last executing test programs: 55.207305974s ago: executing program 2 (id=387): socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f00000000c0)={0xd5, 0x0, 0x7c}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x1, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x3, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000240)=[@cpuid={0x14, 0x18, {0x8, 0xfffffc01}}, @cpuid={0x14, 0x18, {0x900, 0xbe5}}, @wr_drn={0x6e, 0x20, {0x6, 0x100000001}}, @wrmsr={0x1e, 0x20, {0x3a6, 0x5}}, @in_dx={0x82, 0x20, {0x5e34, 0x2}}, @code={0xa, 0x63, {"47f70b00800000460f9e4e00c44223f610c74424004b000000c7442402fa000000ff2c24440f01c866baf80cb8f09dae80ef66bafc0c66b8000066efc4e2c539546a03360f3066b81d010f00d066bad104ed"}}, @rdmsr={0x32, 0x18, {0x11a}}, @uexit={0x0, 0x18, 0x5}, @out_dx={0xaa, 0x28, {0x11, 0x0, 0x9}}, @wr_drn={0x6e, 0x20, {0x5, 0xfd8c}}, @uexit={0x0, 0x18, 0x80}, @wr_crn={0x46, 0x20, {0x0, 0xfffffffffffffffd}}, @wrmsr={0x1e, 0x20, {0x8cf, 0x7}}, @wrmsr={0x1e, 0x20, {0xa32, 0x7}}], 0x1e3}) r5 = signalfd(r0, &(0x7f0000000040)={[0x7]}, 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$caif_stream(0x25, 0x1, 0x1) poll(&(0x7f0000000340)=[{r7, 0x4040}], 0x1, 0x7) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond0\x00'}) writev(r1, &(0x7f0000000400), 0x10000000000002f8) recvfrom$llc(r5, &(0x7f0000000440)=""/248, 0xf8, 0x1, 0x0, 0x0) 54.967542178s ago: executing program 2 (id=394): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x802) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r4, &(0x7f00000024c0)={0x2020}, 0x2020) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000380)={0x0, 0x6}, &(0x7f0000000440)=0x8) sendmmsg$alg(r5, &(0x7f0000000400), 0x0, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000500)=0xd0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000640)="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", 0x11f, 0x20000080, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f0000000080)="9ae0f23c37a4", 0xffffffffffffff60, 0x20000806, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@getqdisc={0x24, 0x26, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x5, 0x2}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x40004) syz_genetlink_get_family_id$nl80211(0x0, r5) 54.80060618s ago: executing program 2 (id=395): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x26) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r5, 0x3b66, 0x3) 54.789443274s ago: executing program 2 (id=398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) (async) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) r1 = semget$private(0x0, 0x4, 0x100) semctl$GETVAL(r1, 0x3, 0xc, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) read$char_usb(r2, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r6, r5, 0x25, 0x2, @val=@netkit={@void, @value=r6}}, 0x1c) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001280)={'batadv0\x00', 0x0}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000017c0)={@broadcast, @local, 0x0}, &(0x7f0000001800)=0xc) sendmmsg$inet(r3, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f00000001c0)="fc7b92ce91832ce29e5555c18c018c3b95f344360440d33597fd07650643c7d4873c0bdd5da33fe3697705052f5e5c40795e40b865e821e62c9baee85c82f60e45773bb24912ec31471062b5ab8c6e92178f6a01ae52395cd58e36add7b47f50cc663f125763cc3ec1658a462517483b8109e43a12c50b6cb8e4836460dae16611e9dabe917575204c9d3c15895b2453b11139e5860d66275d7080a6b2088f62049c1393a50ede32ab3b134d6771e54b4de1cfbe0b0a1516b8282c45e198843ec83913cc0e2f042dc3dd5045dbe2909db1cff5ce02c0610f5affa39f3b542a4b042e0766956fc6ab15be0acecc", 0xed}, {&(0x7f00000002c0)="a74e93307163a3f2ec227286fc4b42552abb6b3bd593431a1f0659775a78c0675db7016eef0d54c8bf3ca13efd8cef70fb7868d90afae897bbd03d500b703f98e36ef69f787f9460c6824ac3c66278c659da26d2f4f470ad05cf751524f11f", 0x5f}, {&(0x7f0000000340)="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", 0xfc}, {&(0x7f0000000440)="9998186144a3036e4c863a8a92df1b0203cae1bc8229f2ef10515e6adabeb9bd863da31cf309e1d709f9ed14a73f4c9b30b4911b74a0a05e593e3624d100f1213e12bfa07d0729dc2a541d344271b50d3fd7a05a1776e0e2bebd268f2a622c5804d04122b6c4300d17d425e0aa147b64df7c227754118dfedf9338e047279ec04a7425fd73", 0x85}, {&(0x7f0000000500)="ef65250b9361421447eea0b7210574045371c72e17b2417100e418ea117923ee4c6add266752f43677294ed2182e1c1bd1bcfd832a6a8dd12b7d4e2e3168d71353fd355fba35b6143af7dbb4d0a4ffa3b8d4652e12829f2851c2fe808d98894c22d806", 0x63}], 0x5, &(0x7f0000001c40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x134, 0x0, 0x7, {[@cipso={0x86, 0x29, 0x2, [{0x6, 0xe, "c4a5e44d91ef2cf0d46eaca5"}, {0x6, 0x11, "4afa3cd30372b9ef104ae92f904f4f"}, {0x1, 0x4, "489e"}]}, @timestamp_addr={0x44, 0x1c, 0x86, 0x1, 0x9, [{@loopback, 0x1b25}, {@private=0xa010100, 0x563}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa}]}, @timestamp_addr={0x44, 0x34, 0x20, 0x1, 0x9, [{@local, 0x3}, {@broadcast, 0x4}, {@multicast1, 0x8}, {@loopback, 0x7}, {@multicast2}, {@private=0xa010101, 0xa}]}, @noop, @end, @timestamp_addr={0x44, 0xc, 0xa5, 0x1, 0x0, [{@local, 0x1}]}, @cipso={0x86, 0x5f, 0x3, [{0x0, 0x3, "7f"}, {0x4, 0x11, "5e008bb1229eb1836a2d9bbbe9a1e1"}, {0x7, 0x4, "b0d5"}, {0x0, 0xc, "a3e6237ca3c0db37bb5a"}, {0x6, 0xa, "9eba2f6e4f460c64"}, {0x5, 0x8, "5e463fafb0f4"}, {0x0, 0xc, "3dbd478b20651e262d76"}, {0x5, 0x2}, {0x0, 0x5, "e5e86a"}, {0x0, 0x10, "a35730cfc29e421f5ec921fa0aef"}]}, @timestamp={0x44, 0x2c, 0x31, 0x0, 0x5, [0x6, 0x8, 0x8, 0x7, 0x80000000, 0x9, 0x4, 0x6, 0x9, 0x3]}, @timestamp={0x44, 0x10, 0x58, 0x0, 0x8, [0xb9, 0x1, 0x7]}, @noop]}}}], 0x168}}, {{&(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000740)="05db42d7f4fa3136a43f0cea305b30d61f38a5e558fb6f3850e146f21845779f7120625a40b550c9d1da230206342baf63fe657c03103fa21b3a0960579daf13c43dfe8f4392d2faead5c434c4c64f3b0ecba9b8de7600e44a82d21a80c96afbb1b855661748b39ad6708e81c9232126e1e93279fea84a18b69db34c58954dcdb532395fb4d1883cf212d329708ae70e7f", 0x91}, {&(0x7f0000000800)="584740cca8f3ce422cdba9aaecf901d9baf7465b1b408bddf0420387451322c83407794aa00500decaae1cecd469722675d14e3a0dc7d30d18aa191e621c603f15062a", 0x43}], 0x2, &(0x7f00000008c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x98}}, {{&(0x7f0000000980)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000dc0)=[{&(0x7f00000009c0)="e3931c6df59ae18ca18b47434e994da0a42f30d15c5ea70c3c9359d4f2ff4beea261288b03b1429af2b408065dd40e3638bc1e0a4f5a0c77363867ef860a6cf839667befa984b827cbba64f942fbbec211e91ae453601123b5372a4ef73c7c3a119b6221b01f7aa68c547da41b1adf7911fc1982f3df086a25a63ae26aef99746f606fb59405a74541f009edbd02cb91de86d8621e89383ff6222da9f7981f558d9acaf17fe2fc532fbd3ae65f857b939aafbe2b2d54841051f0d4630ef89d8a69328267b9f683716ab2766225e1b85d5b1490f6784da2c41ccb3c80", 0xdc}, {&(0x7f0000000ac0)="60ea342450a97fe9d06903c5059c577841eed2bd34a7da5f978d3e87064b33758d457bd7e75fe3c712b49b711060409c88c35fd2511d073c82cf629dd929b50700cb16cb2cb47bab0edcfc755630c2f1f157a9899bb18400dd5bf8f0d3e0561f3c994595c0589d7e9e7c127b3ee4813ca29d7973651f05b58e47046049513d6bf612f3300cfc98d7b194d59a848ead8c460cebbe6428e44b2a098abaf9a82c5a81944c057ada908e1c2f63a4c926fdc1", 0xb0}, {&(0x7f0000000b80)="24a3795a55e3540d99c2cc3303afdb6158f2e2e7f333f1af7894c0404bb92bfd284bbaa304233519efb4e408d0944938630b83c3a151c584293317e081da7d7b06acd843dd", 0x45}, {&(0x7f0000000c00)="abb9ba6d2185064ee2d32253f64db116cd163b05da0b7c2bc00141ec8370167c258d3aa3d1c2e2f4d29cfe56f74b6bf6b0ad7c1c81af9a0c4ee4ff09fce575d0fcb125666ae0561b94019518020db360739ac65ad6a7d957d0042e2260aa8905c1b4a6cbb59d2890dcc3bead6c72223902c43a51a835b20e582373d1f89b83c267cd6aa15e1f36b9e76800019256198e", 0x90}, {&(0x7f0000000cc0)="9edd0f2643c48c6aa4a41445eeaa8c84da9c2fa73577c1166a7e3edf129018cdb762933eb25654d5e607c55597522bd493f5fbfada34ce283182209db906dbbe8af61598f546ac52f40aa86b1bfd70d03d7b5c558e1fd96b34499077b2be0bcec481e19063bb56eb8c2ec7f7ff679422b154f13aec309ab180891f81fa7e68bb85feff0bdeb0015c5b93ed70debfc5ae5a5b67a6461c40e43d3fb32d51638513b6366b71a11f00f08266493c3f59bfa61aa7ebe21d7308db827b6798eb322292dec4c5f4e7120d4e38dd1fd9f0e1811976bbc1dbfda7798417f3caad4e0b5d0b1e0c", 0xe2}], 0x5, &(0x7f0000000e40)=[@ip_retopts={{0x60, 0x0, 0x7, {[@noop, @rr={0x7, 0xb, 0x7e, [@broadcast, @empty]}, @rr={0x7, 0x13, 0x47, [@multicast2, @loopback, @local, @multicast1]}, @generic={0x7, 0x4, "3c83"}, @timestamp={0x44, 0x24, 0x67, 0x0, 0x2, [0xcc08ef6e, 0xae8f, 0x5, 0x0, 0x1aa, 0x12ee, 0x80000001, 0x9]}, @timestamp={0x44, 0x8, 0x20, 0x0, 0x4, [0xf5]}]}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@ssrr={0x89, 0x23, 0x57, [@rand_addr=0x64010102, @rand_addr=0x64010101, @multicast2, @broadcast, @loopback, @multicast2, @empty, @rand_addr=0x64010102]}, @cipso={0x86, 0x33, 0x2, [{0x1, 0x7, "92d7e3e860"}, {0x5, 0xc, "4a80a4d5aca3c492d42c"}, {0x1, 0xd, "2466e8c94b4bb8146bf843"}, {0x0, 0xd, "d7ba356045868e35a6061c"}]}]}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x52, [@broadcast, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1, @dev={0xac, 0x14, 0x14, 0x27}, @local]}, @ssrr={0x89, 0x17, 0xe4, [@loopback, @remote, @multicast1, @broadcast, @private=0xa010100]}, @timestamp_addr={0x44, 0x4, 0x8c, 0x1, 0x6}, @timestamp={0x44, 0x20, 0x90, 0x0, 0x5, [0x5, 0x1, 0x8, 0xb7bb, 0xfffffffc, 0x5, 0x80000001]}, @ra={0x94, 0x4, 0x1}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x150}}, {{&(0x7f0000000fc0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000001000)="2abcbfd609b23cf43d66aa4a791d9abb85c884eab37bee3ffef57dc79d2187df3f8e6a2db8dc7828009733f77ad592d4cdcfa7102287f3f8f9a0995942be8156691583a8fd0c2c78d8268a28d30c0ec5dbe45f2b9830f359cc2b34fa9522f4182f1197837bcbd5d8956576ac60738eb36fa8c5d81790f333f66cf56bb477e270287d0adce426a5bab55baa59", 0x8c}], 0x1, &(0x7f0000001100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x98}}, {{&(0x7f00000011c0)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000001240)=[{&(0x7f0000001200)="1a76a4cad4ba5194f247b71ddb272dca5b2341773cd44b56393eb9be", 0x1c}], 0x1, &(0x7f00000012c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}, @ip_ttl={{0x14}}, @ip_retopts={{0x130, 0x0, 0x7, {[@rr={0x7, 0xf, 0x68, [@multicast2, @empty, @multicast1]}, @cipso={0x86, 0x67, 0x2, [{0x1, 0x11, "1f157d5e822f0a5f98f98695c8c1e9"}, {0x0, 0xa, "7710a4de41861582"}, {0x2, 0x6, "7c2337bf"}, {0x2, 0x7, "5b94d8e158"}, {0x4, 0xa, "0151c6c9d068108b"}, {0x5, 0x11, "05a2db7be14a9cd17efdc33f3d2d3f"}, {0x1, 0xa, "def002adfcdf4d3b"}, {0x0, 0x11, "040c4f5512b965e5adfff89e60e612"}, {0x5, 0x3, "ac"}]}, @timestamp={0x44, 0xc, 0x4c, 0x0, 0x4, [0x0, 0x6]}, @generic={0x7, 0x3, 'A'}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x48, 0x3, [{0x5, 0xa, "1c1856ba12294121"}, {0x7, 0x9, "32f4a11ddec483"}, {0x7, 0x7, "930a37fc22"}, {0x0, 0x11, "45e6834a6803ff06ba533f60ed0c71"}, {0x1, 0xa, "f82f69b04a2b7fd0"}, {0x6, 0xd, "a9444ac2f0a62e010bc545"}]}, @timestamp_prespec={0x44, 0x4c, 0x37, 0x3, 0x8, [{@multicast1, 0x80000000}, {@empty, 0x8}, {@rand_addr=0x64010102, 0x8}, {@rand_addr=0x64010102, 0x4}, {@local, 0x102}, {@multicast2, 0x10}, {@broadcast, 0x6}, {@broadcast, 0x6}, {@local, 0x59}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x89}}, @ip_retopts={{0x10}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0x3, [{@empty, 0x2}, {@broadcast, 0xa6}, {@loopback, 0xf}, {@empty, 0x1000}, {@local, 0x2}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x200}}, {{&(0x7f00000014c0)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000001780)=[{&(0x7f0000001500)="52b054a047ae5c8269171226102a06697249837d4b56ce02e1c140d67f189fb6e7e3d564153534ce180a8f242b392d6847dbbe395f5c27153dbe509bad9bf77dc9339f2c8d6fdba9e7664385a2ef04ea6e3794e6efdc44316603b107139bed5bd4052d1244bcc91e22d49294d7", 0x6d}, {&(0x7f0000001580)="9ec3f921f652265096c2e753214d66bd6d4501fd9efee9895c7b9b2318e3bda5363b57888747c273", 0x28}, {&(0x7f00000015c0)="f2cbafd7e44dc4066f0f2e265fe3051e32fa662d0c9537c838300696cc0d6ac05df556704fa4cb400a86ec46d1a6243f2a8fa66a9024f9576da55c154dccf81d2418a6816f3e190a11b5ffa0eedbff3816c00865920a0d5abfada3321790c2eed1e51e67b317b5340688e65fcd996a47a052d7e2357856bca3f65a68c16817170bc571111991412a6ba51dfe7b87b06f6de8a61fdbb0af5cfd97c71bb8fbeeab4abb3478f7491108787bf48107045865589b2292bc23f0cd953756533756037e9a3fb518", 0xc4}, {&(0x7f00000016c0)="8199e5a0ab07635ba5cfe6d71f37e149546cf1894fd3551ff6a506f8b6dbddbb08dfa441bb2a4f9d7d3b92813a732fcf774d97d0a97c818ce44c6e43628ecb82a1858a73f66cb89eb2b499f9b1e2aa933dd7f0f019919871b7a7c9adb1bd6f64492525a941a7163de0298e040d5f7dc2f607572cba607fbb181a909adb7b00760a88b807146d1e05acade77f94c446a3c89f3e8e4ddd4c242f01d6321e8312cb2dbc77392a8754", 0xa7}], 0x4, &(0x7f0000001840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x76d2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x27fd01fc}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x41}, @dev={0xac, 0x14, 0x14, 0x12}}}}, @ip_retopts={{0xd4, 0x0, 0x7, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xe4, [@private=0xa010100]}, @lsrr={0x83, 0x1f, 0x79, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3a}, @remote, @broadcast, @rand_addr=0x64010102, @private=0xa010101, @multicast1]}, @cipso={0x86, 0x51, 0x0, [{0x5, 0x9, "d1c560689062cf"}, {0x0, 0x12, "865585e7d8a58294b90f3c652a068e23"}, {0x2, 0x10, "784bf9d869fe900176f4c27aa57e"}, {0x6, 0x3, "1a"}, {0x6, 0xf, "58fe91d07b7b685de3f8785cbe"}, {0x5, 0xe, "65ed31e26a562a67033eb4bb"}]}, @lsrr={0x83, 0xf, 0xdd, [@multicast2, @private=0xa010101, @rand_addr=0x64010101]}, @noop, @timestamp={0x44, 0x2c, 0x47, 0x0, 0xc, [0x2, 0x7, 0x1, 0x4, 0x4, 0x401, 0x8, 0x34, 0x7, 0x7]}, @ssrr={0x89, 0x7, 0x9, [@empty]}, @noop]}}}, @ip_retopts={{0xd4, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x93, 0x1, 0x3, [{@remote, 0x101}, {@local, 0x5}, {@multicast1, 0x7}, {@private=0xa010100, 0x1}]}, @lsrr={0x83, 0x27, 0x39, [@rand_addr=0x64010102, @local, @dev={0xac, 0x14, 0x14, 0x1f}, @rand_addr=0x64010100, @remote, @private=0xa010101, @broadcast, @remote, @private=0xa010101]}, @lsrr={0x83, 0x1b, 0xc6, [@rand_addr=0x64010101, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote]}, @timestamp_prespec={0x44, 0x2c, 0x10, 0x3, 0x4, [{@loopback, 0xfff}, {@multicast2, 0x401}, {@multicast2, 0x30}, {@rand_addr=0x64010100, 0x7}, {@empty, 0x80}]}, @timestamp={0x44, 0x18, 0x4e, 0x0, 0x2, [0x0, 0x0, 0x4, 0x9, 0x8]}, @end, @rr={0x7, 0x7, 0x5e, [@broadcast]}, @rr={0x7, 0xf, 0x97, [@loopback, @rand_addr=0x64010100, @multicast1]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8a72}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1f0}}], 0x278}}], 0x6, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 54.670034073s ago: executing program 2 (id=399): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local}, &(0x7f0000000080)=0xc) connect$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x2, 0xb, 0x9, "1cf8424221e306fdd56ab732ed41c249a1a18a421c81d5932a38ffbcaa6dd0144a0798f8873313692b1e138a1b92c0327ed5a2cab68024fa4ed189cee61478", 0x3d}, 0x60) sendto$packet(r0, &(0x7f0000000380)="156a02242b8c2b88d8697e41395d191690270ffd049385663b5fd1422e7374bfc01f275ac016a5617b7c3617b16dc9c176ba7cbddd12ad9459f08aecd44641c597895e85d9c5c7cbbdb89cd3f54fafa991b5dfd26f85f0d0", 0x58, 0x4000840, &(0x7f0000000140)={0x11, 0x1b, r1, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000500)={0x1000, 0x100000}) socketpair(0x10, 0xa, 0xfffffffc, &(0x7f0000000280)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r0) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYBLOB="18020000", @ANYRES16=r3, @ANYBLOB="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"], 0x218}}, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$CDROM_SEND_PACKET(r4, 0x5387, &(0x7f00000001c0)={"04557788b4081038a855ffd3", 0x0, 0x0, 0x81, 0x0, 0x1, 0x7, 0x5, 0x0}) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r8, &(0x7f0000000640)={0x2020}, 0x2020) r9 = syz_io_uring_setup(0x80c, &(0x7f0000000540)={0x0, 0xd4bb, 0x80, 0xfffffffd}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) listen(0xffffffffffffffff, 0x5) io_uring_enter(r9, 0x3517, 0xc2de, 0x9, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001cc0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050001004bd6c725099db1b3000008000300", @ANYRES32=r7, @ANYBLOB="0500530000000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$BTRFS_IOC_ADD_DEV(r12, 0xb701, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x14, r6, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4045840) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r13, 0x401c5820, &(0x7f0000000080)={0x8}) 54.528006201s ago: executing program 2 (id=401): prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x37) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000100)="660fc7b5f3ffffff0fc73fc7c44111f5c10c0cb8ab000f00d00f01cb66470fc7b60400000048b88bc00000000000000f01c823d818d818f835800000c00f23f848b8af890000000000000f23d0351000a1020f23218d8db86d2c6d2cfec4017c538215eb4a35", 0x66}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0), 0x4) 39.524770241s ago: executing program 32 (id=401): prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x37) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000100)="660fc7b5f3ffffff0fc73fc7c44111f5c10c0cb8ab000f00d00f01cb66470fc7b60400000048b88bc00000000000000f01c823d818d818f835800000c00f23f848b8af890000000000000f23d0351000a1020f23218d8db86d2c6d2cfec4017c538215eb4a35", 0x66}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0), 0x4) 6.957546388s ago: executing program 4 (id=1325): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x29, 0x1, 0x1, "00000000bf2b000005000104000000e4f4ffff0000ea00000d00", 0x32344d59}) syz_emit_ethernet(0x24, &(0x7f0000000240)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@x25={0x805, {0x0, 0xba, 0x5, "a42a02249201542f9b362851e7e5b8eacd2b48"}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f0000000000)=[@init={0x18, 0x84, 0x0, {0xff, 0xe, 0x1ff, 0x20}}], 0x18}], 0x1, 0x40) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@broadcast, @dev}, &(0x7f00000001c0)=0xc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000180)=0x80) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc4c85512, &(0x7f0000000280)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="cc0000000000000012"]) 6.799975346s ago: executing program 4 (id=1331): unshare(0x22020600) (async, rerun: 32) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900e5ff04000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @empty, @empty, 0x0, 0x10}}) (async, rerun: 32) setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000080)=0x1, 0x4) (rerun: 32) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) (async) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000004c0)=""/4096, &(0x7f0000000240)=0x1000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x2) (rerun: 32) 6.745341448s ago: executing program 4 (id=1333): bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001700)={0x3, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001740)={r0}, 0x4) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000007c000000060a0104000000000000000001000000540004802000018007000100727400001400028008000240000000030800014000000003240c01800b00010072656a656374000014000280080101400000000105000200000000000c000180080001006669620008000b40000000000900010073797a300000000014000000110001"], 0x104}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x8, 0xd}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0x5}}]}}]}, 0x40}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 6.5501177s ago: executing program 4 (id=1340): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x3}]}) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r3, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="75558417114180a665f41a1735b37b6eff39d0dd017cb90efc32a503b3ecd4ea3a070ba1363bc99ca766fd12de7299979bf0e64ffd1c5014ff0d99d0c315c299a125d0eac76e868e757d700be8d81580bcad287a060099a61c9ee33fdd60dfa88e1a5a20a143b9ac534f72e4ee3dd6c333530deb14"]) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) umount2(&(0x7f00000000c0)='./file0\x00', 0xc) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') mlock(&(0x7f0000627000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) r4 = socket(0x15, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r4}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000000000008510"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1}, 0x94) (async) fallocate(r0, 0x4, 0x0, 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) (async) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffffc0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="00050000474200000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount$binderfs(0x0, &(0x7f0000000700)='./binderfs\x00', 0x0, 0x20, &(0x7f0000000780)=ANY=[@ANYBLOB='stats=global']) (async) setsockopt$sock_timeval(r5, 0x1, 0x14, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) 6.48852203s ago: executing program 4 (id=1343): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000001580), &(0x7f00000015c0)=0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x9}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x5, 0x300, 0x0, &(0x7f00000000c0), 0x5000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x50, r4, 0x1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x20, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x2c18}, @device_b, @broadcast, @from_mac=@device_b, {0x2, 0xfff}, "", @void, @value=@ver_80211n={0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8906}]}, 0x50}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x80) 5.609918439s ago: executing program 4 (id=1364): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000002cc0)="95", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) (async, rerun: 64) shutdown(r1, 0x1) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xffffffff}, &(0x7f0000000040)=0x8) (async, rerun: 32) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) (rerun: 32) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) (async) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x1, 0x1fffffe, 0x2, 0x80000000006, 0x8000000000000000, 0x500000001, 0xfffdfffffffffffb, 0x0, 0xfffffffffffffffd, 0x1000000000004, 0xfffffffd, 0x2}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r4, 0xc06c4124, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 1.428535947s ago: executing program 1 (id=1450): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) accept4(r0, 0x0, 0x0, 0x80800) (async) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$can_j1939(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)="0da3", 0x2}, 0x1, 0x0, 0x0, 0x44000}, 0x48800) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)=@polexpire={0xcc, 0x1b, 0xc8dbc5159e5c15d1, 0x0, 