}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_RT_PRIORITY={0x8}, @IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x64}}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='efs\x00', 0x2000802, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0}) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = userfaultfd(0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd8, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_NAT_DST={0x74, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}]}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x100}]}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x2, 0x40, 0x1, 0x4e]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f00005ac000/0x4000)=nil, 0x4000, 0xd) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0x0, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x8, 0xc, 0x0, 0x0, 0x40, 0x1, 0x5}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_clone(0x100, &(0x7f0000000100)="16978f8cf40955a64b5e5e67bbb00c4437f1bea94af858272755c07608943c72d79fb03ba8dfdae2b69d8e3eddd5bcbcc4b20ca1452f6db8b0e11c524339a53feb511588d7b428e29f69ea302f1fcbb434544c280478865d55055177612d61134b527b94", 0x64, &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000200)="2893853c09302aa747e19cc63a19") ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 13.41798179s ago: executing program 5 (id=683): r0 = socket$inet(0x2, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0), 0x14004, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r1, 0x0, 0x5}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000100000000002000000000000000897b8ec8679f5475317422d89123e1153fc934974d92ffd0dce1cb688d73177ab66bc163097117d02937e1a7ba011f1bb073af4fe6739ea5c7f87ff87177522941a9fe832c467580e3c4e461acec4dc4f28377df24233da7ced4bea7ec1eaa0cc181df1d609ba45e71b2bc70c3e3dd39d5469dda220f75a1df791a77ebd8ab6094c8bb73cf8bfd41adcdcdc20d212114e53f0be2abf98eacf927885683b79cd018ff02a2c38f12dd2e102a6993b58053a70654c2250c72e8928b1439f2d801d5"], 0x24, 0x3) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) setxattr$trusted_overlay_opaque(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000340), &(0x7f0000000440), 0x2, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @multicast2, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@unspec=@addrtype1={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f0000000000)=0x66e7, 0x4) sendto$inet6(r4, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f0000000040)={0xa, 0x2, 0x398, @empty}, 0x1c) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, &(0x7f0000000000)) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}}, 0x8081) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000480)={0xb, 0x8f8d, 0x0, 0x1fe00, 0x9c2, 0x9, 0x0, 0x81, 0x0}, &(0x7f00000004c0)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000500)={r6, 0x8}, 0x8) 13.319823205s ago: executing program 5 (id=684): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04000000", @ANYRES16=r1, @ANYBLOB="1bb300000000000000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c0006000200000002000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e0000001440404feb180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0103461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0x14, 0x60000000, 0x0, 0xfffffffe}, 0x2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = syz_open_dev$radio(&(0x7f0000002040), 0x3, 0x2) ioctl$VIDIOC_S_MODULATOR(r6, 0x40445637, &(0x7f0000002080)={0x0, "432e8e0e0ff1fcc4834efc7ee1c3927c3d59655f7878a7f2de909f3ffdfbf739", 0x0, 0x100, 0x0, 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = socket(0x2, 0x80805, 0x0) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000006c0), 0x200001, 0x0) ioctl$KDFONTOP_COPY(r8, 0x4b72, &(0x7f0000000700)={0x3, 0x1, 0xa, 0x1c, 0x10d, &(0x7f00000007c0)}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x88, &(0x7f0000000440)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xf1, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12e, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f00000001c0)={r10, 0x7}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={r10, 0x6}, 0x8) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000680)={0x0, 0x6, 0xdddd1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00) 13.168435952s ago: executing program 5 (id=685): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f00000002c0), 0x0, 0x2) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x80000006}) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40201, 0x0) write$binfmt_aout(r4, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x5) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x97) ptrace(0x10, r3) ptrace$ARCH_SET_GS(0x1e, r3, 0x0, 0x1001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000200)=0x1, 0x4) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001080), 0x88000, 0x0) ioctl$FBIOPUTCMAP(r6, 0x4605, &(0x7f00000011c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) ptrace$getsig(0x4202, r3, 0x46f, &(0x7f0000000180)) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x460740, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x900, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000000f06010800000004000000000000000706000b0056030000050001000700000006000b000200000006000b000100000002000100e9ffffff05fc01000700000006000b00ffff0000050001000700000016e943ca4273fb8644753c9926fe31b3d55c7cf6296487072c9a7ad90017963b518360cbc784b7eba6e66e045051f702a432871331f29e7957c1c3432911e93a649ad980efb6a67c668f4a825bcbfdc275000207a4a85195f9281e8f8b49a258893e796b33e4a606"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000400000e684000040"]) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) 12.957759278s ago: executing program 5 (id=687): r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0xf, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000000) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, r0, 0x0) accept4(r0, &(0x7f0000000000)=@caif, &(0x7f0000000080)=0x80, 0x80400) 12.95648455s ago: executing program 5 (id=688): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r0, 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@can_delroute={0x2c, 0x19, 0x51, 0x0, 0x0, {0x1d, 0x1, 0x3}, [@CGW_MOD_SET={0x15, 0x4, {{{0x4}, 0x7, 0x2, 0x0, 0x0, "df8e1a41d1025bd5"}, 0x7}}]}, 0x2c}}, 0x0) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(r0, r0, 0x0) 3.026344539s ago: executing program 1 (id=842): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000080)={{r0}, "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"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat(r3, &(0x7f0000000200)='./file0\x00', 0x1, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x208000, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CDROMVOLCTRL(r4, 0x31f, &(0x7f00000001c0)={0xb0, 0x16, 0xe, 0x28}) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000004c0)={0x1, @raw_data="a425e2f1a54d24f14258313560608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000000080012"], 0x44}, 0x1, 0x0, 0x0, 0x3d633ef5b9448d59}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0xa, 0x66001) setsockopt$inet_int(r6, 0x0, 0xb, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume_offset', 0x204002, 0x48) statx(r7, &(0x7f0000000140)='./file0\x00', 0x100, 0x80, &(0x7f0000000240)) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) 2.838726554s ago: executing program 1 (id=847): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async, rerun: 64) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) (async, rerun: 64) r1 = gettid() rt_sigqueueinfo(r1, 0x24, &(0x7f00000000c0)={0x1c, 0x0, 0x8}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000d40)={0x52, 0x0, 'client1\x00', 0x0, "2cd367818b4014ff", "859e92f1fec3484604734b1d43209426c1bd711b93efc2c4d28f902e94f8e647"}) 2.778408819s ago: executing program 1 (id=848): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000330001002bbd7000fedbdb2505000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) 2.709394349s ago: executing program 1 (id=849): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@verity_require}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x8, 0x1) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 2.708941552s ago: executing program 1 (id=850): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0xa8000, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) close_range(r0, r0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "02080a", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@routing={0x29, 0x0, 0x0, 0xad}]}}}}}, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$sequencer(r3, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x0, 0xc, 0xf, 0x9, 0x3, 0x9}, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000ff88"], 0xfdef) read$FUSE(r5, &(0x7f0000000a00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f0000002a40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) recvmsg$can_j1939(r3, &(0x7f00000008c0)={&(0x7f0000000340)=@sco={0x1f, @none}, 0x80, &(0x7f0000004b80)=[{&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000000200)=""/26, 0x1a}, {&(0x7f00000003c0)=""/167, 0xa7}, {&(0x7f0000000480)=""/220, 0xdc}, {&(0x7f0000000580)=""/233, 0xe9}, {&(0x7f0000000680)=""/95, 0x5f}, {&(0x7f0000000700)=""/227, 0xe3}, {&(0x7f0000000800)=""/46, 0x2e}, {&(0x7f0000004a80)=""/251, 0xfb}, {&(0x7f0000000840)=""/83, 0x53}], 0xa, &(0x7f0000004c40)=""/188, 0xbc}, 0x20) r8 = geteuid() write$P9_RSTATu(r3, &(0x7f00000002c0)={0x6a, 0x7d, 0x1, {{0x0, 0x4c, 0x1, 0xf, {0x9, 0x3, 0x3}, 0x8040000, 0x7, 0x401, 0xadc, 0xd, '/dev/net/tun\x00', 0x2, '/-', 0x4, ')&^(', 0x6, '\xff\xff\xff\xff\xff\xff'}, 0x9, '/dev/loop', r6, r7, r8}}, 0x6a) r9 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000f, 0x100010, r9, 0x9) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='jfs\x00', 0x186602e, &(0x7f0000000240)=']@\xd6\',+\x00o\xed\x85\f*\xec\xc73+\x92\x8f\xbb\x1cZh\xa1\x00\x00\x00\x00\x00\x00\x00\x10\xc2\x1e\xe1C\x9c5\x84*\xd59\xb8\x9e\xefiy\x8art\x9c)\xccSr\xa1\xff\xa8\x191&\xc3;\xa8\v3\xb8\xf0\x8cO>l\xfc\xf9\x18\xca\x83\xef?A\xe3TL\xd2-\xec\xaf\xb4\xc0\xd9~\xcf\x97\xbd\t.^\xe2\xf6\xcb\x8a1>\xdc\x97\xd5\xaf\ta\x1cL\xde\x86\xca\x95') 2.088916158s ago: executing program 2 (id=855): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000900)=@sack_info={0x0, 0x0, 0x40}, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x366d42, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_coalesce={0xe, 0x464, 0x2, 0x1, 0x888, 0x1, 0x7, 0x5, 0x4, 0x1, 0x7, 0x9cdd, 0x2, 0x9, 0x48000, 0xee5, 0xfff, 0x1, 0x5, 0x3, 0x200, 0x8, 0x9}}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x6e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.08717694s ago: executing program 2 (id=856): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000c80)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) (async, rerun: 32) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x85, 0x0, 0x0, 0xffffffff, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) (async) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) (async, rerun: 64) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) (rerun: 64) ioctl$UI_DEV_CREATE(r1, 0x5501) (async, rerun: 32) close_range(r2, r1, 0x2) (rerun: 32) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000980)={0xe5, {{0xa, 0x4e21, 0x2, @mcast2, 0x7fff}}, {{0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}}, 0x108) write$uinput_user_dev(r1, &(0x7f0000000500)={'syz0\x00', {0x8000, 0x7f, 0x3, 0x3}, 0x3a, [0x5, 0x1, 0x7, 0x83e, 0x5, 0xd, 0x6, 0x0, 0x7, 0x9, 0x4, 0x7, 0x1, 0x3ff, 0x3, 0xfffffff9, 0x27e8, 0xf93, 0x6, 0x3, 0x2, 0x1, 0x47dc, 0x10000, 0x4, 0x3, 0xfffffffc, 0x1, 0x0, 0x18, 0x8, 0x9, 0x190a, 0x1000, 0x23, 0x0, 0x4, 0x1, 0x1, 0x5, 0x2, 0xfd84, 0x200, 0x3, 0x6, 0x9, 0xffffffc0, 0x8, 0xe0000000, 0x5, 0x77, 0xb, 0x7, 0x5, 0x7, 0x22, 0x1, 0x7fffffff, 0x4, 0x80000000, 0xdc6, 0xfffffffc, 0x0, 0x7], [0x9, 0x1, 0x0, 0xffffc5b3, 0x2, 0x5, 0x2, 0xdc0, 0x0, 0x3, 0x2, 0x8, 0x6, 0x661b, 0x7, 0x5f, 0x7d, 0x10001, 0x2, 0x2, 0x8, 0x7, 0xbda, 0x80000000, 0x20, 0x4, 0x8, 0xfffffffc, 0x2, 0x9, 0x7fff, 0x4, 0x8, 0x6, 0x60, 0x6, 0x5, 0xfff, 0xfffffff9, 0x8, 0x6, 0xfffffffc, 0x7fffffff, 0x8, 0x8, 0x3, 0x2, 0xe14, 0x200, 0x7, 0x63, 0x8, 0x9, 0x7f, 0x3, 0xcbf, 0x200, 0x2, 0x2, 0x8, 0x3, 0x0, 0x400, 0x7], [0x9, 0x4, 0x0, 0x0, 0x6, 0x8, 0xffffff81, 0x4, 0x401, 0xb, 0x200, 0x9, 0xfe0, 0x5, 0x4, 0x40, 0xfffffff9, 0x956, 0x63, 0xb72, 0xf816, 0x57d, 0x0, 0x7, 0x1, 0x6, 0x1, 0xe9, 0x0, 0x3, 0x1, 0xfffffffb, 0x3, 0x3, 0x81, 0xf, 0x9, 0x3, 0x3cc, 0x9, 0xc, 0x800, 0x9e86, 0x31, 0x2, 0x0, 0x3, 0x7, 0x3, 0x6, 0x9, 0xe0, 0x7, 0x7f, 0x1ff, 0x6d, 0x7, 0xfffffffb, 0x1175, 0x8000, 0x11d, 0x8f9b, 0x3, 0x6], [0x9, 0x5, 0xfffffbff, 0x5, 0x6, 0x5, 0x80000001, 0x7fff, 0xff, 0x0, 0x1, 0x1, 0x6, 0xffffd529, 0x408, 0x0, 0x2f5, 0x1ff, 0x8000, 0x3, 0x7f, 0x7fffffff, 0x40000000, 0x4b1, 0x6, 0xc, 0x5, 0x5, 0x508f, 0xc6, 0x81, 0x9, 0x7ea692d0, 0x2, 0x8, 0x1d59, 0xfff, 0xe10d, 0xc, 0x40, 0x4, 0x3, 0xfff, 0xfe, 0x1, 0x3, 0x366e, 0x7, 0xfffffffc, 0x8001, 0x3, 0x3, 0x4, 0x0, 0x8, 0x0, 0x3ff, 0x6, 0x0, 0x1, 0x9, 0xffffffff, 0x7, 0x5]}, 0x45c) 2.007219548s ago: executing program 2 (id=857): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x6c) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0xb0, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x49, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x30, 0xf, [@random={0xff, 0x2a, "baf7a750654c42aef847e6d410aa3fb66ecc860c4696a377ad611c103e7fcf858650ec50863609f55dde"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00') 1.987116144s ago: executing program 2 (id=859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSKNS(r2, 0x894c, &(0x7f0000000100)={'veth1_to_team\x00', 0x600}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x4044810}, 0x0) r8 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000500)={r8, r6, r6}, &(0x7f0000000600)=""/257, 