last executing test programs: 2m26.152680298s ago: executing program 2 (id=131): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001700), 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000001740)={0x40, 0x5, 0x0, 'queue0\x00', 0x3}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x7f, 0xa9a, 0x5, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x700, 0x3, 0x1}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000840000008400000005000000030000000000000c020000000000000000000003000000000400000003000000006000000d000000000000020000000001000000060000040900000008000000030000008be3ffff09000000050004005cda120d0c00000003000000030000001000000004000000010400000000000000000000080000000300000001000000020000000030002e00"], &(0x7f00000006c0)=""/4096, 0xa1, 0x1000, 0xffffffff, 0x8e0, 0xb42a4fe1e74b0552}, 0x28) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000840000008400000005000000030000000000000c020000000000000000000003000000000400000003000000006000000d000000000000020000000001000000060000040900000008000000030000008be3ffff09000000050004005cda120d0c00000003000000030000001000000004000000010400000000000000000000080000000300000001000000020000000030002e00"], &(0x7f00000006c0)=""/4096, 0xa1, 0x1000, 0xffffffff, 0x8e0, 0xb42a4fe1e74b0552}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001bc0)=@bpf_tracing={0x1a, 0x28, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7f8f}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000100)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x41000, 0x20, '\x00', r3, 0x19, r4, 0x8, &(0x7f00000016c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xe, 0x4887, 0xfffffbff}, 0x10, 0x17db1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) (async) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0xc0b45545, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001800)={0xffffffffffffffff, 0x3ff, 0x8}, 0xc) r7 = socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}}) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) r9 = socket(0x2a, 0x2, 0x0) open(&(0x7f00000005c0)='./file0\x00', 0x2a4c0, 0x13) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) (async) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) (async) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r12 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r12, 0x5, &(0x7f0000000080)='\x00', 0x0, r11) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x5a, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r13, 0x0, 0x24, 0x7}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x9, 0xd, &(0x7f0000001c80)=ANY=[@ANYBLOB="034601000e000000cf410600ffffffff18200000ecb08ddf273a3fa9a7cab95ddc97b08b1d31b228a049d71f7626299842f7178743b551cc7298c469edc37e49b1d87a9cd5121c8e1d2ed09c2de62b9c022e73a87e7f197fefd2afe25366059a8504948b9723ff92a611979448f1bdd3e558cdee51c6f0bf91d5e5fb1cfb132a264085a3d80cc3c57ab21811e8317bfdfea6d00698223273f9906c3ae59bfb699c59098c9d1427d620f0a0f792010da75323b02094a2e7e5ca04be4947", @ANYRES32=r0, @ANYBLOB="0000000000000000850000004000000018100000", @ANYRES32=r6, @ANYBLOB="000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000018400000f9ffffff0000000000000000"], &(0x7f00000018c0)='GPL\x00', 0x200, 0xec, &(0x7f0000001900)=""/236, 0x40f00, 0x8, '\x00', r13, @fallback=0x13, r4, 0x8, &(0x7f0000001a00)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000001a40)={0x2, 0xd, 0xb, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001a80)=[{0x4, 0x3, 0x1, 0x2}, {0x4, 0x4, 0x0, 0x2}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r14, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m26.151790233s ago: executing program 2 (id=132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff821}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040001}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x40008}, 0x40040) r11 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r2) sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r11, 0x300, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40901}, 0x20000044) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000600)={@my=0x0}) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r2) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, r12, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x22}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040080) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000800)={0x4, &(0x7f00000007c0)=[{0xffab, 0x2a, 0x9, 0x3}, {0xfff8, 0x40, 0x3, 0x101}, {0x1, 0x8, 0x85, 0x6}, {0xb, 0x7, 0x1, 0x5}]}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2000880) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r12, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000040}, 0x4000000) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r13, 0xc0182101, &(0x7f0000000a80)={0x0, 0xe350, 0xe90d}) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000b00), r2) sendmsg$NET_DM_CMD_STOP(r14, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r15, 0x2, 0x70bd2d, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000c40)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000c80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r14, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x54, r12, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4045}, 0x40000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0xb4, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000001}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r18}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd65}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x20000801) 2m26.033271119s ago: executing program 2 (id=134): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0xd, 0x3501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {0x0, 0x1}, 0x1, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x2, 0x2, 0xffec}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) 2m25.973041778s ago: executing program 2 (id=135): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r0, 0x4b67, &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0800050008000000"], 0x24}}, 0x0) 2m25.920687328s ago: executing program 2 (id=136): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x90009427, &(0x7f0000000180)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001001000000000000000000f56c06c1a15cbc764c244cea600000000000", @ANYRES32=0x0, @ANYBLOB="7b13000000000000"], 0x20}}, 0x40800) r1 = syz_open_pts(0xffffffffffffffff, 0x6080) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000)) fstat(r2, &(0x7f0000000340)) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x103000) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/204) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r5 = socket(0x1, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x55e49eff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x804) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, r7) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r4, 0x0, 0x0) fchdir(r8) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r8, 0xc0a85322, &(0x7f0000000400)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864d0, &(0x7f00000003c0)={0x29, 0x0, 0x0, 0xb0b0b0b0}) ioctl$TCSBRKP(r1, 0x5425, 0x7) 2m25.862863659s ago: executing program 2 (id=137): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES32=r0]) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r6 = syz_usbip_server_init(0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001800dd8d0000000000000000020000000100000600000000060015000500000058001680540001"], 0x7c}}, 0x20000810) write$usbip_server(r6, &(0x7f0000000000)=ANY=[], 0x35) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/243, 0x8000, 0x0, 0x4, 0x4}, 0x20) 2m10.631996787s ago: executing program 32 (id=137): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES32=r0]) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r6 = syz_usbip_server_init(0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001800dd8d0000000000000000020000000100000600000000060015000500000058001680540001"], 0x7c}}, 0x20000810) write$usbip_server(r6, &(0x7f0000000000)=ANY=[], 0x35) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/243, 0x8000, 0x0, 0x4, 0x4}, 0x20) 2m5.513025539s ago: executing program 1 (id=414): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xffff5493}}, './file0\x00'}) write$P9_RVERSION(r4, &(0x7f0000000040)=ANY=[@ANYRES64=r2, @ANYRES8=r5], 0x15) r6 = dup(r4) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r6, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_INIT(r6, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7724ba1447521b24e3a14d7bc7532a0dae6ab68934df2f879402d704796b48f6235f54164f10049a5fea82c3ff88749330440714b921ac31230bad7e1b0ad2522692c800c7519c38f02af08f123d86a9475a52518c3b41115923b9d6c46132979a5489aca3352187e17abeed0cd48bd4cd966c41a61e1dac42ae9c7c6af29603c1cfbd1bf9e1a17d4b4bcd67104275e12e4c21c239778564c9793122c88d473cac075946e4908009ce4f146ec95eae7af30fee7986574b0d3660b7", @ANYRESHEX=r6, @ANYBLOB=',\x00']) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x800, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4008, 0x40000}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x3}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m5.431803278s ago: executing program 1 (id=416): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400000000000079ccd0"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x101402, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES32=r4], 0x7c}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0xffffffff, 0x5, 0x3}, 0x9, 0x1, 0x8, 0x8, 0x6, 0x12, 0x1b, 0x5, 0x0, 0x7fffffff, {0x400, 0x2, 0x1, 0xff, 0x10000, 0xfff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/snmp6\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006300e0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', r8, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r9 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2000, 0x1}) 2m5.32927464s ago: executing program 1 (id=418): r0 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) (async) recvmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) (async) recvfrom$inet6(r1, 0x0, 0x0, 0x87b0cc373e1cda89, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(&(0x7f00000025c0)=@sg0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000380)='acl') (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) r3 = socket$netlink(0x10, 0x3, 0x10) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f0000000480)={'trans=virtio,', {[{@noxattr}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@hash}]}}) (async) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004cc0)=ANY=[@ANYBLOB="070000000500"/28], 0x1c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000201030000000000000000000500000a0600000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r8, 0x2, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x1, 0x3, 0x0, 0xae3}}) 2m5.242650167s ago: executing program 1 (id=419): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') preadv(r0, &(0x7f0000001240)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1, 0x0, 0xa3e) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000200)={0x0, 0xfb, 0x22, 0x7, 0x7, "58b3bb212c6d0d0e442b398e0d2a4882", "9d9bf14723890ea3015cbe078f"}, 0x22, 0x2) chdir(&(0x7f0000000280)='./file0\x00') r1 = creat(&(0x7f0000000000)='./bus\x00', 0x181) ftruncate(r1, 0x4082081fc) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x183001) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffffffffffeac, r5, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) poll(&(0x7f0000004200)=[{}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r7, 0xc01c64ad, &(0x7f0000000080)={r6}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={0x0, r3, r6, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000440)={r3, 0x5, &(0x7f0000000300)=[0x8, 0x400, 0xd8, 0x1, 0x101], &(0x7f0000000340)=[0x6, 0x100, 0x2, 0x6], &(0x7f0000000380)=[0x4, 0x4, 0x7, 0xb2, 0x5]}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setsig(0x4203, r8, 0x9, &(0x7f00000000c0)={0x9, 0x3, 0x1000001}) r9 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) dup3(r0, r4, 0x6fd18e66e201b3cb) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001a00010a00000000000000000200000008"], 0x1c}}, 0x0) sendfile(r1, r9, 0x0, 0x101) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0xb, 0x1cf, 0x500, 0x2d5, 0x2}) 2m5.142588733s ago: executing program 1 (id=422): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_emit_ethernet(0x26, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa2d88a8380081003a0000000000000007010000dbd38356bd7e1d5b"], 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) cachestat(r0, &(0x7f0000000100)={0x1000, 0x8}, &(0x7f0000000140), 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000426bd7000fcdbdf2508000000140003002001000000000000000000001f460002"], 0x28}}, 0x4800) 2m4.952730788s ago: executing program 1 (id=425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20048852}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x8844}, 0xa0) 2m4.877526983s ago: executing program 33 (id=425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20048852}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x8844}, 0xa0) 1m16.029808792s ago: executing program 5 (id=643): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000080000000000000014000700000000000000000000000000000000010800040001"], 0x38}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) 1m15.918150719s ago: executing program 5 (id=646): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = socket$kcm(0x2, 0x9, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x891b, &(0x7f0000000000)={'veth1_virt_wifi\x00', @random="0200ff7fac14"}) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) read$nci(r3, 0x0, 0x0) write$tun(r0, &(0x7f0000000600)={@void, @void, @x25={0x2, 0x5, 0x9, "8ac33bbb4aba"}}, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000100)='./file0\x00', 0x124) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x80) mount(0x0, 0x0, 0x0, 0x1010401, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) 1m14.931290196s ago: executing program 5 (id=650): r0 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x9b8, 0x2}) writev(r0, &(0x7f00000016c0)=[{&(0x7f0000000040)="8f76a469c75a21d41228212bfacb1dcb3a0a383a6f5db0257b1c6dfb95c22632c8442b9fee349d9a554c4a8903de347e16453003a5d8ba2fa347df79cf77785f1be3205a5222570bf709ce98801da6d58c659158c73ef2e583ae7adef92b69e5f9a34e31b46dde", 0x67}, {&(0x7f00000000c0)="403312a4bee0697b1bb44c630f2ce2d995c493fb7e72bca257874e31df6fb6769fb26e7e7dc86b71f5b0abba3966c79f7758f3a35de008f3f78ba8ea01a308d027346ff38a4284acef7fd7d746378bfd2cd042fd669831c4e2622975002afea370ca2e0c21dc0a39a1c55bd7d94d62f0e945f8bc478cb0475aef8874a01df444fb11549ee2053a34d7f5c2d91a91c17143290e2f6a05394037cf9f0c558655134ee3ceac4718a8ddf6f025c50ddf47192b59c9175fae0b3f4f7c1a7d5b85804ec29058034e38dcec92c83da6fa598820e260834b621e0925431c9f97096a0d2f6b58850cd1b7b8afb85365296bf9ff12ee1c45eafa170d5748", 0xf9}, {&(0x7f00000001c0)="3c97ffa50a9c643431e87e7a9e73cc60db0d4996b5cc45ca9ec842ff251af8c79cc6075d316517f49f6bc79129ec0bcda824a76ecc6a52d1f3356c4d0ee293cdcb109572435c5e9d0b25e13ed6d81a49f2e7bdab86725049448e07bc97eedf1cd2", 0x61}, {&(0x7f0000000240)="7248bb67cf010e547747e062f81e036602cdb5fcffa96a503f1bba3ef327d7f47280d7fedc9553cb43b36a959e83a1a7f4640964efe548708b8b620dd96be714844ad11c4f04f87382927e9d235ff84b0820f1d700e1443018184a905bb915df50185b99bac78132c602a851af4afffe73e9bbe7f268fb42319ca2a99c4a672ca066a9946f793a563500c4bf85b2644e5ed9c3c874602d5c197fae86fe7e22213de9e762b635214692b8f69b87b7b46da0a05f8b66fa2ca9198da76afa305a941fb8ab7948b40d7202caf3b3f63f0ee6d701dc9054ba4fe7eb7b0e63d9a02e76074c88", 0xe3}, {&(0x7f0000000340)="9bfea6d62185b24ebf0f513d88c88305c92f6f8b46f842f9e0fede98170f29ae0a2271e451ee49b52dd9a7054439da8ba466dcc678c0d1ae95a318714c32c46a1b5f00ebd6f3a4bac64f4c662434dfe4884b57ec9d6c38a654c8db635794a7749137ef6363a844646913e5c74738b580c9dad5ac087fc721036915372c13b40b", 0x80}, {&(0x7f00000003c0)="74f023debda9fe2548d5a3256a0fdb224e77486ea38efa10c7889eec2d9cd338f376bd3b5dbcab55af96149aa9b97226d50d1946dac5b2312d850ae11c3d244d3e45bb6645974d7a07004711c17570c3ac355220070676fdf8a3adc343e7bf715633a2c383513df4a3040d9751d9508fa161fc1d036f793f5c0ead470c6a073b50a47a5cd9b21d924c36830fb5d7e39691385e1db2f3caacb671b9b0017f67a33beb21068c9095cb2363b5d76cad2f3d6aabedb550135f3ebffae4a4a21dcd52e79420e5791d610e6a423f6731b8294294b9a104392d0aabab03305ac1235f2371359054f552db3b2cac9c23af312826ce7f35fd87", 0xf5}, {&(0x7f00000004c0)="a02f1639c4d54121b60f019dcb880536ca332cbd1e5b5a02b0b2e34bb5b21c7ffc47b1397836528e8ce315cc104b835f1a2c7883359d275e9b015029227240f527cbe519921c3c05a57230793f25ced2230586ec254d563d98cfa075", 0x5c}, {&(0x7f0000000540)="66d6a0bb0f92f43b736bfde49c20067960b9df9615bf86185c1400cfec2baff1a39e387387d2a80e515361e7af8252ce520224820d75698386e9d7a2f87efaf0067aaeecb831fb699b8d2cc015d120946a0b42d8b4ddab99f44aa5e6526020af4e769dac6ae4deb0fa301da22dc336ea611a4f4e9ff38a0948614a6ec013ef24ad9663eac0022f5e0064196cefc4497f473473863523f193ea696a788a35f43074533bd64a2ed2a20d78bdc9eb2a61efe2a0d90aa2dd2ab1089976e0b0326ea17682fcf896d87e5b46d8a4579e1105fe82a4312696c1c38e3e2cf91cbb21d826e6b7aed4ec146d", 0xe7}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="6680a3737cfcc004089c4da3de0bca2aaea0e7249a75f235fdd564336658cc65b4626474716acc87b2fb614f5c74454f1e680f6a5a3485b4bcc13044aea7438fa360cdf772e7a11b87dfa36ea8e660d5dae4a1234ab4", 0x56}], 0xa) r1 = socket$inet(0x2, 0xa, 0xc9) bind$inet(r1, &(0x7f0000001780)={0x2, 0x4e23, @multicast2}, 0x10) r2 = openat2(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x208500, 0xcc, 0x24}, 0x18) r3 = syz_io_uring_setup(0x2fd8, &(0x7f0000001840)={0x0, 0xf0f7, 0x4000, 0x0, 0x28f, 0x0, r2}, &(0x7f00000018c0), &(0x7f0000001900)) connect$inet(r2, &(0x7f0000001940)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001980)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000019c0)={0x2, 0x9cb6}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000003cc0)={&(0x7f0000004000)={[{&(0x7f0000001a00)="1c9c8c1e839cfd1079e165b1f00f8ea051ce18b06e0422854ebb22b0d9870ae9b5ee68c10a29b8ff9443533434859e60e6e77b34dd3b95b7312eda4fcada9ebe5aba448ed2cc8d617a890e86b28e54003c93afed5d9fb44c98dd4c6349efbc1d30fd37599df9a212cec2e711f96ce46abe0f3ee3d4d0dbc21c1cefd5fb9edf1592447cf1725248b52c6c317afc9283b33af7a92cd512325026b3636a8dd41d60d1887e01a286280ed8cbee46a01f978e64eaa14b59f36f988dc3d7484f812b49ecf9dbae878b5cdcfc3c81474c6c2a0cfb20e842e6110f05340247d3ffbdce61fb07c74fea390d91c4", 0xe9}, {&(0x7f0000001b00), 0x0, 0x2}, {&(0x7f0000001b40)="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", 0x1000, 0x3}, {&(0x7f0000002b40)="93ab3b121d19daa7a988a3a9e38e194e567d44cc814ba93ba26f99e0da0e43f01ec66ba1abd9b42ff4174ef8faf663f047084d12ea3985", 0x37, 0x2}, {&(0x7f0000002b80)="2405254cc185a61b2d41096f28292291dd57acb59d96ed0f1774116c23d29fc5758956e2eb94e12263d2f6084f433705188a320a3d07f1048bcaa4998ad5cc49b8a9e85acd33d898bd05aa11941096673033616e270edc1137b5b9e69215578d95aefbf17d65440c2ffe1a50562dc2f115f66519643864083b28f17d0a73a49c5b8d1160e1caa67f5f846163e9f672824d41b575309c02799b861c589046e2963549f2ac617371ccbe52761ab4c69ff29d4234bacbb220198754b4a9ed64944c28e227c3748d1c705b4af5506e0a035bcbc649e84f53a64012d0fa17087fe842842078eec96b59684e4a1f6c9daa716448d7216c7676c74bd8367ad41a4fee90134e9b90e42dca6a882ba1616c05e10479469210460075802ca4232545671c42b303b079a6eab5acc20400ebe38be4ed9e6a364782924f3f501a9bde0470273af7145f74ac2ebee40e51b669229d13288e1fa5e68b8e8cacb681ac0c7aedccc3426617aebeba3c863dfbc98e88e463cb6ca4044e650bcae453aea8024690e48825fdee40e081869c483b355be8738c2b026bfe7e276712623f91755d0a75bbbbd305d2850ab7388ffc6bd4aa4c187fc46f3006bc3915b07aa72eaa7deb2815948d46296ea39e59a9dc093eebc405d102e88f2595c599f3b88516740fa5c15e21874b55bc29510f1ecae9c31a93d01a4d842d850706a5d94d288e2052596fe91986417638b585693d26e8802317d710726e838a7bb0eb9fa1e312cb6b0d203d74b0b458b02a21a71e09cf4e07b35fb573bff8d032c45025581b5be5dbf9277b03b30a0be22037c244569e1296d568606f4244264aad32bad4200af3cdf28ff2382eb36b676c31a9baeec0f1d5359c7faa1bef1cb544abca53fb4f68ec6128a9d855c287f0e2462e2eb649b7f7457e96fd1358082b48d1861167edd5c030b4bc45d4ebc5cbb10000d067eaa3096da1ddebef3574fa94e7c86f44b55267bfa4a615736a2283217e22e079c27e01abae192b8bf2608da607a695d2ce87495f68a22d8ff9ef065f6b19533ce67a5d061743ac623dc185582bcbaaa5e641536075674f9676d9e77b7871979f9fa9d419f861875bbbfb42ead69ff192da926d87ac2338559546ff09cc5bfaebd8633a75117b083bf99da803d162baee04e757869ca13a9337e6999d1eb873a33ac782856b8cc4dbd5778258e8829a7ad1732ce5c3f873bdded40b77779d4200c16c5fd3d3946b7ec1c4b267e1b2d65e11e6373c51de33aecb68c29ffa578c57fc3a4c77461648438b09098232867e485228bc676db88e1272ccb45a07b694621e57f75d44dd4b647ad250593dadb75114f61df739641f5206e332b4d06d066b0e44db4b226f13ba77b9878fec62768f21c4c59290363f287933400f2da4efd0072970bceb93a5988d78176e71ce59e5b14384d3c1d317b135c3cb3c90bbc7157a918e6ce03ad67f9d3213fd2cf319c54a1c94fc2f8defcd84299fe0447f7cfad0c6567359ae0cc77b2b0b99fc84e0105fe708fbd432035490b6c6fa12ef2ca3b21e7a27a0e92568193fed3e776be102c38d21f26e841205510e2d07c225a882faf48a04f63666f6475a85f616188055cb2c798011484520d671eed30effbba5ad189a96f2c49e2b7efe2c13c55373e83dd73473f349c9524e6d2a404476dd1d5be9fd24c8dcfbd238bc79e714dbd69f55eb4a87507c0cfecfe13e8203f89b7743e92bb977e47f0e6fbb28de7f246956d4faa603f5fbc4d641689bcebd1a19c047190a43288d499731a57b12953e0bdca5c75925793168905e592a186e42364388bbb126b0adc24c262f57b20400ff7d68e1513313f5ad41a22154921f0c6cdb444bc843165a18e12d12cfa786d9524a821925be15863e05b7818a77b34fc0c78abdee1f3f81954015150ef2c5bc9413e5057ff08ff0809c4101ba65b00e0b80ac98a61954f5e0cd0193f903a7b3b88314687c36282e8cfc3c47635152110459b805a28afc19833fbd7f74c035c8eec08c049e36382c58d612179c4acb39f6aeafbf5ca0ffb7249fcad0c512c2dff1ae9088cfc11c3b9adaa74334f08457dc980bb5be1e1cbcfacdc382481f34d956ac5e7a257d98ab924b77325b22360b7c65902072ec193e3e4fe04aeace543c636ce8038177fcb6a0bc63e5ff82c92aa129349d259e03c495e263afb367c525944a39a5b2eb8ad0ffc82f59e428200a6c0ec2432d73a226af25fa29b040f4969b8ea009dd5879558392146e21fc4b76aa5973f2d61152bb1ecc7ecff0fc450c35720b0f90aff35633ca03e1529fad8cd20ea574725f2b66701dcf55fee759c9d4559d4195d5a743c364f6a1733d8323ae89496bdbd5e534f6082748e060d633226441c00077bdff6e13f5847986af626ca0df072c3f205d947215ff5613b6ad3cb93bd1b2cb2411bd76adf7d887386b62eba31a8dc5f88331e2342c3a4b0905aca7c58536cf6661dcd13eb255571ff07f04c4f810174237d6104aa3452075a9f4b93cc5936636e3918dbd0a8b2f443159bf55e6284954f789d979dccc135e9fc9f7157e25761a0fc365c4a131b660609dd733655f2acf0adf6f845738634c896140086846226f67fcf08d96f86e5b0e56e2a7aa4d06e6c3ecb4378f80b73b57535021cd174f42ba4c7d25a8e85e3e7b50bd2dbc35415cb5a259fa5a9356a0ad0a3af0f6a78654d9a7123e23e71ef3c6a518a16684ab2fbf24f177c648fa17d56d30a36e2af15b233aae89b1c093b097faad212fe040f8523f842903763e43437652a65ef7bb2fa0fad673d0640622c12ee851e1eb06c105dfbf09a6fa7f3bf0ee77531f50b5f3857f6e29977e8d5c0d5e64ad670f32e9eaa09a50b3728b200db00c08632e48449b0de828e6ee11596b57a4799966921e5b825b5d821c4d0e36e0e94724a84584eed1301dadcd516a3a37d4add49c413214dc86e70dc06590b60dfb5159e3f8d5615656a1df7a6e6fc9eff2607b556060adb7dc3b78644caabf7a3fe6292249bd8680509a371249e1dc8187ed476b1a13d79daf2cd910ad84d2c68a62e0a8c0125c7ed1b3df82b4610cbbcc7e1d694aac04fea23cef64dcb48f5445227fbefd01b252395f99c39470c12fe022797f7cac7aefb97d79ad06a0e50a06bcb2dfd3962b1d42657ba323cb15521bc619bd22219fbec92b71b7bed0f717cc29e7b7924a846ad6607ce47da2e97937e22ff536eaea8da6b70af854c07e719f24aedfcd3158fe951ec93921ed8cad8f1334a24ea6d80e23e87efaa4be962593752b658ba4dbd13052350a54b971228403d5e9a1c8b6d0065c57f8d75617e2fd59e3a403a20fe61b393c64e05510bad2f36171252fac71a0fae600f01863822cb7f4e18b43f23a75e7c6a7a97e047ecf250f727741465ff92d664a71e9aad4960513bd8529d73c61505d90700e22a9faf0c10b77caf1cb0329eb42cf3ec24dc434c53fd9b2a9f58c39345ec0eb0b72fcef7085a5c1ee6789c9e050ffebc41151ad3ac9c137f8f7156165d8ec82f1a238c3f2f43b883885189df9d243d1d55042116e9f12fbc9b2fced1390ab84750fb832ad92e6526f75e19ca877fb5310191ca60c20515925981757789da8ecbb2b93cf04eed81f71dc279994087c6564df54ee0befd2efa0ae81f44d841d66ec7e777460322690849adad74db54644a7e875a4548bdd274725fa9edae555e4b47b8f6569168ded42aa36ceabc884ed061cc33522aab5c03d959987e8f85a5b6f07fbc51d87ffe7c64d98f80314b6df5fedc6f4ce54f76513777da7fab8b5ab217f816aa254f09a065e236f11c320271c1dfa53d3bae0d920486ce2a35ab2982db4ad408a25a0866a8631059e81097f654a582512b9432b413e01c1db2a32dc6d4bff981955dd99d4a823ee71135cbe487b04196bb20698070a38f720ae34508da1ce5f7bb94b16fa6beeec52f0443ad9bb3238f0ab9399a4a8d57a603de8bc82f03c962589cccb49de1691057e3e8df7c1e845aed784033db442a33cb8d392b87fa66dab2d1071ad6adaf3ac0b54147db9a85e2cf27cabfa5afb57bbca582fbedfcba4998a75c7b5eddd04962fa5d45654a03d443647e5ebd8c80008ccb6119b962ff7d871508dce607d17818db7f081037d272ba82bdbb8f6a0ce0258ce2802e3f19bde701dae3619d4d59fd20ecc8e1ed9640ea5f60080229760d3f11930e2ee115cc4f8e98c4ac14253e29372161b596ca221156993c1df6df7ad48000dfe3570689889fa8a8b3b6b680b4d13ddb0035112569e7fb4d636f8817ee1227e68426cc624e37df8630a33243aefecf79e51d6939f546bf50c87a5224b12db4facd5aba2bd956d82002e71b6cb5f29acced39e775fe7c0c5c35e3f7c69f1002f2f2f85da3aea60bd8855513b75808aa8e2fb91140cbd29d924aa58ee83578fca2436eb56f11344eb21dbf6a4cfb61d6849da85d7c5eae49b60cc4555a23e1c6000e923a42c1c56b9c213715d0885321af0f0843be7aa60f13c5055ca9c9ef3a36ef977dd595139af7693cded83489c761077874626bb9765d331b7afbaf5b6c3481d83437a9c9339aab7f0422958df1f4da52334077ab92621e4482a4c3cefe21d161f8a2921fc2fe059d7700c63285ffbc5293ebd90ef0d0108e26620c1f9355c316df36747398512faa50a449f093e9c63963f8104bc9e40d0ecd77eed8819ac4b9160b940dbd57b3d8c43a45492409a05fbbd5c01c1afc002ef4de0fd3c96f7ce6cb8cc3c81956de74cb18fc6b049ab3448f18d408267c7c14d72e9aad1174ab15a0ccd58d424451297abdec8926885566fdb0285ace994f65657e1b773a0598570ab6191b62d79765e4bd4e0cb1322e82fd17cb020946d04b6ae16db17ea9a965d3068f81c0e5c174401d5f1b2715c1757a4d0d6fd330971ea89b8db785b55db1c21d19c834c52b0354dde5fc90c17e85bc87ac2827e1173b7f90fdf6a7bb67d9dfca6580888879ffcc9b8032d71e59a3e4a3354fcb5268028d9c9da8b2a43ec6007aeda3e2627d6de82382f8e875436967c995d47baa8a95b79fc5ed0eb2caec05a386a91075f8224cf6af003a37319edb37622d39db4e934398ba46291760a6e9347578b4dea2c6afb9af4dbec9949e1c2564bf057cb6668cb93b245198c17fb6dd40a39e672fbe58861d6a16f692144fa61394de0abea35e2bdba183e3e31f92d716f07ad1805ad22b70a634274f7fdcf922156798bb9f2c83dd510fb43a8c369bcdd6ea9eabf3f2c2fa084fae52bab69ee92d140b8b505c85965bbd7a8486d48b714c21e0f0015b940d543c135dbb3e10cb537e3199806d78cfbc0c9f63b8d87e5d07c449283d0c07e41fa5b6b3bb884a6074944d9dd699968aca79c6a5d78979c6c047248f46eab2265509ca1cb3387c3463f1157de859877eff2d6a5d77911182c97f27198ec84d1dc7e1d9050e2c7d5f291b3eca7ad700c5ad221ba92a317d47352b4f78b5a419db3035d569f492b2336648d56cc928abc932a371e073c480990d102517070ad6a9cf0e27d22577c7191a879b65ed26375eaef4dbbfb81fd3b3d0ec91d372dd93750fbb34439ee552e331ec8af07538d20f3a15b10e0afc90b13b6c361d86a828fee1ebc308c9950aa3e44356a383129d600b8cfab403879c2c2b617534f60e491ebce412d18246fce64fe56156658f671b4769c47a6861473c2e3b05a77e4dab8580fe3b2250d0a380565e9484932e79b962c94f2c96b217cc315a65c1ede3f8a1b1d04b3c101486e99a00ee433", 