last executing test programs: 47.082553304s ago: executing program 1 (id=142): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0xfffffffffffffd2d}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x16, 0x20000000, 0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004051}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x7ff, 0x4) syz_emit_ethernet(0x9a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22006490"], 0x0) fcntl$notify(r0, 0x402, 0x20) 47.082281793s ago: executing program 1 (id=143): r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000013c0)={{0x3, 0xffffffffffffffff, 0xee00, 0x0, 0x0, 0xfa, 0x200}, 0x0, 0x0, 0x8, 0x2, 0x2, 0x0, 0x8a, 0x8, 0x4, 0x60d3}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3) madvise(&(0x7f000009c000/0x3000)=nil, 0x3000, 0x15) socket$packet(0x11, 0x2, 0x300) msgget$private(0x0, 0x1) (async) msgget$private(0x0, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fddbdf1b290000000c00060001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000880}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x99}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}]}]}, 0x78}}, 0x44040) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x99}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}]}]}, 0x78}}, 0x44040) 46.921804124s ago: executing program 1 (id=145): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) sendmsg$nl_route(r0, &(0x7f000009de00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_getrule={0x1c, 0x22, 0x20, 0x70bd2b, 0x25dfdbfc, {0x2, 0x80, 0x10, 0xfc, 0x1, 0x0, 0x0, 0x2, 0x8}, ["", "", "", ""]}, 0x1c}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x1, "703b744dc5c6"}]}}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r4 = io_uring_setup(0x4238, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x2, 0x201b8}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f00000004c0), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, 0x0, 0x2) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', &(0x7f00000001c0), 0x8000, &(0x7f0000000340)={'trans=virtio,', {[{@access_user}]}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r5, 0xf09, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x8084) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f00000000c0)=@md0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='configfs\x00', 0xa, &(0x7f00000001c0)='/\xac\xcb\x82V\xe6\xae\xe4k]\x06\x8c\xd7\xb4\xaa\"/_\xa3}!\x00\f\xf5\r\x93\xc6\x95\x80i$X,\aE\x90\x1e\xb9\xb0\xd8\x8e\xf9\x02\xa1\x9d#\x8aR\x05N\xf9\fX\x9d\x83V\x94\xcd\x14*>\xdaX\xecO\xdec\x9a\txF<\x9en}\xd9 v\xdb\x10*@\xaa-\xd8M\xf0C|\x1b\xab\x00\xfb\xb9\xd1b\xa1\x06\x87\x8f\xedQ\xdeD\xa9^;\xaf\xe6?.\xfb?\xf2I\x8e\x18:\xc5\xd6d\xf0\xaa?\x0fH\xb9\xd4\x96\xf3\xd0*_\xdbdp,\xe8\xf8\xb3\xdf$\xd3\xeb/\xeef\x04Q\x18\xf5\xa4\x1cFc\x95\x1c\xe1\'\xc2o\xed\xde`\xd1\x16\']4\xe9PR\xafp\fO\xb8Fz\xc1@\xa8\x8f\xc69B\xe7C\x05C\xa4M2\x97S+\xbb\xe4\xfb\x05\x00'/216) 46.920977221s ago: executing program 1 (id=146): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@bridge_delneigh={0x1c, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0x8f}}, 0x1c}}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000a40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x3, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4810}, 0x80) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x28a901a, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80000, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='mountinfo\x00') read$FUSE(r6, &(0x7f0000008580)={0x2020}, 0x2020) 46.782512128s ago: executing program 1 (id=147): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000400)=""/222, 0xdf}, {&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f0000000600)=""/36, 0x24}, {&(0x7f0000000840)=""/141, 0x8d}, {&(0x7f00000009c0)=""/222, 0xde}, {&(0x7f0000000640)=""/23, 0x1e}, {&(0x7f0000000ac0)=""/201, 0xc9}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/4096, 0x101f}], 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0x13e, 0x0, &(0x7f00000006c0)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be30043d50ea5a6b868", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x1, &(0x7f00000000c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x8, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[r1, r1, r1], &(0x7f00000002c0)=[{0x5, 0x1, 0x1, 0x1}, {0x0, 0x2, 0x0, 0x4}, {0x4, 0x5, 0x2, 0xb}, {0x2, 0x3, 0x9, 0x3}, {0x0, 0x2, 0xb}], 0x10, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 46.541808458s ago: executing program 1 (id=149): syz_open_dev$video(&(0x7f0000000180), 0xbc25, 0x442202) creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x40) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000bc0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 46.530183841s ago: executing program 32 (id=149): syz_open_dev$video(&(0x7f0000000180), 0xbc25, 0x442202) creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x40) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000bc0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 26.615422802s ago: executing program 4 (id=440): r0 = io_uring_setup(0x1cb2, &(0x7f0000000180)={0x0, 0xb157, 0x2, 0x0, 0x28c}) r1 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) ioctl$I2C_TIMEOUT(r1, 0x702, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x80}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r2, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x36}, 0x4, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x6, 0x4, 0x0, 0x3, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x6, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0xf, 0xfffffff3, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x8, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xffffff78, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x2, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffd, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x1, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0x8d3, 0x7, 0x3435, 0x5, 0x9, 0xfd, 0x401, 0x101, 0x7ff, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff9, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaf2, 0xc, 0x7f, 0x1000, 0x1ff, 0x5, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x40dab, 0x1, 0x8, 0x14000, 0x1, 0x1b18]}, 0x45c) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) listen(r6, 0x50) listen(r6, 0x0) listen(r6, 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={0x14, 0x0, 0x1}, 0x14}}, 0x0) io_uring_enter(r3, 0x27e2, 0x0, 0x0, 0x0, 0x0) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r7, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1020000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x400c081) close_range(r0, 0xffffffffffffffff, 0x0) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000000200)=0x8001100) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x80b, 0x0, 0x4}, {0x9f9, 0x0, 0x2ec9}]}) 26.551550421s ago: executing program 4 (id=443): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES16=r4, @ANYBLOB="010026bd70f6fefc1ddbdf2559000000080003007f9b046dfd202384b25f0fc9a10ee4bb2627f743aefb62b19fd1da112e056b72a5777780ac3bbcfcdd2daae257b1c000539b6af54449419fce6a4b05bc209e9c2de97b0315b978e5e973", @ANYRES32=r5, @ANYRESOCT=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4810}, 0x80) 26.482102302s ago: executing program 4 (id=446): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r1}, &(0x7f00000006c0)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000080)={'crc32-generic\x00'}}) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r3, &(0x7f0000001700)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0xd1, 0x5c4da462, 0x0, 0xce, 0x8, 0xa, 0x0, 0x0, 0x97, 0x6}}, 0x50) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='fuse\x00', 0x200000, 0x0) 26.421660317s ago: executing program 4 (id=447): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00', 0x0, 0x6b, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5d, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r0, 0x4) sendmsg$unix(r2, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r4, &(0x7f0000000b80)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c96558", 0xe}, {&(0x7f0000000280)="f1fe5fe0360ab373d5026f296558", 0xe}], 0x2) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000200)=0x30) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000280)=0x30) 25.282431169s ago: executing program 4 (id=453): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101090, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@bridge_setlink={0x44, 0x13, 0xa2f, 0x1, 0x0, {0x7, 0x0, 0x68, r2}, [@IFLA_LINKINFO={0x24, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x4, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x135f}}]}]}}}]}, 0x44}}, 0x4050) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 25.282179732s ago: executing program 4 (id=454): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x62481, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x1) read$dsp(r0, &(0x7f00000000c0)=""/105, 0x69) 16.498056354s ago: executing program 3 (id=594): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_clone(0x4100, &(0x7f00000002c0)="8ff90efed259adaf65712807ea00fea0af718d61e931cceb98504bf3307a6f8f673eb7b03e7c4f73733e6ba54de551cce696cf1b410804b088eebcf4db1fd4efdaf824460a22834ad4453d3972e89ba0015a9360cc438e63fee5b120f363a810850dc2c3f65e5d9d83f72f6fd3acef8269266b0d85f3d25f96c7f2816d09b54f010207a908d082cd5e83ce282f2a2acbaa0bd1355a35d3b8e8bce4baf2071ff35824536df494d5c3368ab0d046962119bde03e14e28010992662830e79856a678b9b472b588c307d311203", 0xcb, &(0x7f0000000240), &(0x7f00000004c0), &(0x7f0000000500)="af863d1ff0273f3ce2b156ef7ae3c933f338839c1bd5902fec0562dde84de31c98dd99d3604d7c264ea1fd7c3d5071b7b901b26b824952135977caf93d3986e054ada2fc7af431673a490107a03d5b609207ab92422a77ca05dd30c63c9034e2c19a5373cad67cf4f370b55dd774f34a16b41f37fe81c5edac02fd2a7b77f40f7bdc02fe096affd3719d") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1ab8ff00000000bfa100000000000007010000f0ffffffb702000002000000b70300000000000085000000c700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x181) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000005c0)={"963bfeba51c9004d607581a2dfcb9fc8", 0x0, 0x0, {0x9, 0x2acc}, {0xcd19, 0x40}, 0x5, [0x9, 0x6, 0x0, 0x5, 0xde, 0x0, 0x15937e27, 0x4, 0x0, 0x3, 0xb3d, 0x3, 0x9, 0x7, 0x8]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000a40)={{r0}, r2, 0x8, @unused=[0x6758c43e, 0x132, 0x2, 0x7b4553c1], @name="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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r3 = open_tree(r1, &(0x7f0000000280)='\x00', 0x89901) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x7, &(0x7f0000000040)="fcff45c2", 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r8, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4) sendmmsg$inet6(r8, &(0x7f0000000100)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xf, @local, 0xe794}, 0x1c, 0x0}}], 0x1, 0x20006848) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r9}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r10, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf25110000000800060021a17c572c00018014000300fe8000000000000000000000000000bb14000300000000000000000000000000000000000800050015040000200001800c0007001500000000000000060001000a000000060002003c0000005400028008000500ffffff7f080003000000000005000d000100000005000d000100000006000f000100000005000d000000000008000300010000000800030000000000080006000300000008000500010000000c00018007000600727200000c00028008000800d4020000"], 0xdc}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004004) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 15.771536377s ago: executing program 3 (id=590): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) getsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000000), &(0x7f0000000ec0)=0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {0x7, 0x0, 0x0, 0x9}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x2, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 15.702037387s ago: executing program 3 (id=592): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pivot_root(&(0x7f00000000c0)='./cgroup\x00', 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="ac269c1217da53bcaa86"]) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000100)={{0x3, 0x0, 0x80, {0x5000, 0x100000, 0x1}}, "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", "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"}) 15.631723227s ago: executing program 3 (id=597): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x8001}}, './file0/file0\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000080)="45ffecb8430d1e", &(0x7f0000000380)=@tcp=r1, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x10, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x4e24, 0x0, 0x0, 0xfffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1000, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1}, {0x0, 0xefffffffffffff6e}, 0x7ffffffd, 0x0, 0x1, 0x1, 0x0, 0x2}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, {}, {}, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0xfffe, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff001}, {0x0, 0xfffffffffffffffc}, 0x20, 0x1, 0x1}}, 0xb8}}, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0xfffffffc, 0x81, 0xfffffffb, 0x3}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x1b, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xfffffffffffffee5, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) (async) unshare(0x22020600) (async) open_tree(0xffffffffffffff9c, &(0x7f0000001800)='./file0/../file0/file0\x00', 0x89901) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 15.541347618s ago: executing program 3 (id=598): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000019140)={[&(0x7f0000000380)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x03\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\xdch\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc']}, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 15.311707589s ago: executing program 3 (id=606): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0xa) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0x4, 0x8, 0x5, 0xa, 0x10, 0x7, 0xe, 0xfd, 0xd, 0x8, 0xf, 0x8, 0xb, 0x1, 0x5, 0x9], 0xfd, [0x8, 0x4, 0x2, 0xa9e, 0x0, 0x80, 0x8, 0x81, 0xbad6, 0x8, 0x403, 0xe8c, 0x7, 0x401, 0x5, 0x2], [0x403, 0x2004, 0x8, 0x0, 0x4091, 0x30, 0x0, 0x1, 0x0, 0x5861, 0x6, 0x6, 0x7, 0xc, 0x1000, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10040}, 0x0) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x0, "f700", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) (async) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000040)={0x7, 0x1, 0x5, 0x3ae9, 0xfffffffa, 0xd, "9899b4a4d5bfb2b8b5ec67a9883d45f4", 0x8, 0xae, 0x6, 0x8, 0x2, 0x0, 0x40}) (async) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f00000001c0)=""/137, 0x89) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) (async) sendto$inet(r3, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r6 = syz_io_uring_setup(0x16c2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000000)={'veth1_virt_wifi\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x8}}) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4eb4273e0aa7845146c624199e24584fd8343056475f5d86f5ace7eb9531bc9cbf53e7b05308d371be02dc86d8c3bc", @ANYRES16=r11, @ANYBLOB="00022dbd7000fbdbdf2541000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8884) 15.284099759s ago: executing program 33 (id=606): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0xa) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0x4, 0x8, 0x5, 0xa, 0x10, 0x7, 0xe, 0xfd, 0xd, 0x8, 0xf, 0x8, 0xb, 0x1, 0x5, 0x9], 0xfd, [0x8, 0x4, 0x2, 0xa9e, 0x0, 0x80, 0x8, 0x81, 0xbad6, 0x8, 0x403, 0xe8c, 0x7, 0x401, 0x5, 0x2], [0x403, 0x2004, 0x8, 0x0, 0x4091, 0x30, 0x0, 0x1, 0x0, 0x5861, 0x6, 0x6, 0x7, 0xc, 0x1000, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10040}, 0x0) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x0, "f700", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) (async) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000040)={0x7, 0x1, 0x5, 0x3ae9, 0xfffffffa, 0xd, "9899b4a4d5bfb2b8b5ec67a9883d45f4", 0x8, 0xae, 0x6, 0x8, 0x2, 0x0, 0x40}) (async) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f00000001c0)=""/137, 0x89) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) (async) sendto$inet(r3, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r6 = syz_io_uring_setup(0x16c2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000000)={'veth1_virt_wifi\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x8}}) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4eb4273e0aa7845146c624199e24584fd8343056475f5d86f5ace7eb9531bc9cbf53e7b05308d371be02dc86d8c3bc", @ANYRES16=r11, @ANYBLOB="00022dbd7000fbdbdf2541000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8884) 10.21385358s ago: executing program 34 (id=454): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x62481, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x1) read$dsp(r0, &(0x7f00000000c0)=""/105, 0x69) 7.652320888s ago: executing program 6 (id=715): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000040)=0x2, 0x4) write$9p(r1, &(0x7f0000001180)="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", 0x1000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000305000000000000000000000000c1398f3435be0e0000000000005ee9a19e34dc2ef8cd7c7ca4c1a56ff8e6c5b42809e418a23dd74a4d0cf1ef3c77cd1d2ed2ebbc966b60d13a6f6c9cb9723d1dbf48109b686ae6075ec61b8e7cb4626c908e8abd29b710dbfb8ab917439c00000000", @ANYRES32=0x0, @ANYBLOB="05030200000000001c00128009000100626f6e64000000000c0002800800130008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 7.572119134s ago: executing program 6 (id=717): r0 = syz_open_dev$radio(&(0x7f00000005c0), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f903, 0x0, '\x00', @p_u8=0x0}}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) (async) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000440)=[{0x1, 0x1, {0x0, 0xff, 0x2}, {0x1, 0xff, 0x4}, 0x2, 0xfd}], 0x20) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0xd646, 0x7, 0xf, 0x120000, 0x40000000000001ff, 0x0, 0x8, 0x8000000000000001, 0x2, 0x10003, 0x101, 0x5, 0x1], 0x8000000, 0x141200}) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) (async) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={'bridge_slave_0\x00', {0x2, 0x4e23, @loopback}}) write$binfmt_aout(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) (async) dup3(r6, 0xffffffffffffffff, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) (rerun: 32) preadv2(r8, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8407b0400ffff0220"], 0x11) (rerun: 64) 7.47158815s ago: executing program 6 (id=719): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x20, 0x1a, 0xa01, 0x0, 0x0, {0xa}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x7, 0x0, 0x0, 0x0, @str='\x1d@\x00'}]}]}, 0x20}}, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300)={r4, 0x1, 0x30}, &(0x7f0000000340)=0xc) (async) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000001c0), 0x4) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}, {@default_permissions}, {@nfs_export_on}]}) r5 = syz_io_uring_setup(0x3672, &(0x7f000000a9c0), &(0x7f000000aa40), &(0x7f000000aa80)) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000bc0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0xfffffffd, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x3, 0x2000000}, {0x0, 0x4, 0x40000000, 0xfffffffffffffffc}, {0x40}, 0x0, 0x0, 0xa, 0x2, 0x1, 0xe0}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x801}, 0x4810) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0}, 0x20) (async) io_uring_register$IORING_REGISTER_FILES2(r5, 0x6, &(0x7f0000001480)={0x0, 0x0, 0x20000000, 0x0, 0x0}, 0x20) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x200}}, './file1\x00'}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0xe, &(0x7f00000002c0)={0x1, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/215, 0xd7}, {&(0x7f0000000040)=""/52, 0x34}, {&(0x7f0000000400)=""/223, 0xdf}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/160, 0xa0}, {&(0x7f0000000100)=""/53, 0x35}, {&(0x7f0000000340)=""/86, 0x56}, {&(0x7f0000000640)=""/115, 0x73}], &(0x7f0000000140)=[0x9, 0x8, 0x1, 0x6], 0x8}, 0x20) 7.421082758s ago: executing program 6 (id=720): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername(r0, &(0x7f0000000380)=@x25={0x9, @remote}, &(0x7f0000000000)=0x80) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) unshare(0x22020600) open_tree(0xffffffffffffff9c, &(0x7f0000001800)='./file0/../file0/file0\x00', 