0x0, {{{@in=@private, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x2}}]}, 0xcc}}, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x44010}, 0x4004011) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) inotify_init() (async) r4 = inotify_init() r5 = inotify_add_watch(r4, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r4, r5) socket(0x1, 0x803, 0x0) (async) r6 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x22, 0x3, 0x0) bind$inet(r7, &(0x7f0000000340)={0x22, 0x4e20, @loopback}, 0x57) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000304000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="adffa88821000000140012800b0001006d616373656300002a00028008000500", @ANYRES32=r8], 0x44}}, 0x8000) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r6) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r9, @ANYBLOB="20002dbd7000ffdbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000080001007063690011000200303030303a30303a31302e300000000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000080001007063690011000200303030303a30303a31302e30000000000800030002000000080001007063690011000200303030303a30303a31302e30000000000800030000000000332fdafabdeb"], 0xf8}, 0x1, 0x0, 0x0, 0x24008041}, 0x488c0) (async) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r9, @ANYBLOB="20002dbd7000ffdbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000080001007063690011000200303030303a30303a31302e300000000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000080001007063690011000200303030303a30303a31302e30000000000800030002000000080001007063690011000200303030303a30303a31302e30000000000800030000000000332fdafabdeb"], 0xf8}, 0x1, 0x0, 0x0, 0x24008041}, 0x488c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$sock_buf(r10, 0x1, 0x1e, 0x0, &(0x7f00000002c0)) syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000026000100010000000000000001000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc081}, 0x4000000) (async) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000026000100010000000000000001000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc081}, 0x4000000) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r12, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="31eb6bc6df7c575da98b69b67eb2bea0d471a504a47e3b22822494f1e7119e3fc1fcc6ebf3da2d15a0b24ff5bef7d9ae24ca30ea9e8ce5c3aa5c947e4fbbb06cdf45354f26a0274428cdb18a5f9012c42100d4b6f49664d75ea288dbe8b15647c312089b1a69e8c5d55796e5941e165464c6189d239c89d40a164f020ce2d4f60dfb9100688ab83dd8882ca8174fa78e26802500ff1c47f1c7cb288df3f6ce6a001b799cc5021e68f541656655d284e5a45ca95fc169034f3adaf51b5eeaf25fad98e2e75ec70e5aa19fa3f8078fd16f"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="31eb6bc6df7c575da98b69b67eb2bea0d471a504a47e3b22822494f1e7119e3fc1fcc6ebf3da2d15a0b24ff5bef7d9ae24ca30ea9e8ce5c3aa5c947e4fbbb06cdf45354f26a0274428cdb18a5f9012c42100d4b6f49664d75ea288dbe8b15647c312089b1a69e8c5d55796e5941e165464c6189d239c89d40a164f020ce2d4f60dfb9100688ab83dd8882ca8174fa78e26802500ff1c47f1c7cb288df3f6ce6a001b799cc5021e68f541656655d284e5a45ca95fc169034f3adaf51b5eeaf25fad98e2e75ec70e5aa19fa3f8078fd16f"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.320038145s ago: executing program 1 (id=1451): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 64) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1c0000) (async, rerun: 64) r0 = socket$kcm(0xa, 0x1, 0x3a) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000480)) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) (async) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) 1.2397528s ago: executing program 1 (id=1453): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="4c00010002"], 0x8) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002380)=ANY=[@ANYBLOB="e1d8589d81ff09a8ed4fb066010400e3599c4d1eb3a2c79e00", @ANYRES16=r1, @ANYBLOB="010026bd70000000000025000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x34, r3, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x2000051}, 0x4800) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') lchown(&(0x7f0000000040)='./file1\x00', 0x0, 0xee00) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000000d0a810302000000000000000a0010010900020073797a30000000000900010073797a31000000000800044000000003"], 0x34}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a0000000500040000000000090002"], 0x50}}, 0x20040000) timer_create(0x1, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r8, 0x400, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x2e) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @remote}, 0x2, 0x4, 0x3, 0x3}}, 0x2e) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004640)=[{{&(0x7f00000005c0)={0xa, 0x4e21, 0xe, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}, 0x1c, &(0x7f0000001680)=[{&(0x7f0000000640)="0c3eb7eace11bf1198772f37f6cd61093fae2ff24b0ba700a853f84a7ad36e58211c05393522a267b4fbb1f6ac41021c2d79399ab628a33aa45ea9f1", 0x3c}, {&(0x7f0000000680)="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", 0x1000}], 0x2, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x168}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001840)="7f0f6d71a33b64bb03041f84b646153949a9cd07407bdabe9c31e6649d069231dd1be680a09caaccb1cc02d35b4e26e9a4e8f55deb946efa74326312f84616c9b19753b81a5b9d4dece00405bd73b6a2b3d55c4a5a50985bd9e2853b8ccf2e79d0bba96e3aba85275ebcf892362a6da2023aadfcf76d3b8684766bcfe899e134144e102f3d944e27be4175f1e65f385a63bd8ffffcdae226c70e0725c012da5bf9bb255de086f473f057e5b81297d210b09bcfbed4690c50a8c65da5dacda615df5d2ca0760fa288eb098767e7f8f5", 0xcf}, {&(0x7f0000001940)="b17b6ca492eae8fdf17544df4deb918a0d05f13693fe68ff3a0e6d52580da59d975cd062fbf368e92043d5503d0b5fb4559b2601ff20967c448a143415abcb446fe01252d49202d11c52d852c0514f26add89b8648bc873ad68bd9ca27", 0x5d}, {&(0x7f00000019c0)="df3e9aba3b8d27951a3dad9dfe5d52026330e6c3c8bc9e24b88d1bd5464cf79c0a5eb85be5", 0x25}], 0x3, &(0x7f0000001a40)=ANY=[@ANYBLOB="20000000000000002d0000003600000000000000000000000502079600000000"], 0x20}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001a80)="272372195f52305dc53eb6fc0393f5c7a8e5fd1bfb18369b15233ddc7f817f2c6a4f8309245b1b423cf942e7325616570177588aaabfc8fed413bb0f853bc22b809ff17e107fe69d4d3859d7adc12451a4935d55a874b7603e80b0c1f36d1e708cdca9ed4b8036b538b4e3cb060e24604a9272d652096770cfce51c2d510e24fa1a2f65a2d07ddeba89a92af0c17fbba70a00c72fab9f1c6706fc3272494fed66b76b2408ab6ac33e8e64e21add68e7ea409501c7ffa2e2c18c5f8d90b1e", 0xbe}, {&(0x7f0000001b40)="ae3f678dbbd904c613433f86b9eb03678ed4403a465c2b7c5a9851ee0f5d0c727683689db5c4183efea285f3c886a4c55b640eae991d17e8ee8f38ce04eeb8968ea73b80113ed4bc381770615b7beb9b4309f2bafbfdfc0f91408a5852badf6b91da5a069087300f48864fd5c69849de01a23b2480f9692e1cfd47a4a50db90ad7d3a3e4fb5723d7b699f79c556a3bfc3b4860b9ca050dfc0930ec0dd82fc753df40594d16b03de4b5eb7faa8c4e5284dbedd92ae0cf5d737929d4b166467fc4072271d22cec8d37ded67782e8", 0xcd}], 0x2, &(0x7f0000001c80)=[@rthdr_2292={{0x98, 0x29, 0x39, {0x5c, 0x10, 0x0, 0x2, 0x0, [@private2, @remote, @private0, @ipv4={'\x00', '\xff\xff', @empty}, @remote, @dev={0xfe, 0x80, '\x00', 0x2c}, @remote, @private1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0xc0}}, {{&(0x7f0000001d40)={0xa, 0x4e23, 0x1, @private1, 0x4}, 0x1c, &(0x7f0000001dc0)=[{&(0x7f0000001d80)="cb4520006eaf1ab90be1", 0xa}], 0x1, &(0x7f0000001e00)=[@hoplimit={{0x14, 0x29, 0x34, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7f}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000003400)="478c75368a24a4ab7d37f55117316ef50a41ca5844cf3400146baa0ce4407a0c01f4e3b7d42aa455", 0x28}, {&(0x7f0000001e80)="d8e234bb2024f3f2933e176907fa1b5e54e27beee05614925f6e55a8b3e928ca4cb3063480039fd8ac51fa3c7284b1c66022916a0129b9b8a107e4123546220b56b5615b2ac8bd48f61c92cd309a2ac0a1f3ee5bb344146bdd39dbd8d42251498935d62d0ce7f58f9fc861183ffdc405c21ff8c1d62062c7f05fb6eed3ed4f92e802bd74c42e061628ddd70dd6f1945ce765d88d7e00390c76f5b2e94d36aff772fe755a6aa8938399b47620ea0262b2bf578d9f702515b8df1e6755d53bd29dcbfedcf00328a6823bc1274b404f2c8775129216fffa8e92ed4825c83aaf0a200f9f36", 0xe3}, {&(0x7f0000001f80)="2fea199f015c8de8a0b3e5bcf69a8d9502c38eb5d792bf06e2974372b9f4dcf14fd23fa588ba9b11974ed2671b02bf0edd89803a7997", 0x36}, {&(0x7f0000001fc0)="d7976c53dc4a5b41afd5686010a3b0e6375b8c3d5e873be20b6986ac01ccfab5c10ee7726630997297b9444209932eaf512754fd06013781c81fcabf76c988be01773bea8ab11d8010a7269a94a3d9304e52b922e4053bae486edf21ae2eef3ba9baad9fa24e2472e6a2dd38e0cea24bc20c12d66fdb0aadca1e4b4faa39c27fcc3bbedc5b756a3e81693e49ee9d49868af7f14938ff54b4fe8f097ebd85b145d2e88dc08f91ab38cb8182711ff02e70f28f39b4e696cfbe1184f68db16fcd68419e2c80b1006bce8deaa98d7e8c", 0xce}, {&(0x7f0000002180)="e65df1e36f6f2fd7ee3ed012f9cf38341860981dd9dbfe6fea59d4663174ea915286a0531cbb23c0dc0beaa9bb0ac1b108dd492d24844ee647bcba509ed4422acea70f9e08cde70c70f8b0ec85da3b0adc060a7554d853147a5e91eecb243e84f50efbdd113c7db312c6463688f91288335c0f1d2bf52a", 0x77}], 0x5, &(0x7f0000004a40)=ANY=[@ANYBLOB="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"], 0xf8}}, {{&(0x7f00000020c0)={0xa, 0x4e22, 0x34, @empty, 0x2}, 0x1c, &(0x7f0000002c00)=[{&(0x7f0000003440)="b13a7845839d92dab43c81f9765cb85b8c02f2c98b655ebb155b81f88ca6ff0942ef93dd8d52afa9a20411b58f2e76a37cc23d5e8104562bf9e89136c49bf34927b2173b2e6c85f500a9f551c9053d6cd437b800ac71553ed5268d20c7d3a0980a569ce1ca51f151f4aebc81f7af02d8ce600ebd589b81e1482048e4f04f5fcf2c087faa4f80ceaf0d3ebc7e8038cf742622748548de0c71fe6403ff093fb776decab17de2466be88ee7a1c3833eb2483a3f9e9758308f839cd642d5f675737039b961726fa626e1080366fb5ca9b4cbad21997d4155d8baf7403de5c9e3b22491ce3d5234e89f4fadf6f371b592839dbb22da1406641740e75701cd6acbbc", 0xff}, {&(0x7f0000002480)="6703323d063d2621d0640e83d22f69efbbe283cd8b2f233bc678ebbf94b7af400181d20a22e46d5a2e6a854c3591b47abb1460fe719fd812f6a1ee44150d723ad4c1550fb5c6f861292f63454cf4b5f54001e5bcea127f8720dbafbbe8addc040fa73f7c844e0d0d5aa68060f07a7309c6873a9eb722c5de400e0797031e93f220ebc843443deb09d150c2397d83537aefc6670ad06c844f698a2590d6d8420d2fe57df8cb924c396fe00613b40c4f31df2bdc7334360ccd6c96d17e1bc385b7f2b1", 0xc2}, {&(0x7f0000002580)="187daf5f763206939e6563ce68a8a46d97c6ee174aed867495905d00187910a357869bbd3e3eb8869ac9a529d7bb507cd12f6293c0bdcd334fa49837c89bf6d23e3195f9793ad9ccf421d6674eb34abd4ba1aa428f8e281372b83f0b76269beb9b1eb54b874709", 0x67}, {&(0x7f0000002600)="9395c772f3c8de2e2462204bd4e3e58527a2e64bd2437ede9a6bebee9cbc29aa5822c31d587357ca21b2d0a61d44fd2e2d3bc39f78969f4e00819638681675b0cfcd9b0c9e389aaa8f06e64c8069326a07e753daea485a26d794d03d7e3b7fe1d051a2f01f6e3d257d3f95ecb682a4366bb61d32ecffd11579a1329063fcab0ffb0ddb56d336a1b8da5937b3a7acbf63eb12a97ccdc429e5c94e6346d456ea2494744b4cde80af39c5944fc5", 0xac}, {&(0x7f00000026c0)="a7e40e1ee877547ad6826d9783bcfb9bb705e249f78682a1bb8a9ac67ef62e64657a230b1e26380bb9d12516fe70166d8e43308ff82b7a6f15746bf0efae4905ad8348d6f4da2cc54f07a59e3942f3c09352bd4dccff56e2dc5b9a156af92da582e9e5c9b0114375d5229617b2cf719f085f3ca94a63122ad5e067d6b6aa253fec125b540123959a789a86c154784caeedea0fbf902aa8badb15796c55cc1fc6b5b151a0a52f82a5f5d8fa8c3382111ead251c48524c89216c1d798214528c", 0xbf}, {&(0x7f0000002780)="92a6b1a5e5679f4fada2db38aa379a766d9cd91dfe7e58355550ed7911d9af1fa24c58db2144af1380da97a3211fc929734d4834f08a0825d756fb49f3e9dd45803d8f901b6cb80a1656894215283a96aa7528b9e3d8ca3f0d932759943ea8e6ea6041c219ceda2b6aa0da33027d9544a5ff7e535d45d82667f7951a349b2481f48d2e5f44f71e74ea9df6824dae697bebf17b6171f2b466529325aed7841d946a365d6f56dc7e9a9ad9cef094f74aabc0a0192de373", 0xb6}, {&(0x7f0000002840)="54e4e51e16373f28d79f1ca244c0cf5aa2af839f471553600f9fbe6f3744bb2a15ea67eb04eef961365a7bc6c770279cc0756a81cc594b79c3936e0db0ca57f8466117679645500b681a95ca68bbd708671fd07c3706dc79b0fe24fcaf88522054bf1f36d965d5390c1470bd4c7fd9cc8db804eec1a87dbaaeeb9076cbd4b5facc5a01d68b27b07c4d37908e17619cf514d536c8d5ba2ee7705cfece41e9f8a0020c0be74b94f0b4dd61278af9516c719df62405a439b6c241337863d1a834621e4786f26569a8ee22cd437c420e278aaecceb05593099cc406cae0f7dbcb2c3b02f", 0xe2}, {&(0x7f0000002940)="927799d468cfdc477522fed65021498f8900dd61bddf111266186119cffd55f9716db7dec751389d44fe7fe1c4fb52ad5967cf2003198bb8b82bc04950f8894cca5e2954eacc84be3fea5a6457de287f57ab472d35b05ea3230b3d07baa30f03b53e1429d5d7e4e2d2606fab15d2b670f681f955cb2cc0a04822adbf124410684962317ad394be754a0f1474cd0bce24c37594ca36bd2a9962f846215ad8cba473fa1d60dd6d366ba4ce412e4f6c1f83b143f8cf9ac0b2fb34db1f096761e4828b4dd4991542656e91979a7b3ab74382c1018c8efb60a5e32fa6bd5f1707feb5c4db031a1d55bd12e5280ffac269a6bc8edcf53656", 0xf5}, {&(0x7f0000002a40)="68e57e85f7bfd5e29eb0d65bd1881bc888d2084df344f47c8c3decc28e4ca7a78682b52630e45ff27674611f24d6aeec3dd1b93c4cd17bea3e176d3531259611c3acf614fbf996772e4df5fe804810aa2ca2c8b6cc9ea7f2c8b54fa5b65cbf3925927e7f132f624613c1e2a49d8c8ddd3dbee40cf84e9a5aaf76df2d56b84bbc4bb4b454", 0x84}, {&(0x7f0000002b00)="eeb01e5998726e708070a3c55d42b18b25bba972d03943cc03317424fedcb810bc1e24abef46fc849ac1feb9bc8cdba424efecbdb1ceeb1d01c39d14a245b60265d4bcab126564296ed33d423edae399eb5f04fdd3bd12f2eec0b1eb5a9b7190a957fb0da1feb9ad25bdfb34766405c9a7327e8aeeab932091c8e0f56afb98f5ce6c0b2a2cc7e5d42f205dfa53bcbf9590108520335a9fc905c028d41558da8f886d401b4ee91845f914f820ac4a358998a838b5959888a85621a0ef00c23f36e4922c393a79ae67a4384d5ac2000152c611fb8e62ad90c5cd5cf053f7820f933a6a628ab77493a334", 0xe9}], 0xa}}, {{&(0x7f0000002cc0)={0xa, 0x4e23, 0x40000000, @local, 0x4}, 0x1c, &(0x7f0000002f40)=[{&(0x7f0000002d00)="54a67f8f568fbaca95794fe3e14256803f5db2fd2628ab30ed1555ccfe5583e5fe5c9cbe020bee8bd97cdc043867686552e19fa4a0a7a6fe06735f9cdf5a6303169388b2ceef6132482a75fc27f8e7cd12773f2505719080fc5582ea4be24d907fd1677c883c", 0x66}, {&(0x7f0000002d80)="b9666995541eecc5445e29520f1d031d8e4f2fa93ca150de685be1fec45f090f44d61b1ca6", 0x25}, {&(0x7f0000002dc0)="c4ed79e0090a3f6761b5a14220dde51e3676bf0d5a9c5ba40fcc9c5d5089face16ae8ffb74a0d15837b349ea4d74ac53d2ea559b8e7f309ab26a69fbc4c1886390f84632cf8ab6d35282d5e4f077e8575feac8584ea0653d463c768c1f77562418031b3b2ab7114a98b3004f3660a8114776329bdcc5afda238584378723369c86cb16a0193cb0de9172e65b10904b7ec0a5c3a853cb74e7b9b4fcbec70bd38ab5b85bf8279d6c0becac3e4a4b294a0af06e2c82dd658a0afec2faf78ed042316d4cd46f19a31687d95e5eead717406684e5afa5751456dd3f06", 0xda}, {&(0x7f0000002ec0)="8bc060b8143480", 0x7}, {&(0x7f0000002f00)="d201717726b479cadb0b41e2c3130ed7bfa96af35499295f01ac5378e2c16174ac54", 0x22}], 0x5}}, {{&(0x7f0000002fc0)={0xa, 0x4e22, 0x80000000, @loopback, 0x7}, 0x1c, &(0x7f0000003380)=[{&(0x7f0000003000)="68aece0c88b63f815d45b54c97d447bc3ce6636e4a5f3768cfecb42a75cc76532d840a90121766f476971bb1feb4cd1876757a9621cb", 0x36}, {&(0x7f0000003080)="93a40e3149144f23d7bd95cd3c99f86f153daad01f89bc7cb5b09d62bb69cab45d71153433bbd9679773de93c5ac6c0b1ead2b506b9104431e6c69c947362829958aff485c90544c063aac496b2a913d4cea8e9f0c20777c3c3e144b0b07bff5", 0x60}, {&(0x7f0000003100)="fda2632ae3398fd6bd3fa14057569d19820bd851a6016c330b056393ec891dfd77163f6f448a9faf06a9df8e19ccac7bb0e18a6a12144a1f45494eb79d3ff28a5f216844f4aa9e215023d168be7534b7642e88783442a2002b8f31db31a4ac2059d1a4aca332411ca917b164a111dbf9f6226ad2bc8d6297ece6b9916daa66f6e064d0466d7dba70b1670549cdaab0a1a456d6809394e5c032543844da95ce91710c0f69741b8546337e1c88f42ea9529d", 0xb1}, {&(0x7f00000031c0)="217b0e71deb88a0da4c2e827ff6bad08ec17671a075e802b5217ed695c670345903be9f5b477b62454627e98f3a8b931698165a8df5567ae7f4eae8e1a84874765969eedac98a28b394f9461c13be9e6275760c39883922af691abb4c79dbca0dac1cb02bd184f318cd61643dc2a5fa3c68dbb2030c9cc6f67773fd6596f3edddb4f764bed50f508d923bc1aa832bfeff41d130d1a3cd71ef9cead3e5ece3a0c5a7c84fc803bfbe8a825f919670aa39dce1281a8", 0xb4}, {&(0x7f0000003280)="bc9b925dc154da8a55ce7534b393cfcb2a2f7d1d1ddcba3578a97c37cc8b4080e3f06e57b96fc32632ba1ad2b6493258680646e9dab88b0a1ccd11d5290ebff65d1f927217fa1fda1bf12a5a06a3793368208ffb79ae52e62d8969384beeced5560b3fc14d33e6cf1c7e87adb2793fc6501707416336d2bb30c99acbfb0d1b6b2cbb70137d4cc0c130a6e4188674df4fc741235cdfd82f", 0x97}, {&(0x7f0000003340)="222c6c2a459011a077f964804af7669cd7f5c37e024e468767a7e0e88277", 0x1e}], 0x6, &(0x7f0000004880)=ANY=[@ANYBLOB="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"], 0x158}}, {{&(0x7f0000001e40)={0xa, 0x4e20, 0xffff, @remote, 0x6a00000}, 0x1c, &(0x7f0000004600)=[{&(0x7f00000035c0)="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", 0x1000}, {&(0x7f00000045c0)="41ddce", 0x3}], 0x2}}], 0x9, 0x40800) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) 1.078725737s ago: executing program 0 (id=1456): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdc00, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081e0}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRESOCT=r0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x200}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)=0x1) 1.078481002s ago: executing program 0 (id=1457): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/111, 0x6f, 0x6c38) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x24, 0x109, 0x70bd22, 0xfffffffc, {0x5a}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) 1.009440215s ago: executing program 3 (id=1458): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x2, @rand_addr=0x64010101, 0x4e24, 0x4, 'wlc\x00', 0xa, 0x8, 0x1e}, 0x2c) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f00000000c0)={0x7f, 0x38, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) io_uring_setup(0x7f6e, &(0x7f0000000100)={0x0, 0x7eda, 0x204c, 0x1, 0x320}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3e5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x71b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x41) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000340)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000380), 0x9, 0xa00) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0) r4 = accept4$ax25(0xffffffffffffffff, &(0x7f00000003c0)={{}, [@null, @rose, @netrom, @null, @bcast, @remote, @remote, @default]}, &(0x7f0000000440)=0x48, 0x800) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f00000024c0)={0x3, @default, r5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000002600)={&(0x7f0000002500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000025c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x4, 0x5, 0x6}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000002640)={0x0, r9, 0x95878fe84795e267, 0x8, 0x9}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000002680)={r6, 0xf, 0xb6, 0x9, 0x1, [0x0, 0x0, 0x0], [0x9, 0x4, 0xfffffffe, 0x3], [0xe455, 0x6, 0x1919, 0x71212ccb], [0x8, 0x1, 0x91, 0x100000000]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000002700)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000002740)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000002780)={r10, 0x80, 0x3, 0x8, 0x0, [0x0, 0x0], [0xb53, 0xe, 0xf, 0x8], [0x1ff, 0xff, 0xb5, 0x80], [0x6, 0x1d7, 0x2cd, 0x2]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000002800)={r8, 0xe611, 0x3, 0x5, 0x2, [r12, r13, r14, r16], [0x6, 0x9, 0xa8, 0x35], [0x426, 0x80000001, 0x4, 0x8], [0x8, 0x4, 0x1cd, 0xd6d]}) r17 = syz_genetlink_get_family_id$ipvs(&(0x7f00000028c0), r1) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000002a80)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002900)={0x110, r17, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4041}, 0x4000) r18 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r18, &(0x7f0000002b80)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x24, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f0c}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8000010) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000002bc0)={r7, 0xa, 0xfffffffa, 0x2, 0x3, [0x0], [0x5, 0x7, 0xc5, 0xfffffff9], [0x1, 0x0, 0xfff, 0x92], [0x0, 0xe3e, 0x6]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000002c40)={r19}) sendmsg$TIPC_NL_BEARER_ENABLE(r18, &(0x7f0000002d40)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x20, r2, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}]}]}, 0x20}}, 0x90) fsetxattr$security_evm(r18, &(0x7f0000002d80), &(0x7f0000002dc0)=@v1={0x2, '8'}, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002e00)={0x0, @empty}, &(0x7f0000002e40)=0xc) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000002f40)={r9, 0x3000000, 0x8, 0x101, 0x2, [r11, r15, r13], [0x100, 0x0, 0x800, 0xfff], [0x6, 0x7fb2, 0x7, 0x9], [0x4, 0xb2, 0x7, 0x1]}) 1.007923098s ago: executing program 3 (id=1459): getcwd(&(0x7f0000000000)=""/186, 0xba) getcwd(&(0x7f00000000c0)=""/132, 0x84) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x10040, 0x0) ioctl$CDROMSTART(r0, 0x5308) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000001c0)) getcwd(&(0x7f0000000200)=""/251, 0xfb) (async) getcwd(&(0x7f0000000300)=""/114, 0x72) (async, rerun: 32) ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f0000000380)={0x0, 0x1, 0x1, 0x8}) (rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000400)={@empty, 0x0}, &(0x7f0000000440)=0x14) r3 = socket$igmp6(0xa, 0x3, 0x2) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched_retired(r1, &(0x7f00000012c0)={&(0x7f00000003c0), 0xc, &(0x7f0000001280)={&(0x7f0000000480)=@deltclass={0xdd8, 0x29, 0x100, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x2}, {0x5, 0x6}, {0x3, 0x9}}, [@c_atm={{0x8}, {0xa8, 0x2, [@TCA_ATM_HDR={0x3e, 0x3, "9f4047e4361793e88379dfbb2df89eee8c7bc89ce51c81ccbd9882cd8535e7f47c2b707a1d244f2888aa54e8372e6d0a6e6cf3aab8feea9f2b0f"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xe, 0x9}}, @TCA_ATM_HDR={0x35, 0x3, "6c279604e26d9a76ca4286f5f29ba4e3b081fed68108a47063283bab399e8397efd823541d91141cb2edf4c66003f01503"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff2, 0x1}}, @TCA_ATM_HDR={0x19, 0x3, "a0d7444758b720d78dc8448a51bf159db6f3a6e957"}]}}, @c_atm={{0x8}, {0x58, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0x3}}, @TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_EXCESS={0x8, 0x4, {0xf}}, @TCA_ATM_FD={0x8, 0x1, r4}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff2, 0x16}}, @TCA_ATM_HDR={0x1a, 0x3, "cd367d6eaf773cf8428a3463b8450886104032e96397"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0xfff3}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xa, 0x7}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x18}}}, @c_cbq={{0x8}, {0x430, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x6, 0xff, 0x7, 0x4, 0xffff9241, 0x1, 0x6, 0x4, 0x6f99, 0x8, 0x3, 0x7f, 0xffff, 0x4, 0x1ff, 0x9, 0x9, 0x1, 0x9, 0x2, 0x0, 0xff, 0x200, 0x10000, 0xd3e8, 0xa, 0x1, 0xfb, 0xfff, 0x108, 0x800, 0x5, 0x6, 0x0, 0x7, 0xc1d, 0x4, 0x4, 0x8, 0x2, 0x3, 0x25, 0x7fc0, 0xb5, 0x2, 0xf447, 0x9, 0x401, 0x1, 0x2, 0x2, 0x0, 0x243, 0xb149, 0x5, 0x6, 0x5, 0x8001, 0x80, 0x9, 0x6, 0x0, 0x4000, 0x3, 0x5, 0x8, 0x800, 0x1, 0x2, 0x7fff, 0x401, 