0x126, &(0x7f0000000400)={&(0x7f0000000340)={'sha1-generic\x00'}}) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000008000001410000001c0017000000090000000065616c6c657230"], 0x38}}, 0x4000000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCGSKNS(r2, 0x894c, &(0x7f0000000100)={'veth1_to_team\x00', 0x600}) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) (async) add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r5) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x4044810}, 0x0) (async) add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xffffffffffffffff) (async) keyctl$dh_compute(0x17, &(0x7f0000000500)={r8, r6, r6}, &(0x7f0000000600)=""/257, 0x126, &(0x7f0000000400)={&(0x7f0000000340)={'sha1-generic\x00'}}) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000008000001410000001c0017000000090000000065616c6c657230"], 0x38}}, 0x4000000) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) (async) 1.986635067s ago: executing program 6 (id=860): mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='omfs\x00', 0x208000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) connect$unix(r0, &(0x7f00000002c0)=@file={0xe36ed745b3302aa6, './cgroup\x00'}, 0x6e) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@sg0, r1, &(0x7f0000000240)='./cgroup\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0xc00, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002440)=ANY=[@ANYBLOB="1400000001020101000000000000000005000005e5baf0ff68318cff33477831dd51ec3fc97cc7cf5de7c08ca46beba83fc8e7b7b9468290f183578592773d2b49c9bd8c4eaee6d0a06810c563ec7028dd0bc0eefbe16b346f5fe4fe9b8e0635b9802c41a7bcb3434d5d2f541b0137b2debc7ea185d30ff1df2d74e2c138419d5d7200c5ecdb9f7ec212d8f9c877e6ffe0553eeac337fb1bda2a4220637fb0b6a4c5c5f32159806cfb6fe4343489371ead5f39f7f8bb2b8e43767afd5be1f17aee28a0f05ef1463daf63dfe0d0fb4e0e"], 0x14}, 0x1, 0x0, 0x0, 0x4811}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "427f4d05618664ecb7f952ed7667675bc32afc7ebbfea1deee1e2e520cc38c6a"}}) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x8000, 0x6) 1.898988211s ago: executing program 6 (id=861): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="000000000000409674f4d893e3484b97cd000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r2, &(0x7f00000000c0), &(0x7f0000000100)=""/237}, 0x20) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4, @default, @rose={'rose', 0x0}, 0x4, [@default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) mount(&(0x7f0000000240)=@sr0, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='gfs2\x00', 0x0, &(0x7f00000035c0)='quota') 1.71933633s ago: executing program 6 (id=862): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r3, 0x0, 0xd}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000240)={r2}) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140017eefb020000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x8084) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) 849.160716ms ago: executing program 6 (id=863): openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x400142, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x10004, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0xc) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x20000000000000, 0x40001) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f0000000180)={0x0, 0xffff0000, 0x40, '\x00', &(0x7f0000000080)=0x4}) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000940)="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", 0x175}, 0x1, 0x0, 0x0, 0x4004010}, 0x240400c5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f0000000240)="0f239f66660f388289f00fdec465640f18a80000660fc7b005003e0f005300f2a766b9550a000066b8774ae6e566ba000000000f300f20c06635010000000f22c0baf80c66b86c1a348f66efbafc0c66ed", 0x51}], 0x1, 0x74, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000040)={0x4, 0x2}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='update ecryew \x00'], 0x1a, 0xfffffffffffffffc) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r7, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000fb98e4e5ce01008400000000bbc61377dad1b9a4012000"], 0x18}], 0x1, 0x40) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = eventfd2(0x65c, 0x80000) r11 = eventfd2(0x80, 0x80801) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000100)={r10, 0x7, 0x2, r11}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1000) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xe0, 0x5, 0x6, 0xff, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x15, 0x9, 0x7f}}) 848.453798ms ago: executing program 2 (id=864): r0 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd97 HID v0.05 Device [syz1] on syz0 [ 72.529989][ T40] audit: type=1400 audit(1752478112.794:60848): avc: denied { getopt } for pid=6975 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 72.541187][ T40] audit: type=1400 audit(1752478112.804:60849): avc: denied { getopt } for pid=6975 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 72.543179][ T6974] fido_id[6974]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 72.595994][ T5951] Bluetooth: hci3: command 0x0406 tx timeout [ 72.623666][ T40] audit: type=1400 audit(1752478112.884:60850): avc: denied { getopt } for pid=6981 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.633946][ T40] audit: type=1400 audit(1752478112.894:60851): avc: denied { create } for pid=6980 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.643016][ T40] audit: type=1400 audit(1752478112.894:60852): avc: denied { connect } for pid=6980 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.649529][ T40] audit: type=1400 audit(1752478112.894:60853): avc: denied { setopt } for pid=6980 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.655645][ T40] audit: type=1400 audit(1752478112.894:60854): avc: denied { write } for pid=6980 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.735611][ T6993] program syz.0.257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.743214][ T40] audit: type=1400 audit(1752478113.014:60855): avc: denied { create } for pid=6992 comm="syz.0.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 72.793062][ T40] audit: type=1400 audit(1752478113.054:60856): avc: denied { name_bind } for pid=6997 comm="syz.1.260" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 72.803606][ T7000] netlink: 'syz.3.259': attribute type 64 has an invalid length. [ 72.806246][ T7000] netlink: 'syz.3.259': attribute type 4 has an invalid length. [ 72.808639][ T7000] netlink: 152 bytes leftover after parsing attributes in process `syz.3.259'. [ 72.894562][ T7006] netlink: 'syz.3.262': attribute type 1 has an invalid length. [ 72.898676][ T7007] netlink: 248 bytes leftover after parsing attributes in process `syz.1.260'. [ 72.915601][ T7006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.934985][ T7006] bond1: (slave gretap1): making interface the new active one [ 72.939718][ T7006] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 73.121869][ T7021] netlink: 68 bytes leftover after parsing attributes in process `syz.3.265'. [ 73.616745][ T7045] geneve2: entered promiscuous mode [ 74.005698][ T7101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8209 sclass=netlink_route_socket pid=7101 comm=syz.3.287 [ 74.015379][ T7103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7103 comm=syz.1.288 [ 74.086090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 74.106394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 74.135880][ T53] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 74.140440][ T7113] netlink: 28 bytes leftover after parsing attributes in process `syz.3.291'. [ 74.143340][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'. [ 74.264720][ T7119] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 74.268040][ T7119] macvtap0: entered allmulticast mode [ 74.270435][ T7119] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 74.277554][ T7119] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 74.280658][ T7119] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 74.295975][ T53] usb 7-1: Invalid ep0 maxpacket: 16 [ 74.454655][ T53] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 74.462569][ T7121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'. [ 74.656530][ T53] usb 7-1: Invalid ep0 maxpacket: 16 [ 74.658525][ T53] usb usb7-port1: attempt power cycle [ 74.661601][ T5956] Bluetooth: hci3: unexpected event for opcode 0x2002 [ 74.679432][ T7146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.682838][ T7146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.696022][ T7144] lo speed is unknown, defaulting to 1000 [ 74.710065][ T7148] fuse: Bad value for 'fd' [ 74.717933][ T7148] openvswitch: netlink: Flow key attr not present in new flow. [ 74.796044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.967087][ T7155] kvm: kvm [7153]: vcpu0, guest rIP: 0x1b7 Unhandled WRMSR(0xc2) = 0x69f7 [ 74.972106][ T7155] kvm: kvm [7153]: vcpu0, guest rIP: 0x1b7 Unhandled WRMSR(0xc1) = 0xae9e [ 75.015977][ T53] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 75.047417][ T53] usb 7-1: Invalid ep0 maxpacket: 16 [ 75.186025][ T53] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 75.206540][ T53] usb 7-1: Invalid ep0 maxpacket: 16 [ 75.209054][ T53] usb usb7-port1: unable to enumerate USB device [ 75.881149][ T7173] netlink: 'syz.0.309': attribute type 7 has an invalid length. [ 75.941250][ T7173] Mount JFS Failure: -22 [ 75.987766][ T7180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.990950][ T7180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.246070][ T5845] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 76.950179][ T7217] team0 (unregistering): Port device team_slave_0 removed [ 76.959233][ T7217] team0 (unregistering): Port device team_slave_1 removed [ 77.647943][ T7211] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 77.650104][ T7211] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 77.657107][ T7211] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 77.666997][ T7211] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 77.669531][ T7211] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 77.674254][ T7211] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 77.686741][ T7211] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 77.689357][ T7211] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 77.694240][ T7211] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 77.701447][ T7211] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 77.703965][ T7211] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 78.461125][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 78.461139][ T40] audit: type=1400 audit(1752478118.724:60879): avc: denied { getattr } for pid=7243 comm="syz.3.330" name="/" dev="9p" ino=35913926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 78.590677][ T40] audit: type=1400 audit(1752478118.854:60880): avc: denied { override_creds } for pid=7246 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 78.639025][ T40] audit: type=1400 audit(1752478118.904:60881): avc: denied { shutdown } for pid=7246 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.785892][ T40] audit: type=1400 audit(1752478119.044:60882): avc: denied { setattr } for pid=5961 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.930326][ T40] audit: type=1400 audit(1752478119.194:60883): avc: denied { execute } for pid=7255 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 78.937965][ T40] audit: type=1400 audit(1752478119.194:60884): avc: denied { execute_no_trans } for pid=7255 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 79.003582][ T7258] 9pnet_fd: Insufficient options for proto=fd [ 79.087835][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.088096][ T40] audit: type=1400 audit(1752478119.354:60885): avc: denied { ioctl } for pid=7264 comm="syz-executor" path="socket:[16503]" dev="sockfs" ino=16503 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.093384][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.103877][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.108189][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.111064][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.147787][ T7264] lo speed is unknown, defaulting to 1000 [ 79.245276][ T7264] chnl_net:caif_netlink_parms(): no params data found [ 79.258558][ T7278] __nla_validate_parse: 37 callbacks suppressed [ 79.258573][ T7278] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.342'. [ 79.267755][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.342'. [ 79.343229][ T7264] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.346524][ T7264] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.349595][ T7264] bridge_slave_0: entered allmulticast mode [ 79.353453][ T7264] bridge_slave_0: entered promiscuous mode [ 79.360203][ T7264] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.363151][ T7264] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.366307][ T7264] bridge_slave_1: entered allmulticast mode [ 79.370136][ T7264] bridge_slave_1: entered promiscuous mode [ 79.422171][ T7264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.428968][ T7264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.474540][ T7283] netlink: 'syz.2.343': attribute type 2 has an invalid length. [ 79.477789][ T7283] netlink: 784 bytes leftover after parsing attributes in process `syz.2.343'. [ 79.502461][ T7264] team0: Port device team_slave_0 added [ 79.506064][ T7264] team0: Port device team_slave_1 added [ 79.550663][ T7264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.552266][ T7288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46867 sclass=netlink_route_socket pid=7288 comm=syz.1.345 [ 79.553135][ T7264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.560797][ T40] audit: type=1400 