0x89901) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 7.42049535s ago: executing program 6 (id=721): r0 = getpid() setreuid(0xee00, 0x0) clock_gettime(0x6, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000009ac0)={r1, r2+10000000}) r3 = syz_pidfd_open(r0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000eb1f000000000a0500000000000000000007000000090001000000090a010400000000000000000700000008000a40010000000900020073797a31000000000900010073797a30000000000800054000000021300000000c0a0101000000000000000007000002091b020073797a30000000000900010073797a30000000000400fd8014000000100001000000000000000084000a0000000000000000fd408aa00603a6dd4b041c13a139b6d68c6b7e45cbe77677b5f60a76cf52ee9a3d843279322f9cde2d13ca7c3b0e4807c527870e907a8a12"], 0xb4}}, 0x40) setns(r3, 0x52e3593bb9f729c9) syz_clone3(&(0x7f00000008c0)={0x10860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6.971557249s ago: executing program 5 (id=728): r0 = syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0x198}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$inet6(0xa, 0x3, 0x4000004) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000050000000800000008000000000000009acbe03aa667f829759693e249b2539847bb958ad8aa54b5c662daa3c2e8c2fa0281944a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r6, &(0x7f00000006c0)=""/102, 0xfffffffffffffed6, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000001c0)={@val={0x2000, 0x88fb}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xe3, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x600, 0x0, 0xcf, 0x0, @wg=@data={0x4, 0x9, 0xf59, "85b8e6665d890582126b83824ec5eabb03a01fcf153a3646ecf39707b92f780837084c4cc8a19acf27b70180327f6abf78820fc7874ee8774d5b70f2e9f184db67007ec1be931e3dc74d973d2e9f6f23571bebe1d1b1fbb3efc0e8ebf0e49c43d86afabb8d481fc31ddcb37cce1c21feb3af6ee3d9b411a3bfc800465412292f36d5f103e723d7c1903dfb50f380ddba1d723abb6c5b5d8c0682b2bcbdeeac1003e2a1a7c61321e3e7d2b82c3b9492b8533f316f982f03"}}}}}}}, 0xf5) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) write$binfmt_misc(r7, &(0x7f0000001280), 0x6) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6.891335836s ago: executing program 5 (id=729): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x8, 0x0, 0x0, 0x7fffffff}]}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x93) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2200800, 0x0) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) unlink(&(0x7f0000000000)='./file0\x00') symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x2007214, 0x0) (async) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) (async) write$sndseq(r2, &(0x7f0000000500)=[{0x3b, 0x1, 0x0, 0x7, @tick=0x4d0d, {0x7, 0xb}, {0x2, 0x4}, @quote={{0x7, 0x7}, 0xfffc, &(0x7f0000000400)={0x40, 0xb, 0x7, 0x6, @time={0x100, 0x5}, {0x3, 0x5}, {0x7b, 0x61}, @raw8={"22c9c6d53d217e006a0e4f04"}}}}, {0x8, 0x9, 0x0, 0x69, @tick=0x3, {0x3, 0x7}, {0xff, 0x1}, @raw8={"5c278976de7df581e05330a6"}}, {0x3, 0xd5, 0xa, 0x31, @time={0x6}, {0x8, 0x2}, {0x59, 0xfe}, @note={0x6, 0x7, 0x4, 0x5, 0x400}}], 0x54) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)={0x9c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xa0}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x3c6}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x5}]}}, @CTA_NAT_DST={0x68, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}]}]}, 0x9c}}, 0x4000480) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000440)=0x0) wait4(r4, &(0x7f0000000580), 0x4, &(0x7f0000000700)) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x5}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}}, 0x14b6deac033214c2) (async) r5 = fcntl$dupfd(r1, 0x406, r1) (async) socket$inet6(0xa, 0x5, 0x2) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000240)=0x10) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x33dc862, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f0000000100), r6, 0x2}}, 0x18) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) 6.890500216s ago: executing program 5 (id=731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f00007f5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) dup3(r0, r0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f00007f5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) dup3(r0, r0, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0) (async) 6.572037073s ago: executing program 5 (id=738): getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 6.522151273s ago: executing program 5 (id=739): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e21, 0x80000, @dev, 0x4}, 0x1c, 0x0, 0x0, &(0x7f00000001c0), 0xa}, 0x2004890) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, r3, 0x0, 0x70bd29, 0x400, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'lo\x00'}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}}, 0x0) (rerun: 64) 6.520214452s ago: executing program 5 (id=741): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r1, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r2, 0x400455c8, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xb, &(0x7f0000000040)=0x9d9, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x8d, 0x0, 0x1}]}) 5.341140176s ago: executing program 6 (id=749): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c81, 0xffffffffffffffbb) (async) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c81, 0xffffffffffffffbb) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x10810}, 0x0) 5.28112422s ago: executing program 35 (id=749): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c81, 0xffffffffffffffbb) (async) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c81, 0xffffffffffffffbb) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x10810}, 0x0) 1.180396499s ago: executing program 0 (id=802): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000003d000d8632cd6bdccc8d0000047c0000040000000c00018006000600800a0000040002", @ANYRES8=r1, @ANYRESOCT=r0], 0x28}}, 0x400c880) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000cc0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}]}, 0x24}], 0x1}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x98, 0x0, &(0x7f0000001540)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000140), 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd2b, 0x2, {0x0, 0x0, 0x0, r12, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{}, {0x2, 0x101, 0x322e, 0x4, 0x6, 0x0, 0x1}}}]}]}]}}]}, 0x5c}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}) timerfd_settime(r7, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x14, 0x0, &(0x7f0000000080)) 1.06216178s ago: executing program 0 (id=803): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, 0x0, 0x4}, 0x20) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x68541) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000021c0)={'\x00', 0x0, 0xf, 0x1e23c38, 0x9, 0x20}) 1.06166752s ago: executing program 0 (id=804): r0 = socket$key(0xf, 0x3, 0x2) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)="e86e98f4c6", 0x5}], 0x1, &(0x7f0000000600)=[{0x60, 0x116, 0xcf, "758477d0656e7700bd91c1f7e659988076d1ff7aae02a975ce064132c89c9bb815a8e672d284011c44637c6a5bc2275c130686ab9176bf2ae2137aa691f982e9a489338f6c9760f206875ec951bf"}, {0x98, 0x84, 0x4, "4581406c91987649971bfdc01eee3a8d5a8894e001a890800854d7496eb757be2abfdcbbc9d1b38894daa0d203c0a7654cac40a04d3a37bcb7cebcdd435c79c0d1dd6dc3d5b5479e1fe3e2ed67d9ef07277ba33dc600a8057c8874843f61bfb67e2b9d6ce2f354bb0f4e801a4012f408d52589c1c3a57d80d4e559cd2dfb6596468ebb6962"}, {0xb8, 0x10b, 0x400, "99d10e0c013582c4b3f9d6b10633530ac5ba51af79d6fb13f56da3d96b2b9cd7153b1965f7b12bb97b8a9876392c77c205cdf775c30ec71d8929d4b090fd5d9be63030c7da0ad2830eae25543ebb98fc4378d21a11db78a5b276afe2e1cace884024b1061a412ad7810cbca015cb10c8ee8ff6fa6f7a0e6720155a26a46d18948b4af8119a31d4d00a5690683c7c4d23acb9ac2f0e703c48feeef39558181549a40e"}, {0x40, 0x1, 0x8, "2963d07c4cbca67088ad5de8db1b2ba7469721ff41abc7bd1d2ee203799e65a36d58c450c5e492a10863c7db2c45"}, {0x88, 0x107, 0x1, "2269e6b44d123db1a0e280fc3f98e3e41051126641f850422b33c5a7a629ed201337cb32b60f60b0e5125ce5a9ad6d49ca38f4fabfd4ef44a0ce394d9bb0a7895dfcb881093bd446940d589a437a4ccf96e21d2e99b4f049eac1b3fb1b93461b8155f69f4eabcf5fcc143aa31dbbe388f39e04fa5e5c0842"}, {0xa8, 0x11, 0x8, "43f929fd3c1760426bcc0e2fdb007b9eb9fb3df083bd5da78d08af48277771417a881622bfcff4aaaf4b5d27e6b127431746a28e58acad9ff8b77e6fe0094315f6e8d974ad1d776b93bbdb9d914561cef740811c0c1235b0c19ace0ccd4c6fad01aca0b391278cccdca33fad3d603466c6fd0039bd54ddfab24de4a6e63b32886c1cb375b4a87f6b8ace399904eb2babfdc055"}], 0x320}, 0x800) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1.002200608s ago: executing program 0 (id=805): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000009700)={'wpan1\x00', 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) sendto$inet6(r3, 0x0, 0x4, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="1bb300000000000000000100000008000300", @ANYRES32=r2, @ANYBLOB="d948b1cbd7a7a07fd9f053fce5e7218b444256406d1b3e41e75fc246a59461785bb08be2aaab686bdde523b1c224e1ffc991cda9094a92c2129412f2a8e17246debb416b6b1be126c2cb4ea511fcc8d7835e62f8ada1b41e2b263c7718"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 999.561127ms ago: executing program 0 (id=806): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3, 0x6cfd9819, 0x8, 0x8, 0x3, r0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r4, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r5, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r10, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)={0x14c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0xa4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x4, 0x4}, {0x1, 0x5}, {0x5, 0x2}, {0x0, 0x7}, {0x6}, {0x1, 0x5}, {0x0, 0x1}, {0x5, 0x2}, {0x4, 0x1}, {0x4, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x2, 0x5}, {0x4, 0x2}, {0x0, 0xa}, {0x6}, {0x0, 0x8}, {0x0, 0x5}, {0x7, 0x7}, {0x3, 0x1}, {0x7}, {}, {0x0, 0x5}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x4, 0x6}, {0x7, 0x8}, {0x0, 0xa}, {0x2, 0x6}, {0x0, 0x9}, {0x4, 0x4}, {0x7}, {0x1}, {0x2, 0x8}, {0x2, 0x7}, {0x1}, {0x4, 0x5}, {0x2, 0x6}, {0x6, 0x6}, {0x1}, {0x7, 0x5}, {0x1, 0x6}, {0x7, 0xa}, {0x1, 0x6}, {0x4, 0xa}, {0x1}, {0x4, 0x4}, {0x1, 0x1}, {0x3, 0x9}, {0x5, 0x3}, {0x3, 0xa}, {0x4, 0x4}, {0x7, 0x9}, {0x5, 0x9}, {0x0, 0x1}, {0x2, 0x3}, {0x1, 0xa}, {0x7, 0x1}, {0x2, 0x7}, {0x3}, {0x0, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0xa}, {0x5, 0x2}, {0x0, 0x7}, {0x5, 0x1}, {0x0, 0x4}, {0x2, 0xa}]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x3, 0xb, 0x6, 0x1b, 0x6c, 0x0, 0x60, 0x16, 0x12, 0x48, 0x60, 0x6c, 0x9, 0x48, 0x12, 0x6, 0x2, 0x24, 0x24, 0x1b, 0x12, 0x30]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x2, 0xfff, 0xfb70, 0x5, 0x3140, 0x3, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x88, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x6, 0xfffa, 0xf9f, 0x0, 0x400, 0xfff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x9, 0x5, 0x101, 0x4, 0x1ff, 0x7, 0x49]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0x4, 0x6, 0x4, 0x6, 0x1, 0x6, 0xd, 0x12, 0x1, 0x1e, 0x5, 0x9, 0x36, 0x30, 0x30, 0x18, 0x1, 0x48, 0xb, 0x9, 0x16, 0x0, 0x12, 0x5]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x3, 0x5}, {0x2, 0x5}, {0x1, 0x2}, {0x1, 0x6}, {0x0, 0x7}, {0x5, 0x1}, {0x2, 0x5}, {0x5, 0x7}, {0x1, 0x4}, {}, {0x1, 0x7}, {0x5, 0x6}, {0x1, 0x6}, {0x2, 0x7}, {0x1, 0x1}, {0x7, 0x3}, {0x0, 0x3}, {0x4, 0x4}, {0x7, 0x4}, {0x1, 0x1}, {0x0, 0xa}, {0x7, 0x7}, {0x7, 0x6}, {0x2, 0x2}, {0x2, 0x6}, {0x0, 0x1}]}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x24044014}, 0x4000) 790.062337ms ago: executing program 0 (id=807): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x4) sendmmsg(r1, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000006480)={0x58, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2dd6}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001240)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x24004840) r7 = signalfd(r0, &(0x7f0000000200)={[0x12]}, 0x8) ioctl$KVM_GET_FPU(r7, 0x81a0ae8c, &(0x7f00000002c0)) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="18000000"], 0x18}}, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000006c0)={'wg0\x00', 0x0}) r9 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5846f2b2, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x22}]}, &(0x7f0000000540)='GPL\x00', 0x29af, 0x0, 0x0, 0x41000, 0x1, '\x00', r8, 0x19, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x0, 0xf, 0x3ff, 0x5}, 0x10, 0x24c64, r7, 0x3, &(0x7f0000000780)=[r7], &(0x7f00000007c0)=[{0x2, 0x3, 0x0, 0x8}, {0x0, 0x3, 0x1}, {0x2, 0x4, 0x1}], 0x10, 0x9, @void, @value}, 0x94) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r10 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x17, 0x3, 0x0, 0xfffffffffffffdd7) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r12], 0x1c}}, 0x0) write$nci(r11, &(0x7f0000002240)=ANY=[@ANYBLOB="400401eb9c601c"], 0x7) ioctl$sock_bt_bnep_BNEPCONNADD(r10, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r0]) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="043e06120000c90006f02b3d8d7b1d221624ddedce088265be2b038f1439495d1920390a6cfa703940c7aa80f99884636c9aa1e74a590ecbd30b9b3888d7ce32c130401f5ea02849544287f06664692e2aae568dc3dd6e0c721a6c68e0f7719f1e3c304899e6897fc33900000000000000000000000000003e8646b65dfa03fb462c2c5be8665e0df24b86873ebd65"], 0x9) 131.885804ms ago: executing program 2 (id=810): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x260, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x300, 0x1, 0x3, 0x0, {0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x4, 0x8}}, @NL80211_ATTR_IE={0x221, 0x2a, [@perr={0x84, 0xe2, {0x9, 0xe, [{{0x0, 0x1}, @broadcast, 0x0, @value=@broadcast, 0x3c}, {{0x0, 0x1}, @device_a, 0x2, @value=@device_b, 0x8}, {{}, @device_b, 0x9, @void, 0x3}, {{}, @device_b, 0x7ff, @void, 0x8}, {{0x0, 0x1}, @device_a, 0x1, @value=@broadcast}, {{}, @device_b, 0xffffff0d, @void, 0xa}, {{}, @broadcast, 0x80000001, @void, 0x33}, {{0x0, 0x1}, @device_b, 0x4, @value, 0x1e}, {{}, @broadcast, 0x6, @void, 0x2d}, {{}, @broadcast, 0x8001, @void, 0x25}, {{}, @broadcast, 0x100, @void, 0x22}, {{0x0, 0x1}, @device_b, 0x4096, @value, 0x39}, {{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0x13}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0x3}]}}, @gcr_ga={0xbd, 0x6, @broadcast}, @supported_rates={0x1, 0x6, [{0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x30, 0x1}, {0x1}, {0x30}]}, @mic={0x8c, 0x18, {0xb16, "014b5727a12f", @long="1179c78e739841b427e0d8d186c31ebc"}}, @measure_req={0x26, 0xf4, {0x8, 0xb7, 0x31, "99cfcf64a96d4d47d003cf46f242e22f7d918d5b0871df96ddc569717fc9fc279beb30e50527c979fa1627d520a21d32e4018f09d404d3e4eeaa886b097322be84607070f5fcce6da196b3a656d982e5bfec25e93bd556150e9cd95206a71d390cd6ace306ae7b8f3298ac1dfbf07a61681af1c108bca66cada636270c468b64c44cd2c90ef5006197d614591dc0819b414cdc23626378ee516b72d700076223523cb9702e011942807aedacfcfba444c3c30e803695214aa008f623dd7245208a81ab6aa9fe1c4bebb8c3b11468934cf6b37ba42e259704568ccd0835843f2700800747a29a7696b1a3bacd62d85e3076"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @perr={0x84, 0xf, {0xf7, 0x1, [{{}, @broadcast, 0x4, @void, 0x11}]}}]}, @NL80211_ATTR_USE_MFP={0x8}]}, 0x260}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x804, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_udplite(0x2, 0x2, 0x88) 130.403342ms ago: executing program 2 (id=811): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x100, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6cc9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x292}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x39b6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffc9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd75}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x989d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4051}, 0x4000880) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r2, 0x300, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x10000}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xf5d2}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x4080) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r5) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000440)={0x338, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_MEDIA={0xdc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff56}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffe87b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa11}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa0ba}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x44}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffe00}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8cd212903001d910}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x58, r4, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x38, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x48}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7381d53af956"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x8}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc800}, 0x44) (async, rerun: 32) r7 = openat2(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x800, 0x60, 0x21}, 0x18) (rerun: 32) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x94, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4d}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff969e}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r8, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) (async, rerun: 32) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c80), 0x8000, 0x0) (rerun: 32) syz_io_uring_setup(0x3618, &(0x7f0000000cc0)={0x0, 0x47b5, 0x400, 0x7ff, 0x38d, 0x0, r7}, &(0x7f0000000d40)=0x0, &(0x7f0000000d80)) (async) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x20010, r7, 0x10000000) r12 = socket$kcm(0x29, 0x7, 0x0) (async) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000e00)=@IORING_OP_FILES_UPDATE={0x14, 0x11, 0x0, 0x0, 0xfffffffffffffc2d, &(0x7f0000000dc0)=[r5, r7, r12, r9], 0x4, 0x0, 0x1, {0x0, r13}}) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000001100)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4280026}, 0xc, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x1e0, r14, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x5c, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x28a1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf07f}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x40}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffc}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x66}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x74}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x18}, @NL80211_ATTR_REG_RULES={0x148, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x101}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x40}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xcd8d}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x40}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfb0}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2e5c}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1eb6}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd025}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x330a8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x101}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xc}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0xc090}, 0x8000) (async, rerun: 32) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x5, &(0x7f0000001140)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @call={0x85, 0x0, 0x0, 0x78}], &(0x7f0000001180)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41100, 0x15, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x2, 0x8, 0xc, 0x479}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001240)=[r7], &(0x7f0000001280)=[{0x4, 0x3, 0xf, 0xa}], 0x10, 0x80000000, @void, @value}, 0x94) (rerun: 32) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000001380)={r12, r15}) gettid() (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000001400)={0x2, &(0x7f00000013c0)=[{0xa2c, 0x5, 0x34, 0x3}, {0x8, 0xfe, 0x10}]}, 0x10) preadv(r9, &(0x7f00000038c0)=[{&(0x7f0000001440)=""/100, 0x64}, {&(0x7f00000014c0)=""/184, 0xb8}, {&(0x7f0000001580)=""/76, 0x4c}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/140, 0x8c}, {&(0x7f00000036c0)=""/250, 0xfa}, {&(0x7f00000037c0)=""/25, 0x19}, {&(0x7f0000003800)=""/154, 0x9a}], 0x9, 0x9, 0x5) (async) readv(r12, &(0x7f0000003bc0)=[{&(0x7f0000003980)=""/236, 0xec}, {&(0x7f0000003a80)=""/132, 0x84}, {&(0x7f0000003b40)}, {&(0x7f0000003b80)=""/37, 0x25}], 0x4) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 51.998927ms ago: executing program 2 (id=812): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = epoll_create1(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xbc}}, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000040)={0x2, r4, 0xfffffffb, 0x80000003, 0xb, 0x7, 0x1}) (async) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0x7fff) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000380)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r4}) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000007}) (async, rerun: 32) r5 = syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) (rerun: 32) ioctl$HIDIOCGRDESC(r5, 0x40305829, &(0x7f0000000140)={0xd, "7954bbc8aae250bd23544617d5"}) (async, rerun: 64) getdents(0xffffffffffffffff, &(0x7f00000001c0)=""/137, 0x89) (async, rerun: 64) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 64) r6 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(r6, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x120, 0x11, 0x148, 0x210, 0x0, 0x210, 0x2a8, 0x2a8, 0x210, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@owner={{0x38}, {0x0, 0x0, r7, 0x0, 0x2, 0x3}}, @common=@ah={{0x30}, {[0x0, 0x2], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x200, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @loopback, 0xffffffff, 0xff000000, 'team0\x00', 'team_slave_0\x00', {}, {}, 0x29, 0x0, 0x51}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4, 0x3, 0x7, 0x2, 0x3, 0x1], 0x6}}}, @common=@socket0={{0x20}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000003440), 0x85200c, &(0x7f0000000300)={[], [{@flag='nomand'}, {@appraise}, {@subj_user={'subj_user', 0x3d, '!