0x18, 0xe2eb, 0x3, 0x81, 0x0, 0x7, 0x256, 0x4, 0x6, 0x9, 0x9, 0xc9, 0x7, 0x7, 0x2, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x2, 0x8001, 0x8, 0x7fff, 0xd8f, 0xa5, 0x6, 0x5, 0x401, 0x83, 0x2, 0x3, 0x10, 0x5, 0x39, 0x800, 0x7a6, 0x8, 0xe58, 0x1, 0x6, 0x3, 0xa377, 0x10, 0x0, 0xffffa720, 0x80000000, 0x8001, 0xfffff001, 0x2, 0xfffffff8, 0x800000, 0x9, 0x0, 0xff, 0x3, 0xc, 0x3, 0xff, 0x4, 0x40, 0x1, 0x5300, 0x9, 0x4, 0x2, 0x100, 0xad1, 0x2b116550, 0xce1, 0x400, 0xd8ca, 0x3, 0x0, 0x82c, 0xa9, 0x895, 0x101, 0xfffffffa, 0xe6, 0x5, 0xffff0001, 0x5, 0xb0c6, 0x0, 0x8, 0x81, 0xfffffffd, 0xc00, 0xa395, 0x5, 0x800, 0x1ac, 0x8, 0x8, 0x800, 0x9, 0x1, 0x0, 0x4, 0x8, 0x8, 0xfff, 0xf23, 0x9, 0x5, 0x7, 0xcc0, 0x8, 0xb, 0x8, 0x8000, 0x57, 0x52c4, 0x5, 0x7fff, 0x7, 0x5, 0xbd5, 0x8, 0x49, 0x3, 0xfffffffc, 0xffff8000, 0x7, 0x6, 0x7, 0x100, 0x0, 0x82b, 0x1, 0x9, 0xb, 0x0, 0x1, 0xb0, 0xffffff81, 0x1, 0x7, 0xfff, 0x2, 0x8f, 0x87f1f23e, 0x7, 0x9, 0x7fffffff, 0x5, 0x3, 0xfffffff6, 0xff, 0xa9c, 0x100, 0x3, 0x7, 0x2, 0x6, 0xffffff40, 0x0, 0x5, 0x3, 0x7fff, 0xfff, 0x8, 0xa, 0x2, 0xffffffff, 0xdc68, 0x3, 0x9, 0x3, 0x5, 0x1, 0x1, 0x6, 0x8, 0xd, 0xffff0000, 0x8, 0xed0c, 0x8, 0xf, 0x200, 0x3, 0x7f, 0x40]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x8, 0x8, 0x0, 0x4, 0x7ff, 0x8}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x22, 0x3, 0x16, 0x8, 0x7, 0x9163, 0xffff, 0x7}}]}}, @c_cbq={{0x8}, {0x84c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x7f, 0x997, 0x3, 0x2, 0x1ff, 0x7, 0x2, 0x94, 0x6, 0x70, 0x9, 0x1, 0x4, 0x2, 0x7, 0x1f9, 0x0, 0x81, 0x8, 0x3, 0x7ff, 0x8, 0x80, 0x9, 0xf, 0x1, 0x2, 0x7, 0x1000, 0x8, 0x1, 0x10e2, 0x1, 0x44e, 0x7f, 0x5, 0x8, 0x1, 0x6, 0x6, 0xfffffffc, 0x1, 0xc, 0x5, 0xf2, 0x1cc58000, 0x1000, 0x5, 0x7fff, 0x200, 0x8, 0x59, 0xfffffff7, 0x3ff, 0xffffff7f, 0x67b0, 0x8, 0xffff, 0x26c3, 0x2, 0x9, 0x0, 0x5, 0x8000, 0xfffffff7, 0x3, 0x7fffffff, 0x1000, 0x7, 0x7, 0x5, 0x533b, 0x5, 0x1, 0x4, 0x8, 0xfffffeff, 0x15, 0x400, 0x2, 0x2c, 0x4, 0x1, 0x1000, 0x1, 0xffff8000, 0x81, 0xa980, 0x4, 0x7, 0x0, 0x1, 0x2, 0x6, 0x5, 0x101, 0x2, 0x6, 0xf3e0, 0x1, 0x2, 0x8, 0x0, 0x81, 0x4, 0x101, 0x7fff, 0xfffffffb, 0x8, 0x7, 0x8, 0xe812, 0x0, 0x3, 0x5, 0xbcfd, 0x0, 0x3ff, 0x3, 0x3, 0x4, 0x7, 0x6, 0xcd1, 0x1, 0x6, 0x8, 0x100, 0x0, 0x5cd7, 0x0, 0x5, 0x2, 0x8, 0xffff048f, 0x0, 0x1, 0x2, 0x10001, 0x7fff, 0x2, 0x4, 0x0, 0x5, 0x2, 0x2, 0x2, 0x6, 0x1, 0xffffff02, 0x1, 0x9, 0x7, 0x1, 0xfffffff7, 0x1, 0x8, 0x7, 0x2, 0x3, 0x0, 0x8, 0x4, 0xfff, 0x2, 0xffffff5f, 0x80, 0x5, 0x4176, 0x3, 0x4, 0x2, 0x8000, 0x2, 0x1, 0xd, 0x7, 0x82, 0x9, 0x10, 0x400, 0x2, 0x3, 0x1ff, 0x10001, 0x1, 0x3, 0x8, 0x7f, 0x8000, 0xfffffff8, 0x3, 0x10000, 0x5, 0x3ff, 0x7, 0x7, 0x4, 0x7ff, 0xfffffffe, 0xd7f, 0x80, 0x339, 0xb, 0x40, 0x9, 0x4, 0x21, 0x12c, 0x2, 0x6, 0xb6, 0x1, 0x8, 0x1, 0x3, 0x7, 0x8, 0x8, 0x8, 0x3, 0x1, 0x99d, 0xa8b, 0x6, 0x0, 0x3, 0x2, 0x5, 0xd, 0x7, 0x3, 0x2, 0x4, 0x8, 0x736b, 0x300, 0xfffffffd, 0xff, 0x5, 0x40000000, 0x3, 0x7fffffff, 0xc, 0xf, 0x1, 0x8, 0x8, 0x0, 0x7, 0x3b09, 0x8, 0x2, 0xf2]}, @TCA_CBQ_RATE={0x10, 0x5, {0x5, 0x1, 0x83, 0x3, 0x5, 0x800}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x1c, 0x2, 0x1c, 0xdd, 0x100, 0x6, 0x8, 0x8}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2d, 0x3, 0x1a, 0x1b, 0x9, 0x6, 0x0, 0x2}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7, 0x4, 0x223, 0x40, 0x5, 0x0, 0x5, 0x2, 0x3, 0x10000, 0x80000001, 0xfffffffc, 0x0, 0x95e7, 0x7, 0x8, 0x6, 0x1000, 0xea, 0x4, 0x5, 0x1, 0x6, 0x9, 0xe, 0x8, 0xa8, 0x1ff, 0x9, 0x7, 0x10, 0x1465827c, 0xfffffffc, 0x8, 0x3, 0x101, 0x93, 0x7, 0x5, 0x6, 0x2, 0x3, 0x8001, 0x9, 0x3, 0x3, 0xb4, 0x43, 0x7, 0x800, 0x5, 0x4000, 0x0, 0x401, 0x7f, 0x4, 0x4, 0x0, 0x10, 0xb2, 0x8, 0x4, 0x1, 0x3, 0x6, 0x49e, 0x80000001, 0x1, 0x401, 0x6, 0x3, 0x7, 0x8, 0x4, 0x1000, 0x8, 0x5, 0x9, 0x7fff, 0x3ff, 0x1000, 0x8a, 0x80000000, 0xfffffffd, 0xb, 0xbcb6, 0x4abf, 0x4, 0x6612, 0x5d7, 0x81, 0xa8, 0x4, 0x6, 0x0, 0xfffffffc, 0xfffff0a4, 0x6, 0x1000, 0x80000000, 0x5, 0x0, 0x3, 0xa54, 0x7, 0xfffffffa, 0x20004, 0x0, 0x7fff, 0x1, 0x86, 0x4, 0x0, 0x2, 0x5, 0xefbe, 0x8, 0xffffffff, 0x1, 0x4, 0x3, 0x7, 0xfffffffd, 0xffff0bd2, 0x10001, 0x8, 0x7, 0xbd2, 0x5, 0x3ff, 0x5, 0x0, 0x5, 0x3, 0x1200, 0x1, 0x80, 0x8, 0x7, 0x4, 0x9, 0x7a7, 0x3, 0x7, 0x5, 0xcea0, 0xc, 0xe0, 0x4, 0xed8, 0x100, 0x6, 0x1, 0x2, 0x9, 0x3ff, 0xe, 0x6, 0x8, 0x401, 0x0, 0x8, 0xb5, 0x2, 0x7, 0x1000, 0x8, 0x10001, 0xfff, 0x0, 0x9, 0x8, 0x7, 0x4, 0x4, 0x2, 0x37f9, 0x3, 0x7f, 0x1, 0x3, 0x5, 0xab0, 0x1, 0x6, 0x2, 0x0, 0xf8, 0x6, 0x5375, 0xff, 0x8, 0x3d8, 0xc82, 0xd, 0xaf1, 0x8c92, 0x6, 0x6, 0x339b, 0x6, 0x3, 0x1c000, 0xffff, 0x4, 0x9, 0x6, 0xff, 0xfffffffc, 0x1, 0x0, 0x1, 0x400, 0x800, 0x9, 0x8001, 0x8, 0x8, 0x5, 0x8, 0x2, 0x800, 0x8, 0x10001, 0xd, 0x0, 0xfffffff7, 0x1b92, 0x49, 0x9, 0x3, 0x6dcc0d01, 0x8, 0xe, 0x1, 0x1, 0x40, 0x6, 0x8, 0x525, 0xa, 0x5fc7, 0x850, 0x2, 0x6, 0x0, 0x178, 0x7, 0x1ff, 0x4, 0x3, 0x9, 0x3c, 0x7, 0x2, 0xb06]}]}}]}, 0xdd8}, 0x1, 0x0, 0x0, 0x8040000}, 0x20008800) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, r6, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc851}, 0x810) (async) getcwd(&(0x7f0000001440)=""/144, 0x90) timer_create(0x4, &(0x7f0000002600)={0x0, 0x10, 0x2, @thr={&(0x7f0000001500)="f1f710f4b96dcc64dd4f56a75694feb703d43979e82832213008bb17d946cff44ac47caf4422c8397519d1c164a6442ed3dda79695ec03dc5cd8d5975b74ac2af2928bbfb815499a573c2f56b81dd98cdae4abb90efc591867a67d72642c275486a1d9769905453de4d105905151808ed0212e9be6785afe3dc23bbb76a28976f40eb13f608d03697f0147264b23a9534631d403cd198335191f2bc696122479e963d61e249cdf43f925f80ffbbe20916d9a2c1abfbe376cc9f25cae00256cc42b75d0e95c08b0ce7d4f71654d14", &(0x7f0000001600)="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"}}, &(0x7f0000002640)) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000002680)="0fc778cfbf6bfe6846fbecbecdd5d4ab649a0d2a473372ab5ce8d249cc4077edebe5a85ef9a2eb2a48690d7310cde51453d62a9b10fba13f34fde418b32304bac02e7367dec48b92f786339150149b7282169967dc61fa1a646a43cbfda0d88b3655128daf53d808dc5125f4196c53a4", 0x70) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002740), r5) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002780)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000002880)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x68, r7, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3ff, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x4008081) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x84, r7, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x29, 0xbe, "8a50b3eff39cc5e604c0315ade23dc3af6156b35adeb788c58f9adc2d8a871c448b0e0ac9b"}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3a}, @NL80211_ATTR_MGMT_SUBTYPE={0x5}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}]}, 0x84}}, 0x0) (async) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000002a80)={0x0, 0x3, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'team_slave_0\x00'}) (async) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002ac0), 0x80002, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r10, 0x3b88, &(0x7f0000002b00)={0xc}) (async, rerun: 32) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000002b80), r5) (rerun: 32) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x28, r11, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x880) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002cc0)={0x0, 'veth1_to_hsr\x00', {0x4}, 0x80}) 957.379279ms ago: executing program 3 (id=1460): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x8, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x80d0}, 0x4000880) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r5) sendmsg$NET_DM_CMD_START(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010024bd7000fcdbdf2503000000180001801400020073797a5f74756e0000000000000000000500050001000000050003"], 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) 319.432915ms ago: executing program 0 (id=1461): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x38, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xf, 0x0, 0x1, [@generic="12ccbd379ce6cd69"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3c1}, @in={0x2, 0x4ea1, @multicast2}, @in={0x2, 0x4e22, @rand_addr=0x64010100}], 0x3c) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000096b3300000000e0001006e657464657673696d0004000f0002006e657464657673696d3000000800030001000000902aec8da38c8707174416f1d06392882f2ed590e15df375b13aa8afc90470b5b9deb518b02dac3f97fa7434bfd470aa41c9196f698501272af959b448507f044006ae7decdfa928d7953ade28429b7ab04494faa6254adb2194a2e0da3853ba"], 0x3c}}, 0x48800) 318.82008ms ago: executing program 3 (id=1462): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x20080010) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'syz_tun\x00', @random="0163014030d9"}) 318.506642ms ago: executing program 1 (id=1463): syz_emit_vhci(&(0x7f0000000780)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x6, 0x2d, "384188", 0x1, 0xa9}]}}}, 0x13) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x49, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = fanotify_init(0x8, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000040)) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {0x29}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) connect$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000980), 0xfdef) splice(r6, 0x0, r9, 0x0, 0x80, 0x4) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000100)="670f7848a60f0119f30fbda07350000067660f3880531d0f08660fc73066ba4200b808000000efc4e1785aaa00000080f4b91e0800000f32c744240200e00000c7442406000000000f011424", 0x4c}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) read(r6, &(0x7f0000000800)=""/217, 0xd9) read$FUSE(r8, &(0x7f0000000980)={0x2020}, 0x2020) fanotify_mark(r2, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x90, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_KEY_TYPE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x39}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xb8}, 0x1, 0xe00}, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_GET_MP_STATE(r13, 0x8004ae98, &(0x7f0000000240)) 318.11437ms ago: executing program 0 (id=1464): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0x9, 0x1, 'ipvs\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f0000000540)="440f01bb636ea7d3f3460f015e0d0f01cfc4821db89894e64904420fc7751d66b8e7008ed0adad4dc3c4e17f701d00480000353e640f4da68000c0fec482fd307262", 0x42}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 240.060067ms ago: executing program 3 (id=1465): r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x24, 0x0, &(0x7f0000cab000)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r2, 0x4b31, &(0x7f0000000580)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0xc8, 0x8, 0x6, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x1c0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5"}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c00080008"], 0x178}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'virt_wifi0\x00', {'netpci0\x00'}, 0x1000}) r3 = socket(0x10, 0x803, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r4, &(0x7f0000000540), 0xfffffdd8) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001080), 0x1, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$FBIOPUTCMAP(r5, 0x4605, &(0x7f00000011c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, &(0x7f0000000080)={0x20, 0x0, &(0x7f0000000040)=[{0x1, 0x2}, {0x0, 0x2}, {}], 0xdeadbeef, 0x8, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 129.781718ms ago: executing program 0 (id=1466): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2, 0xb, 0x0, 0x0, 0x2}, 0x10}}, 0x20004040) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000080)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000640)="c744240000700000c7442402aa5a0830c7442406000000000f011c2466b8f2000f00d00f0766baf80cb880c78082ef66bafc0cb8282a0000ef0f3066b835010f00d066baa10066edd34e02c4e251b6f6b9800000c00f3235001000000f30", 0x5e}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x20, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2, 0xb, 0x0, 0x0, 0x2}, 0x10}}, 0x20004040) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup(r1) (async) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"a2e3ad0e090d07f91b5e1a1887f70706d038e7ff7fc6e5539b0d3c0a8b089b3f3b316c030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xffffffffffffff34}}, 0x1006) (async) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000080)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) dup(r5) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000640)="c744240000700000c7442402aa5a0830c7442406000000000f011c2466b8f2000f00d00f0766baf80cb880c78082ef66bafc0cb8282a0000ef0f3066b835010f00d066baa10066edd34e02c4e251b6f6b9800000c00f3235001000000f30", 0x5e}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x20, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) (async) 59.784601ms ago: executing program 3 (id=1467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101081, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000002000f000000050030000000000005002f000000000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 58.283342ms ago: executing program 1 (id=1468): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000140)) sendfile(r0, 0xffffffffffffffff, 0x0, 0x201f00) 233.605Β΅s ago: executing program 1 (id=1469): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x42200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000400000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000780)={0x79}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000000c0)=0x9) (async) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"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"}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) (async) r6 = syz_open_dev$dri(&(0x7f0000000400), 0x1, 0x0) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xe) (async) ioctl$FIONREAD(r7, 0x80047437, &(0x7f0000002300)) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r8], 0x1, 0x80000}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x0, 0x78, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x30}, 0x94) 0s ago: executing program 0 (id=1470): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='btrfs\x00', 0x10003, &(0x7f00000000c0)='norecovery') syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x58) kernel console output (not intermixed with test programs): ive=1 [ 391.430993][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'. [ 391.456946][ T6479] macvtap1: entered allmulticast mode [ 391.458822][ T6479] veth0_macvtap: entered allmulticast mode [ 391.481322][ T40] audit: type=1400 audit(1758355117.369:300): avc: denied { write } for pid=6473 comm="syz.3.99" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 391.579662][ T6487] IPv6: NLM_F_CREATE should be specified when creating new route [ 391.582573][ T6487] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 391.585290][ T6487] IPv6: NLM_F_CREATE should be set when creating new route [ 391.588316][ T6487] IPv6: NLM_F_CREATE should be set when creating new route [ 391.599493][ T6489] binder: 6488:6489 ioctl c0306201 0 returned -14 [ 391.603365][ T6489] binder: 6488:6489 ioctl 89e3 200000000140 returned -22 [ 391.615710][ T40] audit: type=1400 audit(1758355117.509:301): avc: denied { read } for pid=6490 comm="syz.3.102" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 391.745193][ T6512] tipc: Started in network mode [ 391.747566][ T6512] tipc: Node identity 7f000001, cluster identity 4711 [ 391.751081][ T6512] tipc: Enabled bearer , priority 10 [ 391.800523][ T6519] @: renamed from vlan0 (while UP) [ 391.833783][ T6525] Bluetooth: MGMT ver 1.23 [ 391.905557][ T6533] netlink: 'syz.3.116': attribute type 64 has an invalid length. [ 391.908100][ T6533] netlink: 'syz.3.116': attribute type 4 has an invalid length. [ 391.910789][ T6533] netlink: 152 bytes leftover after parsing attributes in process `syz.3.116'. [ 391.920576][ T6533] block nbd3: Attempted send on invalid socket [ 391.922649][ T6533] blk_print_req_error: 136 callbacks suppressed [ 391.922663][ T6533] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 391.929287][ T6533] exFAT-fs (nbd3): unable to read boot sector [ 391.931262][ T6533] exFAT-fs (nbd3): failed to read boot sector [ 391.933124][ T6533] exFAT-fs (nbd3): failed to recognize exfat type [ 391.992180][ T6537] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 391.996633][ T6537] block device autoloading is deprecated and will be removed. [ 392.042781][ T6542] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 392.082707][ T6547] can0: slcan on ptm1. [ 392.098270][ T6547] netlink: 536 bytes leftover after parsing attributes in process `syz.0.120'. [ 392.101943][ T6547] netlink: 32 bytes leftover after parsing attributes in process `syz.0.120'. [ 392.185281][ T6546] can0 (unregistered): slcan off ptm1. [ 392.237733][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.121'. [ 392.296350][ T6570] process 'syz.0.124' launched '/dev/fd/3' with NULL argv: empty string added [ 392.328918][ T6573] macvlan2: entered promiscuous mode [ 392.808492][ T6599] netlink: 'syz.0.131': attribute type 10 has an invalid length. [ 392.810976][ T6599] netlink: 40 bytes leftover after parsing attributes in process `syz.0.131'. [ 392.865351][ T837] tipc: Node number set to 2130706433 [ 393.027180][ T6606] 9pnet_virtio: no channels available for device syz [ 393.151594][ T6616] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 393.156523][ T6616] MINIX-fs: unable to read superblock [ 393.349696][ T6629] netlink: 'syz.3.141': attribute type 10 has an invalid length. [ 393.352314][ T6629] netlink: 40 bytes leftover after parsing attributes in process `syz.3.141'. [ 393.356331][ T6629] dummy0: entered promiscuous mode [ 393.359066][ T6629] bridge0: port 3(dummy0) entered blocking state [ 393.361487][ T6629] bridge0: port 3(dummy0) entered disabled state [ 393.363573][ T6629] dummy0: entered allmulticast mode [ 393.366981][ T6629] bridge0: port 3(dummy0) entered blocking state [ 393.369134][ T6629] bridge0: port 3(dummy0) entered forwarding state [ 393.426874][ T6637] ======================================================= [ 393.426874][ T6637] WARNING: The mand mount option has been deprecated and [ 393.426874][ T6637] and is ignored by this kernel. Remove the mand [ 393.426874][ T6637] option from the mount to silence this warning. [ 393.426874][ T6637] ======================================================= [ 393.442563][ T6642] lo speed is unknown, defaulting to 1000 [ 393.444477][ T6637] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 393.446683][ T6642] lo speed is unknown, defaulting to 1000 [ 393.452154][ T6642] lo speed is unknown, defaulting to 1000 [ 393.549671][ T6642] infiniband syz0: set active [ 393.551556][ T6642] infiniband syz0: added lo [ 393.551789][ T1025] lo speed is unknown, defaulting to 1000 [ 393.585957][ T6642] RDS/IB: syz0: added [ 393.587464][ T6642] smc: adding ib device syz0 with port count 1 [ 393.589363][ T6642] smc: ib device syz0 port 1 has pnetid [ 393.592109][ T1025] lo speed is unknown, defaulting to 1000 [ 393.596349][ T6642] lo speed is unknown, defaulting to 1000 [ 393.599365][ T6654] vlan1: default FDB implementation only supports local addresses [ 393.703074][ T6642] lo speed is unknown, defaulting to 1000 [ 393.769052][ T6663] trusted_key: syz.1.152 sent an empty control message without MSG_MORE. [ 393.773864][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'. [ 393.792407][ T6642] lo speed is unknown, defaulting to 1000 [ 393.894241][ T6642] lo speed is unknown, defaulting to 1000 [ 393.924476][ T6675] serio: Serial port ptm1 [ 394.114522][ T6682] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 394.116027][ T6681] overlay: ./file0 is not a directory [ 394.117470][ T6682] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 394.122453][ T6682] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 394.124909][ T6682] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 394.131351][ T6682] 9pnet_fd: p9_fd_create_unix (6682): problem connecting socket: ./file0: -111 [ 394.157234][ T6684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.159'. [ 394.394597][ T6694] kvm: kvm [6693]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x600000ff [ 394.399470][ T6694] kvm: kvm [6693]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x60000001 [ 394.422154][ T6694] kvm: kvm [6693]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x600000ff [ 394.446657][ T6694] kvm: kvm [6693]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x600000ff [ 394.450310][ T6694] kvm: kvm [6693]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x60000001 [ 394.470035][ T6694] kvm_intel: kvm [6693]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x600000ff [ 394.553547][ T6705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6705 comm=syz.2.164 [ 394.972061][ T6730] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 395.038895][ T6733] nft_compat: unsupported protocol 0 [ 395.314944][ T6756] capability: warning: `syz.2.178' uses deprecated v2 capabilities in a way that may be insecure [ 395.407030][ T6761] pim6reg13: entered allmulticast mode [ 395.436849][ T6765] program syz.3.181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 395.508402][ T6776] openvswitch: netlink: IP tunnel dst address not specified [ 395.511661][ T6776] vxcan1: entered allmulticast mode [ 395.572441][ T6780] kvm: pic: level sensitive irq not supported [ 395.572771][ T6780] kvm: pic: non byte read [ 395.578596][ T6780] kvm: pic: level sensitive irq not supported [ 395.578832][ T6780] kvm: pic: non byte read [ 395.753501][ T6788] __nla_validate_parse: 6 callbacks suppressed [ 395.753514][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.190'. [ 395.759546][ T6788] Unsupported xt match [ 395.759555][ T6788] unable to load match [ 395.776191][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.190'. [ 395.780046][ T6788] Unsupported xt match [ 395.780056][ T6788] unable to load match [ 395.854444][ T6794] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 395.884869][ T6797] FAT-fs (sr0): bogus number of reserved sectors [ 395.888050][ T6797] FAT-fs (sr0): Can't find a valid FAT filesystem [ 395.960435][ T6804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.195'. [ 395.963262][ T6804] netlink: 'syz.3.195': attribute type 14 has an invalid length. [ 395.969727][ T6804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.195'. [ 395.973422][ T6804] netlink: 'syz.3.195': attribute type 14 has an invalid length. [ 396.140271][ T6815] netlink: 'syz.3.199': attribute type 1 has an invalid length. [ 396.142800][ T6815] netlink: 72 bytes leftover after parsing attributes in process `syz.3.199'. [ 396.146592][ T40] kauditd_printk_skb: 77 callbacks suppressed [ 396.146605][ T40] audit: type=1400 audit(1758355634.043:379): avc: denied { setopt } for pid=6814 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 396.187443][ T6821] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 396.191613][ T6821] exFAT-fs (nullb0): invalid boot record signature [ 396.193697][ T6821] exFAT-fs (nullb0): failed to read boot sector [ 396.197171][ T6821] exFAT-fs (nullb0): failed to recognize exfat type [ 396.279025][ T6832] netlink: 224 bytes leftover after parsing attributes in process `syz.0.203'. [ 396.281962][ T6832] netlink: 16 bytes leftover after parsing attributes in process `syz.0.203'. [ 396.333582][ T6840] netlink: 'syz.0.207': attribute type 2 has an invalid length. [ 396.337260][ T6840] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.207'. [ 396.340342][ T6840] nbd: must specify a device to reconfigure [ 396.464746][ T40] audit: type=1400 audit(1758355634.353:380): avc: denied { ioctl } for pid=6849 comm="syz.0.211" path="socket:[12228]" dev="sockfs" ino=12228 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 396.526674][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.529112][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.534483][ T6853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.537977][ T5995] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 396.687221][ T5995] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.690347][ T5995] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 396.693690][ T5995] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 396.697620][ T5995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.701100][ T5995] usb 7-1: config 0 descriptor?? [ 396.708819][ T5995] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 396.710874][ T5995] dvb-usb: bulk message failed: -22 (3/0) [ 396.715458][ T5995] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 396.718440][ T5995] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 396.720509][ T5995] usb 7-1: media controller created [ 396.723253][ T5995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 396.728418][ T40] audit: type=1400 audit(1758355634.623:381): avc: denied { read write } for pid=6854 comm="syz.1.213" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 396.733271][ T5995] dvb-usb: bulk message failed: -22 (6/0) [ 396.737577][ T5995] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 396.739736][ T40] audit: type=1400 audit(1758355634.623:382): avc: denied { open } for pid=6854 comm="syz.1.213" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 396.744311][ T6409] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 396.746456][ T6855] UHID_CREATE from different security context by process 155 (syz.1.213), this is not allowed. [ 396.746732][ T6855] binder: 6854:6855 ioctl 9362 0 returned -22 [ 396.749373][ T5995] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input5 [ 396.749644][ T6409] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 396.756171][ T5995] dvb-usb: schedule remote query interval to 150 msecs. [ 396.759207][ T6409] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 396.761873][ T5995] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 396.763378][ T6409] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 396.765797][ T40] audit: type=1400 audit(1758355634.653:383): avc: denied { read } for pid=5362 comm="acpid" name="event4" dev="devtmpfs" ino=2996 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 396.768425][ T6409] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 396.771140][ T40] audit: type=1400 audit(1758355634.653:384): avc: denied { open } for pid=5362 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2996 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 396.787009][ T6409] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 396.788100][ T40] audit: type=1400 audit(1758355634.663:385): avc: denied { ioctl } for pid=5362 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2996 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 396.789257][ T6409] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 396.801406][ T6409] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 396.803699][ T6409] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 396.805236][ T6856] netlink: 'syz.1.213': attribute type 2 has an invalid length. [ 396.806616][ T6409] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 396.809115][ T6856] netlink: 'syz.1.213': attribute type 2 has an invalid length. [ 396.813941][ T6409] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.03 Device [syz1] on syz1 [ 396.818661][ T6856] binder: 6854:6856 ioctl 5000 0 returned -22 [ 396.821324][ T6856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6856 comm=syz.1.213 [ 396.870335][ T6857] fido_id[6857]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 396.909249][ T40] audit: type=1400 audit(1758355634.803:386): avc: denied { ioctl } for pid=6834 comm="syz.2.205" path="/dev/input/event4" dev="devtmpfs" ino=2996 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 396.920833][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 396.922774][ T29] dvb-usb: error while querying for an remote control event. [ 396.926154][ T40] audit: type=1400 audit(1758355634.803:387): avc: denied { create } for pid=6834 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 396.932490][ T40] audit: type=1400 audit(1758355634.803:388): avc: denied { setopt } for pid=6834 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 396.961027][ T1025] usb 7-1: USB disconnect, device number 2 [ 396.983904][ T1025] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 397.083722][ T6859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'. [ 397.086953][ T6859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'. [ 397.175811][ T6863] validate_nla: 3 callbacks suppressed [ 397.175822][ T6863] netlink: 'syz.0.216': attribute type 1 has an invalid length. [ 397.225805][ T6868] mmap: syz.0.217 (6868) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 397.337451][ T6868] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.340270][ T6868] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.397613][ T6855] syz.1.213 (6855): drop_caches: 2 [ 397.480959][ T6868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.490244][ T6868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.537926][ T6874] tty tty2: ldisc open failed (-12), clearing slot 1 [ 397.554067][ T6879] sock: sock_timestamping_bind_phc: sock not bind to device [ 397.611140][ T6881] omfs: Invalid superblock (0) [ 397.640396][ T6883] SELinux: failed to load policy [ 397.695425][ T6868] veth0_macvtap: left allmulticast mode [ 397.709102][ T81] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.712266][ T81] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.715598][ T81] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.718419][ T81] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.721424][ T81] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.723635][ T6887] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 397.724566][ T81] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.734848][ T81] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.737802][ T81] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.880668][ T6904] netlink: 'syz.0.228': attribute type 10 has an invalid length. [ 397.883324][ T6904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.890462][ T6904] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 397.894106][ T6904] netlink: 'syz.0.228': attribute type 10 has an invalid length. [ 397.899539][ T6904] team0: Device ipvlan1 failed to register rx_handler [ 397.918018][ T6902] kvm: MWAIT instruction emulated as NOP! [ 398.252923][ T6926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=6926 comm=syz.2.234 [ 398.256414][ T6927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=6927 comm=syz.2.234 [ 398.291774][ T6932] capability: warning: `syz.2.236' uses 32-bit capabilities (legacy support in use) [ 398.299857][ T6932] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 398.302884][ T6932] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 398.307972][ T6932] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 398.369332][ T6941] I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 398.373607][ T6941] qnx4: unable to read the superblock [ 398.545581][ T6944] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6944 comm=syz.3.206 [ 398.576161][ T6956] block nbd2: Attempted send on invalid socket [ 398.578245][ T6956] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 398.581851][ T6956] XFS (nbd2): SB validate failed with error -5. [ 398.583348][ T6951] bridge: RTM_NEWNEIGH with invalid ether address [ 398.587120][ T6951] bridge: RTM_NEWNEIGH with invalid ether address [ 399.050244][ T6987] overlayfs: failed to resolve './file1': -2 [ 399.055440][ T6987] overlayfs: failed to resolve './file0': -2 [ 399.404506][ T6989] geneve2: entered allmulticast mode [ 399.536790][ T6993] nbd: nbd64 already in use [ 399.539733][ T6997] netlink: zone id is out of range [ 399.559215][ T6997] netlink: set zone limit has 4 unknown bytes [ 399.664338][ T6477] udevd[6477]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 399.856675][ T7019] /dev/sg0: Can't lookup blockdev [ 399.995904][ T7027] netlink: 'syz.3.264': attribute type 1 has an invalid length. [ 399.999337][ T7027] netlink: 'syz.3.264': attribute type 2 has an invalid length. [ 400.058679][ T7032] netlink: 'syz.1.266': attribute type 39 has an invalid length. [ 400.061186][ T7033] netlink: 'syz.1.266': attribute type 39 has an invalid length. [ 400.141018][ T7039] program syz.2.267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.494794][ T6409] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 400.644757][ T6409] usb 6-1: Using ep0 maxpacket: 16 [ 400.647775][ T6409] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 400.651388][ T6409] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 400.657035][ T6409] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 400.660389][ T6409] usb 6-1: config 0 interface 0 has no altsetting 0 [ 400.665815][ T6409] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 400.668652][ T6409] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.671231][ T6409] usb 6-1: Product: syz [ 400.672591][ T6409] usb 6-1: Manufacturer: syz [ 400.674121][ T6409] usb 6-1: SerialNumber: syz [ 400.676927][ T6409] usb 6-1: config 0 descriptor?? [ 400.733496][ T7098] batadv_slave_0: entered promiscuous mode [ 400.736099][ T7098] batadv_slave_0: left promiscuous mode [ 400.884705][ T6409] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input7 [ 400.888927][ T5362] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 400.897936][ T5362] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 400.902192][ T5362] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 400.907952][ T5362] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 400.932340][ T6478] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 400.937412][ T5362] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 400.951609][ T5362] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 400.956706][ T5362] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 401.136125][ T7118] netlink: 'syz.1.274': attribute type 5 has an invalid length. [ 401.145028][ T7057] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 401.251067][ T29] usb 6-1: USB disconnect, device number 3 [ 401.259029][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 401.259043][ T40] audit: type=1400 audit(1758355639.153:414): avc: denied { create } for pid=7123 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 401.268456][ T40] audit: type=1400 audit(1758355639.153:415): avc: denied { ioctl } for pid=7123 comm="syz.0.293" path="socket:[14987]" dev="sockfs" ino=14987 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 401.312141][ T7124] netlink: 'syz.0.293': attribute type 10 has an invalid length. [ 401.315382][ T7124] __nla_validate_parse: 20 callbacks suppressed [ 401.315395][ T7124] netlink: 2 bytes leftover after parsing attributes in process `syz.0.293'. [ 401.321213][ T7124] team0: entered promiscuous mode [ 401.323344][ T7124] team_slave_0: entered promiscuous mode [ 401.327208][ T7124] team_slave_1: entered promiscuous mode [ 401.329512][ T7124] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.332339][ T7124] bridge0: port 3(team0) entered blocking state [ 401.334489][ T7124] bridge0: port 3(team0) entered disabled state [ 401.337083][ T7124] team0: entered allmulticast mode [ 401.338691][ T7124] team_slave_0: entered allmulticast mode [ 401.340461][ T7124] team_slave_1: entered allmulticast mode [ 401.496706][ T7128] Falling back ldisc for ttyS3. [ 401.598015][ T40] audit: type=1400 audit(1758355639.493:416): avc: denied { module_request } for pid=7140 comm="syz.0.297" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 401.662308][ T40] audit: type=1400 audit(1758355639.553:417): avc: denied { connect } for pid=7140 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 401.813246][ T40] audit: type=1400 audit(1758355639.703:418): avc: denied { create } for pid=7153 comm="syz.1.298" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 401.909566][ T7163] netlink: 'syz.1.300': attribute type 5 has an invalid length. [ 401.949997][ T40] audit: type=1400 audit(1758355639.843:419): avc: denied { read } for pid=7165 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 401.983525][ T40] audit: type=1400 audit(1758355639.873:420): avc: denied { open } for pid=7167 comm="syz.1.302" path="/dev/ptyq7" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 401.991513][ T40] audit: type=1400 audit(1758355639.873:421): avc: denied { ioctl } for pid=7167 comm="syz.1.302" path="/dev/ptyq7" dev="devtmpfs" ino=134 ioctlcmd=0x4704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 402.019084][ T7172] sctp: [Deprecated]: syz.1.303 (pid 7172) Use of int in max_burst socket option deprecated. [ 402.019084][ T7172] Use struct sctp_assoc_value instead [ 402.040263][ T7174] lo speed is unknown, defaulting to 1000 [ 402.384850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 402.393676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 402.397549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 402.444841][ T63] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 402.445008][ T6022] Bluetooth: hci4: command 0xfc11 tx timeout [ 402.519073][ T7193] overlayfs: failed to resolve './file1/file0': -2 [ 402.597025][ T40] audit: type=1400 audit(1758355640.493:422): avc: denied { write } for pid=7197 comm="syz.2.311" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 402.668700][ T7202] kvm: pic: single mode not supported [ 402.671350][ T7202] kvm: pic: non byte write [ 402.675409][ T7202] kvm: pic: non byte write [ 402.677113][ T7202] kvm: pic: single mode not supported [ 402.677121][ T7202] kvm: pic: level sensitive irq not supported [ 402.745222][ T7208] netlink: 'syz.0.314': attribute type 1 has an invalid length. [ 402.766461][ T7202] kvm: pic: non byte read [ 402.768568][ T7202] kvm: pic: non byte read [ 402.785945][ T7218] program syz.2.316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.792897][ T7208] 8021q: adding VLAN 0 to HW filter on device bond2 [ 402.872904][ T7221] tmpfs: Unknown parameter 'usrquota' [ 402.876834][ T40] audit: type=1400 audit(1758355640.773:423): avc: denied { watch } for pid=7220 comm="syz.2.317" path="/85" dev="tmpfs" ino=476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 403.006651][ T7237] netlink: 32 bytes leftover after parsing attributes in process `syz.3.322'. [ 403.096635][ T7247] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 245 [ 403.104049][ T7247] block nbd3: not configured, cannot reconfigure [ 403.210872][ T7260] netlink: 'syz.0.329': attribute type 97 has an invalid length. [ 403.337362][ T7275] vlan1: entered promiscuous mode [ 403.339678][ T7275] vlan1: entered allmulticast mode [ 403.341831][ T7275] veth0_vlan: entered allmulticast mode [ 403.344158][ T7275] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 403.437337][ T7283] netlink: 'syz.0.339': attribute type 4 has an invalid length. [ 403.503817][ T7284] netlink: 20 bytes leftover after parsing attributes in process `syz.2.340'. [ 403.551709][ T7301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.344'. [ 403.728784][ T7315] netlink: 56 bytes leftover after parsing attributes in process `syz.1.349'. [ 403.735774][ T7316] tipc: Enabling of bearer rejected, failed to enable media [ 403.783694][ T7321] overlayfs: missing 'lowerdir' [ 404.108115][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 404.150078][ T7336] netlink: 20 bytes leftover after parsing attributes in process `syz.1.356'. [ 404.479070][ T7351] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 404.558487][ T7357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16339 sclass=netlink_route_socket pid=7357 comm=syz.1.362 [ 404.667344][ T7362] netlink: 196 bytes leftover after parsing attributes in process `syz.3.363'. [ 404.705747][ T7368] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 404.717337][ T7368] CIFS mount error: No usable UNC path provided in device string! [ 404.717337][ T7368] [ 404.723059][ T7368] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 404.741009][ T7368] can0: slcan on ttyS3. [ 404.782837][ T7378] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 404.786685][ T7378] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 404.876653][ T7368] can0 (unregistered): slcan off ttyS3. [ 405.052552][ T7409] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:21 [ 405.171671][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'. [ 405.258808][ T7432] bond0: Error: Cannot enslave bond to itself. [ 405.273977][ T7439] input: syz1 as /devices/virtual/input/input8 [ 405.349239][ T7445] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 405.352283][ T7445] overlayfs: missing 'lowerdir' [ 405.860945][ T7473] input: syz1 as /devices/virtual/input/input9 [ 405.867844][ T7473] input: failed to attach handler leds to device input9, error: -6 [ 406.111599][ T7477] netlink: 48 bytes leftover after parsing attributes in process `syz.3.403'. [ 406.737880][ T7487] vlan2: entered promiscuous mode [ 406.740234][ T7487] vlan2: entered allmulticast mode [ 406.741934][ T7487] hsr_slave_1: entered allmulticast mode [ 406.753240][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 406.753253][ T40] audit: type=1400 audit(1758355644.643:460): avc: denied { getopt } for pid=7488 comm="syz.0.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 406.815381][ T7494] netlink: 'syz.0.409': attribute type 13 has an invalid length. [ 406.820203][ T7494] 9pnet_fd: Insufficient options for proto=fd [ 406.984867][ T6409] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 407.135239][ T6409] usb 6-1: Using ep0 maxpacket: 8 [ 407.139760][ T6409] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 407.143819][ T6409] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 407.151818][ T6409] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 407.155148][ T6409] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.159128][ T6409] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 407.161962][ T6409] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.370460][ T40] audit: type=1400 audit(1758355645.263:461): avc: denied { nlmsg_write } for pid=7486 comm="syz.1.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 407.370503][ T7487] netlink: 108 bytes leftover after parsing attributes in process `syz.1.406'. [ 407.387496][ T40] audit: type=1400 audit(1758355645.283:462): avc: denied { shutdown } for pid=7486 comm="syz.1.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 407.394375][ T6409] usb 6-1: GET_CAPABILITIES returned 0 [ 407.396289][ T6409] usbtmc 6-1:16.0: can't read capabilities [ 407.595683][ C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 408.088787][ T40] audit: type=1400 audit(1758355645.983:463): avc: denied { execute } for pid=7510 comm="syz.0.414" dev="hugetlbfs" ino=19709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 408.097078][ T40] audit: type=1400 audit(1758355645.983:464): avc: denied { execute_no_trans } for pid=7510 comm="syz.0.414" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=19709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 408.125175][ T6870] usb 6-1: USB disconnect, device number 4 [ 408.190507][ T7524] netlink: 20 bytes leftover after parsing attributes in process `syz.0.415'. [ 408.194093][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.415'. [ 408.201520][ T7524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.415'. [ 408.206681][ T7524] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 408.226489][ T7528] dlm: non-version read from control device 194 [ 408.232126][ T40] audit: type=1400 audit(1758355646.123:465): avc: denied { map } for pid=7527 comm="syz.1.417" path="/dev/dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 408.244851][ T40] audit: type=1400 audit(1758355646.123:466): avc: denied { execute } for pid=7527 comm="syz.1.417" path="/dev/dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 408.360710][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'. [ 408.366536][ T7543] macvlan2: entered promiscuous mode [ 408.368223][ T7543] macvlan2: entered allmulticast mode [ 408.395832][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 408.399470][ T7547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.406666][ T40] audit: type=1400 audit(1758355646.303:467): avc: denied { write } for pid=7549 comm="syz.1.422" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 408.453961][ T7553] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.423'. [ 408.542384][ T7561] fuse: Unknown parameter 'groupiγ¦-Zy(FAΧ(՚Σp‰L₯ΘΜύ|9ρVxDυDD𷹌Ό¬ΊΡΦr00000000000000000000' [ 408.588143][ T7556] No control pipe specified [ 408.643458][ T7569] warning: `syz.0.428' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 408.736698][ T7579] overlayfs: failed to clone upperpath [ 408.813102][ T40] audit: type=1400 audit(1758355646.703:468): avc: denied { accept } for pid=7586 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 408.819668][ T40] audit: type=1400 audit(1758355646.713:469): avc: denied { transfer } for pid=7586 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 408.824042][ T7587] binder: 7586:7587 ioctl c0306201 2000000005c0 returned -14 [ 409.152399][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'. [ 409.159598][ T7608] netlink: 'syz.1.445': attribute type 25 has an invalid length. [ 409.162161][ T7611] netlink: 'syz.1.445': attribute type 25 has an invalid length. [ 409.266192][ T7620] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7620 comm=syz.1.447 [ 409.383985][ T7650] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7650 comm=syz.0.456 [ 409.389339][ T7650] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7650 comm=syz.0.456 [ 409.423540][ T7653] overlayfs: failed to clone lowerpath [ 409.543868][ T7670] netlink: 104 bytes leftover after parsing attributes in process `syz.0.460'. [ 409.564277][ T7672] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.462'. [ 409.565745][ T7674] tipc: Started in network mode [ 409.569915][ T7674] tipc: Node identity , cluster identity 4711 [ 409.571826][ T7674] tipc: Failed to obtain node identity [ 409.573808][ T7674] tipc: Enabling of bearer rejected, failed to enable media [ 410.150565][ T7753] netlink: 'syz.3.487': attribute type 1 has an invalid length. [ 410.730646][ T7784] binder: 7782:7784 ioctl 5111 0 returned -22 [ 410.837358][ T7789] vlan2: entered promiscuous mode [ 410.839022][ T7789] bridge0: entered promiscuous mode [ 411.706194][ T1145] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.709769][ T1145] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.713885][ T1145] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.719252][ T1145] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.788251][ T7808] xfrm1: entered allmulticast mode [ 411.918451][ T7826] netlink: 'syz.0.512': attribute type 1 has an invalid length. [ 411.920834][ T7826] netlink: 'syz.0.512': attribute type 4 has an invalid length. [ 411.988590][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 411.988600][ T40] audit: type=1400 audit(1758355649.883:500): avc: denied { bind } for pid=7827 comm="syz.1.