audit(1752478119.824:60886): avc: denied { setopt } for pid=7287 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 79.567204][ T7264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.571922][ T40] audit: type=1400 audit(1752478119.824:60887): avc: denied { connect } for pid=7287 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 79.576097][ T7264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.576105][ T7264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.576123][ T7264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.627430][ T7264] hsr_slave_0: entered promiscuous mode [ 79.629983][ T7264] hsr_slave_1: entered promiscuous mode [ 79.632089][ T7264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.634474][ T7264] Cannot create hsr debugfs directory [ 79.649130][ T7290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 79.718452][ T63] Bluetooth: hci3: command 0x0406 tx timeout [ 79.718508][ T5951] Bluetooth: hci2: command 0x0c1a tx timeout [ 79.721078][ T5959] Bluetooth: hci0: command 0x0c1a tx timeout [ 79.766587][ T53] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 79.830221][ T7305] netlink: 56 bytes leftover after parsing attributes in process `syz.1.350'. [ 79.830932][ T7264] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.838642][ T7264] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.844551][ T7264] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.849155][ T7264] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.898936][ T7264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.909921][ T7264] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.914767][ T6746] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.917059][ T6746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.926115][ T53] usb 7-1: Using ep0 maxpacket: 32 [ 79.928545][ T6736] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.929912][ T53] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 79.930900][ T6736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.933375][ T53] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 79.939559][ T53] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 79.942878][ T53] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 79.947217][ T53] usb 7-1: config 0 interface 0 has no altsetting 0 [ 79.950850][ T53] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 79.953748][ T53] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 79.963396][ T53] usb 7-1: Product: syz [ 79.964898][ T53] usb 7-1: Manufacturer: syz [ 79.972200][ T53] usb 7-1: SerialNumber: syz [ 79.974873][ T53] usb 7-1: config 0 descriptor?? [ 79.981946][ T53] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 79.992491][ T53] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 80.030918][ T40] audit: type=1400 audit(1752478120.294:60888): avc: denied { read } for pid=7322 comm="syz.1.353" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 80.089432][ T7264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.250449][ T53] usb 7-1: USB disconnect, device number 8 [ 80.251187][ T7264] veth0_vlan: entered promiscuous mode [ 80.252317][ C2] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 80.258540][ T7264] veth1_vlan: entered promiscuous mode [ 80.259585][ T53] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 80.282543][ T7264] veth0_macvtap: entered promiscuous mode [ 80.286820][ T7264] veth1_macvtap: entered promiscuous mode [ 80.297742][ T7264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.303944][ T7264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.308711][ T7264] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.311361][ T7264] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.314064][ T7264] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.317013][ T7264] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.362470][ T6756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.369379][ T6756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.384946][ T6756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.389311][ T6756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.481052][ T7342] netlink: 'syz.4.355': attribute type 10 has an invalid length. [ 80.481091][ T7341] netlink: 'syz.4.355': attribute type 10 has an invalid length. [ 80.484911][ T7342] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 80.491302][ T7341] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 80.562458][ T7343] netlink: 20 bytes leftover after parsing attributes in process `syz.4.355'. [ 81.004028][ T7355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.009503][ T7355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.155986][ T5956] Bluetooth: hci1: command tx timeout [ 81.228731][ T7365] gfs2: Unknown parameter 'norecoveryontrol' [ 81.230861][ T7364] gfs2: Unknown parameter 'norecoveryontrol' [ 81.239764][ T7364] netlink: 76 bytes leftover after parsing attributes in process `syz.2.361'. [ 81.266048][ T7365] netlink: 76 bytes leftover after parsing attributes in process `syz.2.361'. [ 81.563974][ T5956] Bluetooth: hci2: unexpected event for opcode 0x018f [ 81.630286][ T7377] cgroup2: Unknown parameter 'memor' [ 81.638032][ T837] cfg80211: failed to load regulatory.db [ 81.684380][ T7381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.787680][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.368'. [ 81.795937][ T7388] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 81.797716][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.800390][ T5956] Bluetooth: hci3: command 0x0406 tx timeout [ 81.801879][ T7388] netlink: 120 bytes leftover after parsing attributes in process `syz.4.368'. [ 81.810044][ T7388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.825154][ T7388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.423851][ T7393] netlink: 68 bytes leftover after parsing attributes in process `syz.4.370'. [ 82.531613][ T7398] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 82.535305][ T7398] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 82.626974][ T7404] xt_CT: You must specify a L4 protocol and not use inversions on it [ 82.698753][ T7408] overlayfs: overlapping lowerdir path [ 82.728039][ T7410] tmpfs: Bad value for 'mpol' [ 82.772135][ T7416] binder: Bad value for 'max' [ 82.853098][ T7427] macsec0: entered promiscuous mode [ 82.854943][ T7427] macsec0: entered allmulticast mode [ 82.856978][ T7427] veth1_macvtap: entered allmulticast mode [ 82.890856][ T7431] misc userio: Begin command sent, but we're already running [ 83.236082][ T5956] Bluetooth: hci1: command tx timeout [ 83.586034][ T839] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 83.758909][ T839] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.762132][ T839] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.767849][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 83.767858][ T40] audit: type=1400 audit(1752478124.024:60912): avc: denied { execmem } for pid=7447 comm="syz.1.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 83.768572][ T839] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 83.781825][ T839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.783002][ T7448] pim6reg: entered allmulticast mode [ 83.788746][ T7448] pim6reg: left allmulticast mode [ 83.842790][ T40] audit: type=1400 audit(1752478124.104:60913): avc: denied { map } for pid=7447 comm="syz.1.389" path="socket:[16868]" dev="sockfs" ino=16868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.875997][ T5956] Bluetooth: hci3: command 0x0406 tx timeout [ 83.876144][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.884671][ T40] audit: type=1400 audit(1752478124.144:60914): avc: denied { read } for pid=7450 comm="syz.4.390" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 83.892766][ T40] audit: type=1400 audit(1752478124.144:60915): avc: denied { open } for pid=7450 comm="syz.4.390" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 83.900426][ T40] audit: type=1400 audit(1752478124.154:60916): avc: denied { ioctl } for pid=7450 comm="syz.4.390" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 83.923682][ T40] audit: type=1400 audit(1752478124.184:60917): avc: denied { read write } for pid=7450 comm="syz.4.390" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 83.969410][ T40] audit: type=1400 audit(1752478124.184:60918): avc: denied { open } for pid=7450 comm="syz.4.390" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 83.998078][ T839] usb 7-1: usb_control_msg returned -32 [ 84.000011][ T839] usbtmc 7-1:16.0: can't read capabilities [ 84.032561][ T7453] delete_channel: no stack [ 84.074440][ T40] audit: type=1400 audit(1752478124.334:60919): avc: denied { create } for pid=7459 comm="syz.1.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 84.112872][ T7465] netlink: 'syz.1.394': attribute type 11 has an invalid length. [ 84.133037][ T7465] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 84.133762][ T7469] bridge_slave_1: left allmulticast mode [ 84.144128][ T7469] bridge_slave_1: left promiscuous mode [ 84.148651][ T7469] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.158129][ T7469] bridge_slave_0: left allmulticast mode [ 84.159993][ T7469] bridge_slave_0: left promiscuous mode [ 84.161910][ T7469] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.341770][ T7476] geneve2: entered promiscuous mode [ 84.343568][ T7476] geneve2: entered allmulticast mode [ 84.350322][ T7480] binder: 7442:7480 ioctl c0306201 200000000080 returned -14 [ 84.376019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.404228][ T40] audit: type=1400 audit(1752478124.664:60920): avc: denied { map } for pid=7484 comm="syz.1.399" path="socket:[17992]" dev="sockfs" ino=17992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.414051][ T40] audit: type=1400 audit(1752478124.664:60921): avc: denied { read accept } for pid=7484 comm="syz.1.399" path="socket:[17992]" dev="sockfs" ino=17992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.466326][ T7494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=7494 comm=syz.1.401 [ 84.470529][ T7494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=7494 comm=syz.1.401 [ 84.512233][ T63] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 84.517813][ T7496] syz.1.403: attempt to access beyond end of device [ 84.517813][ T7496] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 84.930912][ T5956] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.934046][ T5956] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.937172][ T5956] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.940401][ T5956] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.943168][ T5956] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.973759][ T7511] lo speed is unknown, defaulting to 1000 [ 85.014606][ T7516] sctp: [Deprecated]: syz.1.412 (pid 7516) Use of int in maxseg socket option. [ 85.014606][ T7516] Use struct sctp_assoc_value instead [ 85.060670][ T7511] chnl_net:caif_netlink_parms(): no params data found [ 85.139846][ T7511] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.142353][ T7511] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.144905][ T7511] bridge_slave_0: entered allmulticast mode [ 85.148142][ T7511] bridge_slave_0: entered promiscuous mode [ 85.152360][ T7511] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.154878][ T7511] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.157383][ T7511] bridge_slave_1: entered allmulticast mode [ 85.160516][ T7511] bridge_slave_1: entered promiscuous mode [ 85.211192][ T7511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.216046][ T7511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.224745][ T7530] tmpfs: Bad value for 'mpol' [ 85.261582][ T7511] team0: Port device team_slave_0 added [ 85.267263][ T7511] team0: Port device team_slave_1 added [ 85.310976][ T7511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.313287][ T7511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.321728][ T7511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.327040][ T7511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.329203][ T7511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.329225][ T7511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.394727][ T7511] hsr_slave_0: entered promiscuous mode [ 85.398109][ T7511] hsr_slave_1: entered promiscuous mode [ 85.401125][ T7511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.404263][ T7511] Cannot create hsr debugfs directory [ 85.561482][ T7511] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.566186][ T7511] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.570226][ T7511] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.574648][ T7511] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.620086][ T7511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.630863][ T7511] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.645499][ T6756] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.649350][ T6756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.657591][ T6756] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.660612][ T6756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.784583][ T7511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.924717][ T7511] veth0_vlan: entered promiscuous mode [ 85.929724][ T7511] veth1_vlan: entered promiscuous mode [ 85.948123][ T7511] veth0_macvtap: entered promiscuous mode [ 85.953602][ T7511] veth1_macvtap: entered promiscuous mode [ 85.970181][ T7511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.979253][ T7511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.983643][ T7511] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.986473][ T7511] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.989994][ T7511] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.992679][ T7511] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.031459][ T6736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.035980][ T6736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.053767][ T6736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.058933][ T6736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.368385][ T838] usb 7-1: USB disconnect, device number 9 [ 86.430748][ T7589] __nla_validate_parse: 6 callbacks suppressed [ 86.430763][ T7589] netlink: 20 bytes leftover after parsing attributes in process `syz.5.425'. [ 86.433632][ T7590] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.427'. [ 86.480212][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.5.429'. [ 86.490657][ T7592] IPv6: sit1: Disabled Multicast RS [ 86.491960][ T7594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.428'. [ 86.494528][ T7592] sit1: entered allmulticast mode [ 86.505030][ T7594] netlink: 'syz.2.428': attribute type 10 has an invalid length. [ 86.513216][ T7594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.518573][ T7594] team0: Failed to send port change of device bond0 via netlink (err -105) [ 86.532169][ T7594] team0: Failed to send options change via netlink (err -105) [ 86.534766][ T7594] team0: Port device bond0 added [ 86.538679][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.428'. [ 86.588683][ T7602] xt_hashlimit: size too large, truncated to 1048576 [ 86.657202][ T7607] xt_hashlimit: max too large, truncated to 1048576 [ 86.659759][ T7607] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 86.736876][ T7613] xt_hashlimit: size too large, truncated to 1048576 [ 86.737943][ T7611] xt_hashlimit: size too large, truncated to 1048576 [ 86.996052][ T63] Bluetooth: hci1: command tx timeout [ 87.077966][ T6031] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 87.227219][ T6031] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 87.230745][ T6031] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 87.233827][ T6031] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 87.237954][ T6031] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.243595][ T7628] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 87.249804][ T6031] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 87.476467][ T6031] usb 10-1: USB disconnect, device number 2 [ 87.558785][ T7650] cdrom: dropping to single frame dma [ 87.712068][ T7654] lo speed is unknown, defaulting to 1000 [ 87.784779][ T7658] program syz.2.450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.931868][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 87.934295][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 87.934949][ T7668] netlink: 14220 bytes leftover after parsing attributes in process `syz.5.453'. [ 87.936777][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 87.941973][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 87.944356][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 87.950259][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 87.952678][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 87.955311][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 87.958972][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 87.961402][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 87.963851][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 87.966508][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 87.968890][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 87.971261][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 87.973617][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 87.976315][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 87.979087][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 87.981464][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 87.983839][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 87.986543][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 87.988186][ T7674] lo speed is unknown, defaulting to 1000 [ 87.988940][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 87.993176][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 87.995586][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 87.998316][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 88.002569][ T7670] ipt_REJECT: TCP_RESET invalid for non-tcp [ 88.005142][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 88.008554][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 88.011319][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 88.014517][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 88.018176][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 88.021310][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 88.024486][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 88.028702][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 88.031872][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 88.035046][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 88.045990][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 88.049323][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 88.052615][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 88.056534][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 88.059967][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 88.062988][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 88.070889][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 88.074196][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 88.077803][ T838] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 88.083786][ T838] hid-generic 0000:007F:FFFFFFFE.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 88.131403][ T7679] fido_id[7679]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 88.168366][ T7682] block device autoloading is deprecated and will be removed. [ 88.191570][ T7687] lo speed is unknown, defaulting to 1000 [ 88.256792][ T7694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.261175][ T7694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.327315][ T7697] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 88.616583][ T5845] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 88.778689][ T5845] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 88.781680][ T5845] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.785182][ T5845] usb 10-1: Product: syz [ 88.787328][ T5845] usb 10-1: Manufacturer: syz [ 88.788921][ T5845] usb 10-1: SerialNumber: syz [ 88.795783][ T5845] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 88.817992][ T5845] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 88.906892][ T7678] overlayfs: statfs failed on './file0' [ 89.022471][ T7701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.025482][ T7701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.049173][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 89.049183][ T40] audit: type=1400 audit(1752478129.314:60953): avc: denied { append } for pid=7715 comm="syz.2.467" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 89.050591][ T7714] SELinux: policydb magic number 0x6e616c77 does not match expected magic number 0xf97cff8c [ 89.062456][ T7714] SELinux: failed to load policy [ 89.062837][ T7717] SELinux: policydb magic number 0x6e616c77 does not match expected magic number 0xf97cff8c [ 89.062860][ T7717] SELinux: failed to load policy [ 89.076310][ T63] Bluetooth: hci1: command tx timeout [ 89.101823][ T40] audit: type=1400 audit(1752478129.364:60954): avc: denied { watch_mount } for pid=7715 comm="syz.2.467" path="/113" dev="tmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 89.106793][ T7716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.467'. [ 89.207890][ T40] audit: type=1400 audit(1752478129.474:60955): avc: denied { module_load } for pid=7719 comm="syz.2.468" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=19505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 89.221106][ T7720] Invalid ELF header magic: != ELF [ 89.580710][ T7724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.583638][ T7724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.886025][ T5845] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 89.888378][ T5845] ath9k_htc: Failed to initialize the device [ 89.903685][ T40] audit: type=1400 audit(1752478130.164:60956): avc: denied { mount } for pid=7729 comm="syz.1.471" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 89.906528][ T5845] usb 10-1: ath9k_htc: USB layer deinitialized [ 89.921599][ T5845] usb 10-1: USB disconnect, device number 3 [ 89.930312][ T40] audit: type=1400 audit(1752478130.194:60957): avc: denied { unmount } for pid=7729 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 90.347641][ T7738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.474'. [ 90.405990][ T838] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 90.455138][ T7744] sp0: Synchronizing with TNC [ 90.555979][ T838] usb 7-1: Using ep0 maxpacket: 32 [ 90.558891][ T838] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 90.561386][ T838] usb 7-1: config 0 has no interface number 0 [ 90.564786][ T838] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 90.568806][ T838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.571284][ T838] usb 7-1: Product: syz [ 90.572604][ T838] usb 7-1: Manufacturer: syz [ 90.574107][ T838] usb 7-1: SerialNumber: syz [ 90.582464][ T838] usb 7-1: config 0 descriptor?? [ 90.586221][ T838] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 90.588958][ T838] usb 7-1: selecting invalid altsetting 1 [ 90.590787][ T838] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 90.599943][ T838] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 90.603805][ T838] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 90.607877][ T838] usb 7-1: media controller created [ 90.619801][ T838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.678477][ T7756] xt_hashlimit: max too large, truncated to 1048576 [ 90.681176][ T7756] xt_bpf: check failed: parse error [ 90.864236][ T7768] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 90.871873][ T6761] Bluetooth: hci4: Frame reassembly failed (-84) [ 91.155934][ T5956] Bluetooth: hci1: command tx timeout [ 91.269705][ T1147] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.333457][ T1147] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.417493][ T1147] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.519259][ T40] audit: type=1400 audit(1752478131.784:60958): avc: denied { shutdown } for pid=7769 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.547385][ T1147] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.719828][ T838] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 91.723678][ T838] zl10353_read_register: readreg error (reg=127, ret==-110) [ 91.736560][ T7735] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 91.767752][ T7772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.770536][ T7772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.773962][ T838] usb 7-1: USB disconnect, device number 10 [ 91.856456][ T7775] Invalid/unusable pipe [ 91.857497][ T7774] Invalid/unusable pipe [ 91.912393][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.921260][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.927197][ T1147] bond0 (unregistering): Released all slaves [ 91.943117][ T7779] netlink: 24 bytes leftover after parsing attributes in process `syz.2.486'. [ 92.022205][ T7781] devpts: Unknown parameter '}' [ 92.022230][ T40] audit: type=1400 audit(1752478132.294:60959): avc: denied { remount } for pid=7780 comm="syz.2.487" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 92.032267][ T40] audit: type=1400 audit(1752478132.294:60960): avc: denied { map } for pid=7780 comm="syz.2.487" path="/dev/random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 92.066760][ T40] audit: type=1400 audit(1752478132.324:60961): avc: denied { write } for pid=7787 comm="syz.2.488" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.075516][ T40] audit: type=1400 audit(1752478132.334:60962): avc: denied { append } for pid=7787 comm="syz.2.488" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.251084][ T1147] hsr_slave_0: left promiscuous mode [ 92.253331][ T1147] hsr_slave_1: left promiscuous mode [ 92.255460][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.258518][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.261388][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.263795][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.287267][ T1147] veth1_macvtap: left promiscuous mode [ 92.289166][ T1147] veth0_macvtap: left promiscuous mode [ 92.290961][ T1147] veth1_vlan: left promiscuous mode [ 92.292736][ T1147] veth0_vlan: left promiscuous mode [ 92.316145][ T53] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 92.477517][ T53] usb 7-1: Using ep0 maxpacket: 8 [ 92.487503][ T53] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.491603][ T53] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 92.495560][ T53] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 92.499492][ T53] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.504862][ T53] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.509674][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.575267][ T5956] Bluetooth: hci0: unexpected event for opcode 0x0428 [ 92.715170][ T53] usb 7-1: GET_CAPABILITIES returned 0 [ 92.717213][ T53] usbtmc 7-1:16.0: can't read capabilities [ 92.916405][ T5956] Bluetooth: hci4: command 0x1003 tx timeout [ 92.916433][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 92.984632][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 93.087316][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 93.236127][ T63] Bluetooth: hci1: command tx timeout [ 93.270870][ T7805] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 93.400487][ T7808] kvm: pic: non byte read [ 93.668419][ T6031] usb 7-1: USB disconnect, device