(@{#'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@obj_user={'obj_user', 0x3d, '$}!*^'}}], 0x3a}) 51.746781ms ago: executing program 2 (id=813): ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000040)={0x4, 0xfffffffffffffff9, 0x4, 0x2, 0x0, 0x5, "c4d3faa6877e442d7ee4b59969c6936a", 0x2, 0x5, 0xab, 0x4, 0x0, 0x8, 0x3}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="a909000000000cfddc6d3abeca20ff746400006277000043f5ef1393f2cd2b", 0x1f}, {&(0x7f0000000640)="174640af88", 0x5}], 0x2}}, {{&(0x7f0000000500)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x140}}], 0x2, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf250b"], 0x24}, 0x1, 0x0, 0x0, 0x8811}, 0x4080) 2.078517ms ago: executing program 2 (id=814): write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x3, 0x9d3, 0x7fff, 0x5, 0xff}}, 0x120) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYBLOB="140006"], 0x48}}, 0x0) 0s ago: executing program 2 (id=815): openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x35c, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000001340)=""/4096, 0x753}], 0x1, 0x5, 0x10000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect(0x5, 0x815, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0xd2, 0xa5, 0x70, 0xff, 0x1b80, 0xe39b, 0x376a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x803, 0x3, 0x6, 0xa7, 0x70, 0x9, [{{0x9, 0x4, 0xea, 0xea, 0x4, 0xaa, 0x2a, 0xd0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x200, 0x9, 0xa9, 0x2, [@generic={0xff, 0x7, "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"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x3ff, 0x3, 0x2, 0x4}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0x3, 0x40, 0x5, [@generic={0xb0, 0x6, "55ea7da794449c054750542bc9f49d18f047aa2c9d6ff9a81ee25af8dfbb6ec8e79a5c60177cedb9bbfa02fdb71ea03d58d503aa2f4d347a931270a7bdcc9a4751272c531bd51f35cf7044ea0fece6a1c0e1df1d011ea712ff07a98d24e3adcca687bdde66d3e11abdf93cbd77ee0d324a8e45d294c6074f1a88c2fc3e8ecb1a302f99aa6518720d3dccd0890a469fe1ee405da64396cf44003a00d914953d4f9845d75fc2e214f3539b9c15064c"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x5}]}}, {{0x9, 0x5, 0x0, 0x2, 0x200, 0x10, 0x9, 0x3}}]}}, {{0x9, 0x4, 0x17, 0xa, 0x9, 0x3f, 0x63, 0x2f, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x5}, [@extension_unit={0x7, 0x24, 0x8, 0x2, 0xa, 0x32}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x5, 0x17, "ff1687b047"}, @selector_unit={0x7, 0x24, 0x5, 0x1, 0x8, "d01d"}]}], [{{0x9, 0x5, 0x0, 0x2, 0x40, 0xf0, 0xe, 0x1}}, {{0x9, 0x5, 0x9, 0xc, 0x7e7, 0x6, 0x94, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x24, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x2, 0xb, 0x30, [@generic={0x4, 0x22, '\bA'}]}}, {{0x9, 0x5, 0xb, 0xc, 0x8, 0x2e, 0x4, 0x1, [@generic={0x96, 0x24, "ade63b3629171ad3977c4653864ff8b925d40d15e934f562a92a4bd72d6623ae3ee2669c7225417c621988b3f874304359e80e1d58ce2ea6912e2f2dee35a0627b0f058fce57fc0874fb203315a5576fa83507408d881d0109f8a756fc01c13ffe3d786f8b47ac74a2322008f9dd14e1c5a3860512006f25e1e669bde23e1013596f92380957be9786e536a77846f924e651a0a6"}, @generic={0x54, 0xd, "f5b0b061c5727d27c024888d7ea5540a616ea6f13c877710199f5878790e94eb3925e3d24c352f373ee95ee1f12ae4acb868917bd3da71300e2c892fb2b35ed86558ee98fe87a995e55fdf8dfc4434d2157f"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x1, 0x6b, 0x9, [@generic={0xe5, 0x30, "b3336450d5f7e2e8f944240fce6a95134d620a10a0221c4749345b9311cc5e7ebf4b317fdb27d2831bc21896d725e1b7d7ccee40452639bea979c1b24a0ac27d8789ac19162b0f3f9681b7e38160f5a3252a44fa8c0b0c0733ced70deb141ec656571f582e2606369c0a3f1f97288e82dd65b1b0d9606a08c2e580459286e5de4b542da0871029ca8caa5743496340061bf1c5bb633dbade8b606f3a7939d6e603ae6fe9b71f266ae999eaceef088084a58188399354a0723d48b418f28673aa16769f5b790f2c9bace96eabdb522bfdd91d0891df0eeb609a2e7a765676a2498b017c"}, @generic={0x3c, 0x9, "08c3d1a51ee193e05014dffbaea014656a33c64db069cb435da2e3b0429bbbd978db8e23553c8f15603bb5157ab90f838ae4d1b3b0de1892ba04"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x3ff, 0x6, 0x0, 0x4}}, {{0x9, 0x5, 0xb, 0x10, 0x0, 0x10, 0x97, 0x46}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xfc, 0x7, 0x9}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x1, 0x1, 0x6}}]}}, {{0x9, 0x4, 0xed, 0x0, 0xb, 0xff, 0xff, 0xff, 0xf1, [@hid_hid={0x9, 0x21, 0x6b6, 0x10, 0x1, {0x22, 0x795}}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0x6}, [@extension_unit={0x9, 0x24, 0x8, 0x4, 0x1, 0x6, "61b5"}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0x9, '$*'}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0x4, "d342afb40d"}]}], [{{0x9, 0x5, 0x2, 0x10, 0x40, 0x0, 0xfa, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xff}]}}, {{0x9, 0x5, 0x1, 0x8, 0x400, 0x5, 0x40, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x5}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x2, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x47}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x8, 0x9, 0xf0, [@generic={0x1d, 0x31, "815def4785197f8e6c7dcb68dd9c625e63ca112af07152aa88bc5b"}, @generic={0xcc, 0x1a2973132f0ce2fa, "40bd790ee32b376aef070744da22bc2a97aa19e505556e633b0034829426dc4ef19e64fc9e40c3369d79bfa53df3a94bc0c24a2f39b2af1e2b40d549ff9552f6a43f11c0af2af97efb843be82081c495f24f9435543a1cd0fd7d50d5cb02f75308cb521bc65b3cd56a437c039ed7b741822ac69006d98bfce3ea43ca428fd11f3a2096a70f268e90e427ba351020588be0caa6ca11a6fbf17d493dd1918bcc5435dea725212cebbe7550a69d44df51e16bf34de5a9d06d2c3ece373ce77087abf2e0b8437d93604815d6"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x10, 0x5, 0xff, 0x3}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0xe, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x8}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x10, 0xc0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x13, 0x7ff}]}}, {{0x9, 0x5, 0x6, 0x8, 0x3ff, 0x41, 0x6, 0xe6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xd6, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x8}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0xf5, 0x10, 0x9, [@generic={0x101, 0x30, "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"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x1, 0x6}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x7, 0xfc, 0x3, [@generic={0xca, 0x3, "ea75f99b0f2d2c7278b60309f3f2626fd319cc4a1f4e4cb3ad21b61472beb1c0110437691dcdc4ae334ef51917917c341119631c2082adb43de57a318b288dc812586c76fcc967223df59f6992b5ee7d49f6eedfdfef243447f5190ac435d632449f348bd869d40f060a20777ce11967b797107d3c1e82f2b2df1db68f1d5ef75d2edfe6b45ce5b061cb735ca752c2a4658ca3aeecc14d9ce4d9b2cb84bee6fa19f36c30d269fe9f70d6486f8e2c62ad3b549011fab0e29cc6f543b325803826770ec270a37eeba1"}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x8c, 0x3, 0x5, 0x8}, 0x3d, &(0x7f0000000200)={0x5, 0xf, 0x3d, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x400, 0xf000, 0x4, [0x8e083d21f1c2e67c, 0xf, 0x1ff800f, 0xffe048, 0x30]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x57, 0x4, 0x800, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xc, 0x0, 0xc126}]}, 0x2, [{0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x2c0a}}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r5, 0x4, 0x2400) splice(r5, 0x0, r4, 0x0, 0x1, 0x0) shutdown(r6, 0x1) kernel console output (not intermixed with test programs): mance. Setting the MTU to 1560 would solve the problem. [ 34.653096][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.665055][ T5883] team0: Port device team_slave_1 added [ 34.669768][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.672518][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.681991][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.698420][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.701882][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.711089][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.733731][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.736362][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.744949][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.749081][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.751061][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.758297][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.780836][ T5888] hsr_slave_0: entered promiscuous mode [ 34.782927][ T5888] hsr_slave_1: entered promiscuous mode [ 34.785480][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.787389][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.794922][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.824239][ T5891] hsr_slave_0: entered promiscuous mode [ 34.826308][ T5891] hsr_slave_1: entered promiscuous mode [ 34.828219][ T5891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.830694][ T5891] Cannot create hsr debugfs directory [ 34.878404][ T5882] hsr_slave_0: entered promiscuous mode [ 34.881309][ T5882] hsr_slave_1: entered promiscuous mode [ 34.883352][ T5882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.885557][ T5882] Cannot create hsr debugfs directory [ 34.891666][ T5883] hsr_slave_0: entered promiscuous mode [ 34.893773][ T5883] hsr_slave_1: entered promiscuous mode [ 34.896394][ T5883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.900116][ T5883] Cannot create hsr debugfs directory [ 35.072776][ T5891] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.079941][ T5891] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.083878][ T5891] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.091386][ T5891] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.105846][ T5883] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.112089][ T5883] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.134868][ T5883] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.138204][ T5883] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.153850][ T5888] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.159846][ T5888] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.163707][ T5888] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.166910][ T5888] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.193320][ T5882] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.202088][ T5882] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.205446][ T5882] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.208620][ T5882] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.236997][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.252617][ T5891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.264046][ T5883] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.270044][ T5888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.278924][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.281297][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.288238][ T5891] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.293673][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.295983][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.299258][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.301388][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.304794][ T5888] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.312977][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.315069][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.320192][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.322153][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.331220][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.333746][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.335806][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.362530][ T5882] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.372235][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.374280][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.377384][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 35.377392][ T40] audit: type=1400 audit(1735980459.034:116): avc: denied { sys_module } for pid=5888 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 35.390274][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.392366][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.437800][ T5888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.455137][ T5888] veth0_vlan: entered promiscuous mode [ 35.459435][ T5888] veth1_vlan: entered promiscuous mode [ 35.473800][ T5888] veth0_macvtap: entered promiscuous mode [ 35.480239][ T5888] veth1_macvtap: entered promiscuous mode [ 35.483669][ T5891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.495222][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.500971][ T5883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.506910][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.514304][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.523420][ T5888] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.527120][ T5888] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.531073][ T5888] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.533629][ T5888] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.547953][ T5891] veth0_vlan: entered promiscuous mode [ 35.575378][ T5891] veth1_vlan: entered promiscuous mode [ 35.593896][ T5882] veth0_vlan: entered promiscuous mode [ 35.596070][ T5883] veth0_vlan: entered promiscuous mode [ 35.603717][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.606155][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.606383][ T5883] veth1_vlan: entered promiscuous mode [ 35.613199][ T5882] veth1_vlan: entered promiscuous mode [ 35.640347][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.641070][ T5891] veth0_macvtap: entered promiscuous mode [ 35.642561][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.649517][ T5891] veth1_macvtap: entered promiscuous mode [ 35.654508][ T40] audit: type=1400 audit(1735980459.314:117): avc: denied { mount } for pid=5888 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 35.655835][ T5882] veth0_macvtap: entered promiscuous mode [ 35.660807][ T40] audit: type=1400 audit(1735980459.314:118): avc: denied { mounton } for pid=5888 comm="syz-executor" path="/syzkaller.cA87VQ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 35.664957][ T5882] veth1_macvtap: entered promiscuous mode [ 35.668584][ T40] audit: type=1400 audit(1735980459.314:119): avc: denied { mount } for pid=5888 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 35.676815][ T40] audit: type=1400 audit(1735980459.314:120): avc: denied { mounton } for pid=5888 comm="syz-executor" path="/syzkaller.cA87VQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 35.680235][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.684116][ T40] audit: type=1400 audit(1735980459.314:121): avc: denied { mounton } for pid=5888 comm="syz-executor" path="/syzkaller.cA87VQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 35.686913][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.694390][ T40] audit: type=1400 audit(1735980459.324:122): avc: denied { unmount } for pid=5888 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.698023][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.702405][ T40] audit: type=1400 audit(1735980459.334:123): avc: denied { mounton } for pid=5888 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 35.704968][ T5888] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.710587][ T40] audit: type=1400 audit(1735980459.334:124): avc: denied { mount } for pid=5888 comm="syz-executor" name="/" dev="gadgetfs" ino=6876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 35.710604][ T40] audit: type=1400 audit(1735980459.334:125): avc: denied { mount } for pid=5888 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 35.711303][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.731056][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.734162][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.736981][ T5883] veth0_macvtap: entered promiscuous mode [ 35.744520][ T5883] veth1_macvtap: entered promiscuous mode [ 35.748321][ T5891] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.751581][ T5891] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.753948][ T5891] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.756313][ T5891] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.762719][ T5882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.765585][ T5882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.768241][ T5882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.771166][ T5882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.774321][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.826785][ T5882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.830170][ T5882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.832959][ T5882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.835900][ T5882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.839695][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.847314][ T5883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.850901][ T5883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.853609][ T5883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.856485][ T5883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.859132][ T5883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.862004][ T5883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.865413][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.868169][ T5882] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.871873][ T5882] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.874376][ T5882] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.876867][ T5882] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.885617][ T5883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.889835][ T5883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.892603][ T5883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.895533][ T5883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.898279][ T5883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.901328][ T5883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.903989][ T5993] ptrace attach of "/syz-executor exec"[5992] was attempted by "/syz-executor exec"[5993] [ 35.905040][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.922017][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.924615][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.930830][ T5883] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.933696][ T5883] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.936274][ T5883] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.939523][ T5883] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.976937][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.979438][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.989541][ T5896] Bluetooth: hci1: command tx timeout [ 35.990428][ T5302] Bluetooth: hci0: command tx timeout [ 35.990621][ T64] Bluetooth: hci3: command tx timeout [ 35.990764][ T64] Bluetooth: hci2: command tx timeout [ 