last executing test programs: 37.510762804s ago: executing program 2 (id=2102): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000004c0)={r1, @in={{0x2, 0xfffe, @empty}}, 0x1, 0x7ffe}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000004c0)={r1, @in={{0x2, 0xfffe, @empty}}, 0x1, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x5, 0x0, 0x1f4, 0x28, 0xfffffff9, 0x81}, 0x9c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2c}]}}]}, 0x3c}}, 0x20004055) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x80002, 0x0) (async) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000240)='nv\x00', 0x3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x80800) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x4, 0x2}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000001c0)={r5}) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 37.510535776s ago: executing program 2 (id=2103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x40, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000081}, 0x4891) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000000000000050000"]) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="5800000010001fff000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="0918000000000000300012800b000100697036746e6c000020000280050009000400000014000200fe8000000000000000000000000000bb080004000005"], 0x58}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r5, 0x89e9) 37.452987954s ago: executing program 2 (id=2104): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008d804dd00000000000001090224000001000921fffffd012205000905810308000300fd"], 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2901c0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f0000000040)={0x81}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) move_pages(0x0, 0x1, &(0x7f0000002240)=[&(0x7f0000000000/0x800000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000002280), 0x2) (async) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="00ad10dc9200051b26ed60fc12721951c82b774d3a0ff4cfc237750f0a0df15c02d06b76a5b93d506960c4bc4b95c9901b036487a01b77f760959a288a98110fa3f4d3b1d84e3c30771083023ac1979bf74dbacc0160da96fbf5581fd557ed97c09933ee50d0681d554e30e52735553741a0b6496d3af12a81d3e7f6bd621af7686e03a6fff6490800000000000000e4fc6d0cd17adde44cc13509cdf1000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000001180)=ANY=[@ANYBLOB="0f000022", @ANYRES16=r5, @ANYBLOB="010000000000000000000c00000004000380"], 0x18}}, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0) (async) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000001440)={&(0x7f0000000200)=[{0x6, 0x2400, 0x1000, &(0x7f00000002c0)="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"}, {0x9, 0x4001, 0x7e, &(0x7f00000012c0)="6ba9c4133cb04b20a5c0870c7893f7eeed944fcd34c2aaa3fcd31d4db218b6439f423e8167feba23c72f486ba9e8cc70978b34051dde7ced973a498e80c0c6e75b2216db415d393a395fe8e0dc7634e67bdc020416261df90026f1a9bfbafeea044674adb6769da3187e46ab115b2079e0d766e9b17065527994b99c4eb9"}, {0x7, 0x1801, 0x0, &(0x7f00000000c0)}, {0xf001, 0x6000, 0xfc, &(0x7f0000001340)="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"}], 0x4}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) (async) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x2) (async) readv(r7, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) (async, rerun: 32) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) (async, rerun: 32) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r6) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000004e40)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000001480)=ANY=[@ANYBLOB="ac008395c9bb790040", @ANYRES16=r8, @ANYBLOB="010028bd7000fedbdf2503000000140006006272696467655f736c6176655f31000014000200ff0200000000000000000000000000012900070073797374656d5f753a6f626a6563745f723a6d656d6f72795f6465766963655f743a7330000000002500070073797374656d5f753a6f626a6563745f723a70696e675f657865635f743a7330000000001400030000000000000000000000ffffac14143a08000400ac141406"], 0xac}, 0x1, 0x0, 0x0, 0x8004}, 0x810) 36.433180912s ago: executing program 2 (id=2129): r0 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x2, 0x1000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x20800, 0x0, 0x103, 0x1, 0x0, 0x7}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@local}, &(0x7f0000000040)=0xfffffffffffffff1) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r5 = dup2(r4, r1) r6 = dup(r5) flock(r6, 0x5) r7 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040971490000"], 0x6) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r8, 0x0) syz_io_uring_setup(0x5839, &(0x7f0000000200)={0x0, 0x1e29, 0x100, 0x3, 0x1d0, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x1, 0x0, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendfile(r8, r8, 0x0, 0x40008) 36.172998068s ago: executing program 2 (id=2130): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8) (async, rerun: 64) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) (rerun: 64) r2 = getpgid(r1) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$TIOCSBRK(r3, 0x5427) (async, rerun: 32) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080)=[{}, {0x80000000}], &(0x7f00000000c0)}) (rerun: 32) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000180)={r4}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000280)=0x0) sched_getaffinity(r5, 0x8, &(0x7f00000002c0)) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000300)={0x0, 0x9ac3}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000380)={r6, 0x1b}, &(0x7f00000003c0)=0x8) ioctl$SG_IO(r3, 0x2285, &(0x7f00000039c0)={0x0, 0xfffffffffffffffc, 0xf2, 0x7, @scatter={0x9, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000400)=""/101, 0x65}, {&(0x7f0000000480)=""/151, 0x97}, {&(0x7f0000000540)=""/27, 0x1b}, {&(0x7f0000000580)=""/1, 0x1}, {&(0x7f00000005c0)=""/191, 