last executing test programs: 2m49.301575942s ago: executing program 1 (id=724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}], {0x14, 0x10}}, 0x6c}, 0x1, 0xe00, 0xfffffff5}, 0x0) 2m49.231066813s ago: executing program 1 (id=725): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}], {0x14, 0x10}}, 0x70}, 0x1, 0xe00, 0xf000000}, 0x0) 2m49.230774296s ago: executing program 1 (id=726): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x400000}]) (async) syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "004001", 0x3c, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974318", 0x0, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], "e4073d2d9d9074f6738f6fe9"}}}}}}}, 0x0) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x104009, 0x7}) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000000)={{0xffffffffffffffff, 0x1, 0x80000000, 0x2, 0xff}, 0x0, 0x1}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) 2m49.001171684s ago: executing program 1 (id=733): socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x9, 0x6, @local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1f000000, 0x32822}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x4080) 2m48.880928482s ago: executing program 1 (id=737): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) recvmmsg(r0, &(0x7f00000015c0)=[{{&(0x7f0000000440)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000100)=""/47, 0x2f}, {&(0x7f00000005c0)=""/137, 0x89}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000bc0)=""/232, 0xe8}], 0x7}, 0x7c}, {{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x800}], 0x2, 0x10000, &(0x7f0000001700)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740), 0x802, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x11, 0x4}, 0xffffffff, [0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffe, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200], [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf3a, 0x0, 0x0, 0x10000], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x7ff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5]}, 0x45c) ioctl$UI_SET_PROPBIT(r1, 0x5501, 0x0) 2m48.880417972s ago: executing program 1 (id=739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}], {0x14, 0x10}}, 0x68}, 0x1, 0xe00}, 0xfffffffffffffff5) 2m33.802876298s ago: executing program 32 (id=739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}], {0x14, 0x10}}, 0x68}, 0x1, 0xe00}, 0xfffffffffffffff5) 1m27.789755729s ago: executing program 0 (id=2697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x34, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ef"}]}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0) 1m27.710197131s ago: executing program 0 (id=2699): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9f}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1m27.650241354s ago: executing program 0 (id=2704): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mmap$snddsp(&(0x7f0000047000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x4000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x0) 1m27.59064408s ago: executing program 0 (id=2708): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x2000, 0x26) creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x12) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m27.520709007s ago: executing program 0 (id=2711): ioctl$CEC_ADAP_G_CONNECTOR_INFO(0xffffffffffffffff, 0x8044610a, 0x0) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r2, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}]]}, 0x28}}, 0x2400c086) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r6, 0xc074510c, &(0x7f0000000500)={"b419029e64e70068a5aeb82a97926371143708e30f34550ed5af796b6b66"}) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x48}}, 0x84c) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x78, 0x5, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x651ded12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_batadv\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_team\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) r7 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r7, 0x0, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r8, 0x7b3, &(0x7f0000000c80)) ioctl$UI_SET_RELBIT(r7, 0x40045566, 0x8) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0) 1m25.250623131s ago: executing program 0 (id=2744): getpid() r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f00000011c0)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') r4 = fanotify_init(0x0, 0x80000) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r4, 0x1, 0x40001019, r5, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000bc0)='./file0\x00', r6}, 0x18) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="78b89c1b0095f1ca79c0a9f9c0f4c5b10cfd1ee881ff54a19575616296584a7bd6289c381388ecbdbc8708e7806461bd56126d342ebd76e6cd1a4d31986c63c884df218862b3f296c60672527e9335bbc303737010a1eefd0a6b5e3747a0e7debb5c9edb552b62c1ad6bd0cede07ff11cb320ab641a48ad2593bee1308e403b6403f5805e080dbc002", @ANYRESDEC=r0, @ANYBLOB="10000000000004000000250000000e0001106e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES16=r0, @ANYBLOB="44d283dd455db194e0f5cde4f8faeef7cc42d84fada6dc0220c3efa866669b9489d7421e5a586456f37924338aee73be5d86defe0460ad8f61c6cba609fedf1d431176d81920c645bdcf967b005b69f7225f027ea7625dc7e6a484f8d688d0d0fb3bc56c4ae3e59f32a330"], 0x3c}}, 0x4000000) 1m25.20668117s ago: executing program 33 (id=2744): getpid() r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f00000011c0)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') r4 = fanotify_init(0x0, 0x80000) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r4, 0x1, 0x40001019, r5, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000bc0)='./file0\x00', r6}, 0x18) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="78b89c1b0095f1ca79c0a9f9c0f4c5b10cfd1ee881ff54a19575616296584a7bd6289c381388ecbdbc8708e7806461bd56126d342ebd76e6cd1a4d31986c63c884df218862b3f296c60672527e9335bbc303737010a1eefd0a6b5e3747a0e7debb5c9edb552b62c1ad6bd0cede07ff11cb320ab641a48ad2593bee1308e403b6403f5805e080dbc002", @ANYRESDEC=r0, @ANYBLOB="10000000000004000000250000000e0001106e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES16=r0, @ANYBLOB="44d283dd455db194e0f5cde4f8faeef7cc42d84fada6dc0220c3efa866669b9489d7421e5a586456f37924338aee73be5d86defe0460ad8f61c6cba609fedf1d431176d81920c645bdcf967b005b69f7225f027ea7625dc7e6a484f8d688d0d0fb3bc56c4ae3e59f32a330"], 0x3c}}, 0x4000000) 1m14.680796844s ago: executing program 5 (id=3013): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000040000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 1m14.500215024s ago: executing program 5 (id=3016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001000000fffe000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c08000340000000080800074022fa0031080006"], 0xe0}}, 0x0) 1m14.50007362s ago: executing program 5 (id=3017): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}, 0x1, 0xffffa888}, 0x200000000000000) 1m14.410573266s ago: executing program 5 (id=3018): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0xfffffecc) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="13", 0x1}], 0x1, 0x0) (async) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="13", 0x1}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x400041, 0x1) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x400041, 0x1) mknodat$null(r3, &(0x7f0000000140)='./file0/../file0\x00', 0x1900, 0x103) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1m14.340640198s ago: executing program 5 (id=3020): fsopen(&(0x7f0000000300)='iso9660\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c010000100013070000000000000000ffffffff0000000000000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080016007d0000"], 0x14c}}, 0x0) 1m13.924152655s ago: executing program 5 (id=3023): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x3b8, 0x0, 0xe8, 0xe8, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x371}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x74, 0x3ff}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x7f, 0x49, {0x1000}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000001400000060ec970012302c00fe8000000000000000000000000500aaff02000000000000000000000000000121"], 0xfdef) 1m13.910665083s ago: executing program 34 (id=3023): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x3b8, 0x0, 0xe8, 0xe8, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x371}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x74, 0x3ff}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x7f, 0x49, {0x1000}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000001400000060ec970012302c00fe8000000000000000000000000500aaff02000000000000000000000000000121"], 0xfdef) 30.040460068s ago: executing program 3 (id=3870): r0 = syz_open_dev$dri(&(0x7f00000010c0), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000280)={&(0x7f0000000200)=[r1], 0x0, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES64=r2, @ANYRES8=r2], 0x528}}, 0xc844) 29.939917151s ago: executing program 3 (id=3874): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0xbc, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0xaa, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94"]}]}, 0xbc}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x210200, 0x0) (async) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x210200, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x36c558ad, 0x6, 0x1, 0x0, r0, 0x1000, '\x00', r1, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x36c558ad, 0x6, 0x1, 0x0, r0, 0x1000, '\x00', r1, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000300)={r0, r0}) 29.890298401s ago: executing program 3 (id=3875): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x6}, {0x8}]}}]}]}, 0x44}}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x8402, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a3000000000440000001c0a0904000000000000810c0700000008000a40000000000900020073797a31000000000900010073797a30"], 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r7 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2}}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) (async, rerun: 32) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x10, 0x4004, @fd, 0x8, 0x0, 0x0, 0x2, 0x1}) (async, rerun: 32) io_uring_enter(r7, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r5, 0xc03064ca, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x2, 0x6, 0x5, 0x7, 0x40, 0x800, 0xfffffffffffffff9, 0x5], 0x4, 0x1, 0xb}) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) 29.889759314s ago: executing program 3 (id=3877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020605000000000000000000000000001400078008000640001b00000800134000fff50205000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) 29.800342891s ago: executing program 3 (id=3878): mkdir(&(0x7f0000000400)='./file1\x00', 0xa2) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2b) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 29.799739907s ago: executing program 3 (id=3879): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x21c040, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r2 = signalfd(r0, &(0x7f00000000c0)={[0x9]}, 0x8) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x9, "f058b323c86f041d44c0c3d5c034ae4adaeff2fe792b25923016222f32566456"}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000140)={@none, 0x8}) read$FUSE(r2, &(0x7f0000000180)={0x2020}, 0x2020) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000021c0)={'macvlan0\x00'}) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000002200)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e21, @empty}, {0x2, 0x4e24, @remote}, 0x200, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x2d}) sendmsg$NFT_BATCH(r3, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x200, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000023c0), &(0x7f0000002400)=0x4) r5 = syz_io_uring_setup(0x6aaf, &(0x7f0000002440)={0x0, 0xe192, 0x80, 0x2, 0x39d, 0x0, r0}, &(0x7f00000024c0), &(0x7f0000002500)) io_uring_register$IORING_REGISTER_FILES2(r5, 0xd, &(0x7f0000002840)={0x4, 0x1, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002540)=""/135, 0x87}, {&(0x7f0000002600)=""/228, 0xe4}, {&(0x7f0000002700)=""/120, 0x78}, {&(0x7f0000002780)=""/51, 0x33}], &(0x7f0000002800)=[0x4, 0x0, 0x0, 0x589c44ed]}, 0x20) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) read$FUSE(r2, &(0x7f0000002880)={0x2020}, 0x2020) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x10010, r3, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x110, &(0x7f00000048c0), 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000004900), 0x8) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000004940)='./binderfs/binder-control\x00', 0x800, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000049c0)=@generic={&(0x7f0000004980)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000004a00)={0xffffffffffffffff}) readv(r0, &(0x7f0000004b80)=[{&(0x7f0000004a40)=""/169, 0xa9}, {&(0x7f0000004b00)=""/123, 0x7b}], 0x2) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000004bc0)={'batadv_slave_0\x00', {0x2, 0x4e21, @broadcast}}) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000004c00), 0x2, 0x0) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000004c80)={0x0, 0x8, 0x0, &(0x7f0000004c40)={0x1f, "1a5aea98ee6f1cff2a53efb5e0c31d1dd47a257aaf5860feba54852f297f0d2c61"}}) setns(r7, 0x4000000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000004e40)={0x1, 0x1, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000004cc0)=""/198, 0xc6}], &(0x7f0000004e00)=[0x5]}, 0x20) read$FUSE(0xffffffffffffffff, &(0x7f0000004ec0)={0x2020}, 0x2020) 23.330421888s ago: executing program 4 (id=4002): socket$kcm(0xa, 0x2, 0x73) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000, @void, @value}, 0x10) socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="e50000000000000050110c00000000008510000002000000850000000500000095000000000000009500a505000000003ae8633ddd8dcee12a8af778a01aad5559906c9a79d4f8ad11b18855a006a80dbbe6c19d37b07f7674b96e32b4a6b1d122c5f1d6db76ba024285600fa5119b0310a47d3daa8a38490886d1f3c3ad8ffe096b7b07fa89197e7a379b869144e12174b639e716e721df57e9960a8816fdd7"], &(0x7f0000000080)='GPL\x00', 0xa, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 23.328359933s ago: executing program 4 (id=4004): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r4) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0xd4}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) getsockopt$inet6_tcp_buf(r6, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r7, &(0x7f0000000580)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null]}, 0x40) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r8 = dup2(r1, r0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f0000000040)=0x58, 0x8) close_range(r8, 0xffffffffffffffff, 0x0) 23.060401494s ago: executing program 4 (id=4008): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="18008fb2295607010000ef00001f0000037c000004002080c48d1f15551e1e3081ea29e7c9cd91f1a3f3b2f9caa97e97e1d1724af139e7189b8a09d26ed5cb8bbf23853a7295af0c5ed01c07"], 0x18}}, 0x0) r2 = memfd_secret(0x0) timerfd_gettime(r2, &(0x7f0000000040)) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x94}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3e}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x78}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9847}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x40040) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e3000000000000000000000001400010067726530000000000000000000000400080001"], 0x4b0}, 0x1, 0x0, 0x0, 0x44}, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000680)={0x3, &(0x7f0000000640)=[{0x8, 0x3, 0x2, 0xf74}, {0xa, 0x8, 0x6, 0x3}, {0x7, 0xf7, 0xd8, 0x4}]}) syz_io_uring_setup(0x6b20, &(0x7f0000000540)={0x0, 0xf546, 0x20, 0x3, 0x1b3}, &(0x7f0000000400), &(0x7f00000005c0)) 16.188358453s ago: executing program 4 (id=4008): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="18008fb2295607010000ef00001f0000037c000004002080c48d1f15551e1e3081ea29e7c9cd91f1a3f3b2f9caa97e97e1d1724af139e7189b8a09d26ed5cb8bbf23853a7295af0c5ed01c07"], 0x18}}, 0x0) r2 = memfd_secret(0x0) timerfd_gettime(r2, &(0x7f0000000040)) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x94}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3e}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x78}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9847}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x40040) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e3000000000000000000000001400010067726530000000000000000000000400080001"], 0x4b0}, 0x1, 0x0, 0x0, 0x44}, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000680)={0x3, &(0x7f0000000640)=[{0x8, 0x3, 0x2, 0xf74}, {0xa, 0x8, 0x6, 0x3}, {0x7, 0xf7, 0xd8, 0x4}]}) syz_io_uring_setup(0x6b20, &(0x7f0000000540)={0x0, 0xf546, 0x20, 0x3, 0x1b3}, &(0x7f0000000400), &(0x7f00000005c0)) 14.043720471s ago: executing program 35 (id=3879): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x21c040, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r2 = signalfd(r0, &(0x7f00000000c0)={[0x9]}, 0x8) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x9, "f058b323c86f041d44c0c3d5c034ae4adaeff2fe792b25923016222f32566456"}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000140)={@none, 0x8}) read$FUSE(r2, &(0x7f0000000180)={0x2020}, 0x2020) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000021c0)={'macvlan0\x00'}) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000002200)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e21, @empty}, {0x2, 0x4e24, @remote}, 0x200, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x2d}) sendmsg$NFT_BATCH(r3, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x200, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000023c0), &(0x7f0000002400)=0x4) r5 = syz_io_uring_setup(0x6aaf, &(0x7f0000002440)={0x0, 0xe192, 0x80, 0x2, 0x39d, 0x0, r0}, &(0x7f00000024c0), &(0x7f0000002500)) io_uring_register$IORING_REGISTER_FILES2(r5, 0xd, &(0x7f0000002840)={0x4, 0x1, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002540)=""/135, 0x87}, {&(0x7f0000002600)=""/228, 0xe4}, {&(0x7f0000002700)=""/120, 0x78}, {&(0x7f0000002780)=""/51, 0x33}], &(0x7f0000002800)=[0x4, 0x0, 0x0, 0x589c44ed]}, 0x20) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) read$FUSE(r2, &(0x7f0000002880)={0x2020}, 0x2020) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x10010, r3, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x110, &(0x7f00000048c0), 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000004900), 0x8) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000004940)='./binderfs/binder-control\x00', 0x800, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000049c0)=@generic={&(0x7f0000004980)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000004a00)={0xffffffffffffffff}) readv(r0, &(0x7f0000004b80)=[{&(0x7f0000004a40)=""/169, 0xa9}, {&(0x7f0000004b00)=""/123, 0x7b}], 0x2) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000004bc0)={'batadv_slave_0\x00', {0x2, 0x4e21, @broadcast}}) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000004c00), 0x2, 0x0) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000004c80)={0x0, 0x8, 0x0, &(0x7f0000004c40)={0x1f, "1a5aea98ee6f1cff2a53efb5e0c31d1dd47a257aaf5860feba54852f297f0d2c61"}}) setns(r7, 0x4000000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000004e40)={0x1, 0x1, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000004cc0)=""/198, 0xc6}], &(0x7f0000004e00)=[0x5]}, 0x20) read$FUSE(0xffffffffffffffff, &(0x7f0000004ec0)={0x2020}, 0x2020) 8.558890537s ago: executing program 4 (id=4008): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="18008fb2295607010000ef00001f0000037c000004002080c48d1f15551e1e3081ea29e7c9cd91f1a3f3b2f9caa97e97e1d1724af139e7189b8a09d26ed5cb8bbf23853a7295af0c5ed01c07"], 0x18}}, 0x0) r2 = memfd_secret(0x0) timerfd_gettime(r2, &(0x7f0000000040)) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x94}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3e}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x78}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9847}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x40040) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e3000000000000000000000001400010067726530000000000000000000000400080001"], 0x4b0}, 0x1, 0x0, 0x0, 0x44}, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000680)={0x3, &(0x7f0000000640)=[{0x8, 0x3, 0x2, 0xf74}, {0xa, 0x8, 0x6, 0x3}, {0x7, 0xf7, 0xd8, 0x4}]}) syz_io_uring_setup(0x6b20, &(0x7f0000000540)={0x0, 0xf546, 0x20, 0x3, 0x1b3}, &(0x7f0000000400), &(0x7f00000005c0)) 2.398685354s ago: executing program 7 (id=4227): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x850) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="040100001a0001000000000000000011fc010000000000000000000000000000fc000000000000ff007195db315e7500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003c000000fe88000000000000000000000e00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200250000000000000014000e"], 0x104}}, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0xe) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 2.289811885s ago: executing program 7 (id=4229): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x74, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x35, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@device_b, {0x0, 0x4}}, 0x0, @default, 0x1007, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xab, 0x4b}}, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_IE_PROBE_RESP={0xc, 0x7f, [@ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x100}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x74}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414"], 0x528}, 0x1, 0x0, 0x0, 0x15}, 0xc000) 2.229569991s ago: executing program 7 (id=4231): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000001100)='nv\x00', 0x3) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x81, r2}) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000b40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000180)={0x964, 0x1, 0x5, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [{{0x254, 0x1, {{0x0, 0x5}, 0xf, 0x0, 0x5, 0x8001, 0x2, 'syz1\x00', "1b058e3c0756816a96b94620f1a538dba5d368d7f71d3ca1cd5ac7aad11bd11c", "8d0eb41f21fd68aa63c041e40e6613e3393aabfda55a822ca3fbf2cd6fa0427e", [{0x1, 0x55, {0x3, 0x1}}, {0xfff9, 0x200, {0x2, 0xfbc}}, {0x98e, 0x6, {0x2, 0x9}}, {0x401, 0x4, {0x2, 0x9}}, {0x8001, 0xfffe, {0x1, 0x7fffffff}}, {0x0, 0x2, {0x1, 0xc}}, {0x3ff, 0x1, {0x2, 0x1}}, {0x100, 0x5, {0x1, 0xfffffff6}}, {0xb00, 0x0, {0x1, 0x5}}, {0x5, 0x8, {0x1, 0x7}}, {0x1, 0x6, {0x0, 0x8}}, {0x6, 0xb8ce, {0x1, 0x5}}, {0xf4, 0xfe00, {0x3, 0x4}}, {0x0, 0xf37e, {0x0, 0x3}}, {0x7fff, 0x8, {0x1, 0x8}}, {0x4, 0xee, {0x0, 0x81}}, {0x0, 0x7, {0x2, 0x2c2b}}, {0x2, 0x6, {0x0, 0x5}}, {0x2, 0x100, {0x3, 0xd49}}, {0x1, 0x7, {0x0, 0x14}}, {0xfe59, 0x2, {0x1, 0x6}}, {0x1, 0x6, {0x0, 0x8}}, {0xc, 0x4, {0x2, 0x8}}, {0x401, 0x31a, {0x2, 0x200}}, {0x7f, 0x1, {0x0, 0x8}}, {0x5d8, 0x97f, {0x0, 0x7ff}}, {0x1, 0x806, {0x1, 0x9816}}, {0x5, 0x3ff, {0x0, 0x379b}}, {0x8, 0x6, {0x3, 0x80000001}}, {0x1ff, 0x2, {0x0, 0x1}}, {0x8, 0xce, {0x2, 0x1}}, {0x9, 0x492, {0x1, 0x5}}, {0x101, 0x9, {0x2, 0x7}}, {0x8, 0x4, {0x1, 0x2}}, {0x80, 0xfffe, {0x2, 0x9}}, {0x6, 0x0, {0x3, 0x1}}, {0x6, 0x9, {0x1, 0x401}}, {0xb01, 0x7, {0x0, 0x7}}, {0x3, 0x2, {0x1, 0x3}}, {0x6, 0x4, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x2, 0x8}, 0x4, 0x0, 0xfff9, 0xb2, 0x1d, 'syz0\x00', "75ad5f18c4b0e8f2231aad4df639c8e30a22f602d1250399a3457280c62c1608", "09554de8daa59689c75a958a1dbcd7e3498d7e78fa8f3a05bd87e262e25100d9", [{0x10, 0x10, {0x0, 0x6}}, {0x9, 0xd11, {0x3, 0x9}}, {0x440, 0x2, {0x1, 0x10001}}, {0x0, 0x7, {0x0, 0x2}}, {0xc0, 0x2, {0x1, 0xfffffff9}}, {0x80, 0x0, {0x1, 0x5}}, {0xffff, 0x96a4, {0x0, 0xffffb4bf}}, {0x400, 0x6, {0x2, 0x3}}, {0x3ff, 0x20, {0x0, 0xe28}}, {0x2, 0x8, {0x0, 0x1}}, {0x101, 0x0, {0x3}}, {0x5, 0x6, {0x2, 0xce}}, {0x1, 0x370, {0x2, 0xffffffff}}, {0x101, 0x9c, {0x0, 0xc4f7}}, {0x0, 0x5407, {0x0, 0x100}}, {0x7fff, 0x400, {0x0, 0x7fffffff}}, {0x9, 0x3, {0x2, 0x9}}, {0x6, 0x6, {0x3, 0x5}}, {0x4, 0xd, {0x0, 0x1}}, {0x160, 0x3, {0x1, 0x4}}, {0x5d, 0x6, {0x1, 0x8}}, {0x5, 0x1d, {0x1, 0xc}}, {0x8, 0x8, {0x0, 0x70ec}}, {0x2, 0x81, {0x3, 0x1}}, {0xfffb, 0x0, {0x1, 0x1}}, {0x6, 0x7, {0x3, 0x5}}, {0x0, 0x3, {0x1, 0xfffffff7}}, {0x0, 0xb5bd, {0x3, 0x6}}, {0x7, 0xf21, {0x0, 0x4}}, {0x2, 0xff29, {0x3, 0x2}}, {0x0, 0x7ff, {0x0, 0x6}}, {0x2, 0xfff0, {0x2, 0x4620}}, {0x5, 0x4, {0x1, 0x38}}, {0x762, 0x6, {0x1, 0x1}}, {0x8, 0xd, {0x1, 0x3}}, {0x6, 0x82c, {0x3, 0x3}}, {0x5, 0x8, {0x2, 0x87d}}, {0x6, 0x0, {0x2, 0x2}}, {0xfff9, 0xfffd, {0x3, 0x9}}, {0xfbff, 0x3, {0x1, 0x80}}]}}}, {{0x254, 0x1, {{0x2, 0x6}, 0x5, 0x9, 0x7, 0x7fff, 0x1f, 'syz1\x00', "e5a84e30ef01281ed513d0dd5bad182c9fef93af4181e37c6688b7116c14c257", "c61fb73d2ddd028d5bbfb7f5b402f8fba537b7f650bd2701fa5014cd999898bb", [{0x8, 0xd, {0x1, 0x6}}, {0x5, 0x6, {0x1, 0xfff3}}, {0x7, 0x5, {0x0, 0x8}}, {0x212, 0x3, {0x3, 0x4}}, {0x60, 0x100, {0x1}}, {0xfff, 0xfff7, {0x2, 0x4}}, {0x8, 0xf82, {0x3, 0x5}}, {0x200, 0xfff8, {0x3, 0xffffff61}}, {0x2, 0x7, {0x2, 0x200}}, {0x8, 0x3, {0x2, 0x2}}, {0x40, 0xb06f, {0x1, 0x27f6341c}}, {0xffff, 0x7, {0x2, 0x5}}, {0x3, 0x9, {0x0, 0x5}}, {0x0, 0xcd3, {0x1, 0x7}}, {0x10, 0xd26, {0x0, 0xc0000000}}, {0x2, 0x401, {0x3, 0x8}}, {0x3ff, 0x85a, {0x0, 0x14c000}}, {0x401, 0x3, {0x0, 