36.020559][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.022773][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.041152][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.043374][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.060495][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.062658][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.065909][ T6000] batman_adv: batadv0: Adding interface: dummy0 [ 36.067785][ T6000] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.076451][ T6000] batman_adv: batadv0: Interface activated: dummy0 [ 36.089798][ T6000] batadv0: mtu less than device minimum [ 36.092137][ T6000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 36.095843][ T6000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 36.099527][ T6000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 36.103231][ T6000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 36.106821][ T6000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 36.110404][ T6000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 36.113883][ T6000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 36.117295][ T6000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 36.120856][ T6000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 36.135504][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.137844][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.197724][ T6016] Zero length message leads to an empty skb [ 36.216567][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'. [ 36.222716][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'. [ 36.286843][ T6031] xt_hashlimit: size too large, truncated to 1048576 [ 36.340118][ T6036] @: renamed from vlan0 (while UP) [ 36.404827][ T6042] block nbd1: Unsupported socket: shutdown callout must be supported. [ 36.407211][ T6043] block nbd1: Unsupported socket: shutdown callout must be supported. [ 36.425186][ T6042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.428490][ T6042] bond0: (slave rose0): Enslaving as an active interface with an up link [ 36.466094][ T6051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19'. [ 36.474788][ T6051] netlink: 'syz.0.19': attribute type 7 has an invalid length. [ 36.477226][ T6051] netlink: 'syz.0.19': attribute type 8 has an invalid length. [ 36.478813][ T6053] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19'. [ 36.481866][ T6053] netlink: 'syz.0.19': attribute type 7 has an invalid length. [ 36.482646][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 36.483978][ T6053] netlink: 'syz.0.19': attribute type 8 has an invalid length. [ 36.483987][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 36.487771][ T6055] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.495988][ T6051] erspan0: entered promiscuous mode [ 36.516477][ T6051] batadv_slave_1: entered promiscuous mode [ 36.669104][ T56] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 36.767254][ T6084] misc userio: Can't change port type on an already running userio instance [ 36.771537][ T6083] misc userio: Can't change port type on an already running userio instance [ 36.802357][ T6090] process 'syz.0.27' launched '/dev/fd/7' with NULL argv: empty string added [ 36.820824][ T56] usb 7-1: config 1 interface 0 has no altsetting 0 [ 36.824259][ T56] usb 7-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.40 [ 36.827438][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.830462][ T56] usb 7-1: Product: syz [ 36.831742][ T56] usb 7-1: Manufacturer: syz [ 36.833184][ T56] usb 7-1: SerialNumber: syz [ 37.412934][ T6104] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 37.573140][ T6120] binder: BINDER_SET_CONTEXT_MGR already set [ 37.575516][ T6120] binder: 6118:6120 ioctl 4018620d 20000040 returned -16 [ 37.836493][ T6167] QAT: Stopping all acceleration devices. [ 37.998467][ T6185] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.070996][ T5302] Bluetooth: hci1: command tx timeout [ 38.079206][ T5302] Bluetooth: hci2: command tx timeout [ 38.080847][ T5302] Bluetooth: hci3: command tx timeout [ 38.407699][ T6202] netlink: 36 bytes leftover after parsing attributes in process `syz.1.57'. [ 38.423868][ T6201] syz.1.57 uses obsolete (PF_INET,SOCK_PACKET) [ 38.779927][ T6214] sg_write: process 48 (syz.3.59) changed security contexts after opening file descriptor, this is not allowed. [ 38.780669][ T6215] sg_write: data in/out 588840944/123 bytes for SCSI command 0x94-- guessing data in; [ 38.780669][ T6215] program syz.3.59 not setting count and/or reply_len properly [ 38.788311][ T6214] program syz.3.59 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.839243][ T6217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.60'. [ 38.863646][ T6221] netlink: 'syz.1.61': attribute type 9 has an invalid length. [ 38.870615][ T6221] netlink: 104 bytes leftover after parsing attributes in process `syz.1.61'. [ 38.871348][ T6223] netlink: 'syz.3.62': attribute type 32 has an invalid length. [ 38.875258][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 38.877751][ T6223] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 39.047127][ T6233] batadv0: entered promiscuous mode [ 39.098441][ T6231] xt_hashlimit: size too large, truncated to 1048576 [ 39.149555][ T6240] @: renamed from vlan0 (while UP) [ 39.173633][ T56] usbhid 7-1:1.0: can't add hid device: -71 [ 39.175473][ T56] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 39.181305][ T56] usb 7-1: USB disconnect, device number 2 [ 39.215011][ T6242] netlink: 'syz.2.68': attribute type 1 has an invalid length. [ 39.315464][ T6252] capability: warning: `syz.2.71' uses 32-bit capabilities (legacy support in use) [ 39.990688][ T6291] tty tty24: ldisc open failed (-12), clearing slot 23 [ 40.149155][ T5896] Bluetooth: hci3: command tx timeout [ 40.150962][ T5896] Bluetooth: hci2: command tx timeout [ 40.152539][ T5896] Bluetooth: hci1: command tx timeout [ 40.167997][ T6302] syz.1.89[6302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.168055][ T6302] syz.1.89[6302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.171428][ T6302] syz.1.89[6302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.228778][ T5896] Bluetooth: hci0: command tx timeout [ 40.405649][ T40] kauditd_printk_skb: 241 callbacks suppressed [ 40.405659][ T40] audit: type=1400 audit(1735980464.064:367): avc: denied { getopt } for pid=6310 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.458044][ T6312] netlink: 'syz.3.92': attribute type 33 has an invalid length. [ 41.021351][ T6314] Invalid/unusable pipe [ 41.051560][ T40] audit: type=1400 audit(1735980464.714:368): avc: denied { getopt } for pid=6315 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.058185][ T40] audit: type=1400 audit(1735980464.714:369): avc: denied { write } for pid=6315 comm="syz.2.94" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 41.064915][ T40] audit: type=1400 audit(1735980464.714:370): avc: denied { ioctl } for pid=6315 comm="syz.2.94" path="socket:[9036]" dev="sockfs" ino=9036 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.072556][ T40] audit: type=1400 audit(1735980464.714:371): avc: denied { append } for pid=6317 comm="syz.1.95" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 41.102804][ T40] audit: type=1400 audit(1735980464.764:372): avc: denied { unmount } for pid=5888 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.153315][ T6326] binder_alloc: 6325: binder_alloc_buf, no vma [ 41.178460][ T40] audit: type=1400 audit(1735980464.834:373): avc: denied { connect } for pid=6327 comm="syz.2.99" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.182199][ T6328] veth1_to_batadv: entered promiscuous mode [ 41.186451][ T6328] macsec1: entered promiscuous mode [ 41.192753][ T40] audit: type=1400 audit(1735980464.854:374): avc: denied { mounton } for pid=6327 comm="syz.2.99" path="/24/bus" dev="tmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.222179][ T6330] __nla_validate_parse: 6 callbacks suppressed [ 41.222188][ T6330] netlink: 40 bytes leftover after parsing attributes in process `syz.2.100'. [ 41.283312][ T6336] netlink: 'syz.2.103': attribute type 1 has an invalid length. [ 41.285511][ T6336] netlink: 32 bytes leftover after parsing attributes in process `syz.2.103'. [ 41.310242][ T40] audit: type=1400 audit(1735980464.974:375): avc: denied { read write } for pid=6339 comm="syz.3.105" name="udmabuf" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.317759][ T40] audit: type=1400 audit(1735980464.974:376): avc: denied { open } for pid=6339 comm="syz.3.105" path="/dev/udmabuf" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.324423][ T6342] netlink: 256 bytes leftover after parsing attributes in process `syz.2.106'. [ 41.341524][ T6342] warning: `syz.2.106' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 41.348908][ T6342] batman_adv: batadv0: Interface deactivated: dummy0 [ 41.350918][ T6342] batman_adv: batadv0: Removing interface: dummy0 [ 41.354399][ T6342] bridge_slave_0: left allmulticast mode [ 41.356002][ T6342] bridge_slave_0: left promiscuous mode [ 41.358150][ T6342] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.363988][ T6342] bridge_slave_1: left allmulticast mode [ 41.365564][ T6342] bridge_slave_1: left promiscuous mode [ 41.367157][ T6342] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.372525][ T6342] bond0: (slave bond_slave_0): Releasing backup interface [ 41.377447][ T6342] bond0: (slave bond_slave_1): Releasing backup interface [ 41.391398][ T6342] team0: Port device team_slave_0 removed [ 41.395194][ T6345] net_ratelimit: 13 callbacks suppressed [ 41.395203][ T6345] IPv4: Oversized IP packet from 127.202.26.0 [ 41.400342][ T6346] netlink: 'syz.2.106': attribute type 10 has an invalid length. [ 41.401384][ T6342] team0: Port device team_slave_1 removed [ 41.406365][ T6342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.408607][ T6342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.423494][ T6342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.425574][ T6342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.437597][ T6348] netlink: 40 bytes leftover after parsing attributes in process `syz.3.108'. [ 41.452362][ T6346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.455036][ T6342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 41.455425][ T6346] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 41.764917][ T6353] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 41.768355][ T6353] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 41.921432][ T6372] macvlan1: entered promiscuous mode [ 41.930239][ T6372] macvlan1 (unregistering): left promiscuous mode [ 42.229715][ T5896] Bluetooth: hci2: command tx timeout [ 42.229745][ T5890] Bluetooth: hci3: command tx timeout [ 42.238832][ T5890] Bluetooth: hci1: command tx timeout [ 42.699729][ T6385] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.701912][ T6385] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.704570][ T6385] bridge0: entered allmulticast mode [ 42.707953][ T6386] bridge_slave_1: left allmulticast mode [ 42.710005][ T6386] bridge_slave_1: left promiscuous mode [ 42.711842][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.718366][ T6386] bridge_slave_0: left allmulticast mode [ 42.720149][ T6386] bridge_slave_0: left promiscuous mode [ 42.721759][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.005033][ T6400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.124'. [ 43.020029][ T6407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.126'. [ 43.063374][ T6412] IPVS: length: 80 != 8 [ 43.064731][ T6413] IPVS: length: 80 != 8 [ 43.074905][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.077100][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.079815][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.082036][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.084084][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.086121][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.088160][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.090692][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.092780][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.094854][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.096963][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.099229][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.101351][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.103458][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.105600][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.107793][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.110126][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.112295][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.114580][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.116697][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.119188][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.119860][ T6417] devtmpfs: Cannot enable quota on remount [ 43.121233][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.121256][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.121267][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.121278][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.131538][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.133632][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.135701][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.137779][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.140066][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.142201][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.144312][ T6098] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.148797][ T6098] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 43.224432][ T6425] netlink: 40 bytes leftover after parsing attributes in process `syz.3.132'. [ 43.226967][ T6425] netlink: 40 bytes leftover after parsing attributes in process `syz.3.132'. [ 43.229738][ T6425] netlink: 40 bytes leftover after parsing attributes in process `syz.3.132'. [ 43.258087][ T6431] program syz.3.133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.328955][ T35] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 43.491345][ T35] usb 6-1: config 0 has no interfaces? [ 43.492922][ T35] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 43.495522][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.499554][ T35] usb 6-1: config 0 descriptor?? [ 43.561988][ T6450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=6450 comm=syz.3.138 [ 43.756519][ T1468] usb 6-1: USB disconnect, device number 2 [ 43.779732][ T6465] netlink: 64 bytes leftover after parsing attributes in process `syz.1.142'. [ 43.952237][ T6477] configfs: Unknown parameter '/˂Vk]״"/_}!' [ 44.041059][ T6479] input: syz0 as /devices/virtual/input/input7 [ 44.327811][ T1137] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.427144][ T1137] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.461375][ T5302] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.464204][ T5302] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.466746][ T5302] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.469476][ T5302] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.471796][ T5302] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.474028][ T5302] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.499266][ T1137] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.534713][ T6497] trusted_key: syz.3.154 sent an empty control message without MSG_MORE. [ 44.556649][ T6491] chnl_net:caif_netlink_parms(): no params data found [ 44.568078][ T1137] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.638541][ T6491] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.641745][ T6491] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.643778][ T6491] bridge_slave_0: entered allmulticast mode [ 44.646111][ T6491] bridge_slave_0: entered promiscuous mode [ 44.649909][ T6491] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.652009][ T6491] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.654025][ T6491] bridge_slave_1: entered allmulticast mode [ 44.656319][ T6491] bridge_slave_1: entered promiscuous mode [ 44.675714][ T6491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.680074][ T6491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.699432][ T6491] team0: Port device team_slave_0 added [ 44.708035][ T6491] team0: Port device team_slave_1 added [ 44.738281][ T6491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.746012][ T6491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.754091][ T6491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.758067][ T6491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.760333][ T6491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.767668][ T6491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.771601][ T1137] bridge_slave_1: left allmulticast mode [ 44.773351][ T1137] bridge_slave_1: left promiscuous mode [ 44.775594][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.781290][ T1137] bridge_slave_0: left allmulticast mode [ 44.782950][ T1137] bridge_slave_0: left promiscuous mode [ 44.784681][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.962857][ C3] vcan0: j1939_tp_rxtimer: 0xffff88805034d800: rx timeout, send abort [ 44.965926][ C3] vcan0: j1939_tp_rxtimer: 0xffff88805034c000: rx timeout, send abort [ 44.968365][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff88805034d800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 44.973040][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff88805034c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 45.050031][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.053848][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.062383][ T1137] bond0 (unregistering): Released all slaves [ 45.097992][ T6491] hsr_slave_0: entered promiscuous mode [ 45.100463][ T6491] hsr_slave_1: entered promiscuous mode [ 45.102433][ T6491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.104730][ T6491] Cannot create hsr debugfs directory [ 45.213798][ T6491] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 45.219429][ T6491] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 45.226548][ T6491] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 45.233617][ T6491] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 45.278272][ T6491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.279809][ T5896] Bluetooth: hci3: command 0x0405 tx timeout [ 45.316816][ T6518] mkiss: ax0: crc mode is auto. [ 45.323642][ T6491] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.328842][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.331019][ T1226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.336766][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.338867][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.381826][ T1137] hsr_slave_0: left promiscuous mode [ 45.383783][ T1137] hsr_slave_1: left promiscuous mode [ 45.385769][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.387923][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.394529][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.396734][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.413047][ T1137] veth1_macvtap: left promiscuous mode [ 45.415136][ T1137] veth0_macvtap: left promiscuous mode [ 45.416758][ T1137] veth1_vlan: left promiscuous mode [ 45.418291][ T1137] veth0_vlan: left promiscuous mode [ 45.442681][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 45.442690][ T40] audit: type=1400 audit(1735980469.104:419): avc: denied { create } for pid=6525 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 45.559692][ T40] audit: type=1400 audit(1735980469.224:420): avc: denied { ioctl } for pid=6530 comm="syz.3.158" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.717572][ T40] audit: type=1400 audit(1735980469.374:421): avc: denied { shutdown } for pid=6534 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.719066][ T6541] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 45.786555][ T40] audit: type=1400 audit(1735980469.444:422): avc: denied { map } for pid=6546 comm="syz.2.160" path="socket:[13377]" dev="sockfs" ino=13377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.794031][ T40] audit: type=1400 audit(1735980469.444:423): avc: denied { read } for pid=6546 comm="syz.2.160" path="socket:[13377]" dev="sockfs" ino=13377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.929195][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 45.979531][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 46.371038][ T6551] (unnamed net_device) (uninitialized): option use_carrier: invalid value (7) [ 46.373949][ T40] audit: type=1400 