0xbf}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/50, 0x32}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/240, 0xf0}]}, &(0x7f0000002880)="90ffa3aa20f6f22908df43bfd3c145a605418b70f2ad31cb5c7b0f3ef4d0c803ec2d0e36b3fed6adf61d8fe6c622a91168deebc513c55444093d159118cc4296356c7500bb60f99045c0d1ee0d3915d1374acd6ba8132d35343e4ad3114c8d65b4393146437e91bbe726b9cafba409f958c0ce3cc2e2fa312d287642a8fa998b21aa22fe21536e83fe93ccc844467e7b2c8d8604605d84ae3a240437e3b7b8db89482435662d31b69455b75ed524eb918563d0ddce2a705573d965b9cc01a17574af53a9b5c07fa87cbf239849964d45c7469f58c5a3e13d361c8d64742f431fb052392b62c75e90fce0ad7d6075ec07c283", &(0x7f0000002980)=""/4096, 0x800, 0x10010, 0x0, &(0x7f0000003980)}) (async) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000003a40)) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000003a80)) (async) openat$cgroup_subtree(r3, &(0x7f0000003ac0), 0x2, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000003b00)={0x1ff, 0x800, {r5}, {0xee00}, 0x5, 0x1}) rt_tgsigqueueinfo(r2, r8, 0x6, &(0x7f0000003b40)={0xc, 0x2, 0x2}) (async, rerun: 64) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000003fc0)={0x0, 0x1, 0x1d, 0x1d, 0x29, 0x0}) (rerun: 64) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000c) (async) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, 0x0, 0x0) ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2d) ioctl$KVM_GET_CLOCK(r9, 0x8030ae7c, 0x0) (async, rerun: 32) syz_io_uring_setup(0x536a, 0x0, 0x0, 0x0) (async, rerun: 32) syz_io_uring_complete(0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) openat$cgroup(r3, 0x0, 0x200002, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000004340), 0xfffffffffffffffc, 0x4000) 35.973418037s ago: executing program 2 (id=2132): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@dellinkprop={0x44, 0x6d, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x8, 0xc00}, [@IFLA_IFALIASn={0x4}, @IFLA_MASTER={0x8}, @IFLA_PHYS_SWITCH_ID={0x16, 0x24, "80ebe9f7f3e3b5c5057f63490c3e308e4117"}]}, 0x44}}, 0x0) 35.934973485s ago: executing program 32 (id=2132): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@dellinkprop={0x44, 0x6d, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x8, 0xc00}, [@IFLA_IFALIASn={0x4}, @IFLA_MASTER={0x8}, @IFLA_PHYS_SWITCH_ID={0x16, 0x24, "80ebe9f7f3e3b5c5057f63490c3e308e4117"}]}, 0x44}}, 0x0) 10.40286277s ago: executing program 1 (id=2490): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002680)={&(0x7f0000002540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x2f}, 0x20) (async, rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x6}, 0x8) (rerun: 64) 10.402732767s ago: executing program 1 (id=2491): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x4, 0x6, "d85e36", 0x0, 0xe9}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"]) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f00000000c0)) 10.269111797s ago: executing program 1 (id=2492): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume_offset', 0xa0042, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000006a]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) write$tcp_mem(r0, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) 10.268341913s ago: executing program 1 (id=2493): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x114) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x120) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000000)) syz_open_procfs(r5, &(0x7f0000000040)='net/dev_snmp6\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'macvlan0\x00', @random="0b45f766e350"}) syz_clone(0x100, &(0x7f00000004c0)="50e35690159536cd7452ef98389d2157043cf3ae8b9b3c449b1df5f58ebe7d180e3aa42b1813658d171615421d9c2e00982ab101e233dbaa34aa020188460f891b00ff2387eaa0f4bab74d41ff2c5af6ec8df19b8f39e2b7a4be9c6b10359350b252a5e85c35ff9396115a65c9c46da80b4b1269dd395ae32ce826b3cdb2e446e49cdc37b32f262c5bfdae0e60b0fca32745510638215bd2bf26ab318d9e99a1b5ec0dcc03628e76de5189bf2a62143a88b9dba5921b951f38249a5a9c0ccdd9b123aec753fe5716942c38701436fe693017a25f79bf151d37753ab9a2824b3087fcffea868e112a9f915b9bef6d332e4b1159cc", 0xf4, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0)="ff809777be6b5fc841ae492493d863f3594db238214be99f8bd941c8dc85aaa6a65d5db789f4f57d18eadde1937397345cb55a691646461396a5834f6e9aea10d04f9d7acf3a5c4a3cfac4f07d19f80da1b83fb21c8b73ad818290a1bab5bf99fd3b7dcbecfaa5b7baed1d5706ffcccada6300c331144f") r6 = syz_open_procfs(r5, &(0x7f0000000340)='stack\x00') read$eventfd(r6, &(0x7f0000000100), 0xfffffd79) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getnexthop={0x20, 0x6a, 0x501, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20004004) 10.183416153s ago: executing program 1 (id=2494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getpgid(0x0) (async) r1 = getpgid(0x0) r2 = getpid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0xfffd, 0x2, 0x2, 0x5, 0x3, 0xffffffffffffffff}) r4 = dup2(r0, r0) syz_clone3(&(0x7f0000000600)={0x422a200, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200), {0x1a}, &(0x7f00000003c0)=""/165, 0xa5, &(0x7f0000000480)=""/156, &(0x7f00000005c0)=[r1, r2, 0x0, r3, 0xffffffffffffffff], 0x5, {r4}}, 0x58) (async) syz_clone3(&(0x7f0000000600)={0x422a200, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200), {0x1a}, &(0x7f00000003c0)=""/165, 0xa5, &(0x7f0000000480)=""/156, &(0x7f00000005c0)=[r1, r2, 0x0, r3, 0xffffffffffffffff], 0x5, {r4}}, 