0x1000, 0x2}, {&(0x7f0000003b80)="469292c28c2c64f741fb0abf00a0f3d39baaa9652991fb643c58349a2e4c881fdd7a1952", 0x24, 0x2}, {&(0x7f0000003bc0)="ddd76bd12879351f65231c29dd474ab7a7f805615c8c63344ecbb94b1a7e6eb484d5a6514a79acade96d0c3a871d903d7d8fe7039808fcdb2e3d54788d6266a9aef81f0edac3b25270b97d99e171beb2cd35acb98009f41903ed82fbe03aa4f2a30614fc6b822ac9a4fe34d407abd42bf96e5be324b63150c093ff787021f0ef3b99b20fa3610288321e9faa2a0c72274595ded511165cc2881001d5f6ea9444761935ca3c6f6a4c3f21afc953528b758ec9e7a6ae4fa888766188209012bf9d3259b34e04ce5c62e637a445f2c64c200ab85d30b8af0ff9edbefcca5cf6822ba0f8bb5b2aac2bc864b85fb80bf2454c8785c450df3d2c36", 0xf8, 0x3}]}, 0x7, 0x3}, 0x1) connect$inet(r2, &(0x7f0000003d00)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000003d40)=0x7, 0x4) ioctl$F2FS_IOC_COMPRESS_FILE(r3, 0xf518, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000003d80)={0x2, 'ip6_vti0\x00'}, 0x18) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000003dc0)={'IDLETIMER\x00'}, &(0x7f0000003e00)=0x1e) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000003e40)=0x3, 0x4) write$tun(r4, &(0x7f0000003e80)={@val={0x0, 0x10}, @void, @llc={@llc={0xfc, 0x8e, "ff", "db1504b3357defc62b1d72ed76d6c1d9c0993061696e9a5d6e46617c73c9fd9dc11eb050a803a23107cb440d822dec8e9d47d5cfce0fce8584de25c639082cdc1987dab24c6240f03c53f717f51b6a66571dbc467723728720de7090d8"}}}, 0x64) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000003f40)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000003f00)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000005000)={0x9, 0x108, 0xfa00, {r5, 0x2, "a50f7d", "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"}}, 0x110) newfstatat(0xffffffffffffff9c, &(0x7f0000003f80)='./file0\x00', &(0x7f0000005140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000302, r6, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000051c0), r4) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000052c0)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005280)={&(0x7f0000005200)={0x7c, r7, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x91}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48001}, 0x20000044) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000005300), 0x4040, 0x0) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000005340)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x6}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000053c0), r2) sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f0000005480)={&(0x7f0000005380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000005440)={&(0x7f0000005400)={0x24, r9, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xb3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc801) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000005580)={&(0x7f00000054c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000005540)={&(0x7f0000005500)={0x28, r9, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x33, 0x6b}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810) socket$nl_route(0x10, 0x3, 0x0) 1m14.930650071s ago: executing program 5 (id=651): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000100)={0x2, @win={{0xe36a, 0x5, 0xfffff9b6, 0x4}, 0x0, 0xffffffa5, 0x0, 0x10, 0x0, 0x60}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000019180)={0x1a0003, 0x0, [0x2, 0x5, 0x8000000000000000, 0x1000000100000000, 0xfffffffffffffffd, 0x2ad, 0x0, 0x7]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) chdir(&(0x7f0000000280)='./file0/file0/..\x00') 1m14.691472555s ago: executing program 5 (id=652): ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x3}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = eventfd2(0x2, 0x80801) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x0, r1}) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f00000000c0)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x80, 0xf8c8, 0x10000, 0xe80, {{0xd, 0x4, 0x1, 0x4, 0x34, 0x68, 0x0, 0x3, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp={0x44, 0x20, 0xf6, 0x0, 0x7, [0xf, 0x46ae, 0x4, 0x8000, 0x4c23, 0x80000, 0x1000]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x40, 0x7800, 0x600, 0x5, {{0x1a, 0x4, 0x3, 0x9, 0x68, 0x66, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @remote, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0xc3, [@multicast1, @remote, @local, @dev={0xac, 0x14, 0x14, 0x36}, @loopback]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0x9e, 0x0, 0x9, [0x3, 0x8001, 0x9, 0x2b, 0x1]}, @lsrr={0x83, 0x17, 0x97, [@local, @dev={0xac, 0x14, 0x14, 0x44}, @broadcast, @dev={0xac, 0x14, 0x14, 0x44}, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7c9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xc}]}, &(0x7f0000000400)='syzkaller\x00', 0x7fff, 0x3b, &(0x7f0000000440)=""/59, 0x40f00, 0x25, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x1, 0x9, 0x3, 0xb9e}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000004c0)=[{0x2, 0x5, 0x4, 0x8}, {0x5, 0x2, 0x3, 0x4}, {0x2, 0x2, 0xc}, {0x4, 0x3, 0x10, 0xc}], 0x10, 0x3}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002580)={&(0x7f0000000100), 0xc, &(0x7f0000002540)={&(0x7f00000005c0)=@newchain={0x1f44, 0x64, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x6}, {0x8, 0xffe0}, {0xf, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x16, 0x41}}, @filter_kind_options=@f_bpf={{0x8}, {0x1f10, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x14e8, 0x1, [@m_ct={0xac, 0x1e, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x2ac}]}, {0x79, 0x6, "16fdc5f51ed15e5abf5f43537ee560ac87233e518b8d8cd8183c54f7266dc57af6a0ec90cb98252fc6cbde8ffe28c9cf6b29d9d4be6499a76c78c15433ce490e41a05c91d64a9f58f79a26b6c8d682559611b598e685da4e4864528926ee124c444fb36713519435dfbb0ab0fdf3b4cdace2b505a3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x6}}}}, @m_bpf={0x148, 0x18, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x3, 0x9, 0x7, 0x7}, {0x1ff, 0x0, 0x2, 0x7fff}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x6, 0x6, 0x7ff, 0x7}}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x2, 0x4, 0x0, 0x8}, {0x61fb, 0x0, 0xc, 0x101}, {0x81, 0x6, 0xf8, 0x2}, {0x2, 0x8, 0xae, 0x5}, {0x6, 0x28, 0x3, 0x59b1c000}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x101, 0x3, 0x20000000, 0x6, 0x3}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x8e, 0x6, "588161245eda38cb33980c6787ee885770810218a1be3818cea3df3b5555c6b018e6552904493f3357cc8458dc418a55d2d1a7b8af344910888848d46c4f2fad987bb5d45b66444052ada3ee01da457b9d02bd78ee3eb0a228316c2798819c19b7251f316f56e39b509d620d2ee040e7113867b84344b93b3785e673b436193638d111be3bfa2ea1a10c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_sample={0x1058, 0x6, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe87}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5, 0x1, 0x0, 0xfffffffc}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ctinfo={0x108, 0x2, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3c06ab8e}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0xca, 0x6, "bbf9acec3bb1b5617563ca07558ff373fd085e0aae4d959ffd36b5aed1b06457713ce47ad9bbb63392f40d886cbafb96cd7d37fea28c45b51eb1b08540a01e8c90067147b603041669695f8dd49a5ef12b77294a1e3a3521fcd9b7b8aa28e8db8402ee1e20c6a0d4e3d4be17c1a4ad1b578c186068401dabae57df56555b8d04a35ec72ededd6c594bd410a92f9ae5bb35faa69db501267a5007437e02605f7113c2db02694aed89d5aa68f816a15cf30e7b2333e7933281b61cf522449d781e34ec3106c8a8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_pedit={0x190, 0x0, 0x0, 0x0, {{0xa}, {0xb4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xb0, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0xb3, 0x6, "8113e8884530094482bfbc9018f3227cb01d205a30bf35fd506d9cc11893c9ef2487f3528f945c85237bc7acd0c7cb767929f0be26ae43fd3964c0d191b1c4e1424a3468a9be8f36e69e04512774d430ad2ad98362635203a370d9ae3b7a7a37125339f42099d2b9abd170f3bfd483284b4deeac65835440ed5069632f0cd72d66fee6cdde0f7dd50cd959d6c6cb0b907247000dd77bdae5f6e6483fc7ccfb4df5facba50c4b5c923568b4fbadba67"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffe0}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_ACT={0x5cc, 0x1, [@m_mirred={0x168, 0x10, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4, 0x7, 0xda, 0x8}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x28000000, 0x8, 0x10000000, 0x723a, 0x31}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9, 0x4, 0x5, 0x5}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8000, 0x8, 0x6, 0x6, 0x5e9}, 0x3, r5}}]}, {0xb9, 0x6, "61940c6ff6cce9e3f15dfd2dacfce770134dd054a9629fa699e12da90e46a2d4681c8d3735889651fdafd6d49c34a0d8c6b90cf4c8dd608c71711709e2e054212562e9817d217676b2da5714522977cf4ba0859d16981c932480ec6ee17d5f60facd62c4c73a982346753b5dc191e64cbea1e915255f4449584da39425bfbaa2623c512813a05f1a31e647be37edd422058c869e5db2232c6ac8c7c9dfa3b21262a92bcc525505a2655fb6571ece0e84010dfe4883"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x6}}}}, @m_pedit={0x6c, 0x9, 0x0, 0x0, {{0xa}, {0x4}, {0x3e, 0x6, "c813c94126a6274ba6547fc17a006e6ab208184fe1c04a8b56331fba904e8ecddbf6c20bcfbc85922c0062dd5f5a03ae5325166b10ce69f70bcb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mpls={0xcc, 0x15, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x88b5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88f7}, @TCA_MPLS_LABEL={0x8, 0x5, 0xe8529}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}]}, {0x76, 0x6, "8fbd9246b13197054794e611680d66840a183539bba9a94538a936c8b964521d29ef9b62b3b7060752fa87398aba67056b7081238e1127d458c20d6164ad92e0b231c8bd734bc826dfa65e6690abbfdfd481a051de52614049cbc2afaa0c10d560e2d491cd80f9ce8fdd9ffdde8756b9401b"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_sample={0x100, 0x2, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x6, 0x2f2d0940d13f6e6a, 0x3, 0x5}}]}, {0xaa, 0x6, "cee6ce58974aca5c5c668e344e074fd108fedf8957d9d49bd13c0d076703c7b97e56008cb921990140be773cb2dde25045ab4722ca1e4ac9fdbaa1b694caa85c103ab4bc27e4725d5be60f893858070aa72ece564fce2a31a78bb4271a5e2080edb7d5fad7fe7b43afbc181fd67808ee8096e068d76a7478ece7cd1c0710cf32da44681c8d7dae6d9ddd4c3ab2b14b6672df53750abd290713aa6562bc6eba002d342a966fe6"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x94, 0x1b, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x5c, 0x6, "5c7be9ff8e26b466c810a0506bad930bcd566a738342e76c821cff5c994a819d5fa92e609039e1f1593d027851db18eb2a4185f65ad60b579a2be0eb35382f9e8090331ed21396227562cb158f3015987941e23fce610707"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x4}}}}, @m_nat={0xb8, 0x11, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x2, 0x20000000, 0xbf0, 0xf49}, @multicast2, @rand_addr=0x64010101, 0xffffffff, 0x1}}]}, {0x68, 0x6, "c9b5d998a99b8fe7e29c7738540c2085287369f4d538ac2c3e8c21f6abca466bca7347f7473dda17d44d085603a475ad224bbe8b0741669bd0fe9eb8ff42c98f2c0edfcb69974f195452d89e2b14563a0340b8ce41b71d6c18e11585f5d510423635e64c"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0xdc, 0x1, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}]}, {0xa1, 0x6, "7ac3a3ef2382fe8013987db2ea6f081630ccf8a79b87ee63d6f77f2dd98557f2e271927ddc140bda0b145c681b36e71e58c8950614865299ff2397f86ed81c7e03ab5bff87470c2b6b0e97a1659dac8b535c07da03ef3c0ad6b0c778dd1e7e26f0202a63397eb3a94162926a02eaca49819d5ef2027e28d55a8560718abee018bbe81025405ca17c57756b191404a80099e293986373da4379d28ca6f7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r6}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0xff, 0x6, 0x7, 0x2}, {0xdc, 0x59, 0x7, 0x2}, {0x9, 0x1, 0xf8}]}}, @TCA_BPF_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x1000, 0x6, 0x4, 0x2, 0x2, 0x7, 0xd0a, 0xfffffffc, 0x8, 0x5e3f, 0x8, 0x0, 0x9, 0x9, 0xe, 0x7, 0xa, 0x2, 0xff, 0xc, 0x9, 0xfffffff9, 0x0, 0xc3b3, 0xe5, 0x9, 0x1, 0x9, 0x3, 0x4, 0x101, 0x5, 0x4, 0x7fffffff, 0x1, 0x3, 0x4, 0x10001, 0x80000000, 0x2, 0x2, 0x100, 0x4, 0x4, 0x948f, 0x1, 0x0, 0x2, 0x0, 0x10, 0x8, 0x6, 0x8, 0x81, 0xf30, 0x1, 0xff, 0x204800, 0x80000000, 0x6, 0x7fffffff, 0x3, 0x8001, 0x7fffffff, 0x858d, 0x8, 0x8, 0x1ff, 0xbf, 0xfffffff8, 0x0, 0x80000001, 0x4, 0x4, 0x3ff, 0x6, 0x9, 0x632, 0x2, 0x81, 0x9, 0x2c0, 0x76844bc2, 0xb6e2, 0x4, 0x222, 0x0, 0x7, 0x4, 0x4, 0x3ff, 0x5, 0x401, 0x3, 0x5, 0x8001, 0x7, 0x1d, 0xffff, 0x2, 0x8, 0x5, 0xfffffffe, 0x8, 0xffffff43, 0x1ff, 0x2, 0xfffffe01, 0x2, 0x3, 0x5, 0x3ff, 0x800, 0x10000, 0x4, 0x1, 0x0, 0x2, 0xde, 0x3, 0x29, 0x3, 0xffff79e6, 0x1, 0x8, 0x7, 0x1, 0x4, 0x4, 0x433c, 0x9, 0x6a, 0x2, 0x4, 0x6, 0x2, 0x41, 0x1, 0x4, 0x3, 0x7fff, 0x8, 0x6, 0x4, 0x80000001, 0x4fd584f8, 0xff, 0x4, 0x40, 0x8, 0x9, 0xfffffff5, 0x101, 0x4, 0x8ea, 0x3, 0x8000, 0xb, 0x7, 0x0, 0xd884, 0x8001, 0x3, 0x8, 0x8, 0x100, 0x7fff, 0x7, 0xfffffe01, 0x3, 0xe, 0xf, 0xb55, 0xffffff00, 0x80, 0x5d2d, 0x400, 0xc, 0xb, 0x2, 0x5d, 0x9, 0x9, 0x224, 0xfff, 0x30000000, 0x0, 0x40, 0x4, 0x0, 0x6, 0x4, 0x7, 0x2, 0xff, 0x3, 0xea3, 0xa642, 0x7ff, 0x11, 0x6, 0x3, 0xf, 0x10000, 0x0, 0x40, 0x0, 0x0, 0x5, 0x3, 0x9, 0x616, 0x100, 0x574c, 0x10001, 0x8, 0xc, 0xfffffffe, 0x2d, 0x0, 0x8, 0x7, 0x352, 0xbd, 0x800, 0xfffffffd, 0x9, 0x7, 0xbb2b, 0x5, 0x9, 0x8, 0x8d, 0x3, 0x8, 0x101, 0xe95d, 0x5, 0x9, 0x3, 0x100, 0x1, 0x81, 0x9, 0x1, 0x1, 0x80000000, 0x8, 0x74, 0x1f, 0x2, 0x2, 0x7ff, 0x0, 0x4]}]}]}}]}, 0x1f44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000025c0)={r1}, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000002600)={0x9, 0x6, "1de3a97073e46b37b14e3c442f5371b46520f53213214c890cf34d823bc59d31", 0x40, 0x1000, 0xfffffff9, 0x3, 0x77a4537907a5ecec}) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002680)={r4, 0xffffffff}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f00000026c0)={r7, 0x0, 0xfff, 0xfff}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000002700)={0x2, r8}) getsockname$netlink(r8, &(0x7f0000002740), &(0x7f0000002780)=0xc) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) ioctl$EVIOCGREP(r8, 0x80084503, &(0x7f00000027c0)=""/53) close_range(r1, r1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002800)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000002840)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = getpid() capset(&(0x7f0000002880)={0x19980330, r10}, &(0x7f00000028c0)={0x101, 0x4, 0x7, 0x7e3, 0x79a, 0x6}) socket$nl_netfilter(0x10, 0x3, 0xc) read$eventfd(r8, &(0x7f0000002900), 0x8) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x1f3) ioctl$EXT4_IOC_SETFSUUID(r11, 0x4008662c, &(0x7f0000002940)={0x0, 0x0, "c3c977b2de5f30c631d4aa0fb9337891"}) socket$netlink(0x10, 0x3, 0x13) 1m14.202161368s ago: executing program 5 (id=653): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r4, 0x0, 0x1}, 0x50) r5 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r5, 0x82000000) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x105001, 0x0) ioctl$CDROMPLAYMSF(r7, 0x5303, &(0x7f0000000100)={0x3, 0x3, 0x2, 0x5, 0x4, 0x62}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000002a00)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 1m14.136745504s ago: executing program 34 (id=653): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r4, 0x0, 0x1}, 0x50) r5 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r5, 0x82000000) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x105001, 0x0) ioctl$CDROMPLAYMSF(r7, 0x5303, &(0x7f0000000100)={0x3, 0x3, 0x2, 0x5, 0x4, 0x62}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000002a00)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 25.838777121s ago: executing program 0 (id=1039): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x16) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r3}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x0, 0x1f}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(0xffffffffffffffff, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) (async) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x16) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) poll(&(0x7f0000000180)=[{r3}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x0, 0x1f}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) (async) 25.788539022s ago: executing program 0 (id=1040): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x2e, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x4, 0x8001}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x30}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000180000002cbd700000000000080012000000020000000000000000000600000000000000fdffffff00000000ac1efa01000000000000000000000000ffffffff00000000000000000000000005000500000000000a00000700000000fe8000000000000000000000000000aa000000000000000005000600000000000a00000000000000fc020000000000000000000000000000000000000000000004000300"], 0xc0}}, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0xa0, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4045}, 0x4000) 25.678392286s ago: executing program 0 (id=1041): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000080)) 25.677751166s ago: executing program 0 (id=1042): r0 = syz_open_dev$dri(&(0x7f0000000780), 0x2, 0x8000) r1 = socket(0x2, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x27) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @rand_addr=0x64010101}, 0x4, 0x0, 0x2}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x325, 0x400, 0x0, {0x8}}, 0x14}}, 0x4800) r8 = dup(r3) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_INTERRUPT(r8, &(0x7f0000000000)={0x10}, 0x10) getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=0x0) r10 = accept4$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, &(0x7f00000002c0)=0x1c, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x29, 0x7f, 0x5b, 0xffffffff, 0x50, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x20, 0x40, 0x7fffffff, 0x3}}) r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r13 = fanotify_init(0x81, 0x0) fanotify_mark(r13, 0x105, 0x40001032, r12, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) read$FUSE(r13, &(0x7f00000057c0)={0x2020}, 0x2020) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000500)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, r11}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',privport,access=', @ANYRESDEC=r9]) chdir(&(0x7f0000000540)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xd, 0xfd0, @udp='udp:syz1\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 24.772660857s ago: executing program 0 (id=1051): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 7.538151568s ago: executing program 0 (id=1054): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}}, 0x1c}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x4, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x7a, 0x558e0d31, 0x5, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x200005, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x6, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x9, 0x0, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x5, 0x6, 0x7, 0x7, 0x1, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x209, 0x81, 0x7ff, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x4, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x271, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0xfffffffffffffffc, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r8}, 0x8) r10 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r10, 0x0, 0x0, 0xfffffffb, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r12 = openat$sr(0xffffffffffffff9c, &(0x7f00000004c0), 0x1018c0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@fallback=r0, r9, 0x37, 0x2004, 0x0, @value=r12, @void, @void, @void, r11}, 0x20) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000240012800b0001006272696467650000140002800800050001000000080001001c004aa0"], 0x44}}, 0x0) r13 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r13}, &(0x7f0000bbdffc)) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000640)) 7.534067895s ago: executing program 35 (id=1054): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}}, 0x1c}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x4, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x7a, 0x558e0d31, 0x5, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x200005, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x6, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x9, 0x0, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x5, 0x6, 0x7, 0x7, 0x1, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x209, 0x81, 0x7ff, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x4, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x271, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0xfffffffffffffffc, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r8}, 0x8) r10 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r10, 0x0, 0x0, 0xfffffffb, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r12 = openat$sr(0xffffffffffffff9c, &(0x7f00000004c0), 0x1018c0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@fallback=r0, r9, 0x37, 0x2004, 0x0, @value=r12, @void, @void, @void, r11}, 0x20) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000240012800b0001006272696467650000140002800800050001000000080001001c004aa0"], 0x44}}, 0x0) r13 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r13}, &(0x7f0000bbdffc)) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000640)) 3.486163376s ago: executing program 4 (id=1085): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'syzkaller1\x00', {}, 0x101}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 3.485791614s ago: executing program 4 (id=1086): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x8}, 0x8) socket$key(0xf, 0x3, 0x2) (async) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x8}, 0x8) (async) 3.420184212s ago: executing program 4 (id=1087): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xfff2}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44044}, 0x4048084) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/power/pm_trace', 0x0, 0x0) read$FUSE(r3, &(0x7f00000009c0)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r5 = syz_open_dev$media(&(0x7f0000005000), 0x7, 0x40) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000005c80)={{0x80000000, 0x0, 0x7, [0x3]}, {0x80000000, 0x0, 0x2, [0x2, 0x8]}, 0x4, [0x6, 0x2]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.149500396s ago: executing program 4 (id=1091): socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x3, 0xa07, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x6e, 0xb1, 0xd5, 0xff, 0xe41, 0x4159, 0x73f9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f5, 0x2, 0xa, 0x9, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x10, 0x45, 0x70, 0x54, 0xf8, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "00ebe7"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x2, 0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x1, 0x0, 0x25}, @obex={0x5, 0x24, 0x15, 0x100}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x6, 0x3, 0x8, 0x2a, 0xa8}, @ncm={0x6, 0x24, 0x1a, 0x7ff, 0x8}]}], [{{0x9, 0x5, 0x80, 0x10, 0x400, 