audit(1735980470.034:424): avc: denied { bind } for pid=6550 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.380001][ T6551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17152 sclass=netlink_route_socket pid=6551 comm=syz.3.161 [ 46.383618][ T40] audit: type=1400 audit(1735980470.044:425): avc: denied { write } for pid=6550 comm="syz.3.161" path="socket:[12547]" dev="sockfs" ino=12547 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.402868][ T6491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.421848][ T40] audit: type=1400 audit(1735980470.084:426): avc: denied { getattr } for pid=6559 comm="syz.2.162" path="socket:[13383]" dev="sockfs" ino=13383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 46.492586][ T40] audit: type=1400 audit(1735980470.154:427): avc: denied { mount } for pid=6559 comm="syz.2.162" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 46.548741][ T5890] Bluetooth: hci0: command tx timeout [ 46.565797][ T6491] veth0_vlan: entered promiscuous mode [ 46.570405][ T6491] veth1_vlan: entered promiscuous mode [ 46.573058][ T40] audit: type=1400 audit(1735980470.234:428): avc: denied { map } for pid=6578 comm="syz.2.164" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 46.584643][ T6491] veth0_macvtap: entered promiscuous mode [ 46.587764][ T6491] veth1_macvtap: entered promiscuous mode [ 46.595138][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.598651][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.602085][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.605191][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.609275][ T6491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.623421][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.626515][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.634638][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.637608][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.641328][ T6491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.648771][ T6491] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.651291][ T6491] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.653755][ T6491] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.656227][ T6491] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.686288][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.688574][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.701818][ T1226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.704110][ T1226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.941612][ T6616] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 46.943690][ T6616] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 46.948310][ T6616] vhci_hcd vhci_hcd.0: Device attached [ 46.957015][ T6617] vhci_hcd: unknown pdu 1 [ 46.960986][ T69] vhci_hcd: stop threads [ 46.962542][ T69] vhci_hcd: release socket [ 46.963880][ T69] vhci_hcd: disconnect device [ 47.538893][ T56] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 47.683158][ T6659] netdevsim netdevsim4: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 47.700277][ T56] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.703404][ T56] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.706173][ T56] usb 8-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 47.711449][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.718524][ T56] usb 8-1: config 0 descriptor?? [ 47.761159][ T6662] overlayfs: failed to resolve './file0': -2 [ 47.839732][ T6666] __nla_validate_parse: 1 callbacks suppressed [ 47.839748][ T6666] netlink: 256 bytes leftover after parsing attributes in process `syz.4.180'. [ 47.925500][ T6674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.182'. [ 47.966447][ T6674] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3 (6 ns) > initial count (2 ns). Using initial count to start timer. [ 48.130699][ T56] usbhid 8-1:0.0: can't add hid device: -71 [ 48.132570][ T56] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 48.137426][ T56] usb 8-1: USB disconnect, device number 2 [ 48.181429][ T6711] QAT: failed to copy from user. [ 48.289325][ T6729] overlayfs: failed to resolve './file0': -2 [ 48.327128][ T6734] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 48.329999][ T6734] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 48.602846][ T6753] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 48.607452][ T6753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5132 sclass=netlink_route_socket pid=6753 comm=syz.2.195 [ 48.638759][ T5890] Bluetooth: hci0: command tx timeout [ 48.697855][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.701241][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.801484][ T6771] capability: warning: `syz.2.201' uses deprecated v2 capabilities in a way that may be insecure [ 48.862027][ T6778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.204'. [ 48.865376][ T6778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.204'. [ 48.930814][ T5983] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 48.941894][ T6782] CUSE: unknown device info "ts_offset" [ 48.943558][ T6782] CUSE: DEVNAME unspecified [ 48.969655][ T6784] netlink: 32 bytes leftover after parsing attributes in process `syz.0.204'. [ 49.020883][ T6786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.207'. [ 49.044644][ T6788] fuse: Bad value for 'group_id' [ 49.046177][ T6788] fuse: Bad value for 'group_id' [ 49.058800][ T5983] usb 8-1: device descriptor read/64, error -71 [ 49.251433][ T6803] netlink: 'syz.2.213': attribute type 2 has an invalid length. [ 49.256627][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'. [ 49.287609][ T6806] netlink: 168 bytes leftover after parsing attributes in process `syz.2.214'. [ 49.298773][ T5983] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 49.342983][ T6806] netlink: 24 bytes leftover after parsing attributes in process `syz.2.214'. [ 49.422313][ T6816] netlink: 36 bytes leftover after parsing attributes in process `syz.4.215'. [ 49.440592][ T5983] usb 8-1: device descriptor read/64, error -71 [ 49.446280][ T6818] Bluetooth: MGMT ver 1.23 [ 49.475518][ T6826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6826 comm=syz.4.218 [ 49.479734][ T6826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=6826 comm=syz.4.218 [ 49.483509][ T6826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6826 comm=syz.4.218 [ 49.546198][ T6833] binder: 6832:6833 ioctl c028660f 20000240 returned -22 [ 49.558842][ T5983] usb usb8-port1: attempt power cycle [ 49.573380][ T6833] bond2 (unregistering): Released all slaves [ 49.766160][ T6848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=6848 comm=syz.0.224 [ 49.841327][ T6847] block nbd0: shutting down sockets [ 49.898793][ T5983] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 49.922245][ T5983] usb 8-1: device descriptor read/8, error -71 [ 50.001127][ T6866] Cannot find add_set index 0 as target [ 50.010596][ T6866] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 50.013823][ T6866] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 50.158827][ T5983] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 50.179162][ T5983] usb 8-1: device descriptor read/8, error -71 [ 50.299899][ T5983] usb usb8-port1: unable to enumerate USB device [ 50.458592][ T6880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=6880 comm=syz.2.234 [ 50.527217][ T6886] netlink: 'syz.4.238': attribute type 1 has an invalid length. [ 50.538735][ T35] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 50.538794][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.591740][ T6888] net veth1_virt_wifi : renamed from virt_wifi0 [ 50.621206][ T6891] unknown channel width for channel at 909000KHz? [ 50.623167][ T6891] unknown channel width for channel at 909000KHz? [ 50.625019][ T6891] unknown channel width for channel at 909000KHz? [ 50.668858][ T8] usb 5-1: device descriptor read/64, error -71 [ 50.674716][ T6893] sctp: [Deprecated]: syz.4.241 (pid 6893) Use of struct sctp_assoc_value in delayed_ack socket option. [ 50.674716][ T6893] Use struct sctp_sack_info instead [ 50.688839][ T35] usb 8-1: device descriptor read/64, error -71 [ 50.708816][ T5890] Bluetooth: hci0: command tx timeout [ 50.757300][ T6893] syz.4.241 (6893) used greatest stack depth: 20816 bytes left [ 50.833459][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 50.833470][ T40] audit: type=1400 audit(1735980474.494:477): avc: denied { write } for pid=6899 comm="syz.4.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 50.908804][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 50.938764][ T35] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 50.954768][ T6906] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 50.958142][ T6906] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 50.983545][ T40] audit: type=1400 audit(1735980474.644:478): avc: denied { read write } for pid=6907 comm="syz.4.247" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 50.990841][ T40] audit: type=1400 audit(1735980474.644:479): avc: denied { open } for pid=6907 comm="syz.4.247" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 50.997465][ T40] audit: type=1400 audit(1735980474.644:480): avc: denied { ioctl } for pid=6907 comm="syz.4.247" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 51.038739][ T8] usb 5-1: device descriptor read/64, error -71 [ 51.070319][ T35] usb 8-1: device descriptor read/64, error -71 [ 51.090629][ T6910] Unknown options in mask 5 [ 51.158913][ T8] usb usb5-port1: attempt power cycle [ 51.178861][ T35] usb usb8-port1: attempt power cycle [ 51.313622][ T40] audit: type=1400 audit(1735980474.974:481): avc: denied { watch } for pid=6917 comm="syz.4.250" path="/39" dev="tmpfs" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.319942][ T40] audit: type=1400 audit(1735980474.974:482): avc: denied { watch_sb } for pid=6917 comm="syz.4.250" path="/39" dev="tmpfs" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 51.413085][ T6918] kvm: kvm [6917]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x1f0000d62e [ 51.509024][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 51.538727][ T35] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 51.539161][ T8] usb 5-1: device descriptor read/8, error -71 [ 51.569440][ T35] usb 8-1: device descriptor read/8, error -71 [ 51.724533][ T40] audit: type=1400 audit(1735980475.384:483): avc: denied { read } for pid=6921 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 51.810641][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 51.830167][ T8] usb 5-1: device descriptor read/8, error -71 [ 51.846791][ T40] audit: type=1400 audit(1735980475.504:484): avc: denied { mount } for pid=6929 comm="syz.3.254" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.885290][ T40] audit: type=1400 audit(1735980475.544:485): avc: denied { mount } for pid=6934 comm="syz.3.255" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 51.891672][ T40] audit: type=1400 audit(1735980475.554:486): avc: denied { getopt } for pid=6934 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 51.945071][ T8] usb usb5-port1: unable to enumerate USB device [ 51.951916][ T6939] mac80211_hwsim hwsim4 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 52.033553][ T6949] netlink: 'syz.3.259': attribute type 16 has an invalid length. [ 52.035725][ T6949] netlink: 'syz.3.259': attribute type 3 has an invalid length. [ 52.037880][ T6949] netlink: 'syz.3.259': attribute type 1 has an invalid length. [ 52.043971][ T6949] netlink: 'syz.3.259': attribute type 2 has an invalid length. [ 52.773565][ T6994] Bluetooth: MGMT ver 1.23 [ 52.788726][ T5890] Bluetooth: hci0: command tx timeout [ 52.877656][ T7001] __nla_validate_parse: 10 callbacks suppressed [ 52.877667][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.273'. [ 52.944977][ T7006] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 7006 comm: syz.3.274) [ 53.689399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.715514][ T5896] Bluetooth: hci0: unexpected event for opcode 0x0413 [ 53.800012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.941785][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.975579][ T84] wlan0: Trigger new scan to find an IBSS to join [ 53.988883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.032039][ T7072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.291'. [ 54.078184][ T1137] wlan0: Trigger new scan to find an IBSS to join [ 54.130909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.135746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.159028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.178170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 54.200814][ T1137] wlan0: Trigger new scan to find an IBSS to join [ 54.280537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 54.285689][ T69] wlan0: Trigger new scan to find an IBSS to join [ 54.383931][ T69] wlan0: Trigger new scan to find an IBSS to join [ 54.498792][ T35] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 54.508721][ T833] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 54.528768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.650068][ T35] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 54.652681][ T35] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 54.657657][ T35] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 54.660811][ T35] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 54.664318][ T833] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 54.664834][ T35] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 54.666592][ T833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.672633][ T35] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 54.675472][ T35] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 54.676113][ T833] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 54.677693][ T35] usb 8-1: Product: syz [ 54.677702][ T35] usb 8-1: Manufacturer: syz [ 54.678743][ T7101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.300'. [ 54.680305][ T833] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 54.687356][ T35] cdc_wdm 8-1:1.0: skipping garbage [ 54.689285][ T833] usb 7-1: Manufacturer: syz [ 54.694008][ T833] usb 7-1: config 0 descriptor?? [ 54.694573][ T35] cdc_wdm 8-1:1.0: skipping garbage [ 54.702779][ T35] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 54.704503][ T35] cdc_wdm 8-1:1.0: Unknown control protocol [ 54.749029][ T833] rc_core: IR keymap rc-hauppauge not found [ 54.750790][ T833] Registered IR keymap rc-empty [ 54.753226][ T833] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 54.756813][ T833] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input8 [ 54.830360][ T7103] kvm: emulating exchange as write [ 54.914222][ T35] usb 7-1: USB disconnect, device number 3 [ 54.922894][ T7115] dccp_invalid_packet: P.Data Offset(100) too large [ 54.994214][ T5983] usb 8-1: USB disconnect, device number 11 [ 54.994264][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 54.998137][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 54.999858][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 55.002552][ T7086] cdc_wdm 8-1:1.0: Tx URB error: -19 [ 55.202616][ T7086] mmap: syz.3.296 (7086) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.697602][ T7138] fuse: Bad value for 'fd' [ 55.703411][ T7138] overlayfs: missing 'lowerdir' [ 55.736776][ T7142] IPv6: Can't replace route, no match found [ 55.768860][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.308'. [ 55.771314][ T7144] vxfs: WRONG superblock magic 00000000 at 1 [ 55.774865][ T7144] vxfs: WRONG superblock magic 00000000 at 8 [ 55.776757][ T7144] vxfs: can't find superblock. [ 55.897872][ T7152] netlink: 'syz.0.314': attribute type 1 has an invalid length. [ 55.900354][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'. [ 55.940564][ T7152] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.040481][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 56.040495][ T40] audit: type=1400 audit(1735980479.704:517): avc: denied { unmount } for pid=5888 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.073104][ T7174] netlink: 28 bytes leftover after parsing attributes in process `syz.2.321'. [ 56.164293][ T40] audit: type=1400 audit(1735980479.824:518): avc: denied { name_bind } for pid=7184 comm="syz.0.325" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 56.187884][ T40] audit: type=1400 audit(1735980479.844:519): avc: denied { write } for pid=7189 comm="syz.2.326" name="route" dev="proc" ino=4026532897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 56.200740][ T7182] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3150105819 (25200846552 ns) > initial count (8234761088 ns). Using initial count to start timer. [ 56.207221][ T40] audit: type=1400 audit(1735980479.864:520): avc: denied { connect } for pid=7181 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 56.224384][ T7190] netlink: 'syz.2.326': attribute type 17 has an invalid length. [ 56.226790][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'. [ 56.229578][ T7190] netlink: 28 bytes leftover after parsing attributes in process `syz.2.326'. [ 56.257897][ T40] audit: type=1400 audit(1735980479.914:521): avc: denied { write } for pid=7181 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 56.263343][ T7192] netdevsim netdevsim3: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 56.442795][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.327'. [ 56.447818][ T40] audit: type=1400 audit(1735980480.104:522): avc: denied { write } for pid=7197 comm="syz.2.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.453648][ T40] audit: type=1400 audit(1735980480.114:523): avc: denied { read } for pid=7197 comm="syz.2.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.510702][ T40] audit: type=1400 audit(1735980480.174:524): avc: denied { ioctl } for pid=7201 comm="syz.4.329" path="socket:[16627]" dev="sockfs" ino=16627 ioctlcmd=0xf515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 56.519423][ T40] audit: type=1400 audit(1735980480.184:525): avc: denied { write } for pid=7203 comm="syz.3.