number 11 [ 93.804130][ T7814] netlink: 224 bytes leftover after parsing attributes in process `syz.5.496'. [ 93.938701][ T7821] fuse: Bad value for 'fd' [ 93.967452][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 93.969883][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 93.972272][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 93.974682][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 93.984729][ T7824] overlay: Bad value for 'metacopy' [ 93.996034][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 93.999034][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.001451][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.003903][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.007493][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.010197][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.012714][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.015113][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.019031][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.021432][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.023839][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.026495][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.029862][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.032292][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.034697][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.037679][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.040127][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.042503][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.044963][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.047653][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.051144][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.052413][ T5956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.053533][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.053548][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.053560][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.053573][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.053585][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.059218][ T5956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.061296][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.064703][ T5956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.066155][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.070877][ T5956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.071169][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.073910][ T5956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.075660][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.088095][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.090570][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.093018][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.095488][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.097957][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.098997][ T7825] lo speed is unknown, defaulting to 1000 [ 94.100830][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.104571][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.108416][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.111203][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0 [ 94.119675][ T6031] hid-generic 0000:007F:FFFFFFFE.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 94.150535][ T7828] fido_id[7828]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 94.192493][ T7825] chnl_net:caif_netlink_parms(): no params data found [ 94.282600][ T6745] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.337429][ T7825] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.339867][ T7825] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.342234][ T7825] bridge_slave_0: entered allmulticast mode [ 94.347236][ T7825] bridge_slave_0: entered promiscuous mode [ 94.351333][ T7825] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.353582][ T7825] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.355911][ T7825] bridge_slave_1: entered allmulticast mode [ 94.358536][ T7825] bridge_slave_1: entered promiscuous mode [ 94.392397][ T7825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.403924][ T6745] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.412894][ T7825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.454898][ T7825] team0: Port device team_slave_0 added [ 94.459906][ T7825] team0: Port device team_slave_1 added [ 94.467379][ T7843] netlink: 36 bytes leftover after parsing attributes in process `syz.2.503'. [ 94.471176][ T7843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.503'. [ 94.474935][ T7843] netlink: 36 bytes leftover after parsing attributes in process `syz.2.503'. [ 94.478864][ T7843] netlink: 36 bytes leftover after parsing attributes in process `syz.2.503'. [ 94.514256][ T6745] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.522773][ T7825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.525649][ T7825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.536967][ T7825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.542526][ T7825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.544972][ T7825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.554397][ T7825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.615605][ T6745] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.626139][ T7825] hsr_slave_0: entered promiscuous mode [ 94.628872][ T7825] hsr_slave_1: entered promiscuous mode [ 94.631735][ T7825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.634948][ T7825] Cannot create hsr debugfs directory [ 94.794531][ T6745] bridge_slave_1: left allmulticast mode [ 94.796793][ T6745] bridge_slave_1: left promiscuous mode [ 94.799443][ T6745] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.804384][ T6745] bridge_slave_0: left allmulticast mode [ 94.806714][ T6745] bridge_slave_0: left promiscuous mode [ 94.808497][ T6745] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.902050][ T7859] binder: 7858:7859 ioctl 4038ae7a 2000000000c0 returned -22 [ 95.080933][ T6745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.090880][ T6745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.100334][ T6745] bond0 (unregistering): Released all slaves [ 95.110543][ T6745] bond1 (unregistering): Released all slaves [ 95.153150][ T7867] ata1.00: invalid multi_count 1 ignored [ 95.181657][ T7825] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 95.187722][ T7825] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 95.193018][ T7825] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 95.198692][ T7825] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 95.246936][ T7876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1386 sclass=netlink_route_socket pid=7876 comm=syz.5.511 [ 95.256168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.287732][ T7825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.302759][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 95.302775][ T40] audit: type=1400 audit(1752478135.564:60966): avc: denied { create } for pid=7877 comm="syz.5.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 95.304011][ T7878] netlink: 72 bytes leftover after parsing attributes in process `syz.5.512'. [ 95.305434][ T40] audit: type=1400 audit(1752478135.564:60967): avc: denied { write } for pid=7877 comm="syz.5.512" path="socket:[21969]" dev="sockfs" ino=21969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 95.407487][ T7825] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.414430][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.416733][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.439456][ T7883] sp0: Synchronizing with TNC [ 95.446558][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.449595][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.518596][ T7892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.516'. [ 95.523425][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'. [ 95.603685][ T6745] hsr_slave_0: left promiscuous mode [ 95.608353][ T6745] hsr_slave_1: left promiscuous mode [ 95.610387][ T6745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.612718][ T6745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.616144][ T6745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.618530][ T6745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.638466][ T6745] veth1_macvtap: left promiscuous mode [ 95.640259][ T6745] veth0_macvtap: left promiscuous mode [ 95.642719][ T6745] veth1_vlan: left promiscuous mode [ 95.644436][ T6745] veth0_vlan: left promiscuous mode [ 95.808714][ T40] audit: type=1400 audit(1752478136.074:60968): avc: denied { open } for pid=7908 comm="syz.1.520" path="/dev/ptyq6" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 95.865177][ T7909] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 96.121157][ T63] Bluetooth: hci3: command tx timeout [ 96.178665][ T5956] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 96.179541][ T7926] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 96.253111][ T7924] /dev/sr0: Can't open blockdev [ 96.313403][ T40] audit: type=1400 audit(1752478136.574:60969): avc: denied { read } for pid=7922 comm="syz.2.524" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 96.321113][ T40] audit: type=1400 audit(1752478136.574:60970): avc: denied { open } for pid=7922 comm="syz.2.524" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 96.328986][ T40] audit: type=1400 audit(1752478136.584:60971): avc: denied { ioctl } for pid=7922 comm="syz.2.524" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 96.975738][ T7825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.135279][ T7825] veth0_vlan: entered promiscuous mode [ 97.149863][ T7825] veth1_vlan: entered promiscuous mode [ 97.165620][ T7825] veth0_macvtap: entered promiscuous mode [ 97.169347][ T7825] veth1_macvtap: entered promiscuous mode [ 97.177986][ T7825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.184865][ T7825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.190030][ T7825] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.192971][ T7825] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.195738][ T7825] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.198786][ T7825] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.255661][ T40] audit: type=1400 audit(1752478137.514:60972): avc: denied { write } for pid=7956 comm="syz.2.528" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.281334][ T6744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.283765][ T6744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.310887][ T40] audit: type=1800 audit(1752478137.574:60973): pid=7959 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.531" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 97.324459][ T6736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.329232][ T6736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.342635][ T40] audit: type=1400 audit(1752478137.604:60974): avc: denied { add_name } for pid=7962 comm="syz.2.532" name="control" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.350150][ T40] audit: type=1400 audit(1752478137.614:60975): avc: denied { create } for pid=7962 comm="syz.2.532" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 97.390762][ T6036] IPVS: starting estimator thread 0... [ 97.399793][ T7973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.403490][ T7973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.407644][ T7973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.412282][ T7973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.420151][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.534'. [ 97.421942][ T7973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.427744][ T7973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.488921][ T7970] IPVS: using max 43 ests per chain, 103200 per kthread [ 97.660443][ T8005] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.806901][ T53] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 97.811198][ T8018] netlink: 88 bytes leftover after parsing attributes in process `syz.1.546'. [ 97.894376][ T5956] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 97.899579][ T8020] sp0: Synchronizing with TNC [ 97.906099][ T8023] openvswitch: netlink: EtherType 0 is less than min 600 [ 97.906919][ T8024] sctp: [Deprecated]: syz.1.548 (pid 8024) Use of int in max_burst socket option deprecated. [ 97.906919][ T8024] Use struct sctp_assoc_value instead [ 97.946345][ T8027] netlink: 76 bytes leftover after parsing attributes in process `syz.1.549'. [ 97.949424][ T8026] netlink: 'syz.1.549': attribute type 10 has an invalid length. [ 97.958860][ T8026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.962679][ T8026] team0: Port device bond0 added [ 97.968629][ T53] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.975684][ T53] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.981311][ T53] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.985279][ T53] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.016488][ T8030] team0: Port device bond0 removed [ 98.196031][ T5956] Bluetooth: hci4: command 0x1003 tx timeout [ 98.197549][ T5959] Bluetooth: hci3: command tx timeout [ 98.197568][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 98.197711][ T53] usb 11-1: GET_CAPABILITIES returned 0 [ 98.197744][ T53] usbtmc 11-1:16.0: can't read capabilities [ 98.291189][ T8049] Invalid ELF header magic: != ELF [ 98.307170][ T8049] Invalid ELF header magic: != ELF [ 98.322895][ T8049] Invalid ELF header magic: != ELF [ 98.338582][ T8049] Invalid ELF header magic: != ELF [ 98.354017][ T8049] Invalid ELF header magic: != ELF [ 98.369950][ T8049] Invalid ELF header magic: != ELF [ 98.385317][ T8049] Invalid ELF header magic: != ELF [ 98.400529][ T7992] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 98.401045][ T8049] Invalid ELF header magic: != ELF [ 98.413430][ T837] usb 11-1: USB disconnect, device number 2 [ 98.419303][ T8049] Invalid ELF header magic: != ELF [ 98.434844][ T8049] Invalid ELF header magic: != ELF [ 98.452643][ T8049] Invalid ELF header magic: != ELF [ 98.468300][ T8049] Invalid ELF header magic: != ELF [ 98.483979][ T8049] Invalid ELF header magic: != ELF [ 98.501161][ T8049] Invalid ELF header magic: != ELF [ 98.506899][ T8059] netlink: 16 bytes leftover after parsing attributes in process `syz.6.559'. [ 98.519133][ T8049] Invalid ELF header magic: != ELF [ 98.535179][ T8049] Invalid ELF header magic: != ELF [ 98.547030][ T8059] netlink: 'syz.6.559': attribute type 39 has an invalid length. [ 98.552656][ T8049] Invalid ELF header magic: != ELF [ 98.571630][ T8049] Invalid ELF header magic: != ELF [ 98.588634][ T8049] Invalid ELF header magic: != ELF [ 98.604891][ T8049] Invalid ELF header magic: != ELF [ 98.620734][ T8049] Invalid ELF header magic: != ELF [ 98.639215][ T8049] Invalid ELF header magic: != ELF [ 98.672560][ T8049] Invalid ELF header magic: != ELF [ 98.689159][ T8049] Invalid ELF header magic: != ELF [ 98.705670][ T8049] Invalid ELF header magic: != ELF [ 98.722084][ T8049] Invalid ELF header magic: != ELF [ 98.737748][ T8049] Invalid ELF header magic: != ELF [ 98.753704][ T8049] Invalid ELF header magic: != ELF [ 98.767903][ T8062] xt_l2tp: missing protocol rule (udp|l2tpip) [ 98.770206][ T8049] Invalid ELF header magic: != ELF [ 98.785889][ T8049] Invalid ELF header magic: != ELF [ 98.802300][ T8049] Invalid ELF header magic: != ELF [ 98.819533][ T8049] Invalid ELF header magic: != ELF [ 98.838161][ T8049] Invalid ELF header magic: != ELF [ 98.854571][ T8049] Invalid ELF header magic: != ELF [ 98.870221][ T8049] Invalid ELF header magic: != ELF [ 98.887087][ T8049] Invalid ELF header magic: != ELF [ 98.902558][ T8049] Invalid ELF header magic: != ELF [ 98.918910][ T8049] Invalid ELF header magic: != ELF [ 98.936652][ T8049] Invalid ELF header magic: != ELF [ 98.947706][ T8068] netlink: 9 bytes leftover after parsing attributes in process `syz.2.562'. [ 98.951392][ T8068] 0: renamed from hsr0 [ 98.953755][ T8049] Invalid ELF header magic: != ELF [ 98.956524][ T8068] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.960589][ T8068] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.964635][ T8068] 0: entered allmulticast mode [ 98.967096][ T8068] hsr_slave_0: entered allmulticast mode [ 98.969369][ T8068] hsr_slave_1: entered allmulticast mode [ 98.972330][ T8068] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 98.976422][ T8049] Invalid ELF header magic: != ELF [ 98.997194][ T8049] Invalid ELF header magic: != ELF [ 99.014580][ T8049] Invalid ELF header magic: != ELF [ 99.030542][ T8049] Invalid ELF header magic: != ELF [ 99.049175][ T8049] Invalid ELF header magic: != ELF [ 99.064801][ T8049] Invalid ELF header magic: != ELF [ 99.083116][ T8068] could not allocate digest TFM handle cryptd(blake2b-160) [ 99.097230][ T8049] Invalid ELF header magic: != ELF [ 99.230049][ T8079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.286054][ T34] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 99.324790][ T8084] netlink: 'syz.6.566': attribute type 10 has an invalid length. [ 99.330997][ T8084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.335274][ T8084] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 99.401390][ T8089] CUSE: unknown device info "<5 HID v0.05 Device [syz1] on syz0 [ 102.061700][ T8214] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 102.064739][ T8214] netlink: 'syz.1.607': attribute type 9 has an invalid length. [ 102.106235][ T40] audit: type=1400 audit(1752478142.374:60997): avc: denied { create } for pid=8216 comm="syz.1.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 102.182866][ T8228] lo speed is unknown, defaulting to 1000 [ 102.205152][ T8226] trusted_key: syz.1.610 sent an empty control message without MSG_MORE. [ 102.213647][ T8230] tipc: Started in network mode [ 102.215924][ T8230] tipc: Node identity 7f000001, cluster identity 4711 [ 102.220346][ T8230] tipc: Enabled bearer , priority 10 [ 102.316784][ T5959] block nbd5: Receive control failed (result -32) [ 102.356348][ T5959] Bluetooth: hci3: command tx timeout [ 102.371840][ T40] audit: type=1400 audit(1752478142.634:60998): avc: denied { bind } for pid=8225 comm="syz.1.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.418669][ T1927] usb 10-1: USB disconnect, device number 4 [ 102.434034][ T8181] block nbd5: shutting down sockets [ 102.511318][ T8259] syz.1.620: attempt to access beyond end of device [ 102.511318][ T8259] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 102.768289][ T8272] __nla_validate_parse: 3 callbacks suppressed [ 102.768306][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.6.624'. [ 102.774794][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.6.624'. [ 102.895361][ T8291] Illegal XDP return value 4294967274 on prog (id 95) dev syz_tun, expect packet loss! [ 103.089411][ T8304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.094951][ T8304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.228261][ T6036] tipc: Node number set to 2130706433 [ 103.289597][ T8312] mmap: syz.5.639 (8312): VmData 37466112 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 103.341522][ T8314] cgroup: No subsys list or none specified [ 103.554904][ T1147] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.628844][ T8325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8325 comm=syz.5.643 [ 103.642211][ T1147] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.703165][ T1147] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.800282][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.648'. [ 103.836488][ T1147] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.925181][ T1147] bridge_slave_1: left allmulticast mode [ 103.927067][ T1147] bridge_slave_1: left promiscuous mode [ 103.928856][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.933222][ T1147] bridge_slave_0: left allmulticast mode [ 103.935072][ T1147] bridge_slave_0: left promiscuous mode [ 103.938130][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.025996][ T8342] ucma_write: process 491 (syz.2.649) changed security contexts after opening file descriptor, this is not allowed. [ 104.061089][ T1147] bond1 (unregistering): (slave gretap1): Releasing active interface [ 104.253817][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.258069][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.262838][ T1147] bond0 (unregistering): Released all slaves [ 104.331214][ T1147] bond1 (unregistering): Released all slaves [ 104.352991][ T8339] netlink: 152 bytes leftover after parsing attributes in process `syz.6.647'. [ 104.356297][ T8339] tipc: Enabling of bearer rejected, failed to enable media [ 104.384455][ T8349] binder: BINDER_SET_CONTEXT_MGR already set [ 104.388153][ T8349] binder: 8348:8349 ioctl 4018620d 200000000040 returned -16 [ 104.391880][ T8349] binder: 8348:8349 ioctl c0306201 200000000240 returned -11 [ 104.491554][ T8351] kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 104.641344][ T1147] hsr_slave_0: left promiscuous mode [ 104.643457][ T1147] hsr_slave_1: left promiscuous mode [ 104.645408][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.648481][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.652368][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.654703][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.658738][ T8365] TCP: TCP_TX_DELAY enabled [ 104.676258][ T1147] veth1_vlan: left promiscuous mode [ 104.678056][ T1147] veth0_vlan: left promiscuous mode [ 104.697588][ T8368] futex_wake_op: syz.5.655 tries to shift op by -1; fix this program [ 104.707222][ T8361] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.709602][ T8361] IPv6: NLM_F_CREATE should be set when creating new route [ 104.711924][ T8361] IPv6: NLM_F_CREATE should be set when creating new route [ 104.714315][ T8361] IPv6: NLM_F_CREATE should be set when creating new route [ 104.717957][ T8361] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.719546][ T8365] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 105.127914][ T9] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 105.269242][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 105.278139][ T9] usb 11-1: Using ep0 maxpacket: 16 [ 105.282129][ T9] usb 11-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 105.285582][ T9] usb 11-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 105.288801][ T9] usb 11-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.293055][ T9] usb 11-1: config 1 interface 0 has no altsetting 0 [ 105.298304][ T9] usb 11-1: New USB device found, idVendor=0825, idProduct=0000, bcdDevice= 0.00 [ 105.301281][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.304907][ T9] usb 11-1: Product: syz [ 105.306513][ T9] usb 11-1: Manufacturer: syz [ 105.308079][ T9] usb 11-1: SerialNumber: syz [ 105.346119][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 105.540426][ T9] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 255 proto 1 vid 0x0825 pid 0x0000 [ 105.738489][ T8380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.742198][ T8380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.837255][ T6036] lo speed is unknown, defaulting to 1000 [ 105.844507][ T6036] infiniband syz0: ib_query_port failed (-19) [ 105.910976][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.5.662'. [ 105.916932][ T8395] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 105.919062][ T8395] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 105.922306][ T8395] vhci_hcd vhci_hcd.0: Device attached [ 105.926347][ T5959] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15 [ 105.927003][ T8395] netlink: 'syz.5.662': attribute type 10 has an invalid length. [ 105.928651][ T5959] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 105.946848][ T8395] veth0_vlan: left promiscuous mode [ 105.950341][ T8395] veth0_vlan: entered promiscuous mode [ 105.955259][ T8395] team0: Device veth0_vlan failed to register rx_handler [ 105.973821][ T8396] vhci_hcd: connection closed [ 105.976022][ T6756] vhci_hcd: stop threads [ 105.979853][ T6756] vhci_hcd: release socket [ 105.980386][ T8403] netlink: 52 bytes leftover after parsing attributes in process `syz.1.663'. [ 105.981305][ T6756] vhci_hcd: disconnect device [ 106.057793][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 106.057805][ T40] audit: type=1400 audit(1752478146.324:61009): avc: denied { execute } for pid=8412 comm="syz.1.666" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=24075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 106.099106][ T40] audit: type=1400 audit(1752478146.364:61010): avc: denied { read write } for pid=8379 comm="syz.6.659" name="lp0" dev="devtmpfs" ino=3102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 106.102574][ T8414] usblp0:failed reading printer status (-32) [ 106.108867][ T40] audit: type=1400 audit(1752478146.364:61011): avc: denied { open } for pid=8379 comm="syz.6.659" path="/dev/usb/lp0" dev="devtmpfs" ino=3102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 106.119439][ T40] audit: type=1400 audit(1752478146.364:61012): avc: denied { ioctl } for pid=8379 comm="syz.6.659" path="/dev/usb/lp0" dev="devtmpfs" ino=3102 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 106.152922][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'. [ 106.205267][ T8430] loop6: detected capacity change from 0 to 524287999 [ 106.213062][ T8430] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.217279][ T8430] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.219838][ T8430] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.222384][ T8430] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.226153][ T8430] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.229197][ T8430] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.232274][ T8430] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.234775][ T8430] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.237486][ T8430] ldm_validate_partition_table(): Disk read failed. [ 106.239633][ T8430] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.242087][ T8430] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.244679][ T8430] Dev loop6: unable to read RDB block 0 [ 106.246844][ T8430] loop6: unable to read partition table [ 106.248925][ T8430] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 106.330798][ T8434] tmpfs: Cannot change global quota limit on remount [ 106.341028][ T8430] loop6: unable to read partition table [ 106.343157][ T8430] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 106.377119][ T8437] zonefs (nbd1) ERROR: Not a zoned block device [ 106.433202][ T8438] program syz.1.672 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.450878][ T8440] tmpfs: Unknown parameter 'grpquota_block_hardlimdt' [ 106.539160][ T40] audit: type=1400 audit(1752478146.804:61013): avc: denied { read } for pid=8449 comm="syz.1.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 106.651063][ T8464] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 106.655929][ T8464] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 106.717187][ T40] audit: type=1400 audit(1752478146.974:61014): avc: denied { setopt } for pid=8465 comm="syz.1.