0x2, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x9}]}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x2, 0x5, 0x1}}, {{0x9, 0x5, 0xa, 0x3, 0x400, 0x4, 0x0, 0x7, [@generic={0x85, 0x34, "32922a88c0d0a8c8bb973ac7df45a414b94425591fb898dd67a4cfcae6bdbd66650b77a98e43b27896a6eb1e09e6f10978cb39c1566c3c9855c331aa259806fd324e41a423f43f9733d9a8de2822016927457251d22ce909dbf8e03cc22352398ef6a5021bd06064b2551e1bff5f7d8bfeb2ff35d5e51999f160a4279a4c751874b63b"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x0, 0x3, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0xa}, @generic={0xe0, 0x24, "7c33a182a3d719ca7dc50d12d75a8f77fd4246e380e4292f66b033098ef873379e04a1145c41710a493675aedf49ba5452c2c03a7d0ad32bfde92af569c68c8d70ef9b5b0fb64ba626478324dde7e0f3aff1b063553ba4083da13762fd9b7a351629618da2b54411201bd6fb10c575a0a055033368d9feb2d65fdd9a675e0fc59737be86258164589da42c1e6aad6ed6126b220424b382507e1f21e1c701550f7773bd8fa5e088d60d61afa6f07ef6bd50d339ed5fc69211ef720206f53922350ca5a8442ae403abfa11de860972e04ae8745ab06dcf749c6b44b8b700b8"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x10, 0x48, 0x15, 0x7, [@generic={0xee, 0xb, "f3565c10fef332c7f03d152910bfc211cd66e7d3161b9bae2ee425712cb7aa5eae9b40a03851f7dd9388e0cb663990320baa6ea3a8074c7f42047efc7b3f8554f1bfc791c2ac7e7896dbbbb338ae9f6b402ef1d55215d248c0ed66f962a7c1fd7e87b348ef38c3ff0dbc99db1f8fd8ac9cdcaadd229b3b2afa42ce2731c447218b01f988e9a13be6fa1b5712d0298283a6d19dc082aebef1af9c3f985ed33bcbcce04bbd185d64c6f681467a69972c556d0c8558a0f31e6d0d568a6d66df17ec66f56c7e30f958f4106e055cf76311e5dd7fa7355620a9e4843bc022ef0c689947a1a91c7b9467ba2127fe0a"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xb, 0x8}]}}, {{0x9, 0x5, 0x4, 0x10, 0x0, 0xf, 0xfb, 0x43}}, {{0x9, 0x5, 0x1, 0x8, 0x8, 0x40, 0x1, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x8, 0x10, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x81, 0x2}]}}, {{0x9, 0x5, 0x8, 0xc, 0x10, 0x4, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x3ff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x5, 0x9, 0x2}}, {{0x9, 0x5, 0x8, 0x10, 0x420, 0x8, 0x3, 0x73, [@generic={0xf3, 0x8, "caf2273c9c762ebb7636767d624d7808fdc97b5a988bd7b81e5b056a48bc4e0342fb359ff702f0308ee2a6f63122bc4ebe90b213171f491ac0afddc544d8ce7c67d06ba22a7747cac4b5fb8799f9805cc7c05091fe5e31f3e45a2b69636ed054357addbc420583302c6ca6c5d834ea152321d731c2e3d2ee2b87a0f7a9ebffa92b2d0f89350e568ec9c1901be60739dc2347f06af000d5dad74c5a7170f3afe05cb18ffb61178c1ef2b112606f46f084f3f1efa3f08b2d80693be077a1d7c5c02bc7cbdada4f93883f89f3964b0db518bab9d8c1214fcd1dfa4cd5eb7c77c0abb58f4141aea1e97100a928ef0a8b9e80c0"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xb, 0x906f}]}}, {{0x9, 0x5, 0xd, 0x8, 0x200, 0x1, 0x6d, 0x60, [@generic={0xdd, 0x2, "ebd9090816ff3cf6f3e6d2bdfca385dbe29eea2ede207026844b0009e4996fc9ce5ab95ac16e74cac0a935783886d0a87b68f958a11dba9a6370d9b7397130ca7df4845742eecfcc255970716ac337e27c71c85756de32a9899ecfd0483bb89fab1c1e83ccb64d0bf060608c25f3245122d27d0ad31a50c27d7bb5d0a9f1a6bd0b3926572e0c005d31800b85a1a28c10a122baa8e41a1fb899622b0184f2e3eca3c69c218def5cd0d3b3fb0373464e11322c968fb164cf92a9a3d98ac8159e07219319eed0b7feadb75fa57cbea1158372346f4ba8728281c90b61"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x3, 0x9, 0x7}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x8, 0xfc, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x5}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x9, 0x9, 0x2}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x6, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4}, @generic={0xdc, 0xd, "39bebb54da1d1263d1125a41443021346342ef588fce14b198cca5a78e464dc822973a5813bca57dbeaca45a6a12a4c03ea3fbd94e1e9a6ba39c893e92c18121a505f117e708501a820360de54abef9c5b5031aa3f0a5063e9d64710699d494ca3e5b05bbb8c093355618e92729e092ee408a9131fbe2a3a4a11e1f22379fbe4747783471938c54c5d5ab89680bb757d98b82d5193e865969995c7834783446f2f65dd01835f210855398dd928c5726ed3614ae3e8a101454df575c05757c0a8b395475a7d3431ee9367e6d9ec1520e1fffb53ed079febed7a7c"}]}}]}}, {{0x9, 0x4, 0x4, 0xe8, 0x6, 0x26, 0x1d, 0x3d, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0x6, 0x1, 0x74, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xd8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x7}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x1, 0x7, 0x8, [@generic={0x17, 0xe, "138a40da316ddfb1dd70a7e0f1d33750ab731d92ba"}, @generic={0xd8, 0xc, "a33fa830cfd077ef7def4371bc29e87cf06231f056d0d9c346c2b5229fbdff3f98e5215a59664c2a6f942e73d4231477cf67165a9906e43e3a06c84c4fd0f6982a81c31f3789339371287ee859c818630ec14d0096af7f6c392cfb8a898a113d7f76a2a2811b8b67e161d8c8bf1bc2b3912099726b7c6ebbbae764c26cae64c8fcc8d70fd536a52abfacf9478a358c6d4df02d1c1a855a5f41f2b63859f9524a88ebbb703a982d8b7d684c91b6a25499612e98150f2d8e3ce6f570908eec338e323677338c3b1a16f5c8dc4dfab5df0bf2767d4d9a78"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x8, 0x6, 0xff, [@generic={0xe7, 0x11, "9d00e540b2973981a14b01443fc23a48a87dea5943b3fd7e5fe425ee7b74d159909303b05f25c1ca0ffd9d94f35a17550743d7c7a4af1727a0353bdc5cc62a7f1b84cace2454bfb6dab87a446f4df4a7d74f15f035805254b78af7759918c5060f31accc62722c83cdeb884aa891728fb228dfff000d5857b83cefffdcd322e89cd75661784913467985300b0143f1033d2cd3f2d18b664b5ceae0650fc47e52841e681aec806f55eef172690ffa1bb798b25eecee40adc7bc1caa04a17e067893892e90b1f542a1011a85908c69348c6d95b6e2845a66ce939cfdddfbcedcadef9229632f"}, @generic={0x2c, 0x31, "f03bbe95166c6180fb2519a41b6393b07bdd205aa7946f69b2c14f2e9bd7ef0df1e42d87f27b8914604a"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x9, 0x68, 0x9, [@generic={0xf9, 0x15, "f607862b98d62ab024c90efb8d96a02491fce75ac8ec8895b54981edd6b4df638eb5bd4259236cd73444d4c79dfe40a53e791295554b0643b7160fab7975ef187a5dd41f37f03f7df7cb8a7ca3e96ab6e70f7b216a98a335a7d16c783132508f31a3ef8722e97c3348b2233ce8fe2cc0236a5e9ec590096068505c4949536586623a738501fe48241bf0300265464d562fa6a3723383268d88a7361d5fef9dafb0c0eb5fcbfb87312d75cd6f65b4ca8410d51555fcc03cf9456dec5d37c40313efe843ab047d49d8da9d178068bda392804027780c964b580eefce721f615816a08c7e6120767796a72d9f19fc03070adc3b871d0e5acd"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0x6, 0x4, 0xf8}}, {{0x9, 0x5, 0x5, 0xc, 0x200, 0x4, 0x23, 0x3, [@generic={0x8e, 0x5, "3bc2de781c9c6b4c16674674b5eff21c76855e3be1ded0cd35a6f232d8188f84e5e75547e07bb1243bbe6d7207f0bb825daa44d87d39daa35fd35c1d2b3930b35b0be67092233cf65784785f595e7a98b3f1fc3fa6bdc19266ac00e86b7f8645ef4b6248c322d4f0ad99b219860881f7027912a70f500adf5ff29ea133556ec5173fcae0d4ba5ea66192412d"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x1}]}}]}}]}}]}}, &(0x7f0000000040)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x23, 0x2, 0x2, 0x20, 0x4}, 0x5a, &(0x7f00000001c0)={0x5, 0xf, 0x5a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x80, 0x6, 0x10}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x1, 0x5, 0xfffe}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x401, 0xff00, 0x1000, [0xff0030, 0xc0c0, 0xcf, 0xf, 0xff3f]}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x8, 0x11f0f, 0x100, [0xf, 0xf, 0x3f30, 0x3f00, 0xc00f, 0x30]}]}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) r1 = syz_io_uring_setup(0x10c, &(0x7f0000000140)={0x0, 0xb6e7, 0x400, 0x3, 0x2e6}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40, 0x1}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)="cfbd3eea802820d5c67337fe55f5bf1584678f413791ed07f6", 0x19}, 0x1, 0x0, 0x0, 0x60080d5}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd00fbffffff000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000090) r6 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}}, 0x0) 2.129778069s ago: executing program 3 (id=1101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2601, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2.028656126s ago: executing program 3 (id=1104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYRES32=0x0], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 1.939415412s ago: executing program 6 (id=1106): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x4) setreuid(0xee01, 0xee01) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000001100)={0x3, 0x10, [0x0, 0x0, 0x0, 0x0]}) 1.938974822s ago: executing program 7 (id=1107): r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000cee0202001a000000", 0x33a) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000791208000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xffff}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x2, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x2, 0x2, 0x8001, 0x10}, {0x4, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0x8, 0x3, 0x80000000}]}}]}, 0x7c}}, 0x24040084) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip_vti0\x00', 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.938470803s ago: executing program 6 (id=1108): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xf, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0xffffffff, 0x0, 0x7, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x400000, 0x0, 0x80000, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x4c6, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x9, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x800], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x800, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) setreuid(0x0, 0xee01) (async) socket$caif_stream(0x25, 0x1, 0x4) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) (async) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@allocspi={0x104, 0x16, 0x1, 0x70bd26, 0x25dfdbff, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x2f, 0x0, 0xffffffffffffffff}, {@in=@remote, 0x4d2, 0x33}, @in=@remote, {0xfffffffffffffff8, 0x3, 0x3ec, 0x2, 0x7, 0x6, 0xe, 0x8}, {0xe374, 0x0, 0x6, 0xf377}, {0x7f, 0x0, 0x2}, 0x70bd2c, 0x3504, 0x2, 0x2, 0x2}, 0x0, 0x1b1d}, [@lastused={0xc, 0xf, 0xfffffffffffffff8}]}, 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) 1.866910003s ago: executing program 7 (id=1109): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff80850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000009c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f0000000440)=@ethtool_cmd={0x9, 0x2, 0x8f, 0x9, 0x7f, 0x2, 0x81, 0x7, 0x5, 0x62, 0xa, 0x2002, 0x0, 0x1, 0x6, 0x1002, [0x3d6b, 0x443f]}}) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="030f000000000000000007"], 0x48}}, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1, 0x1}, 0x10) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}}}, 0x10) close(r3) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r8) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01030000000000000000010000000800010014000000080003"], 0x30}}, 0x844) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x200) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r9) 1.865458357s ago: executing program 3 (id=1110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0x40045304, &(0x7f0000000540)={{}, 'port0\x00'}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'pim6reg0\x00', 0x2}) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) (async, rerun: 64) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x481, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1f, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="183c00000500"/16], &(0x7f0000000680)='GPL\x00', 0x7f, 0x2, &(0x7f00000006c0)=""/2, 0x41000, 0x7b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0xc, 0x7fff, 0x80009}, 0x10, 0x0, r2, 0x9, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x1, 0x5, 0x3, 0xa}, {0x5, 0x4, 0x0, 0x9}, {0x5, 0x3, 0xd, 0x2}, {0x1, 0x5, 0xf, 0x7}, {0x2, 0x5, 0x10, 0x7}, {0x4, 0x2, 0x1, 0x8}, {0x3, 0x1, 0x1, 0xc}, {0x6, 0x4, 0xc, 0x4}, {0x6, 0x4, 0xfffffffe}], 0x10, 0x1}, 0x94) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000740)={0x79, 0x0, 0xc}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f0000000200)={0x2, 0x0, @ioapic={0xffef1000, 0x4, 0x0, 0x405cb96a, 0x0, [{0xf, 0x2b, 0xe, '\x00', 0x5}, {0xf9, 0xb, 0xd3, '\x00', 0x10}, {0x33, 0x54, 0xfd, '\x00', 0x1}, {0x1, 0x2, 0x5}, {0xf7, 0x7, 0x5, '\x00', 0x5}, {0x5, 0x9, 0x5, '\x00', 0x1}, {0x0, 0x5, 0x1, '\x00', 0x40}, {0x4, 0x7, 0x7, '\x00', 0xe}, {0x6, 0xfd, 0xcc, '\x00', 0x1}, {0xff, 0x8, 0x1, '\x00', 0x5}, {0x5, 0x6, 0x9, '\x00', 0x80}, {0x69, 0x4, 0xf, '\x00', 0xf7}, {0xe, 0x5, 0x0, '\x00', 0x6d}, {0x1, 0xa7, 0x2}, {0x5a, 0x3, 0x0, '\x00', 0x3}, {0x4b, 0x4, 0xd}, {0x4b, 0xbb, 0x0, '\x00', 0x6}, {0x80, 0x20, 0x2, '\x00', 0x6}, {0xf0, 0x7, 0x0, '\x00', 0x5}, {0x5, 0xc0, 0x90, '\x00', 0x16}, {0x1, 0x5, 0x8, '\x00', 0x6}, {0x2, 0x7, 0x3, '\x00', 0x3}, {0xd, 0x6, 0x87, '\x00', 0x9}, {0x6, 0x0, 0x10, '\x00', 0xd6}]}}) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000240)={"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"}) (async) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000001940)={"a1b2eef50f49c87f5792205316d52edd63bf22394f3050fd6e4557064ee04116c6f680ff4c12800c2a2e4342013761420d3ad52d3014311531bae00c28f34ce42a80e7b1776c7801955b2a33bf8a27a02d81bb70100e7418827912b030f63dc53ed23df2a8857c61af9103412a760089b020f4a480316b35042765fa30a7ee4ec82c2429326ad2e5805810170fbc79150bf4f86df556bea1749a824c296f8739bf17a80208a176ce914e847ddebbebc54597b4d972f8f08a70ff78e254f07d842b0139b8647ea88dd92f019efe7f1b07b59d231e0cf33b74a4fdfff8ea7f6ac220ee8afbd66fddc0da746692ec460395dc52b21e598781e518074bd05042a7aa5f956e65b90515c9f3cde548f0eaef9312bcc71ae84d1a715e61fe6fbc3f3388de42842c5428383044d2d7eb3872df28ef498f52b152621a5cab62601a5d54d2520216182ab389d848ccbcabf6d9993d07b4ef2bf275e1530b5ef3b859cde95e630e5c3fb73fcac9c5c1da64b3cab63f224474c7b1d87b4dfece5c53e630aab361efbd755f29e00f2d1066da13e85fc1a2d20f1c647883859924d857b91bae57bc547541f5246f1d7e4dfc421ebc8f03fb0f46a00481716f56fb1e0835c029512929c6aba5ec783f7a4014c8e05b9ee7fc8438f5fa50f6d17668200f9d0a182b7b854bd6edb79308809733bebda298f1e3a61516b9249e76b4ba73699406ab68b08667ae99a81acf54f65030dd5bb9e8f9ec99c898372ad9af01571c2eed64d529b66635e9a8dbcdd91083f7d21a16090421d010bdb7abd37cf2863a29fde8f5aadebc7b29d1571fca305d1007777a74267b4c2bfcc438f371cd73745f75c8e63631a8819c5e8c8fb5ae1020cc10bba5c990adc021908648bd02aa9140cf93b5293ee5888f20d2a6745a9bf03a395927f712dfa9544a7c94660ddfb0cde3637f5a4930122d6483b60ea65f9790fd2c395c81ced53802ee2681e32001593d497e354ada711ecd47dd10227d67e03b456fceaa661320ae6a60cc36772a867f2fcc171f232073f2412dac5908a202e45d2d44dc58098ca91eb830f330c4383751257fcbf000645fdaa689328bcfcdd8a4205bdfe4ea3eb8a079d08a960050e878476500a237ebb7441e1423a6541b26d7e43fecd654bfe57e4aab9aeaf75e65075d0d9afe23c3dc103355620a8e85f94d2a9d143d51ea8f8a5d3493032b325f686464ba8d09f217ac850ee22bd472ce32071abf0fea05c8b2b4c7e5f2e2f8b7482d85f180f6507441d9abd876557b2f8dcc3a9890e89fa74a85304da367ade62f33c1351a94987f3df176ba193da3853c3168b8ac3f6f6c1cc380d86c2172f4b1f7f09ca4124900b3c7a2cee2ee5dad237929e8abc92f932d70bd1f508dcdba4e2dcf8f4c39233c13e2e452d09b02de394b7a6f00"}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3c0000001000030400f9e3bde20064ff00000000", @ANYRES32=0x0, @ANYBLOB="00000000c81400001c0012800b00010062726964676500000c000280080031", @ANYBLOB="fb575afca3c3adcf89d2bc9e84811d13dea5a473ce24755a069033778f77985c40ca2fa3ce7689fcbb30bac6953dc34babe7e71fa40b6921edea8f3c0918ead3cdb95e1af84e165db6b9ba20da1e044b3678a389da6733ee5ee00573a335e593899755a6b30dbc16427882b7fe657406b54c21c937993c939f35a88858d2b7efeb02341d2466e5bf059009a27876d77626070e83480a0dbe13ee304f0b0b282f2f635423c86b2b0239f79ffb67974ea5924c5f61c83d4e1872b2d542", @ANYRESHEX=r6, @ANYRES8=r8], 0x3c}, 0x1, 0xba01}, 0x0) 1.797837414s ago: executing program 6 (id=1111): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r0, &(0x7f0000000040)="05000000010000", 0x7) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) clock_gettime(0x0, &(0x7f00000080c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000007ec0)=[{{&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000700)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000100)=""/21, 0x15}, {&(0x7f0000000200)=""/135, 0x87}, {&(0x7f0000000380)=""/253, 0xfd}, {&(0x7f00000002c0)=""/66, 0x42}, {&(0x7f0000000480)=""/41, 0x29}, {&(0x7f0000000500)=""/84, 0x54}, {&(0x7f0000000580)=""/200, 0xc8}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f00000012c0)=""/4096, 0x1000}], 0xa, &(0x7f00000022c0)=""/4096, 0x1000}, 0x6}, {{&(0x7f00000007c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000840)=""/59, 0x3b}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/103, 0x67}, {&(0x7f00000009c0)=""/186, 0xba}, {&(0x7f0000000a80)=""/226, 0xe2}], 0x5, &(0x7f0000000c40)=""/184, 0xb8}, 0x3}, {{&(0x7f0000000d00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000d80)=""/185, 0xb9}, {&(0x7f0000000e40)=""/163, 0xa3}, {&(0x7f0000000f00)=""/227, 0xe3}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f0000001000)}], 0x5, &(0x7f00000042c0)=""/4096, 0x1000}, 0xffff8001}, {{&(0x7f00000010c0)=@caif=@rfm, 0x80, &(0x7f0000001180)=[{&(0x7f0000001140)=""/35, 0x23}, {&(0x7f00000052c0)=""/254, 0xfe}], 0x2}, 0x1}, {{0x0, 0x0, &(0x7f0000006440)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/115, 0x73}, {&(0x7f00000063c0)=""/92, 0x5c}], 0x3, &(0x7f0000006480)=""/174, 0xae}, 0x10000000}, {{&(0x7f0000006540)=@hci, 0x80, &(0x7f00000065c0), 0x0, &(0x7f0000006600)=""/248, 0xf8}, 0x1}, {{&(0x7f0000006700)=@nfc, 0x80, &(0x7f0000007980)=[{&(0x7f0000006780)=""/4096, 0x1000}, {&(0x7f0000007780)=""/206, 0xce}, {&(0x7f0000007880)=""/254, 0xfe}], 0x3, &(0x7f00000079c0)=""/215, 0xd7}, 0x3}, {{&(0x7f0000007ac0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000007e00)=[{&(0x7f0000007b40)=""/252, 0xfc}, {&(0x7f0000007c40)=""/145, 0x91}, {&(0x7f0000007d00)=""/244, 0xf4}], 0x3, &(0x7f0000007e40)=""/91, 0x5b}, 0xe0000000}], 0x8, 0x40000020, &(0x7f0000008100)={r1, r2+10000000}) (async) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) (async) r3 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000c00), 0x71, 0x2081) (async) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000000)) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000000), 0x2000000, &(0x7f00000000c0)={[{@workdir}]}) (async) syz_clone3(&(0x7f0000001240)={0xc0000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.729381934s ago: executing program 7 (id=1112): clock_adjtime(0x0, &(0x7f0000001100)={0xd77, 0xbfa, 0xffffffffffffffe8, 0x109, 0x80000, 0x1, 0x3, 0x0, 0x0, 0xa12, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x400, 0x9, 0xfffffffffffffffe, 0x0, 0x4, 0xefe, 0x4, 0x0, 0x0, 0x9}) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) (rerun: 64) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="5800000010001fff000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="0918000000000000300012800b000100697036746e6c000020000280050009000400000014000200fe8000000000000000000000000000bb080004000005"], 0x58}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) (async, rerun: 32) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) (async, rerun: 32) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000001200010000000000ffdbdf25ac1414aa002608100a0e6270f3000000000022000a006c00e7b72dae43549183389afa827308eed06109b4c0aa6eab0b6f5a663c6b0b8ddbfe312457b7588e4a78eaa30d6453520963b73bf2b1ab02ea3d1aca11097ba86b24c88ceeaa5f827bc9b7f05917b914511625b1986247f4c9f4b4ef3df302c22905792310048d035ffccfb054a6c01f3a09338a7d235e298bfa993df3ed"], 0x28}}, 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) bind$bt_hci(r0, &(0x7f00000003c0)={0x1f, 0x4}, 0x6) (async, rerun: 64) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 64) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) creat(&(0x7f0000000340)='./file0\x00', 0x14) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) (async) keyctl$set_reqkey_keyring(0xe, 0x4) (async) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000040)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#$\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce\x19+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) (async) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f320908400f300f0826f30fc7b2050000000f32660fc775022e0ffa600c980f320f3566b857000f00d0", 0x56}], 0x1, 0x15, 0x0, 0x0) (async, rerun: 64) lseek(0xffffffffffffffff, 0x4, 0x1) (async, rerun: 64) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)) (async, rerun: 64) openat$mice(0xffffffffffffff9c, 0x0, 0x2201) (async, rerun: 64) syz_open_dev$evdev(0x0, 0x3, 0x202) (async) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0) (async) clock_adjtime(0x3, &(0x7f00000002c0)={0x0, 0xf, 0x4, 0x1df3, 0x100000001, 0x7012, 0x13, 0x3, 0x2, 0x7, 0x4, 0xffff, 0x2, 0x3, 0x3, 0x6985, 0x6, 0x6, 0x6, 0x8, 0x2, 0x403, 0x8, 0xff, 0x7f, 0x3}) r7 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r7, &(0x7f0000000000)=""/42, 0x2a) (async, rerun: 64) getdents64(r7, &(0x7f0000000080)=""/147, 0x93) (rerun: 64) 1.729038415s ago: executing program 6 (id=1113): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x42) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (async) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x4200031, r6, 0xffffd000) (async) syz_clone3(&(0x7f0000000340)={0x1000, 0x0, 0x0, 0x0, {0xfffffffc}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000026000/0x2000)=nil, 0x2000}, 0x4}) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000480)="64424a0c5467a3b51e95ca4eee744065c9cd1a9aba0a9a93e096ee5d79d60929f811a800192bcf828e81256df7c690dd12b7370caddf04c26a9a824ada4b6c18e593d4e9014bc0fe247d2fcab63b893a9cad22260049f14f9394f1b8a8456c9ddb5ac014a3137c9602cda1cf1f1a022469f9e2f6a699752d44a69b23f5ac90fca25bde69ba74c2f64cc72032fedcda47f85f269e042d51c7c69c4b4046ec19f28f39afc40f1cb74e552cc1551f24393b73e610f842a6562ec9b34b67d42bda0ec1b4939953fb6398eb2df34a31d832e2ecbe59c2865cf8ed9f2215ff6c546209ca0d0b9f6c9b50fe5a796a9bb7c4", 0xee, r7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.724711742s ago: executing program 3 (id=1114): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r2, 0x28543634fae43ad, 0x70bd2b, 0x0, {0xd}}, 0x14}}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, r4}) readlink(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000005c0)=""/15, 0xf) 1.669536612s ago: executing program 7 (id=1115): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xd8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b", 0x21}, {&(0x7f00000002c0)="d95e4e76ae94227cd4806e68a70961121fdbd5c951274027bdb27c8365bc317dc9930c7428fd71bab480e8273f68620ae24ec475b5db3d02f2e54c", 0x3b}, {&(0x7f0000000740)="87ef4187965fe8a64a837749533bf0be0fd00f4e940b9e0d597e59b9f3e48c6e9f6d36f2", 0x24}], 0x3}}], 0x1, 0x20048851) recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno\x00', 0x1) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x40) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="173f654e0fe4860330c18e710ea1d49554394911a2702998297821cee482c56ba3201911efb3bd9711ccfe9ae9e679ca8d657911bbd8830bb0fbe34ef13f901c795caa0e7ea8857a14b446c2d587d9f4a71bead0bac4aa6576992addb1beaf2c3d45694b67c142fdac5bb329a1221ca187413da4c2afea26a353684d169bad278046df0a2fb335759823946b557a88e5f6be393df31432709d2cae7e52951e3c070aad90555ad5e87ea78553177df1ec661dbd919b0d14c051d018", 0x1d4c, 0x10048095, 0x0, 0x34) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002000010324bd7002fddbdf2501"], 0x14}}, 0x0) shutdown(r0, 0x1) 1.669304443s ago: executing program 6 (id=1116): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c00)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000000)) 1.599807187s ago: executing program 6 (id=1117): syz_emit_ethernet(0x196, &(0x7f0000000280)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @igmp={{0x26, 0x4, 0x2, 0x7, 0x188, 0x64, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x64010100, @private=0xa010101, {[@cipso={0x86, 0x44, 0x3, [{0x2, 0xc, "08aa3c6448b2d8d536a0"}, {0x5, 0xe, "54cc4949f8cceffdc6829279"}, {0x7, 0xb, "653c936a2ac9fc15eb"}, {0x7, 0x7, "b3fcb6072f"}, {0x2, 0x8, "94ae2621d940"}, {0x5, 0xa, "76d1f0757b853871"}]}, @lsrr={0x83, 0x13, 0x86, [@loopback, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x1c}]}, @timestamp_addr={0x44, 0x2c, 0x3a, 0x1, 0x5, [{@broadcast, 0x100}, {@broadcast, 0xffff316e}, {@rand_addr=0x64010100, 0x140}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x23}}]}]}}, {0x14, 0x80, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, "bb37d0257b5fc41a7a0a29379db9a54000047e8348703b48053c1115ca100cbbdbda95ddbbd026688c749fd434a2b0d0457919f8ff32eca817c108f5f5cfacec58be62fc075f71debfa664d264f47e321284d48955035938676ee057519205ca5e44737c93b4f79cee61ab8649038205f2abe3950c15003cc239b546a545fcff1f4743995a2187524a9651add4f2685fca0a4b7f057536a924a12ae07bfd9d7b1ba9ad3f2b3d9111efb75822ff6bd6fbddff9123aa5f50618657952a620f0aa99ab605119bd384a873ae89ffd45b748c936d97bed471d5cb1bb389cb95406daa3aa8a97b202560e3"}}}}}, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000001c0)={0x1, 0x5, 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000600)={'ipvlan1\x00', 0x4}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x114, r4, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xbe}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x70, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x114}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="180000002d00010000000000bb0e00e304000080040019"], 