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.520028][ T7204] rdma_op ffff88804fccd1f0 conn xmit_rdma 0000000000000000 [ 56.585349][ T40] audit: type=1400 audit(1735980480.244:526): avc: denied { unlink } for pid=7199 comm="syz.2.328" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 56.593958][ T7200] netlink: 32 bytes leftover after parsing attributes in process `syz.2.328'. [ 57.510759][ T105] wlan0: Trigger new scan to find an IBSS to join [ 57.983235][ T7272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7272 comm=syz.3.347 [ 58.002893][ T7273] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.346'. [ 58.005676][ T7273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 58.477581][ T5896] Bluetooth: hci3: unexpected event for opcode 0x0c47 [ 58.737858][ T5896] Bluetooth: hci3: unexpected event for opcode 0x0428 [ 58.738228][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.362'. [ 58.830229][ T7374] xt_CONNSECMARK: invalid mode: 0 [ 58.854762][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 58.897528][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.370'. [ 58.949970][ T1330] cfg80211: failed to load regulatory.db [ 59.028860][ T7391] syz.4.373: attempt to access beyond end of device [ 59.028860][ T7391] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 59.032490][ T7391] vxfs: unable to read disk superblock at 1 [ 59.034329][ T7391] syz.4.373: attempt to access beyond end of device [ 59.034329][ T7391] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 59.037849][ T7391] vxfs: unable to read disk superblock at 8 [ 59.040281][ T7391] vxfs: can't find superblock. [ 59.082598][ T7400] geneve2: entered promiscuous mode [ 59.084169][ T7400] geneve2: entered allmulticast mode [ 59.112830][ T7397] nfs4: Bad value for 'source' [ 59.488819][ T35] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 59.648719][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 59.651529][ T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 59.654361][ T35] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 59.659807][ T35] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 59.662412][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.664712][ T35] usb 5-1: Product: syz [ 59.665922][ T35] usb 5-1: Manufacturer: syz [ 59.667261][ T35] usb 5-1: SerialNumber: syz [ 59.872587][ T35] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 59.881998][ T35] usb 5-1: USB disconnect, device number 6 [ 59.886036][ T35] usblp0: removed [ 59.896001][ T7426] netlink: 36 bytes leftover after parsing attributes in process `syz.0.381'. [ 59.991055][ T7429] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 59.996043][ T7428] overlay: filesystem on ./bus not supported as upperdir [ 60.117711][ T7438] ubi0: attaching mtd0 [ 60.120548][ T7438] ubi0: scanning is finished [ 60.121886][ T7438] ubi0: empty MTD device detected [ 60.188008][ T7438] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 60.190213][ T7438] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 60.192219][ T7438] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 60.194148][ T7438] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 60.196248][ T7438] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 60.198203][ T7438] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 60.200689][ T7438] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 85024003 [ 60.203375][ T7438] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 60.206235][ T7440] ubi0: background thread "ubi_bgt0d" started, PID 7440 [ 60.268768][ T1468] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 60.398901][ T1468] usb 8-1: device descriptor read/64, error -71 [ 60.549728][ T1145] wlan0: Trigger new scan to find an IBSS to join [ 60.558792][ T1330] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 60.640282][ T1468] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 60.674857][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'. [ 60.677610][ T7458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 60.709608][ T1330] usb 9-1: Using ep0 maxpacket: 16 [ 60.711183][ T7460] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=54561 sclass=netlink_xfrm_socket pid=7460 comm=syz.0.392 [ 60.712253][ T1330] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.718051][ T1330] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.721465][ T1330] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 60.725796][ T1330] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 60.729782][ T1330] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.733862][ T1330] usb 9-1: config 0 descriptor?? [ 60.768762][ T1468] usb 8-1: device descriptor read/64, error -71 [ 60.860986][ T7472] netlink: 32 bytes leftover after parsing attributes in process `syz.0.396'. [ 60.861656][ T7473] xt_ipcomp: unknown flags 12 [ 60.863572][ T7472] netlink: 32 bytes leftover after parsing attributes in process `syz.0.396'. [ 60.867470][ T7472] netlink: 32 bytes leftover after parsing attributes in process `syz.0.396'. [ 60.870274][ T7472] netlink: 32 bytes leftover after parsing attributes in process `syz.0.396'. [ 60.879030][ T1468] usb usb8-port1: attempt power cycle [ 60.950142][ T5896] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 61.019161][ T7479] block nbd0: shutting down sockets [ 61.142284][ T1330] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 61.144641][ T1330] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 61.146579][ T1330] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 61.148601][ T1330] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 61.150585][ T1330] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 61.155333][ T1330] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 61.172884][ T1330] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 61.175417][ T1330] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 61.218807][ T1468] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 61.239176][ T1468] usb 8-1: device descriptor read/8, error -71 [ 61.268980][ T5983] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 61.278961][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 61.278970][ T40] audit: type=1400 audit(1735980484.944:555): avc: denied { bind } for pid=7491 comm="syz.0.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 61.309226][ T40] audit: type=1400 audit(1735980484.974:556): avc: denied { unmount } for pid=5883 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 61.347495][ T7453] netlink: 'syz.4.389': attribute type 13 has an invalid length. [ 61.443100][ T5983] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 61.445521][ T5983] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 61.448260][ T5983] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.452139][ T5983] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 61.454760][ T5983] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.478784][ T1468] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 61.498278][ T7504] futex_wake_op: syz.0.406 tries to shift op by -1; fix this program [ 61.509452][ T1468] usb 8-1: device descriptor read/8, error -71 [ 61.526696][ T7504] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.549807][ T69] wlan0: Creating new IBSS network, BSSID 16:ef:9d:8a:63:29 [ 61.611584][ T7504] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.628878][ T1468] usb usb8-port1: unable to enumerate USB device [ 61.662903][ T7482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.666622][ T5983] usb 7-1: usb_control_msg returned -32 [ 61.666897][ T7482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.668298][ T5983] usbtmc 7-1:16.0: can't read capabilities [ 61.678523][ T5983] usb 7-1: USB disconnect, device number 4 [ 61.686880][ T7504] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.860647][ T7504] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.921292][ T7504] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.926178][ T7504] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.931773][ T7504] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.937268][ T7504] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.202295][ T832] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 62.207891][ T832] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 62.212225][ T832] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 62.215511][ T832] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 62.339251][ T5983] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 62.402799][ T7518] netlink: 'syz.2.410': attribute type 2 has an invalid length. [ 62.431411][ T40] audit: type=1400 audit(1735980486.094:557): avc: denied { mounton } for pid=7520 comm="syz.2.411" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 62.439033][ T40] audit: type=1400 audit(1735980486.094:558): avc: denied { ioctl } for pid=7520 comm="syz.2.411" path="/108/file0" dev="configfs" ino=15 ioctlcmd=0x6405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.478773][ T5983] usb 9-1: device descriptor read/64, error -32 [ 62.612982][ T40] audit: type=1400 audit(1735980486.274:559): avc: denied { write } for pid=7530 comm="syz.2.414" path="socket:[18192]" dev="sockfs" ino=18192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.718823][ T5983] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 62.828267][ T7553] fuse: Unknown parameter 'rootZod0000 ' [ 62.868878][ T5983] usb 9-1: device descriptor read/64, error -32 [ 62.995497][ T40] audit: type=1400 audit(1735980486.654:560): avc: denied { bind } for pid=7561 comm="syz.0.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.000099][ T7562] ======================================================= [ 63.000099][ T7562] WARNING: The mand mount option has been deprecated and [ 63.000099][ T7562] and is ignored by this kernel. Remove the mand [ 63.000099][ T7562] option from the mount to silence this warning. [ 63.000099][ T7562] ======================================================= [ 63.001037][ T40] audit: type=1400 audit(1735980486.654:561): avc: denied { remount } for pid=7561 comm="syz.0.424" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.001518][ T7563] option changes via remount are deprecated (pid=7561 comm=syz.0.424) [ 63.009720][ T7563] ieee802154 phy0 wpan0: encryption failed: -22 [ 63.010797][ T7562] option changes via remount are deprecated (pid=7561 comm=syz.0.424) [ 63.017317][ T7566] __nla_validate_parse: 32 callbacks suppressed [ 63.017325][ T7566] netlink: 20 bytes leftover after parsing attributes in process `syz.0.424'. [ 63.077225][ T40] audit: type=1400 audit(1735980486.737:562): avc: denied { setopt } for pid=7572 comm="syz.3.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 63.082703][ T40] audit: type=1400 audit(1735980486.737:563): avc: denied { ioctl } for pid=7572 comm="syz.3.427" path="socket:[18243]" dev="sockfs" ino=18243 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 63.116345][ T40] audit: type=1400 audit(1735980486.777:564): avc: denied { create } for pid=7583 comm="syz.0.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 63.128798][ T5983] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 63.159025][ T5983] usb 9-1: device descriptor read/8, error -32 [ 63.195219][ T7587] netlink: 32 bytes leftover after parsing attributes in process `syz.3.431'. [ 63.201111][ T7588] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1, syncid = 4, id = 0 [ 63.201839][ T7587] IPVS: stopping backup sync thread 7588 ... [ 63.359736][ T7601] batadv_slave_1: entered promiscuous mode [ 63.363489][ T7600] batadv_slave_1: left promiscuous mode [ 63.478745][ T6695] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 63.495023][ T7609] overlayfs: conflicting options: userxattr,redirect_dir=on [ 63.618752][ T6695] usb 5-1: device descriptor read/64, error -71 [ 63.878759][ T6695] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 64.008870][ T6695] usb 5-1: device descriptor read/64, error -71 [ 64.072707][ T832] usb 9-1: USB disconnect, device number 2 [ 64.118988][ T6695] usb usb5-port1: attempt power cycle [ 64.375636][ T7628] fuse: blksize only supported for fuseblk [ 64.389921][ T7628] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 64.479504][ T6695] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 64.494282][ T105] Bluetooth: hci4: Frame reassembly failed (-84) [ 64.509673][ T6695] usb 5-1: device descriptor read/8, error -71 [ 64.717932][ T7661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2074 sclass=netlink_route_socket pid=7661 comm=syz.2.452 [ 64.770360][ T6695] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 64.799898][ T6695] usb 5-1: device descriptor read/8, error -71 [ 64.922046][ T6695] usb usb5-port1: unable to enumerate USB device [ 65.576793][ T7664] netlink: 'syz.4.453': attribute type 1 has an invalid length. [ 65.641274][ T7668] binder: 7667:7668 ioctl 8004550f 20000200 returned -22 [ 65.914309][ T7680] netlink: 52 bytes leftover after parsing attributes in process `syz.2.460'. [ 66.152054][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.461'. [ 66.224969][ T7682] hsr_slave_1 (unregistering): left promiscuous mode [ 66.548822][ T5896] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 66.550042][ T5302] Bluetooth: hci4: command 0x1003 tx timeout [ 66.613145][ T7691] netlink: 'syz.2.464': attribute type 12 has an invalid length. [ 66.814444][ T7705] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 66.825777][ T7707] input: syz0 as /devices/virtual/input/input10 [ 66.827439][ T5896] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 66.827627][ T7707] input: failed to attach handler leds to device input10, error: -6 [ 66.852212][ T7731] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 66.858359][ T7731] cramfs: wrong magic [ 66.995024][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 66.995033][ T40] audit: type=1400 audit(1735980490.657:580): avc: denied { append } for pid=7741 comm="syz.3.477" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 67.005897][ T40] audit: type=1400 audit(1735980490.667:581): avc: denied { setattr } for pid=7741 comm="syz.3.477" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 67.045698][ T40] audit: type=1400 audit(1735980490.707:582): avc: denied { create } for pid=7743 comm="syz.3.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 67.051781][ T40] audit: type=1800 audit(1735980490.717:583): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.478" name="file1" dev="overlay" ino=724 res=0 errno=0 [ 67.057920][ T40] audit: type=1400 audit(1735980490.717:584): avc: denied { write } for pid=7743 comm="syz.3.478" path="socket:[20620]" dev="sockfs" ino=20620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 67.102677][ T40] audit: type=1400 audit(1735980490.767:585): avc: denied { bind } for pid=7747 comm="syz.2.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 67.105286][ T7748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33217 sclass=netlink_route_socket pid=7748 comm=syz.2.480 [ 67.105379][ T7749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33217 sclass=netlink_route_socket pid=7749 comm=syz.2.480 [ 67.109702][ T7749] netlink: 52 bytes leftover after parsing attributes in process `syz.2.480'. [ 67.118808][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 67.320001][ T7768] overlayfs: failed to get index nlink (file1/file0, err=-61) [ 67.325414][ T40] audit: type=1400 audit(1735980490.987:586): avc: denied { map } for pid=7767 comm="syz.3.485" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 67.326982][ T7768] overlay: ./file1 is not a directory [ 67.331936][ T40] audit: type=1400 audit(1735980490.987:587): avc: denied { execute } for pid=7767 comm="syz.3.485" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 67.385412][ T7772] xt_CT: No such helper "pptp" [ 67.390933][ T7775] xt_CT: No such helper "pptp" [ 67.415388][ T40] audit: type=1400 audit(1735980491.077:588): avc: denied { getopt } for pid=7780 comm="syz.0.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.415620][ T7781] netlink: 28 bytes leftover after parsing attributes in process `syz.0.489'. [ 67.434711][ T7783] kvm: user requested TSC rate below hardware speed [ 67.461321][ T40] audit: type=1400 audit(1735980491.127:589): avc: denied { read } for pid=7760 comm="syz.2.484" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 67.672319][ T7800] fuse: Bad value for 'group_id' [ 67.673756][ T7800] fuse: Bad value for 'group_id' [ 67.677521][ T7800] overlayfs: option "workdir=./file0/../file0" is useless in a non-upper mount, ignore [ 67.680401][ T7800] overlayfs: missing 'lowerdir' [ 68.013470][ T7838] binder: 7837:7838 ioctl c0306201 20000080 returned -14 [ 68.016257][ T7838] binder: 7837:7838 ioctl c0306201 200003c0 returned -14 [ 68.021232][ T7838] binder: 7837:7838 ioctl c0306201 200001c0 returned -14 [ 68.093896][ T7849] netlink: 232 bytes leftover after parsing attributes in process `syz.0.514'. [ 68.096905][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'. [ 68.100798][ T7850] netlink: 232 bytes leftover after parsing attributes in process `syz.0.514'. [ 68.108161][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'. [ 68.109871][ T7852] fuse: Bad value for 'rootmode' [ 68.235073][ T7859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.459872][ T7872] syz.3.521 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 68.465872][ T7866] loop8: detected capacity change from 0 to 7 [ 68.477556][ T7866] Dev loop8: unable to read RDB block 7 [ 68.480343][ T7866] loop8: unable to read partition table [ 68.482795][ T7866] loop8: partition table beyond EOD, truncated [ 68.485258][ T7866] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 68.485258][ T7866] ) failed (rc=-5) [ 68.561960][ T7876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.522'. [ 68.580146][ T7876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7876 comm=syz.3.522 [ 68.707141][ T7885] openvswitch: netlink: IP tunnel dst address not specified [ 68.710194][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.524'. [ 68.712555][ T7885] netlink: 24 bytes leftover after parsing attributes in process `syz.3.524'. [ 69.174022][ T7895] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.528'. [ 69.203939][ T7901] overlayfs: missing 'lowerdir' [ 69.445724][ T7916] netlink: 184 bytes leftover after parsing attributes in process `syz.2.534'. [ 69.497805][ T7924] fuse: Bad value for 'group_id' [ 69.500095][ T7924] fuse: Bad value for 'group_id' [ 69.512603][ T7924] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 69.579605][ T7930] pim6reg1: entered promiscuous mode [ 69.581136][ T7930] pim6reg1: entered allmulticast mode [ 69.591812][ T7930] ISOFS: Unable to identify CD-ROM format. [ 69.718535][ T7939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.747033][ T7943] pty pty27: ldisc open failed (-12), clearing slot 27 [ 69.793715][ T7949] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7949 comm=syz.3.544 [ 69.794108][ T7950] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7950 comm=syz.3.544 [ 70.274891][ T7990] syz.3.556: attempt to access beyond end of device [ 70.274891][ T7990] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 70.280422][ T7990] syz.3.556: attempt to access beyond end of device [ 70.280422][ T7990] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 70.287046][ T7990] netlink: 13 bytes leftover after parsing attributes in process `syz.3.556'. [ 70.293089][ T7990] xt_ipcomp: unknown flags 12 [ 70.357072][ T7994] bridge0: port 1(netdevsim0) entered blocking state [ 70.359398][ T7994] bridge0: port 1(netdevsim0) entered disabled state [ 70.361546][ T7994] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 70.365065][ T7994] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 70.658766][ T5983] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 70.788854][ T5983] usb 8-1: device descriptor read/64, error -71 [ 70.871392][ T5896] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 70.874001][ T5896] Bluetooth: hci1: Injecting HCI hardware error event [ 70.876808][ T5896] Bluetooth: hci1: hardware error 0x00 [ 70.887239][ T8011] overlayfs: missing 'lowerdir' [ 71.058972][ T5983] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 71.112640][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.115450][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.188868][ T5983] usb 8-1: device descriptor read/64, error -71 [ 71.298888][ T5983] usb usb8-port1: attempt power cycle [ 71.469428][ T73] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 71.621141][ T73] usb 5-1: config 1 has an invalid descriptor of length 150, skipping remainder of the config [ 71.625203][ T73] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.630501][ T73] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 71.633896][ T73] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.637084][ T73] usb 5-1: Product: syz [ 71.638638][ T73] usb 5-1: Manufacturer: Г [ 71.638816][ T5983] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 71.640407][ T73] usb 5-1: SerialNumber: syz [ 71.646525][ T73] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 71.649886][ T73] usb 5-1: no configuration chosen from 1 choice [ 71.669412][ T5983] usb 8-1: device descriptor read/8, error -71 [ 71.910857][ T5983] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 71.929216][ T5983] usb 8-1: device descriptor read/8, error -71 [ 72.040698][ T5983] usb usb8-port1: unable to enumerate USB device [ 72.948869][ T5896] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 73.569576][ T8043] __nla_validate_parse: 1 callbacks suppressed [ 73.569587][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.571'. [ 73.574859][ T8043] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 73.628465][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 73.628475][ T40] audit: type=1400 audit(1735980497.287:610): avc: denied { getopt } for pid=8044 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.637442][ T40] audit: type=1400 audit(1735980497.297:611): avc: denied { ioctl } for pid=8044 comm="syz.2.573" path="socket:[22923]" dev="sockfs" ino=22923 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.708871][ T8054] overlay: filesystem on ./file0 is read-only [ 73.739533][ T8056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 73.741590][ T8056] IPv6: NLM_F_CREATE should be set when creating new route [ 73.747231][ T40] audit: type=1400 audit(1735980497.407:612): avc: denied { mounton } for pid=8057 comm="syz.2.584" path="/164/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 74.220499][ T73] usb 5-1: USB disconnect, device number 11 [ 75.205820][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 75.208414][ T8097] netlink: 'syz.2.593': attribute type 22 has an invalid length. [ 75.211064][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.593'. [ 75.217401][ T8098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.588'. [ 75.221092][ T8098] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 75.242496][ T8100] netlink: 68 bytes leftover after parsing attributes in process `syz.2.595'. [ 75.390296][ T40] audit: type=1400 audit(1735980499.057:613): avc: denied { append } for pid=8116 