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 412.727361][ T40] audit: type=1326 audit(1758355650.623:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7831 comm="syz.0.515" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90b858ec29 code=0x0 [ 413.569314][ T7841] __nla_validate_parse: 7 callbacks suppressed [ 413.569328][ T7841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.518'. [ 413.575997][ T7841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.518'. [ 413.651250][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'. [ 413.743179][ T40] audit: type=1400 audit(1758355651.633:502): avc: denied { write } for pid=7864 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 413.750701][ T40] audit: type=1400 audit(1758355651.633:503): avc: denied { ioctl } for pid=7864 comm="syz.1.526" path="socket:[20154]" dev="sockfs" ino=20154 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 413.774165][ T1025] IPVS: starting estimator thread 0... [ 413.882238][ T40] audit: type=1400 audit(1758355651.773:504): avc: denied { write } for pid=7884 comm="syz.3.533" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 413.893517][ T7873] IPVS: using max 27 ests per chain, 64800 per kthread [ 413.896864][ T7889] overlay: Unknown parameter 'func' [ 413.899090][ T7889] overlay: Unknown parameter 'func' [ 414.079783][ T40] audit: type=1400 audit(1758355651.973:505): avc: denied { checkpoint_restore } for pid=7899 comm="syz.1.537" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 414.114859][ T7903] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.122019][ T7904] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.538'. [ 414.128083][ T40] audit: type=1400 audit(1758355652.023:506): avc: denied { read } for pid=7902 comm="syz.1.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 414.862839][ T7910] netlink: 'syz.0.540': attribute type 7 has an invalid length. [ 414.872502][ T7910] : entered promiscuous mode [ 414.988071][ T7920] netlink: 376 bytes leftover after parsing attributes in process `syz.1.543'. [ 414.992034][ T7920] openvswitch: netlink: Flow key attr not present in new flow. [ 415.112382][ T7983] netlink: 'syz.0.545': attribute type 1 has an invalid length. [ 415.142729][ T7983] bond3: (slave geneve2): making interface the new active one [ 415.146855][ T7983] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 415.150377][ T7959] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.153912][ T7959] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.157856][ T7987] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.160715][ T7987] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.276939][ T8006] netlink: 140 bytes leftover after parsing attributes in process `syz.0.549'. [ 415.381539][ T8014] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 415.430401][ T40] audit: type=1400 audit(1758355653.323:507): avc: denied { map } for pid=8013 comm="syz.0.551" path="socket:[18218]" dev="sockfs" ino=18218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 415.486591][ T8022] netlink: 'syz.0.553': attribute type 1 has an invalid length. [ 415.492501][ T8022] netlink: 'syz.0.553': attribute type 1 has an invalid length. [ 415.939137][ T8034] futex_wake_op: syz.1.556 tries to shift op by 32; fix this program [ 415.970270][ T40] audit: type=1400 audit(1758355653.863:508): avc: denied { append } for pid=8037 comm="syz.1.557" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 415.970585][ T8038] random: crng reseeded on system resumption [ 415.978660][ T40] audit: type=1400 audit(1758355653.863:509): avc: denied { open } for pid=8037 comm="syz.1.557" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 416.002126][ T8038] netlink: 'syz.1.557': attribute type 2 has an invalid length. [ 416.621226][ T8061] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 416.824738][ T24] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 416.939071][ T8068] netlink: 'syz.0.568': attribute type 7 has an invalid length. [ 416.979671][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 416.982927][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 416.988744][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 416.993497][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 416.999202][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 417.007777][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 417.010885][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 417.015587][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.020339][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 417.025348][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 417.031102][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 417.034198][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 417.040415][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.046215][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 417.050755][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 417.070102][ T24] usb 6-1: string descriptor 0 read error: -22 [ 417.072839][ T24] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 417.076422][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.093195][ T24] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 417.274246][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 417.274257][ T40] audit: type=1326 audit(1758355655.163:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.0.574" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90b858ec29 code=0x0 [ 417.366596][ T6261] usb 6-1: USB disconnect, device number 5 [ 417.722992][ T40] audit: type=1400 audit(1758355655.613:515): avc: denied { read } for pid=8096 comm="syz.3.575" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 417.732747][ T40] audit: type=1400 audit(1758355655.613:516): avc: denied { open } for pid=8096 comm="syz.3.575" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 417.741858][ T40] audit: type=1400 audit(1758355655.613:517): avc: denied { ioctl } for pid=8096 comm="syz.3.575" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 417.943015][ T8109] kvm: user requested TSC rate below hardware speed [ 417.946621][ T8109] kvm: user requested TSC rate below hardware speed [ 418.008795][ T40] audit: type=1400 audit(1758355655.903:518): avc: denied { mount } for pid=8111 comm="syz.3.580" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 418.020869][ T40] audit: type=1400 audit(1758355655.913:519): avc: denied { unmount } for pid=6023 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 418.171348][ T8127] netlink: 68 bytes leftover after parsing attributes in process `syz.0.587'. [ 418.176335][ T8129] netlink: 20 bytes leftover after parsing attributes in process `syz.1.584'. [ 418.222213][ T40] audit: type=1400 audit(1758355656.113:520): avc: denied { setattr } for pid=8135 comm="syz.0.588" name="TIPC" dev="sockfs" ino=20743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 418.272979][ T8143] overlayfs: failed to resolve './bus': -2 [ 418.281273][ T8143] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 418.292809][ T8148] tipc: Started in network mode [ 418.294445][ T8148] tipc: Node identity 4, cluster identity 4711 [ 418.300104][ T8148] tipc: Node number set to 4 [ 418.304750][ T40] audit: type=1400 audit(1758355656.193:521): avc: denied { create } for pid=8144 comm="syz.1.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 418.314858][ T40] audit: type=1400 audit(1758355656.193:522): avc: denied { sys_admin } for pid=8144 comm="syz.1.590" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 418.321246][ T40] audit: type=1400 audit(1758355656.203:523): avc: denied { setopt } for pid=8146 comm="syz.3.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 418.336069][ T8147] lo speed is unknown, defaulting to 1000 [ 418.336504][ T8150] netlink: 'syz.0.592': attribute type 1 has an invalid length. [ 418.340970][ T8150] netlink: 'syz.0.592': attribute type 4 has an invalid length. [ 418.347360][ T8152] Invalid source name [ 418.348733][ T8152] UBIFS error (pid: 8152): cannot open "/dev/sg0", error -22 [ 418.482912][ T8159] BIDI support in bsg has been removed. [ 418.490237][ T8159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.595'. [ 418.498298][ T7987] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.500903][ T7987] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.507855][ T8159] geneve2: entered promiscuous mode [ 418.509627][ T8159] geneve2: entered allmulticast mode [ 418.528696][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.738030][ T8165] netlink: 20 bytes leftover after parsing attributes in process `syz.1.596'. [ 419.334474][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.380081][ T8184] netlink: 'syz.1.601': attribute type 1 has an invalid length. [ 419.382489][ T8184] netlink: 236 bytes leftover after parsing attributes in process `syz.1.601'. [ 419.390228][ T8184] bridge0: entered promiscuous mode [ 419.392096][ T8184] macsec1: entered promiscuous mode [ 419.495034][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.562534][ T8190] ata1.00: invalid cdb length 6 [ 419.785327][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 419.788313][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'. [ 419.791384][ T8201] netlink: 'syz.0.604': attribute type 11 has an invalid length. [ 420.149567][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'. [ 420.470954][ T8239] tipc: Enabled bearer , priority 10 [ 420.887737][ T8274] dlm: non-version read from control device 0 [ 421.049654][ T6022] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 421.053551][ T6022] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 421.056937][ T6022] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 421.059849][ T6022] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 421.062341][ T6022] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 421.084893][ T8295] lo speed is unknown, defaulting to 1000 [ 421.150745][ T8315] overlayfs: failed to resolve './file1': -2 [ 421.193866][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'. [ 421.201770][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.633'. [ 421.244833][ T7985] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.269084][ T8325] Illegal XDP return value 514 on prog (id 93) dev syzkaller1, expect packet loss! [ 421.298291][ T8331] netlink: 76 bytes leftover after parsing attributes in process `syz.1.636'. [ 421.316449][ T7985] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.410884][ T7985] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.425500][ T8295] chnl_net:caif_netlink_parms(): no params data found [ 421.511263][ T7985] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.537728][ T8295] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.540599][ T8295] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.542872][ T8295] bridge_slave_0: entered allmulticast mode [ 421.546338][ T8295] bridge_slave_0: entered promiscuous mode [ 421.550576][ T8295] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.552876][ T8295] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.555555][ T8295] bridge_slave_1: entered allmulticast mode [ 421.558402][ T8295] bridge_slave_1: entered promiscuous mode [ 421.620878][ T8295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.626872][ T8295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.691030][ T8295] team0: Port device team_slave_0 added [ 421.697065][ T8295] team0: Port device team_slave_1 added [ 421.760087][ T8295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.762623][ T8295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.771184][ T8295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.778321][ T8295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.780492][ T8295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.788532][ T8295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.797866][ T7985] bridge_slave_1: left allmulticast mode [ 421.800529][ T7985] bridge_slave_1: left promiscuous mode [ 421.804005][ T7985] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.811488][ T7985] bridge_slave_0: left allmulticast mode [ 421.813868][ T7985] bridge_slave_0: left promiscuous mode [ 421.818400][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.135926][ T7985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.141428][ T7985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.145535][ T7985] bond0 (unregistering): Released all slaves [ 422.153124][ T7985] bond1 (unregistering): Released all slaves [ 422.159638][ T7985] bond2 (unregistering): Released all slaves [ 422.166843][ T7985] bond3 (unregistering): Released all slaves [ 422.239467][ T8295] hsr_slave_0: entered promiscuous mode [ 422.242013][ T8295] hsr_slave_1: entered promiscuous mode [ 422.244162][ T8295] debugfs: 'hsr0' already exists in 'hsr' [ 422.245072][ T8391] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.654'. [ 422.246742][ T8295] Cannot create hsr debugfs directory [ 422.254216][ T8390] XFS (nullb0): Invalid superblock magic number [ 422.307176][ T8403] netlink: 'syz.3.656': attribute type 10 has an invalid length. [ 422.327402][ T7985] IPVS: stopping backup sync thread 6730 ... [ 422.327840][ T8403] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 422.336172][ T8403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.349642][ T8404] sp0: Synchronizing with TNC [ 422.354549][ T6870] lo speed is unknown, defaulting to 1000 [ 422.357928][ T8388] [U] θ` [ 422.378898][ T8409] NILFS (nullb0): couldn't find nilfs on the device [ 422.383244][ T8409] openvswitch: netlink: Missing key (keys=100040, expected=80) [ 422.463166][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 422.463177][ T40] audit: type=1400 audit(1758355660.353:537): avc: denied { unmount } for pid=6023 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 422.504180][ T8295] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 422.511825][ T8295] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 422.522647][ T8295] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 422.542047][ T8295] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 422.561628][ T8427] netlink: 'syz.1.662': attribute type 2 has an invalid length. [ 422.568847][ T8427] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.662'. [ 422.573087][ T8427] nbd: must specify a device to reconfigure [ 422.646316][ T8295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.716670][ T7985] hsr_slave_0: left promiscuous mode [ 422.719681][ T7985] hsr_slave_1: left promiscuous mode [ 422.722624][ T7985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.726022][ T7985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.729091][ T7985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.731723][ T7985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.762574][ T7985] veth1_macvtap: left promiscuous mode [ 422.765067][ T7985] veth0_macvtap: left promiscuous mode [ 422.767601][ T7985] veth1_vlan: left promiscuous mode [ 422.770929][ T7985] veth0_vlan: left promiscuous mode [ 422.774831][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 422.892792][ T8447] kvm: kvm [8440]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 422.998743][ T8455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=8455 comm=syz.0.667 [ 423.084789][ T63] Bluetooth: hci3: command tx timeout [ 423.346695][ T7985] team0 (unregistering): Port device team_slave_1 removed [ 423.408496][ T7985] team0 (unregistering): Port device team_slave_0 removed [ 423.818784][ T8441] netlink: 96 bytes leftover after parsing attributes in process `syz.1.663'. [ 423.845087][ T8295] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.855453][ T7987] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.857736][ T7987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.861603][ T7987] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.864565][ T7987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.867870][ T8461] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 423.873653][ T40] audit: type=1400 audit(1758355661.763:538): avc: denied { setopt } for pid=8458 comm="syz.1.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 423.884574][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.668'. [ 423.890087][ T8462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.668'. [ 423.896957][ T8295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 423.947073][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 424.022548][ T8483] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 424.028210][ T8295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.063596][ T8489] syz.1.673 (8489) used obsolete PPPIOCDETACH ioctl [ 424.169228][ T8295] veth0_vlan: entered promiscuous mode [ 424.180482][ T8295] veth1_vlan: entered promiscuous mode [ 424.202650][ T7985] IPVS: stop unused estimator thread 0... [ 424.203136][ T8295] veth0_macvtap: entered promiscuous mode [ 424.213198][ T8295] veth1_macvtap: entered promiscuous mode [ 424.228496][ T8295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.235443][ T8295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.242668][ T7974] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.246993][ T7986] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.255375][ T7986] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.272532][ T7986] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.301167][ T7985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.303807][ T7985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.331495][ T7974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.335227][ T7974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.344501][ T40] audit: type=1400 audit(1758355662.233:539): avc: denied { mounton } for pid=8295 comm="syz-executor" path="/syzkaller.GraVQH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 424.359935][ T40] audit: type=1400 audit(1758355662.253:540): avc: denied { mounton } for pid=8295 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 424.528659][ T8521] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !ε―Ώ$ϋΜΜULΩvyΈΪΨ’…D£ψUDŒw˜}z [ 424.532606][ T8522] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=8522 comm=syz.1.678 [ 424.638646][ T8536] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 424.645132][ T8536] Error validating options; rc = [-22] [ 424.717515][ T8545] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 424.725979][ T8545] Error validating options; rc = [-22] [ 424.894295][ T8564] netlink: 76 bytes leftover after parsing attributes in process `syz.0.688'. [ 424.899722][ T8564] netlink: 36 bytes leftover after parsing attributes in process `syz.0.688'. [ 424.907019][ T8556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=8556 comm=syz.0.688 [ 424.923748][ T8566] Process accounting resumed [ 424.971533][ T40] audit: type=1400 audit(1758355662.863:541): avc: denied { setattr } for pid=8570 comm="syz.1.692" name="NETLINK" dev="sockfs" ino=23985 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 425.103044][ T8586] overlayfs: conflicting options: userxattr,metacopy=on [ 425.165519][ T63] Bluetooth: hci3: command tx timeout [ 425.283416][ T8590] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 425.287132][ T8590] SELinux: failed to load policy [ 425.299396][ T8592] netlink: 32 bytes leftover after parsing attributes in process `syz.0.699'. [ 425.304164][ T8592] netlink: 32 bytes leftover after parsing attributes in process `syz.0.699'. [ 425.324285][ T40] audit: type=1400 audit(1758355663.213:542): avc: denied { listen } for pid=8593 comm="syz.4.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 425.336791][ T40] audit: type=1400 audit(1758355663.213:543): avc: denied { accept } for pid=8593 comm="syz.4.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 425.375037][ T40] audit: type=1400 audit(1758355663.273:544): avc: denied { getopt } for pid=8603 comm="syz.0.