0x18}], 0x1}, 0x10) close_range(r5, r6, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101140, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xb9) sendmsg$nl_generic(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000007f7c010004fffffffcdbdd097076d228298e23045e97352f", @ANYRES64=r6], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) dup2(r5, r10) 1.599383863s ago: executing program 7 (id=1118): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000000c0)="f3470f2207c4e2198c1c5966b8f7000f00d866b881008ec066b88c008ee0c4a2b196e066b8d7008ec00f01df0f20c035200000000f22c0df878f4a0000", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x7ff, 0x800000000000008, 0x9, 0x7fffffff, 0x6, 0x5, 0x1, 0xb608, 0x6, 0x2, 0xfffffffffffffe01, 0x7fffffffffffffff, 0xc6b, 0x3, 0x42, 0x101], 0x0, 0x1000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f00000001c0)) 1.597779863s ago: executing program 3 (id=1119): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket(0x6, 0x4, 0x401) close_range(r3, 0xffffffffffffffff, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = accept(r0, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x49, 0x0, &(0x7f0000000680)="755bb05395201ad875a81f08fbf73c46403cbcf9922ed5e124d4576314b9d703e2270ea77e8be9b7d6a78d90f5cd95c2293b2397fd6fbb743e63ffe5e2e2d924e7f40180f4b1704f0f", 0x0}, 0x50) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000000)="bf4021a3320a5858fecd5e2f3d7a0cf108c735c584f34f4475e89e4b38bf3a1d00620a6b5c055a4d31149f9f99c2", 0x2e}, {&(0x7f0000000080)="8af9b1f05f91aad0b40d3e6b6febdbbf2e25", 0x12}, {&(0x7f0000000180)="0ba20ceb086497f785ed0500f86c92a21935dc3ed324d36b6ec3fe360fb8e9a7026452f58fc903ea9ffb65019c0b66b4a0576367d4d5a3e474605f518350c7a86c1e7f543f7e4133b7097a80a6659d479ebbf5132ca44dd315911b8ac110f6", 0x5f}, {&(0x7f0000000200)}, {&(0x7f0000000300)="a99de4defa435b942752034b27d5debb120e51d3d9b8d5a736a109f6340aedef045378eed8063ce1f0d75b7491527d70af8212ffa81778fa19f0229521e70b3cdd9dee2f27b2a1ad262f45ce6f88b883261e601fec8b03df08d55f4553ce8ab8d2c3ab2ba5129add0a454e0fbb969405bde74e1725dbd01955866fd048164b20287c45423a7b28c43af01e65af652fed8671ba322f73dca250c4cf9c4d2f17368cf04bb44174e7450fb6b7d179124fab73194789d378d054e099bd01502aaa2ff38d43581bd8cb0390ef0a69dce2191c250f2e69105a28b1eb", 0xd9}, {&(0x7f0000000240)="96b40b5ceff507e77ec0409ea26a0d42a13956cc9aa5142e14ba4cf3f27c9fa9b9eb407d03ac14bfb6d10b42adfe290c083563ab3315548797faec6404046e639bd0851268dc74e72a18", 0x4a}], 0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1200000014000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffb]}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000200), &(0x7f00000002c0)=@tcp6=r4}, 0x20) recvfrom$unix(r4, 0x0, 0x0, 0x40000123, 0x0, 0x63) 1.515178615s ago: executing program 3 (id=1120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @mcast2, 0xffff00}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r3}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="28000000000000002900000002"], 0x28}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf251c00000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) 1.408373684s ago: executing program 7 (id=1121): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x3, 0x1, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x700, 0x3, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0xa, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xf}, 0x6e, r7}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000600)={0x2bc, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6ff7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8, 0x1, r4}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x20000040}, 0x80c0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x1000009}, 0x8) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000000) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc010000000000000000000000000000ac1414aa00000000000000000000000000000000000002090200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe"], 0xec}}, 0x0) r10 = fanotify_init(0x200, 0x0) fanotify_mark(r10, 0x2d, 0x1001, r1, 0x0) fanotify_mark(r10, 0x1, 0x4800003e, r1, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) recvfrom$packet(r11, &(0x7f0000000240)=""/164, 0xa4, 0x10000, &(0x7f0000000180)={0x11, 0x18, r12, 0x1, 0x28, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14) open$dir(&(0x7f0000000000)='./file0\x00', 0x4000, 0x3) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r13, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="010009000180c20000000180c266c70000180180c2000002aaaaaaaaaaaaffffffffffff67e0f73146830180c2000000aaaaaaaaaabbffffffff"]) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES16=r14, @ANYBLOB="0100fdffffff00000000260000000e0001006e657464657673696d0000000f0002006e657464f44adab0a633098d08005100000000000c008f00feffffffffffffff0c00901c0000000000000000"], 0x54}}, 0x0) 79.618948ms ago: executing program 4 (id=1122): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xb9, &(0x7f0000000080)=""/185}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 0s ago: executing program 4 (id=1123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x65bf, 0x19, 0x0, 0x1, 0xcb00, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) pause() ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8fe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) kernel console output (not intermixed with test programs): uration, please check. [ 88.310186][ T7137] I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.314448][ T7137] qnx4: unable to read the superblock [ 88.541290][ T7155] netlink: 'syz.1.325': attribute type 1 has an invalid length. [ 88.544327][ T7155] netlink: 224 bytes leftover after parsing attributes in process `syz.1.325'. [ 88.680691][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.683339][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.694972][ T7164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.703284][ T7164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.846310][ T7170] fuse: Unknown parameter '0x0000000000000003' [ 89.028719][ T4299] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 89.067677][ T7176] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 89.072427][ T7176] overlayfs: overlapping lowerdir path [ 89.191801][ T4299] usb 8-1: Using ep0 maxpacket: 32 [ 89.195751][ T4299] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 89.200542][ T4299] usb 8-1: config 0 has no interface number 0 [ 89.209261][ T4299] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 89.213025][ T4299] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.216443][ T4299] usb 8-1: Product: syz [ 89.220211][ T4299] usb 8-1: Manufacturer: syz [ 89.222386][ T4299] usb 8-1: SerialNumber: syz [ 89.226590][ T4299] usb 8-1: config 0 descriptor?? [ 89.234967][ T4299] smsc95xx v2.0.0 [ 89.237123][ T4299] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 89.242915][ T4299] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -22 [ 89.278231][ T7185] FAT-fs (sr0): bogus number of reserved sectors [ 89.281431][ T7185] FAT-fs (sr0): Can't find a valid FAT filesystem [ 89.292419][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 89.308534][ T7187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.338'. [ 89.599615][ T7198] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 89.665749][ T839] usb 8-1: USB disconnect, device number 4 [ 90.364476][ T7215] netlink: 132 bytes leftover after parsing attributes in process `syz.3.346'. [ 90.370750][ T7214] netlink: 132 bytes leftover after parsing attributes in process `syz.3.346'. [ 90.386755][ T5980] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.393267][ T7217] overlayfs: missing 'lowerdir' [ 90.397963][ T5980] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.401833][ T5980] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.406714][ T5980] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.410928][ T5980] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.502908][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 90.502924][ T40] audit: type=1400 audit(1758062999.746:410): avc: denied { execute_no_trans } for pid=7225 comm="syz.3.350" path="/123/file1" dev="tmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.598542][ T40] audit: type=1400 audit(1758062999.836:411): avc: denied { ioctl } for pid=7232 comm="syz.3.353" path="socket:[14114]" dev="sockfs" ino=14114 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 90.620414][ T40] audit: type=1400 audit(1758062999.856:412): avc: denied { append } for pid=7232 comm="syz.3.353" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.646691][ T40] audit: type=1400 audit(1758062999.886:413): avc: denied { setopt } for pid=7238 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.654052][ T40] audit: type=1400 audit(1758062999.896:414): avc: denied { read } for pid=7238 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.708704][ T40] audit: type=1400 audit(1758062999.946:415): avc: denied { write } for pid=7238 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.754181][ T1144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.759286][ T1144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.783012][ T7218] chnl_net:caif_netlink_parms(): no params data found [ 90.801011][ T7251] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 90.856799][ T1144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.861744][ T1144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.963901][ T1144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.968387][ T1144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.974525][ T7267] fuse: Unknown parameter '0x0000000000000003' [ 90.981291][ T7218] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.984428][ T7218] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.987554][ T7218] bridge_slave_0: entered allmulticast mode [ 90.991785][ T7218] bridge_slave_0: entered promiscuous mode [ 90.996658][ T7218] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.002272][ T7218] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.005428][ T7218] bridge_slave_1: entered allmulticast mode [ 91.027774][ T7218] bridge_slave_1: entered promiscuous mode [ 91.055299][ T40] audit: type=1400 audit(1758063000.296:416): avc: denied { mount } for pid=7273 comm="syz.1.359" name="/" dev="autofs" ino=14190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 91.101420][ T1144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.105754][ T1144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.163972][ T7218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.171458][ T7283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=69 sclass=netlink_route_socket pid=7283 comm=syz.0.366 [ 91.172088][ T7218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.180389][ T40] audit: type=1400 audit(1758063000.416:417): avc: denied { create } for pid=7281 comm="syz.0.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 91.182292][ T7283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=69 sclass=netlink_route_socket pid=7283 comm=syz.0.366 [ 91.211172][ T40] audit: type=1400 audit(1758063000.456:418): avc: denied { write } for pid=7273 comm="syz.1.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 91.255482][ T7218] team0: Port device team_slave_0 added [ 91.261225][ T7218] team0: Port device team_slave_1 added [ 91.335623][ T7218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.339086][ T7218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.349974][ T7218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.356461][ T7218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.359399][ T7218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.370168][ T7218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.470080][ T7297] usb usb4: usbfs: process 7297 (syz.0.369) did not claim interface 0 before use [ 91.473382][ T40] audit: type=1400 audit(1758063000.716:419): avc: denied { execute } for pid=7296 comm="syz.0.369" path="/dev/snd/pcmC0D0c" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 91.595834][ T7218] hsr_slave_0: entered promiscuous mode [ 91.599646][ T7218] hsr_slave_1: entered promiscuous mode [ 91.602556][ T7218] debugfs: 'hsr0' already exists in 'hsr' [ 91.605167][ T7218] Cannot create hsr debugfs directory [ 91.645026][ T7303] netlink: 196 bytes leftover after parsing attributes in process `syz.0.371'. [ 91.649178][ T7303] netlink: 196 bytes leftover after parsing attributes in process `syz.0.371'. [ 91.652952][ T7303] netlink: 19 bytes leftover after parsing attributes in process `syz.0.371'. [ 91.665590][ T1144] bridge_slave_1: left allmulticast mode [ 91.668077][ T1144] bridge_slave_1: left promiscuous mode [ 91.671759][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.686518][ T1144] bridge_slave_0: left allmulticast mode [ 91.689102][ T1144] bridge_slave_0: left promiscuous mode [ 91.691783][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.984863][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.991727][ T1144] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 91.993354][ T1144] bond0 (unregistering): Released all slaves [ 92.108833][ T7318] program syz.0.377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.298495][ T7218] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.330784][ T7341] binder: BINDER_SET_CONTEXT_MGR already set [ 92.343745][ T7341] binder: 7340:7341 ioctl 4018620d 200000000100 returned -16 [ 92.348163][ T7218] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.360773][ T7218] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.366677][ T7218] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.410223][ T1144] hsr_slave_0: left promiscuous mode [ 92.413257][ T1144] hsr_slave_1: left promiscuous mode [ 92.416643][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.420568][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.424764][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.428076][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.462828][ T1144] veth1_macvtap: left promiscuous mode [ 92.465401][ T1144] veth0_macvtap: left promiscuous mode [ 92.468076][ T1144] veth1_vlan: left promiscuous mode [ 92.471083][ T1144] veth0_vlan: left promiscuous mode [ 92.508784][ T5987] Bluetooth: hci4: command tx timeout [ 92.625181][ T7367] BIDI support in bsg has been removed. [ 93.275866][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 93.372119][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 93.594757][ T7391] 9pnet: Could not find request transport: vi¢Gk~k· òÚrtiÆnž?çª: ïÛ$oÞù>mÁH˜Ð8jè–ääÒP”_±ÇµèUbï§Í{æ†Ð3cŽ‹$=Å*àærÊÃs®OšT©7ŒHÙ8ôf5îåUãYÐH£ŒÄšÙ1ËnáX£^# [ 93.998547][ T7352] netlink: 60 bytes leftover after parsing attributes in process `syz.3.385'. [ 94.012477][ T7380] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 94.016618][ T7380] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 94.021223][ T7380] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 94.023717][ T7393] can0: slcan on ttyS3. [ 94.112145][ T7403] netlink: 'syz.3.399': attribute type 1 has an invalid length. [ 94.150154][ T7395] can0 (unregistered): slcan off ttyS3. [ 94.165281][ T7218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.181704][ T7218] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.191144][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.193383][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.213767][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.216130][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.376736][ T7426] bridge_slave_0: left allmulticast mode [ 94.379301][ T7426] bridge_slave_0: left promiscuous mode [ 94.381579][ T7426] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.386783][ T7426] bridge_slave_1: left allmulticast mode [ 94.389296][ T7426] bridge_slave_1: left promiscuous mode [ 94.391206][ T7426] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.396133][ T7426] bond0: (slave bond_slave_0): Releasing backup interface [ 94.404879][ T7426] bond0: (slave bond_slave_1): Releasing backup interface [ 94.413351][ T7426] team0: Port device team_slave_0 removed [ 94.419610][ T7426] team0: Port device team_slave_1 removed [ 94.423250][ T7426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.428140][ T7426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.432996][ T7426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.436252][ T7426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.472631][ T7427] team0: Mode changed to "loadbalance" [ 94.476161][ T7426] netlink: 'syz.3.404': attribute type 10 has an invalid length. [ 94.479885][ T7429] team0: Unable to change to the same mode the team is in [ 94.488544][ T7426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.493606][ T7426] team0: Port device bond0 added [ 94.497282][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.404'. [ 94.566606][ T7426] team0 (unregistering): Port device bond0 removed [ 94.588749][ T5987] Bluetooth: hci4: command tx timeout [ 94.597206][ T7218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.826513][ T7218] veth0_vlan: entered promiscuous mode [ 94.838378][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.407'. [ 94.839777][ T7218] veth1_vlan: entered promiscuous mode [ 94.848318][ T7447] IPVS: Error joining to the multicast group [ 94.875609][ T7218] veth0_macvtap: entered promiscuous mode [ 94.885654][ T7218] veth1_macvtap: entered promiscuous mode [ 94.900268][ T7218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.914707][ T7218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.924350][ T1144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.932696][ T1144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.937661][ T1144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.944630][ T1144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.945476][ T7454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.409'. [ 95.011843][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.015315][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.037987][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.041609][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.267369][ T7487] netlink: 'syz.1.414': attribute type 1 has an invalid length. [ 95.297996][ T7487] 8021q: adding VLAN 0 to HW filter on device bond3 [ 95.341348][ T7490] netlink: 72 bytes leftover after parsing attributes in process `syz.3.415'. [ 95.375667][ T7492] netlink: 32 bytes leftover after parsing attributes in process `syz.1.416'. [ 95.544680][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 95.544696][ T40] audit: type=1400 audit(1758065582.788:440): avc: denied { associate } for pid=7508 comm="syz.1.419" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 95.565590][ T40] audit: type=1400 audit(1758065582.798:441): avc: denied { write } for pid=7508 comm="syz.1.419" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 95.578287][ T7512] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 95.580958][ T7512] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 95.584512][ T40] audit: type=1400 audit(1758065582.798:442): avc: denied { ioctl } for pid=7508 comm="syz.1.419" path="/127/file0/bus" dev="9p" ino=71827705 ioctlcmd=0x64b6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.585585][ T7512] vhci_hcd vhci_hcd.0: Device attached [ 95.600111][ T40] audit: type=1800 audit(1758065582.848:443): pid=7509 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.419" name="bus" dev="9p" ino=71827705 res=0 errno=0 [ 95.612050][ T7515] vhci_hcd: unknown pdu 1 [ 95.619208][ T1144] vhci_hcd: stop threads [ 95.621086][ T1144] vhci_hcd: release socket [ 95.622792][ T1144] vhci_hcd: disconnect device [ 95.701414][ T7510] [U]  [ 95.768042][ T7523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.778967][ T7523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.116681][ T5980] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.122753][ T5980] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.126705][ T5980] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.134524][ T5980] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.138411][ T5980] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.148742][ T7529] random: crng reseeded on system resumption [ 96.244189][ T40] audit: type=1400 audit(1758065583.488:444): avc: denied { create } for pid=7533 comm="syz.3.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 96.252906][ T40] audit: type=1400 audit(1758065583.488:445): avc: denied { ioctl } for pid=7533 comm="syz.3.429" path="socket:[17940]" dev="sockfs" ino=17940 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 96.265026][ T40] audit: type=1400 audit(1758065583.488:446): avc: denied { bind } for pid=7533 comm="syz.3.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 96.276543][ T7525] chnl_net:caif_netlink_parms(): no params data found [ 96.371186][ T40] audit: type=1400 audit(1758065583.618:447): avc: denied { write } for pid=7545 comm="syz.4.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 96.407329][ T7525] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.413887][ T7525] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.417208][ T7525] bridge_slave_0: entered allmulticast mode [ 96.422430][ T7525] bridge_slave_0: entered promiscuous mode [ 96.428735][ T7525] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.432065][ T7525] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.435287][ T7525] bridge_slave_1: entered allmulticast mode [ 96.439762][ T7525] bridge_slave_1: entered promiscuous mode [ 96.470642][ T7556] netlink: 16 bytes leftover after parsing attributes in process `syz.3.433'. [ 96.474602][ T40] audit: type=1400 audit(1758065583.708:448): avc: denied { read } for pid=7554 comm="syz.3.433" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 96.488090][ T40] audit: type=1400 audit(1758065583.708:449): avc: denied { open } for pid=7554 comm="syz.3.433" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 96.501989][ T7556] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (133) [ 96.542520][ T7525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.552130][ T7525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.609578][ T7525] team0: Port device team_slave_0 added [ 96.613212][ T7525] team0: Port device team_slave_1 added [ 96.656932][ T7525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.658755][ T5987] Bluetooth: hci4: command tx timeout [ 96.660273][ T7525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.677651][ T7525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.684093][ T7525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.687227][ T7525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.698710][ T7525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.748315][ T7525] hsr_slave_0: entered promiscuous mode [ 96.752191][ T7525] hsr_slave_1: entered promiscuous mode [ 96.754355][ T7525] debugfs: 'hsr0' already exists in 'hsr' [ 96.756234][ T7525] Cannot create hsr debugfs directory [ 96.806555][ T7564] netlink: 165 bytes leftover after parsing attributes in process `syz.3.435'. [ 96.810471][ T7564] 9pnet_fd: Insufficient options for proto=fd [ 96.935918][ T7525] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.943648][ T7525] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.952336][ T7525] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.959694][ T7525] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.985339][ T7525] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.988387][ T7525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.991715][ T7525] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.994874][ T7525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.051350][ T7525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.067874][ T1242] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.073321][ T1242] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.091952][ T7525] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.104124][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.107146][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.116141][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.119178][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.273804][ T7525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.318387][ T7602] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7602 comm=syz.4.442 [ 97.491212][ T7525] veth0_vlan: entered promiscuous mode [ 97.503137][ T7525] veth1_vlan: entered promiscuous mode [ 97.526750][ T7525] veth0_macvtap: entered promiscuous mode [ 97.534428][ T7525] veth1_macvtap: entered promiscuous mode [ 97.549740][ T7525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.557848][ T7525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.566301][ T1174] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.571788][ T1174] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.576571][ T1174] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.580544][ T1174] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.625734][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.629253][ T54] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.629356][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.654535][ T1242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.658157][ T1242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.711944][ T7616] netlink: 68 bytes leftover after parsing attributes in process `syz.5.426'. [ 97.799999][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.804305][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.807552][ T54] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 97.810515][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.814512][ T54] usb 5-1: config 0 descriptor?? [ 98.020781][ T7607] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.443'. [ 98.038270][ T54] usbhid 5-1:0.0: can't add hid device: -71 [ 98.040715][ T54] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 98.045123][ T54] usb 5-1: USB disconnect, device number 3 [ 98.179011][ T5987] Bluetooth: hci0: command tx timeout [ 98.738824][ T5987] Bluetooth: hci4: command tx timeout [ 100.259188][ T5987] Bluetooth: hci0: command tx timeout [ 102.348909][ T5987] Bluetooth: hci0: command tx timeout [ 104.419043][ T5987] Bluetooth: hci0: command tx timeout [ 114.773959][ T7681] program syz.4.453 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.812193][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 114.812208][ T40] audit: type=1400 audit(1758065602.058:453): avc: denied { unlink } for pid=7684 comm="syz.0.455" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 114.937492][ T40] audit: type=1326 audit(1758065602.178:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7700 comm="syz.0.458" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4590d8eba9 code=0x0 [ 114.958855][ T4279] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 115.004525][ T7703] loop2: detected capacity change from 0 to 7 [ 115.011537][ T7703] Dev loop2: unable to read RDB block 7 [ 115.014261][ T7703] loop2: unable to read partition table [ 115.017143][ T7703] loop2: partition table beyond EOD, truncated [ 115.021118][ T7703] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 115.027982][ T7703] netlink: 24 bytes leftover after parsing attributes in process `syz.4.459'. [ 115.055586][ T7706] vlan2: entered promiscuous mode [ 115.057249][ T7706] macvtap0: entered promiscuous mode [ 115.061909][ T7703] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 115.112564][ T4279] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.116072][ T4279] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 115.119967][ T4279] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 115.126316][ T4279] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 115.129163][ T4279] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 115.139085][ T4279] usb 10-1: Manufacturer: syz [ 115.144484][ T4279] usb 10-1: config 0 descriptor?? [ 115.150149][ T4279] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 115.239657][ T7719] can0: slcan on ttyS3. [ 115.251370][ T40] audit: type=1400 audit(1758065602.498:455): avc: denied { map } for pid=7718 comm="syz.4.464" path="socket:[18210]" dev="sockfs" ino=18210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 115.276618][ T40] audit: type=1400 audit(1758065602.498:456): avc: denied { read } for pid=7718 comm="syz.4.464" path="socket:[18210]" dev="sockfs" ino=18210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 115.498946][ T29] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 115.658741][ T29] usb 9-1: Using ep0 maxpacket: 16 [ 115.663123][ T29] usb 9-1: config 0 has no interfaces? [ 115.666511][ T29] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.668096][ T40] audit: type=1400 audit(1758065602.908:457): avc: denied { accept } for pid=7728 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.670402][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.682692][ T29] usb 9-1: Product: syz [ 115.684276][ T29] usb 9-1: Manufacturer: syz [ 115.686014][ T29] usb 9-1: SerialNumber: syz [ 115.690305][ T29] usb 9-1: config 0 descriptor?? [ 115.742633][ T40] audit: type=1400 audit(1758065602.988:458): avc: denied { unmount } for pid=5985 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 115.950690][ T40] audit: type=1400 audit(1758065603.198:459): avc: denied { shutdown } for pid=7718 comm="syz.4.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 115.950864][ T7734] netlink: 'syz.4.464': attribute type 63 has an invalid length. [ 115.960237][ T7719] can0 (unregistered): slcan off ttyS3. [ 115.971789][ T29] usb 9-1: USB disconnect, device number 2 [ 117.751276][ T6426] usb 10-1: USB disconnect, device number 2 [ 133.225136][ T40] audit: type=1400 audit(1758065620.468:460): avc: denied { open } for pid=7744 comm="syz.4.468" path="/dev/ptyqc" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 133.235578][ T40] audit: type=1400 audit(1758065620.468:461): avc: denied { ioctl } for pid=7744 comm="syz.4.468" path="/dev/ptyqc" dev="devtmpfs" ino=139 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 133.236653][ T7746] macvtap1: entered allmulticast mode [ 133.249401][ T7746] veth0_macvtap: entered allmulticast mode [ 133.257274][ T40] audit: type=1400 audit(1758065620.478:462): avc: denied { remount } for pid=7742 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 133.257625][ T7748] vlan2: entered allmulticast mode [ 133.268496][ T7748] bond0: entered allmulticast mode [ 133.274110][ T40] audit: type=1400 audit(1758065620.478:463): avc: denied { execmem } for pid=7742 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 133.282185][ T40] audit: type=1400 audit(1758065620.498:464): avc: denied { read write } for pid=7743 comm="syz.5.467" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 133.292600][ T40] audit: type=1400 audit(1758065620.498:465): avc: denied { ioctl open } for pid=7743 comm="syz.5.467" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 133.383440][ T40] audit: type=1326 audit(1758065620.628:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7768 comm="syz.5.473" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f872178eba9 code=0x0 [ 133.398684][ T40] audit: type=1400 audit(1758065620.638:467): avc: denied { listen } for pid=7769 comm="syz.0.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.651256][ T6066] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 133.779771][ T6066] usb 9-1: device descriptor read/64, error -71 [ 133.839943][ T40] audit: type=1400 audit(1758065621.088:468): avc: denied { bind } for pid=7776 comm="syz.3.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.844893][ T7777] 9pnet: p9_errstr2errno: server reported unknown error ?ãØnª [ 133.844893][ T7777] k‡l [ 134.018862][ T6066] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 134.158886][ T6066] usb 9-1: device descriptor read/64, error -71 [ 134.230583][ T40] audit: type=1400 audit(1758065621.478:469): avc: denied { append } for pid=7800 comm="syz.3.481" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 134.273295][ T6066] usb usb9-port1: attempt power cycle [ 134.388155][ T7806] fuse: Bad value for 'fd' [ 134.618758][ T6066] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 134.640452][ T6066] usb 9-1: device descriptor read/8, error -71 [ 134.888720][ T6066] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 134.910165][ T6066] usb 9-1: device descriptor read/8, error -71 [ 134.957087][ T7833] netlink: 24 bytes leftover after parsing attributes in process `syz.0.490'. [ 135.019048][ T6066] usb usb9-port1: unable to enumerate USB device [ 135.201864][ T7840] overlayfs: failed to resolve './file1': -2 [ 135.394985][ T7852] syz_tun: tun_net_xmit 62 [ 135.516667][ T7857] binder: 7855:7857 ioctl c0709411 200000000280 returned -22 [ 135.712084][ T7871] netlink: 24 bytes leftover after parsing attributes in process `syz.0.502'. [ 136.019113][ T7900] SELinux: policydb string SE Lin does not match my string SE Linux [ 136.024518][ T7900] SELinux: failed to load policy [ 136.082275][ T7905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.513'. [ 136.086196][ T7905] netem: change failed [ 136.101668][ T7905] netlink: 'syz.0.513': attribute type 13 has an invalid length. [ 136.104990][ T7905] netlink: 'syz.0.513': attribute type 17 has an invalid length. [ 136.113007][ T7905] gre0: left promiscuous mode [ 136.115301][ T7905] gre0: left allmulticast mode [ 136.162411][ T7905] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.312477][ T6066] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 136.322595][ T6066] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz0 [ 136.491766][ T7927] vim2m vim2m.0: vidioc_s_fmt queue busy [ 136.653889][ T7940] netlink: 20 bytes leftover after parsing attributes in process `syz.5.525'. [ 136.857544][ T7945] IPVS: persistence engine module ip_vs_pe_s not found [ 136.876765][ T7945] trusted_key: encrypted_key: insufficient parameters specified [ 137.070661][ T7980] netlink: 20 bytes leftover after parsing attributes in process `syz.4.537'. [ 137.163525][ T7987] usb usb5: usbfs: process 7987 (syz.5.540) did not claim interface 0 before use [ 137.405130][ T8010] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input12 [ 137.429068][ T8012] netlink: 112 bytes leftover after parsing attributes in process `syz.0.547'. [ 137.558945][ T4279] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 137.614949][ T8031] netlink: 14 bytes leftover after parsing attributes in process `syz.3.552'. [ 137.725269][ T4279] usb 10-1: unable to get BOS descriptor or descriptor too short [ 137.729839][ T4279] usb 10-1: no configurations [ 137.732252][ T4279] usb 10-1: can't read configurations, error -22 [ 137.805854][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.555'. [ 137.809706][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.555'. [ 137.891139][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.555'. [ 138.025698][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.291950][ T8050] /dev/sr0: Can't open blockdev [ 138.317606][ T8054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=8054 comm=syz.5.562 [ 138.321640][ T8054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8054 comm=syz.5.562 [ 138.325698][ T8054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=8054 comm=syz.5.562 [ 138.330377][ T8054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=8054 comm=syz.5.562 [ 138.334284][ T8054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=8054 comm=syz.5.562 [ 138.338273][ T8054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=8054 comm=syz.5.562 [ 138.342761][ T8054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=8054 comm=syz.5.562 [ 138.375483][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 138.375501][ T40] audit: type=1400 audit(1758065625.618:503): avc: denied { connect } for pid=8055 comm="syz.4.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 138.995771][ T40] audit: type=1400 audit(1758065626.238:504): avc: denied { getopt } for pid=8065 comm="syz.3.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 139.313614][ T40] audit: type=1400 audit(1758065626.548:505): avc: denied { append } for pid=8077 comm="syz.4.569" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 139.351996][ T8083] pimreg: entered allmulticast mode [ 139.392721][ T40] audit: type=1400 audit(1758065626.638:506): avc: denied { read } for pid=8091 comm="syz.4.574" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 139.402813][ T40] audit: type=1400 audit(1758065626.638:507): avc: denied { open } for pid=8091 comm="syz.4.574" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 139.402860][ T40] audit: type=1400 audit(1758065626.638:508): avc: denied { ioctl } for pid=8091 comm="syz.4.574" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 139.495618][ T8100] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 139.511203][ T8102] binder: BC_ATTEMPT_ACQUIRE not supported [ 139.511381][ T8104] ./bus: Can't lookup blockdev [ 139.513725][ T8102] binder: 8101:8102 ioctl c0306201 200000000300 returned -22 [ 139.556758][ T40] audit: type=1400 audit(1758065626.798:509): avc: denied { mount } for pid=8106 comm="syz.5.578" name="/" dev="configfs" ino=2173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 139.566344][ T40] audit: type=1400 audit(1758065626.798:510): avc: denied { search } for pid=8106 comm="syz.5.578" name="/" dev="configfs" ino=2173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.576840][ T40] audit: type=1400 audit(1758065626.798:511): avc: denied { search } for pid=8106 comm="syz.5.578" name="/" dev="configfs" ino=2173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.587418][ T40] audit: type=1400 audit(1758065626.798:512): avc: denied { read open } for pid=8106 comm="syz.5.578" path="/" dev="configfs" ino=2173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.618785][ T5980] Bluetooth: hci0: command 0x0405 tx timeout [ 139.798765][ T54] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 139.971408][ T54] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 139.976221][ T54] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 139.980460][ T54] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 139.984421][ T54] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.991694][ T8109] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 139.999915][ T54] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 140.199147][ T29] usb 9-1: USB disconnect, device number 7 [ 140.290426][ T8120] deleting an unspecified loop device is not supported. [ 140.325853][ T8124] tipc: Started in network mode [ 140.328112][ T8124] tipc: Node identity 76a1bd113c2e, cluster identity 4711 [ 140.331666][ T8124] tipc: Enabled bearer , priority 0 [ 140.367316][ T8124] tipc: Disabling bearer [ 140.710396][ T8155] __nla_validate_parse: 1 callbacks suppressed [ 140.710409][ T8155] netlink: 248 bytes leftover after parsing attributes in process `syz.5.594'. [ 140.903265][ T8162] netlink: 20 bytes leftover after parsing attributes in process `syz.5.597'. [ 140.906249][ T8162] netem: invalid attributes len -22 [ 140.908004][ T8162] netem: change failed [ 141.348206][ T8171] loop2: detected capacity change from 0 to 7 [ 141.352056][ T8171] Dev loop2: unable to read RDB block 7 [ 141.354194][ T8171] loop2: unable to read partition table [ 141.356395][ T8171] loop2: partition table beyond EOD, truncated [ 141.358445][ T8171] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 141.407536][ T8173] loop6: detected capacity change from 0 to 7 [ 141.426380][ T8173] Dev loop6: unable to read RDB block 7 [ 141.428341][ T8173] loop6: unable to read partition table [ 141.430983][ T8173] loop6: partition table beyond EOD, truncated [ 141.433615][ T8173] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 142.122924][ T8209] syz.3.613 (8209): drop_caches: 2 [ 142.218760][ T7614] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 142.257666][ T8213] binder: BINDER_SET_CONTEXT_MGR already set [ 142.261297][ T8213] binder: 8212:8213 ioctl 4018620d 200000000280 returned -16 [ 142.264036][ T8213] binder: 8212:8213 ioctl 8008f513 200000000000 returned -22 [ 142.382096][ T7614] usb 9-1: unable to get BOS descriptor or descriptor too short [ 142.395733][ T7614] usb 9-1: not running at top speed; connect to a high speed hub [ 142.402358][ T7614] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.407532][ T7614] usb 9-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 142.412949][ T8217] netlink: 44 bytes leftover after parsing attributes in process `syz.3.616'. [ 142.413347][ T7614] usb 9-1: config 1 interface 0 has no altsetting 0 [ 142.423162][ T7614] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.427335][ T7614] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.431218][ T7614] usb 9-1: Product: syz [ 142.433036][ T7614] usb 9-1: Manufacturer: syz [ 142.435426][ T7614] usb 9-1: SerialNumber: syz [ 142.461867][ T8220] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000004 [ 142.658501][ T7614] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 142.665827][ T7614] usb 9-1: USB disconnect, device number 8 [ 142.689907][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.619'. [ 143.299879][ T5987] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 143.303645][ T5987] Bluetooth: hci4: Injecting HCI hardware error event [ 143.310124][ T5980] Bluetooth: hci4: hardware error 0x00 [ 143.358702][ T4279] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 143.409470][ T4299] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 143.412656][ T8256] block nbd4: Attempted send on invalid socket [ 143.416994][ T8256] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 143.422626][ T8256] SQUASHFS error: Failed to read block 0x0: -5 [ 143.426139][ T8256] unable to read squashfs_super_block [ 143.471669][ T8260] netlink: 72 bytes leftover after parsing attributes in process `syz.4.630'. [ 143.471682][ T8261] netlink: 72 bytes leftover after parsing attributes in process `syz.4.630'. [ 143.480696][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 143.480706][ T40] audit: type=1400 audit(1758065630.728:522): avc: denied { wake_alarm } for pid=8259 comm="syz.4.630" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 143.509873][ T4279] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 143.512486][ T4279] usb 8-1: config 0 has no interface number 0 [ 143.514473][ T4279] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 143.517878][ T4279] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 143.522463][ T4279] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 143.526694][ T4279] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 143.530556][ T4279] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 143.533960][ T4279] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 143.538060][ T4279] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 143.541570][ T4279] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.546100][ T4279] usb 8-1: config 0 descriptor?? [ 143.548339][ T8250] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 143.555062][ T8250] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 143.564367][ T4279] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 143.672952][ T8269] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 143.780662][ T4299] usb 8-1: USB disconnect, device number 5 [ 143.792031][ T4299] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 144.414713][ T40] audit: type=1400 audit(1758065631.658:523): avc: denied { create } for pid=8282 comm="syz.0.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 144.504249][ T40] audit: type=1400 audit(1758065631.748:524): avc: denied { cmd } for pid=8285 comm="syz.3.638" path="socket:[22450]" dev="sockfs" ino=22450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 144.548895][ T40] audit: type=1400 audit(1758065631.788:525): avc: denied { getopt } for pid=8293 comm="syz.5.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.974150][ T1144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.095831][ T1144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.113523][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 145.117042][ T8320] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 145.212160][ T1144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.320793][ T1144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.329512][ T5984] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.336241][ T5984] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.340350][ T5984] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.345667][ T5984] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.350945][ T5984] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.380073][ T5980] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 145.488983][ T4299] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 145.564091][ T1144] bridge_slave_1: left allmulticast mode [ 145.566694][ T1144] bridge_slave_1: left promiscuous mode [ 145.574479][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.580553][ T1144] bridge_slave_0: left allmulticast mode [ 145.582916][ T1144] bridge_slave_0: left promiscuous mode [ 145.585428][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.653864][ T4299] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.658419][ T4299] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 145.662879][ T4299] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.673037][ T4299] usb 8-1: config 0 descriptor?? [ 145.884206][ T4299] usbhid 8-1:0.0: can't add hid device: -71 [ 145.886824][ T4299] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 145.908328][ T4299] usb 8-1: USB disconnect, device number 6 [ 146.039966][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.048136][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.054601][ T1144] bond0 (unregistering): Released all slaves [ 146.189778][ T1144] bond1 (unregistering): Released all slaves [ 146.218387][ T8332] chnl_net:caif_netlink_parms(): no params data found [ 146.328811][ T4299] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 146.397061][ T8332] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.399525][ T8332] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.401778][ T8332] bridge_slave_0: entered allmulticast mode [ 146.404656][ T8332] bridge_slave_0: entered promiscuous mode [ 146.407762][ T8332] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.411033][ T8332] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.413294][ T8332] bridge_slave_1: entered allmulticast mode [ 146.416454][ T8332] bridge_slave_1: entered promiscuous mode [ 146.477137][ T8332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.478828][ T4299] usb 8-1: Using ep0 maxpacket: 32 [ 146.492676][ T4299] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.497193][ T4299] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 146.502162][ T4299] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.514327][ T4299] usb 8-1: config 0 descriptor?? [ 146.520966][ T8332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.521947][ T4299] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 146.536926][ T4299] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 146.671367][ T8332] team0: Port device team_slave_0 added [ 146.677563][ T8332] team0: Port device team_slave_1 added [ 146.745817][ T8332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.752319][ T8332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.761087][ C0] ldusb 8-1:0.0: Ring buffer overflow, 8 bytes dropped [ 146.763269][ T8332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.778075][ T1144] hsr_slave_0: left promiscuous mode [ 146.789213][ T1144] hsr_slave_1: left promiscuous mode [ 146.792130][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.799849][ T5987] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.801141][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.805939][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.807072][ T5987] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.816468][ T5987] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.824978][ T5987] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.835888][ T5987] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.856014][ T1144] veth1_macvtap: left promiscuous mode [ 146.858344][ T1144] veth0_macvtap: left promiscuous mode [ 146.862354][ T1144] veth1_vlan: left promiscuous mode [ 146.862444][ T1144] veth0_vlan: left promiscuous mode [ 146.868492][ T40] audit: type=1400 audit(1758065634.108:526): avc: denied { map } for pid=8361 comm="syz.4.655" path="/dev/tty28" dev="devtmpfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 146.923900][ T4299] IPVS: starting estimator thread 0... [ 147.018746][ T8370] IPVS: using max 28 ests per chain, 67200 per kthread [ 147.089812][ T40] audit: type=1400 audit(1758065634.338:527): avc: denied { mounton } for pid=8372 comm="syz.4.657" path="/59/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 147.383093][ T5980] Bluetooth: hci1: command tx timeout [ 147.732294][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 147.816486][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 148.091173][ T8387] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 148.259106][ T54] usb 8-1: USB disconnect, device number 7 [ 148.270344][ T54] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 148.345170][ T40] audit: type=1400 audit(1758065635.588:528): avc: denied { getopt } for pid=8390 comm="syz.3.