0x58) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x5d, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000a140000fb1000119c00000000000000000100000a00000000000000f5e5efc44f832eff4ef86001eccf7f75bf54f13264d96b5e96a6c15845c81e5ca28c057c5531ff917f6ebf608046b263ffc775109de3a2f0d293cb96dfaa12663d9eaea9781b8d5e17b97b4fab69d90e1310ef207579799853028e111644d4ca51147caad058dc9a974db1396453d66cbc3204ac0a2b261024979e293c6c11ee9e390aab229437cba9914271be20bb69323304365d5f0223bafd44fb949b55e0c6acbb94ca033303547a6b71947cb1336e632085e2ceff7ad581b000"/246], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x5d, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000a140000fb1000119c00000000000000000100000a00000000000000f5e5efc44f832eff4ef86001eccf7f75bf54f13264d96b5e96a6c15845c81e5ca28c057c5531ff917f6ebf608046b263ffc775109de3a2f0d293cb96dfaa12663d9eaea9781b8d5e17b97b4fab69d90e1310ef207579799853028e111644d4ca51147caad058dc9a974db1396453d66cbc3204ac0a2b261024979e293c6c11ee9e390aab229437cba9914271be20bb69323304365d5f0223bafd44fb949b55e0c6acbb94ca033303547a6b71947cb1336e632085e2ceff7ad581b000"/246], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000200600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002"], 0x0) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x4800, 0x0) ioctl$DVD_AUTH(r5, 0x5390, &(0x7f0000000180)=@lsa={0x0, 0x3}) 9.939322089s ago: executing program 1 (id=2495): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0100001900010000000000fcdbdf25e00000020000000000f5ffffff0000000a010102000000000009000000000000000000000000000002ed0000200000003f69b893ce2722175d875bf6a82d65ee6b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80d1}, 0x20004000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, @empty, @empty, 0x40, 0x20, 0x2, 0x2}}) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r4) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r6, 0x4349d3f412cb28fb, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r6, 0x501, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004041}, 0x4080) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r7, &(0x7f0000000080), 0x12) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 9.89230565s ago: executing program 33 (id=2495): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0100001900010000000000fcdbdf25e00000020000000000f5ffffff0000000a010102000000000009000000000000000000000000000002ed0000200000003f69b893ce2722175d875bf6a82d65ee6b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80d1}, 0x20004000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, @empty, @empty, 0x40, 0x20, 0x2, 0x2}}) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r4) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r6, 0x4349d3f412cb28fb, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r6, 0x501, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004041}, 0x4080) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r7, &(0x7f0000000080), 0x12) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 3.178483677s ago: executing program 3 (id=2587): r0 = socket$packet(0x11, 0x2, 0x300) (async) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000002500)='\f', 0x1}], 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8931, &(0x7f0000000000)={'wlan0\x00'}) 3.102493454s ago: executing program 3 (id=2589): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008001317"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs user:trusted: '], 0x32, 0xfffffffffffffffc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000017c0)={'wlan1\x00', 0x0}) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000003100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed0f6de8360d499042ddc7d02b6c0772128257702bfe6d0971f00fea85da062cdc", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="090200000000000000000100000008000600ac1414aa08000b00", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 3.101191413s ago: executing program 3 (id=2593): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040)) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x0, 0x0, {0xa, 0x15, 0x8, 0x1a, 0x9, 0x8, 0x3, 0xa, 0x1}}) write$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000100)={0xffffffff, 0x10001, 0x3, 0x8}) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x1, 0x0, {0x2f, 0x1e, 0x9, 0x13, 0x2, 0x4, 0x0, 0x16b, 0x1}}) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000180)) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x294, 0x11, 0x6, 0x3, 0x70bd26, 0x25dfdbfe, {0xa, 0x0, 0x4}, [@nested={0xee, 0xb5, 0x0, 0x1, [@generic="39975ed21c24cb4a6d0f98fea660ae0faab51a0250e690be15dd021d4816b18b908129881c04be47ab61eb39cb8932c229c12532f4ef121e0767cfa0d5d83ad22dcb598163b0819467e8f3cc439875fd4d9d9365c644b45cc89e098602e0a1abd6b739ab89df501e53c41f8ad482ca4ab9556913b459ef1bd9b0ff8e46cc386f42d9e45b6b10b7abfbd2ee85d75155e7ccb4a18cc79999d8601a609a82ef4f3046bf4191cc56f0daa91547c7a8997d5313e9ea1edb5f176f93727de7d13ace09693a0596cac240cc065978a2fbeec7ceb706a7da1752bae6c8061b4573978b2b2a18337812f9", @typed={0x4, 0x1f}]}, @generic="55fdc515187dcd24c444bee5dff8994081063d274bc978ed1942109467f1fd0aefc3fa5958438246a24c7157d49f580e94bdddfe992a16c28d79e33347eb526e598c2d4199", @nested={0x13d, 0xdf, 0x0, 0x1, [@nested={0x4, 0x13a}, @generic="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", @nested={0x4, 0x102}, @typed={0x14, 0x4e, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x13}}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @nested={0x4, 0x105}, @nested={0x4, 0x141}, @nested={0x4, 0x5c}]}, @nested={0x8, 0xe4, 0x0, 0x1, [@typed={0x4, 0x10f}]}]}, 0x294}}, 0x1) sendto$netrom(0xffffffffffffffff, &(0x7f0000000540)="97fe4a6b9c5bef127395844bcd3908e435e857f6e15948605575045ffab8adee0a9c80c6547d64169d9b1ea6ce4e6a5497f0dde60c90deb2e54a05249e1b698eb0d4ecfc2be0a5b20d9c4fe3de0ea00c63ec4f6339b75e44a90f007a0fc0c52bd9a3cb4951647d6a8c23acc9f94b7c42440cd491604a432745be08b55869ae302091d0891c08f81717d125a61289085ae70fc9dee697b904bcc31411cabc54a362d67487e64576ced6586806788b667b1650df668891cc1f7a16e856753687704699ea2fcc389a6d", 0xc8, 0x40000, &(0x7f0000000640)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r2 = fspick(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000840)={&(0x7f0000000700), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r4, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x32}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x4801) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000880)={0x1, 