0x3}}, {0x8, 0x0, {0x3, 0x8}}, {0x2, 0x0, {0x3, 0x6}}, {0x7a37, 0x9, {0x2, 0x7}}, {0x8000, 0xb4e, {0x3, 0x8}}, {0xf, 0x8, {0x3, 0x1}}, {0x59d, 0x4, {0x3, 0x9}}, {0x5, 0x2, {0x2, 0x54}}, {0xc, 0x1c, {0x2, 0xff}}, {0x3, 0xf502, {0x3, 0x3}}, {0x80, 0xffff, {0x0, 0x1}}, {0x4, 0xc95, {0x0, 0x2}}, {0x6, 0xf, {0x3, 0x2}}, {0xff01, 0xd, {0x0, 0xcef3}}, {0x81, 0x6, {0x1, 0x1}}, {0x2, 0x2, {0x1, 0x1ff}}, {0x1, 0x7, {0x1, 0xf530}}, {0x0, 0xc, {0x2, 0x40}}, {0xc5, 0x4, {0x2, 0x49c}}, {0x9, 0x7, {0x1, 0x1000}}, {0x7, 0x4, {0x3, 0x6}}, {0x3, 0x4, {0x1, 0x6}}, {0x5, 0x6, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x1, 0xd7b200}, 0x6, 0xf3, 0x8, 0x1, 0x16, 'syz1\x00', "5e9967fd30c00769e53f9aef9c00fbc56c80d39425537976e48056bc46553a32", "c06296b81923f3d71efd9004aa0700c3dad20bfdb92ad3dbf6322087279cc648", [{0x5, 0x5, {0x1, 0xfb07}}, {0x2, 0x9, {0x3, 0x5}}, {0x4, 0xd8, {0x3, 0x401}}, {0x6, 0x8, {0x0, 0x7}}, {0x2, 0x100, {0x1, 0x4}}, {0x0, 0x22, {0x1, 0x2}}, {0x1000, 0x400, {0x2, 0x7}}, {0x3, 0x5}, {0x8, 0x7, {0x1, 0x8}}, {0x400, 0x100, {0x2, 0x51c}}, {0x65, 0x7f, {0x1}}, {0x7, 0xff1, {0x1, 0x81}}, {0xff01, 0x5, {0x3, 0x9}}, {0x7, 0x335, {0x1, 0x800}}, {0x4, 0x3, {0x3, 0x8}}, {0x9, 0x0, {0x2, 0x8000}}, {0x3, 0x7, {0x1, 0xa3}}, {0x4, 0x6, {0x1, 0xfffffff8}}, {0x8, 0x2c, {0x0, 0x8}}, {0x8, 0x896, {0x2}}, {0xa, 0x7fff, {0x2, 0x8}}, {0x3, 0x180, {0x2, 0x60}}, {0x2, 0x1, {0x1, 0xffff}}, {0x3, 0x6, {0x1, 0x3}}, {0xffff, 0x2, {0x3, 0x1}}, {0x1, 0xb74, {0x0, 0x6}}, {0x5, 0x100, {0x2, 0xd54b}}, {0x8, 0x7ae7, {0x1, 0x4}}, {0x5d0c, 0x101, {0x3, 0xc4}}, {0x0, 0x1, {0x0, 0x80000000}}, {0x4, 0x800, {0x2, 0x4}}, {0x2, 0x0, {0x1, 0x4}}, {0x1, 0x6, {0x1, 0xf}}, {0x101, 0x7ff, {0x2, 0x9}}, {0x8, 0x0, {0x1, 0x10001}}, {0x5, 0x200, {0x0, 0x5}}, {0xf, 0x6, {0x2, 0x8}}, {0x3ff, 0xea, {0x2, 0xa}}, {0x7, 0xbd4, {0x2, 0x5}}, {0xffc0, 0x1, {0x3, 0x4}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x14040004}, 0x40807) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000002240)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2.228174022s ago: executing program 7 (id=4233): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r1 = getpid() write$cgroup_pid(r0, &(0x7f0000000040)=r1, 0x12) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x5, 0x6, 0x6, 0x4, 0x5, 0xfffffffffffffffa, 0x3, 0x9}, &(0x7f0000000100)={0x2, 0x100000001, 0x55a, 0xd, 0x7fffffff, 0x2, 0xb, 0x8001}, &(0x7f0000000140)={0xd, 0x1, 0x3ff, 0xffffffffffffac79, 0x7, 0x6a, 0x4, 0x8}, &(0x7f00000001c0)={r3, r4+60000000}, &(0x7f0000000240)={&(0x7f0000000200)={[0x9]}, 0x8}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, r5, &(0x7f0000000340)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x40}, @exit, @jmp={0x5, 0x0, 0x3, 0x0, 0x6, 0xffffffffffffffe0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x59, &(0x7f00000004c0)=""/89, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xc, 0xe000, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0x1], 0x0, 0x10, 0x4, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000380)='sample_threshold\x00', r6, 0x0, 0x2}, 0x18) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r8, &(0x7f0000002700)=[{{&(0x7f0000000700)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfb91}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000740)='d50,', 0x4}, {&(0x7f0000000780)="b56f811289f9c184d9e8012d298b29bdd6e15d63b2eb7620de2c2317254c89cca1b45cf404137de428bb9fc3a7bcba21fc730d4d582e7b2d93d260eaa2a41a", 0x3f}, {&(0x7f00000007c0)="1489f09449e3b85957f54cdd36552bb99354ccf9333a5ae10cd70e0fd8983899cbcfffb33bdf6773c8bffd0ebb514f93fcec116e0484fe0636a5ea26aa4c21c06a79af0688472fece8fc6c27de0d0ffa4fd443c9b90d9f1d46a5508e4b15966b3e93cbdb28c33c693ca9066224c5bad0c9dc44850496b4fce95e21d7c75d3a4dbd5e66dea612a8c183beb145419f1ef1faa63fac8440e351abfa9a0d88ccf4b2814c91a70c62278c8609808803794ff19f57747b3f8fab9cbb1386968e81a8ca31901716064d169d4dbbddf36b11027350733e1e8adf7aa52a6f6e27238a4df558c293baffca8f6c441bbef268f06c401b2901d9", 0xf4}, {&(0x7f00000008c0)="103b5c7f0ecce606a6f5f34e84be0e8342f833987abb56804884ca3a875488652e19ad54b82914427d2b4f9b00ed7176bf64bc3796cc8ae8d4da7da260f057fc84ddca0b9b287ade6f764df0690690505dd83ebef82a668663dd7809ba1a201190a5b2b99fae80def2acade10d69f3c0ec4bb68f49dda55ad7e14e60bb33e6707e7474ced49d73efd99b2274999c0a9a731c38758fe91b879c39ee1cd3b48bdbd5d8200139572d6f0da19f7ccd1099d2aa83af7ca0f318ab64f868d9a2358e936471474c25dfd186672a381ce712", 0xce}], 0x4, &(0x7f0000000a00)=[@rthdr={{0x58, 0x29, 0x39, {0x2f, 0x8, 0x2, 0x8, 0x0, [@mcast1, @local, @mcast1, @empty]}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x0, 0x4, '\x00', [@ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @local}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x11, 0x0, '\x00', [@pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x3a, 0x6, 0x2, 0xc2, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @local]}}}], 0x110}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000b40)="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", 0x1000}], 0x1}}, {{&(0x7f0000001b80)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6e}, 0x1c, &(0x7f0000001f00)=[{&(0x7f0000001bc0)="e44e956c215ac4ebdc2e3e5556f5926d9b0219139b14f694ed14ba0135ec9d4d0c48f8503facf92f092db75a67d0810e1992", 0x32}, {&(0x7f0000001c00)="d7d722f96f811f087c2e4c282f088be97c344a10403c3d3b3750ba02715be1bd896e052edde7b0984c0c8b02a8c9a0aaf78416fcd1f99c377e049cc57c6652d84f2231e6ba6fe5d00f9d4ebf47df3041f516c8addb3817e9985a", 0x5a}, {&(0x7f0000001c80)="9afe7c4f6ebac96eb9071cd680a847638ae433a9233e7ad3062059c1206d02566be1e79cd3c71695c8f9460afed545839262166f33a4538b88ad0ddb6e8377198507f6e2743515acc2b04a1d9a2e7ad4a408294dd24f0ee4fa08edf4dcd0fa7f262f9641ec185a523106ed1e71b3ef0e74b23afe7089d8d46f31dbfb2267d99c1c1b2d129ef9545c7aef8a9d917cc3da7530359da17a99744908", 0x9a}, {&(0x7f0000001d40)="74d75909a3a41f7d8ddaac9882ac78434f6227ef21fd4e64bbd1f0869e2ff2744a701505b06b0f8973e8c318fe9d169481c9cacc6e9326b1787acafe0589268264631aca525eca87ca477abaffa6bb2bdcce75d640f2547ba36f4d4d0115fc42896f5a7fb21cb00f18e3a677c54664f0e98a5ac521c1684d7c1a96510f1482f06e35d111698e853210caf0aff26b38ae47201c010cbf86d3551f2e4fe6cfdf58ad89a6057d0ef4466c9ab50f63854087c332d42852117c7fd886b478a9d702249607434200a75878e18ce11bcfb0f184a12d4f012537", 0xd6}, {&(0x7f0000001e40)}, {&(0x7f0000001e80)="9d8d1b50868702d7b523abb4203d68fc0b76f810a9c07c501870722c9d78323db6b11cdb9c326e4f27831933b7d04d67c1a2f1da4801dccb2af57baebcbe46c1d1f3ad473b493a9a7bf32b8b99e49660b059882458990582270a2ffa66a2", 0x5e}], 0x6, &(0x7f0000001f80)=[@rthdr_2292={{0x48, 0x29, 0x39, {0xc, 0x6, 0x2, 0x5, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @loopback]}}}], 0x48}}, {{&(0x7f0000002000)={0xa, 0x4e21, 0x80, @loopback}, 0x1c, &(0x7f0000002340)=[{&(0x7f0000002040)="fa1f5920e4b3fd961ff25be53b83aa2f6e7c590246ea5c210df216fe71bc60139b2ee1c48de67070d474c3866ed95be2b7ba108f1420f56d2e18f568d7467324bdf447d2ccf8fbe04c1a5dcdd2a5a280", 0x50}, {&(0x7f00000020c0)="40bc948057ab6bfa922875aaca97f2b592017591d15e87f89830e9c10b40a2fa09bda4a88cf095091a65ee25574f08abc5150ae7e57b87c3468446fae4a7414a3be387d44b4a55", 0x47}, {&(0x7f0000002140)="78755569429bca5655b67ec2d4c8280c626be294090eef4daeef64603749beecd47a64b4646e53c83bab7cf0fef5b520b03aa9294fc21c16a40c86ac4609f914130524045512d63d4e7fc89a4be8b6000e297de6d43d9081829a13762b6c5e9d6d807d844864988f9c48f38db980be295178b8c4e2e3", 0x76}, {&(0x7f00000021c0)="c99117e8bc2754cfaa5ca8e8475707d010de85710ce151cf87e8dde3a99cc333a19b4ca3ea9ac7612ed68527085d90291d38f69e72741bf3f6823da09bbf98135debc9d67422ef930ef0fd51de984fd01670c5e03c0cfbb7fbdcda61e364846dad3f187ea4faa5f06f95605fd04af08d840039793b0e9774e26cc3eabdba289b4a", 0x81}, {&(0x7f0000002280)="5ceb9995c27abc2ef6c2e4bb8af8e25299b3d81dd1ed37f523b79a06463b20ef24ca4d43daf747d6cc6c8ddbc93febe83a21730f802e84f2cc6a5f3f34bc25b07a45cd91226647a282ffd3c7c0e722dfb45921972c39dbd5a27a97df405a119c28b3e0f68ad839a41bff61742fe24ebf6606d991990b1668dfc549e9246d4c26bf03e63380731e6709fce013b14cc19bcb9a8fd85a65fb351d138bfaf6846d31cd77eb50288179d4e27fbe935a6b", 0xae}], 0x5}}, {{&(0x7f00000023c0)={0xa, 0x4e21, 0xfffffffd, @private0={0xfc, 0x0, '\x00', 0x1}, 0xab0b}, 0x1c, &(0x7f00000024c0)=[{&(0x7f0000002400)="9ac37c6c56532582abf12363dcdeaec85cca970bbc25704bf5dd82b4db0512d300d3264f71eee46be5fbb3182ee212550b99a0600bbc8ab3237b9688057b2f903b16f9c3036eb25665133664dce4c12982e868e0ec87242c2cd7a4c2198855b30f4e1a9942e08a113567bad5f4029f0f9867cf3730b7e2744724af44e9f6ff8bc775caa891dd6587a7120b3d93b62ad297ec957b779ff8cf4d5d022edac434164cd81fe14894", 0xa6}], 0x1, &(0x7f0000002500)=[@hoplimit={{0x14, 0x29, 0x34, 0xfff}}, @rthdr={{0xb8, 0x29, 0x39, {0x8, 0x14, 0x2, 0x5, 0x0, [@loopback, @local, @private0, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @mcast1, @mcast2]}}}, @hopopts={{0x108, 0x29, 0x36, {0x3a, 0x1d, '\x00', [@generic={0x7f, 0xdf, "013b27c1649b4c118050f66c65b3ad5bf5938a779470bd2f7e5044a77ab458e9a3ed9129259e75cc7402d7584d58ce7f0d891df2528ba3fd054c8dd641fccb559e100f456dfd286bc39e2b134ba19cbe836dd5d916a1e9e078245ec2cac3510c91da6cef2367132d4522a4af7a6a8dd0179636a13410039a14f2042ab9f5ebdf7ebeb5cd5ea0d48f944e4232f89f54c220129ff45dd6478e48a385248b9f2e3aff16897ef153a41278f04320f5aeb421447791c47853baf1625c8379403cf01ce634b18bc5e686a971d787254c44e157e761d4bb3d4724b777dacfd9335e88"}, @ra={0x5, 0x2, 0xff00}, @jumbo={0xc2, 0x4, 0x8001}]}}}], 0x1d8}}], 0x5, 0x40040000) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000002840)={0x101, r7, 0x2}) bind$bt_hci(r9, &(0x7f0000002880)={0x1f, 0x2}, 0x6) ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f00000028c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000002900)={{r8}, r10, 0xc, @unused=[0x5, 0x7ff, 0x88, 0x100], @devid}) epoll_pwait2(r9, &(0x7f0000003900)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000003940)={0x0, 0x3938700}, &(0x7f0000003980), 0x8) socket$netlink(0x10, 0x3, 0x8) r11 = openat(r9, &(0x7f00000039c0)='./file0\x00', 0x80000, 0x46) connect$ax25(r11, &(0x7f0000003a00)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003a80)='/sys/power/pm_trace', 0x4001, 0x1b0) write$cgroup_int(r12, &(0x7f0000003ac0)=0x5f, 0x12) read$FUSE(r9, &(0x7f0000003b00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r14 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000005b40), 0x80100, 0x0) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000005b80)=@base={0x5, 0xb, 0x9, 0x9f, 0x281, r14, 0x4, '\x00', 0x0, r9, 0x0, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000005c00)={0x64, "f4e5af95d69c2319d84296494b7a61b31999cf0aeccb7b9eeecae89782ba99d387fbe97f0e566e7a1695e75306a60f58bc257c04691fdba97638a64900b28ccbbbef04e9f25cab20840fbb17a632b3fe7621d0e34ae584a9484f61d7ab87bd40c16ccf885117caaaedade25559f47eab55679b2ba79966a91c60ec15f14c21e5"}) ptrace$getsig(0x4202, r13, 0x200, &(0x7f0000005cc0)) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r15, &(0x7f0000005d40)={0x80000010}) pselect6(0x40, &(0x7f0000005d80)={0x1, 0xcdb6, 0x23, 0xfffffffffffffffa, 0x5, 0x9, 0x10000, 0x5}, &(0x7f0000005dc0)={0x6e, 0x0, 0x7f20, 0x7fffffffffffffff, 0x401, 0x2, 0x1, 0x8}, &(0x7f0000005e00)={0xee1, 0x9, 0x80, 0x3, 0x9, 0x3, 0xfb44, 0xa}, &(0x7f0000005e40)={0x0, 0x989680}, &(0x7f0000005ec0)={&(0x7f0000005e80)={[0x4]}, 0x8}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000005f40)={'b', ' *:* ', 'rwm\x00'}, 0xa) 2.168860363s ago: executing program 7 (id=4235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x149a82, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r2) fdatasync(r4) sendfile(r1, r1, 0x0, 0x5) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000001840)={{r5}, "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"}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000793000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000040)="26260fae49000f1c70080fc7b90000008066baf80cb88cf2a689ef66bafc0cb037ee0f01dfdc7a0067670f01c381fa080000000f2c8423f47f00000f2045", 0x3e}], 0x1, 0x2a, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.810135085s ago: executing program 2 (id=4245): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200006400300000b035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x48800) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.739735155s ago: executing program 2 (id=4247): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000140)={0x1f, @fixed}, 0x8) r1 = dup2(r0, r0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000340)={@pptp, {0x0}, 0x0}, 0xa0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/warn_count', 0x0, 0x0) read$char_usb(r2, &(0x7f0000000100)=""/169, 0xa9) (async) read$char_usb(r2, &(0x7f0000000100)=""/169, 0xa9) write$P9_RREADDIR(r1, &(0x7f0000000180)={0x119, 0x29, 0x2, {0x7, [{{0x40, 0x1, 0x1}, 0x7fffffffffffffff, 0x5, 0xd, './file0/file0'}, {{0x4, 0x4, 0x1}, 0x0, 0x1e, 0xd, './file0/file0'}, {{0x40, 0x0, 0x8}, 0x6, 0x8, 0xd, './file0/file0'}, {{0x80, 0x4, 0x4}, 0x8, 0x0, 0x7, './file2'}, {{0x4, 0x0, 0x2}, 0x9, 0xa6, 0x5, './bus'}, {{0x10, 0x1, 0x3}, 0x3, 0x8, 0xd, './file0/file0'}, {{0x80, 0x4, 0x6}, 0x67, 0x1, 0x7, './file0'}, {{0x10, 0x4, 0x6}, 0x7, 0x6, 0x7, './file1'}]}}, 0x119) (async) write$P9_RREADDIR(r1, &(0x7f0000000180)={0x119, 0x29, 0x2, {0x7, [{{0x40, 0x1, 0x1}, 0x7fffffffffffffff, 0x5, 0xd, './file0/file0'}, {{0x4, 0x4, 0x1}, 0x0, 0x1e, 0xd, './file0/file0'}, {{0x40, 0x0, 0x8}, 0x6, 0x8, 0xd, './file0/file0'}, {{0x80, 0x4, 0x4}, 0x8, 0x0, 0x7, './file2'}, {{0x4, 0x0, 0x2}, 0x9, 0xa6, 0x5, './bus'}, {{0x10, 0x1, 0x3}, 0x3, 0x8, 0xd, './file0/file0'}, {{0x80, 0x4, 0x6}, 0x67, 0x1, 0x7, './file0'}, {{0x10, 0x4, 0x6}, 0x7, 0x6, 0x7, './file1'}]}}, 0x119) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) (async) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.690147888s ago: executing program 2 (id=4248): socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000030a00000000000000000000000000000900010073797a30000000000900030073797a30000000006c000000060a000000000000000000000000000008000b4000000000440004802c0001800a0001006c696d69740000001c0002800c00014000005300000000000c0002400000000000000000140001800b0001006c6f6f6b75700000040002800900010073797a300000000014000000110001"], 0xe0}}, 0x41) (async) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) (async) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x1, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) (async) read$alg(r4, &(0x7f0000002840)=""/4089, 0xff9) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}) (async) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000300)={0x980902, 0x1}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r5, &(0x7f0000000000)="38000300010003", 0x7) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="160095100000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x40106308}], 0x0, 0x1000000, 0x0}) (async) r9 = memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0) write(r9, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d", 0x22) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r9, 0x0) r10 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) (async) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0x100, 0x0, {}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "180cf300"}}) 1.679840307s ago: executing program 2 (id=4249): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x850) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="040100001a0001000000000000000011fc010000000000000000000000000000fc000000000000ff007195db315e7500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003c000000fe88000000000000000000003f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200250000000000000014000e"], 0x104}}, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0xe) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 1.677664213s ago: executing program 2 (id=4250): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200c00, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff000, 0x1a3}}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0xfffffff7, {0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x12, 0x16, 0x4, "b4d07623e43181125f4dc074cc9ecbbbf69f2978664d772d938934ab89ed98f12f98d22fca2245a7519f9c746cf431f25e5c842aa73190055e4229eb3d890d5c", "18cf3b41fcab7d3a3c83026be22ef9b16191862089e958dba42a2ca39e026aac8d3007558b0f372573e8afc67491e50d512a9b169c976355a8bf8222fa69fc97", "72b4944ab98bb5e0418fd26fb447eeb5f9d0470d761e5195152a99e22e641cf9", [0xff, 0x8]}}) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000001c0)=0x3) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x20044081) r2 = dup(r1) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000300)=0x0) sendmsg(r0, &(0x7f0000000a80)={&(0x7f0000000340)=@nfc={0x27, r3, 0x1, 0x3}, 0x80, &(0x7f0000000900)=[{&(0x7f00000003c0)="14ba03707316fd7de62d8383024dfda45b17fb1ca850d7d4aaa095756060b50f63a780c7837632ba9377b3117c2a7c0e364ea84115469f45a4af552c609b47543deed97f7d211d01527a20767794500ee1680eb85d2db02810f757e3d99b37b98a17a5764e56773c76d39a459384a7ede46937f9a49c92536a7432e9b807a6d12daa", 0x82}, {&(0x7f0000000480)="670b686a0a5ea38cc410fce032a1b692500aeeb37e388acabe061d8f7f7800ac8754ad0e8712f1f766773b6d3917e788f0392679972a278125402b58331d0462f096a91633afefb635e5ae367738d08076007ee06f39a2b66407d3de7bc3fd030fd5730f3065568da54f3690ea6eb65d559d18c2cddf95ec0d7e279d83feb0597826ea881de51d44cdbd2569596fe88bea74141c9bfefaa6e77f7eb7bb65bb9075eea390a040bfeec6", 0xa9}, {&(0x7f0000000540)="f631b4720d63caabc2108540474cc1b587ee45b5813ad038030bd95707ccd85a9b30026bbbab2b5e5392de8e46cf910b8ce648f4e02f1b0a3ef10844", 0x3c}, {&(0x7f0000000580)="43736f811b78831adb793e47d2c38bfc78f4a15c6c8d4b58c8fb593f3be2a2bc6dc50ed26b69ea2d62d406f6ba738a82b0757c5a4248314c7e86edecd1b873ffeed68dee1efe1d69d8a76a4155135f9793f757a961adb3", 0x57}, {&(0x7f0000000600)="0bedb94d4842a9a1d77ebde6d2e083cb9394ab45b46d6219af47213c6dcf56988f99d309d8406fdbf64619f64f818e6bb45823", 0x33}, {&(0x7f0000000640)="d1a5ef51e15c290997814ba58f014826f4f094943e8b4fa8446f07b9f37a603f0c3c5b04ba157dde30223e33ab09549c7fa701df8d9297ca1168053de2846210c7c32c4307c29e7b8a0f0f7dc2f5eab1e89596cdd1a6a3cc22d1238fc6ea8ae1925e0ca31968389258e1d7952b8ceb2ba906a98e98ccb5d9bca0b45268f97984fec33af3f74d3216928e8bbb714fd1c14a2135b6a20bd3f0071d28badb8337e0ab", 0xa1}, {&(0x7f0000000700)="f3886a3da8834a7e8a0a826bebbe2ed987f2704244d569c7880872fd16944ddb45963b933d72ecfdc6fd014400caf1fc45f3011d75631cc3f5601e76ed266481e6c84f3cebe26e1f59bb41959f04d042982c2b204e8e225a58d92767bfe7dca3cd6ea45d09a15dabbe9b7fa3dbe98c77411a83a3a1c2a8cdcacf2ca05912f5f784d43565dbf45fbdefd82896", 0x8c}, {&(0x7f00000007c0)="db7abb935e4e6ac4f598b2dd", 0xc}, {&(0x7f0000000800)="a404ef6205a7fa76be93e231bbf3fa35798a98a4da61496aa5fc8a411d8835e746ef46f8902cea07ef685d8410f43b0146978e8e7d552d56db7d7cab0aa3e60ec23a", 0x42}, {&(0x7f0000000880)="467afc5fa2191626b67b2f78ad005b18ddd9a214cb02be1087493867eb37dddc0bf313f77fc2a85b927cdb49af479fb4c8903a61d9c55a9c8df7d10723bab70e7b8036ddad32a95fb67186156853c8b1160d7bb9bfc152f97939a1265e89904bc918cea358a6981c8b3cfcf8cfead1f5", 0x70}], 0xa, &(0x7f00000009c0)=[{0x90, 0x117, 0x5d7, "a9a63c7bf412cbd9163d4cd6fba2ead87c0573e2b3bf1e32129a3392ee25f51ab4d7acaf621a1312d6413190b2de56b5b9306f880a02a3468bb0668c2d18e78be9f6de0498fe70f34c0e0e89befb3ee49313afcee1d618d38d98e9865ae6c2ae71e2950f34fdd2671279ca7b847b95a0d49cf1c1e3e2bdc31c"}], 0x90}, 0x10) write$binfmt_aout(r1, &(0x7f0000000ac0)={{0x108, 0x6, 0x48, 0xfa, 0xad, 0x1000, 0x4e, 0x8d}, "7f621880310caa67d08c65b0854593a060a0ef7091ca1b358846a7ac2e5e7aac790db585df43a598372b0e9314449b6e57c96a5c8053e740897edbdd78c8d28088ec58550e9d345b706333154e29b139f5e705fb0cbe7e0f0303fc85c9efaa8a281b91dd7e16eff171a9b0c06233dd8c2fd8e127128f17f470a5c2398afffda6b3777a2d93a19b9f", ['\x00', '\x00', '\x00', '\x00']}, 0x4a8) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x4) r4 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000f80)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xe6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0xc0, 0x9, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x8, 0x1e, 0x1, {0x22, 0x500}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x0, 0xb}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x9, 0xfc, 0x7}}]}}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000fc0)={0xa, 0x6, 0x201, 0x9, 0xff, 0x6, 0xff, 0x3}, 0x12, &(0x7f0000001000)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x7f, 0x6, 0x1}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x81d}}]}) syz_usb_control_io$hid(r4, &(0x7f0000001200)={0x24, &(0x7f00000010c0)={0x0, 0x7, 0x6a, {0x6a, 0x30, "c0f37be343f48c92a9b033fba93a9cd404eab8692df12b5eba4c173ddfc5c6fbf6759d4970dea49374c821c403374401ef9333eed3ecae15f40d4b284b3c15ff0ae65441051ca162172319abaf6856e2091387bd901d3cfce3ed7dee1600b5f2b5219f570e692ceb"}}, &(0x7f0000001140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}, &(0x7f0000001180)={0x0, 0x22, 0x28, {[@main=@item_012={0x1, 0x0, 0x9, "d5"}, @main=@item_012={0x0, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0x1, 'Go\b\n'}, @local=@item_4={0x3, 0x2, 0x2, "c6e27c7f"}, @global=@item_012={0x1, 0x1, 0xb, "a4"}, @main=@item_4={0x3, 0x0, 0x8, "f438cd19"}, @local=@item_4={0x3, 0x2, 0xa, "f99e5442"}, @local=@item_4={0x3, 0x2, 0xa, "0273ca1a"}, @local=@item_4={0x3, 0x2, 0xa, "18373e84"}, @main=@item_4={0x3, 0x0, 0x8, "2a98b023"}]}}, &(0x7f00000011c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8982, 0x0, 0x1, {0x22, 0x1c2}}}}, &(0x7f0000001400)={0x2c, &(0x7f0000001240)={0x40, 0x14, 0x73, "9a25c9d4bfc610eed60a2ccd5414e980d86be73827f5b5a7974784e2cdf2570d12ff04d7fc36132de97df6d6982efa916bbe18f80ad1f13be69f27267832c01b0b93d4c0d4da0ee246e211e2f5aed02035306d88b0b67816fe5ba62d9cccebaf05cc7a32cdf78de827858a12c4ce7021a27ad2"}, &(0x7f00000012c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001340)={0x20, 0x1, 0x74, "c85654cb3ff0f6e62e6c73c3813423f06e17f8cb0cef40165d305c40fcde4dbf9f34786c6e1181f8aecd75f60d84195c8b2d0f47d222dec58e401f587a44c6dad19e1f31e18da5dfce830e98151a5f7ee285b0aa049bfef89a0ed16c0d73e54b110b0ae0a4d97513979d306fdf271c7c4eedf55a"}, &(0x7f00000013c0)={0x20, 0x3, 0x1, 0x6f}}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000001440)) mount$afs(&(0x7f0000001480), &(0x7f00000014c0)='./file0\x00', &(0x7f0000001500), 