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 148.415462][ T8332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.418877][ T8332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.429775][ T8332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.542661][ T8332] hsr_slave_0: entered promiscuous mode [ 148.545776][ T8332] hsr_slave_1: entered promiscuous mode [ 148.548925][ T8332] debugfs: 'hsr0' already exists in 'hsr' [ 148.551363][ T8332] Cannot create hsr debugfs directory [ 148.702837][ T40] audit: type=1326 audit(1758065635.948:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8412 comm="syz.4.666" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27aa38eba9 code=0x0 [ 148.775639][ T8358] chnl_net:caif_netlink_parms(): no params data found [ 148.807801][ T40] audit: type=1400 audit(1758065636.048:530): avc: denied { ioctl } for pid=8412 comm="syz.4.666" path="socket:[25664]" dev="sockfs" ino=25664 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 148.899058][ T5980] Bluetooth: hci0: command tx timeout [ 148.913797][ T8358] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.917128][ T8358] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.922463][ T8358] bridge_slave_0: entered allmulticast mode [ 148.926365][ T8358] bridge_slave_0: entered promiscuous mode [ 148.931171][ T8358] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.934194][ T8358] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.937309][ T8358] bridge_slave_1: entered allmulticast mode [ 148.941845][ T8358] bridge_slave_1: entered promiscuous mode [ 149.014371][ T1144] IPVS: stop unused estimator thread 0... [ 149.016018][ T8358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.023907][ T8358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.077556][ T8358] team0: Port device team_slave_0 added [ 149.105326][ T8358] team0: Port device team_slave_1 added [ 149.158136][ T8358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.160960][ T8358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.171683][ T8358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.177696][ T8358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.180452][ T8358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.190349][ T8358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.264318][ T8358] hsr_slave_0: entered promiscuous mode [ 149.267508][ T8358] hsr_slave_1: entered promiscuous mode [ 149.272585][ T8358] debugfs: 'hsr0' already exists in 'hsr' [ 149.275012][ T8358] Cannot create hsr debugfs directory [ 149.348116][ T1144] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.447966][ T1144] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.458807][ T5980] Bluetooth: hci1: command tx timeout [ 149.475335][ T8332] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 149.545336][ T8332] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 149.571720][ T8332] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 149.604159][ T1144] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.628026][ T8332] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 149.737896][ T1144] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.798573][ T8358] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 149.807275][ T8358] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 149.815511][ T8358] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 149.821433][ T8358] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 149.918940][ T40] audit: type=1400 audit(1758065637.158:531): avc: denied { read } for pid=8463 comm="syz.3.671" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 149.928340][ T40] audit: type=1400 audit(1758065637.158:532): avc: denied { open } for pid=8463 comm="syz.3.671" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 149.953254][ T1144] bridge_slave_1: left allmulticast mode [ 149.955565][ T1144] bridge_slave_1: left promiscuous mode [ 149.960743][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.967912][ T1144] bridge_slave_0: left allmulticast mode [ 149.969768][ T1144] bridge_slave_0: left promiscuous mode [ 149.972678][ T40] audit: type=1400 audit(1758065637.218:533): avc: denied { write } for pid=8468 comm="syz.3.673" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 149.973085][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.984441][ T40] audit: type=1400 audit(1758065637.218:534): avc: denied { open } for pid=8468 comm="syz.3.673" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 150.368988][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.375100][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.380494][ T1144] bond0 (unregistering): Released all slaves [ 150.392910][ T8332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.416319][ T8472] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.477689][ T8332] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.487095][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.490249][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.513255][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.516478][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.574378][ T8358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.618848][ T8358] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.649222][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.652269][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.662958][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.665308][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.780203][ T8498] tmpfs: Cannot change global quota limit on remount [ 150.798807][ T40] audit: type=1400 audit(1758065638.038:535): avc: denied { execute } for pid=8496 comm="syz.3.680" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 150.813784][ T1144] hsr_slave_0: left promiscuous mode [ 150.823866][ T1144] hsr_slave_1: left promiscuous mode [ 150.826558][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.829692][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.836550][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.840786][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.887185][ T1144] veth1_macvtap: left promiscuous mode [ 150.889942][ T1144] veth0_macvtap: left promiscuous mode [ 150.892842][ T1144] veth1_vlan: left promiscuous mode [ 150.895243][ T1144] veth0_vlan: left promiscuous mode [ 150.967851][ T40] audit: type=1804 audit(1758065638.208:536): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.682" name="/newroot/72/file0" dev="tmpfs" ino=397 res=1 errno=0 [ 150.978934][ T5980] Bluetooth: hci0: command tx timeout [ 150.979202][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.682'. [ 151.552338][ T5980] Bluetooth: hci1: command tx timeout [ 151.775788][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 151.873988][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 152.702962][ T8332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.725567][ T8528] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 152.728319][ T8528] overlayfs: failed to set xattr on upper [ 152.732807][ T8528] overlayfs: ...falling back to redirect_dir=nofollow. [ 152.742655][ T8528] overlayfs: ...falling back to metacopy=off. [ 152.745161][ T40] audit: type=1400 audit(1758065639.978:537): avc: denied { execute } for pid=8520 comm="syz.4.684" dev="hugetlbfs" ino=24496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 152.751487][ T8528] overlayfs: ...falling back to index=off. [ 152.754436][ T40] audit: type=1400 audit(1758065639.998:538): avc: denied { execute_no_trans } for pid=8520 comm="syz.4.684" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=24496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 152.755300][ T8528] overlayfs: ...falling back to uuid=null. [ 152.772097][ T8358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.805346][ T8332] veth0_vlan: entered promiscuous mode [ 152.816228][ T8332] veth1_vlan: entered promiscuous mode [ 152.860727][ T8332] veth0_macvtap: entered promiscuous mode [ 152.876070][ T8332] veth1_macvtap: entered promiscuous mode [ 152.896187][ T8332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.905762][ T8332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.916588][ T1143] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.941026][ T1143] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.944656][ T1143] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.971109][ T1143] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.061876][ T5980] Bluetooth: hci0: command tx timeout [ 153.090061][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.092543][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.118232][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.120687][ T8358] veth0_vlan: entered promiscuous mode [ 153.124314][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.126027][ T8358] veth1_vlan: entered promiscuous mode [ 153.153033][ T8358] veth0_macvtap: entered promiscuous mode [ 153.169798][ T8358] veth1_macvtap: entered promiscuous mode [ 153.187996][ T8358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.200785][ T8358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.231381][ T1151] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.242745][ T1144] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.251022][ T1144] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.255849][ T1174] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.332708][ T8574] netlink: 'syz.4.694': attribute type 3 has an invalid length. [ 153.335954][ T8574] netlink: 224 bytes leftover after parsing attributes in process `syz.4.694'. [ 153.341747][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.355506][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.383629][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.386044][ T8577] qnx6: unable to set blocksize [ 153.386112][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.396885][ T8577] qnx6: unable to set blocksize [ 153.411071][ T8577] qnx6: unable to set blocksize [ 153.418081][ T8577] qnx6: unable to set blocksize [ 153.423449][ T8577] qnx6: unable to set blocksize [ 153.432253][ T8577] qnx6: unable to set blocksize [ 153.451110][ T8577] qnx6: unable to set blocksize [ 153.457539][ T8577] qnx6: unable to set blocksize [ 153.462766][ T8577] qnx6: unable to set blocksize [ 153.469671][ T8577] qnx6: unable to set blocksize [ 153.476149][ T8577] qnx6: unable to set blocksize [ 153.482599][ T8577] qnx6: unable to set blocksize [ 153.488413][ T8577] qnx6: unable to set blocksize [ 153.493983][ T8591] 9pnet_fd: p9_fd_create_unix (8591): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 153.494326][ T8577] qnx6: unable to set blocksize [ 153.505602][ T8595] Bluetooth: MGMT ver 1.23 [ 153.535577][ T8577] qnx6: unable to set blocksize [ 153.544444][ T8577] qnx6: unable to set blocksize [ 153.558118][ T8577] qnx6: unable to set blocksize [ 153.561740][ T8577] qnx6: unable to set blocksize [ 153.567675][ T8577] qnx6: unable to set blocksize [ 153.572549][ T8577] qnx6: unable to set blocksize [ 153.582238][ T8577] qnx6: unable to set blocksize [ 153.588534][ T8577] qnx6: unable to set blocksize [ 153.594263][ T8577] qnx6: unable to set blocksize [ 153.602117][ T8577] qnx6: unable to set blocksize [ 153.605289][ T8604] block nbd4: Attempted send on invalid socket [ 153.612408][ T8577] qnx6: unable to set blocksize [ 153.612858][ T8604] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.617963][ T8577] qnx6: unable to set blocksize [ 153.620602][ T5980] Bluetooth: hci1: command tx timeout [ 153.626926][ T8577] qnx6: unable to set blocksize [ 153.633610][ T8604] exFAT-fs (nbd4): unable to read boot sector [ 153.636357][ T8604] exFAT-fs (nbd4): failed to read boot sector [ 153.640069][ T8604] exFAT-fs (nbd4): failed to recognize exfat type [ 153.646129][ T8577] qnx6: unable to set blocksize [ 153.650058][ T8609] block nbd4: Attempted send on invalid socket [ 153.652018][ T8577] qnx6: unable to set blocksize [ 153.652110][ T8609] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.657169][ T8609] exFAT-fs (nbd4): unable to read boot sector [ 153.657539][ T8577] qnx6: unable to set blocksize [ 153.660600][ T8609] exFAT-fs (nbd4): failed to read boot sector [ 153.663630][ T8609] exFAT-fs (nbd4): failed to recognize exfat type [ 153.665538][ T8577] qnx6: unable to set blocksize [ 153.673111][ T8577] qnx6: unable to set blocksize [ 153.678268][ T8577] qnx6: unable to set blocksize [ 153.735443][ T8613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.706'. [ 153.739242][ T8613] netlink: 'syz.3.706': attribute type 7 has an invalid length. [ 153.742641][ T8613] netlink: 'syz.3.706': attribute type 8 has an invalid length. [ 153.747000][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.706'. [ 153.754787][ T8613] gretap0: entered promiscuous mode [ 153.757126][ T8613] batadv_slave_1: entered promiscuous mode [ 153.760127][ T8613] gretap0: left promiscuous mode [ 153.762237][ T8613] batadv_slave_1: left promiscuous mode [ 153.794937][ T8616] input: syz1 as /devices/virtual/input/input14 [ 153.814770][ T7775] udevd[7775]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 153.819986][ T7775] udevd[7775]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 153.918886][ T4279] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 153.976435][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 153.976453][ T40] audit: type=1400 audit(1758065641.218:541): avc: denied { map } for pid=8627 comm="syz.3.712" path="socket:[27270]" dev="sockfs" ino=27270 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 153.990387][ T40] audit: type=1400 audit(1758065641.218:542): avc: denied { read } for pid=8627 comm="syz.3.712" path="socket:[27270]" dev="sockfs" ino=27270 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 154.069080][ T4279] usb 5-1: Using ep0 maxpacket: 8 [ 154.078962][ T4279] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 154.082758][ T4279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 154.087836][ T4279] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.093088][ T4279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 154.098063][ T4279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 154.105270][ T4279] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 154.109217][ T4279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 154.113867][ T4279] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.118994][ T4279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 154.123634][ T4279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 154.130360][ T4279] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 154.133465][ T4279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 154.138038][ T4279] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.143575][ T4279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 154.148151][ T4279] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 154.156734][ T4279] usb 5-1: string descriptor 0 read error: -22 [ 154.161304][ T4279] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 154.165149][ T4279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.175621][ T4279] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 154.180962][ T8642] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 154.227326][ T8646] netlink: 24 bytes leftover after parsing attributes in process `syz.3.715'. [ 154.422322][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.716'. [ 154.425582][ T8654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.716'. [ 154.482428][ T839] usb 5-1: USB disconnect, device number 4 [ 154.483323][ T8656] usb 5-1: Couldn't submit interrupt_out_urb -19 [ 155.138905][ T5980] Bluetooth: hci0: command tx timeout [ 173.582119][ T8704] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 173.599097][ T8705] o2cb: This node has not been configured. [ 173.601992][ T8705] o2cb: Cluster check failed. Fix errors before retrying. [ 173.602728][ T40] audit: type=1400 audit(1758065660.838:543): avc: denied { create } for pid=8702 comm="syz.0.719" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 173.605027][ T8705] (syz.0.719,8705,0):user_dlm_register:674 ERROR: status = -22 [ 173.616914][ T8705] (syz.0.719,8705,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 173.632234][ T8705] netlink: 'syz.0.719': attribute type 39 has an invalid length. [ 173.670643][ T8713] program syz.4.721 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.678356][ T40] audit: type=1400 audit(1758065660.918:544): avc: denied { mount } for pid=8701 comm="syz.4.721" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 173.690851][ T40] audit: type=1400 audit(1758065660.918:545): avc: denied { search } for pid=8701 comm="syz.4.721" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 173.697905][ T40] audit: type=1400 audit(1758065660.918:546): avc: denied { search } for pid=8701 comm="syz.4.721" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 173.705858][ T40] audit: type=1400 audit(1758065660.918:547): avc: denied { search } for pid=8701 comm="syz.4.721" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 173.721484][ T8718] tmpfs: Unknown parameter 'º' [ 173.727428][ T40] audit: type=1400 audit(1758065660.968:548): avc: denied { mount } for pid=8700 comm="syz.6.720" name="/" dev="9p" ino=71827599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 173.739490][ T40] audit: type=1400 audit(1758065660.968:549): avc: denied { unlink } for pid=8700 comm="syz.6.720" name="file0" dev="9p" ino=71827601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 173.750501][ T40] audit: type=1400 audit(1758065660.968:550): avc: denied { append } for pid=8701 comm="syz.4.721" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 173.785547][ T8720] fuse: Bad value for 'fd' [ 175.859090][ T8703] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 175.868866][ T5980] Bluetooth: hci2: command 0x0c1a tx timeout [ 175.872286][ T8703] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 176.571789][ T8703] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 176.580291][ T8703] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 176.583346][ T8703] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 176.588318][ T8703] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 176.593021][ T8703] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 176.595707][ T8703] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 176.600552][ T8703] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 176.661867][ T8728] netlink: 'syz.3.727': attribute type 1 has an invalid length. [ 176.723434][ T8732] netlink: 40 bytes leftover after parsing attributes in process `syz.0.726'. [ 176.762715][ T8738] netlink: 64 bytes leftover after parsing attributes in process `syz.4.729'. [ 176.786611][ T40] audit: type=1400 audit(1758065664.028:551): avc: denied { unmount } for pid=8358 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 176.955938][ T40] audit: type=1400 audit(1758065664.198:552): avc: denied { shutdown } for pid=8759 comm="syz.4.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 177.148722][ T34] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 177.247689][ T8774] netlink: 32 bytes leftover after parsing attributes in process `syz.4.739'. [ 177.252146][ T8774] netlink: 32 bytes leftover after parsing attributes in process `syz.4.739'. [ 177.308697][ T34] usb 11-1: Using ep0 maxpacket: 16 [ 177.312620][ T34] usb 11-1: config 0 has no interfaces? [ 177.316938][ T34] usb 11-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 177.322089][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.325480][ T34] usb 11-1: Product: syz [ 177.327288][ T34] usb 11-1: Manufacturer: syz [ 177.329981][ T34] usb 11-1: SerialNumber: syz [ 177.335301][ T34] usb 11-1: config 0 descriptor?? [ 177.430098][ T8779] netlink: 40 bytes leftover after parsing attributes in process `syz.4.741'. [ 177.646081][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'. [ 177.652986][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.744'. [ 177.744323][ T34] usb 11-1: USB disconnect, device number 2 [ 177.824612][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.750'. [ 177.828360][ T8807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.750'. [ 177.832894][ T8807] netlink: 'syz.0.750': attribute type 11 has an invalid length. [ 177.836875][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.750'. [ 177.840768][ T8807] netlink: 'syz.0.750': attribute type 11 has an invalid length. [ 177.938781][ T5980] Bluetooth: hci2: command 0x0c1a tx timeout [ 178.100423][ T8834] Bluetooth: MGMT ver 1.23 [ 178.105906][ T8834] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 178.259680][ T53] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 178.395439][ T8857] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 178.406907][ T8857] CIFS mount error: No usable UNC path provided in device string! [ 178.406907][ T8857] [ 178.411932][ T8857] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 178.454681][ T8859] block nbd6: Attempted send on invalid socket [ 178.456814][ T8859] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.461452][ T8859] block nbd6: Attempted send on invalid socket [ 178.463424][ T8859] I/O error, dev nbd6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.658892][ T5980] Bluetooth: hci0: command 0x0c1a tx timeout [ 178.668862][ T5980] Bluetooth: hci1: command 0x0c1a tx timeout [ 179.266020][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 179.266039][ T40] audit: type=1400 audit(1758065666.508:562): avc: denied { read } for pid=8862 comm="syz.0.768" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 179.321750][ T8872] netlink: 'syz.0.768': attribute type 4 has an invalid length. [ 179.370133][ T40] audit: type=1400 audit(1758065666.618:563): avc: denied { write } for pid=8877 comm="syz.4.773" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 179.402505][ T5980] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 179.413942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 179.420133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 179.438792][ T40] audit: type=1400 audit(1758065666.678:564): avc: denied { create } for pid=8880 comm="syz.6.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 179.447068][ T40] audit: type=1400 audit(1758065666.688:565): avc: denied { ioctl } for pid=8880 comm="syz.6.774" path="socket:[28931]" dev="sockfs" ino=28931 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 179.472315][ T8888] delete_channel: no stack [ 179.503141][ T40] audit: type=1400 audit(1758065666.748:566): avc: denied { bind } for pid=8893 comm="syz.4.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 179.506373][ T8896] program syz.0.779 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.518699][ T40] audit: type=1400 audit(1758065666.748:567): avc: denied { write } for pid=8893 comm="syz.4.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 179.526604][ T40] audit: type=1400 audit(1758065666.758:568): avc: denied { setattr } for pid=8894 comm="syz.6.778" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 179.530071][ T54] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 179.625009][ T40] audit: type=1400 audit(1758065666.868:569): avc: denied { watch_sb watch_reads } for pid=8911 comm="syz.4.783" path="/107/file0" dev="tmpfs" ino=586 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 179.720939][ T54] usb 8-1: Using ep0 maxpacket: 8 [ 179.724085][ T54] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 179.727016][ T54] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 179.730039][ T54] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 179.733865][ T54] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 179.737495][ T54] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.743440][ T54] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 179.746385][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.813798][ T8932] mkiss: ax0: crc mode is auto. [ 179.906828][ T8937] netlink: 'syz.6.791': attribute type 11 has an invalid length. [ 179.909898][ T40] audit: type=1400 audit(1758065667.158:570): avc: denied { shutdown } for pid=8936 comm="syz.6.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 179.952231][ T54] usb 8-1: usb_control_msg returned -32 [ 179.954243][ T54] usbtmc 8-1:16.0: can't read capabilities [ 179.976080][ T8942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8942 comm=syz.4.793 [ 180.018833][ T5980] Bluetooth: hci2: command 0x0c1a tx timeout [ 180.094113][ T8952] ipvlan2: entered promiscuous mode [ 180.097454][ T8952] bridge0: port 3(ipvlan2) entered blocking state [ 180.100951][ T8952] bridge0: port 3(ipvlan2) entered disabled state [ 180.103953][ T8952] ipvlan2: entered allmulticast mode [ 180.106671][ T8952] bridge0: entered allmulticast mode [ 180.112555][ T8952] ipvlan2: left allmulticast mode [ 180.114705][ T8952] bridge0: left allmulticast mode [ 180.308548][ T8963] usbtmc 8-1:16.0: INITIATE_CLEAR returned 0 [ 180.380442][ T40] audit: type=1400 audit(180.307:571): avc: denied { create } for pid=8964 comm="syz.0.