comm="syz.2.602" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 75.398260][ T40] audit: type=1400 audit(1735980499.057:614): avc: denied { write } for pid=8116 comm="syz.2.602" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.569324][ T39] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.617654][ T40] audit: type=1400 audit(1735980499.277:615): avc: denied { execute } for pid=8129 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 75.626175][ T40] audit: type=1400 audit(1735980499.277:616): avc: denied { execute_no_trans } for pid=8129 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 75.647087][ T39] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.698926][ T833] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 75.714322][ T5302] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.717751][ T5302] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.721398][ T5302] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.724938][ T5302] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.727652][ T5302] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.736323][ T5302] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.737238][ T39] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.832363][ T39] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 75.834791][ T39] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 75.838474][ T39] bridge0: port 1(netdevsim0) entered disabled state [ 75.842645][ T39] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.848011][ T8131] chnl_net:caif_netlink_parms(): no params data found [ 75.858893][ T833] usb 7-1: Using ep0 maxpacket: 8 [ 75.863738][ T833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.869097][ T833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 75.873505][ T833] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 75.876541][ T833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.881652][ T833] usb 7-1: config 0 descriptor?? [ 75.927416][ T8131] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.930119][ T8131] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.932798][ T8131] bridge_slave_0: entered allmulticast mode [ 75.935626][ T8131] bridge_slave_0: entered promiscuous mode [ 75.940473][ T8131] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.943082][ T8131] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.945688][ T8131] bridge_slave_1: entered allmulticast mode [ 75.948577][ T8131] bridge_slave_1: entered promiscuous mode [ 75.987406][ T8131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.997297][ T8131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.090898][ T833] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 76.221981][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.225760][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.229452][ T39] bond0 (unregistering): Released all slaves [ 76.234049][ T39] bond1 (unregistering): Released all slaves [ 76.270500][ T8131] team0: Port device team_slave_0 added [ 76.274141][ T8131] team0: Port device team_slave_1 added [ 76.292477][ T8126] iowarrior 7-1:0.0: Error -90 while submitting URB [ 76.308572][ T8126] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 76.324576][ T8131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.324586][ T8131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.324598][ T8131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.325313][ T8131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.325321][ T8131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.325332][ T8131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.370158][ T8131] hsr_slave_0: entered promiscuous mode [ 76.376493][ T8131] hsr_slave_1: entered promiscuous mode [ 76.378617][ T8131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.381194][ T8131] Cannot create hsr debugfs directory [ 76.463284][ T5983] usb 7-1: USB disconnect, device number 5 [ 76.473035][ T8131] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 76.476793][ T8131] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 76.480085][ T8131] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 76.483832][ T8131] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 76.505643][ T39] hsr_slave_0: left promiscuous mode [ 76.507413][ T39] hsr_slave_1: left promiscuous mode [ 76.510170][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.512287][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.514542][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.516665][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.532878][ T39] veth1_macvtap: left promiscuous mode [ 76.534522][ T39] veth0_macvtap: left promiscuous mode [ 76.536124][ T39] veth1_vlan: left promiscuous mode [ 76.537645][ T39] veth0_vlan: left promiscuous mode [ 76.618731][ T833] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 76.780297][ T833] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.783239][ T833] usb 5-1: config 0 has no interfaces? [ 76.784750][ T833] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.787244][ T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.798741][ T833] usb 5-1: config 0 descriptor?? [ 77.024989][ T40] audit: type=1400 audit(1735980500.687:617): avc: denied { write } for pid=8140 comm="syz.0.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 77.032140][ T1468] usb 5-1: USB disconnect, device number 12 [ 77.172609][ T39] team0 (unregistering): Port device team_slave_1 removed [ 77.247627][ T39] team0 (unregistering): Port device team_slave_0 removed [ 77.751403][ T5896] Bluetooth: hci3: command tx timeout [ 77.994433][ T8131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.001597][ T40] audit: type=1400 audit(1735980501.667:618): avc: denied { create } for pid=8168 comm="syz.0.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 78.008165][ T40] audit: type=1400 audit(1735980501.667:619): avc: denied { write } for pid=8168 comm="syz.0.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 78.008293][ T8131] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.020302][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.022265][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.026815][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.028900][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.042139][ T8131] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.045182][ T8131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.072463][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'. [ 78.076251][ T8178] netlink: 'syz.0.616': attribute type 22 has an invalid length. [ 78.080482][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.616'. [ 78.113885][ T8131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.147405][ T8178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.616'. [ 78.194786][ T8199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.197312][ T8199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.219305][ T8199] : entered promiscuous mode [ 78.243176][ T8131] veth0_vlan: entered promiscuous mode [ 78.246910][ T8131] veth1_vlan: entered promiscuous mode [ 78.254920][ T8131] veth0_macvtap: entered promiscuous mode [ 78.257813][ T8131] veth1_macvtap: entered promiscuous mode [ 78.271140][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.274138][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.276913][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.280169][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.283573][ T8131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.287044][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.290374][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.293079][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.295918][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.299889][ T8131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.305298][ T8131] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.307744][ T8131] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.311297][ T8131] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.313755][ T8131] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.318231][ T8213] geneve2: entered promiscuous mode [ 78.319883][ T8213] geneve2: entered allmulticast mode [ 78.370219][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.372502][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.386801][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.389377][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.439129][ T8217] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 78.568898][ T8217] usb 7-1: device descriptor read/64, error -71 [ 78.580125][ T8246] 9pnet_virtio: no channels available for device syz [ 78.654034][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 78.654050][ T40] audit: type=1400 audit(1735980502.307:626): avc: denied { bind } for pid=8257 comm="syz.5.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.668784][ T40] audit: type=1400 audit(1735980502.307:627): avc: denied { listen } for pid=8257 comm="syz.5.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.674324][ T40] audit: type=1400 audit(1735980502.317:628): avc: denied { connect } for pid=8257 comm="syz.5.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.682414][ T40] audit: type=1400 audit(1735980502.317:629): avc: denied { write } for pid=8257 comm="syz.5.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.725160][ T40] audit: type=1400 audit(1735980502.387:630): avc: denied { read } for pid=8268 comm="syz.5.630" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.731494][ T40] audit: type=1400 audit(1735980502.387:631): avc: denied { open } for pid=8268 comm="syz.5.630" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.801122][ T8283] 9pnet: p9_errstr2errno: server reported unknown error [ 78.806804][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.808859][ T8217] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 78.809105][ T8283] bridge0: entered allmulticast mode [ 78.948810][ T8217] usb 7-1: device descriptor read/64, error -71 [ 78.998080][ T8273] netlink: 20 bytes leftover after parsing attributes in process `syz.5.632'. [ 79.000995][ T8273] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 79.010652][ T40] audit: type=1400 audit(1735980502.677:632): avc: denied { map } for pid=8272 comm="syz.5.632" path="socket:[23364]" dev="sockfs" ino=23364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 79.017022][ T40] audit: type=1400 audit(1735980502.677:633): avc: denied { read } for pid=8272 comm="syz.5.632" path="socket:[23364]" dev="sockfs" ino=23364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 79.048898][ T8306] support for the xor transformation has been removed. [ 79.058861][ T8217] usb usb7-port1: attempt power cycle [ 79.142729][ T8316] netlink: 'syz.5.639': attribute type 10 has an invalid length. [ 79.153251][ T8316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.156101][ T8316] team0: Port device bond0 added [ 79.182812][ T8321] netlink: 20 bytes leftover after parsing attributes in process `syz.5.640'. [ 79.185351][ T8321] netlink: 16 bytes leftover after parsing attributes in process `syz.5.640'. [ 79.193697][ T8321] netlink: 160 bytes leftover after parsing attributes in process `syz.5.640'. [ 79.196368][ T8321] netlink: 108 bytes leftover after parsing attributes in process `syz.5.640'. [ 79.201082][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.5.640'. [ 79.398738][ T8217] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 79.419116][ T8217] usb 7-1: device descriptor read/8, error -71 [ 79.459698][ T40] audit: type=1400 audit(1735980503.127:634): avc: denied { append } for pid=8333 comm="syz.0.644" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.518966][ T8334] Invalid logical block size (2) [ 79.658834][ T8217] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 79.689844][ T8217] usb 7-1: device descriptor read/8, error -71 [ 79.809062][ T8217] usb usb7-port1: unable to enumerate USB device [ 80.051095][ T40] audit: type=1400 audit(1735980503.717:635): avc: denied { remount } for pid=8361 comm="syz.0.651" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 80.103956][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 80.429395][ T8395] netlink: 20 bytes leftover after parsing attributes in process `syz.5.659'. [ 80.595736][ T8409] netlink: 1268 bytes leftover after parsing attributes in process `syz.5.662'. [ 80.599484][ T8409] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 80.633239][ T8411] netlink: 172 bytes leftover after parsing attributes in process `syz.0.663'. [ 80.762251][ T8422] vlan2: entered allmulticast mode [ 80.787887][ T5302] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.793070][ T5302] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.795582][ T5302] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.798454][ T5302] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.800837][ T5302] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.803274][ T5302] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.874567][ T8433] autofs4:pid:8433:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2863311530.2147592874), cmd(0xc0189374) [ 80.879377][ T8433] autofs4:pid:8433:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 80.885301][ T8427] chnl_net:caif_netlink_parms(): no params data found [ 80.925947][ T8427] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.928297][ T8427] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.931474][ T8427] bridge_slave_0: entered allmulticast mode [ 80.934302][ T8427] bridge_slave_0: entered promiscuous mode [ 80.937937][ T8427] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.940698][ T8427] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.942759][ T8427] bridge_slave_1: entered allmulticast mode [ 80.944919][ T8427] bridge_slave_1: entered promiscuous mode [ 80.964181][ T8427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.967898][ T8427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.990348][ T8427] team0: Port device team_slave_0 added [ 80.994682][ T8427] team0: Port device team_slave_1 added [ 81.020062][ T8427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.022227][ T8427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.028794][ T5896] Bluetooth: hci3: command tx timeout [ 81.031159][ T8427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.034862][ T8427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.036843][ T8427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.043997][ T8427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.074993][ T8427] hsr_slave_0: entered promiscuous mode [ 81.077847][ T8427] hsr_slave_1: entered promiscuous mode [ 81.080584][ T8427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.083028][ T8427] Cannot create hsr debugfs directory [ 81.119165][ T832] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 81.139303][ T8444] pim6reg: entered allmulticast mode [ 81.148362][ T8444] pim6reg: left allmulticast mode [ 81.205350][ T8427] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 81.210462][ T8427] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 81.214620][ T8427] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 81.224242][ T8427] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 81.240730][ T8427] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.243513][ T8427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.245996][ T8427] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.248062][ T8427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.258954][ T832] usb 10-1: device descriptor read/64, error -71 [ 81.280498][ T8427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.284799][ T1226] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.287942][ T1226] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.309327][ T8427] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.319534][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.321652][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.324364][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.326441][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.394162][ T8427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.491738][ T8427] veth0_vlan: entered promiscuous mode [ 81.497983][ T8427] veth1_vlan: entered promiscuous mode [ 81.509842][ T832] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 81.516063][ T8427] veth0_macvtap: entered promiscuous mode [ 81.519347][ T8427] veth1_macvtap: entered promiscuous mode [ 81.524941][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.527878][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.530769][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.533793][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.536541][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.539680][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.544547][ T8427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.548845][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.551870][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.554795][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.558115][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.561288][ T8427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.564631][ T8427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.569698][ T8427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.575302][ T8427] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.577963][ T8427] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.580732][ T8427] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.583398][ T8427] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.611939][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.614377][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.628126][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.630785][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.654574][ T832] usb 10-1: device descriptor read/64, error -71 [ 81.676372][ T8470] program syz.6.664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.723303][ T8476] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 81.728370][ T8476] VFS: Can't find a romfs filesystem on dev nullb0. [ 81.728370][ T8476] [ 81.761046][ T832] usb usb10-port1: attempt power cycle [ 82.031925][ T8494] ALSA: mixer_oss: invalid index 100000 [ 82.053230][ T8494] overlayfs: missing 'lowerdir' [ 82.109066][ T832] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 82.129194][ T832] usb 10-1: device descriptor read/8, error -71 [ 82.398968][ T832] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 82.429699][ T832] usb 10-1: device descriptor read/8, error -71 [ 82.538954][ T832] usb usb10-port1: unable to enumerate USB device [ 82.684620][ T8532] hsr_slave_1 (unregistering): left promiscuous mode [ 82.809487][ T8552] openvswitch: netlink: Tunnel attr 222 out of range max 16 [ 82.880155][ T5896] Bluetooth: hci4: command tx timeout [ 83.059947][ T8588] openvswitch: netlink: Duplicate or invalid key (type 0). [ 83.062120][ T8588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.119781][ T5896] Bluetooth: hci3: command tx timeout [ 83.302963][ T8613] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 83.305936][ T8613] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 83.308378][ T8613] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 83.320705][ T8607] /dev/sr0: Can't open blockdev [ 83.422667][ T8622] overlayfs: disabling nfs_export due to verity=on [ 83.438778][ T8616] could not allocate digest TFM handle rmd320-generic [ 83.524363][ T8628] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 83.694901][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 83.694911][ T40] audit: type=1404 audit(1735980507.357:659): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 83.707740][ T40] audit: type=1404 audit(1735980507.367:660): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 83.713013][ T8638] netlink: 'syz.0.726': attribute type 7 has an invalid length. [ 83.724981][ T40] audit: type=1400 audit(1735980507.387:661): avc: denied { read write } for pid=5883 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.738850][ T40] audit: type=1400 audit(1735980507.387:662): avc: denied { open } for pid=5883 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.744230][ T8641] --map-set only usable from mangle table [ 83.745725][ T40] audit: type=1400 audit(1735980507.387:663): avc: denied { ioctl } for pid=5883 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.754507][ T40] audit: type=1400 audit(1735980507.407:664): avc: denied { create } for pid=8639 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 