0x840, &(0x7f0000001540)={[{@flock_write}, {@flock_openafs}]}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x18) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000001580)={{r1}, "aab74accc94b229ffb7eef7d84c58f7c3f12f4d044760caa8f4379959bf7d12ed1e91618be0098ba1f3796871da093c37fdff1e373ede0a45be8b2ec6f007ba847d9f042f330539f711fd45b94e6e10da533cb7fd0b44e660b3810a6e6cc6f051663e61958dd3e36e5b378618da17484354c1b3c283befe09cc1a2208754795196b08a1c9bdd6bd1fd149ba9672c29f68a6d54825ab43d03176b13c16ec8e73b4ad007d06b49cd2276e86a5b5a13da04d903ab3169c1fb8e3bc6a7cb983d84f020d64c1d0b8575e7b51b73e6af2817f618adf0145027c5e0c0eaf15457cb0f81c5276e31c1a52cf3d9fe8ecacf20d8e10f4083fb25c5a48a3849036be1308122c413a1743ba4cc42c172768903cdcc6ceab5e41721de35a278676628a4797b37138696d79e37ce1abd8f475191d20afe174fdfecb0edfa2a26de4f8f92ee92cea91f07175ba6aefbb0eebc73c04a0f5eee29ead337a20173d4a28d5d0b4b5ff80b00d9f91b9ca0fe6cd7b24373dd5a572c9beef8de264e60d95f85f1a8140b546a336bc716aff4757b6417f7ecc7457038c41dfddf1d128fc26c2c9374731c6a0ce79eb1c257928ac3b7a08b2edcda6933f99e7dc678cde67f021579a22d36b9ca6844ca8ae306c1680d64c6fd79ca2acfef595bb620a0d46697a12391b4c416eeb2bbc1815d9aab2bd2f6fc34fba484945cc59ea0a0cd487027ec8425d95b884a9b02437cd29bdf3046e2226b1574066d6f540caab20947af16fc7947e1ae3bd8c31aa08cbc5a938a2f93998701de2582c7feeb457847c60166c482e65eac6425b92985615c9282b0ee5a9e34f9fcbf7f51b2ab2117cdfba96532c3303e5eba1638f6b31e5942fcf1c41f11229bc79e0a00d01d6f28473042e56c4e3b440c2c4143b3acf976e16d9770e7a2923bd78a345c17dfb4f653505d2e5087f7686f8c492906112d33bd83ae96c7c17a5581c19ed7666e6511bd9dc3d35d87589de2f0cc1912f65b04aeb39af763a31b16b26c05e5a46c0679c4a2820b2dec1b76ca61db590bf53922f29ee902400950baaa4e8442351675be61b1163e9465c51c36ef559c2d30e86ec34331db824798ffde358cf5cd6c047760d7a5d7127a5ff00594dcba8c5f91209abe6323fdaca25fd8c6e8c8d86ac8529c1b7e7c84ea649783a34df0f9bf90726c21c4903193a3bf3fbba4a9b54e4b05e7cbcbb35a3cceb61cc1d321c5ed50ed598e6e20ee3691fcab4970fa50189253fcba6458ecc48a9ed3db25a1d76e543e4305bf8936fe204643247b2130649af4a1074be7ff7991250a81a93c73738563f2043e19a111d107c65eb633fc3eb32fa692263cf4d30cd94d8cc277d1820b061029747517d165b2f50f8bbb12f01ca96588121fe80bb7266b1d9f70acbb1cfbef3f069a021ab460e60225f856eb134bb1b40a1696b47c6d25b63522f3f76d08492468b6cac2429f856ae8f319f3a8b555424646542574ceb8a89dd0c0574f0a38c9e40a9e0ff42a1bd5833616437f32f5005605478e616675c679a48a5ac863fec8ed7578b9e6091c1800138e99605ebadd48b114566dfe478a57a6ec3121e7e51711aed6c55142bc8930272d70a0593509a56a9936183f38840d8a9addd4ece786eaf7f273c669c455a3238c1ce79c04446b840c1c5cccaa68dea4a791c12c7651f6a68534728ee489d25be7948a525e9b6971ddd15030c1dd96ade71b97f52c9856464d176fd478588c929541ab5236520fe1c3531671de36523e680c67fd17fcf8fac27b478fb19f79b64f61b1704b4d6d5722fa8224ed2f2b2c0a841ed0cf604bd1d7100afd2fc38e9c9159092ba50cf8c63e225f24905183fbe975f85769ef39a9e9703c263abe8d413dc7d114adbbd412f7b985be8cf62e8f2b4f6572d0de02960e97490bb5f909aeba00192915140781da3ed51df871b42d44760723a1ecb8cbf8ac564b34d4802412f1a981be8bef242936b656d79944bd87bf903a18982ca2173c95f005214de5f56330710766036fe2560b490d11469ce31d8e53bdc9d49d18afdc9c884e1293f3f297a8f8420551e253ea8f4fb7ab98493782e3e1ccbb58a86ecefc7931d7e7c57a6e94b090f0420ad8b542b09df96301ea7fef58f5dc45dfe49959965a5883a30200080562e3f77354a051105bdbec29d5c4a4748a670f69f4014982a363286abdb4c562f69c40a5e4ea588af13b5f1f9c5f19541a821098a3d554341b0d96ec061e5ddf7b0e22b5a197a743d92e3afc59c3c153b356d62cac1a6cc1b1ef857b3e9b1627daf5984b8a056ec2eb1bfda52808624e7ecbd1431dde5a87e164ce21ed2c5c65e7320df16c7b0ff4d1a5417c62fce14ba3968e331d61d12b5acf5a0007f1853a6e9e733078a30ab67ec5d73fbdc62e3af5db7b28c96027610e25d535447b4930067ae9f385ad2426e0f5ffc414d97cc009f0db163396a7197fdfd809e990b7ec8637558ec0ae078086bc72c49a66561b9a88e2b6d041799853c18580e8878434c47ae8623cb143c274ffff15642f775afc09692be6e284dbe2b7c281b327233fddfc44e1b924c32619514b4302b3e05db83ce95714b962b11784d0a0cbef956c63fc4563af14b48b875a75a25303355ad875d19dfc304846bd907e9caec90f0ec10b78d0afd0079beddef90a990f6a7673accda9568834325088ad56af53ae6f464409f4a3426eac0bdc4d431945954c9f911c7d2d93b6cd8213e2084d77a99d20b58d48b8dbedc75aeafba96579c1643d05ac0b79845804c02d80d858e7db434176b6bafee65898163b694c3d671c36e9d272954ad1e2f8a70408f06d969807b02d1912cd8a6d405d3d66989924a95018294f9124b0b328cd6cb2d5f50b6ebd1e096a39c1194f8bdeefa5a20f3c454d086192973fd83a92d507f2f1ac0d27b95f4decbc1676313c867b00fa039608effb36a4b3afb59ef5fd0016c5b29764704efb46c20c576900aa7b85bb20ba478b48a9db2afc09ab0ee30afd77a35c09983ecfe9263d4e41a322a9b95361523d9975d0746dd2f853abff1548b7be5e716013b351b193af13256db0a749b6c9a8c8f156ddacc9f87689b9a1c853627725115bc246be14d4d790fcbd103bcb0eca5df3f6e13a62249d9fb7e0653a447ca09b5ad5503610e8464320bdd3a8e0bb35590e13bad498596e39fce45d57789acd0469f6c3df115ac6b49de8816bed4fe13b9d3e6136739eb6c810b73d6e891f5e17ee8c59c7342f6732eda5ac6f9c234663999a32349ae87b5db0b324e91d596d4bc8f255184563ff1a87d4cb07cb28cd31a93a641f52bd8fb11c5f84ea8abb838f2750c56461b73625b270c5b12c08b2fff831b1160486efbcc230fc6e42a4ee0c06300c18dc40cb1f0ee21f62a61ab605a2a7fbd008c22a235ae52b6c7b84921b95bab12e92961f6cfc4b584b6b9ebc2a9dfc0a666bf6602aa93e5173394c350cc437b98cc17e84fde42f441c5797d1fd872c5f43ee5d1b94207a59be04da1d8b686cc7910a6ac08a7db0ebff49aff21348277fa7bf451a97cbcd1482fc8e2a7b9e18085e16060679154a28769c0ee76d958574f073c72848c77ff0cfe296ec01f02b861a12606610b20b61a3e74b849c1c9a98d34c8d33275f6e7e0557776687da4f54311af28191991aff62513a8f561e3b88a0e9275ba61f90c4399d64307d5fc34d31aac0feecee83f71e0e330c9cb876e2e91515df03926445babd9ac6d109636b73305311cdab68d30cab87f2f76d98c74bf017d2a02600d4cb6fcdd315538e6412463affb19f5bdf2e0384748e51396e61e3318b1d6d13100ae2cf0e0a25e3bf16bed4f70ba52ffa722d81d87db5a061b5956c8d6707e2a6e778613010cd71539d912f003e3ed9ceba114274935cddda9a895d15c09fc667a95ebb1005c69ad91357d36b88487317ca4ba4571bd27bc5d2568c90c01bde9e8beec120422fdc4488c54a572405d7bbbcdeacf4e0f8d265e93fb0ff1df11745a51f88e6de726dd1a8bc92d053e532175ec08cd1759b9424ed8a882b7e76f67178fd1e3ff94de11b99faafdbf98ea0fbb2887f9fcebcc0fac0d060880ea42cf1813d6d4bfa28123e17187c48cda93ed3e1de03fd5f6b3b97055cabb0c281d052f16518d3bbe9c2b00caff0315974f208a0f43cff7d50b7aeb7cfd6ec1b1023466aea87139bde179ecf1819563d8d33c53c1394ce073bd6fac39dad90ba3ca29e3c161c8ddeadc2b83ef6618c9b4a27444d022f67d2b7c8415b60bc535b236946493fa45e094d0d0b6c30a9ca120bf711d3481ae5ad02d1004409b8fd15c799e6501780b01b528b088750da8974ef5ffaf523c0bea76f8f1f32e5e0de779f5e96c097fb385d4dc0637053ff3a7dcedc168f55129c2f05f11591eed72a9c20f9b513edeb086f8da3f23af3900241c89f6d0d86e48bd57ec1d18e6022f8a2797f6fdd48758190f942da0d2136713a1a05cfd8ccc2096895c1e68aa44ca4a73b27442b59448ad7afc06cb1f7dd3d49dc8033a32cf56ff1f671629a340b9650e9392ba50425ba5e419de95877cdc2da9e0841559ef623cc12c100b3e4f81de9a1d3ee82d6d966d76aa64a2b16ae7b3b220fae49c40913fb77750ea955c802b29c1ff3b31bd545ba601cda88965f6df3b702984acdb332b043bb6fef9dbcc637261c02f3a357240b91c1e8be1801c4a344c10b14d2effe66bcb4419ef4dd4291579547735653d08c19c22cb162e61e1c516e19a8020b8e943a275aedce68c0da433685744a651862c9de046c64595f720f38c401b74406daeb537549c684501d20662a5bcfa726bbb1c24a96d8b847fd7a343c4d8a3d5679635f2b19bd215462525fabee61b3a07cd5676aa21d749f89da528605b72ab9266cd3aef73a235bb4404df830c26beebdd2110a5d4a0f0425f1e5ebb425a3f3761e3b5eb9b9ffdc67078f897fc3e9f14cde50d8192f2dc5c72875b5cc85d438d21301aba6d6c771fc0c7401136298c4fdbe2782bd99862277a5a4bfe7ef1a5395720ed3aa5e827a7e16fe6c82d1e14f11c7e18b8808f4f9536aeb581588715e60e28c84856ca8bb0045e3fe223060ceac2874f2370080788db89be249a2be2688545b1e8c6db642428698b8584c6015dca246938b96987bccd15509ce8f30131a33c9230e24626e270cf689db8167605965f4dac52450f9407d1a5c4d1b8d4e964ad1f52f77b72fe75c11f4d349c39aa33ac6cf7e19f89e233e69ef0000fde2a66deaf958794710c083906573f0bf9a47c95e0da2883c652453ad5b7f154e416d7ea49f6b8042b27ea560c3342aa634ecb9f8497ff02a3af66cd6685541cd51870dc5db7c66d4d400ef6ca00e1010abe79280b3a38314114d7c3f182d09d289bb6e20c2b6c930d70cb1d14ac40daa7894335b674b78215d188657530b79f5ad61d2c894708026dd9b27586d2fefee49c9062cb79b34e7e4de10f32dc22c445b4521371e48ff023315acab4efe1fe77887a42fe3b4ebdba9fa441ee2850b7e115998123531475dcfa2e8d449ac25b33ca4dc1b883b0fe806b3e8180a5bca80ce1c0ea793cfa366e150d5c58eb3a1eb1a67587782581696d4815575b9f7dfd758d4cb95b49de7d9d2e259c4dd3a661860ab8571575eb1d9ba20f847911db8f799869b3ea8d326d95a858a7e092a273c09f230c83b7823c8402db3e1ae4e718020974be51206a0458d8c5617c5c908e24927ee7767f8f1065eaf5375715839ca3618bb4078eec6dfc9519b756fdb99f88f5ccd"}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000002580)=@arm64={0x5, 0x2, 0x9, '\x00', 0x9}) r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000025c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r5, &(0x7f0000002600)='-1\x00', 0x3) write(r2, &(0x7f0000002640)="f0531107905af141196da3f5b8cf2279d8b96c933e18737deb9578da42366659c0f8b1a1b4675b90d83a239a3d2541b13a8d41ead11e84141e3161a1f5e4cbe94c96e73b3abc982cf79100de934f1cf39aebb80e3171c7746fc27604f00f58d85a190dce0558f4b4fb1a5f204b3563a5a43763926d6b79339475a8807cc01f00c716822213851851ff7b7504cc231f19d89fe7cb24b876d254c426f8b23053af9d3ea8b5f7110c245a5e1b642bff3f68cbf54518c6c6ea88b612e8d0e04002c6e13fb8e96217d412ff76c8e3002b2b031cfff6f58429da660e016de5fe50784cfb29b4", 0xe3) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000002740)={0x2, 0x9c}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000027c0), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x1c, r7, 0x400, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4840) r8 = fspick(r2, &(0x7f00000028c0)='./file0\x00', 0x1) ioctl$FAT_IOCTL_GET_VOLUME_ID(r8, 0x80047213, &(0x7f0000002900)) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002b00)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c40)={0x18, 0x11, &(0x7f0000002940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf640, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x0, 0x5, 0x4, 0x3, 0x100, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002a00)='syzkaller\x00', 0x181, 0x8e, &(0x7f0000002a40)=""/142, 0x40f00, 0x22, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000002b40)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000002b80)={0x2, 0x8, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002bc0)=[r2], &(0x7f0000002c00)=[{0x3, 0x2, 0x4, 0x5}, {0x4, 0x2, 0x7, 0xc}], 0x10, 0x8, @void, @value}, 0x94) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000002e00)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x159e1b1348cea9b9}, 0x4040050) 1.019874134s ago: executing program 7 (id=4251): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224"], 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x7530}, 0x10) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d52a99295b2f"}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x1) syz_usb_disconnect(r0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x3) close_range(r4, 0xffffffffffffffff, 0x0) 768.924297ms ago: executing program 6 (id=4255): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40101, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x9}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000200)={0x1, 0xeb}, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 720.051362ms ago: executing program 6 (id=4256): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r2, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}}, 0x0) (async, rerun: 64) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64) ioctl$KDSETMODE(r5, 0x4b45, 0x4) (async, rerun: 32) r6 = fcntl$dupfd(r0, 0x0, r0) (async, rerun: 32) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) (async) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000a12c5d"]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x10010, r5, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) (async, rerun: 64) r8 = userfaultfd(0x80000) (rerun: 64) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000100)) (async) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async, rerun: 64) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0xb8b, 0x5, "2782ee08653337c9a40575e5cc66bac496560a", 0x3, 0x8000}) (async) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x18, r10, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) (async) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000e0c000/0x2000)=nil, 0x2000}}) (async, rerun: 64) r11 = gettid() (rerun: 64) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r12 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) preadv(r12, &(0x7f0000000000)=[{&(0x7f0000001180)=""/4100, 0x1004}], 0x1, 0x0, 0x0) 719.7455ms ago: executing program 4 (id=4008): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="18008fb2295607010000ef00001f0000037c000004002080c48d1f15551e1e3081ea29e7c9cd91f1a3f3b2f9caa97e97e1d1724af139e7189b8a09d26ed5cb8bbf23853a7295af0c5ed01c07"], 0x18}}, 0x0) r2 = memfd_secret(0x0) timerfd_gettime(r2, &(0x7f0000000040)) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x94}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3e}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x78}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9847}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x40040) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e3000000000000000000000001400010067726530000000000000000000000400080001"], 0x4b0}, 0x1, 0x0, 0x0, 0x44}, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000680)={0x3, &(0x7f0000000640)=[{0x8, 0x3, 0x2, 0xf74}, {0xa, 0x8, 0x6, 0x3}, {0x7, 0xf7, 0xd8, 0x4}]}) syz_io_uring_setup(0x6b20, &(0x7f0000000540)={0x0, 0xf546, 0x20, 0x3, 0x1b3}, &(0x7f0000000400), &(0x7f00000005c0)) 669.930285ms ago: executing program 6 (id=4257): mknod(&(0x7f0000000080)='./bus\x00', 0x100, 0xfbfffffe) (async) mount(&(0x7f0000000140)=@md0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000)='binfmt_misc\x00', 0x400080, &(0x7f00000001c0)='discard') (async) r0 = syz_socket_connect_nvme_tcp() (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x3}, 'syz0\x00', 0xe}) (async) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000000)={0x39, {0x0, 0x0, 0x0, 0x9, 0x0, 0xfdffffdc}}) (async) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) (async) ioctl$UI_DEV_CREATE(r1, 0x5501) (async, rerun: 64) recvmsg$inet_nvme(r0, &(0x7f0000000180)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000280)=""/127, 0x7f}], 0x1, &(0x7f0000000300)=""/255, 0xff}, 0x2000) (async, rerun: 64) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0xfffffffc}], 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getitimer(0x1, &(0x7f0000000040)) 160.144489ms ago: executing program 6 (id=4258): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x850) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="040100001a0001000000000000000011fc010000000000000000000000000000fc000000000000ff007195db315e7500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003c000000fe88000000000000000000006000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200250000000000000014000e"], 0x104}}, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0xe) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 159.675038ms ago: executing program 2 (id=4259): syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='0\x00', 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000001040), 0x8) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000540)={0x1, 0x9, "1bdd8f", 0xff, 0x6}) getsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, &(0x7f0000001000)) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000500)={0x0, 'virt_wifi0\x00', {0x3}}) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x938, 0x2000) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000440)={0x0, 0x0, {0xd3, 0xfffffffe, 0x1005, 0x7, 0x4, 0x34008db424a21b6d}}) madvise(&(0x7f0000569000/0x2000)=nil, 0x2000, 0x0) r3 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x12000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x0, 0x9, 0xff, 0x9, 0x3d, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x0, 0x40, 0x7}}) sendmsg$nl_route_sched_retired(r6, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=@newqdisc={0xcc, 0x24, 0x501, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0x9}, {0x7, 0x7}, {0xd, 0xe}}, [@q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb547}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfffc}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7fff}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x21}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000ed000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r9, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0xb}) r10 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x0) fstat(r10, &(0x7f0000000140)) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x11, r6, 0xaf2a1000) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000580)={0xc}) 159.237147ms ago: executing program 6 (id=4260): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000040)="d3ac9d7e0000000f216ac74424008000c0fec7442402f9ffffffc7442406000000000f01142466b85a008ee80f35f3f32e0f07b8882800000f23c80f21f8350400b0000f23f866baf80cb88c6a7c83ef66bafc0cb84d00c0feefb97b0b00000f323ed3db", 0x64}], 0x1, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000020000000f10"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0xf0f008, 0x2400}) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f00000003c0)) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x0, {}, 0x1}, 0x18) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{}]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @loopback}}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000840), r5) unshare(0x8000000) semget$private(0x0, 0x3, 0x0) semop(0x0, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1) semop(0x0, &(0x7f0000000100)=[{0x2, 0xd5db}], 0x1) unshare(0x8040080) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000040)={@loopback, @private, 0x0}, &(0x7f0000000100)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl1\x00', r8, 0x2f, 0xd0, 0xf7, 0x7, 0x1, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd1, 0x8, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r7, 0x0, 0x0, 0x3, 0xfffffffa, 0x0, @mcast2, @mcast1, 0x0, 0x20, 0x200, 0x2}}) 0s ago: executing program 6 (id=4261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078005001500120000000800084000000090050005000a000000050001000600000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b"], 0x0) writev(r2, &(0x7f0000000000), 0x0) syz_usb_connect(0x3, 0xb2f, &(0x7f00000005c0)={{0x12, 0x1, 0x250, 0x53, 0x26, 0x6d, 0x10, 0xccd, 0x4f, 0x2884, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1d, 0x3, 0x0, 0xb, 0x10, 0x1, [{{0x9, 0x4, 0x50, 0x2, 0xe, 0xfe, 0xcb, 0xee, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x6}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x204, 0x2, 0x77, 0x7, 0x3, 0x10}]}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "136186"}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x401, 0x4, 0xbc}, {0x6, 0x24, 0x1a, 0x5, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @obex={0x5, 0x24, 0x15, 0x5}, @mdlm_detail={0x47, 0x24, 0x13, 0xd, "d68793767f107373ae72c4a7672b329642d55fe0b4b1850ea0916f26b7f92020bb3d35ba350b6a457ae93a42d99834837c92bc6d2e82fe4497a8bb1d8d4784d8acb469"}, @mdlm_detail={0x45, 0x24, 0x13, 0x6, "978b0b57ea990c2bb3ec76576ef50a4c663d05fea31ba0f664d64032dd7b1d9c6f2bbeb722a096b440ef047ef9feda1d79f29b2bd1c5a57dbd281e64f2409d151e"}]}], [{{0x9, 0x5, 0x4, 0x8, 0x20, 0x2, 0x3, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x4}, @generic={0xe5, 0x6, "e4a3191d3117f544be9652cb726ba5fc85f53af459fd19d74dd866cc37b8a99954c320f856868973ffb11f4bd112a88dcbc2e456fd421f82a71e5184f9db25c01ef6ae033191893d7009c12f7d325fe5ae633684923836a414f138ae058b248f2c7959dd206854f2a5b23462cb0a3359d6bf4f929a63d714302f99e986bcb2c6d5b9a5fa6b59617cb4f20693b6c465a8350d3c127bae248e8818bde138f678d00cd85a3e46e77de0b8cedb3bfa0912d3ea78babc376d79d846890caf98a3dc2945c42ab13cbe0f8d989418784f414a941e9e73f910f23b851ae0fe88af29df7b99f80c"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x9, 0x7, 0x3}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x99, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xf0aa}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x1f, 0x9, 0x9b, [@generic={0x79, 0xb, "d909a71a9093e6a5b4fef94c7fd4323a4d8e8df9b42ff3e379b81a486e010ef06e10c484254c4aeb6390f4d98374a7623156997cde8e67617aeb40822474d194b1abcf9a537d7c7ebda0b2928c22973cfbdd654964280e12e1373bf2f76c8b814a3d01f2f42a338f27ad74f143d8bf5230c44e8830d85f"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x3}]}}, {{0x9, 0x5, 0xe, 0x8, 0x40, 0x4, 0x6, 0x9, [@generic={0xf9, 0x30, "1e20a4af789be1aa13082444ce8d28aac01909909e2e0bd960e976533c111ac986bf516bdb2e082e653349bbe4bb67ffa775d76a7bcfbaaf8f82071735738c6abb2a289740b4356168a7fd8934a1f384147eac5b851b5e9cb16c6b5f787bf46cec37be5cd981ab99e8b6a47b12bf8d19dbe0a857f76656210aa01ac646a34e83b604720ea1d1e201c010bae2d72cb3170dd0ba8e36f9051bc6b3b64f75a19fad5e107e1dd20b61e4da55e12802f9392bdfb54133ebc830368974a9e3f06ef355886cbe58a346ea113eb5ac080b264d00f3deba48d7c95708eeeb194a0b3bf7ad194bd2ecf2403b71462cd405f96c3ffb2f7de683a79ec2"}, @generic={0x1e, 0xa, "8da36fe46aa65cfdb81c71759b5234937599d8dddb1cf17428341fb7"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x2, 0x2, 0x1, [@generic={0x2d, 0x7, "e5c43701f7b3687d125b70e9037266c2a4b3760c1706cc84470e4c20e83d4accf9bcc075d9642dd6e8667e"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x50, 0x6, 0x0, [@generic={0x44, 0xa, "dd5c665fe02fbd3775e51e92ded70ec1df8277e3dc4087e3ee081db44d2810924dfeebbd4d89d10a84ad5dc5bee4fdfcb996e0dfdfdeae8eb2c0fa6a841802a39820"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x20, 0x5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xff, 0x0, 0x19, [@generic={0x59, 0x1, "9b9d6edaabd66212e77e025972688f7d68239d474dce1ff4b0c658f96e40edc00a5c46ef83a9050b02e2e4bdae695c5aa9e60c6ff332944bb23b1713f9cfb4668f4ca71c73489911aa0624a4bb89822fd4942cbcb54520"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x10, 0x2, 0x80, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x159}]}}, {{0x9, 0x5, 0x0, 0x3, 0x8, 0x6, 0x81, 0x9, [@generic={0xcb, 0x21, "21b987890e416ad8f40ce5aa8c3047467c63600fbb47afbbbf8835a6f409e1040b9ede4946e6a417db414f28d7a8a615ea3a31515ee1707d091e120a8dd168376df095fb37c9470169a7225e60724bec26051afe6892a2c973fa031b4140ffbf741a759b8d950a240a2c334e1d4c242634af627e8edd7d5b01588f249876fd9fb27144797ce46d24a818db76ea417d480eb8c3a8d69c55d864f3f29ad057c16780ec51855c3ff332bc8c8719a497c9c6779a400ebe15a56e6d0997d2379451ed7ee0c96ac4118fd46c"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x2}]}}, {{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x0, 0x3, 0x9}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0x7, 0x5, 0x3}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x9, 0x6, 0x0, [@generic={0xb0, 0x1, "4dbe91020113ab86b65f7d82e3f92386958b3bb1a60bbe3809d12301d394487182a72288b6db3baa83d876bd0dbbef6dd9659133f9f37327a474aee090d6ff16e2dfd5ec5b71093037e537076d13203e9628346decdcfc11a03a0a261c1fbf590ea9946c0263065633f92a0cf33af7dd610c6763e92c8c15cb20ea03cf8b263842b5bad8b7c7e75aa9e6ec21b62acf6dd6c3f0022e4f7ca47c6a05238ecf227eae0fb1b986b18fea43656a01c58b"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x1646}]}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0x7, 0x5, 0xd}}]}}, {{0x9, 0x4, 0x7c, 0x5, 0x6, 0xec, 0xaf, 0x42, 0x72, [], [{{0x9, 0x5, 0x1, 0x10, 0x40, 0xff, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8}]}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0x2, 0x7, 0xb, [@generic={0x39, 0xe, "df7a2dd9419e277a333f375a22a73d4a92cd5f27e938a654098eafc288cd08adafad4262c5ca4d6ec69989441ce78e40b6813651b2497a"}, @uac_iso={0x7, 0x25, 0x1, 0x102, 0x1a, 0xd}]}}, {{0x9, 0x5, 0x4, 0x1, 0x10, 0x7f, 0x5, 0x83, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x81}, @generic={0x58, 0x2, "89353d9cad65acf90fa2370fa67d9192e99d4bf7241c1ba39b3b8342f90ba939812abc53b635de12800953d68009bd00dc750e705a7b56a5724967d1b0a23e546e67cc173dbb6c284ad98cd7e4657366b138e54de293"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0xe, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xfb, 0x3}]}}, {{0x9, 0x5, 0x2, 0xc, 0x200, 0x6, 0x1, 0xb4}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0xd0, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0x6}]}}]}}, {{0x9, 0x4, 0xab, 0x9, 0x10, 0x8d, 0xb5, 0xe0, 0x1, [@uac_as={[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1000, 0x1, 0x38, "10720c"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x9, 0x1001}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "119a58c5dc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0x9, 0x7}, [@mdlm={0x15}, @ncm={0x6, 0x24, 0x1a, 0x2, 0x4}, @obex={0x5, 0x24, 0x15, 0x80}]}], [{{0x9, 0x5, 0x80, 0x1, 0x10, 0x4, 0xf, 0x80}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xa, 0xb9, 0x0, [@generic={0xb, 0xb, "ea6ad3ba1353c6e9fa"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x200, 0xff, 0x4, 0xaf, [@generic={0xeb, 0x23, "f5173a41a94ec5689358742698d19d68208b46177dc3f966e7efa564862ee4cae7900307dc8f720c7a073d2a6b3b103dab8a445d62829b496a0733c09dec1885900dda1c4803c63bfb2332d738316d65e7c16a2590e592c292badb05b93875ca80d860fd654bd1109aef94c758de6a9b0b72b3298f2dcfacfdab371e782b90771d92269fc14b8b6d7fbac46dca14a07362844cff77dc08452318f79ecf930c736ea0105762fd402ce3d4aaaff2900c79e158fed400886fc967c0a8c6dd21cbb1fbcdba63f37aae83ccaebc1a4a95ee49e32882ba5c19cd44a3c68ec38c645b587ab6829c8e15bc7b65"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x400, 0x7, 0x8, 0x4, [@generic={0x60, 0x23, "88e979707536aeed715ee25032a343e32e28ac0a0db4163b1f4333a173d90afd3ce97978c4a9f773cb1d36d0ea1e21a2e7a64709fdc1133142bd78d29099c4e77101fb4aa90db54af982172ea615d53a6489df398cf9f149d35842fb5d68"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x22, 0x80, 0x2e, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xc9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x9}]}}, {{0x9, 0x5, 0x9, 0x1a, 0x3ff, 0x1, 0x0, 0x8}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x2, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x7, 0xe, 0xfff8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xff}]}}, {{0x9, 0x5, 0x6, 0x2, 0x200, 0x5, 0x7c, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x10, 0x100}, @generic={0x11, 0x3, "19368b525b7ab38cdb8c553ee772a3"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x200, 0x2, 0xff, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x6}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x6, 0x1, 0xc5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x4}, @generic={0x58, 0x24, "1e7daee33efd67b2f6c6f0db9b59b9dbcbb0b956c3b60c586e263fa1e1eaf02f25534877d98e41bbc22a5f21bfd3f65b611d9b2a31c1aacd7aa786f669f78eff31f9da33d9cfcd5f7013a8cef387cc8c91db71c9083f"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x4, 0x81, 0x81}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0xce, 0x0, 0x8}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x7, 0x23, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xb3, 0x1}]}}, {{0x9, 0x5, 0x3, 0x3, 0x20, 0x1, 0x4f, 0xb, [@generic={0x5f, 0x23, "41f45a86e0a481d9cc3bf690208422a65e9f72b5ad82d2b6709b097d825f93135e07c527793f1b1916583b09ba5c82a6d8f556611f6fd940e7cbe5616cb4244abbb0eec1d6b17f73abeadc2133f38544ac70a1a184ad0b5ef6e852a176"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x9}]}}, {{0x9, 0x5, 0xe, 0xc, 0x3ff, 0x4, 0x4, 0x0, [@generic={0x73, 0x2, "ffbcefd0683a850c44a97c6ff0e9f85f6cba1703d53918551df86cdf6c92e7a8ecacae2e0201c6cfa4a1084c0dc14042e16eaf666ee9a2d147e56ca63f81d6c705cce407c542a6e769bd9c6af47ab87f29be55df87d9ed91eed358a84f7222014d3c380551650cd30cdf832b61a2c43df7"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x55, 0x8}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x4, 0x2, 0x9e, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xfff}]}}]}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x11, 0x4, 0x3, 0x8, 0x8a2726840572693, 0x80}, 0x17, &(0x7f00000000c0)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x50, 0x3, 0x6, 0x344f, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x9, 0xdea}]}, 0x2, [{0x37, &(0x7f0000000100)=@string={0x37, 0x3, "17be1a9d2a70764951f5f4d3d848f92bd04c767f579a45f7d713c7728ba5d9aca2bc915bfac4dad947711a4a00d7ca57cf38483783"}}, {0xfb, &(0x7f0000000400)=@string={0xfb, 0x3, "bf47ce4044418d8b3358b1b3127bd245f456f8a9ef4c0f5e29fb84244d9aa906a2cf3b83c6e47e272a5e1cf0fa17aaace587fc05ad17a65a720e51d6689f15a77ac99275f7f85d0ad9f9840d70809bd257791c0f196a31a20f259bd144b52f20c754567aa99b2a70df2dbaa7302590a84390ad87b83a02db76aacb68d0f25b93a0c811ec1189c4fa22515365698d5287fc27961eeb9896d08613b8c29ddfb266983566b122a7828f55a697c78dd907cbda00a3f6551d49eafe4b963220a269bed5ac07c547cd5b5e148ff9698775cbadd182119489eb9686ae039589dd306054cb2deb2d66f197b0b90966ff86f1a50616c9385a497ab4efca"}}]}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x4}]}}]}, 0x3c}}, 0x0) 0s ago: executing program 2 (id=4262): socket$inet_smc(0x2b, 0x1, 0x0) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000007dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4080) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_eee={0x45, 0x8, 0xe, 0x6, 0x57, 0x1000, 0x5, 0x7, [0x8000, 