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 180.471065][ T8974] fuse: Bad value for 'group_id' [ 180.473213][ T8974] fuse: Bad value for 'group_id' [ 180.510383][ T53] usb 8-1: USB disconnect, device number 8 [ 180.738776][ T5980] Bluetooth: hci0: command 0x0c1a tx timeout [ 180.801678][ T8990] loop2: detected capacity change from 0 to 7 [ 180.805362][ T8990] loop2: [ 180.806650][ T8990] loop2: partition table partially beyond EOD, truncated [ 180.856983][ T8993] netlink: 'syz.6.809': attribute type 19 has an invalid length. [ 180.863674][ T8993] netlink: 'syz.6.809': attribute type 19 has an invalid length. [ 180.865584][ T83] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.870088][ T83] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.874283][ T83] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.878021][ T83] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.909584][ T8995] netlink: 'syz.6.810': attribute type 1 has an invalid length. [ 180.914850][ T8997] netlink: 'syz.6.810': attribute type 1 has an invalid length. [ 181.235037][ T5980] Bluetooth: hci2: unexpected event for opcode 0x080d [ 181.367897][ T4279] hid (null): unknown global tag 0xd [ 181.374355][ T4279] hid-generic 0005:07FF:0001.0005: unknown global tag 0xd [ 181.377133][ T4279] hid-generic 0005:07FF:0001.0005: item 0 0 1 13 parsing failed [ 181.381953][ T4279] hid-generic 0005:07FF:0001.0005: probe with driver hid-generic failed with error -22 [ 181.409706][ T9013] (unnamed net_device) (uninitialized): peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 181.435454][ T9013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.331287][ T9034] No control pipe specified [ 182.378555][ T9039] __nla_validate_parse: 12 callbacks suppressed [ 182.378572][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.6.824'. [ 182.618376][ T9052] overlay: ./file0 is not a directory [ 182.636631][ T9052] fuseblk: Bad value for 'fd' [ 182.819612][ T5980] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.155567][ T9] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 183.160449][ T9] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 183.163659][ T9] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 183.169425][ T9] hid-generic 0003:0004:0000.0006: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 183.223353][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.831'. [ 183.224947][ T9068] fido_id[9068]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 183.318221][ T9073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.833'. [ 183.385172][ T9077] xfrm1: entered allmulticast mode [ 183.395034][ T9079] netlink: 'syz.0.835': attribute type 9 has an invalid length. [ 183.469949][ T5980] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 183.474917][ T5980] Bluetooth: hci1: Injecting HCI hardware error event [ 183.481374][ T5980] Bluetooth: hci1: hardware error 0x00 [ 183.508475][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.839'. [ 183.515290][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.839'. [ 183.521201][ T9090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.839'. [ 183.571556][ T9092] xt_bpf: check failed: parse error [ 183.632970][ T9096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.841'. [ 183.709437][ T34] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 183.859711][ T34] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 183.863052][ T9104] netlink: 104 bytes leftover after parsing attributes in process `syz.4.845'. [ 183.865681][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.874482][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.883441][ T9105] overlay: ./file0 is not a directory [ 183.885978][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 183.892591][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.896877][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.902380][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 183.907897][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.912021][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.917646][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 183.921838][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.924746][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.928255][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 183.935438][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.938051][ T9108] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3371878526 (53950056416 ns) > initial count (26846711520 ns). Using initial count to start timer. [ 183.938652][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.949681][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 183.952532][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.955675][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.959624][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 183.962637][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.965451][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.968842][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 183.971630][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.975013][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.978812][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 183.982368][ T34] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 183.985171][ T34] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 183.987729][ T34] usb 5-1: Product: syz [ 183.995264][ T34] usb 5-1: Manufacturer: syz [ 183.997146][ T34] usb 5-1: SerialNumber: syz [ 184.004237][ T34] usb 5-1: config 0 descriptor?? [ 184.020294][ T34] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 184.131166][ T9113] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 184.265121][ C3] usb 5-1: yurex_control_callback - control failed: -71 [ 184.268494][ T53] usb 5-1: USB disconnect, device number 5 [ 184.276180][ T53] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 184.555030][ T9116] netlink: 'syz.3.848': attribute type 1 has an invalid length. [ 184.578129][ T9116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.848'. [ 184.770639][ T9125] ip6erspan1: entered promiscuous mode [ 184.773929][ T9126] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 184.916640][ T40] kauditd_printk_skb: 2383 callbacks suppressed [ 184.916656][ T40] audit: type=1400 audit(184.837:2955): avc: denied { write } for pid=9132 comm="syz.6.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 185.242021][ T9159] trusted_key: encrypted_key: insufficient parameters specified [ 185.282502][ T40] audit: type=1400 audit(185.207:2956): avc: denied { mount } for pid=9163 comm="syz.0.862" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 185.498540][ T9172] sp0: Synchronizing with TNC [ 185.520336][ T9171] [U] è` [ 185.539163][ T5980] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 185.688983][ T53] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 185.696624][ T9178] comedi comedi3: comedi_config --init_data is deprecated [ 185.770254][ T9181] netlink: 'syz.3.868': attribute type 10 has an invalid length. [ 185.784250][ T9181] netlink: 'syz.3.868': attribute type 10 has an invalid length. [ 185.840890][ T53] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.845615][ T53] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.851377][ T53] usb 11-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 185.855136][ T53] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 185.858951][ T53] usb 11-1: SerialNumber: syz [ 185.863601][ T40] audit: type=1400 audit(185.787:2957): avc: denied { bind } for pid=9182 comm="syz.3.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 185.974120][ T9192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.872'. [ 185.981021][ T9192] binder_alloc: binder_alloc_mmap_handler: 9191 200000ffe000-200000fff000 already mapped failed -16 [ 186.083547][ T53] usb 11-1: 0:2 : does not exist [ 186.085665][ T53] usb 11-1: unit 9 not found! [ 186.096600][ T53] usb 11-1: USB disconnect, device number 3 [ 186.126550][ T8755] udevd[8755]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.239203][ T9206] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 186.254231][ T40] audit: type=1400 audit(186.177:2958): avc: denied { getopt } for pid=9205 comm="syz.3.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 186.313784][ T40] audit: type=1400 audit(186.237:2959): avc: denied { mounton } for pid=9205 comm="syz.3.877" path="/299/file0" dev="9p" ino=71827599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.636748][ T9217] geneve2: entered promiscuous mode [ 186.639486][ T9217] geneve2: entered allmulticast mode [ 186.685981][ T9226] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 186.756030][ T9233] vcan1: entered allmulticast mode [ 186.864601][ T40] audit: type=1400 audit(186.787:2960): avc: denied { getopt } for pid=9235 comm="syz.4.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 187.016087][ T9241] tmpfs: Unknown parameter 'pbKƒgñ°Ûfòk/N' [ 187.240183][ T9269] geneve2: entered promiscuous mode [ 187.241986][ T9269] geneve2: entered allmulticast mode [ 187.243949][ T1147] netdevsim netdevsim3 ªªªªªª: set [1, 1] type 2 family 0 port 20000 - 0 [ 187.247243][ T1147] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 187.250838][ T1147] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 187.254707][ T1147] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 187.261370][ T9243] cgroup: fork rejected by pids controller in /syz4 [ 187.478442][ T40] audit: type=1400 audit(187.397:2961): avc: denied { getopt } for pid=9321 comm="syz.3.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 187.726530][ T40] audit: type=1400 audit(187.653:2962): avc: denied { setopt } for pid=9400 comm="syz.3.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 187.822214][ T9410] __nla_validate_parse: 3 callbacks suppressed [ 187.822227][ T9410] netlink: 28 bytes leftover after parsing attributes in process `syz.3.897'. [ 187.827036][ T9410] netlink: 'syz.3.897': attribute type 7 has an invalid length. [ 187.829688][ T9410] netlink: 'syz.3.897': attribute type 8 has an invalid length. [ 187.832121][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'. [ 187.837857][ T9410] gretap0: entered promiscuous mode [ 187.840690][ T9410] batadv_slave_1: entered promiscuous mode [ 187.843357][ T9410] gretap0: left promiscuous mode [ 187.845318][ T9410] batadv_slave_1: left promiscuous mode [ 188.135135][ T9418] bridge: RTM_NEWNEIGH with invalid ether address [ 188.298386][ T40] audit: type=1400 audit(188.222:2963): avc: denied { unmount } for pid=8332 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 188.342011][ T40] audit: type=1400 audit(188.272:2964): avc: denied { read append open } for pid=9421 comm="syz.4.900" path="/136/file0/cpuset.effective_cpus" dev="9p" ino=71827717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 188.607171][ T9447] 9p: Unknown access argument 18446744073709551615: -34 [ 188.615423][ T9449] : entered promiscuous mode [ 188.656879][ T9451] netlink: 'syz.0.907': attribute type 1 has an invalid length. [ 188.689450][ T9447] bond2: (slave bridge1): making interface the new active one [ 188.694292][ T9447] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 188.734240][ T9458] IPVS: Error connecting to the multicast addr [ 188.788555][ T9467] netlink: 'syz.4.912': attribute type 1 has an invalid length. [ 188.799223][ T9467] bridge2: entered allmulticast mode [ 188.804014][ T9469] netdevsim netdevsim6 ªªªªªª: renamed from netdevsim0 (while UP) [ 188.831251][ T9469] 9pnet: Could not find request transport: tc FÄp [ 188.838668][ T9469] netlink: 20 bytes leftover after parsing attributes in process `syz.6.913'. [ 188.896700][ T9480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=9480 comm=syz.6.916 [ 188.935330][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.918'. [ 188.944298][ T9486] netlink: 36 bytes leftover after parsing attributes in process `syz.0.918'. [ 189.106732][ T9511] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9511 comm=syz.6.924 [ 189.110610][ T9511] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9511 comm=syz.6.924 [ 189.266010][ T9521] netlink: 'syz.3.929': attribute type 10 has an invalid length. [ 189.336960][ T9525] program syz.6.931 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.510918][ T9537] autofs4:pid:9537:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 189.563919][ T9542] netlink: 28 bytes leftover after parsing attributes in process `syz.6.935'. [ 189.567538][ T9542] netlink: 60 bytes leftover after parsing attributes in process `syz.6.935'. [ 189.749818][ T9545] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 189.814781][ T9548] netlink: 20 bytes leftover after parsing attributes in process `syz.0.937'. [ 189.818934][ T9548] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 189.822540][ T9548] IPv6: NLM_F_CREATE should be set when creating new route [ 189.912788][ T9554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.939'. [ 189.971787][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 189.971804][ T40] audit: type=1400 audit(189.902:2978): avc: denied { mount } for pid=9557 comm="syz.0.941" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 189.975533][ T9558] devtmpfs: Cannot change global quota limit on remount [ 189.985979][ T40] audit: type=1400 audit(189.902:2979): avc: denied { remount } for pid=9557 comm="syz.0.941" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 190.001043][ T40] audit: type=1400 audit(189.932:2980): avc: granted { setsecparam } for pid=9559 comm="syz.6.940" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 190.015222][ T40] audit: type=1400 audit(189.942:2981): avc: denied { unmount } for pid=8332 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 190.283430][ T40] audit: type=1400 audit(190.212:2982): avc: denied { setopt } for pid=9583 comm="syz.0.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 190.292111][ T40] audit: type=1400 audit(190.212:2983): avc: denied { getopt } for pid=9583 comm="syz.0.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 190.319702][ T40] audit: type=1400 audit(190.242:2984): avc: denied { mounton } for pid=9587 comm="syz.4.952" path="/151/file0" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 190.333093][ T40] audit: type=1400 audit(190.262:2985): avc: denied { connect } for pid=9592 comm="syz.0.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 190.334228][ T9593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.953'. [ 190.521384][ T9610] fuse: Unknown parameter 'audit' [ 190.647551][ T40] audit: type=1400 audit(190.571:2986): avc: denied { read } for pid=9620 comm="syz.3.960" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.722661][ T9627] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 191.074060][ T9641] IPVS: set_ctl: invalid protocol: 32699 172.20.20.43:21 [ 191.089275][ T9639] can: request_module (can-proto-0) failed. [ 191.257834][ T9659] SELinux: policydb string length 14080 does not match expected length 8 [ 191.262016][ T9659] SELinux: failed to load policy [ 191.443179][ T1174] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 191.450504][ T1174] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 191.461881][ T4299] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 191.494162][ T40] audit: type=1326 audit(191.401:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.6.972" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa387b8eba9 code=0x7ffc0000 [ 191.531801][ T9673] binder: BINDER_SET_CONTEXT_MGR already set [ 191.536049][ T9673] binder: 9671:9673 ioctl 4018620d 200000000100 returned -16 [ 191.653009][ T9670] 8021q: adding VLAN 0 to HW filter on device bond5 [ 191.696342][ T9681] bridge: RTM_NEWNEIGH with invalid ether address [ 191.768001][ T9689] openvswitch: netlink: Duplicate key (type 0). [ 191.888346][ T9703] support for the xor transformation has been removed. [ 191.914907][ T9707] netlink: 'syz.3.986': attribute type 11 has an invalid length. [ 191.946474][ T54] IPVS: starting estimator thread 0... [ 191.981372][ T53] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 192.034537][ T53] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 192.040393][ T9711] IPVS: using max 44 ests per chain, 105600 per kthread [ 192.625135][ T9775] 8021q: VLANs not supported on gre0 [ 192.674378][ T9777] pim6reg1: tun_chr_ioctl cmd 1074025676 [ 192.676236][ T9777] pim6reg1: owner set to 0 [ 192.755845][ T9780] netlink: 'syz.6.997': attribute type 30 has an invalid length. [ 192.776993][ T9787] Invalid ELF header type: 0 != 1 [ 192.815650][ T9791] netlink: 'syz.6.997': attribute type 30 has an invalid length. [ 192.820113][ T9791] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 192.827399][ T9782] block nbd3: shutting down sockets [ 192.893762][ T9800] __nla_validate_parse: 8 callbacks suppressed [ 192.893780][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1000'. [ 192.902042][ T9800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1000'. [ 193.126577][ T9831] overlayfs: upper fs does not support file handles, falling back to index=off. [ 193.158778][ T9829] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 193.257860][ T9839] binder: 9836:9839 ioctl c0306201 200000000600 returned -22 [ 193.310742][ T9843] fuse: Unknown parameter 'f' [ 193.311904][ T9842] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1010'. [ 193.316359][ T9843] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1011'. [ 193.442306][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'. [ 193.950350][ T9865] netlink: 'syz.3.1016': attribute type 1 has an invalid length. [ 193.953881][ T9865] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1016'. [ 194.038584][ T9871] block nbd3: Unsupported socket: shutdown callout must be supported. [ 194.207645][ T9878] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1021'. [ 194.225296][ T9875] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1020'. [ 194.342706][ T9892] netlink: 'syz.6.1026': attribute type 21 has an invalid length. [ 194.372600][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1025'. [ 194.376532][ T9898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1025'. [ 194.571364][ T6066] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 194.606640][ T9919] program syz.0.1034 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.666124][ T9921] Device name not specified. [ 194.666124][ T9921] [ 194.722927][ T6066] usb 9-1: Using ep0 maxpacket: 32 [ 194.726695][ T6066] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 194.732758][ T6066] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 194.736733][ T6066] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 194.740234][ T6066] usb 9-1: Product: syz [ 194.742145][ T6066] usb 9-1: Manufacturer: syz [ 194.744191][ T6066] usb 9-1: SerialNumber: syz [ 194.748649][ T6066] usb 9-1: config 0 descriptor?? [ 194.751410][ T9887] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 194.937493][ T9938] binder: BINDER_SET_CONTEXT_MGR already set [ 194.940317][ T9938] binder: 9937:9938 ioctl 4018620d 200000000040 returned -16 [ 194.947262][ T9939] binder: BINDER_SET_CONTEXT_MGR already set [ 194.949783][ T9939] binder: 9937:9939 ioctl 4018620d 2000000000c0 returned -16 [ 195.013024][ T34] usb 9-1: USB disconnect, device number 9 [ 195.041965][ T6066] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 195.142830][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 195.142849][ T40] audit: type=1400 audit(195.070:3023): avc: denied { accept } for pid=9947 comm="syz.0.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 195.191660][ T6066] usb 8-1: Using ep0 maxpacket: 16 [ 195.194643][ T6066] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 195.199492][ T6066] usb 8-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 195.203094][ T6066] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.205805][ T6066] usb 8-1: Product: syz [ 195.207221][ T6066] usb 8-1: Manufacturer: syz [ 195.208681][ T6066] usb 8-1: SerialNumber: syz [ 195.211759][ T6066] usb 8-1: config 0 descriptor?? [ 195.215743][ T6066] hub 8-1:0.0: bad descriptor, ignoring hub [ 195.218074][ T6066] hub 8-1:0.0: probe with driver hub failed with error -5 [ 195.221688][ T6066] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 195.221704][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 195.572135][ T40] audit: type=1326 audit(195.500:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9961 comm="syz.6.1046" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa387b8eba9 code=0x0 [ 195.726468][ T7614] usb 8-1: USB disconnect, device number 9 [ 195.825196][ T9965] netlink: 'syz.4.1047': attribute type 4 has an invalid length. [ 196.032123][ T40] audit: type=1400 audit(195.959:3025): avc: denied { setopt } for pid=9980 comm="syz.4.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 196.032663][ T9978] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 196.312405][ T9985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9985 comm=syz.3.1055 [ 199.466330][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.664540][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 213.340433][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.343352][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.345952][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.349123][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.352015][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.354545][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.357022][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.360361][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.363624][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.366450][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.369424][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.371966][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.374739][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.377563][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.381238][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.385774][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.385883][ T40] audit: type=1400 audit(213.303:3026): avc: denied { map } for pid=10003 comm="syz.4.1061" path="/dev/nbd4" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 213.388125][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.397253][ T40] audit: type=1400 audit(213.303:3027): avc: denied { execute } for pid=10003 comm="syz.4.1061" path="/dev/nbd4" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 213.400142][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.411927][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.414622][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.417195][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.420217][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.423118][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.425625][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.428209][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.430865][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.433395][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.436109][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.439086][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.442006][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.444550][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.446995][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.449653][T10002] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 213.512936][T10019] binder: 10016:10019 ioctl c0189373 200000000040 returned -22 [ 215.549494][ T5980] Bluetooth: hci2: command 0x0c1a tx timeout [ 215.549589][T10004] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 216.348105][T10004] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 216.365560][ T5987] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.369810][ T5987] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.372714][ T5987] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.375581][ T5987] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.378595][ T5987] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.416209][ T40] audit: type=1400 audit(216.332:3028): avc: denied { connect } for pid=10038 comm="syz.6.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 216.561509][T10011] chnl_net:caif_netlink_parms(): no params data found [ 216.567038][T10058] netlink: 'syz.3.1076': attribute type 10 has an invalid length. [ 216.580858][ T40] audit: type=1400 audit(216.502:3029): avc: denied { nlmsg_write } for pid=10055 comm="syz.4.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 216.688229][T10011] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.690126][T10064] kvm: user requested TSC rate below hardware speed [ 216.691369][ T40] audit: type=1400 audit(216.612:3030): avc: denied { getopt } for pid=10062 comm="syz.4.