0x1, {0x3, 0x10, 0xb, 0x1, 0x8, 0x10000, 0x3, 0x2c}}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x1d, 0x13, &(0x7f00000008c0)=@raw=[@ldst={0x0, 0x1, 0x969df3f6616ad1ca, 0x6, 0x8, 0x20, 0x1}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ldst={0x0, 0x2, 0x1, 0x5, 0x1, 0xfffffffffffffffe, 0x1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000980)='syzkaller\x00', 0x101, 0x37, &(0x7f00000009c0)=""/55, 0x41100, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0x9, 0x1, 0xca}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000a80)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, r3, r0], &(0x7f0000000ac0)=[{0x5, 0x2, 0x9, 0x5}, {0x2, 0x2, 0x1, 0xf}, {0x3, 0x4, 0xe, 0x8}, {0x2, 0x1, 0x4, 0x6}, {0x2, 0x1, 0xd, 0xb}], 0x10, 0x3}, 0x94) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000c00)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c40)={r6, r7, 0x1e, 0x0, @val=@perf_event}, 0x18) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000cc0)={0x6, 0x18, '\x00', 0x0, &(0x7f0000000c80)=[0x0, 0x0, 0x0]}) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) ioctl$UI_DEV_DESTROY(r8, 0x5502) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000d40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r9, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x44, r10, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r3) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x28, r11, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8000, 0x1a}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4024040}, 0x80) 3.031955165s ago: executing program 3 (id=2594): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @broadcast}, {0x0, 0x17c1, 0x8}}}}}, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r0, 0x0, 0xfaf}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, &(0x7f0000000140)={0x0, 0x24, 0x12, {0x12, 0x11, "b6067da832108b38f70205ce7ac7c2ce"}}, &(0x7f0000000240)={0x0, 0x3, 0x11, @string={0x11, 0x3, "0b786fa1f2766aa488eced49cf8b6f"}}, &(0x7f00000002c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x16, "5027991f"}, @local=@item_4={0x3, 0x2, 0x7, "4d4745bd"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x1, 0x1, {0x22, 0x82d}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x20, 0x30, 0xc4, "7daa182c7724683250da771660b8ce41c1ca28b90e82c9cc385c868be81f0c782600bed9a5d05c2565a65846c81003e060696d97d13cd8391853eb889b9bc4a4020c000852e33f2a374d5905bde70e08130b397e4ad9971e91be69866882f986c8434b4f6731fcc3113c3dbb20e0ae197b429b760be82fbe65557ac9099bc6ee54f0e015b79b2e8c857611f17852b10cd0327579b74c847654ea64963a2c0a1e3d097f67fcae6bee2960d38d97a18d160051c7afe799e5877452b80befc1b851fb30e8a2"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xb}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000500)={0x20, 0x1, 0x5, "409483e916"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x3}}) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 2.742902405s ago: executing program 0 (id=2604): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) (async) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001600010a00000000fbdbdf25070000001800ca80140006"], 0x2c}}, 0x40) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x36, 0x0, r3, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/26, 0x1a}, {&(0x7f0000000200)=""/5, 0x5}, {&(0x7f00000006c0)=""/236, 0xec}, {&(0x7f0000000240)=""/4, 0x4}, {&(0x7f0000000440)=""/172, 0xac}], 0x5, &(0x7f0000000580)=""/231, 0xe7}, 0x0, 0x120, 0x1, {0x0, r4}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) (rerun: 32) 1.683143092s ago: executing program 0 (id=2615): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14) (async, rerun: 64) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (rerun: 64) 1.58274981s ago: executing program 0 (id=2617): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080)=0x890, 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{0x0}], 0x1, 0x0, 0x0, 0x407006}, 0x104) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x400000080ffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="fbd89b3e89", 0x5}], 0x1}, 0x34000041) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="653e0f4867050f01c9f0fe41b0c7442400cbe60000c744240254530ec9c7442406000000000f011424b8010000000f01d9c423615c699848c744240000000000c744240223000000c7442406000000000f011424c4e19211d566ba4300ec430f2050", 0x62}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.581953368s ago: executing program 5 (id=2618): syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180d5000003aaaaaaaaaa2208004500001c000000000011907800000000000000004e214e2000089078"], 0x0) 1.520719747s ago: executing program 5 (id=2619): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r3, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "24a7031ead5525b89ec6091eacc51805"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "ec2d5179b23d2e08afce2700882b7463"}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) 1.323164498s ago: executing program 5 (id=2620): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)='debugfs\x00', 0x200010, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x5) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8925, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2193, 0xd000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xfa41}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x14, 0x18, 0x1, 0x8000000, 0x25dfdbfe, {0xa}}, 0x14}}, 0x0) 1.223316912s ago: executing program 5 (id=2621): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="240000001e00050300000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32], 0x24}}, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0xeec, @local, 0x1}, 0x1c) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) (async, rerun: 32) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2b) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10002, 0x2, 0x2, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000009afb56203c43750000004f0000000000000036400f3067640f21"], 0x4f}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) (async) write(r2, &(0x7f0000000000)=';\x00\x00\x00', 0x4) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x180, 0x0) (rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d46549b, 0x0, [0x46, 0x0, 0x2000, 0x0, 0x0, 0x1000]}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) (async, rerun: 32) times(0xfffffffffffffffe) (async, rerun: 32) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x1000) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x26) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async) r7 = mq_open(&(0x7f0000000000)='$@\x00', 0x40, 0xb4, &(0x7f0000000100)={0x6, 0x1, 0x7ff, 0x13}) r8 = mq_open(&(0x7f0000000180)='$@\x00', 0x1, 0x185, 0x0) (async, rerun: 32) mq_notify(r7, &(0x7f0000000380)={0x0, 0x34}) (rerun: 32) mq_timedsend(r8, 0x0, 0x0, 0x3ff, 0x0) 1.073187336s ago: executing program 5 (id=2622): syz_emit_ethernet(0xae, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400000126000400"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10) close(r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x6788, 0x0, 0x0, 0x7fff0026}, {0x6, 0x2, 0x9, 0x1de}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@RTM_GETMDB={0x18, 0x56, 0x400, 0x70bd2d, 0x25dfdbff, {0x7, r6}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) 852.7658ms ago: executing program 5 (id=2623): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2, 0x6}}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000180)={{0x2, @broadcast, 0x4e21, 0x4, 'lblc\x00', 0x3, 0x0, 0x4f}, {@rand_addr=0x64010101, 0x4e22, 0x2000, 0x5, 0x9, 0x7ff}}, 0x44) sendmsg$sock(r0, &(0x7f0000001780)={&(0x7f0000000200)=@in6={0xa, 0x4e24, 0xffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000280)="c095bca8aec019d4a7e18d1138e53e9f3b410d0477b3e1478466fdb19fde52e4cc71ce2263af6bb0706ef47be08b4d445d20482b18a6fc092a21a27baecde4aeb7e709936165e2ca7b284d4671dd27e71184eea2488e04f4fe17ade10547759cfa45b0339300094bc8e387834e2d00075785a9dddd9f5f10261ffe2a9d610fd0e798bdabda30d733f2643797d9036c6873a1b77b5685a7890e8fe3340462913389280270403fddf1e82cc696d60b68714bfc2b98bbbc897e3f2ab04b7e4ef4a4dcd177f90d46102308fddfcc179743f61ac86566991b5d883ece7a14", 0xdc}, {&(0x7f0000000380)="3a0f296d104ad4937f97c8bfcb8dd18dba43af4421f45585d4e74b1e1bf7e054292a4a7f40b7ee123d08813bc866c7c05ceae9290fdfdeba6a43099864d427e59a9660b67cf53ab9077df14123f91998e2a830fc9caa94d4458c27fa2fc8abe739b2654f7adeef8e7748e96ea8496e3c1905e0d26fa9b12fb3aba0c48f4bb45cd4a6bc16a3b6155c0aa25566c2cc4361bab3c63653b5cfa5d1356c3bdc396842ac712aee03dd4ddb6765c1f936029481918d4afb6870582409f441f4", 0xbc}, {&(0x7f0000000440)="f8cd8dc4f1cd4b4b1603915891c4a1bf80b485838e9452", 0x17}, {&(0x7f0000000480)="bb52254e65d16191322e786bb4adc57bfc4f37fa0052b50dcd48fb9666b134205579f02206c42f2387a6d66bf0e213445d3e987d67d951cf8cc6a1d56a676ae7eae6e345aceb5a44980632823badfe50c5ed68b96216c433625cd24fe7db23ad184e0dcdbc4af93de2ad28a4dee25ff7939e698f25b82eb9e79e0262f273db566ea7c8a89edc7c8b4b89a420ef14d57d914075a3f0d76267208e52064082e0092d", 0xa1}, {&(0x7f0000000540)="cdab4bfcafc288802fc385d69438b1fc7489539716b4c18e56975ce070a00606a11f282e2b81e89a032180153f2ae71b6786ada0ccb95606a9da560589083ca804e743397896de5cce53239f31428766e48bff09517b67395b5040141a3e3a960b175c7bfa35b721945b653484", 0x6d}, {&(0x7f00000005c0)="7b65d8b816dc0b550b13bdeb9afb79d45c0f229da68af4d6c73de426858d11ca26732da3c43f222df0976b21d441739ce0f90cdaf88f37e21548595313b17cb951155da640c49fee3ec52b3e7b7639e60856baa005d956e096f7fe2caaf81a2564004113054813c1bf3b6b9dc60eb363bbe2f23d", 0x74}, {&(0x7f0000000640)="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", 0x1000}], 0x7, &(0x7f00000016c0)=[@txtime={{0x18, 0x1, 0x3d, 0xfb2535b}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0xfffffff7}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xa8}, 0x40080) recvmsg(r0, &(0x7f0000001d80)={&(0x7f00000017c0)=@x25, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001840)=""/108, 0x6c}, {&(0x7f00000018c0)=""/137, 0x89}, {&(0x7f0000001980)=""/137, 0x89}, {&(0x7f0000001a40)=""/193, 0xc1}, {&(0x7f0000001b40)=""/120, 0x78}, {&(0x7f0000001bc0)=""/59, 0x3b}], 0x6, &(0x7f0000001c80)=""/225, 0xe1}, 0x62) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) recvmsg(r0, &(0x7f0000001f00)={&(0x7f0000001dc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001e40)}], 0x1, &(0x7f0000001ec0)=""/5, 0x5}, 0x2000) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000001f80)={0x1, 0x10, 0xfa00, {&(0x7f0000001f40), r2}}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001fc0)={'macsec0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000002080)={'ip6_vti0\x00', &(0x7f0000002000)={'syztnl2\x00', r3, 0x4, 0xc3, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x80, 0x1, 0x3, 0x6}}) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000023c0)={0x8, 0x12, &(0x7f0000002100)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffff}, @alu={0x4, 0x1, 0x1, 0x0, 0x9, 0x4, 0x1}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x3}, @generic={0x20, 0x6, 0x4, 0x3, 0x101}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f00000021c0)='syzkaller\x00', 0x3, 0x3a, &(0x7f0000002200)=""/58, 0x41000, 0x1, '\x00', r4, @cgroup_skb, r5, 0x8, &(0x7f0000002240)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000002280)={0x0, 0xc, 0xffff, 0xbe0}, 0x10, 0x0, r5, 0x9, &(0x7f00000022c0)=[r1, r0, r0, r1, r0, r5, r1], &(0x7f0000002300)=[{0x3, 0x1, 0xf, 0x5}, {0x3, 0x2, 0xa, 0x8}, {0x2, 0x5, 0xb, 0x8}, {0x5, 0x4, 0xa, 0xc}, {0x1, 0x3, 0x4, 0x38f378c15462b0a}, {0x1, 0x4, 0x8, 0x7}, {0x5, 0x1, 0x0, 0x3}, {0x5, 0x5, 0xb, 