0x1]}}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x5d80, "300b7832ceefd131b8e6498c250000ad91e74392c700bd18cf501922de974a27"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x5d80, "300b7832ceefd131b8e6498c250000ad91e74392c700bd18cf501922de974a27"}) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000180)=0x800) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_require}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) (async) r4 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x111, 0x9}}, 0x20) chdir(&(0x7f0000000140)='./bus\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x2, @raw_data="834ee5df7b444e0ad7b5a58e1ffdeaa3ff33c18e0934f352ba2be5c835bd8abb8da08303acd226a19a2568a685a12c6a9d2a74fe25a3c96ef56d303f2c1f3853acc30e623cb8742fb8a5d1d474c1891960c486e7f3acea2bfcb137f60622ea9ca5f5fed49db858d8b9e81a40b159903eb321e503a966a3141b4c764c0b7bcb4726a0d6d7e857d5b90d10cfbcce80f517a4c9bf002589591e78924de24f0dd391217a6397a2710255d78556485bf7125764333918d685c6b5d0583422f29702fb0a0604ea7eab7f06"}) signalfd(r1, &(0x7f0000000140)={[0x10000]}, 0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x101082, 0x0) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x101082, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x900, 0x12) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x200200) (async) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x200200) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r7, &(0x7f00000001c0)='\\', 0x1) (async) write$dsp(r7, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) kernel console output (not intermixed with test programs): attribute type 25 has an invalid length. [ 193.994115][T16648] netlink: 'syz.4.3684': attribute type 15 has an invalid length. [ 194.173027][T16671] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í(ááí«QhQI¸¥ÿNdÒ%óCT‡…53ý…5¬h« [ 194.285256][T16678] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=16678 comm=syz.2.3692 [ 194.323097][T16684] netlink: 'syz.2.3694': attribute type 25 has an invalid length. [ 194.345854][T16686] netlink: 'syz.4.3695': attribute type 7 has an invalid length. [ 194.347892][T16686] netlink: 'syz.4.3695': attribute type 8 has an invalid length. [ 194.353029][T16688] x_tables: duplicate underflow at hook 1 [ 194.353081][T16686] gretap0: entered promiscuous mode [ 194.359608][T16686] batadv_slave_1: entered promiscuous mode [ 194.362027][T16686] gretap0: left promiscuous mode [ 194.365018][T16686] batadv_slave_1: left promiscuous mode [ 194.473751][T16691] tls_set_device_offload: netdev not found [ 194.522648][T16695] netlink: 'syz.4.3698': attribute type 1 has an invalid length. [ 194.727310][T16695] netlink: 'syz.4.3698': attribute type 1 has an invalid length. [ 194.730024][T16695] netlink: 'syz.4.3698': attribute type 2 has an invalid length. [ 194.732630][T16695] __nla_validate_parse: 9 callbacks suppressed [ 194.732641][T16695] netlink: 16074 bytes leftover after parsing attributes in process `syz.4.3698'. [ 194.898845][T16711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3704'. [ 194.901554][T16711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3704'. [ 194.904217][T16711] netlink: 'syz.3.3704': attribute type 25 has an invalid length. [ 194.983657][ T5969] net_ratelimit: 10 callbacks suppressed [ 194.983669][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.184953][T16727] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 195.227481][T16729] FAULT_INJECTION: forcing a failure. [ 195.227481][T16729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.230869][T16729] CPU: 1 UID: 0 PID: 16729 Comm: syz.2.3712 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 195.233682][T16729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 195.236462][T16729] Call Trace: [ 195.237358][T16729] [ 195.238148][T16729] dump_stack_lvl+0x16c/0x1f0 [ 195.239413][T16729] should_fail_ex+0x497/0x5b0 [ 195.240667][T16729] _copy_from_user+0x2e/0xd0 [ 195.241925][T16729] copy_msghdr_from_user+0x99/0x160 [ 195.243305][T16729] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 195.244838][T16729] ___sys_sendmsg+0xff/0x1e0 [ 195.246068][T16729] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.247461][T16729] ? __pfx_lock_release+0x10/0x10 [ 195.248779][T16729] ? trace_lock_acquire+0x14e/0x1f0 [ 195.250158][T16729] ? __fget_files+0x206/0x3a0 [ 195.251407][T16729] __sys_sendmsg+0x16e/0x220 [ 195.252685][T16729] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.254027][T16729] do_syscall_64+0xcd/0x250 [ 195.255230][T16729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.257173][T16729] RIP: 0033:0x7efee777ff19 [ 195.258378][T16729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.263308][T16729] RSP: 002b:00007efee8577058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.265464][T16729] RAX: ffffffffffffffda RBX: 00007efee7945fa0 RCX: 00007efee777ff19 [ 195.267518][T16729] RDX: 000000000000c000 RSI: 0000000020000000 RDI: 0000000000000003 [ 195.269598][T16729] RBP: 00007efee85770a0 R08: 0000000000000000 R09: 0000000000000000 [ 195.271615][T16729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.273644][T16729] R13: 0000000000000000 R14: 00007efee7945fa0 R15: 00007ffc86ff7ba8 [ 195.275653][T16729] [ 195.306480][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3717'. [ 195.322555][T16741] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3716'. [ 195.325648][T16741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3716'. [ 195.330896][T16741] gretap0: entered promiscuous mode [ 195.332954][T16741] batadv_slave_1: entered promiscuous mode [ 195.345390][T16741] gretap0: left promiscuous mode [ 195.348687][T16741] batadv_slave_1: left promiscuous mode [ 195.370857][T16745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3719'. [ 195.424007][T16752] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 195.438398][T16754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3723'. [ 195.440823][T16754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3723'. [ 195.450562][T16756] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3724'. [ 195.485782][T16762] FAULT_INJECTION: forcing a failure. [ 195.485782][T16762] name failslab, interval 1, probability 0, space 0, times 0 [ 195.488994][T16762] CPU: 0 UID: 0 PID: 16762 Comm: syz.2.3727 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 195.491723][T16762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 195.494569][T16762] Call Trace: [ 195.495456][T16762] [ 195.496227][T16762] dump_stack_lvl+0x16c/0x1f0 [ 195.497452][T16762] should_fail_ex+0x497/0x5b0 [ 195.498662][T16762] ? fs_reclaim_acquire+0xae/0x150 [ 195.499996][T16762] should_failslab+0xc2/0x120 [ 195.501206][T16762] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 195.502711][T16762] ? __alloc_skb+0x2b1/0x380 [ 195.503912][T16762] __alloc_skb+0x2b1/0x380 [ 195.505049][T16762] ? __pfx___alloc_skb+0x10/0x10 [ 195.506338][T16762] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 195.507845][T16762] netlink_alloc_large_skb+0x69/0x130 [ 195.509230][T16762] netlink_sendmsg+0x689/0xd70 [ 195.510505][T16762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.511891][T16762] ____sys_sendmsg+0xaaf/0xc90 [ 195.513618][T16762] ? copy_msghdr_from_user+0x10b/0x160 [ 195.513631][T16762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.513650][T16762] ___sys_sendmsg+0x135/0x1e0 [ 195.513661][T16762] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.513676][T16762] ? __pfx_lock_release+0x10/0x10 [ 195.513688][T16762] ? trace_lock_acquire+0x14e/0x1f0 [ 195.513706][T16762] ? __fget_files+0x206/0x3a0 [ 195.513721][T16762] __sys_sendmsg+0x16e/0x220 [ 195.513731][T16762] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.513749][T16762] do_syscall_64+0xcd/0x250 [ 195.513763][T16762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.513777][T16762] RIP: 0033:0x7efee777ff19 [ 195.513787][T16762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.513797][T16762] RSP: 002b:00007efee8577058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.513809][T16762] RAX: ffffffffffffffda RBX: 00007efee7945fa0 RCX: 00007efee777ff19 [ 195.513816][T16762] RDX: 000000000000c000 RSI: 0000000020000000 RDI: 0000000000000003 [ 195.513823][T16762] RBP: 00007efee85770a0 R08: 0000000000000000 R09: 0000000000000000 [ 195.513829][T16762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.513836][T16762] R13: 0000000000000000 R14: 00007efee7945fa0 R15: 00007ffc86ff7ba8 [ 195.513848][T16762] [ 195.643074][ T39] kauditd_printk_skb: 31 callbacks suppressed [ 195.643091][ T39] audit: type=1400 audit(1733259939.845:1659): avc: denied { ioctl } for pid=16773 comm="syz.4.3733" path="socket:[69265]" dev="sockfs" ino=69265 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 195.714441][T16784] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 195.741925][T16786] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.744002][T16786] IPv6: NLM_F_CREATE should be set when creating new route [ 195.749164][ T39] audit: type=1400 audit(1733259939.955:1660): avc: denied { write } for pid=16785 comm="syz.4.3736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 195.757421][T16786] tun0: tun_chr_ioctl cmd 1074025675 [ 195.758931][T16786] tun0: persist enabled [ 195.760852][T16786] 9p: Unknown Cache mode or invalid value loose./file1 [ 195.795901][T16786] overlay: ./bus is not a directory [ 195.863722][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.866114][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.907779][T16795] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 196.000108][ T39] audit: type=1400 audit(1733259940.205:1661): avc: denied { remount } for pid=16798 comm="syz.4.3742" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 196.005647][T16799] binder: Unknown parameter 'statsglocal' [ 196.015651][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.153660][T16807] FAULT_INJECTION: forcing a failure. [ 196.153660][T16807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.158226][T16807] CPU: 0 UID: 0 PID: 16807 Comm: syz.4.3745 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 196.161419][T16807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 196.164196][T16807] Call Trace: [ 196.165101][T16807] [ 196.165841][T16807] dump_stack_lvl+0x16c/0x1f0 [ 196.167199][T16807] should_fail_ex+0x497/0x5b0 [ 196.168510][T16807] _copy_from_iter+0x2a1/0x1560 [ 196.169860][T16807] ? trace_lock_acquire+0x14e/0x1f0 [ 196.171338][T16807] ? __alloc_skb+0x1fe/0x380 [ 196.172607][T16807] ? __pfx__copy_from_iter+0x10/0x10 [ 196.174080][T16807] ? __virt_addr_valid+0x1a4/0x590 [ 196.175472][T16807] ? __virt_addr_valid+0x5e/0x590 [ 196.176833][T16807] ? __phys_addr_symbol+0x30/0x80 [ 196.178144][T16807] ? __check_object_size+0x488/0x710 [ 196.179676][T16807] netlink_sendmsg+0x813/0xd70 [ 196.180966][T16807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.182359][T16807] ____sys_sendmsg+0xaaf/0xc90 [ 196.183826][T16807] ? copy_msghdr_from_user+0x10b/0x160 [ 196.185521][T16807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.186928][T16807] ___sys_sendmsg+0x135/0x1e0 [ 196.188118][T16807] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.189629][T16807] ? __pfx_lock_release+0x10/0x10 [ 196.191020][T16807] ? trace_lock_acquire+0x14e/0x1f0 [ 196.192460][T16807] ? __fget_files+0x206/0x3a0 [ 196.193798][T16807] __sys_sendmsg+0x16e/0x220 [ 196.195071][T16807] ? __pfx___sys_sendmsg+0x10/0x10 [ 196.196439][T16807] do_syscall_64+0xcd/0x250 [ 196.197651][T16807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.199303][T16807] RIP: 0033:0x7fecf2d7ff19 [ 196.201051][T16807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.201669][ T39] audit: type=1400 audit(1733259940.405:1662): avc: denied { unmount } for pid=14429 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 196.206937][T16807] RSP: 002b:00007fecf3b4b058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.206961][T16807] RAX: ffffffffffffffda RBX: 00007fecf2f45fa0 RCX: 00007fecf2d7ff19 [ 196.206973][T16807] RDX: 000000000000c000 RSI: 0000000020000000 RDI: 0000000000000003 [ 196.206985][T16807] RBP: 00007fecf3b4b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 196.206997][T16807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.207008][T16807] R13: 0000000000000000 R14: 00007fecf2f45fa0 R15: 00007fffe4462fc8 [ 196.207032][T16807] [ 196.273021][T16809] gretap0: entered promiscuous mode [ 196.275147][T16809] batadv_slave_1: entered promiscuous mode [ 196.277356][T16809] gretap0: left promiscuous mode [ 196.279060][T16809] batadv_slave_1: left promiscuous mode [ 196.462319][T16832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.478501][T16841] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 196.547214][T16838] xt_bpf: check failed: parse error [ 196.649616][T16866] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 196.651343][T16866] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 196.654371][T16866] vhci_hcd vhci_hcd.0: Device attached [ 196.658235][T16866] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 196.659981][T16866] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 196.663601][T16866] vhci_hcd vhci_hcd.0: Device attached [ 196.665857][T16866] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8) [ 196.667512][T16866] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 196.669507][T16866] vhci_hcd vhci_hcd.0: Device attached [ 196.671967][T16866] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(10) [ 196.673694][T16866] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 196.675858][T16866] vhci_hcd vhci_hcd.0: Device attached [ 196.678366][T16866] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(12) [ 196.680095][T16866] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 196.682123][T16866] vhci_hcd vhci_hcd.0: Device attached [ 196.702898][T16866] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(14) [ 196.705197][T16866] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 196.730178][T16866] vhci_hcd vhci_hcd.0: Device attached [ 196.740680][ T39] audit: type=1400 audit(1733259940.945:1663): avc: denied { write } for pid=16889 comm="syz.2.3772" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 196.753823][T16866] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(16) [ 196.755936][T16866] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 196.756033][ T39] audit: type=1400 audit(1733259940.955:1664): avc: denied { ioctl } for pid=16889 comm="syz.2.3772" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 196.757953][T16866] vhci_hcd vhci_hcd.0: Device attached [ 196.759925][T16866] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(18) [ 196.768402][T16866] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 196.776698][T16866] vhci_hcd vhci_hcd.0: Device attached [ 196.780101][T16866] vhci_hcd vhci_hcd.0: port 0 already used [ 196.787665][T16882] vhci_hcd: connection closed [ 196.787752][T16876] vhci_hcd: connection closed [ 196.787864][T16869] vhci_hcd: connection closed [ 196.787950][T16888] vhci_hcd: connection closed [ 196.787950][T16873] vhci_hcd: connection closed [ 196.788425][T16880] vhci_hcd: connection closed [ 196.788494][T16878] vhci_hcd: connection closed [ 196.789739][T16894] vhci_hcd: connection closed [ 196.796714][T10629] vhci_hcd: stop threads [ 196.799498][T10629] vhci_hcd: release socket [ 196.800675][T10629] vhci_hcd: disconnect device [ 196.802034][T10629] vhci_hcd: stop threads [ 196.803125][T10629] vhci_hcd: release socket [ 196.805603][T10629] vhci_hcd: disconnect device [ 196.813346][T10629] vhci_hcd: stop threads [ 196.814718][T10629] vhci_hcd: release socket [ 196.816162][T10629] vhci_hcd: disconnect device [ 196.817666][T10629] vhci_hcd: stop threads [ 196.819026][T10629] vhci_hcd: release socket [ 196.824932][T10629] vhci_hcd: disconnect device [ 196.827769][T10629] vhci_hcd: stop threads [ 196.829172][T10629] vhci_hcd: release socket [ 196.832231][T10629] vhci_hcd: disconnect device [ 196.839184][T10629] vhci_hcd: stop threads [ 196.840790][T10629] vhci_hcd: release socket [ 196.842990][T10629] vhci_hcd: disconnect device [ 196.848180][T10629] vhci_hcd: stop threads [ 196.849700][T10629] vhci_hcd: release socket [ 196.851287][T10629] vhci_hcd: disconnect device [ 196.854924][T10629] vhci_hcd: stop threads [ 196.856502][T10629] vhci_hcd: release socket [ 196.860753][T10629] vhci_hcd: disconnect device [ 196.870191][T16909] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 196.875644][T16909] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 196.877706][T16909] gretap1: entered promiscuous mode [ 196.879118][T16909] gretap1: entered allmulticast mode [ 196.896265][T16903] cdrom: dropping to single frame dma [ 196.903522][ T5989] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 196.905530][ T5989] usb 43-1: enqueue for inactive port 0 [ 196.973974][ T5989] vhci_hcd: vhci_device speed not set [ 197.044154][T16926] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 197.091557][ T39] audit: type=1400 audit(1733259941.295:1665): avc: denied { setopt } for pid=16927 comm="syz.6.3785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 197.098283][T16933] FAULT_INJECTION: forcing a failure. [ 197.098283][T16933] name failslab, interval 1, probability 0, space 0, times 0 [ 197.101518][T16933] CPU: 2 UID: 0 PID: 16933 Comm: syz.2.3786 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 197.104495][T16933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 197.107690][T16933] Call Trace: [ 197.108709][T16933] [ 197.109622][T16933] dump_stack_lvl+0x16c/0x1f0 [ 197.111066][T16933] should_fail_ex+0x497/0x5b0 [ 197.112500][T16933] ? fs_reclaim_acquire+0xae/0x150 [ 197.114062][T16933] should_failslab+0xc2/0x120 [ 197.115497][T16933] __kmalloc_noprof+0xcb/0x510 [ 197.116719][T16933] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 197.118530][T16933] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 197.119951][T16933] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 197.121517][T16933] ? bpf_lsm_capable+0x9/0x10 [ 197.122788][T16933] ? security_capable+0x7e/0x260 [ 197.124077][T16933] ? ns_capable+0xd7/0x110 [ 197.125213][T16933] genl_rcv_msg+0x565/0x800 [ 197.126445][T16933] ? __pfx_genl_rcv_msg+0x10/0x10 [ 197.127915][T16933] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 197.129307][T16933] netlink_rcv_skb+0x16b/0x440 [ 197.130553][T16933] ? __pfx_genl_rcv_msg+0x10/0x10 [ 197.131862][T16933] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.133278][T16933] ? down_read+0xc9/0x330 [ 197.134413][T16933] ? __pfx_down_read+0x10/0x10 [ 197.135665][T16933] ? netlink_deliver_tap+0x1ae/0xd30 [ 197.137035][T16933] genl_rcv+0x28/0x40 [ 197.138093][T16933] netlink_unicast+0x53c/0x7f0 [ 197.139353][T16933] ? __pfx_netlink_unicast+0x10/0x10 [ 197.140708][T16933] netlink_sendmsg+0x8b8/0xd70 [ 197.141957][T16933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.143444][T16933] ____sys_sendmsg+0xaaf/0xc90 [ 197.145097][T16933] ? copy_msghdr_from_user+0x10b/0x160 [ 197.146960][T16933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.148780][T16933] ___sys_sendmsg+0x135/0x1e0 [ 197.150392][T16933] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.152300][T16933] ? __pfx_lock_release+0x10/0x10 [ 197.154040][T16933] ? trace_lock_acquire+0x14e/0x1f0 [ 197.155805][T16933] ? __fget_files+0x206/0x3a0 [ 197.157356][T16933] __sys_sendmsg+0x16e/0x220 [ 197.158876][T16933] ? __pfx___sys_sendmsg+0x10/0x10 [ 197.160532][T16933] do_syscall_64+0xcd/0x250 [ 197.162008][T16933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.163937][T16933] RIP: 0033:0x7efee777ff19 [ 197.165414][T16933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.171674][T16933] RSP: 002b:00007efee8577058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.174392][T16933] RAX: ffffffffffffffda RBX: 00007efee7945fa0 RCX: 00007efee777ff19 [ 197.176916][T16933] RDX: 000000000000c000 RSI: 0000000020000000 RDI: 0000000000000003 [ 197.179438][T16933] RBP: 00007efee85770a0 R08: 0000000000000000 R09: 0000000000000000 [ 197.181966][T16933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.184567][T16933] R13: 0000000000000000 R14: 00007efee7945fa0 R15: 00007ffc86ff7ba8 [ 197.187180][T16933] [ 197.188335][ C2] vkms_vblank_simulate: vblank timer overrun [ 197.223081][T16937] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 197.244137][ T834] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 197.379797][T16957] validate_nla: 13 callbacks suppressed [ 197.379812][T16957] netlink: 'syz.2.3794': attribute type 25 has an invalid length. [ 197.393443][T16946] could not allocate digest TFM handle blake2s-224 [ 197.403211][ T834] usb 9-1: unable to get BOS descriptor or descriptor too short [ 197.405276][ T834] usb 9-1: no configurations [ 197.411646][ T39] audit: type=1400 audit(1733259941.615:1666): avc: denied { setopt } for pid=16962 comm="syz.3.3796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 197.413476][ T834] usb 9-1: can't read configurations, error -22 [ 197.420524][ T39] audit: type=1400 audit(1733259941.625:1667): avc: denied { getopt } for pid=16962 comm="syz.3.3796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 197.488488][T16969] sctp: [Deprecated]: syz.3.3799 (pid 16969) Use of int in maxseg socket option. [ 197.488488][T16969] Use struct sctp_assoc_value instead [ 197.564385][ T834] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 197.619554][ T39] audit: type=1400 audit(1733259941.825:1668): avc: denied { read } for pid=16978 comm="syz.3.3803" name="usbmon8" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 197.726377][ T834] usb 9-1: unable to get BOS descriptor or descriptor too short [ 197.726410][ T834] usb 9-1: no configurations [ 197.726418][ T834] usb 9-1: can't read configurations, error -22 [ 197.726505][ T834] usb usb9-port1: attempt power cycle [ 197.848600][T16995] FAULT_INJECTION: forcing a failure. [ 197.848600][T16995] name failslab, interval 1, probability 0, space 0, times 0 [ 197.848618][T16995] CPU: 0 UID: 0 PID: 16995 Comm: syz.3.3808 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 197.848634][T16995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 197.848643][T16995] Call Trace: [ 197.848648][T16995] [ 197.848666][T16995] dump_stack_lvl+0x16c/0x1f0 [ 197.848685][T16995] should_fail_ex+0x497/0x5b0 [ 197.848700][T16995] ? fs_reclaim_acquire+0xae/0x150 [ 197.848717][T16995] should_failslab+0xc2/0x120 [ 197.848730][T16995] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 197.848743][T16995] ? ovs_flow_alloc+0x10e/0x210 [ 197.848756][T16995] ovs_flow_alloc+0x10e/0x210 [ 197.848766][T16995] ovs_flow_cmd_new+0x232/0xe30 [ 197.848779][T16995] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 197.848792][T16995] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 197.848803][T16995] ? __kasan_kmalloc+0xaa/0xb0 [ 197.848814][T16995] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 197.848825][T16995] ? genl_family_rcv_msg_doit+0xbf/0x2f0 [ 197.848835][T16995] ? genl_rcv_msg+0x565/0x800 [ 197.848845][T16995] ? netlink_sendmsg+0x8b8/0xd70 [ 197.848862][T16995] ? ____sys_sendmsg+0xaaf/0xc90 [ 197.848888][T16995] ? ___sys_sendmsg+0x135/0x1e0 [ 197.848899][T16995] ? __sys_sendmsg+0x16e/0x220 [ 197.848909][T16995] ? do_syscall_64+0xcd/0x250 [ 197.848941][T16995] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 197.848952][T16995] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 197.848965][T16995] genl_family_rcv_msg_doit+0x202/0x2f0 [ 197.848977][T16995] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 197.848991][T16995] ? bpf_lsm_capable+0x9/0x10 [ 197.849001][T16995] ? security_capable+0x7e/0x260 [ 197.849013][T16995] ? ns_capable+0xd7/0x110 [ 197.849059][T16995] genl_rcv_msg+0x565/0x800 [ 197.849091][T16995] ? __pfx_genl_rcv_msg+0x10/0x10 [ 197.849114][T16995] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 197.849132][T16995] netlink_rcv_skb+0x16b/0x440 [ 197.849146][T16995] ? __pfx_genl_rcv_msg+0x10/0x10 [ 197.849156][T16995] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.849175][T16995] ? down_read+0xc9/0x330 [ 197.849188][T16995] ? __pfx_down_read+0x10/0x10 [ 197.849201][T16995] ? netlink_deliver_tap+0x1ae/0xd30 [ 197.849217][T16995] genl_rcv+0x28/0x40 [ 197.849230][T16995] netlink_unicast+0x53c/0x7f0 [ 197.849250][T16995] ? __pfx_netlink_unicast+0x10/0x10 [ 197.849268][T16995] netlink_sendmsg+0x8b8/0xd70 [ 197.849283][T16995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.849304][T16995] ____sys_sendmsg+0xaaf/0xc90 [ 197.849319][T16995] ? copy_msghdr_from_user+0x10b/0x160 [ 197.849344][T16995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.849363][T16995] ___sys_sendmsg+0x135/0x1e0 [ 197.849374][T16995] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.849389][T16995] ? __pfx_lock_release+0x10/0x10 [ 197.849401][T16995] ? trace_lock_acquire+0x14e/0x1f0 [ 197.849419][T16995] ? __fget_files+0x206/0x3a0 [ 197.849434][T16995] __sys_sendmsg+0x16e/0x220 [ 197.849444][T16995] ? __pfx___sys_sendmsg+0x10/0x10 [ 197.849462][T16995] do_syscall_64+0xcd/0x250 [ 197.849476][T16995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.849490][T16995] RIP: 0033:0x7f85bc57ff19 [ 197.849499][T16995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.849509][T16995] RSP: 002b:00007f85bd380058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.849523][T16995] RAX: ffffffffffffffda RBX: 00007f85bc745fa0 RCX: 00007f85bc57ff19 [ 197.849532][T16995] RDX: 000000000000c000 RSI: 0000000020000000 RDI: 0000000000000003 [ 197.849539][T16995] RBP: 00007f85bd3800a0 R08: 0000000000000000 R09: 0000000000000000 [ 197.849559][T16995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.849566][T16995] R13: 