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.777356][ T40] audit: type=1400 audit(1752478147.044:61015): avc: denied { mount } for pid=8473 comm="syz.5.683" name="/" dev="9p" ino=35913926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 106.830037][ T8476] xt_TCPMSS: Only works on TCP SYN packets [ 106.847012][ T40] audit: type=1400 audit(1752478147.114:61016): avc: denied { unmount } for pid=7511 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 106.943555][ T8482] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 106.958141][ T8482] tmpfs: Unknown parameter 'grpquota$mJ"~#_' [ 107.088873][ T8486] mkiss: ax0: crc mode is auto. [ 107.096356][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.685'. [ 107.099179][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.685'. [ 107.101871][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.685'. [ 107.127800][ T5959] Bluetooth: hci2: unexpected event for opcode 0x0411 [ 107.262796][ T40] audit: type=1400 audit(1752478147.524:61017): avc: denied { bind } for pid=8496 comm="syz.2.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 107.270039][ T40] audit: type=1400 audit(1752478147.524:61018): avc: denied { name_bind } for pid=8496 comm="syz.2.689" src=28326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 107.358847][ T8502] netlink: 'syz.2.691': attribute type 2 has an invalid length. [ 107.361262][ T8502] netlink: 'syz.2.691': attribute type 8 has an invalid length. [ 107.894372][ T34] usb 11-1: USB disconnect, device number 3 [ 107.903932][ T34] usblp0: removed [ 107.996785][ T8535] __nla_validate_parse: 2 callbacks suppressed [ 107.996801][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.6.699'. [ 108.004134][ T8534] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.112722][ T8542] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 108.117458][ T8543] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 108.609626][ T8564] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 108.613232][ T8564] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 108.675406][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.6.709'. [ 109.778627][ T8589] SELinux: policydb version 1229397902 does not match my version range 15-34 [ 109.781499][ T8589] SELinux: failed to load policy [ 110.043245][ T8606] No control pipe specified [ 110.151428][ C2] sr 2:0:0:0: [sr0] tag#3 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 110.154638][ C2] sr 2:0:0:0: [sr0] tag#3 CDB: opcode=0x96 96 43 8e ee 05 42 7e b8 ae 87 04 22 [ 110.517000][ T8613] netlink: 'syz.6.723': attribute type 27 has an invalid length. [ 110.517348][ T6746] Bluetooth: hci4: Frame reassembly failed (-84) [ 110.519778][ T8614] netlink: 'syz.6.723': attribute type 27 has an invalid length. [ 110.552564][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.556127][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.608359][ T8613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.615304][ T8613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.672222][ T8613] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.675941][ T8613] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.679467][ T8613] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.683085][ T8613] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.021709][ T8627] evm: overlay not supported [ 111.096626][ T8636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.729'. [ 111.125444][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 111.125975][ T40] audit: type=1400 audit(1752478151.384:61026): avc: denied { bind } for pid=8639 comm="syz.1.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.135607][ T40] audit: type=1400 audit(1752478151.394:61027): avc: denied { listen } for pid=8639 comm="syz.1.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.178953][ T40] audit: type=1400 audit(1752478151.444:61028): avc: denied { ioctl } for pid=8639 comm="syz.1.731" path="socket:[26073]" dev="sockfs" ino=26073 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.264722][ T8645] mkiss: ax0: crc mode is auto. [ 111.271704][ T8642] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 111.531941][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 111.998825][ T40] audit: type=1400 audit(1752478152.264:61029): avc: denied { map } for pid=8665 comm="syz.1.738" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 112.526030][ T5959] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 112.600416][ T8676] netlink: 92 bytes leftover after parsing attributes in process `syz.6.742'. [ 112.611576][ T8678] input input12: cannot allocate more than FF_MAX_EFFECTS effects [ 112.747233][ T8687] fuse: Unknown parameter 'fD' [ 112.912766][ T40] audit: type=1400 audit(1752478153.174:61030): avc: denied { lock } for pid=8693 comm="syz.2.748" path="socket:[27892]" dev="sockfs" ino=27892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.924712][ T40] audit: type=1400 audit(1752478153.184:61031): avc: denied { ioctl } for pid=8693 comm="syz.2.748" path="socket:[27895]" dev="sockfs" ino=27895 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 113.190657][ T40] audit: type=1400 audit(1752478153.454:61032): avc: granted { setsecparam } for pid=8705 comm="syz.1.754" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 113.205068][ T40] audit: type=1400 audit(1752478153.464:61033): avc: denied { write } for pid=8705 comm="syz.1.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 113.299031][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'. [ 113.304905][ T40] audit: type=1400 audit(1752478153.564:61034): avc: denied { append } for pid=8712 comm="syz.1.757" name="file0" dev="tmpfs" ino=1170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 113.313186][ T40] audit: type=1400 audit(1752478153.564:61035): avc: denied { open } for pid=8712 comm="syz.1.757" path="/213/file0" dev="tmpfs" ino=1170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 113.425368][ T8723] Cannot find del_set index 85 as target [ 113.485114][ T8730] netlink: 'syz.2.763': attribute type 29 has an invalid length. [ 113.491099][ T8730] netlink: 'syz.2.763': attribute type 29 has an invalid length. [ 113.494772][ T8730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.763'. [ 113.497870][ T8730] unsupported nla_type 58 [ 113.567799][ T8729] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 113.582669][ T8741] netlink: 'syz.1.766': attribute type 7 has an invalid length. [ 113.586314][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.766'. [ 113.667994][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.6.770'. [ 113.671761][ T8752] lo: entered allmulticast mode [ 113.679682][ T8752] dvmrp8: entered allmulticast mode [ 113.686774][ T8750] lo: left allmulticast mode [ 113.729817][ T8765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.732631][ T8765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.735614][ T8765] overlayfs: conflicting options: nfs_export=on,index=off [ 113.741274][ T8765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.884043][ T8786] netlink: 28 bytes leftover after parsing attributes in process `syz.2.780'. [ 114.288417][ T8799] binder: BC_ATTEMPT_ACQUIRE not supported [ 114.291007][ T8799] binder: 8798:8799 ioctl c0306201 200000000640 returned -22 [ 114.331791][ T8802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.784'. [ 114.334475][ T8803] netlink: 'syz.2.785': attribute type 5 has an invalid length. [ 114.335218][ T8802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.784'. [ 114.370413][ T8805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.394273][ T8807] kvm: user requested TSC rate below hardware speed [ 114.430836][ T8809] netlink: 16 bytes leftover after parsing attributes in process `syz.1.788'. [ 114.479306][ T8813] program syz.2.789 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.637529][ T8825] ocfs2: Unknown parameter 'grpqwota' [ 114.708630][ T8829] syz.6.794: attempt to access beyond end of device [ 114.708630][ T8829] nbd6: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 114.714539][ T8829] XFS (nbd6): SB validate failed with error -5. [ 114.728102][ T8837] wg2: entered promiscuous mode [ 114.730007][ T8837] wg2: entered allmulticast mode [ 114.748996][ T8839] syz.1.796: attempt to access beyond end of device [ 114.748996][ T8839] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 114.754683][ T8839] syz.1.796: attempt to access beyond end of device [ 114.754683][ T8839] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 114.794671][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.797'. [ 114.874860][ T8848] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 115.185885][ T8857] bond0: entered promiscuous mode [ 115.255628][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 115.258985][ T8861] netlink: 'syz.2.804': attribute type 21 has an invalid length. [ 115.316377][ T5959] Bluetooth: hci2: unexpected event for opcode 0x15b5 [ 115.316858][ T8863] ieee802154 phy0 wpan0: encryption failed: -22 [ 115.409259][ T5959] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 115.452495][ T8874] netlink: 'syz.2.809': attribute type 10 has an invalid length. [ 115.911604][ T8908] x_tables: ip6_tables: CT target: only valid in raw table, not ethtool [ 116.097157][ T8931] loop6: detected capacity change from 0 to 7 [ 116.103053][ T8931] Dev loop6: unable to read RDB block 7 [ 116.106884][ T8931] loop6: unable to read partition table [ 116.108864][ T8931] loop6: partition table beyond EOD, truncated [ 116.120967][ T8931] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 116.301610][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 116.301625][ T40] audit: type=1400 audit(1752478156.564:61057): avc: denied { listen } for pid=8944 comm="syz.1.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.490553][ T8959] netlink: 'syz.1.832': attribute type 62 has an invalid length. [ 116.525430][ T40] audit: type=1400 audit(1752478156.784:61058): avc: denied { write } for pid=8960 comm="syz.1.833" path="socket:[29028]" dev="sockfs" ino=29028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 116.564091][ T8964] 9p: Unknown Cache mode or invalid value  [ 116.605923][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 116.756001][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 116.759142][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.762150][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.765126][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.768382][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.772307][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 116.775048][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.976242][ T8981] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 116.982397][ T10] usb 7-1: GET_CAPABILITIES returned 0 [ 116.984153][ T10] usbtmc 7-1:16.0: can't read capabilities [ 117.177806][ T8994] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 117.190747][ T34] usb 7-1: USB disconnect, device number 14 [ 117.432352][ T40] audit: type=1400 audit(1752478157.694:61059): avc: denied { listen } for pid=9002 comm="syz.6.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.537476][ T9018] dlm: non-version read from control device 0 [ 117.649879][ T9018] dlm: non-version read from control device 8224 [ 117.920641][ T40] audit: type=1400 audit(1752478158.184:61060): avc: denied { setattr } for pid=9024 comm="syz.2.853" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 117.928049][ T40] audit: type=1400 audit(1752478158.184:61061): avc: denied { setcurrent } for pid=9024 comm="syz.2.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 117.935087][ T40] audit: type=1401 audit(1752478158.184:61062): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 118.101716][ T9039] input: syz0 as /devices/virtual/input/input14 [ 118.247630][ T9047] syzkaller0: entered promiscuous mode [ 118.249384][ T9047] syzkaller0: entered allmulticast mode [ 118.399139][ T9051] /dev/sr0: Can't open blockdev [ 118.444303][ T40] audit: type=1400 audit(1752478158.704:61063): avc: denied { create } for pid=9055 comm="syz.6.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 118.452350][ T40] audit: type=1400 audit(1752478158.714:61064): avc: denied { ioctl } for pid=9055 comm="syz.6.862" path="socket:[29802]" dev="sockfs" ino=29802 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 119.260470][ T9056] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.263892][ T9056] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.266837][ T9056] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.269776][ T9056] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.272864][ T9056] geneve2: entered promiscuous mode [ 119.304300][ T9059] xt_socket: unknown flags 0x8 [ 119.313076][ T9061] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 119.317986][ T40] audit: type=1326 audit(1752478159.584:61065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9060 comm="syz.2.864" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efec098e929 code=0x0 [ 120.196419][ T837] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 120.200244][ T837] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 120.205892][ C2] ------------[ cut here ]------------ [ 120.207698][ C2] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 120.209739][ C2] WARNING: CPU: 2 PID: 9065 at kernel/workqueue.c:2257 __queue_work+0xc9c/0x10f0 [ 120.212540][ C2] Modules linked in: [ 120.214152][ C2] CPU: 2 UID: 0 PID: 9065 Comm: syz.2.866 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 120.219101][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.222417][ C2] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 120.224680][ C2] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 c0 07 ac 8b e8 f5 16 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 56 19 38 00 90 0f 0b 90 e9 1b f6 ff [ 120.230691][ C2] RSP: 0018:ffffc90000648be8 EFLAGS: 00010082 [ 120.232570][ C2] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817af1a8 [ 120.235038][ C2] RDX: ffff8880376c4880 RSI: ffffffff817af1b5 RDI: 0000000000000001 [ 120.237477][ C2] RBP: ffff888048210970 R08: 0000000000000001 R09: 0000000000000000 [ 120.239928][ C2] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920000c918f [ 120.242379][ C2] R13: 