0x4}, {0x0, 0x4, 0xb, 0x8}], 0x10, 0xe}, 0x94) read(r6, &(0x7f0000002480)=""/140, 0x8c) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000002600)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x6008400}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x14, 0xb, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4040) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002680), r5) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000002740)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x14, r7, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002780)='/dev/bsg/2:0:0:0\x00', 0x400, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r8, 0x5381) ioctl$BSG_GET_COMMAND_Q(r0, 0x2270, &(0x7f00000027c0)) r9 = syz_usb_connect(0x3, 0xc2f, &(0x7f0000002800)={{0x12, 0x1, 0x0, 0x82, 0xed, 0xab, 0x40, 0x413c, 0x81a9, 0xc585, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1d, 0x4, 0x2, 0x5, 0x10, 0x6, [{{0x9, 0x4, 0xe5, 0x5, 0x3, 0xe9, 0xde, 0xd6, 0x10, [@uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x2, 0xf4, 0x7f, "d207cc", "ff"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x81, 0x3, 0x7f, 0x2, "2026c088"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x8, 0x1002}]}], [{{0x9, 0x5, 0xc, 0x1f, 0x3ff, 0x50, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf3, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x5, 0x1, 0x5}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x2, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x8}]}}, {{0x9, 0x5, 0x8, 0x1, 0x8, 0x9, 0x4, 0x8, [@generic={0x6f, 0x10, "c1a5833ef1a076a042a54e8535ac154c48e1f01001ad93e90345fa07f522236567937b3a477f30c790d8a72f364d602a03d8b631e2d62372ac4e805834aca0f2291fa1adb1a9ae9ae1ca1bfa655ca8766bf0f32f2c3d534900e4e0c75f37a3a08539a55fe385ddd8b9eee47e54"}]}}]}}, {{0x9, 0x4, 0x4b, 0x2, 0x4, 0xd0, 0xe1, 0xa, 0x5b, [@generic={0xed, 0xe, "6a6c5fa168bab1418584806c1538e8ce9b8697f814569bfc010c5bd1d5c51a539a3becfe839a577f4406cb77d92509d888e981def399b596679388f5b5f3853b31cab973ae767f1e8277b75277a73ae77442103cf8cca1332dbd7a666405853d8bbda3459d0e8d1f947fdc20c74185cde3472924f6a5c5dac3e491aa3d70455300b7d138ef5ade69388e8042bee8606e7e980cf10f2cc22f941533e7afd91aedaeb18de69a2f557c6b21f3f2cbe3c2f5e5d1f110f576a72105ef096e25a1492830a11a45b41b31022aab7a07e2498bca4172957edfd0d73526df0a738c0c7c425ae407b237aedfe885f72b"}], [{{0x9, 0x5, 0x0, 0x8, 0x20, 0x5, 0x6, 0x6, [@generic={0x41, 0x23, "50df7896e6b1748623bff73884c57c39c921aa01dbab3a36b914a1f2acc4dc845de292858dc2d9072ed4a49baa629e01f20a94d6151ea94cfea431ef3f1520"}, @generic={0xf4, 0x21, "dd33265495d28d1f2d76c34b52e733f82d21604300726ec27708772d5ba1a4a78502ca67e0af94328b5474741362f7f71f306b4e5d84d4bf033e3400fe1468f962d81ac69405a6daa27504deb2be735c69cf67a22beedda6e67a7e6b6c179f4aa22e7745eefdeebd4bda92f1570d3cb7104c0a43c6052af96105cb1bb33a5ea16c1f8b203b2b40e2b43acc6406844b7228ec639d0e29d543e74dad3ea3010beb5ebef42a83dbfa1a4209086c6d8b8773a8612c9bc76931b78a564113c95e9ae3e34b5a522d4744ee8b466cdaddf28e27e07717ee2476d70e7d1eaae90a387e4cbf6f5e748578899c96724160e7e5e580ec92"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x6, 0x3, 0x1, [@generic={0x56, 0xd, "5f4853f38eca02e67a979bae5bc0faa3ceaca0a76f1f5f28d33f689816117eee2a0b7af67fecd524f18a8f4e8d33b1b5b31e808c204cd97f54ad0947b6179a42a512e07ceec2cdd5ecdfb7ab80ec83890c8b0097"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0xff, 0xd3, 0x7, [@generic={0xb5, 0xb, "8fbac44dd3c3678f949a997e5ad7c67d8bbdda632a817c02ba0f23ffde2aa1b61f68acec2b3780b08e727a90e1cd0275c3f80b4cfd3e727315f30914ebc595e51c6eb9d96c6a17431004d2999a6d8493307e5adfc1b5cc89d18f2fa9c5afabba3ed82abbfed2a97f862f8b6ef65677fe3dbd81f751d2f28078e90e969a341b18e7870327c5a14f2a24676c07c3bdeba592e8ae92ee3aebce3af48d2948dea4d9275c7832b8a28c285c6f79af9ef303c37ea107"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x10, 0x0, 0x8, 0x69, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8}]}}]}}, {{0x9, 0x4, 0x94, 0xb, 0x7, 0x36, 0x8d, 0x64, 0x5, [@uac_as={[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x926b, 0x9, 0x4, "64c0dda9ede81a59"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x2, 0x4, 'Q', "ae74"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x0, 0x1002}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x1, 0x1, 0x5, "6dc4", '\v\r'}]}], [{{0x9, 0x5, 0xa, 0x4, 0x40, 0x40, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x3}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x7, 0xe, 0x0, [@generic={0x16, 0xe, "dc1e2fdc105dc0805146806041b6fa3a2fe87fd4"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x80, 0x6, 0x5, [@generic={0x3d, 0x7, "bf25aa22f8ba72ef1970de4b0e320437539fa638ecac01057db3fac9f6b8d023ae59a817e9504467b579e9b2d5c52f9f538462fa2708394615f6f1"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x10, 0x243}]}}, {{0x9, 0x5, 0x9, 0x19, 0x8, 0x0, 0x1, 0x80, [@generic={0x86, 0x1, "76dba3b71905e2f885758b31f04c29ba026edb8d7649b8e07d22f485366206fd456191017c6bf7e04e7a88a399b1e6bbb9086038e86582f1ea5812f52940a5e9ff11cac17003db13e32722438a369fcd48651339f4134e7ba2c8742475a91c8150d0c405ea4061dca9558fcdfe043dbb7f6a87b1c0e0c7316221c0ea32f4c28fed36efc5"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x0, 0xc, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x10}]}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xe, 0xd4, 0x3, [@generic={0xe7, 0x5, "4c3de6feb4584796b2918d08d9750baf299b2509be3aebdccf1c7597b3117a6f129d13a32ae10c3ba5e6b46f435e5a2e9c47ed000786191cc8a33de7a8ebd126c5952be14fb97628d4edaed101c4cac0d774f6c9f4ea30ff1f65869646cc8108adf871ceadf5b315d6a53725c21a219a704871f737fe710d8f1044d5d2d7b47a7858807e3120c4e79f97cf2c65c242c3d47a2275fdf8e65cdf1d63d1bd644647ddfbd1f6e3dfd89fcc6e3b6bf5e6d8bb7228a3cbdacc755d797534f78a011322258492fb3b106413c1188189cc751ffd798b6c1c505b579fe653d0b949594bfa0410a846eb"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x400, 0x7, 0x14, 0x1d, [@generic={0xda, 