0000000000000000 R14: 00007f85bc745fa0 R15: 00007ffd247672b8 [ 197.849579][T16995] [ 198.008079][T17002] netlink: 'syz.3.3811': attribute type 1 has an invalid length. [ 198.063326][ T834] usb 9-1: new low-speed USB device number 18 using dummy_hcd [ 198.086135][ T834] usb 9-1: unable to get BOS descriptor or descriptor too short [ 198.086182][ T834] usb 9-1: no configurations [ 198.086194][ T834] usb 9-1: can't read configurations, error -22 [ 198.223370][ T834] usb 9-1: new low-speed USB device number 19 using dummy_hcd [ 198.255919][ T834] usb 9-1: unable to get BOS descriptor or descriptor too short [ 198.255953][ T834] usb 9-1: no configurations [ 198.255960][ T834] usb 9-1: can't read configurations, error -22 [ 198.256062][ T834] usb usb9-port1: unable to enumerate USB device [ 198.339284][T17013] netlink: 'syz.2.3814': attribute type 7 has an invalid length. [ 198.342045][T17013] netlink: 'syz.2.3814': attribute type 8 has an invalid length. [ 198.346886][T17013] gretap0: entered promiscuous mode [ 198.349538][T17013] batadv_slave_1: entered promiscuous mode [ 198.352162][T17013] gretap0: left promiscuous mode [ 198.354054][T17013] batadv_slave_1: left promiscuous mode [ 198.445725][T17015] netlink: 'syz.2.3815': attribute type 25 has an invalid length. [ 198.516402][T17018] sg_write: data in/out 43/14 bytes for SCSI command 0x9-- guessing data in; [ 198.516402][T17018] program syz.2.3816 not setting count and/or reply_len properly [ 198.521734][T17022] FAULT_INJECTION: forcing a failure. [ 198.521734][T17022] name failslab, interval 1, probability 0, space 0, times 0 [ 198.523353][T17020] sg_write: data in/out 43/14 bytes for SCSI command 0x9-- guessing data in; [ 198.523353][T17020] program syz.2.3816 not setting count and/or reply_len properly [ 198.525852][T17022] CPU: 2 UID: 0 PID: 17022 Comm: syz.6.3817 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 198.534731][T17022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 198.537869][T17022] Call Trace: [ 198.538771][T17022] [ 198.539764][T17022] dump_stack_lvl+0x16c/0x1f0 [ 198.541551][T17022] should_fail_ex+0x497/0x5b0 [ 198.543307][T17022] ? fs_reclaim_acquire+0xae/0x150 [ 198.545040][T17022] should_failslab+0xc2/0x120 [ 198.546283][T17022] __kmalloc_cache_noprof+0x68/0x410 [ 198.547688][T17022] ? __raw_spin_lock_init+0x3a/0x110 [ 198.549153][T17022] ovs_flow_cmd_new+0x28b/0xe30 [ 198.550436][T17022] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 198.552345][T17022] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 198.553751][T17022] ? __kasan_kmalloc+0xaa/0xb0 [ 198.555233][T17022] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 198.557172][T17022] ? genl_family_rcv_msg_doit+0xbf/0x2f0 [ 198.558767][T17022] ? genl_rcv_msg+0x565/0x800 [ 198.560409][T17022] ? netlink_sendmsg+0x8b8/0xd70 [ 198.562219][T17022] ? ____sys_sendmsg+0xaaf/0xc90 [ 198.564061][T17022] ? ___sys_sendmsg+0x135/0x1e0 [ 198.565540][T17022] ? __sys_sendmsg+0x16e/0x220 [ 198.566798][T17022] ? do_syscall_64+0xcd/0x250 [ 198.568045][T17022] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 198.570283][T17022] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 198.572265][T17022] genl_family_rcv_msg_doit+0x202/0x2f0 [ 198.573847][T17022] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 198.575583][T17022] ? bpf_lsm_capable+0x9/0x10 [ 198.576887][T17022] ? security_capable+0x7e/0x260 [ 198.578208][T17022] ? ns_capable+0xd7/0x110 [ 198.579432][T17022] genl_rcv_msg+0x565/0x800 [ 198.580687][T17022] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.582122][T17022] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 198.583559][T17022] netlink_rcv_skb+0x16b/0x440 [ 198.584804][T17022] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.586122][T17022] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 198.587798][T17022] ? down_read+0xc9/0x330 [ 198.588938][T17022] ? __pfx_down_read+0x10/0x10 [ 198.590599][T17022] ? netlink_deliver_tap+0x1ae/0xd30 [ 198.592483][T17022] genl_rcv+0x28/0x40 [ 198.593926][T17022] netlink_unicast+0x53c/0x7f0 [ 198.595388][T17022] ? __pfx_netlink_unicast+0x10/0x10 [ 198.596687][T17022] netlink_sendmsg+0x8b8/0xd70 [ 198.597933][T17022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.599427][T17022] ____sys_sendmsg+0xaaf/0xc90 [ 198.601176][T17022] ? copy_msghdr_from_user+0x10b/0x160 [ 198.603165][T17022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.605044][T17022] ___sys_sendmsg+0x135/0x1e0 [ 198.606260][T17022] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.607630][T17022] ? __pfx_lock_release+0x10/0x10 [ 198.608933][T17022] ? trace_lock_acquire+0x14e/0x1f0 [ 198.610454][T17022] ? __fget_files+0x206/0x3a0 [ 198.611687][T17022] __sys_sendmsg+0x16e/0x220 [ 198.612889][T17022] ? __pfx___sys_sendmsg+0x10/0x10 [ 198.614293][T17022] do_syscall_64+0xcd/0x250 [ 198.615501][T17022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.617040][T17022] RIP: 0033:0x7f1536f7ff19 [ 198.618379][T17022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.625164][T17022] RSP: 002b:00007f1537ced058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.627723][T17022] RAX: ffffffffffffffda RBX: 00007f1537145fa0 RCX: 00007f1536f7ff19 [ 198.629961][T17022] RDX: 000000000000c000 RSI: 0000000020000000 RDI: 0000000000000003 [ 198.632017][T17022] RBP: 00007f1537ced0a0 R08: 0000000000000000 R09: 0000000000000000 [ 198.634160][T17022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.636226][T17022] R13: 0000000000000000 R14: 00007f1537145fa0 R15: 00007ffe71edeb18 [ 198.638273][T17022] [ 198.639219][ C2] vkms_vblank_simulate: vblank timer overrun [ 198.858741][T17032] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 199.027254][T17041] netlink: 'syz.6.3824': attribute type 19 has an invalid length. [ 199.042346][ T9] IPVS: starting estimator thread 0... [ 199.048520][T17044] netlink: 'syz.2.3825': attribute type 25 has an invalid length. [ 199.133960][T17042] IPVS: using max 18 ests per chain, 43200 per kthread [ 199.146990][T17050] FAULT_INJECTION: forcing a failure. [ 199.146990][T17050] name failslab, interval 1, probability 0, space 0, times 0 [ 199.150362][T17050] CPU: 1 UID: 0 PID: 17050 Comm: syz.2.3827 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 199.153153][T17050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 199.155953][T17050] Call Trace: [ 199.156910][T17050] [ 199.158005][T17050] dump_stack_lvl+0x16c/0x1f0 [ 199.159764][T17050] should_fail_ex+0x497/0x5b0 [ 199.161296][T17050] ? fs_reclaim_acquire+0xae/0x150 [ 199.162787][T17050] should_failslab+0xc2/0x120 [ 199.164026][T17050] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 199.165667][T17050] ? __pfx_ovs_key_from_nlattrs+0x10/0x10 [ 199.167370][T17050] ? __parse_flow_nlattrs+0x414/0x680 [ 199.169302][T17050] ? ovs_nla_get_match+0x57e/0x16a0 [ 199.171145][T17050] kmemdup_noprof+0x29/0x60 [ 199.172394][T17050] ovs_nla_get_match+0x57e/0x16a0 [ 199.173743][T17050] ? genl_rcv+0x28/0x40 [ 199.174878][T17050] ? __pfx_ovs_nla_get_match+0x10/0x10 [ 199.176297][T17050] ? ___sys_sendmsg+0x135/0x1e0 [ 199.178013][T17050] ? __sys_sendmsg+0x16e/0x220 [ 199.179774][T17050] ? do_syscall_64+0xcd/0x250 [ 199.181411][T17050] ? __asan_memset+0x23/0x50 [ 199.182959][T17050] ovs_flow_cmd_new+0x306/0xe30 [ 199.184525][T17050] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 199.186400][T17050] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 199.188161][T17050] ? __kasan_kmalloc+0xaa/0xb0 [ 199.189442][T17050] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 199.191510][T17050] ? genl_family_rcv_msg_doit+0xbf/0x2f0 [ 199.192847][T17050] ? genl_rcv_msg+0x565/0x800 [ 199.194039][T17050] ? netlink_sendmsg+0x8b8/0xd70 [ 199.195355][T17050] ? ____sys_sendmsg+0xaaf/0xc90 [ 199.196656][T17050] ? ___sys_sendmsg+0x135/0x1e0 [ 199.198051][T17050] ? __sys_sendmsg+0x16e/0x220 [ 199.199308][T17050] ? do_syscall_64+0xcd/0x250 [ 199.200552][T17050] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 199.202491][T17050] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 199.204498][T17050] genl_family_rcv_msg_doit+0x202/0x2f0 [ 199.205961][T17050] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 199.207585][T17050] ? bpf_lsm_capable+0x9/0x10 [ 199.208861][T17050] ? security_capable+0x7e/0x260 [ 199.210262][T17050] ? ns_capable+0xd7/0x110 [ 199.211521][T17050] genl_rcv_msg+0x565/0x800 [ 199.212748][T17050] ? __pfx_genl_rcv_msg+0x10/0x10 [ 199.214103][T17050] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 199.215559][T17050] netlink_rcv_skb+0x16b/0x440 [ 199.216922][T17050] ? __pfx_genl_rcv_msg+0x10/0x10 [ 199.218597][T17050] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 199.220183][T17050] ? down_read+0xc9/0x330 [ 199.221372][T17050] ? __pfx_down_read+0x10/0x10 [ 199.222661][T17050] ? netlink_deliver_tap+0x1ae/0xd30 [ 199.224092][T17050] genl_rcv+0x28/0x40 [ 199.225170][T17050] netlink_unicast+0x53c/0x7f0 [ 199.226438][T17050] ? __pfx_netlink_unicast+0x10/0x10 [ 199.227912][T17050] netlink_sendmsg+0x8b8/0xd70 [ 199.229521][T17050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.230934][T17050] ____sys_sendmsg+0xaaf/0xc90 [ 199.232223][T17050] ? copy_msghdr_from_user+0x10b/0x160 [ 199.233630][T17050] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.235018][T17050] ___sys_sendmsg+0x135/0x1e0 [ 199.236265][T17050] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.237641][T17050] ? __pfx_lock_release+0x10/0x10 [ 199.238924][T17050] ? trace_lock_acquire+0x14e/0x1f0 [ 199.240279][T17050] ? __fget_files+0x206/0x3a0 [ 199.241548][T17050] __sys_sendmsg+0x16e/0x220 [ 199.242761][T17050] ? __pfx___sys_sendmsg+0x10/0x10 [ 199.244104][T17050] do_syscall_64+0xcd/0x250 [ 199.245298][T17050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.246925][T17050] RIP: 0033:0x7efee777ff19 [ 199.248555][T17050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.253934][T17050] RSP: 002b:00007efee8577058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.256089][T17050] RAX: ffffffffffffffda RBX: 00007efee7945fa0 RCX: 00007efee777ff19 [ 199.258154][T17050] RDX: 000000000000c000 RSI: 0000000020000000 RDI: 0000000000000003 [ 199.260377][T17050] RBP: 00007efee85770a0 R08: 0000000000000000 R09: 0000000000000000 [ 199.262459][T17050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.264622][T17050] R13: 0000000000000000 R14: 00007efee7945fa0 R15: 00007ffc86ff7ba8 [ 199.266744][T17050] [ 199.281136][T17052] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5123 sclass=netlink_xfrm_socket pid=17052 comm=syz.6.3828 [ 199.543742][ T6000] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 199.573460][T17066] tc_dump_action: action bad kind [ 199.705373][ T6000] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.709346][ T6000] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.712769][ T6000] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.717319][ T6000] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.720538][ T6000] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.727767][ T6000] usb 7-1: config 0 descriptor?? [ 199.884795][T16916] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 199.908089][T17070] overlayfs: overlapping lowerdir path [ 199.952273][ T6000] usbhid 7-1:0.0: can't add hid device: -71 [ 199.961520][ T6000] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 199.967190][ T6000] usb 7-1: USB disconnect, device number 27 [ 200.032509][T17080] net_ratelimit: 18 callbacks suppressed [ 200.032524][T17080] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 200.038921][T17080] FAULT_INJECTION: forcing a failure. [ 200.038921][T17080] name failslab, interval 1, probability 0, space 0, times 0 [ 200.043706][T17080] CPU: 3 UID: 0 PID: 17080 Comm: syz.4.3838 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 200.047423][T17080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 200.051255][T17080] Call Trace: [ 200.052433][T17080] [ 200.053508][T17080] dump_stack_lvl+0x16c/0x1f0 [ 200.055179][T17080] should_fail_ex+0x497/0x5b0 [ 200.056861][T17080] ? fs_reclaim_acquire+0xae/0x150 [ 200.058762][T17080] should_failslab+0xc2/0x120 [ 200.060484][T17080] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 200.062596][T17080] ? __alloc_skb+0x2b1/0x380 [ 200.064346][T17080] __alloc_skb+0x2b1/0x380 [ 200.065996][T17080] ? __pfx___alloc_skb+0x10/0x10 [ 200.067838][T17080] ? genl_rcv_msg+0x510/0x800 [ 200.069570][T17080] ? genl_rcv_msg+0x4bd/0x800 [ 200.071238][T17080] netlink_ack+0x15f/0xb80 [ 200.072826][T17080] netlink_rcv_skb+0x348/0x440 [ 200.074657][T17080] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.076487][T17080] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.078373][T17080] ? down_read+0xc9/0x330 [ 200.079732][T17080] ? __pfx_down_read+0x10/0x10 [ 200.081043][T17080] ? netlink_deliver_tap+0x1ae/0xd30 [ 200.082870][T17080] genl_rcv+0x28/0x40 [ 200.083887][T17080] netlink_unicast+0x53c/0x7f0 [ 200.085115][T17080] ? __pfx_netlink_unicast+0x10/0x10 [ 200.086493][T17080] netlink_sendmsg+0x8b8/0xd70 [ 200.087793][T17080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.089208][T17080] ____sys_sendmsg+0xaaf/0xc90 [ 200.090481][T17080] ? copy_msghdr_from_user+0x10b/0x160 [ 200.092399][T17080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.094263][T17080] ___sys_sendmsg+0x135/0x1e0 [ 200.095808][T17080] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.097593][T17080] ? __pfx_lock_release+0x10/0x10 [ 200.099337][T17080] ? trace_lock_acquire+0x14e/0x1f0 [ 200.101093][T17080] ? __fget_files+0x206/0x3a0 [ 200.102509][T17080] __sys_sendmsg+0x16e/0x220 [ 200.103882][T17080] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.105163][T17080] do_syscall_64+0xcd/0x250 [ 200.106352][T17080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.107926][T17080] RIP: 0033:0x7fecf2d7ff19 [ 200.109130][T17080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.114572][T17080] RSP: 002b:00007fecf3b4b058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.116959][T17080] RAX: ffffffffffffffda RBX: 00007fecf2f45fa0 RCX: 00007fecf2d7ff19 [ 200.118957][T17080] RDX: 000000000000c000 RSI: 0000000020000000 RDI: 0000000000000003 [ 200.121362][T17080] RBP: 00007fecf3b4b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 200.123542][T17080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 200.125770][T17080] R13: 0000000000000000 R14: 00007fecf2f45fa0 R15: 00007fffe4462fc8 [ 200.127787][T17080] [ 200.183951][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.371988][T17094] __nla_validate_parse: 29 callbacks suppressed [ 200.371999][T17094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3843'. [ 200.546713][T17111] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 200.555343][T17113] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 200.696829][T17123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3854'. [ 200.792528][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 200.792549][ T39] audit: type=1400 audit(1733259944.995:1682): avc: denied { getopt } for pid=17126 comm="syz.4.3856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 200.808807][T17127] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3856'. [ 200.848814][T17129] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3857'. [ 200.960175][ T39] audit: type=1400 audit(1733259945.165:1683): avc: denied { listen } for pid=17136 comm="syz.4.3860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 200.994430][T17138] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3860'. [ 200.997549][T17138] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3860'. [ 201.006901][ T39] audit: type=1400 audit(1733259945.215:1684): avc: denied { mounton } for pid=17136 comm="syz.4.3860" path="/127/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 201.017523][T17138] syzkaller1: entered promiscuous mode [ 201.019119][T17138] syzkaller1: entered allmulticast mode [ 201.022352][ T39] audit: type=1400 audit(1733259945.225:1685): avc: denied { setopt } for pid=17136 comm="syz.4.3860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 201.053105][T17147] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 201.170311][T17149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3865'. [ 201.172708][T17149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3865'. [ 201.175689][T17149] netlink: 'syz.3.3865': attribute type 25 has an invalid length. [ 201.423424][T17186] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 201.466637][ T39] audit: type=1400 audit(1733259945.675:1686): avc: denied { mount } for pid=17187 comm="syz.3.3878" name="/" dev="autofs" ino=72972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 201.482455][ T39] audit: type=1400 audit(1733259945.675:1687): avc: denied { mounton } for pid=17187 comm="syz.3.3878" path="/355/file1/file0" dev="autofs" ino=72973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 201.493496][ T39] audit: type=1400 audit(1733259945.675:1688): avc: denied { mount } for pid=17187 comm="syz.3.3878" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 201.503327][ T39] audit: type=1400 audit(1733259945.675:1689): avc: denied { mounton } for pid=17187 comm="syz.3.3878" path="/355/file1/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 201.509329][ T39] audit: type=1400 audit(1733259945.685:1690): avc: denied { unmount } for pid=12159 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 201.515216][ T39] audit: type=1400 audit(1733259945.705:1691): avc: denied { unmount } for pid=12159 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 201.595550][T17168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3871'. [ 201.682932][T17200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3884'. [ 201.685468][T17200] netlink: 'syz.2.3884': attribute type 7 has an invalid length. [ 201.687527][T17200] netlink: 'syz.2.3884': attribute type 8 has an invalid length. [ 201.691371][T17200] gretap0: entered promiscuous mode [ 201.693477][T17202] openvswitch: netlink: Message has 44053 unknown bytes. [ 201.696261][T17200] batadv_slave_1: entered promiscuous mode [ 201.705552][T17200] gretap0: left promiscuous mode [ 201.708946][T17200] batadv_slave_1: left promiscuous mode [ 201.849785][T17208] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 201.852648][T17208] overlayfs: maximum fs stacking depth exceeded [ 201.901418][T17210] tun0: tun_chr_ioctl cmd 1074025672 [ 201.902952][T17210] tun0: ignored: set checksum enabled [ 201.930717][T17212] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 202.104450][T17235] gretap0: entered promiscuous mode [ 202.106432][T17235] batadv_slave_1: entered promiscuous mode [ 202.108891][T17235] gretap0: left promiscuous mode [ 202.111298][T17235] batadv_slave_1: left promiscuous mode [ 202.196426][T17247] loop2: detected capacity change from 0 to 7 [ 202.198444][T17247] Dev loop2: unable to read RDB block 7 [ 202.200039][T17247] loop2: unable to read partition table [ 202.201599][T17247] loop2: partition table beyond EOD, truncated [ 202.203702][T17247] loop_reread_partitions: partition scan of loop2 (þ被) failed (rc=-5) [ 202.276556][T17251] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 202.413372][ T5969] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 202.543353][ T5969] usb 9-1: device descriptor read/64, error -71 [ 202.579514][T17273] vivid-000: disconnect [ 202.707846][T17281] validate_nla: 2 callbacks suppressed [ 202.707863][T17281] netlink: 'syz.6.3911': attribute type 1 has an invalid length. [ 202.740862][T17283] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 202.783511][ T5969] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 202.862368][T17287] syzkaller0: entered promiscuous mode [ 202.865113][T17287] syzkaller0: entered allmulticast mode [ 202.923433][ T5969] usb 9-1: device descriptor read/64, error -71 [ 203.033951][ T5969] usb usb9-port1: attempt power cycle [ 203.350895][T17266] vivid-000: reconnect [ 203.383473][ T5969] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 203.403686][ T5969] usb 9-1: device descriptor read/8, error -71 [ 203.653341][ T5969] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 203.673766][ T5969] usb 9-1: device descriptor read/8, error -71 [ 203.796159][ T5969] usb usb9-port1: unable to enumerate USB device [ 204.779917][T17305] netlink: 'syz.2.3920': attribute type 25 has an invalid length. [ 204.837872][T17309] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 204.859427][T17313] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 204.965500][T17321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=17321 comm=syz.6.3928 [ 204.969242][T17321] netlink: 'syz.6.3928': attribute type 11 has an invalid length. [ 204.969908][T17319] (syz.2.3925,17319,3):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 204.974495][T17319] (syz.2.3925,17319,3):ocfs2_fill_super:1178 ERROR: status = -22 [ 205.017300][T17319] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 205.027179][T17325] netlink: 'syz.6.3930': attribute type 25 has an invalid length. [ 205.052998][T17327] batman_adv: batadv0: Adding interface: erspan1 [ 205.055808][T17327] batman_adv: batadv0: Not using interface erspan1 (retrying later): interface not active [ 205.142133][T17333] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 205.229816][T17347] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17347 comm=syz.6.3940 [ 205.233125][T17347] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17347 comm=syz.6.3940 [ 205.240394][T17347] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17347 comm=syz.6.3940 [ 205.354196][T17363] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 205.373660][T17365] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 205.437286][T17371] cgroup: Need name or subsystem set [ 205.476535][T17377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17377 comm=syz.2.3952 [ 205.479725][T17377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17377 comm=syz.2.3952 [ 205.482811][T17377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17377 comm=syz.2.3952 [ 205.484731][T17378] netlink: 'syz.2.3952': attribute type 1 has an invalid length. [ 205.486277][T17377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17377 comm=syz.2.3952 [ 205.491387][T17377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17377 comm=syz.2.3952 [ 205.496401][T17377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17377 comm=syz.2.3952 [ 205.499381][T17378] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.509285][T17377] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.511125][T17377] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 205.514908][T17377] bond3: (slave vti0): Error -95 calling set_mac_address [ 205.562211][T17385] __nla_validate_parse: 11 callbacks suppressed [ 205.562222][T17385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3954'. [ 205.626826][T17392] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3957'. [ 205.653697][T17394] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 205.771872][T17400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3960'. [ 205.774729][T17400] netlink: 'syz.4.3960': attribute type 7 has an invalid length. [ 205.776761][T17400] netlink: 'syz.4.3960': attribute type 8 has an invalid length. [ 205.778734][T17400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3960'. [ 205.782962][T17400] gretap0: entered promiscuous mode [ 205.785564][T17400] batadv_slave_1: entered promiscuous mode [ 205.787993][T17400] gretap0: left promiscuous mode [ 205.789930][T17400] batadv_slave_1: left promiscuous mode [ 205.793739][ T39] kauditd_printk_skb: 88 callbacks suppressed [ 205.793754][ T39] audit: type=1400 audit(1733259950.005:1780): avc: denied { read } for pid=5331 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 205.810900][ T39] audit: type=1400 audit(1733259950.005:1781): avc: denied { search } for pid=5331 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.819871][ T39] audit: type=1400 audit(1733259950.005:1782): avc: denied { open } for pid=5331 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 205.833301][ T39] audit: type=1400 audit(1733259950.005:1783): avc: denied { getattr } for pid=5331 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 205.891957][T17402] netlink: 'syz.4.3961': attribute type 1 has an invalid length. [ 205.946566][ T39] audit: type=1400 audit(1733259950.155:1784): avc: denied { create } for pid=17408 comm="syz.4.3963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 205.953088][ T39] audit: type=1400 audit(1733259950.155:1785): avc: denied { setopt } for pid=17408 comm="syz.4.3963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 205.995677][T17412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3964'. [ 206.025970][T17414] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3965'. [ 206.131530][T17422] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 206.156936][T17424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3970'. [ 206.159039][T17424] netlink: 'syz.4.3970': attribute type 7 has an invalid length. [ 206.160867][T17424] netlink: 'syz.4.3970': attribute type 8 has an invalid length. [ 206.162746][T17424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3970'. [ 206.168640][T17424] gretap0: entered promiscuous mode [ 206.170866][T17424] batadv_slave_1: entered promiscuous mode [ 206.173981][T17424] gretap0: left promiscuous mode [ 206.175735][T17424] batadv_slave_1: left promiscuous mode [ 206.274949][ T39] audit: type=1400 audit(1733259950.485:1786): avc: denied { mount } for pid=17427 