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 425.475076][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.706'. [ 425.477932][ T8615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.706'. [ 425.655323][ T8622] XFS (nbd4): no-recovery mounts must be read-only. [ 425.798082][ T40] audit: type=1400 audit(1758355663.693:545): avc: denied { ioctl } for pid=8641 comm="syz.0.715" path="socket:[22394]" dev="sockfs" ino=22394 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 425.808164][ T8642] fuse: Bad value for 'fd' [ 425.810602][ T8642] overlayfs: failed to clone upperpath [ 425.831974][ T8645] binder: Bad value for 'max' [ 425.834702][ T40] audit: type=1400 audit(1758355663.723:546): avc: denied { mounton } for pid=8644 comm="syz.4.716" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 426.171290][ T8695] netlink: 'syz.4.729': attribute type 21 has an invalid length. [ 426.173781][ T8695] netlink: 'syz.4.729': attribute type 6 has an invalid length. [ 426.204383][ T8702] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 426.242986][ T8710] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 426.245654][ T8710] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 426.250186][ T8710] vhci_hcd vhci_hcd.0: Device attached [ 426.256529][ T8710] vhci_hcd vhci_hcd.0: port 0 already used [ 426.259799][ T8710] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 426.261845][ T8710] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 426.264529][ T8710] vhci_hcd vhci_hcd.0: Device attached [ 426.277015][ T8716] vhci_hcd: connection closed [ 426.277334][ T7987] vhci_hcd: stop threads [ 426.282037][ T7987] vhci_hcd: release socket [ 426.282294][ T8711] vhci_hcd: connection closed [ 426.284222][ T7987] vhci_hcd: disconnect device [ 426.296011][ T7987] vhci_hcd: stop threads [ 426.297436][ T7987] vhci_hcd: release socket [ 426.298934][ T7987] vhci_hcd: disconnect device [ 426.364588][ T8722] vxlan0: entered promiscuous mode [ 426.371988][ T7972] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.379781][ T7972] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.384193][ T7972] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.388250][ T7972] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.402475][ T8737] netlink: 'syz.4.736': attribute type 1 has an invalid length. [ 426.474315][ T8751] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 426.479304][ T8751] overlayfs: overlapping lowerdir path [ 426.620680][ T8758] netlink: 'syz.4.741': attribute type 1 has an invalid length. [ 426.623615][ T8758] netlink: 'syz.4.741': attribute type 1 has an invalid length. [ 426.627154][ T8758] netlink: 'syz.4.741': attribute type 2 has an invalid length. [ 426.848769][ T8769] No control pipe specified [ 426.892627][ T8774] netlink: 'syz.1.747': attribute type 1 has an invalid length. [ 427.100526][ T8794] netlink: 'syz.3.754': attribute type 2 has an invalid length. [ 427.245070][ T63] Bluetooth: hci3: command tx timeout [ 427.333462][ T8815] 9pnet_virtio: no channels available for device syz [ 427.542567][ T8840] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8840 comm=syz.0.767 [ 427.750934][ T8835] geneve2: entered promiscuous mode [ 427.752778][ T8835] geneve2: entered allmulticast mode [ 427.771211][ T8864] PKCS8: Unsupported PKCS#8 version [ 427.869424][ T8872] comedi comedi4: bad chanlist[0]=0x0000000f chan=15 range length=2 [ 428.236304][ T8902] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 428.316724][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 428.316733][ T40] audit: type=1400 audit(1758355666.213:563): avc: denied { accept } for pid=8905 comm="syz.0.788" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 428.417943][ T8913] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 428.420988][ T8913] IPv6: NLM_F_CREATE should be set when creating new route [ 428.424044][ T8913] IPv6: NLM_F_CREATE should be set when creating new route [ 428.697227][ T8932] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 428.777358][ T8938] netlink: 'syz.0.799': attribute type 10 has an invalid length. [ 428.783395][ T8938] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 428.896603][ T8949] netlink: 'syz.0.802': attribute type 10 has an invalid length. [ 428.930824][ T8951] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 428.984879][ T8953] netlink: 'syz.0.804': attribute type 4 has an invalid length. [ 429.335395][ T63] Bluetooth: hci3: command tx timeout [ 429.369909][ T8975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8975 comm=syz.0.810 [ 429.475340][ T34] libceph: connect (1)[c::]:6789 error -13 [ 429.477435][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 429.567002][ T8984] ceph: No mds server is up or the cluster is laggy [ 429.683493][ T40] audit: type=1400 audit(1758355667.573:564): avc: denied { listen } for pid=8999 comm="syz.4.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 429.697288][ T8998] lo speed is unknown, defaulting to 1000 [ 429.748949][ T40] audit: type=1400 audit(1758355667.643:565): avc: denied { connect } for pid=9001 comm="syz.0.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 429.756354][ T40] audit: type=1400 audit(1758355667.643:566): avc: denied { write } for pid=9001 comm="syz.0.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 429.885197][ T8998] lo speed is unknown, defaulting to 1000 [ 430.039499][ T8998] lo speed is unknown, defaulting to 1000 [ 430.288976][ T8998] lo speed is unknown, defaulting to 1000 [ 430.583143][ T9035] netlink: 'syz.0.826': attribute type 10 has an invalid length. [ 430.587364][ T9035] __nla_validate_parse: 11 callbacks suppressed [ 430.587411][ T9035] netlink: 40 bytes leftover after parsing attributes in process `syz.0.826'. [ 430.789065][ T9052] overlayfs: failed to clone upperpath [ 430.851673][ T40] audit: type=1400 audit(1758355668.733:567): avc: denied { mount } for pid=9055 comm="syz.0.832" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 431.110065][ T9083] tipc: Started in network mode [ 431.111695][ T9083] tipc: Node identity 5, cluster identity 4711 [ 431.113629][ T9083] tipc: Node number set to 5 [ 431.151400][ T9090] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 431.156293][ T9073] netlink: 76 bytes leftover after parsing attributes in process `syz.0.837'. [ 431.163688][ T9093] netlink: 28 bytes leftover after parsing attributes in process `syz.3.844'. [ 431.163911][ T40] audit: type=1400 audit(1758355669.053:568): avc: denied { mounton } for pid=9089 comm="syz.4.843" path="/28/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 431.196740][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.845'. [ 431.327025][ T9099] team0: Port device team_slave_0 removed [ 431.426010][ T9121] nbd: socks must be embedded in a SOCK_ITEM attr [ 431.443080][ T40] audit: type=1400 audit(1758355669.333:569): avc: denied { mount } for pid=9120 comm="syz.3.849" name="/" dev="autofs" ino=23214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 431.453387][ T40] audit: type=1400 audit(1758355669.343:570): avc: denied { append } for pid=9122 comm="syz.1.850" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 431.468450][ T40] audit: type=1400 audit(1758355669.363:571): avc: denied { unmount } for pid=6023 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 431.484778][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 431.494580][ T9131] netlink: 'syz.0.854': attribute type 5 has an invalid length. [ 431.498381][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.852'. [ 431.572412][ T40] audit: type=1400 audit(1758355669.463:572): avc: denied { ioctl } for pid=9130 comm="syz.1.852" path="socket:[23221]" dev="sockfs" ino=23221 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 431.831695][ T9151] overlayfs: failed to resolve './bus/file0': -2 [ 432.231171][ T9170] binder: 9168:9170 ioctl 80089418 200000000000 returned -22 [ 432.234752][ T9170] binder: 9168:9170 ioctl d000941e 200000000300 returned -22 [ 432.807983][ T9185] tmpfs: Unknown parameter '0xffffffffffffffff' [ 432.811143][ T9185] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 432.814887][ T9185] overlayfs: missing 'lowerdir' [ 432.820056][ T9185] fuse: Unknown parameter 'rootm000Γ00000000100' [ 432.883862][ T9188] netlink: 'syz.4.872': attribute type 21 has an invalid length. [ 432.887595][ T9188] netlink: 156 bytes leftover after parsing attributes in process `syz.4.872'. [ 432.987161][ T9199] netlink: 'syz.4.877': attribute type 11 has an invalid length. [ 433.050906][ T9212] netlink: 'syz.4.881': attribute type 1 has an invalid length. [ 433.103573][ T9219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.884'. [ 433.204407][ T9222] bridge_slave_0: left allmulticast mode [ 433.208018][ T9222] bridge_slave_0: left promiscuous mode [ 433.211226][ T9222] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.219275][ T9222] bridge_slave_1: left allmulticast mode [ 433.221392][ T9222] bridge_slave_1: left promiscuous mode [ 433.223690][ T9222] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.239714][ T9222] bond0: (slave bond_slave_0): Releasing backup interface [ 433.247805][ T9222] bond0: (slave bond_slave_1): Releasing backup interface [ 433.257059][ T9222] team0: Port device team_slave_0 removed [ 433.260164][ T9231] overlayfs: failed to clone upperpath [ 433.265700][ T9231] overlayfs: failed to clone upperpath [ 433.268454][ T9222] team0: Port device team_slave_1 removed [ 433.271676][ T9222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.275934][ T9222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.281885][ T9222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.284551][ T9222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.310507][ T9227] tipc: Enabling of bearer rejected, failed to enable media [ 433.316804][ T9222] tunl0: entered promiscuous mode [ 433.322288][ T9222] team0: Port device tunl0 added [ 433.352929][ T9227] binder: 9226:9227 ioctl 4010640d 2000000000c0 returned -22 [ 433.438056][ T9244] 9pnet_virtio: no channels available for device syz [ 433.611782][ T9255] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 433.614364][ T9255] overlayfs: failed to set xattr on upper [ 433.616887][ T9255] overlayfs: ...falling back to redirect_dir=nofollow. [ 433.619111][ T9255] overlayfs: ...falling back to index=off. [ 433.620980][ T9255] overlayfs: ...falling back to uuid=null. [ 433.654582][ T9260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.896'. [ 433.725114][ T6261] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 433.824602][ T9273] netlink: 'syz.3.900': attribute type 25 has an invalid length. [ 433.880891][ T6261] usb 9-1: not running at top speed; connect to a high speed hub [ 433.884296][ T6261] usb 9-1: config 1 interface 0 has no altsetting 0 [ 433.888751][ T6261] usb 9-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 433.891806][ T6261] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.894434][ T6261] usb 9-1: Product: δ™—ε·²θ·›ζ¨μƒ‹δ›–β ε›§δ°–ζ’‹αšΏβ¨–θ§Œΰ¬κΉ³μ£‘μΊ΄ξ’€νΎξ΄šλ’˜μ€€γΎΊμ΅ͺμš†κ•„γ«˜ο¨­γ‚·θ±λ‰εηš³κ‹η•—γŒ²λ ₯ιΈ§ε…Ήε‹ΎμΉ¦ηΉΰΌ±ζ«¬ο›ͺ [ 433.899779][ T6261] usb 9-1: Manufacturer: Ρ— [ 433.901339][ T6261] usb 9-1: SerialNumber: ξ˜ƒδ₯―ζ€ŒμΎŠο–”λ ±κš¦λ₯ͺι€θΏˆε³΄β€¨η†ˆξ“‰λ›‰ζͺ‰θ΄‹κ˜«θ”…η‰»ΰ―ΰΆ½βΈ‰η”ο‘ξˆο° μΏ‡δ€₯δΊ‹ηͺ°ζœ•δ•…βŒ‘Σˆα’‘λ’Ÿΰ·ζ˜¦β±²ο—•ε§‰θœξ”Άι΄žξ‡‘ΰΏšμ¬ε—’ΰΆŒζ‰ΊξΊ™ΰ―©μŒθŸ‘淿紬旙㢲οͺšθƒ‘θ΅”ν‹Œι¨΅ι§²θ½°ξ¨ŒοŸ‘ξ°‰μΎ’ξ‹‰γ‡–Ε†λ€©ε±βΉ΅ [ 433.971216][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 433.971228][ T40] audit: type=1400 audit(1758355671.863:582): avc: denied { listen } for pid=9276 comm="syz.0.902" lport=41769 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 433.980608][ T40] audit: type=1400 audit(1758355671.863:583): avc: denied { accept } for pid=9276 comm="syz.0.902" lport=41769 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 433.987824][ T40] audit: type=1400 audit(1758355671.863:584): avc: denied { getopt } for pid=9276 comm="syz.0.902" lport=41769 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 434.032347][ T9282] IPv6: NLM_F_CREATE should be specified when creating new route [ 434.070650][ T40] audit: type=1400 audit(1758355671.963:585): avc: denied { bind } for pid=9284 comm="syz.0.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 434.122033][ T9248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.125920][ T9248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.133892][ T6261] usblp0: Disabling reads from problematic bidirectional printer [ 434.139366][ T6261] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 4 proto 3 vid 0x03F0 pid 0x0004 [ 434.149857][ T6261] usb 9-1: USB disconnect, device number 2 [ 434.155032][ T6261] usblp0: removed [ 434.191483][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.908'. [ 434.303092][ T9302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.910'. [ 434.755592][ T40] audit: type=1400 audit(1758355672.653:586): avc: denied { read } for pid=9341 comm="syz.4.923" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 434.764250][ T40] audit: type=1400 audit(1758355672.653:587): avc: denied { open } for pid=9341 comm="syz.4.923" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 434.771968][ T40] audit: type=1400 audit(1758355672.653:588): avc: denied { ioctl } for pid=9341 comm="syz.4.923" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 435.016443][ T9357] kernel profiling enabled (shift: 34) [ 435.018671][ T9357] profiling shift: 34 too large [ 435.021328][ T9359] kernel profiling enabled (shift: 34) [ 435.021413][ T9353] netdevsim netdevsim4: Direct firmware load for . [ 435.021413][ T9353] failed with error -2 [ 435.023721][ T9359] profiling shift: 34 too large [ 435.028228][ T9353] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 435.028228][ T9353] [ 435.028238][ T40] audit: type=1400 audit(1758355672.923:589): avc: denied { firmware_load } for pid=9351 comm="syz.4.924" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 435.182376][ T9377] 9pnet_fd: Insufficient options for proto=fd [ 435.236543][ T9383] /dev/nullb0: Can't lookup blockdev [ 435.490659][ T40] audit: type=1400 audit(1758355673.383:590): avc: denied { create } for pid=9402 comm="syz.0.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 435.620775][ T9410] __nla_validate_parse: 13 callbacks suppressed [ 435.620792][ T9410] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.942'. [ 435.889256][ T9416] 9pnet_virtio: no channels available for device syz [ 435.890697][ T9417] 9p: Unknown access argument : -22 [ 436.105010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 436.114808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 436.124884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 436.129188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 436.138036][ T9429] binder: BINDER_SET_CONTEXT_MGR already set [ 436.140252][ T9429] binder: 9428:9429 ioctl 4018620d 2000000000c0 returned -16 [ 436.144008][ T9429] binder: BINDER_SET_CONTEXT_MGR already set [ 436.146474][ T9429] binder: 9428:9429 ioctl 4018620d 2000000000c0 returned -16 [ 436.149437][ T9429] binder: BINDER_SET_CONTEXT_MGR already set [ 436.151862][ T9429] binder: 9428:9429 ioctl 4018620d 2000000000c0 returned -16 [ 436.155064][ T9429] binder: BINDER_SET_CONTEXT_MGR already set [ 436.159527][ T9429] binder: 9428:9429 ioctl 4018620d 2000000000c0 returned -16 [ 436.460325][ T40] audit: type=1400 audit(1758355674.353:591): avc: denied { write } for pid=9454 comm="syz.4.951" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 436.564493][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.956'. [ 436.748669][ T9485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9485 comm=syz.4.958 [ 437.564449][ T9512] netlink: 'syz.0.966': attribute type 1 has an invalid length. [ 437.571281][ T9511] netlink: 'syz.0.966': attribute type 1 has an invalid length. [ 437.607571][ T9504] syz.1.964 (9504) used greatest stack depth: 19576 bytes left [ 437.660195][ T9525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.971'. [ 437.753624][ T9529] netlink: 32 bytes leftover after parsing attributes in process `syz.1.973'. [ 437.806167][ T9541] o2cb: This node has not been configured. [ 437.808141][ T9541] o2cb: Cluster check failed. Fix errors before retrying. [ 437.810819][ T9541] (syz.0.974,9541,3):user_dlm_register:674 ERROR: status = -22 [ 437.813736][ T9541] (syz.0.974,9541,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 437.819777][ T9541] o2cb: This node has not been configured. [ 437.822125][ T9541] o2cb: Cluster check failed. Fix errors before retrying. [ 437.824466][ T9541] (syz.0.974,9541,2):user_dlm_register:674 ERROR: status = -22 [ 437.827863][ T9541] (syz.0.974,9541,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "@" [ 437.857371][ T9545] vxcan1: entered allmulticast mode [ 437.862180][ T9545] vxcan1: left allmulticast mode [ 437.997329][ T9558] MTD: Couldn't look up '/dev/nullb0': -15 [ 438.640851][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.994'. [ 438.673512][ T9602] netlink: 28 bytes leftover after parsing attributes in process `syz.0.995'. [ 438.676382][ T9602] netlink: 32 bytes leftover after parsing attributes in process `syz.0.995'. [ 438.679186][ T9602] netlink: 28 bytes leftover after parsing attributes in process `syz.0.995'. [ 438.683207][ T9602] netlink: 32 bytes leftover after parsing attributes in process `syz.0.995'. [ 438.782018][ T9612] overlayfs: failed to resolve './file1': -2 [ 438.844902][ T63] Bluetooth: hci3: command 0x0406 tx timeout [ 438.853230][ T9617] binder: 9616:9617 ioctl c0306201 200000000080 returned -14 [ 438.897231][ T9620] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 438.899982][ T9620] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 438.903389][ T9620] vhci_hcd vhci_hcd.0: Device attached [ 438.908198][ T9621] vhci_hcd: connection closed [ 438.908606][ T7933] vhci_hcd: stop threads [ 438.911872][ T7933] vhci_hcd: release socket [ 438.913659][ T7933] vhci_hcd: disconnect device [ 439.269387][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1005'. [ 439.343436][ T9642] netlink: 'syz.0.1007': attribute type 11 has an invalid length. [ 439.811622][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.814286][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.871598][ T9673] tipc: Enabling of bearer rejected, already enabled [ 439.939438][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 439.939449][ T40] audit: type=1400 audit(1758355677.833:606): avc: denied { unmount } for pid=8295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 439.988443][ T9675] tipc: Enabled bearer , priority 0 [ 439.990889][ T9676] tipc: Enabling of bearer rejected, already enabled [ 439.993984][ T9676] syzkaller0: entered promiscuous mode [ 439.995812][ T9676] syzkaller0: entered allmulticast mode [ 440.011839][ T9675] tipc: Resetting bearer [ 440.016446][ T9675] netdevsim netdevsim4 ͺͺͺͺͺͺ: renamed from netdevsim0 (while UP) [ 440.021025][ T9674] tipc: Resetting bearer [ 440.030900][ T9674] tipc: Disabling bearer [ 440.544177][ T9688] binder: 9684:9688 ioctl 801c581f 200000000280 returned -22 [ 440.787762][ T9702] IPv6: NLM_F_CREATE should be specified when creating new route [ 440.873844][ T40] audit: type=1400 audit(1758355678.763:607): avc: denied { read } for pid=9708 comm="syz.4.1028" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 440.930202][ T9714] __nla_validate_parse: 4 callbacks suppressed [ 440.930216][ T9714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1028'. [ 441.113153][ T9722] o2cb: This node has not been configured. [ 441.116580][ T9722] o2cb: Cluster check failed. Fix errors before retrying. [ 441.118935][ T9722] (syz.4.1032,9722,3):user_dlm_register:674 ERROR: status = -22 [ 441.121858][ T9722] (syz.4.1032,9722,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 441.124783][ T1025] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 441.139656][ T9667] Set syz1 is full, maxelem 65536 reached [ 441.186673][ T9731] openvswitch: netlink: Duplicate or invalid key (type 0). [ 441.189120][ T9731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.223797][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1037'. [ 441.234530][ T9737] netlink: 'syz.3.1038': attribute type 1 has an invalid length. [ 441.254910][ T1025] usb 6-1: device descriptor read/64, error -71 [ 441.262514][ T9737] 8021q: adding VLAN 0 to HW filter on device bond1 [ 441.272284][ T9737] vlan3: entered promiscuous mode [ 441.273912][ T9737] bond1: entered promiscuous mode [ 441.276810][ T9737] vlan3: entered allmulticast mode [ 441.278440][ T9737] bond1: entered allmulticast mode [ 441.286048][ T9737] gretap1: entered promiscuous mode [ 441.290752][ T9737] bond1: (slave gretap1): making interface the new active one [ 441.293158][ T9737] gretap1: entered allmulticast mode [ 441.295728][ T9737] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 441.299079][ T9742] nft_compat: unsupported protocol 1 [ 441.368118][ T9754] No buffer was provided with the request [ 441.454758][ T6870] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 441.494806][ T1025] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 441.616361][ T6870] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 441.620126][ T6870] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1544, setting to 64 [ 441.626250][ T6870] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 441.629223][ T6870] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.632300][ T6870] usb 9-1: Product: ј [ 441.633665][ T6870] usb 9-1: Manufacturer: Π‘ [ 441.634723][ T1025] usb 6-1: device descriptor read/64, error -71 [ 441.635690][ T6870] usb 9-1: SerialNumber: Π« [ 441.645918][ T9733] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 441.747656][ T1025] usb usb6-port1: attempt power cycle [ 441.766764][ T9784] unknown channel width for channel at 909000KHz? [ 441.769023][ T9784] unknown channel width for channel at 909000KHz? [ 441.771102][ T9784] unknown channel width for channel at 909000KHz? [ 441.816202][ T40] audit: type=1400 audit(1758355679.713:608): avc: denied { ioctl } for pid=9710 comm="syz.1.1029" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 441.852092][ T6870] cdc_ncm 9-1:1.0: bind() failure [ 441.861729][ T6870] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 441.864413][ T6870] cdc_ncm 9-1:1.1: bind() failure [ 441.868610][ T6870] usb 9-1: USB disconnect, device number 3 [ 441.919226][ T40] audit: type=1400 audit(1758355679.813:609): avc: denied { create } for pid=9785 comm="syz.0.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 441.926187][ T40] audit: type=1400 audit(1758355679.813:610): avc: denied { write } for pid=9785 comm="syz.0.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 441.934045][ T40] audit: type=1400 audit(1758355679.813:611): avc: denied { connect } for pid=9785 comm="syz.0.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 441.941931][ T40] audit: type=1400 audit(1758355679.813:612): avc: denied { name_connect } for pid=9785 comm="syz.0.1052" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 441.954480][ T40] audit: type=1400 audit(1758355679.843:613): avc: denied { prog_load } for pid=9787 comm="syz.0.