0xd, "fde7059dae4b2b7a3fdd9ea5aa02adfd1f31c77331f2c50d243040ea13aaba2d4c8e4ea0bdae84f82bc3bcff969112d2c3ab2cb894e52c5b9ec079bd1da15be6c34b3c7d1e9a826c5dae5a7dd531d20c38ee128f75b6ecee0c34cacd55a06230e48a1f40741cd1541f4b7ad1987514ff8afc1af7f7821b413522fb92b7e854e6f7c8ea014109931d058f6cc08724667b9fe0f5d934d668c1fc82a420ff4f3e34ba5b65d0c2f7df6365ab9ad0d7cd3de914ceb6df59859cb9bf2e29ce5c8739be860e898c06dc363cf733e9f770ce3d90565cb23800f47520"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x101}]}}]}}, {{0x9, 0x4, 0x4c, 0xcd, 0xa, 0x7a, 0x3d, 0x6a, 0xfa, [@hid_hid={0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0xb29}}], [{{0x9, 0x5, 0x80, 0x1, 0x200, 0x3c, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2f, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xfff}]}}, {{0x9, 0x5, 0x0, 0x4, 0x8, 0x3, 0x2, 0x4f, [@generic={0xaf, 0x31, "1507111637c09bbf02ea20f422584d133636b03e12d52eb7651eca592d97fb1a30708a11f4f99a5cfe07c904adcdf7c00ce2af0f7ba6682e04267fcd35411f3e34211340c36e69ca728c96e3a447b508b7efa6d2702b9eac63a2ba76acccebf1b38e4e430e171e5747de3304cef2c63582a648ff527aec4e0c90ff4d7c03bf93d43b8387cac67b5e64bae0485ff45e214248609ec515408d0d4cd87267bca2b16d9e638efaa0e5cb681e655a2c"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x8, 0x0, 0x42, [@generic={0x61, 0x6, "be408aa112b8dbfd72373250b0408642a0b9401e5b2b6768e477650d546d760c91e50ce1249f51b4e308c1e39a200094a86654096b53fb04557d3c3a80b126c033c9ab1cecf75ec264de11c4b333d781722d5dad589b141479482e5e6a0852"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x6, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x101}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x6, 0xcc, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x100}]}}, {{0x9, 0x5, 0xe, 0x1b, 0x200, 0x0, 0x9, 0x0, [@generic={0x8b, 0xe, "6fbd58dbfd4563b9f1ea61989469e94da147d23fac0611689625911b2d67b54e77a1fe48be9c594b3ace3037769a7e1d00102ed161d3b74916a4a4b0377b7e66889c67654647821720eabc44c9d38a10ad1f3ea327d85b54d418860161a971e86c4d0ecef213455d0dd4e3e1e7ce83ef9fb545d2c5f9727718d76a2a87e00b774c0136826c2d5cd5de"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x1bf, 0xf4, 0xf, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x200}]}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0x8, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0xfffa}, @generic={0xf8, 0x9, "27a92333def3a0cf71f1280e9cac4d96fa3105364e9dd0c61cd4445af3b2678bbd5d08e823c2c6fb335fac87407df90eff49da4ae95f3de68bd59d9193616862fd668df3837498dcc199add4506eac5464b8383c4cc65f3490430c2c5264ab05539cb8281f0e8fa2ee116d01ca2bd28266403264bcab4a328440f7352a5aa4f390b8ca644efafd9a6f351c775344dc1a99d6dd463853c47b9a7c013e815a342c22079aabb0b9b4287d512485d4de8e711f36e8c7ae1684eb0c666352a606c71afa5cf6196949de111492f5ee64e5f738bcd8ff00a02eb9b4b2ce36b841447e8545328e9b2768222f929de6b58b2b0d311363bfcd6a6b"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x400, 0x0, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0xb5}, @generic={0xb3, 0x22, "4df1ca6b41eb55640c12a16464ec6af1b8878486e1b3ffe9ab73de53498b87d3a7dd3d9a73d1f823f8a921eb29e7536297f692ecc8f78f32e870b2e7447c34a172de8d251cf41cf840685f9a8cf62a8a78d34811ade9a250fd772e8f355bdfa47f9b5c03b5f9c8a83fccc5f86be607bd43ea6a678939286ebabe2e07d7b31a50c2d4037bccac45fa72c53291c52c757f87a6f1023b645088ef3e93a36044311ad08a2cee7a92ed00e88d38f2f45ff9b464"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x2, 0x1, 0xc, [@generic={0xc7, 0xe, "b3cc5c8cc23500f0cce971905b5867173995b17a612a2358871ddba0f1d3ba002fa533bc2145e72bf65f532d18e486e54dfb8bcc6d1d6e886785e11df46de63a364b5b6f174b1ba9220ad16d834ce709960be75038c7ecbb1c28374b5dc27e87669b7a1c56d69cc1ba9bd87c7033a2e083c2299569360d83ad615078fb6691f5b0da5124e0642a2695bf55d611b850421fad337d9be6d66b75c1307d3512fdc565b35f569bc2405ed42d80b491935916bcedf260aa07848d3b67f7267c1439ae802048fe22"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x21}]}}]}}]}}]}}, &(0x7f00000035c0)={0xa, &(0x7f0000003440)={0xa, 0x6, 0x310, 0x4, 0x6, 0xf, 0x20}, 0x2e, &(0x7f0000003480)={0x5, 0xf, 0x2e, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0xa, 0x9, 0x400, 0x32}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x9, 0x4}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x8, 0x5}]}, 0x3, [{0x4, &(0x7f00000034c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x56, &(0x7f0000003500)=@string={0x56, 0x3, "8f1300b10e5e963e31f51f96def17a3920f7fd94d85b72ad71965ed658ffbcad6a45288f17ab2480210e4b1fdad15deec90970086a05093a55a39d188966822c60b85d3eb5b5c96380ad27f2a2fa1b3b1f39b689"}}, {0x4, &(0x7f0000003580)=@lang_id={0x4, 0x3, 0x100c}}]}) syz_usb_control_io$hid(r9, &(0x7f0000003840)={0x24, &(0x7f0000003600)={0x0, 0x30, 0x100, {0x100, 0xe, "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"}}, &(0x7f0000003740)={0x0, 0x3, 0x50, @string={0x50, 0x3, "209d49b36c59acdc81a6c6830e9cf0796ceda8d11ebd8fae55fd57faacca2725a9d775166fc9ac367fedbd499d6dc6ea914f35431c44dfd2e30dd89811bc024accf57a7dcda1a7b4f5730e0fb039"}}, &(0x7f00000037c0)={0x0, 0x22, 0xd, {[@main=@item_012={0x1, 0x0, 0xb, 'M'}, @local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0xa, "e19cc24d"}, @local=@item_4={0x3, 0x2, 0x3, "31c904c4"}]}}, &(0x7f0000003800)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5d, 0x10, 0x1, {0x22, 0x5a9}}}}, &(0x7f0000003a40)={0x2c, &(0x7f0000003880)={0x40, 0x15, 0x64, "0535078bcd22f51da3446c52ce56b2d8604700148b4486eb2bf010ccd42e2fe86df172247c2eff2c4ae572e81ab13ff81afbc5280b1b51496c39c20eb699164f3c045aa1d4f853caa369dff26f51f87ab621bcc3d01d92e6ad3700a2c3be9608c3f07eaf"}, &(0x7f0000003900)={0x0, 0xa, 0x1}, &(0x7f0000003940)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000003980)={0x20, 0x1, 0x74, "cd2cafb5f4d7ec7bba28a18197e1fd66fae97557addb5913324b6d86be7cd82ae082e78d2ae0d249595d7190b764d98cffa01a53f9f01bdea97d96975cc240af20dfeece7a14ed355c1ace7a2572ed3d6f9738bec4053f3377ac9b672bb130b7293bc987294a5f0a531d7ab69011f5498b5a4e50"}, &(0x7f0000003a00)={0x20, 