comm="syz.4.3972" name="/" dev="ramfs" ino=73239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 206.289428][T17429] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 206.290139][ T39] audit: type=1400 audit(1733259950.495:1787): avc: denied { create } for pid=17427 comm="syz.4.3972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 206.297091][ T39] audit: type=1400 audit(1733259950.505:1788): avc: denied { bind } for pid=17427 comm="syz.4.3972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 206.302965][ T39] audit: type=1400 audit(1733259950.505:1789): avc: denied { setopt } for pid=17427 comm="syz.4.3972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 206.311239][T17428] IPVS: stopping master sync thread 17429 ... [ 206.401055][T17433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3973'. [ 206.524016][T17438] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 206.622964][T17449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3979'. [ 206.664541][T17452] gretap0: entered promiscuous mode [ 206.666720][T17452] batadv_slave_1: entered promiscuous mode [ 206.670001][T17452] gretap0: left promiscuous mode [ 206.672728][T17452] batadv_slave_1: left promiscuous mode [ 206.754442][T17460] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 206.818972][T17467] xt_hashlimit: size too large, truncated to 1048576 [ 206.959383][T17480] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 207.646470][T17491] gretap0: entered promiscuous mode [ 207.651826][T17491] batadv_slave_1: entered promiscuous mode [ 207.654555][T17491] gretap0: left promiscuous mode [ 207.656639][T17491] batadv_slave_1: left promiscuous mode [ 207.739697][T17493] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 207.768961][T17496] Malformed UNC in devname [ 207.768961][T17496] [ 207.770810][T17496] CIFS: VFS: Malformed UNC in devname [ 207.897686][T17506] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 208.000143][T17514] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 208.039259][T17516] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 208.095617][T17520] validate_nla: 4 callbacks suppressed [ 208.095627][T17520] netlink: 'syz.2.4007': attribute type 7 has an invalid length. [ 208.099252][T17520] netlink: 'syz.2.4007': attribute type 8 has an invalid length. [ 208.103443][T17520] gretap0: entered promiscuous mode [ 208.105472][T17520] batadv_slave_1: entered promiscuous mode [ 208.107634][T17520] gretap0: left promiscuous mode [ 208.109388][T17520] batadv_slave_1: left promiscuous mode [ 208.209275][T12076] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.308278][T12076] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.360899][ T66] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.369493][ T66] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.376757][ T66] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.380252][ T66] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.388977][ T66] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 208.391860][ T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.424645][T12076] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.504883][T12076] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.658571][T17530] chnl_net:caif_netlink_parms(): no params data found [ 208.685402][T12076] bridge_slave_1: left allmulticast mode [ 208.687426][T12076] bridge_slave_1: left promiscuous mode [ 208.690271][T12076] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.695400][T12076] bridge_slave_0: left allmulticast mode [ 208.697390][T12076] bridge_slave_0: left promiscuous mode [ 208.699389][T12076] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.097224][T12076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.108787][T12076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.112914][T12076] bond0 (unregistering): Released all slaves [ 209.206178][T17530] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.208112][T17530] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.210175][T17530] bridge_slave_0: entered allmulticast mode [ 209.212870][T17530] bridge_slave_0: entered promiscuous mode [ 209.242625][T17530] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.245111][T17530] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.247208][T17530] bridge_slave_1: entered allmulticast mode [ 209.250127][T17530] bridge_slave_1: entered promiscuous mode [ 209.290943][T17530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.307327][T17530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.330149][T17530] team0: Port device team_slave_0 added [ 209.348689][T17530] team0: Port device team_slave_1 added [ 209.390519][T17530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.392422][T17530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.399349][T17530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.403212][T17530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.405317][T17530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.411914][T17530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.457994][T17530] hsr_slave_0: entered promiscuous mode [ 209.460130][T17530] hsr_slave_1: entered promiscuous mode [ 209.462106][T17530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.464947][T17530] Cannot create hsr debugfs directory [ 209.489079][T12076] hsr_slave_0: left promiscuous mode [ 209.491783][T12076] hsr_slave_1: left promiscuous mode [ 209.494977][T12076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.497756][T12076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.500991][T12076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.503621][T12076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.536638][T17539] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 209.538958][T17539] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 209.540912][T12076] veth1_macvtap: left promiscuous mode [ 209.542690][T12076] veth0_macvtap: left promiscuous mode [ 209.544588][T12076] veth1_vlan: left promiscuous mode [ 209.546055][T12076] veth0_vlan: left promiscuous mode [ 209.556440][T17539] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 209.744790][T17559] fuse: Unknown parameter '50x0000000000000007' [ 209.800687][T17563] netlink: 'syz.6.4018': attribute type 7 has an invalid length. [ 209.802913][T17563] netlink: 'syz.6.4018': attribute type 8 has an invalid length. [ 210.673218][T12076] team0 (unregistering): Port device team_slave_1 removed [ 210.800221][T12076] team0 (unregistering): Port device team_slave_0 removed [ 211.216576][ T66] Bluetooth: hci3: command 0x041b tx timeout [ 211.542035][T17563] gretap0: entered promiscuous mode [ 211.550327][T17563] batadv_slave_1: entered promiscuous mode [ 211.553540][T17563] gretap0: left promiscuous mode [ 211.558591][T17563] batadv_slave_1: left promiscuous mode [ 211.587797][ T12] bridge0: port 3(team0) entered disabled state [ 211.837953][ T39] kauditd_printk_skb: 74 callbacks suppressed [ 211.837963][ T39] audit: type=1400 audit(1733259956.045:1864): avc: denied { shutdown } for pid=17586 comm="syz.2.4022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 211.887845][ T39] audit: type=1400 audit(1733259956.095:1865): avc: denied { getopt } for pid=17586 comm="syz.2.4022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 211.899291][ T39] audit: type=1400 audit(1733259956.095:1866): avc: denied { name_connect } for pid=17586 comm="syz.2.4022" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 212.036737][T17603] netlink: 'syz.2.4024': attribute type 10 has an invalid length. [ 212.041106][T17603] bridge0: port 3(team0) entered disabled state [ 212.043135][T17603] team0: left allmulticast mode [ 212.045367][T17603] team_slave_0: left allmulticast mode [ 212.046847][T17603] team_slave_1: left allmulticast mode [ 212.048314][T17603] team0: left promiscuous mode [ 212.049576][T17603] team_slave_0: left promiscuous mode [ 212.051141][T17603] team_slave_1: left promiscuous mode [ 212.052685][T17603] bridge0: port 3(team0) entered disabled state [ 212.059330][T17603] batman_adv: batadv0: Adding interface: team0 [ 212.060993][T17603] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.068594][T17603] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 212.072620][T17603] netlink: 'syz.2.4024': attribute type 10 has an invalid length. [ 212.077718][T17603] __nla_validate_parse: 10 callbacks suppressed [ 212.077729][T17603] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4024'. [ 212.127052][T17603] team0: entered promiscuous mode [ 212.128423][T17603] team_slave_0: entered promiscuous mode [ 212.129968][T17603] team_slave_1: entered promiscuous mode [ 212.131777][T17603] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.138920][T17603] batman_adv: batadv0: Interface activated: team0 [ 212.140672][T17603] batman_adv: batadv0: Interface deactivated: team0 [ 212.141842][T17612] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4026'. [ 212.142438][T17603] batman_adv: batadv0: Removing interface: team0 [ 212.149329][T17603] bridge0: port 3(team0) entered blocking state [ 212.151652][T17603] bridge0: port 3(team0) entered disabled state [ 212.153492][T17603] team0: entered allmulticast mode [ 212.154847][T17603] team_slave_0: entered allmulticast mode [ 212.156339][T17603] team_slave_1: entered allmulticast mode [ 212.186299][T17615] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 212.221297][T17530] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.225032][T17530] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.228135][T17530] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 212.231058][T17530] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 212.268392][T17530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.275114][T17530] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.279056][ T1214] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.281059][ T1214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.293212][T17623] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 212.298468][ T39] audit: type=1400 audit(1733259956.505:1867): avc: denied { write } for pid=17622 comm="syz.6.4028" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 212.308376][T10629] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.310327][T10629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.368358][T17623] could not allocate digest TFM handle cryptd(md5-generic) [ 212.418772][T17530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.434703][ T39] audit: type=1400 audit(1733259956.635:1868): avc: denied { unlink } for pid=17646 comm="syz.6.4030" name="#57" dev="tmpfs" ino=1405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 212.453463][ T39] audit: type=1400 audit(1733259956.645:1869): avc: denied { mount } for pid=17646 comm="syz.6.4030" name="/" dev="overlay" ino=1398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 212.514615][T17530] veth0_vlan: entered promiscuous mode [ 212.518094][T17530] veth1_vlan: entered promiscuous mode [ 212.531915][T17530] veth0_macvtap: entered promiscuous mode [ 212.535124][T17530] veth1_macvtap: entered promiscuous mode [ 212.542721][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.545646][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.548271][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.551065][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.554420][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.559395][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.563998][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.567323][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.569924][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.572892][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.576084][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.578912][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.582334][T17530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.588284][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.591067][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.594155][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.596928][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.599509][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.602248][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.603498][ T39] audit: type=1400 audit(1733259956.805:1870): avc: denied { ioctl } for pid=17646 comm="syz.6.4030" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x4146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 212.605289][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.614072][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.616636][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.619472][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.622040][T17530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.625027][T17530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.628405][T17530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.634300][T17530] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.636670][T17530] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.638995][T17530] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.641831][T17530] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.693968][T10629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.696799][T10629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.711438][T12517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.714640][T12517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.719340][ T39] audit: type=1400 audit(1733259956.925:1871): avc: denied { mounton } for pid=17530 comm="syz-executor" path="/syzkaller.eDpWkD/syz-tmp" dev="sda1" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 212.729375][ T39] audit: type=1400 audit(1733259956.925:1872): avc: denied { mount } for pid=17530 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 212.737011][ T39] audit: type=1400 audit(1733259956.925:1873): avc: denied { mounton } for pid=17530 comm="syz-executor" path="/syzkaller.eDpWkD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 213.313715][T17680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4036'. [ 213.353184][T17685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4038'. [ 213.355913][T17685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4038'. [ 213.358231][T17685] netlink: 'syz.2.4038': attribute type 25 has an invalid length. [ 213.423791][T17690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4040'. [ 213.426885][T17690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4040'. [ 213.502904][T17692] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 213.615941][T17695] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4042'. [ 213.618309][T17695] all: renamed from sit0 (while UP) [ 214.206323][T17707] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4047'. [ 214.232598][T17710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4048'. [ 214.235165][T17710] netlink: 'syz.6.4048': attribute type 25 has an invalid length. [ 214.692000][T17717] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 214.834061][T17718] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 215.067265][T17734] netlink: 'syz.2.4058': attribute type 25 has an invalid length. [ 215.127769][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.208306][T17741] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 215.251219][ T5926] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.254355][ T5926] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.256915][ T5926] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.259237][ T5926] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.262220][ T5926] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.266865][ T5926] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.475743][T17742] chnl_net:caif_netlink_parms(): no params data found [ 215.517983][T17742] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.520001][T17742] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.521979][T17742] bridge_slave_0: entered allmulticast mode [ 215.524236][T17742] bridge_slave_0: entered promiscuous mode [ 215.526855][T17742] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.528799][T17742] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.530787][T17742] bridge_slave_1: entered allmulticast mode [ 215.532885][T17742] bridge_slave_1: entered promiscuous mode [ 215.570481][T17742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.576424][T17742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.598238][T17742] team0: Port device team_slave_0 added [ 215.601273][T17742] team0: Port device team_slave_1 added [ 215.619146][T17742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.620990][T17742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.629089][T17742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.633660][T17742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.635510][T17742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.641999][T17742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.673425][T17742] hsr_slave_0: entered promiscuous mode [ 215.681126][T17742] hsr_slave_1: entered promiscuous mode [ 215.683024][T17742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.685152][T17742] Cannot create hsr debugfs directory [ 215.742425][T17768] netlink: 'syz.6.4068': attribute type 25 has an invalid length. [ 216.157997][T17775] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 216.233482][ T6000] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 216.383417][ T6000] usb 11-1: Using ep0 maxpacket: 8 [ 216.386585][ T6000] usb 11-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 216.390334][ T6000] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.392465][ T6000] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 216.394957][ T6000] usb 11-1: SerialNumber: syz [ 216.398561][ T6000] cdc_ether 11-1:1.0: probe with driver cdc_ether failed with error -22 [ 216.443387][ T8101] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 216.614690][ T8101] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 216.616983][ T8101] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 216.619622][ T8101] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 216.622024][ T8101] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 216.625825][ T8101] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 216.631985][ T8101] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 216.634603][ T8101] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 216.637337][ T8101] usb 7-1: Product: syz [ 216.638599][ T8101] usb 7-1: Manufacturer: syz [ 216.644155][ T8101] cdc_wdm 7-1:1.0: skipping garbage [ 216.646040][ T8101] cdc_wdm 7-1:1.0: skipping garbage [ 216.650236][ T8101] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 216.650873][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.652171][ T8101] cdc_wdm 7-1:1.0: Unknown control protocol [ 216.719489][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.792406][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.800554][T17770] raw-gadget.0 gadget.6: fail, usb_ep_set_wedge returned -11 [ 216.853174][ T6000] usb 7-1: USB disconnect, device number 28 [ 216.868651][ T9] usb 11-1: USB disconnect, device number 8 [ 216.907244][ T12] bridge_slave_1: left allmulticast mode [ 216.908797][ T12] bridge_slave_1: left promiscuous mode [ 216.910333][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.913136][ T12] bridge_slave_0: left allmulticast mode [ 216.914817][ T12] bridge_slave_0: left promiscuous mode [ 216.916344][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.209858][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.213804][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.217200][ T12] bond0 (unregistering): Released all slaves [ 217.295259][ T66] Bluetooth: hci3: command tx timeout [ 217.423546][T12396] infiniband syz0: set down [ 217.437532][T12396] bond0: (slave syz_tun): Releasing backup interface [ 217.449264][ T39] kauditd_printk_skb: 38 callbacks suppressed [ 217.449273][ T39] audit: type=1400 audit(1733259961.655:1912): avc: denied { read } for pid=17785 comm="syz.2.4074" laddr=fe80::13 lport=55206 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 217.457326][ T5926] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.461403][ T5926] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.464535][T10629] smc: removing ib device syz0 [ 217.469591][ T5926] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.475643][ T5926] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.478312][ T5926] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.480812][ T5926] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.505778][ T39] audit: type=1326 audit(1733259961.715:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17795 comm="syz.6.4076" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1536f7ff19 code=0x0 [ 217.512365][T17801] __nla_validate_parse: 10 callbacks suppressed [ 217.512384][T17801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4077'. [ 217.525524][ T39] audit: type=1400 audit(1733259961.735:1914): avc: denied { unmount } for pid=14429 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 217.568080][ T39] audit: type=1400 audit(1733259961.775:1915): avc: denied { read } for pid=17802 comm="syz.2.4079" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 217.574961][ T39] audit: type=1400 audit(1733259961.785:1916): avc: denied { open } for pid=17802 comm="syz.2.4079" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 217.586354][ T39] audit: type=1400 audit(1733259961.785:1917): avc: denied { ioctl } for pid=17802 comm="syz.2.4079" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 217.587757][T17805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4078'. [ 217.592881][ T39] audit: type=1400 audit(1733259961.795:1918): avc: denied { accept } for pid=17802 comm="syz.2.4079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 217.595543][T17805] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4078'. [ 217.604006][T17805] netlink: 'syz.6.4078': attribute type 25 has an invalid length. [ 217.841415][ T39] audit: type=1400 audit(1733259962.045:1919): avc: denied { map } for pid=17815 comm="syz.6.4082" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 217.849096][ T39] audit: type=1400 audit(1733259962.055:1920): avc: denied { execute } for pid=17815 comm="syz.6.4082" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 217.856975][ T39] audit: type=1400 audit(1733259962.055:1921): avc: denied { bind } for pid=17815 comm="syz.6.4082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 218.118136][T17833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4087'. [ 218.168146][T17835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4088'. [ 218.170523][T17835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4088'. [ 218.173197][T17835] netlink: 'syz.2.4088': attribute type 25 has an invalid length. [ 218.320161][ T12] hsr_slave_0: left promiscuous mode [ 218.322932][ T12] hsr_slave_1: left promiscuous mode [ 218.329625][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.331745][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.336332][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.338294][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.372499][ T12] veth1_macvtap: left promiscuous mode [ 218.374342][ T12] veth0_macvtap: left promiscuous mode [ 218.376242][ T12] veth1_vlan: left promiscuous mode [ 218.377668][ T12] veth0_vlan: left promiscuous mode [ 218.527855][T17851] Bluetooth: Short BCSP packet [ 218.537502][T10629] Bluetooth: Error in BCSP hdr checksum [ 218.545527][T17851] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 218.810416][ T1214] Bluetooth: Error in BCSP hdr checksum [ 219.064560][T10615] Bluetooth: Error in BCSP hdr checksum [ 219.313672][ T12] team0 (unregistering): Port device team_slave_1 removed [ 219.326962][T10629] Bluetooth: Error in BCSP hdr checksum [ 219.377161][ T66] Bluetooth: hci3: command tx timeout [ 219.413055][ T12] team0 (unregistering): Port device team_slave_0 removed [ 219.543799][ T66] Bluetooth: hci2: command tx timeout [ 219.593604][T10615] Bluetooth: Error in BCSP hdr checksum [ 219.845493][T10629] Bluetooth: Error in BCSP hdr checksum [ 220.100365][T17789] chnl_net:caif_netlink_parms(): no params data found [ 220.110783][T10629] Bluetooth: Error in BCSP hdr checksum [ 220.184703][T17742] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 220.209809][T17789] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.211803][T17789] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.214501][T17789] bridge_slave_0: entered allmulticast mode [ 220.216642][T17789] bridge_slave_0: entered promiscuous mode [ 220.219133][T17789] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.221046][T17789] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.222943][T17789] bridge_slave_1: entered allmulticast mode [ 220.225192][T17789] bridge_slave_1: entered promiscuous mode [ 220.227266][T17742] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 220.238297][T17742] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 220.242275][T17742] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 220.256594][T17789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.269271][T17789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.311708][T17789] team0: Port device team_slave_0 added [ 220.315175][T17789] team0: Port device team_slave_1 added [ 