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 441.963838][ T40] audit: type=1400 audit(1758355679.843:614): avc: denied { bpf } for pid=9787 comm="syz.0.1053" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 441.970652][ T40] audit: type=1400 audit(1758355679.853:615): avc: denied { perfmon } for pid=9787 comm="syz.0.1053" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 442.010558][ T9788] team0: Device gtp1 is of different type [ 442.085713][ T1025] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 442.106591][ T1025] usb 6-1: device descriptor read/8, error -71 [ 442.343673][ T9800] cgroup: Name too long [ 442.365493][ T1025] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 442.387263][ T1025] usb 6-1: device descriptor read/8, error -71 [ 442.495701][ T1025] usb usb6-port1: unable to enumerate USB device [ 442.523485][ T9810] loop6: detected capacity change from 0 to 2560 [ 442.527340][ T9810] buffer_io_error: 138 callbacks suppressed [ 442.527349][ T9810] Buffer I/O error on dev loop6, logical block 0, async page read [ 442.531748][ T9810] Buffer I/O error on dev loop6, logical block 0, async page read [ 442.534246][ T9810] Buffer I/O error on dev loop6, logical block 0, async page read [ 442.537746][ T9810] Buffer I/O error on dev loop6, logical block 0, async page read [ 442.541272][ T9810] Buffer I/O error on dev loop6, logical block 0, async page read [ 442.543830][ T9810] Buffer I/O error on dev loop6, logical block 0, async page read [ 442.546738][ T9810] Buffer I/O error on dev loop6, logical block 0, async page read [ 442.549344][ T9810] Buffer I/O error on dev loop6, logical block 0, async page read [ 442.551907][ T9810] ldm_validate_partition_table(): Disk read failed. [ 442.554053][ T9810] Buffer I/O error on dev loop6, logical block 0, async page read [ 442.557722][ T9810] Buffer I/O error on dev loop6, logical block 0, async page read [ 442.564143][ T9810] Dev loop6: unable to read RDB block 0 [ 442.567202][ T9810] loop6: unable to read partition table [ 442.570502][ T9810] loop_reread_partitions: partition scan of loop6 (3Ÿ Ύ‚³˜) failed (rc=-5) [ 442.664132][ T9819] hpfs: hpfs_map_sector(): read error [ 442.671075][ T9821] overlayfs: failed lookup in lower (newroot/72, name='bus', err=-40): overlapping layers [ 442.719431][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1064'. [ 442.723215][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1064'. [ 442.727183][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1064'. [ 442.742948][ T9832] overlay: ./file0 is not a directory [ 442.843898][ T9839] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 442.848297][ T9839] VFS: Can't find a romfs filesystem on dev nullb0. [ 442.848297][ T9839] [ 442.855381][ T9839] kernel profiling enabled (shift: 63) [ 442.857280][ T9839] profiling shift: 63 too large [ 442.963562][ T9856] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9856 comm=syz.4.1073 [ 442.969309][ T9856] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1015 sclass=netlink_tcpdiag_socket pid=9856 comm=syz.4.1073 [ 442.976328][ T9856] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 442.978626][ T9856] overlayfs: failed to set xattr on upper [ 442.980628][ T9856] overlayfs: ...falling back to redirect_dir=nofollow. [ 442.983037][ T9856] overlayfs: ...falling back to index=off. [ 442.985353][ T9856] overlayfs: ...falling back to uuid=null. [ 442.994622][ T9856] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 443.327679][ T9874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1078'. [ 443.451429][ T9877] can0: slcan on ttyprintk. [ 443.506418][ T9876] can0 (unregistered): slcan off ttyprintk. [ 443.543420][ T9881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.632164][ T9888] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1081'. [ 443.635623][ T9888] netem: invalid attributes len -22 [ 443.637274][ T9888] netem: change failed [ 443.824183][ T6022] Bluetooth: hci0: link tx timeout [ 443.829531][ T6022] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 443.833414][ T9910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.834848][ T6022] Bluetooth: hci0: link tx timeout [ 443.839230][ T6022] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 443.882745][ T9912] IPVS: Error connecting to the multicast addr [ 443.934004][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1091'. [ 443.941221][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1091'. [ 444.076248][ T9933] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 444.078515][ T9933] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 444.313172][ T9952] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 444.318578][ T9952] overlayfs: failed to set xattr on upper [ 444.321111][ T9952] overlayfs: ...falling back to redirect_dir=nofollow. [ 444.323946][ T9952] overlayfs: ...falling back to index=off. [ 444.325894][ T9952] overlayfs: ...falling back to uuid=null. [ 444.327795][ T9952] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 444.332121][ T9952] netlink: 'syz.1.1101': attribute type 10 has an invalid length. [ 444.340366][ T9952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.344335][ T9952] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 444.348764][ T9952] netlink: 'syz.1.1101': attribute type 10 has an invalid length. [ 444.352028][ T9952] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1101'. [ 444.356311][ T9952] batadv0: entered promiscuous mode [ 444.358599][ T9952] batadv0: entered allmulticast mode [ 444.362255][ T9952] bond0: (slave batadv0): Releasing backup interface [ 444.368600][ T9952] bridge0: port 3(batadv0) entered blocking state [ 444.371585][ T9952] bridge0: port 3(batadv0) entered disabled state [ 444.415152][ T7933] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 444.419147][ T7933] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 444.567206][ T9970] macsec0: entered promiscuous mode [ 444.569796][ T9970] macsec0: entered allmulticast mode [ 444.572038][ T9970] veth1_macvtap: entered allmulticast mode [ 444.636776][ T9970] sd 0:0:0:0: PR command failed: 1026 [ 444.638672][ T9970] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 444.640950][ T9970] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 444.982484][ T40] kauditd_printk_skb: 136 callbacks suppressed [ 444.982494][ T40] audit: type=1400 audit(1758355682.873:752): avc: denied { create } for pid=10029 comm="syz.4.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 444.991783][ T40] audit: type=1400 audit(1758355682.873:753): avc: denied { accept } for pid=10029 comm="syz.4.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 445.002083][ T40] audit: type=1326 audit(1758355682.873:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10029 comm="syz.4.1119" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62acb8ec29 code=0x0 [ 445.054215][ T40] audit: type=1400 audit(1758355682.943:755): avc: denied { listen } for pid=10038 comm="syz.4.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 445.062409][ T40] audit: type=1400 audit(1758355682.943:756): avc: denied { accept } for pid=10038 comm="syz.4.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 445.083709][ T40] audit: type=1400 audit(1758355682.973:757): avc: denied { create } for pid=10053 comm="syz.3.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 445.088895][T10054] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 445.091159][ T40] audit: type=1400 audit(1758355682.983:758): avc: denied { bind } for pid=10053 comm="syz.3.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 445.132132][ T40] audit: type=1400 audit(1758355683.023:759): avc: denied { ioctl } for pid=10058 comm="syz.0.1129" path="socket:[30018]" dev="sockfs" ino=30018 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 445.163831][ T40] audit: type=1400 audit(1758355683.053:760): avc: denied { ioctl } for pid=10061 comm="syz.1.1130" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 445.182253][T10063] netlink: 'syz.0.1129': attribute type 10 has an invalid length. [ 445.197573][T10057] hsr_slave_1 (unregistering): left promiscuous mode [ 445.207386][T10063] hsr_slave_0: left promiscuous mode [ 445.210689][ T40] audit: type=1400 audit(1758355683.103:761): avc: denied { create } for pid=10064 comm="syz.1.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 445.211463][T10063] hsr_slave_1: left promiscuous mode [ 445.706964][T10099] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=10099 comm=syz.4.1142 [ 445.749626][T10102] dlm: non-version read from control device 169 [ 445.758045][T10092] dvmrp17: entered allmulticast mode [ 445.761484][T10092] dvmrp17: left allmulticast mode [ 445.828806][ T7940] tipc: Subscription rejected, illegal request [ 445.860428][T10117] vxcan1: tx address claim with dlc 0 [ 445.864137][T10117] netlink: 'syz.1.1147': attribute type 5 has an invalid length. [ 445.873245][T10117] ip6erspan0: entered promiscuous mode [ 445.884798][ T6022] Bluetooth: hci0: command 0x0406 tx timeout [ 446.011655][T10134] 9pnet_fd: p9_fd_create_unix (10134): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 446.059803][T10136] syzkaller1: entered promiscuous mode [ 446.098794][T10136] syzkaller1: entered allmulticast mode [ 446.154469][T10151] cgroup: release_agent respecified [ 446.154885][T10150] __nla_validate_parse: 4 callbacks suppressed [ 446.154900][T10150] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1155'. [ 446.162608][T10147] lo speed is unknown, defaulting to 1000 [ 446.321813][T10146] lo speed is unknown, defaulting to 1000 [ 446.389828][T10168] tun0: tun_chr_ioctl cmd 1074025675 [ 446.392236][T10168] tun0: persist enabled [ 446.395358][T10168] tun0: tun_chr_ioctl cmd 1074025675 [ 446.397780][T10168] tun0: persist disabled [ 446.400996][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1161'. [ 446.426519][T10170] netlink: 344 bytes leftover after parsing attributes in process `syz.1.1162'. [ 446.639067][T10180] kernel profiling enabled (shift: 34) [ 446.641456][T10180] profiling shift: 34 too large [ 446.884752][ T837] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 446.933687][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1168'. [ 446.972822][T10191] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 446.978172][T10191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.038480][T10202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1173'. [ 447.041750][T10202] netlink: 'syz.0.1173': attribute type 14 has an invalid length. [ 447.045019][ T837] usb 6-1: Using ep0 maxpacket: 16 [ 447.045762][T10202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1173'. [ 447.048866][ T837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.050522][T10202] netlink: 'syz.0.1173': attribute type 14 has an invalid length. [ 447.054203][ T837] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 447.063870][ T837] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 447.068689][ T837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.074342][ T837] usb 6-1: config 0 descriptor?? [ 447.200088][T10208] netlink: 'syz.0.1175': attribute type 1 has an invalid length. [ 447.203325][T10208] netlink: 'syz.0.1175': attribute type 4 has an invalid length. [ 447.206571][T10208] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1175'. [ 447.394461][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1177'. [ 447.397646][T10215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1177'. [ 447.492807][ T837] usbhid 6-1:0.0: can't add hid device: -71 [ 447.494896][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 447.499183][ T837] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 447.511089][ T837] usb 6-1: USB disconnect, device number 10 [ 447.965044][ T6022] Bluetooth: hci0: command 0x0406 tx timeout [ 447.986401][T10256] overlayfs: failed to clone lowerpath [ 447.989396][T10256] overlayfs: failed to resolve '/ΜΜΜΜ@@@@@@': -2 [ 447.995219][T10256] trusted_key: encrypted_key: insufficient parameters specified [ 448.164922][ T34] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 448.209794][T10267] netlink: 'syz.1.1192': attribute type 10 has an invalid length. [ 448.314757][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 448.318570][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 448.321267][ T34] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 448.325506][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.332167][ T34] usb 9-1: config 0 descriptor?? [ 448.547001][ T34] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 448.623830][ T34] usb 9-1: USB disconnect, device number 4 [ 448.821538][T10277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1194'. [ 448.854080][T10277] vxcan1 (unregistering): left allmulticast mode [ 448.887584][T10295] ubi31: attaching mtd0 [ 448.889134][T10295] ubi31 error: ubi_attach_mtd_dev: bad VID header (2) or data offsets (66) [ 448.991248][T10311] netlink: 'syz.0.1206': attribute type 10 has an invalid length. [ 448.995585][T10311] netlink: 'syz.0.1206': attribute type 10 has an invalid length. [ 449.003480][T10312] lo speed is unknown, defaulting to 1000 [ 449.115039][T10313] lo speed is unknown, defaulting to 1000 [ 449.690107][T10353] validate_nla: 24 callbacks suppressed [ 449.690123][T10353] netlink: 'syz.0.1215': attribute type 12 has an invalid length. [ 449.967714][T10395] overlayfs: failed to clone lowerpath [ 450.011782][ T40] kauditd_printk_skb: 85 callbacks suppressed [ 450.011797][ T40] audit: type=1400 audit(1758355687.903:847): avc: denied { read } for pid=10401 comm="syz.4.1231" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 450.025823][ T40] audit: type=1400 audit(1758355687.903:848): avc: denied { open } for pid=10401 comm="syz.4.1231" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 450.033983][ T40] audit: type=1400 audit(1758355687.903:849): avc: denied { ioctl } for pid=10401 comm="syz.4.1231" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x6801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 450.190496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 450.193043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 450.253788][T10422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.257593][ T40] audit: type=1400 audit(1758355688.143:850): avc: denied { ioctl } for pid=10420 comm="syz.4.1235" path="socket:[30519]" dev="sockfs" ino=30519 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 450.278970][ T40] audit: type=1400 audit(1758355688.143:851): avc: denied { write } for pid=10420 comm="syz.4.1235" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 450.411030][ T40] audit: type=1326 audit(1758355688.303:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10445 comm="syz.1.1244" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d8598ec29 code=0x0 [ 450.431743][T10450] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 450.552468][ T40] audit: type=1400 audit(1758355688.443:853): avc: denied { mount } for pid=10458 comm="syz.0.1249" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 450.730634][ T40] audit: type=1400 audit(1758355688.623:854): avc: denied { bind } for pid=10473 comm="syz.0.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 451.009443][T10477] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10477 comm=syz.4.1253 [ 451.097827][ T40] audit: type=1400 audit(1758355688.993:855): avc: denied { create } for pid=10478 comm="syz.4.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 451.099729][T10480] loop7: detected capacity change from 0 to 524255232 [ 451.269499][ T40] audit: type=1326 audit(1758355689.163:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10482 comm="syz.1.1255" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d8598ec29 code=0x0 [ 451.337884][T10484] netlink: 'syz.1.1255': attribute type 10 has an invalid length. [ 451.344506][T10484] FAT-fs (sr0): bogus number of reserved sectors [ 451.346765][T10484] FAT-fs (sr0): Can't find a valid FAT filesystem [ 451.414767][ T6261] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 451.565480][ T6261] usb 9-1: Using ep0 maxpacket: 16 [ 451.571958][ T6261] usb 9-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 451.577291][ T6261] usb 9-1: config 1 interface 0 has no altsetting 0 [ 451.582138][ T6261] usb 9-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.40 [ 451.585154][ T6261] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.588551][ T6261] usb 9-1: Product: syz [ 451.590397][ T6261] usb 9-1: Manufacturer: syz [ 451.592390][ T6261] usb 9-1: SerialNumber: syz [ 451.635719][T10496] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:21 [ 451.669185][T10501] __nla_validate_parse: 5 callbacks suppressed [ 451.669199][T10501] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1261'. [ 451.707380][T10505] bad cache= option: none [ 451.707380][T10505] [ 451.709721][T10505] CIFS: VFS: bad cache= option: none [ 451.760906][T10516] macsec0: entered promiscuous mode [ 451.762642][T10516] macsec0: entered allmulticast mode [ 451.764252][T10516] veth1_macvtap: entered allmulticast mode [ 451.813047][T10481] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 451.817066][ T6261] usbhid 9-1:1.0: couldn't find an input interrupt endpoint [ 451.825179][ T6261] usb 9-1: USB disconnect, device number 5 [ 451.907766][T10544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1275'. [ 451.910739][T10544] gre0: entered promiscuous mode [ 451.912381][T10544] gre0: entered allmulticast mode [ 451.982942][T10553] binder: BINDER_SET_CONTEXT_MGR already set [ 451.986206][T10553] binder: 10551:10553 ioctl 4018620d 2000000000c0 returned -16 [ 452.063102][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1279'. [ 452.135692][T10574] syz.1.1285 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 452.154231][T10567] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1281'. [ 452.167185][T10569] netlink: 'syz.3.1284': attribute type 11 has an invalid length. [ 452.292879][T10593] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1291'. [ 452.383370][T10613] openvswitch: netlink: EtherType 0 is less than min 600 [ 452.427658][T10619] openvswitch: netlink: Invalid VLAN frame [ 452.437121][T10619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24888 sclass=netlink_route_socket pid=10619 comm=syz.3.1299 [ 452.604225][T10646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1297'. [ 452.613829][T10646] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1297'. [ 452.618880][T10645] fuse: Bad value for 'rootmode' [ 452.779252][T10650] Invalid ELF header type: 0 != 1 [ 452.819481][T10653] macsec1: entered promiscuous mode [ 452.941215][T10677] binder: 10676:10677 ioctl c0306201 200000000600 returned -22 [ 453.316287][T10701] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 453.317398][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1320'. [ 453.450591][T10715] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1326'. [ 453.515488][T10717] program syz.4.1325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 453.572741][T10728] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1330'. [ 453.707824][T10749] openvswitch: netlink: Tunnel attr 16370 out of range max 16 [ 453.918381][T10777] netlink: 'syz.3.1344': attribute type 1 has an invalid length. [ 453.939339][T10777] 8021q: adding VLAN 0 to HW filter on device bond3 [ 453.974035][T10777] veth3: entered promiscuous mode [ 453.979678][T10777] bond3: (slave veth3): Enslaving as an active interface with a down link [ 453.982429][T10779] netlink: 'syz.4.1343': attribute type 10 has an invalid length. [ 453.992741][T10779] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 454.000463][T10777] vlan5: entered allmulticast mode [ 454.002522][T10777] bond3: entered allmulticast mode [ 454.005871][T10777] bond3: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 454.032859][T10781] netlink: 'syz.1.1345': attribute type 22 has an invalid length. [ 454.036213][T10781] netlink: 'syz.1.1345': attribute type 22 has an invalid length. [ 454.350863][ T7940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.353358][ T7940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.440373][T10816] netlink: 'syz.1.1356': attribute type 1 has an invalid length. [ 454.466634][T10816] netlink: 'syz.1.1356': attribute type 1 has an invalid length. [ 454.485485][T10820] netlink: zone id is out of range [ 454.510781][T10820] netlink: set zone limit has 4 unknown bytes [ 454.999483][T10847] netlink: 'syz.1.1367': attribute type 13 has an invalid length. [ 455.009863][T10847] gretap0: refused to change device tx_queue_len [ 455.012397][T10847] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 455.149521][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 455.149531][ T40] audit: type=1400 audit(1758355693.043:903): avc: denied { read } for pid=10851 comm="syz.3.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 455.219924][ T40] audit: type=1400 audit(1758355693.113:904): avc: denied { setopt } for pid=10861 comm="syz.0.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 455.349586][ T40] audit: type=1400 audit(1758355693.243:905): avc: denied { mount } for pid=10863 comm="syz.3.1373" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 455.406629][ T40] audit: type=1400 audit(1758355693.303:906): avc: denied { bind } for pid=10875 comm="syz.0.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 455.408309][T10876] netlink: 'syz.0.1377': attribute type 10 has an invalid length. [ 455.419519][T10876] netlink: 'syz.0.1377': attribute type 10 has an invalid length. [ 455.769402][ T40] audit: type=1400 audit(1758355693.663:907): avc: denied { ioctl } for pid=10896 comm="syz.0.1383" path="socket:[34056]" dev="sockfs" ino=34056 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 455.809411][ T40] audit: type=1400 audit(1758355693.703:908): avc: denied { remount } for pid=10900 comm="syz.0.1384" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 455.943682][ T40] audit: type=1401 audit(1758355693.833:909): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 456.064141][ T40] audit: type=1400 audit(1758355693.953:910): avc: denied { connect } for pid=10925 comm="syz.0.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 456.072700][ T40] audit: type=1400 audit(1758355693.953:911): avc: denied { bind } for pid=10925 comm="syz.0.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 456.099825][ T40] audit: type=1400 audit(1758355693.993:912): avc: denied { read } for pid=10929 comm="syz.0.