0000000000000100 R14: ffff88810a54f178 R15: 0000000000000001 [ 120.244833][ C2] FS: 00007efec17da6c0(0000) GS:ffff8880d6913000(0000) knlGS:0000000000000000 [ 120.247613][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.249671][ C2] CR2: 00007efec17b9d58 CR3: 0000000033fbc000 CR4: 0000000000352ef0 [ 120.252138][ C2] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 120.254603][ C2] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 120.257068][ C2] Call Trace: [ 120.258130][ C2] [ 120.259007][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 120.260753][ C2] call_timer_fn+0x197/0x620 [ 120.262161][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 120.263788][ C2] ? __run_timers+0x559/0x960 [ 120.265267][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 120.267093][ C2] __run_timers+0x569/0x960 [ 120.268525][ C2] ? __pfx___run_timers+0x10/0x10 [ 120.270126][ C2] run_timer_base+0x114/0x190 [ 120.271585][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 120.273208][ C2] run_timer_softirq+0x1a/0x40 [ 120.274691][ C2] handle_softirqs+0x219/0x8e0 [ 120.276226][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 120.277868][ C2] __irq_exit_rcu+0x109/0x170 [ 120.279313][ C2] irq_exit_rcu+0x9/0x30 [ 120.280550][ C2] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 120.282321][ C2] [ 120.283307][ C2] [ 120.284245][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 120.286081][ C2] RIP: 0010:__local_bh_enable_ip+0xac/0x120 [ 120.287880][ C2] Code: 1d 89 d7 53 12 65 8b 05 82 d7 53 12 a9 00 ff ff 00 74 4d bf 01 00 00 00 e8 d1 00 0c 00 e8 6c ca 46 00 fb 65 8b 05 64 d7 53 12 <85> c0 74 52 5b 5d e9 89 4a 0e 0a 65 8b 05 ae 15 54 12 85 c0 75 9e [ 120.293678][ C2] RSP: 0018:ffffc9000580f958 EFLAGS: 00000202 [ 120.295562][ C2] RAX: 0000000080000000 RBX: 00000000fffffe01 RCX: ffffffff81c3c22f [ 120.298000][ C2] RDX: 0000000000000000 RSI: ffffffff8de32e3f RDI: ffffffff8c158f60 [ 120.300432][ C2] RBP: ffffffff89a326e2 R08: 0000000000000001 R09: 0000000000000001 [ 120.302878][ C2] R10: ffffffff90a98757 R11: 0000000000000001 R12: ffffc9000595e000 [ 120.305309][ C2] R13: ffffc9000580fab0 R14: ffff8880376c4880 R15: 1ffff92000b01f3c [ 120.307727][ C2] ? bpf_test_run+0x392/0xa70 [ 120.309188][ C2] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 120.311024][ C2] ? __local_bh_enable_ip+0xa4/0x120 [ 120.312666][ C2] bpf_test_run+0x397/0xa70 [ 120.314119][ C2] ? __pfx_bpf_test_run+0x10/0x10 [ 120.315683][ C2] ? do_csum+0x26f/0x2d0 [ 120.316999][ C2] bpf_prog_test_run_skb+0xb92/0x2280 [ 120.318641][ C2] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 120.320450][ C2] ? fput+0x70/0xf0 [ 120.321636][ C2] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 120.324022][ C2] __sys_bpf+0x1488/0x4d80 [ 120.325437][ C2] ? __pfx___sys_bpf+0x10/0x10 [ 120.326944][ C2] ? __fget_files+0x204/0x3c0 [ 120.328398][ C2] ? do_futex+0x122/0x350 [ 120.329778][ C2] ? __pfx_do_futex+0x10/0x10 [ 120.331213][ C2] ? xfd_validate_state+0x61/0x180 [ 120.332719][ C2] __x64_sys_bpf+0x78/0xc0 [ 120.334137][ C2] ? lockdep_hardirqs_on+0x7c/0x110 [ 120.335755][ C2] do_syscall_64+0xcd/0x4c0 [ 120.337184][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.339035][ C2] RIP: 0033:0x7efec098e929 [ 120.340434][ C2] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.346382][ C2] RSP: 002b:00007efec17da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 120.348955][ C2] RAX: ffffffffffffffda RBX: 00007efec0bb5fa0 RCX: 00007efec098e929 [ 120.351397][ C2] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 120.353769][ C2] RBP: 00007efec0a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 120.356141][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.358594][ C2] R13: 0000000000000000 R14: 00007efec0bb5fa0 R15: 00007ffed413bd78 [ 120.361044][ C2] [ 120.362040][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 120.364302][ C2] CPU: 2 UID: 0 PID: 9065 Comm: syz.2.866 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 120.367900][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.371181][ C2] Call Trace: [ 120.372235][ C2] [ 120.373130][ C2] dump_stack_lvl+0x3d/0x1f0 [ 120.374552][ C2] panic+0x71c/0x800 [ 120.375757][ C2] ? __pfx_panic+0x10/0x10 [ 120.377166][ C2] ? show_trace_log_lvl+0x29b/0x3e0 [ 120.378805][ C2] ? check_panic_on_warn+0x1f/0xb0 [ 120.380400][ C2] ? __queue_work+0xc9c/0x10f0 [ 120.381908][ C2] check_panic_on_warn+0xab/0xb0 [ 120.383444][ C2] __warn+0xf6/0x3c0 [ 120.384676][ C2] ? __queue_work+0xc9c/0x10f0 [ 120.386183][ C2] report_bug+0x3c3/0x580 [ 120.387539][ C2] ? __queue_work+0xc9c/0x10f0 [ 120.389043][ C2] handle_bug+0x184/0x210 [ 120.390421][ C2] exc_invalid_op+0x17/0x50 [ 120.391845][ C2] asm_exc_invalid_op+0x1a/0x20 [ 120.393377][ C2] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 120.395022][ C2] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 c0 07 ac 8b e8 f5 16 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 56 19 38 00 90 0f 0b 90 e9 1b f6 ff [ 120.400713][ C2] RSP: 0018:ffffc90000648be8 EFLAGS: 00010082 [ 120.402601][ C2] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817af1a8 [ 120.404959][ C2] RDX: ffff8880376c4880 RSI: ffffffff817af1b5 RDI: 0000000000000001 [ 120.407322][ C2] RBP: ffff888048210970 R08: 0000000000000001 R09: 0000000000000000 [ 120.409674][ C2] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920000c918f [ 120.412109][ C2] R13: 0000000000000100 R14: ffff88810a54f178 R15: 0000000000000001 [ 120.414492][ C2] ? __warn_printk+0x198/0x350 [ 120.415978][ C2] ? __warn_printk+0x1a5/0x350 [ 120.417447][ C2] ? __queue_work+0xc9b/0x10f0 [ 120.418944][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 120.420734][ C2] call_timer_fn+0x197/0x620 [ 120.422178][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 120.424331][ C2] ? __run_timers+0x559/0x960 [ 120.425751][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 120.427518][ C2] __run_timers+0x569/0x960 [ 120.428922][ C2] ? __pfx___run_timers+0x10/0x10 [ 120.430475][ C2] run_timer_base+0x114/0x190 [ 120.431910][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 120.433487][ C2] run_timer_softirq+0x1a/0x40 [ 120.434997][ C2] handle_softirqs+0x219/0x8e0 [ 120.436461][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 120.438074][ C2] __irq_exit_rcu+0x109/0x170 [ 120.439501][ C2] irq_exit_rcu+0x9/0x30 [ 120.440828][ C2] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 120.442553][ C2] [ 120.443494][ C2] [ 120.444425][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 120.446262][ C2] RIP: 0010:__local_bh_enable_ip+0xac/0x120 [ 120.448014][ C2] Code: 1d 89 d7 53 12 65 8b 05 82 d7 53 12 a9 00 ff ff 00 74 4d bf 01 00 00 00 e8 d1 00 0c 00 e8 6c ca 46 00 fb 65 8b 05 64 d7 53 12 <85> c0 74 52 5b 5d e9 89 4a 0e 0a 65 8b 05 ae 15 54 12 85 c0 75 9e [ 120.453720][ C2] RSP: 0018:ffffc9000580f958 EFLAGS: 00000202 [ 120.455536][ C2] RAX: 0000000080000000 RBX: 00000000fffffe01 RCX: ffffffff81c3c22f [ 120.457935][ C2] RDX: 0000000000000000 RSI: ffffffff8de32e3f RDI: ffffffff8c158f60 [ 120.460303][ C2] RBP: ffffffff89a326e2 R08: 0000000000000001 R09: 0000000000000001 [ 120.462699][ C2] R10: ffffffff90a98757 R11: 0000000000000001 R12: ffffc9000595e000 [ 120.465071][ C2] R13: ffffc9000580fab0 R14: ffff8880376c4880 R15: 1ffff92000b01f3c [ 120.467519][ C2] ? bpf_test_run+0x392/0xa70 [ 120.469007][ C2] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 120.471064][ C2] ? __local_bh_enable_ip+0xa4/0x120 [ 120.472840][ C2] bpf_test_run+0x397/0xa70 [ 120.474310][ C2] ? __pfx_bpf_test_run+0x10/0x10 [ 120.475892][ C2] ? do_csum+0x26f/0x2d0 [ 120.477231][ C2] bpf_prog_test_run_skb+0xb92/0x2280 [ 120.478919][ C2] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 120.480736][ C2] ? fput+0x70/0xf0 [ 120.481957][ C2] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 120.483800][ C2] __sys_bpf+0x1488/0x4d80 [ 120.485208][ C2] ? __pfx___sys_bpf+0x10/0x10 [ 120.486716][ C2] ? __fget_files+0x204/0x3c0 [ 120.488200][ C2] ? do_futex+0x122/0x350 [ 120.489564][ C2] ? __pfx_do_futex+0x10/0x10 [ 120.491066][ C2] ? xfd_validate_state+0x61/0x180 [ 120.492673][ C2] __x64_sys_bpf+0x78/0xc0 [ 120.494142][ C2] ? lockdep_hardirqs_on+0x7c/0x110 [ 120.495868][ C2] do_syscall_64+0xcd/0x4c0 [ 120.497302][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.499145][ C2] RIP: 0033:0x7efec098e929 [ 120.500491][ C2] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.506247][ C2] RSP: 002b:00007efec17da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 120.508732][ C2] RAX: ffffffffffffffda RBX: 00007efec0bb5fa0 RCX: 00007efec098e929 [ 120.511073][ C2] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 120.513449][ C2] RBP: 00007efec0a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 120.515891][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.518370][ C2] R13: 0000000000000000 R14: 00007efec0bb5fa0 R15: 00007ffed413bd78 [ 120.520803][ C2] [ 120.522438][ C2] Kernel Offset: disabled [ 120.524606][ C2] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:29:20 Registers: info registers vcpu 0 CPU#0 RAX=00000000001415f5 RBX=0000000000000000 RCX=ffffffff8b885c99 RDX=0000000000000000 RSI=ffffffff8de32e3f RDI=ffffffff8c158f60 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a98750 R15=0000000000000000 RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6713000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffa27da5f98 CR3=000000003491c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055cb1f126600 000055cb1f126600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4b2b1fb0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d2d2d2d205d3243 202020205b5d3239 383530322e303231 20205b203a6c656e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d7461706d6f 63203230323d6c6c 6163737973206533 3030303030633d68 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6372612031333d67 69732022726f7475 636578652d7a7973 2f223d6578652022 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3436382e322e7a79 73223d6d6d6f6320 303630393d646970 20745f6d64617379 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 733a725f6d646173 79733a746f6f723d 6a62757320353932 373639343932343d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000049 RBX=0000000000000005 RCX=0000000000000008 RDX=0000000000000000 RSI=ffff888026b0aff8 RDI=ffff888026b0a440 RBP=ffff888026b0a440 RSP=ffffc90004b6f818 R8 =0000000000000001 R9 =0000000000000001 R10=00000000000000c8 R11=0000000000000001 R12=ffff888026b0af30 R13=ffff888026b0aff8 R14=0000000000000005 R15=0000000000000002 RIP=ffffffff81986936 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6813000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffa27dc6f98 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000280001 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 073c0aaf018519d9 d75bc6cc46051c64 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d2869efdda5e42d0 f68e2b120b86baea ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ba95ae42fc625b9d 82c3f75119cbfbfe ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 86a0805923fd180e 68d6f5499ae6678e ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000010800 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 59000000ac000000 4a0ca09a4a0d6ece ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e65144378000000 7e00000070000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2acb60ed4a0c8cf8 36396de43f31f437 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000b714a0eb09c a20000004a0bec0b ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 86033670583e10df ab3058b7e5727841 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d1a74e794d1c95b1 d08f6194cd438d99 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666c65732f636f72 702f0073252f666c 65732d6461657268 742f636f72702f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434940560a464a57 550a0056000a4349 405608414440574d 510a464a57550a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bced5 RDI=ffffffff9b0c72a0 RBP=ffffffff9b0c7260 RSP=ffffc90000648550 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b0c7260 R15=ffffffff855bce70 RIP=ffffffff855bceff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007efec17da6c0 ffffffff 00c00000 GS =0000 ffff8880d6913000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007efec17b9d58 CR3=0000000033fbc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=00000000c2fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed413c100 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efec0a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efec0a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efec0a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efec0a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efec0a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efec0a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000001000008fd RBX=ffffffff8e297780 RCX=0000000000000830 RDX=0000000000000001 RSI=00000000000000fd RDI=0000000000000001 RBP=0000000000000008 RSP=ffffc900006df8a8 R8 =0000000000000000 R9 =fffffbfff21530ea R10=ffffffff90a98757 R11=0000000000000001 R12=0000000000000003 R13=1ffff920000dbf16 R14=0000000000000000 R15=ffffc900006df8d0 RIP=ffffffff81697ef8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a13000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffa2717f2d8 CR3=000000004e3d2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc383c45d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09e4811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09e4811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09e4811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09e4811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09e4811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09e4811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000001c0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000