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 216.696356][T10064] __nla_validate_parse: 5 callbacks suppressed [ 216.696366][T10064] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1078'. [ 216.703843][T10011] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.711751][T10011] bridge_slave_0: entered allmulticast mode [ 216.716056][T10011] bridge_slave_0: entered promiscuous mode [ 216.722801][T10011] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.725167][T10011] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.727744][T10011] bridge_slave_1: entered allmulticast mode [ 216.731651][T10011] bridge_slave_1: entered promiscuous mode [ 216.767960][T10011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.772681][T10011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.809021][T10011] team0: Port device team_slave_0 added [ 216.812850][T10011] team0: Port device team_slave_1 added [ 216.868092][T10011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.870636][T10011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.879476][T10011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.886696][T10011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.888953][T10011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.903802][T10011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.982865][T10011] hsr_slave_0: entered promiscuous mode [ 216.986327][T10011] hsr_slave_1: entered promiscuous mode [ 216.989260][T10011] debugfs: 'hsr0' already exists in 'hsr' [ 216.992277][T10011] Cannot create hsr debugfs directory [ 217.051100][T10081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.055447][T10081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.147645][T10079] kvm: pic: non byte write [ 217.151802][T10079] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 217.159362][T10079] kvm: pic: non byte write [ 217.163594][T10079] program syz.4.1083 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.178697][T10011] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 217.184287][T10011] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 217.189307][T10011] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 217.195616][T10011] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 217.226697][T10011] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.229821][T10011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.232979][T10011] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.235915][T10011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.281323][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1085'. [ 217.284412][T10092] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 217.287108][T10092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.293364][ T4299] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 217.294793][T10011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.312733][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.319237][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.351743][T10011] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.355001][T10098] binder: 10095:10098 ioctl 40046205 0 returned -22 [ 217.358959][T10098] binder: 10095:10098 ioctl c0306201 2000000013c0 returned -11 [ 217.367338][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.370865][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.383270][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.386528][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.390042][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 217.478235][ T4299] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 217.482530][ T4299] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 217.486981][ T4299] usb 8-1: config 0 interface 0 has no altsetting 0 [ 217.499083][T10097] kvm_intel: kvm [10096]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x7 [ 217.505693][ T4299] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 217.509680][ T4299] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 217.513746][ T4299] usb 8-1: Product: syz [ 217.515868][ T4299] usb 8-1: Manufacturer: syz [ 217.517978][ T4299] usb 8-1: SerialNumber: syz [ 217.526269][ T4299] usb 8-1: config 0 descriptor?? [ 217.531596][ T4299] hub 8-1:0.0: bad descriptor, ignoring hub [ 217.534112][ T4299] hub 8-1:0.0: probe with driver hub failed with error -5 [ 217.539829][ T4299] usb 8-1: selecting invalid altsetting 0 [ 217.553597][T10011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.630201][ T5987] Bluetooth: hci0: command 0x0c1a tx timeout [ 217.764699][T10011] veth0_vlan: entered promiscuous mode [ 217.772601][T10011] veth1_vlan: entered promiscuous mode [ 217.802586][T10011] veth0_macvtap: entered promiscuous mode [ 217.808679][T10011] veth1_macvtap: entered promiscuous mode [ 217.825570][T10011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.833951][T10011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.842650][ T1242] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.846493][ T1242] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.851083][ T1242] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.854873][ T1242] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.904664][ T1242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.907583][ T1242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.910131][ T34] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 217.931739][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.935060][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.040194][ T34] usb 9-1: device descriptor read/64, error -71 [ 218.181605][T10135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3856 sclass=netlink_route_socket pid=10135 comm=syz.7.1095 [ 218.200202][T10136] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 218.280432][ T34] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 218.410650][ T34] usb 9-1: device descriptor read/64, error -71 [ 218.430836][ T5987] Bluetooth: hci1: command tx timeout [ 218.463519][T10144] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1097'. [ 218.467514][T10144] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1097'. [ 218.512848][ T40] audit: type=1400 audit(218.431:3031): avc: denied { accept } for pid=10146 comm="syz.6.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 218.531306][ T34] usb usb9-port1: attempt power cycle [ 218.553034][ T40] audit: type=1326 audit(218.471:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10148 comm="syz.6.1099" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa387b8eba9 code=0x7ffc0000 [ 218.563076][ T40] audit: type=1326 audit(218.471:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10148 comm="syz.6.1099" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa387b8eba9 code=0x7ffc0000 [ 218.573458][ T40] audit: type=1326 audit(218.471:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10148 comm="syz.6.1099" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa387b8eba9 code=0x7ffc0000 [ 218.583231][ T40] audit: type=1326 audit(218.471:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10148 comm="syz.6.1099" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa387b8eba9 code=0x7ffc0000 [ 218.593473][ T40] audit: type=1326 audit(218.471:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10148 comm="syz.6.1099" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa387b8eba9 code=0x7ffc0000 [ 218.614615][ T7614] usb 8-1: USB disconnect, device number 10 [ 218.692477][T10159] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 218.696831][T10159] .: renamed from bond0 (while UP) [ 218.782906][ T40] audit: type=1400 audit(218.701:3037): avc: denied { ioctl } for pid=10165 comm="syz.6.1105" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 218.812546][ T40] audit: type=1400 audit(218.731:3038): avc: denied { setopt } for pid=10167 comm="syz.7.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 218.857612][T10172] netlink: 'syz.7.1107': attribute type 2 has an invalid length. [ 218.860783][T10172] netlink: 46 bytes leftover after parsing attributes in process `syz.7.1107'. [ 218.881677][T10174] input: syz0 as /devices/virtual/input/input16 [ 218.896761][ T34] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 218.928829][ T34] usb 9-1: device descriptor read/8, error -71 [ 218.983429][T10183] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1109'. [ 218.992830][T10183] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1109'. [ 219.096823][T10207] can0: slcan on ptm0. [ 219.152602][T10206] can0 (unregistered): slcan off ptm0. [ 219.180573][ T34] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 219.223554][ T34] usb 9-1: device descriptor read/8, error -71 [ 219.350841][ T34] usb usb9-port1: unable to enumerate USB device [ 219.358802][ C3] vxcan1: j1939_tp_rxtimer: 0xffff88803b4ea400: rx timeout, send abort [ 219.363651][ T40] audit: type=1400 audit(6387461648.268:3039): avc: denied { read } for pid=5365 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 219.372978][ T40] audit: type=1400 audit(6387461648.268:3040): avc: denied { search } for pid=5365 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.864057][ C3] vxcan1: j1939_tp_rxtimer: 0xffff88803b4ea400: abort rx timeout. Force session deactivation [ 220.520743][ T5980] Bluetooth: hci1: command tx timeout [ 220.702072][T10254] netlink: 'syz.4.1122': attribute type 10 has an invalid length. [ 220.705787][T10254] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1122'. [ 220.709457][T10254] dummy0: entered promiscuous mode [ 220.713927][T10254] bridge0: port 3(dummy0) entered blocking state [ 220.716136][T10254] bridge0: port 3(dummy0) entered disabled state [ 220.718293][T10254] dummy0: entered allmulticast mode [ 220.721365][T10254] bridge0: port 3(dummy0) entered blocking state [ 220.724931][T10254] bridge0: port 3(dummy0) entered forwarding state [ 220.990869][ T5987] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 220.990968][ T5980] Bluetooth: hci2: command 0x0c1a tx timeout [ 220.991044][ T5984] Bluetooth: hci0: command 0x0c1a tx timeout [ 220.994149][ T7614] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 221.001670][ T7614] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 222.590884][ T5980] Bluetooth: hci1: command tx timeout [ 223.150737][ T7614] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 223.154936][ T7614] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 223.160788][ C0] ------------[ cut here ]------------ [ 223.163436][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 223.165708][ C0] WARNING: CPU: 0 PID: 0 at kernel/workqueue.c:2255 __queue_work+0xd03/0x1160 SYZFAIL: failed to recv rpc [ 223.168568][ C0] Modules linked in: fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 223.170400][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 223.175157][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 223.178893][ C0] RIP: 0010:__queue_work+0xd03/0x1160 [ 223.180599][ C0] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 a0 03 ac 8b e8 be 1e f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 ff 79 38 00 90 0f 0b 90 e9 b4 f5 ff [ 223.186898][ C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00010082 [ 223.188907][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a4388 [ 223.191531][ C0] RDX: ffffffff8e2977c0 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 223.194334][ C0] RBP: ffff88802a670970 R08: 0000000000000001 R09: 0000000000000000 [ 223.196918][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000000f8f [ 223.199457][ C0] R13: 0000000000000101 R14: ffffffff81833490 R15: ffff888054239178 [ 223.201985][ C0] FS: 0000000000000000(0000) GS:ffff8880d66b2000(0000) knlGS:0000000000000000 [ 223.205180][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.207587][ C0] CR2: 00005555882595c8 CR3: 000000003ced7000 CR4: 0000000000352ef0 [ 223.210250][ C0] Call Trace: [ 223.211351][ C0] [ 223.212300][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 223.214227][ C0] call_timer_fn+0x197/0x620 [ 223.215740][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 223.217408][ C0] ? __run_timers+0x559/0x960 [ 223.219130][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 223.221910][ C0] __run_timers+0x569/0x960 [ 223.223789][ C0] ? __pfx___run_timers+0x10/0x10 [ 223.225883][ C0] run_timer_base+0x114/0x190 [ 223.227754][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 223.229860][ C0] ? rcu_is_watching+0x12/0xc0 [ 223.231799][ C0] run_timer_softirq+0x1a/0x40 [ 223.233849][ C0] handle_softirqs+0x219/0x8e0 [ 223.236047][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 223.238452][ C0] __irq_exit_rcu+0x109/0x170 [ 223.240375][ C0] irq_exit_rcu+0x9/0x30 [ 223.242146][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 223.244304][ C0] [ 223.245268][ C0] [ 223.246244][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 223.248158][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 223.249965][ C0] Code: 7d 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 56 15 00 fb f4 cc 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 223.257012][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 00000282 [ 223.258961][ C0] RAX: 0000000000176e1d RBX: 0000000000000000 RCX: ffffffff8b94bb49 [ 223.261468][ C0] RDX: 0000000000000000 RSI: ffffffff8de52c58 RDI: ffffffff8c163300 [ 223.264016][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000001 R09: ffffed100d486655 [ 223.266545][ C0] R10: ffff88806a4332ab R11: 0000000000000000 R12: 0000000000000000 [ 223.269183][ C0] R13: ffffffff8e2977c0 R14: ffffffff90ab7290 R15: 0000000000000000 [ 223.272108][ C0] ? ct_kernel_exit+0x139/0x190 [ 223.274077][ C0] default_idle+0x13/0x20 [ 223.275523][ C0] default_idle_call+0x6d/0xb0 [ 223.277076][ C0] do_idle+0x391/0x510 [ 223.278426][ C0] ? __pfx_do_idle+0x10/0x10 [ 223.279914][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 223.281578][ C0] cpu_startup_entry+0x4f/0x60 [ 223.283125][ C0] rest_init+0x16b/0x2b0 [ 223.284586][ C0] ? acpi_subsystem_init+0x133/0x180 [ 223.286344][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 223.288236][ C0] start_kernel+0x3ee/0x4d0 [ 223.289984][ C0] x86_64_start_reservations+0x18/0x30 [ 223.292143][ C0] x86_64_start_kernel+0x130/0x190 [ 223.293872][ C0] common_startup_64+0x13e/0x148 [ 223.295548][ C0] [ 223.296578][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 223.298962][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 223.301758][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 223.305206][ C0] Call Trace: [ 223.306384][ C0] [ 223.307387][ C0] dump_stack_lvl+0x3d/0x1f0 [ 223.309036][ C0] vpanic+0x6e8/0x7a0 [ 223.310451][ C0] ? __pfx_vpanic+0x10/0x10 [ 223.312040][ C0] ? __queue_work+0xd03/0x1160 [ 223.313983][ C0] panic+0xca/0xd0 [ 223.315490][ C0] ? __pfx_panic+0x10/0x10 [ 223.317377][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 223.319581][ C0] check_panic_on_warn+0xab/0xb0 [ 223.322004][ C0] __warn+0xf6/0x3c0 [ 223.324058][ C0] ? __queue_work+0xd03/0x1160 [ 223.326166][ C0] report_bug+0x3c3/0x580 [ 223.328007][ C0] ? __queue_work+0xd03/0x1160 [ 223.330020][ C0] handle_bug+0x184/0x210 [ 223.331456][ C0] exc_invalid_op+0x17/0x50 [ 223.333144][ C0] asm_exc_invalid_op+0x1a/0x20 [ 223.335161][ C0] RIP: 0010:__queue_work+0xd03/0x1160 [ 223.337215][ C0] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 a0 03 ac 8b e8 be 1e f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 ff 79 38 00 90 0f 0b 90 e9 b4 f5 ff [ 223.345405][ C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00010082 [ 223.347904][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a4388 [ 223.351483][ C0] RDX: ffffffff8e2977c0 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 223.355266][ C0] RBP: ffff88802a670970 R08: 0000000000000001 R09: 0000000000000000 [ 223.358505][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000000f8f [ 223.361752][ C0] R13: 0000000000000101 R14: ffffffff81833490 R15: ffff888054239178 [ 223.365048][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 223.367477][ C0] ? __warn_printk+0x198/0x350 [ 223.369484][ C0] ? __warn_printk+0x1a5/0x350 [ 223.371864][ C0] ? __queue_work+0xd02/0x1160 [ 223.374385][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 223.376915][ C0] call_timer_fn+0x197/0x620 [ 223.378818][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 223.380989][ C0] ? __run_timers+0x559/0x960 [ 223.383002][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 223.385403][ C0] __run_timers+0x569/0x960 [ 223.387339][ C0] ? __pfx___run_timers+0x10/0x10 [ 223.389617][ C0] run_timer_base+0x114/0x190 [ 223.391973][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 223.394139][ C0] ? rcu_is_watching+0x12/0xc0 [ 223.396032][ C0] run_timer_softirq+0x1a/0x40 [ 223.398018][ C0] handle_softirqs+0x219/0x8e0 [ 223.399912][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 223.402066][ C0] __irq_exit_rcu+0x109/0x170 [ 223.404099][ C0] irq_exit_rcu+0x9/0x30 [ 223.405934][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 223.408303][ C0] [ 223.409579][ C0] [ 223.410850][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 223.413619][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 223.416225][ C0] Code: 7d 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 56 15 00 fb f4 cc 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 223.424107][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 00000282 [ 223.426579][ C0] RAX: 0000000000176e1d RBX: 0000000000000000 RCX: ffffffff8b94bb49 [ 223.429856][ C0] RDX: 0000000000000000 RSI: ffffffff8de52c58 RDI: ffffffff8c163300 [ 223.433159][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000001 R09: ffffed100d486655 [ 223.436859][ C0] R10: ffff88806a4332ab R11: 0000000000000000 R12: 0000000000000000 [ 223.440341][ C0] R13: ffffffff8e2977c0 R14: ffffffff90ab7290 R15: 0000000000000000 [ 223.443676][ C0] ? ct_kernel_exit+0x139/0x190 [ 223.445770][ C0] default_idle+0x13/0x20 [ 223.447545][ C0] default_idle_call+0x6d/0xb0 [ 223.449615][ C0] do_idle+0x391/0x510 [ 223.451442][ C0] ? __pfx_do_idle+0x10/0x10 [ 223.453552][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 223.455983][ C0] cpu_startup_entry+0x4f/0x60 [ 223.458003][ C0] rest_init+0x16b/0x2b0 [ 223.459831][ C0] ? acpi_subsystem_init+0x133/0x180 [ 223.462074][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 223.464496][ C0] start_kernel+0x3ee/0x4d0 [ 223.466352][ C0] x86_64_start_reservations+0x18/0x30 [ 223.468539][ C0] x86_64_start_kernel+0x130/0x190 [ 223.470681][ C0] common_startup_64+0x13e/0x148 [ 223.472319][ C0] [ 223.474047][ C0] Kernel Offset: disabled [ 223.475664][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:52:12 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564b815 RDI=ffffffff9b1180e0 RBP=ffffffff9b1180a0 RSP=ffffc90000007550 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b1180a0 R15=ffffffff8564b7b0 RIP=ffffffff8564b83f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555882595c8 CR3=000000003ced7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 449e7b96e99f10c3 5f3e3f5231197ce3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e92afbd3a644856e 3c514afbbaba2769 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7469c72fae105a69 2b6eb5c5dc527a04 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e2d1586b276fc258 e3b3632aba947d00 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000060 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000020 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dcfbefa0feb06796 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 82c1d26700000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 65d085b14e0a4a8b 66b45ce878020eba ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000001c85d1f0 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5eadf4bd5e8657ca 2978b39f6339aa7a ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 395f5319900366e4 5d000dc4ce368714 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffff888039dca440 RBX=ffffffff8e5c15a0 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff822db4f0 RDI=fffffbfff1cb82b4 RBP=0000000000000002 RSP=ffffc900035f76e8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8197da50 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f85c5307d60 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85c47a76c3 00007f85c47a76c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8d74b580 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555c6f069c 000055555c6eea40 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555c6d44a8 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555c6e4608 000055555c6e4430 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 034c040007dc0310 040007d8031a0800 07d00302be040007 cc0310040007c803 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100001800401 000000080606015d 9a40808080080001 e00300100001d003 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00100001c0030210 0001b0036810003f 900325d8080007e0 034c040007dc0310 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040007d8031a0800 07d00302be040007 cc0310040007c803 23fc080007c00302 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c0040007bc031004 0007b80300000004 080607b003060400 07ac0310040007a8 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802a670970 RCX=ffffffff81833c9e RDX=ffff888048368000 RSI=ffffffff818340b4 RDI=ffffffff818340b9 RBP=0000000000000200 RSP=ffffc900039f7958 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000200 R11=0000000000000000 R12=0000000000000003 R13=ffffc900039f79d8 R14=ffff88802a671b00 R15=ffff88802a6711b0 RIP=ffffffff8b94abd0 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5e8e7fcfe8 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000002 DR1=0000000000000005 DR2=8000000000000000 DR3=1000000100000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 449e7b96e99f10c3 5f3e3f5231197ce3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e92afbd3a644856e 3c514afbbaba2769 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7469c72fae105a69 2b6eb5c5dc527a04 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e2d1586b276fc258 e3b3632aba947d00 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000060 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000020 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dcfbefa0feb06796 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 82c1d26700000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 65d085b14e0a4a8b 66b45ce878020eba ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000001c85d1f0 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5eadf4bd5e8657ca 2978b39f6339aa7a ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 395f5319900366e4 5d000dc4ce368714 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001265eb RBX=0000000000000003 RCX=ffffffff8b94bb49 RDX=0000000000000000 RSI=ffffffff8de52c58 RDI=ffffffff8c163300 RBP=ffffed1003c55000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801e2a8000 R14=ffffffff90ab7290 R15=0000000000000000 RIP=ffffffff8b94a68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055558991d5c8 CR3=0000000032fff000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=fb73e0cbf73a6b4d 91bf23df17930a85 fb73e0cbf73a6b4d 91bf23df17930a85 fb73e0cbf73a6b4d 91bf23df17930a85 fb73e0cbf73a6b4d 91bf23df17930a85 ZMM18=7096428b802f7b53 6aa8ead457dcb43f 7096428b802f7b53 6aa8ead457dcb43f 7096428b802f7b53 6aa8ead457dcb43f 7096428b802f7b53 6aa8ead457dcb43f ZMM19=a608000000000000 0000000000000005 a608000000000000 0000000000000004 a608000000000000 0000000000000003 a608000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8808000108000a01 6ee800080008b003 0204900008a00300 0490000890030804 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 880008880302b8c8 0484000884031404 0008800338100008 800401c808000288 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08000108000a016e e800020007000800 08b0030204900008 a003000490000890 ZMM24=4445419144454191 4445419144454191 4445419144454191 4445419144454191 4445419144454191 4445419144454191 4445419144454191 4445419144454191 ZMM25=9867d2a69867d2a6 9867d2a69867d2a6 9867d2a69867d2a6 9867d2a69867d2a6 9867d2a69867d2a6 9867d2a69867d2a6 9867d2a69867d2a6 9867d2a69867d2a6 ZMM26=c499ebaac499ebaa c499ebaac499ebaa c499ebaac499ebaa c499ebaac499ebaa c499ebaac499ebaa c499ebaac499ebaa c499ebaac499ebaa c499ebaac499ebaa ZMM27=ae2ff297ae2ff297 ae2ff297ae2ff297 ae2ff297ae2ff297 ae2ff297ae2ff297 ae2ff297ae2ff297 ae2ff297ae2ff297 ae2ff297ae2ff297 ae2ff297ae2ff297 ZMM28=000000800000007f 0000007e0000007d 0000007c0000007b 0000007a00000079 0000007800000077 0000007600000075 0000007400000073 0000007200000071 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=b2050000b2050000 b2050000b2050000 b2050000b2050000 b2050000b2050000 b2050000b2050000 b2050000b2050000 b2050000b2050000 b2050000b2050000