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 456.139520][T10936] netlink: 'syz.1.1395': attribute type 1 has an invalid length. [ 456.243951][T10956] usb usb8: usbfs: process 10956 (syz.1.1402) did not claim interface 12 before use [ 456.350424][T10973] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 456.371573][T10976] 9pnet_fd: Insufficient options for proto=fd [ 456.493330][T10987] tmpfs: Bad value for 'huge' [ 456.526905][T10993] /dev/nullb0: Can't lookup blockdev [ 456.722953][T11009] overlayfs: failed to clone upperpath [ 456.754146][T11012] __nla_validate_parse: 12 callbacks suppressed [ 456.754158][T11012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1420'. [ 456.870261][T11023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.880663][T11023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.888788][T11020] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1422'. [ 456.916174][T11030] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.1424'. [ 456.959475][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1425'. [ 456.963741][T11033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1425'. [ 457.042391][T11039] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1427'. [ 457.166746][ T63] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 457.174176][T10973] overlayfs: statfs failed on './file0' [ 457.304075][T11050] rdma_rxe: rxe_newlink: failed to add lo [ 457.637537][ T6022] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 457.641316][ T6022] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 457.648706][ T6022] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 457.652359][ T6022] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 457.655166][ T6022] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 457.695207][T11069] lo speed is unknown, defaulting to 1000 [ 457.855576][T11069] chnl_net:caif_netlink_parms(): no params data found [ 457.925097][T11069] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.927338][T11069] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.929548][T11069] bridge_slave_0: entered allmulticast mode [ 457.932597][T11069] bridge_slave_0: entered promiscuous mode [ 457.936899][T11069] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.939178][T11069] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.941471][T11069] bridge_slave_1: entered allmulticast mode [ 457.944054][T11069] bridge_slave_1: entered promiscuous mode [ 457.995934][T11069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.002353][T11069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.046192][T11069] team0: Port device team_slave_0 added [ 458.049482][T11069] team0: Port device team_slave_1 added [ 458.080173][T11069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.082620][T11069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.090796][T11069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.095158][T11069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.097380][T11069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.106525][T11069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.155592][T11069] hsr_slave_0: entered promiscuous mode [ 458.157881][T11069] hsr_slave_1: entered promiscuous mode [ 458.251537][T11069] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.252647][T11108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1435'. [ 458.255406][T11109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1435'. [ 458.333392][T11069] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.401499][T11069] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.491941][T11069] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.667731][T11069] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 458.673811][T11069] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 458.683132][T11069] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 458.690216][T11069] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 458.697800][T11119] 9pnet_fd: Insufficient options for proto=fd [ 458.706258][T11121] netlink: 'syz.3.1440': attribute type 1 has an invalid length. [ 458.718418][T11121] 8021q: adding VLAN 0 to HW filter on device bond4 [ 458.733331][T11121] bond4: (slave erspan2): making interface the new active one [ 458.737766][T11121] bond4: (slave erspan2): Enslaving as an active interface with an up link [ 458.794994][T11134] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 458.796902][T11069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.801403][T11135] netlink: 'syz.1.1442': attribute type 2 has an invalid length. [ 458.804639][T11135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 458.818534][T11135] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 458.826256][T11137] netlink: 'syz.1.1442': attribute type 2 has an invalid length. [ 458.829702][T11137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 458.848368][T11069] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.856276][ T7949] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.859343][ T7949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.868930][ T7933] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.871871][ T7933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.896176][T11069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 458.954908][T11159] IPVS: set_ctl: invalid protocol: 60 100.1.1.0:20004 [ 458.969572][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1450'. [ 458.973109][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1450'. [ 458.980090][T11167] dummy0: entered promiscuous mode [ 459.011644][T11069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.031675][T11069] veth0_vlan: entered promiscuous mode [ 459.041771][T11069] veth1_vlan: entered promiscuous mode [ 459.060158][T11069] veth0_macvtap: entered promiscuous mode [ 459.063898][T11069] veth1_macvtap: entered promiscuous mode [ 459.073619][T11069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.079437][T11179] ref_ctr_offset mismatch. inode: 0x5b8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000000 [ 459.082503][T11069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.091464][ T7964] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.097642][ T7964] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.100625][ T7964] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.103799][ T7964] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.163411][ T7933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.167057][ T7933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.170301][T11181] Bluetooth: MGMT ver 1.23 [ 459.178493][ T7933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.181123][ T7933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.339064][ T7949] team0: left allmulticast mode [ 459.340600][ T7949] team_slave_0: left allmulticast mode [ 459.342377][ T7949] team_slave_1: left allmulticast mode [ 459.344335][ T7949] bridge0: port 3(team0) entered disabled state [ 459.345515][T11194] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20004 [ 459.350230][ T7949] bridge_slave_1: left allmulticast mode [ 459.352111][ T7949] bridge_slave_1: left promiscuous mode [ 459.355268][ T7949] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.359125][ T7949] bridge_slave_0: left allmulticast mode [ 459.361046][ T7949] bridge_slave_0: left promiscuous mode [ 459.362949][ T7949] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.472688][ T7949] bond3 (unregistering): (slave geneve2): Releasing active interface [ 459.725026][ T6022] Bluetooth: hci4: command tx timeout [ 459.882026][ T7949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.887864][ T7949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.893000][ T7949] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 459.898692][ T7949] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 459.910054][ T7949] bond0 (unregistering): Released all slaves [ 459.916250][ T7949] bond1 (unregistering): Released all slaves [ 459.990665][ T7949] bond2 (unregistering): Released all slaves [ 460.001285][ T7949] bond3 (unregistering): Released all slaves [ 460.043942][T11207] openvswitch: netlink: IP tunnel dst address not specified [ 460.062847][T11210] @0Ω: renamed from syz_tun (while UP) [ 460.086461][ T7949] : left promiscuous mode [ 460.164494][ T7949] tipc: Disabling bearer [ 460.172039][ T7949] tipc: Disabling bearer [ 460.175679][ T7949] tipc: Left network mode [ 460.177750][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 460.177762][ T40] audit: type=1400 audit(1758355698.073:949): avc: denied { write } for pid=11217 comm="syz.3.1465" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 460.382792][T11240] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 460.383682][ T7949] ------------[ cut here ]------------ [ 460.389487][ T7949] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 460.393477][ T7949] WARNING: CPU: 3 PID: 7949 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x247/0x850 [ 460.398428][ T7949] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 460.400241][ T7949] CPU: 3 UID: 0 PID: 7949 Comm: kworker/u32:28 Not tainted syzkaller #0 PREEMPT(full) [ 460.404530][ T40] audit: type=1400 audit(1758355698.293:950): avc: denied { write } for pid=6010 comm="syz-executor" path="pipe:[8264]" dev="pipefs" ino=8264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 460.405902][ T7949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 460.405920][ T7949] Workqueue: netns cleanup_net [ 460.405951][ T7949] RIP: 0010:drv_unassign_vif_chanctx+0x247/0x850 [ 460.405984][ T7949] Code: 74 24 10 48 81 c6 20 01 00 00 48 89 74 24 10 e8 4f cd b9 f6 8b 54 24 04 48 8b 74 24 10 48 c7 c7 c0 aa 08 8d e8 aa 71 78 f6 90 <0f> 0b 90 90 e8 30 cd b9 f6 4c 89 f2 48 b8 00 00 00 00 00 fc ff df [ 460.406003][ T7949] RSP: 0018:ffffc90006bef5f0 EFLAGS: 00010286 [ 460.406020][ T7949] RAX: 0000000000000000 RBX: ffff888055058d80 RCX: ffffffff817a4388 [ 460.406033][ T7949] RDX: ffff8880247a4880 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 460.406046][ T7949] RBP: ffff888029dd8e40 R08: 0000000000000001 R09: 0000000000000000 [ 460.406058][ T7949] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88805505aa28 [ 460.406071][ T7949] R13: 0000000000000000 R14: ffff888055059728 R15: ffff88805505a9d0 [ 460.406083][ T7949] FS: 0000000000000000(0000) GS:ffff8880d69b2000(0000) knlGS:0000000000000000 [ 460.406115][ T7949] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 460.406131][ T7949] CR2: 00007f6d867bcf98 CR3: 0000000028de8000 CR4: 0000000000352ef0 [ 460.406150][ T7949] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 460.406163][ T7949] DR3: 000000000000b7ed DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 460.406175][ T7949] Call Trace: [ 460.406182][ T7949] [ 460.406197][ T7949] ieee80211_assign_link_chanctx+0x3f1/0xf00 [ 460.406231][ T7949] __ieee80211_link_release_channel+0x273/0x4b0 [ 460.406260][ T7949] ieee80211_link_release_channel+0x128/0x200 [ 460.406284][ T7949] ? __pfx_ieee80211_uninit+0x10/0x10 [ 460.406313][ T7949] unregister_netdevice_many_notify+0x141c/0x24c0 [ 460.406349][ T7949] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 460.406383][ T7949] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 460.406405][ T7949] ? find_held_lock+0x2b/0x80 [ 460.406432][ T7949] unregister_netdevice_queue+0x305/0x3f0 [ 460.406459][ T7949] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 460.406494][ T7949] _cfg80211_unregister_wdev+0x64b/0x830 [ 460.406525][ T7949] ieee80211_remove_interfaces+0x34e/0x740 [ 460.406550][ T7949] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 460.406581][ T7949] ieee80211_unregister_hw+0x55/0x3a0 [ 460.406607][ T7949] hwsim_exit_net+0x3ac/0x7d0 [ 460.406635][ T7949] ? __pfx_hwsim_exit_net+0x10/0x10 [ 460.406662][ T7949] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 460.406687][ T7949] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 460.406710][ T7949] ? __pfx_hwsim_exit_net+0x10/0x10 [ 460.406735][ T7949] ops_undo_list+0x2eb/0xab0 [ 460.406766][ T7949] ? __pfx_ops_undo_list+0x10/0x10 [ 460.406791][ T7949] ? cleanup_net+0x334/0x890 [ 460.522822][ T7949] ? idr_destroy+0x62/0x2e0 [ 460.524843][ T7949] cleanup_net+0x408/0x890 [ 460.526703][ T7949] ? __pfx_cleanup_net+0x10/0x10 [ 460.528736][ T7949] ? rcu_is_watching+0x12/0xc0 [ 460.530741][ T7949] process_one_work+0x9cc/0x1b70 [ 460.532803][ T7949] ? __pfx_process_one_work+0x10/0x10 [ 460.535117][ T7949] ? assign_work+0x1a0/0x250 [ 460.537072][ T7949] worker_thread+0x6c8/0xf10 [ 460.538994][ T7949] ? __pfx_worker_thread+0x10/0x10 [ 460.541071][ T7949] kthread+0x3c2/0x780 [ 460.542790][ T7949] ? __pfx_kthread+0x10/0x10 [ 460.544794][ T7949] ? rcu_is_watching+0x12/0xc0 [ 460.546795][ T7949] ? __pfx_kthread+0x10/0x10 [ 460.548726][ T7949] ret_from_fork+0x56a/0x730 [ 460.550678][ T7949] ? __pfx_kthread+0x10/0x10 [ 460.552579][ T7949] ret_from_fork_asm+0x1a/0x30 [ 460.554593][ T7949] [ 460.555850][ T7949] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 460.558205][ T7949] CPU: 3 UID: 0 PID: 7949 Comm: kworker/u32:28 Not tainted syzkaller #0 PREEMPT(full) [ 460.561863][ T7949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 460.565101][ T7949] Workqueue: netns cleanup_net [ 460.566618][ T7949] Call Trace: [ 460.567636][ T7949] [ 460.568535][ T7949] dump_stack_lvl+0x3d/0x1f0 [ 460.569963][ T7949] vpanic+0x6e8/0x7a0 [ 460.571228][ T7949] ? __pfx_vpanic+0x10/0x10 [ 460.572607][ T7949] ? drv_unassign_vif_chanctx+0x247/0x850 [ 460.574367][ T7949] panic+0xca/0xd0 [ 460.575520][ T7949] ? __pfx_panic+0x10/0x10 [ 460.576968][ T7949] ? check_panic_on_warn+0x1f/0xb0 [ 460.578579][ T7949] check_panic_on_warn+0xab/0xb0 [ 460.580109][ T7949] __warn+0xf6/0x3c0 [ 460.581735][ T7949] ? preempt_schedule_notrace+0x62/0xe0 [ 460.584069][ T7949] ? drv_unassign_vif_chanctx+0x247/0x850 [ 460.586486][ T7949] report_bug+0x3c3/0x580 [ 460.588311][ T7949] ? drv_unassign_vif_chanctx+0x247/0x850 [ 460.590694][ T7949] handle_bug+0x184/0x210 [ 460.592499][ T7949] exc_invalid_op+0x17/0x50 [ 460.594379][ T7949] asm_exc_invalid_op+0x1a/0x20 [ 460.596409][ T7949] RIP: 0010:drv_unassign_vif_chanctx+0x247/0x850 [ 460.599019][ T7949] Code: 74 24 10 48 81 c6 20 01 00 00 48 89 74 24 10 e8 4f cd b9 f6 8b 54 24 04 48 8b 74 24 10 48 c7 c7 c0 aa 08 8d e8 aa 71 78 f6 90 <0f> 0b 90 90 e8 30 cd b9 f6 4c 89 f2 48 b8 00 00 00 00 00 fc ff df [ 460.606828][ T7949] RSP: 0018:ffffc90006bef5f0 EFLAGS: 00010286 [ 460.609330][ T7949] RAX: 0000000000000000 RBX: ffff888055058d80 RCX: ffffffff817a4388 [ 460.612538][ T7949] RDX: ffff8880247a4880 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 460.615639][ T7949] RBP: ffff888029dd8e40 R08: 0000000000000001 R09: 0000000000000000 [ 460.618694][ T7949] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88805505aa28 [ 460.621820][ T7949] R13: 0000000000000000 R14: ffff888055059728 R15: ffff88805505a9d0 [ 460.625041][ T7949] ? __warn_printk+0x198/0x350 [ 460.626806][ T7949] ? __warn_printk+0x1a5/0x350 [ 460.628289][ T7949] ieee80211_assign_link_chanctx+0x3f1/0xf00 [ 460.630126][ T7949] __ieee80211_link_release_channel+0x273/0x4b0 [ 460.632054][ T7949] ieee80211_link_release_channel+0x128/0x200 [ 460.633949][ T7949] ? __pfx_ieee80211_uninit+0x10/0x10 [ 460.635607][ T7949] unregister_netdevice_many_notify+0x141c/0x24c0 [ 460.637557][ T7949] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 460.639612][ T7949] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 460.641511][ T7949] ? find_held_lock+0x2b/0x80 [ 460.643019][ T7949] unregister_netdevice_queue+0x305/0x3f0 [ 460.644791][ T7949] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 460.646762][ T7949] _cfg80211_unregister_wdev+0x64b/0x830 [ 460.648494][ T7949] ieee80211_remove_interfaces+0x34e/0x740 [ 460.650289][ T7949] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 460.652236][ T7949] ieee80211_unregister_hw+0x55/0x3a0 [ 460.653917][ T7949] hwsim_exit_net+0x3ac/0x7d0 [ 460.655384][ T7949] ? __pfx_hwsim_exit_net+0x10/0x10 [ 460.656987][ T7949] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 460.658661][ T7949] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 460.660419][ T7949] ? __pfx_hwsim_exit_net+0x10/0x10 [ 460.662038][ T7949] ops_undo_list+0x2eb/0xab0 [ 460.663460][ T7949] ? __pfx_ops_undo_list+0x10/0x10 [ 460.665031][ T7949] ? cleanup_net+0x334/0x890 [ 460.666491][ T7949] ? idr_destroy+0x62/0x2e0 [ 460.667879][ T7949] cleanup_net+0x408/0x890 [ 460.669274][ T7949] ? __pfx_cleanup_net+0x10/0x10 [ 460.670833][ T7949] ? rcu_is_watching+0x12/0xc0 [ 460.672335][ T7949] process_one_work+0x9cc/0x1b70 [ 460.673897][ T7949] ? __pfx_process_one_work+0x10/0x10 [ 460.675548][ T7949] ? assign_work+0x1a0/0x250 [ 460.676980][ T7949] worker_thread+0x6c8/0xf10 [ 460.678422][ T7949] ? __pfx_worker_thread+0x10/0x10 [ 460.680014][ T7949] kthread+0x3c2/0x780 [ 460.681283][ T7949] ? __pfx_kthread+0x10/0x10 [ 460.682755][ T7949] ? rcu_is_watching+0x12/0xc0 [ 460.684249][ T7949] ? __pfx_kthread+0x10/0x10 [ 460.685685][ T7949] ret_from_fork+0x56a/0x730 [ 460.687187][ T7949] ? __pfx_kthread+0x10/0x10 [ 460.688623][ T7949] ret_from_fork_asm+0x1a/0x30 [ 460.690123][ T7949] [ 460.691685][ T7949] Kernel Offset: disabled [ 460.693027][ T7949] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:59:46 Registers: info registers vcpu 0 CPU#0 RAX=00000000001441e3 RBX=0000000000000000 RCX=ffffffff8b94cb49 RDX=0000000000000000 RSI=ffffffff8de52d11 RDI=ffffffff8c163300 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab7490 R15=0000000000000000 RIP=ffffffff8b94b68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001240 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 05bd000000010000 0008000400080010 00080000000c0200 0000000000080008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000080008 0007000c00080000 0000000000100000 01d4000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 05ba000000200000 0010000400000000 0000000000080016 0010000000140100 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 008c000000980000 00a4000000b00000 00bc000000c80000 00d4000000e00000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ec000001000000 01100000011c0000 0128000001340000 0144000001540000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0026000000000000 0000000000000000 000500000000081b 3200000000180000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00200000000e0014 000c000000080004 0020000e00000000 0000000000000000 ZMM24=50d0432750d04327 50d0432750d04327 50d0432750d04327 50d0432750d04327 50d0432750d04327 50d0432750d04327 50d0432750d04327 50d0432750d04327 ZMM25=0ba59b670ba59b67 0ba59b670ba59b67 0ba59b670ba59b67 0ba59b670ba59b67 0ba59b670ba59b67 0ba59b670ba59b67 0ba59b670ba59b67 0ba59b670ba59b67 ZMM26=0ce33b010ce33b01 0ce33b010ce33b01 0ce33b010ce33b01 0ce33b010ce33b01 0ce33b010ce33b01 0ce33b010ce33b01 0ce33b010ce33b01 0ce33b010ce33b01 ZMM27=9e0db3ae9e0db3ae 9e0db3ae9e0db3ae 9e0db3ae9e0db3ae 9e0db3ae9e0db3ae 9e0db3ae9e0db3ae 9e0db3ae9e0db3ae 9e0db3ae9e0db3ae 9e0db3ae9e0db3ae ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=5909000059090000 5909000059090000 5909000059090000 5909000059090000 5909000059090000 5909000059090000 5909000059090000 5909000059090000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffffffff93d812a8 RCX=ffffffff822db8cd RDX=1ffffffff1bec3d1 RSI=ffffffff8c163280 RDI=ffffffff8df61e88 RBP=0000000000000001 RSP=ffffc90003a1f728 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=ffff88817ffef400 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff81a0c3b3 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdc45707d60 CR3=0000000033d35000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc44ba76c3 00007fdc44ba76c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffecbff0960 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556337850b 0000555563378330 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555633702cf 000055556336fcc0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0802800300080004 8080100000040601 41b40030656c6966 2f2e01ffffffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0802800300080004 8080100000040601 41b40030656c6966 2f2e01ffffffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002920360208080 8082000290036462 6e2f7665642f01ff ffffffffffffffef ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffff308018003 0030656c69662f2e 01ffffffffffffff ffef080480030002 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0101b01000498004 040172d80108004a a0030210004a9003 000800000300044a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff888026690af0 RCX=0000000000000000 RDX=0000000000000005 RSI=0000000000000003 RDI=ffff888026690b68 RBP=0000000000000000 RSP=ffffc900048cf620 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000078 R11=0000000000000001 R12=ffff888026690b68 R13=ffff888026690000 R14=0000000000000000 R15=0000000000000001 RIP=ffffffff8197b6a0 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2d50fe CR3=000000005112a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000b7ed DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc57433a10 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc57433b96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc57433b96 00007ffc57433b9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6e4012e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6e4012e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6e4012e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6e4012e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6e4012f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6e4012fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564bed5 RDI=ffffffff9b118120 RBP=ffffffff9b1180e0 RSP=ffffc90006beef60 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b1180e0 R15=ffffffff8564be70 RIP=ffffffff8564beff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6d867bcf98 CR3=0000000028de8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000b7ed DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc57433a10 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc57433b96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc57433b96 00007ffc57433b9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6e4012e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6e4012e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6e4012e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6e4012e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6e4012f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb6e4012fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000