220.359990][T17789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.361845][T17789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.370067][T17789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.373422][ T5969] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 220.388679][T17789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.391424][T17789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.399116][T17789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.432435][T17742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.436621][T17789] hsr_slave_0: entered promiscuous mode [ 220.439120][T17789] hsr_slave_1: entered promiscuous mode [ 220.441343][T17789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.444116][T17789] Cannot create hsr debugfs directory [ 220.496474][T17742] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.510715][T12517] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.512621][T12517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.525704][ T5969] usb 7-1: Using ep0 maxpacket: 32 [ 220.528452][ T5969] usb 7-1: config 3 has an invalid interface number: 59 but max is 1 [ 220.530760][ T5969] usb 7-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 220.532992][ T5969] usb 7-1: config 3 has an invalid interface number: 246 but max is 1 [ 220.541081][T10629] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.541145][ T5969] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 220.542937][T10629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.545766][ T5969] usb 7-1: config 3 has no interface number 0 [ 220.551895][ T5969] usb 7-1: config 3 has no interface number 1 [ 220.554201][ T5969] usb 7-1: config 3 interface 59 altsetting 2 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 220.557001][ T5969] usb 7-1: config 3 interface 59 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 220.560035][ T5969] usb 7-1: config 3 interface 59 altsetting 2 endpoint 0x84 has invalid maxpacket 511, setting to 64 [ 220.562823][ T5969] usb 7-1: config 3 interface 59 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 220.565889][ T5969] usb 7-1: config 3 interface 246 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 220.566704][T17742] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 220.569326][ T5969] usb 7-1: config 3 interface 59 has no altsetting 0 [ 220.572167][T17742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.574046][ T5926] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 220.574067][ T66] Bluetooth: hci5: command 0x1003 tx timeout [ 220.574157][ T5969] usb 7-1: config 3 interface 246 has no altsetting 0 [ 220.607605][ T5969] usb 7-1: New USB device found, idVendor=1b3d, idProduct=9315, bcdDevice=f0.67 [ 220.610051][ T5969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.612112][ T5969] usb 7-1: Product: ▲꥔㤄涾ꚵ㕰䮎䭨섰ᦇêµâ¥¸ã¯˜Û±ê›¢ê“µäŸ’묷ä¼åƒ±èŸ‚ċ둉ﮛꭇ뮳ѿ鉇悙ƃᄎ빴à§ï»•æ§¤ë­Šï¬•ç²œÌ½éà¯î¨ë²¸î”œà¶ªî™‹ã‘¹ï†¿ì“¡ï¥¨í–‘í•é¿¨é†“£ß䰮ἦé¾ì€žé¨æ¼€ë–£ç»€ë–¿á’“ç«ï€žë€›ê“‘å¹’â±è–»ä«˜ã‡œá‘»ìœ‡î®—ᶀ蘉敓틫谿䙘ãƒè€ ï³œí„烽埬훚㵶⯹è·éªµé¦‡í‚¯í‰ƒà°±è»¹ä†â§¿ë†œï¤Šâ››é´–〚覴ﺦᎮíŸä€­ã•…䑠﨩 [ 220.620813][ T5969] usb 7-1: Manufacturer: ꪧ㕳釽䊺슠æ…ヵ庨廗ᛀ觿쾎莖⺺쭞⡦圌æ´Òºç¢—빨â¶í›†à­¬ìºï³ì•ˆèš [ 220.624317][ T5969] usb 7-1: SerialNumber: 毦㇦‰湯ḣ暴ᱞ䖘毵谢ᤠç•ç†¨ã•îƒ¶é‹—ꮮ俠៓务î£çµ«éŸ°å¿³èŽ¦ëŒŸã²žä¨ãš‚㗧습êªé³¹ê¤ä²œæ»¢ì»•í•‹å¿¢ê†‚â±à¶¢á¿„糑诌㘧䩲䋞譑멯ྷæ¨ä€°ä•‰ì”Šàµ³î§¹ï…˜ï¯†å§†Öá‘·ä—뗟宾꜡〴铣᣶쬒ç±â”–á›ã¬±çŸ€æ‡«ë†’ë æµé¥–ꆌ䖎䭉櫥뙅æᕧá¡ã‰¡ä¢­í„ºç¬žâ¼”킽 [ 220.695410][T17789] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 220.707648][T17789] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 220.721748][T17789] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 220.740497][T17789] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 220.747178][T17742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.804549][T17789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.813127][T17789] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.821467][T10629] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.823410][T10629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.835080][T12516] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.836947][T12516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.873022][T17742] veth0_vlan: entered promiscuous mode [ 220.882939][T17742] veth1_vlan: entered promiscuous mode [ 220.898188][T17742] veth0_macvtap: entered promiscuous mode [ 220.902680][T17742] veth1_macvtap: entered promiscuous mode [ 220.909370][T17742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.912938][T17742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.916433][T17742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.920043][T17742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.924295][T17742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.927776][T17742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.931058][T17742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.934857][T17742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.938123][T17742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.941577][T17742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.944914][T17742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.948409][T17742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.952377][T17742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.960917][T17742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.964418][T17742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.966949][T17742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.969654][T17742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.972212][T17742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.975288][T17742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.977798][T17742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.980470][T17742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.982991][T17742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.985791][T17742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.988473][T17742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.992177][T17742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.999107][T17742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.007978][T17742] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.010413][T17742] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.012672][T17742] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.016253][T17742] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.021894][T17789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.052401][T17856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.057494][T17856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.080103][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.082320][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.099009][ T1214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.101137][ T1214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.130370][T17789] veth0_vlan: entered promiscuous mode [ 221.135525][T17789] veth1_vlan: entered promiscuous mode [ 221.170054][T17789] veth0_macvtap: entered promiscuous mode [ 221.173129][T17789] veth1_macvtap: entered promiscuous mode [ 221.180146][T17789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.182911][T17789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.185510][T17789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.188186][T17789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.190764][T17789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.194144][T17789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.196739][T17789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.199317][T17789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.201801][T17789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.205010][T17789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.207963][T17789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.210660][T17789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.213187][T17789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.216076][T17789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.219287][T17789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.228346][T17789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.231086][T17789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.234004][T17789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.236704][T17789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.239241][T17789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.241922][T17789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.244578][T17789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.247248][T17789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.249787][T17789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.252469][T17789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.255215][T17789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.257885][T17789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.260436][T17789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.263117][T17789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.267565][T17789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.270812][T17856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.273103][T17856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.273761][T17789] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.278353][T17789] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.279231][ T5969] ftdi_sio 7-1:3.59: FTDI USB Serial Device converter detected [ 221.281526][T17789] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.284756][ T5969] ftdi_sio ttyUSB0: unknown device type: 0xf067 [ 221.286827][T17789] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.290984][ T5969] ftdi_sio 7-1:3.246: FTDI USB Serial Device converter detected [ 221.294708][ T5969] ftdi_sio ttyUSB1: unknown device type: 0xf067 [ 221.306595][ T5969] usb 7-1: USB disconnect, device number 29 [ 221.311506][ T5969] ftdi_sio 7-1:3.59: device disconnected [ 221.313943][ T5969] ftdi_sio 7-1:3.246: device disconnected [ 221.343986][T12516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.346042][T12516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.366642][T12516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.368736][T12516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.471447][T17892] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4097'. [ 221.605481][T17899] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4099'. [ 221.610034][T17906] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 221.617938][ T5926] Bluetooth: hci2: command tx timeout [ 221.825031][T17924] syzkaller0: refused to change device tx_queue_len [ 221.924741][T17930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4108'. [ 221.954990][T17932] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 222.014345][T17940] netlink: 'syz.7.4113': attribute type 10 has an invalid length. [ 222.016413][T17940] netlink: 'syz.7.4113': attribute type 19 has an invalid length. [ 222.018427][T17940] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4113'. [ 222.193098][T17965] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 222.531791][T17987] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 222.786929][T10620] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.891302][ T66] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 222.898072][ T66] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 222.900983][ T66] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 222.905525][ T66] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 222.908333][ T66] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 222.911608][ T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.068820][T17993] chnl_net:caif_netlink_parms(): no params data found [ 223.119470][T17993] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.121241][T17993] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.123030][T17993] bridge_slave_0: entered allmulticast mode [ 223.130060][T17993] bridge_slave_0: entered promiscuous mode [ 223.132521][T17993] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.135160][T17993] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.136961][T17993] bridge_slave_1: entered allmulticast mode [ 223.139179][T17993] bridge_slave_1: entered promiscuous mode [ 223.174742][T17993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.178414][T17993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.218109][T18008] macvlan0: entered allmulticast mode [ 223.219683][T18008] veth1_vlan: entered allmulticast mode [ 223.227350][T17993] team0: Port device team_slave_0 added [ 223.230931][T17993] team0: Port device team_slave_1 added [ 223.252673][T17993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.258403][T17993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.265118][T17993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.268780][T17993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.270623][T17993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.281234][T17993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.312456][T17993] hsr_slave_0: entered promiscuous mode [ 223.316239][T17993] hsr_slave_1: entered promiscuous mode [ 223.323593][T17993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.325681][T17993] Cannot create hsr debugfs directory [ 223.358663][T18019] __nla_validate_parse: 3 callbacks suppressed [ 223.358680][T18019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4138'. [ 223.389672][ T39] kauditd_printk_skb: 16 callbacks suppressed [ 223.389682][ T39] audit: type=1400 audit(1733259967.595:1938): avc: denied { create } for pid=18020 comm="syz.2.4139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 223.397179][ T39] audit: type=1400 audit(1733259967.595:1939): avc: denied { read } for pid=18020 comm="syz.2.4139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 223.453837][ T39] audit: type=1400 audit(1733259967.665:1940): avc: denied { write } for pid=18020 comm="syz.2.4139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 223.506782][T18021] netlink: 'syz.2.4139': attribute type 16 has an invalid length. [ 223.508914][T18021] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.4139'. [ 223.693401][ T5926] Bluetooth: hci2: command tx timeout [ 223.732317][ T39] audit: type=1400 audit(1733259967.935:1941): avc: denied { create } for pid=18034 comm="syz.6.4144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 223.743933][ T39] audit: type=1400 audit(1733259967.955:1942): avc: denied { bind } for pid=18034 comm="syz.6.4144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 223.753716][ T39] audit: type=1400 audit(1733259967.965:1943): avc: denied { write } for pid=18034 comm="syz.6.4144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 223.763886][ T39] audit: type=1400 audit(1733259967.975:1944): avc: denied { setopt } for pid=18034 comm="syz.6.4144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 223.821613][T18044] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4148'. [ 223.844818][ T39] audit: type=1400 audit(1733259968.045:1945): avc: denied { write } for pid=18041 comm="syz.2.4147" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 223.947379][ T39] audit: type=1400 audit(1733259968.155:1946): avc: denied { ioctl } for pid=18059 comm="syz.2.4153" path="socket:[78382]" dev="sockfs" ino=78382 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 223.958534][T18062] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4151'. [ 223.962740][T18062] geneve2: entered promiscuous mode [ 223.964381][T18062] geneve2: entered allmulticast mode [ 223.967929][T18062] : renamed from bond0 (while UP) [ 223.968042][ T39] audit: type=1400 audit(1733259968.175:1947): avc: denied { ioctl } for pid=18055 comm="syz.6.4151" path="socket:[79482]" dev="sockfs" ino=79482 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 224.112853][T18079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4158'. [ 224.174644][T18085] netlink: 'syz.2.4161': attribute type 1 has an invalid length. [ 224.241394][T18090] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 224.256813][T18092] binder: 18087:18092 ioctl c0306201 200002c0 returned -14 [ 224.294037][T18094] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4164'. [ 224.297559][T18094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4164'. [ 224.412180][T18107] overlayfs: failed to resolve './file0': -2 [ 224.447274][T18111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4169'. [ 224.500147][T10620] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.589443][T10620] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.705602][T10620] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.876953][T10620] bridge_slave_1: left allmulticast mode [ 224.878621][T10620] bridge_slave_1: left promiscuous mode [ 224.880349][T10620] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.888386][T10620] bridge_slave_0: left allmulticast mode [ 224.890164][T10620] bridge_slave_0: left promiscuous mode [ 224.891910][T10620] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.956841][T18140] selinux_netlink_send: 27 callbacks suppressed [ 224.956853][T18140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18140 comm=syz.2.4177 [ 224.962027][T18141] netlink: 'syz.2.4177': attribute type 4 has an invalid length. [ 224.964503][T18140] netlink: 'syz.2.4177': attribute type 4 has an invalid length. [ 224.978922][ T5926] Bluetooth: hci3: command tx timeout [ 225.248608][T10620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.252234][T10620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.259086][T10620] bond0 (unregistering): Released all slaves [ 225.619905][T18169] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4183'. [ 225.623339][ T62] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 225.681186][T18181] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4186'. [ 225.766471][T10620] hsr_slave_0: left promiscuous mode [ 225.771407][T10620] hsr_slave_1: left promiscuous mode [ 225.774196][ T5926] Bluetooth: hci2: command tx timeout [ 225.776328][T10620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.779803][T10620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.783972][T10620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.789912][T10620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.804980][ T62] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 225.807985][ T62] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 225.810849][ T62] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 225.814058][ T62] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 225.817431][ T62] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 225.819803][ T62] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.826498][ T62] usb 7-1: config 0 descriptor?? [ 225.828292][T18155] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 225.837890][T10620] veth1_macvtap: left promiscuous mode [ 225.839428][T10620] veth0_macvtap: left promiscuous mode [ 225.840901][T10620] veth1_vlan: left promiscuous mode [ 225.842311][T10620] veth0_vlan: left promiscuous mode [ 226.247368][ T62] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 226.259565][ T62] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 226.273529][ T62] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 226.514222][T18155] use of bytesused == 0 is deprecated and will be removed in the future, [ 226.518755][T18155] use the actual size instead. [ 226.557517][T18155] xt_hashlimit: max too large, truncated to 1048576 [ 226.560305][T18155] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 226.574927][ T62] usb 7-1: USB disconnect, device number 30 [ 226.881557][T10620] team0 (unregistering): Port device team_slave_1 removed [ 226.992872][T10620] team0 (unregistering): Port device team_slave_0 removed [ 227.058811][ T5926] Bluetooth: hci3: command tx timeout [ 227.970818][T17993] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 228.006171][T17993] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 228.024447][T17993] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 228.036040][T17993] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.053088][T18226] netlink: 'syz.2.4201': attribute type 7 has an invalid length. [ 228.055198][T18227] netlink: 'syz.6.4200': attribute type 25 has an invalid length. [ 228.055493][T18226] netlink: 'syz.2.4201': attribute type 8 has an invalid length. [ 228.061811][T18226] gretap0: entered promiscuous mode [ 228.064311][T18226] batadv_slave_1: entered promiscuous mode [ 228.077061][T18226] gretap0: left promiscuous mode [ 228.078977][T18226] batadv_slave_1: left promiscuous mode [ 228.167595][T17993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.170929][T18236] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 228.170929][T18236] The task syz.7.4204 (18236) triggered the difference, watch for misbehavior. [ 228.179559][T17993] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.188602][T12516] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.190474][T12516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.197228][T12517] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.199131][T12517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.338311][T17993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.391913][T18272] __nla_validate_parse: 9 callbacks suppressed [ 228.391932][T18272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4214'. [ 228.397758][T18272] netlink: 'syz.2.4214': attribute type 7 has an invalid length. [ 228.400588][T18272] netlink: 'syz.2.4214': attribute type 8 has an invalid length. [ 228.404576][T18272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4214'. [ 228.409809][T18272] gretap0: entered promiscuous mode [ 228.412665][T18272] batadv_slave_1: entered promiscuous mode [ 228.441269][T18272] gretap0: left promiscuous mode [ 228.450439][T18272] batadv_slave_1: left promiscuous mode [ 228.470731][T17993] veth0_vlan: entered promiscuous mode [ 228.475924][T17993] veth1_vlan: entered promiscuous mode [ 228.516252][T17993] veth0_macvtap: entered promiscuous mode [ 228.521423][T17993] veth1_macvtap: entered promiscuous mode [ 228.567199][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.570154][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.572718][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.575944][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.578966][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.581518][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.584891][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.593303][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.595811][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.603490][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.606358][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.609924][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.612706][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.615660][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.620890][T17993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.629970][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.634549][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.638108][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.641823][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.645609][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.649163][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.652337][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.655285][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.658775][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.661630][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.663516][ T39] kauditd_printk_skb: 36 callbacks suppressed [ 228.663530][ T39] audit: type=1400 audit(1733259972.865:1984): avc: denied { read } for pid=18275 comm="syz.6.4215" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 228.665369][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.666975][ T39] audit: type=1400 audit(1733259972.865:1985): avc: denied { open } for pid=18275 comm="syz.6.4215" path="/324/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 228.672663][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.672680][T17993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.681490][ T39] audit: type=1400 audit(1733259972.865:1986): avc: denied { ioctl } for pid=18275 comm="syz.6.4215" path="/324/file0/file0" dev="fuse" ino=0 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 228.683139][T17993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.689710][ T39] audit: type=1400 audit(1733259972.895:1987): avc: denied { getopt } for pid=18284 comm="syz.7.4219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 228.704410][T17993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.704675][T18287] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4219'. [ 228.712378][ T39] audit: type=1400 audit(1733259972.915:1988): avc: denied { create } for pid=18284 comm="syz.7.4219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 228.722271][ T39] audit: type=1326 audit(1733259972.925:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18284 comm="syz.7.4219" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0857d7ff19 code=0x0 [ 228.723205][T17993] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.732370][T17993] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.741767][T17993] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.745034][T17993] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.808639][T18296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4223'. [ 