83.759968][ T40] audit: type=1400 audit(1735980507.407:665): avc: denied { create } for pid=8639 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.765356][ T40] audit: type=1400 audit(1735980507.407:666): avc: denied { ioctl } for pid=8639 comm="syz.0.727" path="socket:[24476]" dev="sockfs" ino=24476 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.773442][ T40] audit: type=1400 audit(1735980507.407:667): avc: denied { bpf } for pid=8639 comm="syz.0.727" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.811167][ T40] audit: type=1400 audit(1735980507.477:668): avc: denied { name_bind } for pid=8639 comm="syz.0.727" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 84.052618][ T8668] binder: 8667:8668 ioctl f501 0 returned -22 [ 84.054726][ T8668] binder: binder_mmap: 8667 20acc000-20ace000 bad vm_flags failed -1 [ 84.189971][ T8674] __nla_validate_parse: 7 callbacks suppressed [ 84.189985][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'. [ 84.196715][ T8674] bond0: option arp_interval: invalid value (18446744073709551615) [ 84.197675][ T8675] netlink: 16 bytes leftover after parsing attributes in process `syz.5.731'. [ 84.199857][ T8674] bond0: option arp_interval: allowed values 0 - 2147483647 [ 84.306877][ T8687] netlink: 256 bytes leftover after parsing attributes in process `syz.2.737'. [ 84.320619][ T8687] netlink: 56 bytes leftover after parsing attributes in process `syz.2.737'. [ 84.410571][ T8703] netlink: 'syz.2.740': attribute type 28 has an invalid length. [ 84.412962][ T8703] netlink: 'syz.2.740': attribute type 3 has an invalid length. [ 84.415122][ T8703] netlink: 132 bytes leftover after parsing attributes in process `syz.2.740'. [ 84.544226][ T8701] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 84.548730][ T8701] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 84.659465][ T8716] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 84.662232][ T8716] cramfs: wrong magic [ 84.859132][ T8719] netlink: 'syz.0.745': attribute type 11 has an invalid length. [ 84.862015][ T8719] netlink: 224 bytes leftover after parsing attributes in process `syz.0.745'. [ 85.558119][ T105] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.656529][ T105] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.718190][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'. [ 85.744537][ T105] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.828090][ T105] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.906900][ T8748] futex_wake_op: syz.2.753 tries to shift op by 32; fix this program [ 85.945586][ T105] bridge_slave_1: left allmulticast mode [ 85.947917][ T105] bridge_slave_1: left promiscuous mode [ 85.959719][ T105] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.964839][ T105] bridge_slave_0: left allmulticast mode [ 85.966548][ T105] bridge_slave_0: left promiscuous mode [ 85.968246][ T105] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.204853][ T105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.208506][ T105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.211826][ T105] bond0 (unregistering): Released all slaves [ 86.319537][ T8768] netlink: 132 bytes leftover after parsing attributes in process `syz.2.758'. [ 87.500360][ T8864] bridge0: entered allmulticast mode [ 87.832147][ T8878] syz_tun: entered promiscuous mode [ 87.834398][ T8878] syz_tun: left promiscuous mode [ 88.339501][ T8904] netlink: 'syz.2.782': attribute type 9 has an invalid length. [ 88.341858][ T8904] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.782'. [ 88.449822][ T8906] bond_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 88.565147][ T8926] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 88.568065][ T8926] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 88.570945][ T8926] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 88.573495][ T8926] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 88.576131][ T8926] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 88.578549][ T8926] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 88.584130][ T8926] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 88.587086][ T8926] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 88.589914][ T8926] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 88.592583][ T8926] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 88.698338][ T6695] IPVS: starting estimator thread 0... [ 88.788809][ T8930] IPVS: using max 42 ests per chain, 100800 per kthread [ 88.831538][ T40] kauditd_printk_skb: 212 callbacks suppressed [ 88.831549][ T40] audit: type=1400 audit(1735980512.497:881): avc: denied { setattr } for pid=8943 comm="syz.0.794" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 88.840252][ T40] audit: type=1400 audit(1735980512.497:882): avc: denied { mounton } for pid=8943 comm="syz.0.794" path="/184/file0" dev="tmpfs" ino=1013 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.949651][ T8945] ptrace attach of "/syz-executor exec"[5883] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8J] [ 88.950536][ T40] audit: type=1400 audit(1735980512.617:883): avc: denied { sqpoll } for pid=8943 comm="syz.0.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 89.375637][ T40] audit: type=1400 audit(1735980513.037:884): avc: denied { create } for pid=8953 comm="syz.2.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.380976][ T40] audit: type=1400 audit(1735980513.037:885): avc: denied { setopt } for pid=8953 comm="syz.2.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.388199][ T40] audit: type=1400 audit(1735980513.047:886): avc: denied { create } for pid=8953 comm="syz.2.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 89.393694][ T40] audit: type=1400 audit(1735980513.047:887): avc: denied { write } for pid=8953 comm="syz.2.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 89.399183][ T40] audit: type=1400 audit(1735980513.047:888): avc: denied { map } for pid=8953 comm="syz.2.796" path="socket:[26568]" dev="sockfs" ino=26568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.405656][ T40] audit: type=1400 audit(1735980513.047:889): avc: denied { read } for pid=8953 comm="syz.2.796" path="socket:[26568]" dev="sockfs" ino=26568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.521731][ T40] audit: type=1400 audit(1735980513.187:890): avc: denied { setopt } for pid=8971 comm="syz.2.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 89.695810][ T8990] xt_hashlimit: size too large, truncated to 1048576 [ 90.075420][ T9018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9018 comm=syz.0.807 [ 90.208261][ T9028] Illegal XDP return value 4294967294 on prog (id 146) dev N/A, expect packet loss! [ 90.840185][ T9043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.813'. [ 92.875594][ T8701] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 92.879023][ T8701] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 92.884963][ T8701] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 92.886886][ T8701] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 92.900354][ T9023] ------------[ cut here ]------------ [ 92.902334][ T9023] refcount_t: underflow; use-after-free. [ 92.904811][ T9023] WARNING: CPU: 1 PID: 9023 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 92.908075][ T9023] Modules linked in: [ 92.909541][ T9023] CPU: 1 UID: 0 PID: 9023 Comm: kbnepd  Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 92.914577][ T9023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.919708][ T9023] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 92.921621][ T9023] Code: ff 89 de e8 88 f9 f9 fc 84 db 0f 85 66 ff ff ff e8 9b f7 f9 fc c6 05 ab c9 a7 0b 01 90 48 c7 c7 e0 9a d1 8b e8 17 31 ba fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 78 f7 f9 fc 0f b6 1d 86 c9 a7 0b 31 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 92.927992][ T9023] RSP: 0018:ffffc900032079a8 EFLAGS: 00010282 [ 92.929966][ T9023] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff815a5139 [ 92.932366][ T9023] RDX: ffff888045bca440 RSI: ffffffff815a5146 RDI: 0000000000000001 [ 92.934637][ T9023] RBP: ffff888031a18878 R08: 0000000000000001 R09: 0000000000000000 [ 92.936849][ T9023] R10: 0000000000000000 R11: 0000000000000003 R12: ffff88804deb0800 [ 92.941485][ T9023] R13: ffff888031a18878 R14: ffffffff85c4f170 R15: 0000000000000000 [ 92.944535][ T9023] FS: 0000000000000000(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 92.948229][ T9023] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.950893][ T9023] CR2: 00007fff22804408 CR3: 0000000031b16000 CR4: 0000000000352ef0 [ 92.953729][ T9023] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 92.956636][ T9023] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 92.959020][ T9023] Call Trace: [ 92.959960][ T9023] [ 92.960759][ T9023] ? __warn+0xea/0x3c0 [ 92.961961][ T9023] ? refcount_warn_saturate+0x14a/0x210 [ 92.963497][ T9023] ? report_bug+0x3c0/0x580 [ 92.964755][ T9023] ? handle_bug+0x54/0xa0 [ 92.965957][ T9023] ? exc_invalid_op+0x17/0x50 [ 92.967230][ T9023] ? asm_exc_invalid_op+0x1a/0x20 [ 92.969251][ T9023] ? __pfx_klist_children_put+0x10/0x10 [ 92.970861][ T9023] ? __warn_printk+0x199/0x350 [ 92.972414][ T9023] ? __warn_printk+0x1a6/0x350 [ 92.974236][ T9023] ? refcount_warn_saturate+0x14a/0x210 [ 92.976438][ T9023] ? refcount_warn_saturate+0x149/0x210 [ 92.978034][ T9023] klist_put+0x11b/0x1b0 [ 92.979350][ T9023] device_del+0x1d9/0x9f0 [ 92.980580][ T9023] ? lockdep_hardirqs_on+0x7c/0x110 [ 92.982099][ T9023] ? __pfx_device_del+0x10/0x10 [ 92.983511][ T9023] unregister_netdevice_many_notify+0x105d/0x1e60 [ 92.985336][ T9023] ? __pfx___mutex_trylock_common+0x10/0x10 [ 92.986995][ T9023] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 92.989017][ T9023] ? trace_contention_end+0xee/0x140 [ 92.990494][ T9023] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 92.992178][ T9023] ? unregister_netdev+0x12/0x30 [ 92.993811][ T9023] ? rcu_is_watching+0x12/0xc0 [ 92.995206][ T9023] ? __pfx___mutex_lock+0x10/0x10 [ 92.996665][ T9023] ? bnep_session+0x21ae/0x2ca0 [ 92.998058][ T9023] unregister_netdevice_queue+0x307/0x3f0 [ 92.999758][ T9023] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 93.001550][ T9023] ? down_write+0x14e/0x200 [ 93.002968][ T9023] ? __pfx_down_write+0x10/0x10 [ 93.004473][ T9023] unregister_netdev+0x1c/0x30 [ 93.005828][ T9023] bnep_session+0x21b6/0x2ca0 [ 93.007095][ T9023] ? __pfx___lock_acquire+0x10/0x10 [ 93.008541][ T9023] ? __pfx_bnep_session+0x10/0x10 [ 93.010038][ T9023] ? __kthread_parkme+0xb7/0x220 [ 93.011473][ T9023] ? __pfx_lock_release+0x10/0x10 [ 93.013167][ T9023] ? __pfx_woken_wake_function+0x10/0x10 [ 93.014826][ T9023] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 93.016475][ T9023] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.017912][ T9023] ? __kthread_parkme+0x148/0x220 [ 93.019423][ T9023] ? __pfx_bnep_session+0x10/0x10 [ 93.020903][ T9023] kthread+0x2c1/0x3a0 [ 93.022156][ T9023] ? _raw_spin_unlock_irq+0x23/0x50 [ 93.024200][ T9023] ? __pfx_kthread+0x10/0x10 [ 93.026002][ T9023] ret_from_fork+0x45/0x80 [ 93.027644][ T9023] ? __pfx_kthread+0x10/0x10 [ 93.029467][ T9023] ret_from_fork_asm+0x1a/0x30 [ 93.031209][ T9023] [ 93.032221][ T9023] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 93.034305][ T9023] CPU: 1 UID: 0 PID: 9023 Comm: kbnepd  Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 93.037400][ T9023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.041389][ T9023] Call Trace: [ 93.042743][ T9023] [ 93.043961][ T9023] dump_stack_lvl+0x3d/0x1f0 [ 93.045837][ T9023] panic+0x71d/0x800 [ 93.047436][ T9023] ? __pfx_panic+0x10/0x10 [ 93.048902][ T9023] ? show_trace_log_lvl+0x29d/0x3d0 [ 93.050412][ T9023] ? check_panic_on_warn+0x1f/0xb0 [ 93.051881][ T9023] ? refcount_warn_saturate+0x14a/0x210 [ 93.053494][ T9023] check_panic_on_warn+0xab/0xb0 [ 93.054946][ T9023] __warn+0xf6/0x3c0 [ 93.056081][ T9023] ? refcount_warn_saturate+0x14a/0x210 [ 93.057669][ T9023] report_bug+0x3c0/0x580 [ 93.058917][ T9023] handle_bug+0x54/0xa0 [ 93.060128][ T9023] exc_invalid_op+0x17/0x50 [ 93.061448][ T9023] asm_exc_invalid_op+0x1a/0x20 [ 93.062859][ T9023] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 93.064664][ T9023] Code: ff 89 de e8 88 f9 f9 fc 84 db 0f 85 66 ff ff ff e8 9b f7 f9 fc c6 05 ab c9 a7 0b 01 90 48 c7 c7 e0 9a d1 8b e8 17 31 ba fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 78 f7 f9 fc 0f b6 1d 86 c9 a7 0b 31 [ 93.070098][ T9023] RSP: 0018:ffffc900032079a8 EFLAGS: 00010282 [ 93.071825][ T9023] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff815a5139 [ 93.074097][ T9023] RDX: ffff888045bca440 RSI: ffffffff815a5146 RDI: 0000000000000001 [ 93.076355][ T9023] RBP: ffff888031a18878 R08: 0000000000000001 R09: 0000000000000000 [ 93.078572][ T9023] R10: 0000000000000000 R11: 0000000000000003 R12: ffff88804deb0800 [ 93.080810][ T9023] R13: ffff888031a18878 R14: ffffffff85c4f170 R15: 0000000000000000 [ 93.083049][ T9023] ? __pfx_klist_children_put+0x10/0x10 [ 93.084672][ T9023] ? __warn_printk+0x199/0x350 [ 93.086042][ T9023] ? __warn_printk+0x1a6/0x350 [ 93.087405][ T9023] ? refcount_warn_saturate+0x149/0x210 [ 93.088995][ T9023] klist_put+0x11b/0x1b0 [ 93.090214][ T9023] device_del+0x1d9/0x9f0 [ 93.091454][ T9023] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.092950][ T9023] ? __pfx_device_del+0x10/0x10 [ 93.094339][ T9023] unregister_netdevice_many_notify+0x105d/0x1e60 [ 93.096175][ T9023] ? __pfx___mutex_trylock_common+0x10/0x10 [ 93.097845][ T9023] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 93.099739][ T9023] ? trace_contention_end+0xee/0x140 [ 93.101277][ T9023] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 93.102889][ T9023] ? unregister_netdev+0x12/0x30 [ 93.104354][ T9023] ? rcu_is_watching+0x12/0xc0 [ 93.105752][ T9023] ? __pfx___mutex_lock+0x10/0x10 [ 93.107205][ T9023] ? bnep_session+0x21ae/0x2ca0 [ 93.108602][ T9023] unregister_netdevice_queue+0x307/0x3f0 [ 93.110173][ T9023] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 93.111964][ T9023] ? down_write+0x14e/0x200 [ 93.113271][ T9023] ? __pfx_down_write+0x10/0x10 [ 93.114693][ T9023] unregister_netdev+0x1c/0x30 [ 93.116082][ T9023] bnep_session+0x21b6/0x2ca0 [ 93.117436][ T9023] ? __pfx___lock_acquire+0x10/0x10 [ 93.118932][ T9023] ? __pfx_bnep_session+0x10/0x10 [ 93.120385][ T9023] ? __kthread_parkme+0xb7/0x220 [ 93.121766][ T9023] ? __pfx_lock_release+0x10/0x10 [ 93.123218][ T9023] ? __pfx_woken_wake_function+0x10/0x10 [ 93.124878][ T9023] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 93.126555][ T9023] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.128038][ T9023] ? __kthread_parkme+0x148/0x220 [ 93.129439][ T9023] ? __pfx_bnep_session+0x10/0x10 [ 93.130872][ T9023] kthread+0x2c1/0x3a0 [ 93.132031][ T9023] ? _raw_spin_unlock_irq+0x23/0x50 [ 93.133525][ T9023] ? __pfx_kthread+0x10/0x10 [ 93.134858][ T9023] ret_from_fork+0x45/0x80 [ 93.136109][ T9023] ? __pfx_kthread+0x10/0x10 [ 93.137474][ T9023] ret_from_fork_asm+0x1a/0x30 [ 93.138871][ T9023] [ 94.205326][ T9023] Shutting down cpus with NMI [ 94.207132][ T9023] Kernel Offset: disabled [ 94.208422][ T9023] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:48:36 Registers: info registers vcpu 0 CPU#0 RAX=000000000000bc70 RBX=0000000000000003 RCX=ffffc90030c58000 RDX=0000000000080000 RSI=ffffffff81489a0b RDI=0000000000000000 RBP=ffff88804deb0800 RSP=ffffc90003657710 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000003 R12=0000000000000003 R13=0000000000000003 R14=ffff88806a63fb00 R15=ffffed1009bd6100 RIP=ffffffff81489a0c RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f83f73296c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000558d9eb1e680 CR3=0000000031b16000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff8b369a30 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a6d5f6564207365 6b3a6f6f5f673d61 3d6573616c637420 745f6d6461737973 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff851bd8b0 RDI=ffffffff9ab0fb20 RBP=ffffffff9ab0fae0 RSP=ffffc900032072b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000007 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff3561fb6 R15=dffffc0000000000 RIP=ffffffff851bd8d7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff22804408 CR3=0000000031b16000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000062003 Opmask01=00000000001000c0 Opmask02=000000000fffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5320e0f026b10636 4a1d430dedd78ef1 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 42f697d4181f09db 9d33da6c7b97381d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5794577bb55c3cdf d43762e23c45639a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fe1c1fa408b59eae 77ed28ef5083bb50 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f96d64a24c8b93cc 2c796baed1efa52b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dc8e45bdc21d475c 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 079d1af6f159994b e1a34cb4125790f5 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dd06096700000000 20c9b2b4b6f25456 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8d777e6e4228a5b5 2db93fb9b0aaec08 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e2416ac2e3e793c0 2f30d5b2e3c6a9e8 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50422064656e7761 7073203a73250050 5241006e65706f5f 667062203a732500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50420541404b5244 5556051f56000050 5241004b40554a5f 435547051f560000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558dcc3c0940 0000558dcc3c0ce0 0000000000000181 0000000000000033 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001001 3030303030303230 00316e6170772f74 656e2f317968702f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000558da95ce233 73656d5f70636864 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 725f0f67ed528661 72610f7dfb7df37f 656775fffb7dffff 7f7f7d7f75777965 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a73252d73250073 252d732500747365 757165726f6e2000 7473657571657220 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 0000726565666965 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 00006d5f65636864 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 2 CPU#2 RAX=00000000000cc5e3 RBX=0000000000000002 RCX=ffffffff8b29d759 RDX=0000000000000000 RSI=ffffffff8b6cd9e0 RDI=ffffffff8bd1ede0 RBP=ffffed1003a50000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d506fed R10=ffff88806a837f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d280000 R14=ffffffff905f3950 R15=0000000000000000 RIP=ffffffff8b29eb3f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000558d9eb1e680 CR3=0000000022d0e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555555a5bd07 0000555555a5ba60 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555555a5b500 0000555555a5b400 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7365676e6f635f70 63742f347670692f 74656e2f7379732f 636f72702f01ffff ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080006b8030a0800 06b00303fffe0800 06a80327a6080006 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0180030008000610 0020100006005afa 04c0100002800401 0800060162f603fe ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0606012d96000000 0000000000000000 003074697301ffff ffffffffffffdf08 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100002800401 0000000806060154 a600080002e00300 100002d003001000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02c00302100002b0 0301901000039003 0600140608048803 0100000208060480 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0304800403800303 800402a003000800 0290030480808081 040280030801a002 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0501800404a4e608 0001000000080606 012d960000000000 0000000000000030 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000efdcd RBX=0000000000000003 RCX=ffffffff8b29d759 RDX=0000000000000000 RSI=ffffffff8b6cd9e0 RDI=ffffffff8bd1ede0 RBP=ffffed1003a50488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d282440 R14=ffffffff905f3950 R15=0000000000000000 RIP=ffffffff8b29eb3f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f02991da0e8 CR3=000000002b780000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa1e05730 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1dd1202a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1dd1202aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1dd1202aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1dd1202ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1dd1202b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1dd1202c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000