228.816779][T18295] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 228.818501][T10625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.823053][T10625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.838186][T10625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.840521][T10625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.862441][T18299] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4225'. [ 228.991307][T18310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.061216][T18317] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 229.071349][ T39] audit: type=1400 audit(1733259973.275:1990): avc: denied { ioctl } for pid=18318 comm="syz.7.4233" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 229.079955][ T39] audit: type=1400 audit(1733259973.275:1991): avc: denied { create } for pid=18318 comm="syz.7.4233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 229.090047][ T39] audit: type=1400 audit(1733259973.285:1992): avc: denied { read } for pid=18318 comm="syz.7.4233" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 229.096484][T18321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4234'. [ 229.098692][ T39] audit: type=1400 audit(1733259973.285:1993): avc: denied { open } for pid=18318 comm="syz.7.4233" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 229.372980][T18342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.447034][T18344] Mount JFS Failure: -22 [ 229.448556][T18344] jfs_mount failed w/return code = -22 [ 229.460981][T18348] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 229.533140][T18354] overlayfs: failed to resolve './file1': -2 [ 229.873558][ T6000] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 230.036869][ T6000] usb 7-1: config 1 interface 0 has no altsetting 0 [ 230.040039][ T6000] usb 7-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.40 [ 230.042468][ T6000] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.045703][ T6000] usb 7-1: Product: syz [ 230.046840][ T6000] usb 7-1: Manufacturer: syz [ 230.047992][ T6000] usb 7-1: SerialNumber: syz [ 230.390933][T18371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.465175][ T6000] usbhid 7-1:1.0: can't add hid device: -71 [ 230.467468][ T6000] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 230.478847][ T6000] usb 7-1: USB disconnect, device number 31 [ 230.488088][T18376] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 230.503491][ T1343] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 230.517472][T18378] misc userio: Can't change port type on an already running userio instance [ 230.611955][T18386] binfmt_misc: Unknown parameter 'discard' [ 230.621696][T18387] input: syz0 as /devices/virtual/input/input68 [ 230.626993][T10625] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.684320][ T1343] usb 12-1: Using ep0 maxpacket: 32 [ 230.687705][ T1343] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.691455][ T1343] usb 12-1: config 0 has no interfaces? [ 230.693959][ T1343] usb 12-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 230.697341][ T1343] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.702285][ T1343] usb 12-1: config 0 descriptor?? [ 230.964654][ T62] usb 12-1: USB disconnect, device number 2 [ 231.181477][ T5925] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 231.185103][ T5925] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 231.188594][ T5925] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 231.197377][ T5925] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 231.202428][ T5925] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 231.205599][ T5925] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 231.362679][T18397] chnl_net:caif_netlink_parms(): no params data found [ 231.413553][T18397] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.415419][T18397] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.417337][T18397] bridge_slave_0: entered allmulticast mode [ 231.419480][T18397] bridge_slave_0: entered promiscuous mode [ 231.422126][T18397] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.424369][T18397] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.426337][T18397] bridge_slave_1: entered allmulticast mode [ 231.428423][T18397] bridge_slave_1: entered promiscuous mode [ 231.453573][T18397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.457949][T18397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.482054][T18397] team0: Port device team_slave_0 added [ 231.491481][T18397] team0: Port device team_slave_1 added [ 231.519288][T18397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.521809][T18397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.528668][T18397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.534793][T18397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.536672][T18397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.543188][T18397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.553436][ T6000] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 231.569094][T18397] hsr_slave_0: entered promiscuous mode [ 231.571131][T18397] hsr_slave_1: entered promiscuous mode [ 231.573010][T18397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.575829][T18397] Cannot create hsr debugfs directory [ 231.713745][ T6000] usb 11-1: Using ep0 maxpacket: 32 [ 231.717333][ T6000] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 231.719894][ T6000] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.722771][ T6000] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 231.725693][ T6000] usb 11-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 231.729211][ T6000] usb 11-1: config 0 interface 0 has no altsetting 0 [ 231.733305][ T6000] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 231.735829][ T6000] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 231.738107][ T6000] usb 11-1: Product: syz [ 231.739339][ T6000] usb 11-1: Manufacturer: syz [ 231.740645][ T6000] usb 11-1: SerialNumber: syz [ 231.743594][ T6000] usb 11-1: config 0 descriptor?? [ 231.746735][ T6000] ldusb 11-1:0.0: Interrupt in endpoint not found [ 231.952003][T18401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.955371][T18401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.983354][ T6000] usb 11-1: USB disconnect, device number 9 [ 231.986418][T18410] [ 231.987148][T18410] ====================================================== [ 231.988939][T18410] WARNING: possible circular locking dependency detected SYZFAIL: failed to recv rpc [ 231.990738][T18410] 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 Not tainted [ 231.993425][T18410] ------------------------------------------------------ fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 231.996270][T18410] syz.2.4262/18410 is trying to acquire lock: [ 231.997868][T18410] ffff888037f85de8 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: walk_component+0x342/0x5b0 [ 232.000697][T18410] [ 232.000697][T18410] but task is already holding lock: [ 232.003452][T18410] ffff88805a767088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 232.006763][T18410] [ 232.006763][T18410] which lock already depends on the new lock. [ 232.006763][T18410] [ 232.010372][T18410] [ 232.010372][T18410] the existing dependency chain (in reverse order) is: [ 232.013611][T18410] [ 232.013611][T18410] -> #3 (&of->mutex){+.+.}-{4:4}: [ 232.016161][T18410] __mutex_lock+0x19b/0xa60 [ 232.017978][T18410] kernfs_fop_write_iter+0x27b/0x500 [ 232.020240][T18410] iter_file_splice_write+0x90f/0x10b0 [ 232.022369][T18410] do_splice+0x145c/0x1f60 [ 232.024130][T18410] __do_splice+0x327/0x360 [ 232.025912][T18410] __x64_sys_splice+0x187/0x250 [ 232.027859][T18410] do_syscall_64+0xcd/0x250 [ 232.029672][T18410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.031610][T18410] [ 232.031610][T18410] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 232.033613][T18410] __mutex_lock+0x19b/0xa60 [ 232.035459][T18410] pipe_lock+0x64/0x80 [ 232.037143][T18410] iter_file_splice_write+0x1eb/0x10b0 [ 232.039298][T18410] do_splice+0x145c/0x1f60 [ 232.041052][T18410] __do_splice+0x327/0x360 [ 232.042548][T18410] __x64_sys_splice+0x187/0x250 [ 232.044203][T18410] do_syscall_64+0xcd/0x250 [ 232.045804][T18410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.047451][T18410] [ 232.047451][T18410] -> #1 (sb_writers#6){.+.+}-{0:0}: [ 232.049369][T18410] mnt_want_write+0x6f/0x450 [ 232.050718][T18410] ovl_create_object+0x12e/0x300 [ 232.052127][T18410] lookup_open.isra.0+0x1174/0x14c0 [ 232.053625][T18410] path_openat+0x904/0x2d60 [ 232.054954][T18410] do_filp_open+0x20c/0x470 [ 232.056276][T18410] do_sys_openat2+0x17a/0x1e0 [ 232.057617][T18410] __x64_sys_creat+0xcd/0x120 [ 232.058974][T18410] do_syscall_64+0xcd/0x250 [ 232.060276][T18410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.061923][T18410] [ 232.061923][T18410] -> #0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 232.064192][T18410] __lock_acquire+0x249e/0x3c40 [ 232.065568][T18410] lock_acquire.part.0+0x11b/0x380 [ 232.067021][T18410] down_read+0x9a/0x330 [ 232.068243][T18410] walk_component+0x342/0x5b0 [ 232.069597][T18410] path_lookupat+0x17f/0x770 [ 232.070914][T18410] filename_lookup+0x221/0x5f0 [ 232.072299][T18410] kern_path+0x35/0x50 [ 232.073585][T18410] lookup_bdev+0xd9/0x280 [ 232.074870][T18410] resume_store+0x1d8/0x460 [ 232.076246][T18410] kobj_attr_store+0x55/0x80 [ 232.077555][T18410] sysfs_kf_write+0x117/0x170 [ 232.078891][T18410] kernfs_fop_write_iter+0x33d/0x500 [ 232.080381][T18410] vfs_write+0x5ae/0x1150 [ 232.081635][T18410] ksys_write+0x12b/0x250 [ 232.082884][T18410] do_syscall_64+0xcd/0x250 [ 232.084314][T18410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.085970][T18410] [ 232.085970][T18410] other info that might help us debug this: [ 232.085970][T18410] [ 232.088563][T18410] Chain exists of: [ 232.088563][T18410] &ovl_i_mutex_dir_key[depth] --> &pipe->mutex --> &of->mutex [ 232.088563][T18410] [ 232.091961][T18410] Possible unsafe locking scenario: [ 232.091961][T18410] [ 232.093912][T18410] CPU0 CPU1 [ 232.095283][T18410] ---- ---- [ 232.096638][T18410] lock(&of->mutex); [ 232.097670][T18410] lock(&pipe->mutex); [ 232.099369][T18410] lock(&of->mutex); [ 232.101018][T18410] rlock(&ovl_i_mutex_dir_key[depth]); [ 232.102435][T18410] [ 232.102435][T18410] *** DEADLOCK *** [ 232.102435][T18410] [ 232.104956][T18410] 4 locks held by syz.2.4262/18410: [ 232.106505][T18410] #0: ffff8880271b6d38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390 [ 232.108827][T18410] #1: ffff888031d6e420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 232.111120][T18410] #2: ffff88805a767088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 232.113606][T18410] #3: ffff88801e2d1698 (kn->active#61){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 232.116165][T18410] [ 232.116165][T18410] stack backtrace: [ 232.117673][T18410] CPU: 3 UID: 0 PID: 18410 Comm: syz.2.4262 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 232.120358][T18410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 232.123054][T18410] Call Trace: [ 232.124167][T18410] [ 232.125182][T18410] dump_stack_lvl+0x116/0x1f0 [ 232.126551][T18410] print_circular_bug+0x419/0x5d0 [ 232.127849][T18410] check_noncircular+0x31a/0x400 [ 232.129151][T18410] ? stack_trace_save+0x95/0xd0 [ 232.130393][T18410] ? __pfx_check_noncircular+0x10/0x10 [ 232.131796][T18410] ? add_lock_to_list+0x17d/0x390 [ 232.133090][T18410] __lock_acquire+0x249e/0x3c40 [ 232.134418][T18410] ? __pfx___lock_acquire+0x10/0x10 [ 232.135748][T18410] ? lock_acquire.part.0+0x11b/0x380 [ 232.137119][T18410] ? find_held_lock+0x2d/0x110 [ 232.138364][T18410] lock_acquire.part.0+0x11b/0x380 [ 232.139707][T18410] ? walk_component+0x342/0x5b0 [ 232.140976][T18410] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 232.142436][T18410] ? rcu_is_watching+0x12/0xc0 [ 232.143854][T18410] ? trace_lock_acquire+0x14e/0x1f0 [ 232.145580][T18410] ? walk_component+0x342/0x5b0 [ 232.146844][T18410] ? lock_acquire+0x2f/0xb0 [ 232.148047][T18410] ? walk_component+0x342/0x5b0 [ 232.149318][T18410] down_read+0x9a/0x330 [ 232.150368][T18410] ? walk_component+0x342/0x5b0 [ 232.151579][T18410] ? __pfx_down_read+0x10/0x10 [ 232.152817][T18410] ? lookup_fast+0x155/0x540 [ 232.154297][T18410] walk_component+0x342/0x5b0 [ 232.155528][T18410] path_lookupat+0x17f/0x770 [ 232.156664][T18410] filename_lookup+0x221/0x5f0 [ 232.157860][T18410] ? __pfx_filename_lookup+0x10/0x10 [ 232.159177][T18410] ? getname_kernel+0x52/0x370 [ 232.160381][T18410] ? __asan_memcpy+0x3c/0x60 [ 232.161497][T18410] kern_path+0x35/0x50 [ 232.162532][T18410] lookup_bdev+0xd9/0x280 [ 232.163776][T18410] ? __pfx_lookup_bdev+0x10/0x10 [ 232.165495][T18410] ? __asan_memcpy+0x3c/0x60 [ 232.166695][T18410] resume_store+0x1d8/0x460 [ 232.167829][T18410] ? __pfx_resume_store+0x10/0x10 [ 232.169081][T18410] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 232.170492][T18410] ? rcu_is_watching+0x12/0xc0 [ 232.171714][T18410] ? __pfx_resume_store+0x10/0x10 [ 232.172946][T18410] kobj_attr_store+0x55/0x80 [ 232.174426][T18410] ? __pfx_kobj_attr_store+0x10/0x10 [ 232.175761][T18410] sysfs_kf_write+0x117/0x170 [ 232.176977][T18410] kernfs_fop_write_iter+0x33d/0x500 [ 232.178403][T18410] ? __pfx_sysfs_kf_write+0x10/0x10 [ 232.179730][T18410] vfs_write+0x5ae/0x1150 [ 232.180777][T18410] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 232.182267][T18410] ? __pfx___mutex_lock+0x10/0x10 [ 232.183646][T18410] ? __pfx_vfs_write+0x10/0x10 [ 232.184890][T18410] ksys_write+0x12b/0x250 [ 232.186015][T18410] ? __pfx_ksys_write+0x10/0x10 [ 232.187288][T18410] do_syscall_64+0xcd/0x250 [ 232.188466][T18410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.190020][T18410] RIP: 0033:0x7efee777ff19 [ 232.191185][T18410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.196799][T18410] RSP: 002b:00007efee8577058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 232.198955][T18410] RAX: ffffffffffffffda RBX: 00007efee7945fa0 RCX: 00007efee777ff19 [ 232.200989][T18410] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 000000000000000e [ 232.203015][T18410] RBP: 00007efee77f3986 R08: 0000000000000000 R09: 0000000000000000 [ 232.205079][T18410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.207115][T18410] R13: 0000000000000000 R14: 00007efee7945fa0 R15: 00007ffc86ff7ba8 [ 232.209144][T18410] [ 232.212741][T18410] syz.2.4262: attempt to access beyond end of device [ 232.212741][T18410] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 232.219045][T18410] PM: Image not found (code -5) [ 232.219221][T10625] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.331777][T10625] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.516111][T10625] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.592428][T10625] bridge_slave_1: left allmulticast mode [ 232.594036][T10625] bridge_slave_1: left promiscuous mode [ 232.595566][T10625] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.598250][T10625] bridge_slave_0: left allmulticast mode [ 232.600305][T10625] bridge_slave_0: left promiscuous mode [ 232.602556][T10625] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.700597][T10625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.705362][T10625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.709033][T10625] bond0 (unregistering): Released all slaves [ 232.983321][ T5926] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 232.983584][ T5925] Bluetooth: hci3: command 0x1003 tx timeout [ 233.101472][T10625] hsr_slave_0: left promiscuous mode [ 233.104104][T10625] hsr_slave_1: left promiscuous mode [ 233.105872][T10625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.107909][T10625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.110114][T10625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.112118][T10625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.124969][T10625] veth1_macvtap: left promiscuous mode [ 233.126482][T10625] veth0_macvtap: left promiscuous mode [ 233.127951][T10625] veth1_vlan: left promiscuous mode [ 233.129358][T10625] veth0_vlan: left promiscuous mode [ 233.218027][ T5926] Bluetooth: hci5: command tx timeout [ 233.300846][T10625] team0 (unregistering): Port device team_slave_1 removed [ 233.307047][T10625] team0 (unregistering): Port device team_slave_0 removed [ 233.828010][T10625] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.866183][T10625] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.916286][T10625] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.956141][T10625] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.031015][T10625] bridge_slave_1: left allmulticast mode [ 234.033181][T10625] bridge_slave_1: left promiscuous mode [ 234.036141][T10625] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.038640][T10625] bridge_slave_0: left allmulticast mode [ 234.040060][T10625] bridge_slave_0: left promiscuous mode [ 234.041509][T10625] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.136625][T10625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.144330][T10625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.152954][T10625] bond0 (unregistering): Released all slaves [ 234.379738][T10625] hsr_slave_0: left promiscuous mode [ 234.381527][T10625] hsr_slave_1: left promiscuous mode [ 234.383122][T10625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.385489][T10625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.388417][T10625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.390925][T10625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.397786][T10625] veth1_macvtap: left promiscuous mode [ 234.399750][T10625] veth0_macvtap: left promiscuous mode [ 234.401717][T10625] veth1_vlan: left promiscuous mode [ 234.414631][T10625] veth0_vlan: left promiscuous mode [ 234.627313][T10625] team0 (unregistering): Port device team_slave_1 removed [ 234.680352][T10625] team0 (unregistering): Port device team_slave_0 removed [ 235.386766][T10625] bridge_slave_1: left allmulticast mode [ 235.388859][T10625] bridge_slave_1: left promiscuous mode [ 235.390930][T10625] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.394379][T10625] bridge_slave_0: left allmulticast mode [ 235.396362][T10625] bridge_slave_0: left promiscuous mode [ 235.398404][T10625] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.477927][T10625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.482010][T10625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.487258][T10625] bond0 (unregistering): Released all slaves [ 235.603271][ T39] kauditd_printk_skb: 19 callbacks suppressed [ 235.603287][ T39] audit: type=1400 audit(1733259979.805:2013): avc: denied { sys_chroot } for pid=18477 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 235.612998][ T39] audit: type=1400 audit(1733259979.805:2014): avc: denied { setgid } for pid=18477 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 235.620970][ T39] audit: type=1400 audit(1733259979.805:2015): avc: denied { setrlimit } for pid=18477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 235.650031][T10625] hsr_slave_0: left promiscuous mode [ 235.652046][T10625] hsr_slave_1: left promiscuous mode [ 235.654096][T10625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.656843][T10625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.857134][T10625] team0 (unregistering): Port device team_slave_1 removed [ 235.907680][T10625] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 19:40:56 Registers: info registers vcpu 0 CPU#0 RAX=000000000018e054 RBX=0000000000000000 RCX=ffffffff8b29c759 RDX=ffffed100d4c6fee RSI=ffffffff8bd1b3e0 RDI=ffffffff817086b9 RBP=fffffbfff1bd2ef8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed100d4c6fed R10=ffff88806a637f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de977c0 R14=ffffffff905f0410 R15=0000000000000000 RIP=ffffffff8b29db3f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c374e5d CR3=00000000324a4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000e060600 Opmask01=0000000000000fff Opmask02=000000003f3fefff Opmask03=2040000404420020 Opmask04=00000000ffffdfff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 69253a6925632500 3d45444f4d564544 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc36416940 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000ff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff0000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bdc9bf9eceb187c2 91b0c390bccc85b7 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c7a496c6902a5e44 4f5c4f5f05040405 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558853f9ca70 00006364755f796d 6d756400454d414e 5f4344555f425355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558853f9ca70 00006364755f796d 6d75643d454d414e 5f4344555f425355 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558853c4ca4d 00005e59485f4450 50485900454d414e 5f4344555f425355 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000002a1 0000000000000036 2e6364755f796d6d 75642f6364752f36 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558853f1af50 0000558853f318c0 0000000000000021 0000000000000036 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558853f1d530 0000558853f1e740 0000000000000031 0000003177617264 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 333b263d333b263f 333b2639333b2638 333b263b333b263a 333b264c323b264f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000007002 0000558853fc3ad0 0000558853f93a00 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004102 0000558830172410 0000558800160000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88803aaef400 RCX=ffffffff8902ea92 RDX=0000000000000000 RSI=0000000000000004 RDI=ffff8880353d8ee0 RBP=ffff8880353d8ec0 RSP=ffffc9000652fb10 R8 =0000000000000001 R9 =ffffed1006a7b1dc R10=ffff8880353d8ee3 R11=0000000000000000 R12=ffff8880353d8ee0 R13=0000000000000ec0 R14=ffff88801e2ea780 R15=0000000000000000 RIP=ffffffff819a01f4 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fffde509cd8 CR3=0000000031742000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=e4bf2fbee4bf2fbe e4bf2fbee4bf2fbe e4bf2fbee4bf2fbe e4bf2fbee4bf2fbe e4bf2fbee4bf2fbe e4bf2fbee4bf2fbe e4bf2fbee4bf2fbe e4bf2fbee4bf2fbe ZMM22=390ca063390ca063 390ca063390ca063 390ca063390ca063 390ca063390ca063 390ca063390ca063 390ca063390ca063 390ca063390ca063 390ca063390ca063 ZMM23=d3dfd80fd3dfd80f d3dfd80fd3dfd80f d3dfd80fd3dfd80f d3dfd80fd3dfd80f d3dfd80fd3dfd80f d3dfd80fd3dfd80f d3dfd80fd3dfd80f d3dfd80fd3dfd80f ZMM24=17e72bf617e72bf6 17e72bf617e72bf6 17e72bf617e72bf6 17e72bf617e72bf6 17e72bf617e72bf6 17e72bf617e72bf6 17e72bf617e72bf6 17e72bf617e72bf6 ZMM25=50266db550266db5 50266db550266db5 50266db550266db5 50266db550266db5 50266db550266db5 50266db550266db5 50266db550266db5 50266db550266db5 ZMM26=bfd33adebfd33ade bfd33adebfd33ade bfd33adebfd33ade bfd33adebfd33ade bfd33adebfd33ade bfd33adebfd33ade bfd33adebfd33ade bfd33adebfd33ade ZMM27=626383ce626383ce 626383ce626383ce 626383ce626383ce 626383ce626383ce 626383ce626383ce 626383ce626383ce 626383ce626383ce 626383ce626383ce ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=6513000065130000 6513000065130000 6513000065130000 6513000065130000 6513000065130000 6513000065130000 6513000065130000 6513000065130000 info registers vcpu 2 CPU#2 RAX=00000000001c1fbc RBX=0000000000000002 RCX=ffffffff8b29c759 RDX=ffffed100d506fee RSI=ffffffff8bd1b3e0 RDI=ffffffff817086b9 RBP=ffffed1003ad4000 RSP=ffffc90000197e08 R8 =0000000000000000 R9 =ffffed100d506fed R10=ffff88806a837f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d6a0000 R14=ffffffff905f0410 R15=0000000000000000 RIP=ffffffff8b29db3f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020001000 CR3=000000005c686000 CR4=00352ef0 DR0=fffffffffffffffc DR1=0000000000000000 DR2=0000000000000002 DR3=0000000000000800 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc86ff7f30 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efee77f4830 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efee77f483d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efee77f4837 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efee77f484b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efee77f48d1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efee77f49af ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000188 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000188 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851c9955 RDI=ffffffff9ab10be0 RBP=ffffffff9ab10ba0 RSP=ffffc90006a5ef38 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff851c98f0 R15=0000000000000000 RIP=ffffffff851c997f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007efee85776c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007efee8555fb8 CR3=000000004dae0000 CR4=00352ef0 DR0=fffffffffffffffc DR1=0000000000000000 DR2=0000000000000002 DR3=0000000000000800 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efee77f4830 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efee77f483d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efee77f4837 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efee77f484b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efee77f48d1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efee77f49af ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000376f65 6469762f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000144c46 474a550c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000188 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000