0x3, 0x1, 0x5}}) bind(r5, &(0x7f0000003a80)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, 0x2}, 0x80) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000003bc0)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003b80)={&(0x7f0000003b40)={0x20, 0x1404, 0x10, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4810}, 0x40001) bind$l2tp6(r1, &(0x7f0000003c00)={0xa, 0x0, 0x38, @mcast1, 0xffffffff, 0x4}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000003c40), r5) fgetxattr(r5, &(0x7f0000003c80)=@known='trusted.overlay.nlink\x00', &(0x7f0000003cc0)=""/121, 0x79) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000003d80)) 711.948923ms ago: executing program 0 (id=2624): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x0, 0x80}, &(0x7f0000000180), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x2000000000000000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) 711.485036ms ago: executing program 0 (id=2625): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0xd75d, 0x272200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) ioctl$I2C_SLAVE(r1, 0x703, 0xb1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000001c0)=0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x80ff, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) madvise(&(0x7f0000c19000/0x3000)=nil, 0x3000, 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x8, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xfffffcf6}, {0xc}}}]}]}, 0x90}}, 0x0) mq_open(&(0x7f0000000a80)='\'\xf5@$*\x00', 0x40, 0xb, &(0x7f0000000ac0)={0x8, 0xffff, 0x1, 0x6}) 643.200109ms ago: executing program 0 (id=2626): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x305, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0x18) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000600)=[@exit_looper], 0x0, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 560.835ms ago: executing program 4 (id=2628): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r3 = syz_io_uring_setup(0x7585, &(0x7f0000000580)={0x0, 0xb609, 0x40, 0x0, 0x1b3}, &(0x7f0000000200), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000000b80)={0x1, 0x1, 0x0, &(0x7f0000000b00)=[{0x0}], 0x0}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/155, 0x79c5}, {0x0, 0x30}], 0x2) 473.105967ms ago: executing program 4 (id=2629): prlimit64(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a000000205800034824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00030d0000000000000069e3289b6c17a118d9", 0x58}], 0x1) 472.900014ms ago: executing program 4 (id=2630): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) madvise(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000040)="0f20c035000001000f22c0660f383deff3a766b80c008ee066b882000f08c40f788fa4ba00000f00d866ba200066b8340c66ef64360f78190f0119", 0x3b}], 0x1, 0x19, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 332.906686ms ago: executing program 4 (id=2631): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f00000022c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000140)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x4) prctl$PR_SVE_SET_VL(0x32, 0x15dea) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000003c0)=[{0x30, 0x5, 0x53, 0xfffff030}, {0x6, 0xc1, 0x6, 0x406}]}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaa2aaabbbbbbbbbbbb86dd6000000000083afffe800000000000000000000000000008fe8000000000000000000000000000aa8500907800000000"], 0x0) 283.091456ms ago: executing program 4 (id=2632): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @remote, @void, {@canfd={0xd, {{0x1, 0x1, 0x1}, 0x15, 0x1, 0x0, 0x0, "729be6caa3b99e8a2cc3413ac448771367ad987f22f634924ea388096fe57c0a0e89306a8e124eda77a0262a9f5fc7e9c225ea3dc5f6f5bb62587d561b46cc6d"}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000004844fd43000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @remote, @void, {@canfd={0xd, {{0x1, 0x1, 0x1}, 0x15, 0x1, 0x0, 0x0, "729be6caa3b99e8a2cc3413ac448771367ad987f22f634924ea388096fe57c0a0e89306a8e124eda77a0262a9f5fc7e9c225ea3dc5f6f5bb62587d561b46cc6d"}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000004844fd43000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 282.784668ms ago: executing program 4 (id=2633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x12, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x138, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_USERDATA={0xc1, 0x6, "eb9ce35f4850e2a99ca92f38003e63cc3715b7b98e37e14d2e0ec06b7e3d4793070c206941f4b8b39004ee0967625780c64f7a4fa0ec23f0600bea5aa4c6ccfd4d28648d7f9b03f37a0ad0e00e9f7da34c29e76cd6093993d020d59a6e7369337c53cdd8c980f8738c4342eb0c104c69dbeb5cffdc18c400dd1b767fef1ceb0ad4d028bca0078d40762a06374e0293e447b4799c40054887f90f89ed5ba393f33cbab02aa6b780738f439166a4f7a5a1d461ff1ab239c8c6246d442dbd"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x22, 0x6, "af07289b7a45240318400eab0e5fba0c4a765d0f0f4e1e6b51e83eaeea8d"}]}], {0x14}}, 0x160}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3438a}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xd13d}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) mount(0x0, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)='debugfs\x00', 0x200010, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000002fc0)={0x8, @multicast}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x6, 0x3}, 0x4) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x4}, 0x1c) poll(&(0x7f00000016c0)=[{r1, 0x440}], 0x1, 0xffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000070a01040000000000000000020000000c00034000000000bbeedaff0900020073797a32000000000900010073797a30"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.099238ms ago: executing program 3 (id=2634): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=2635): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) (async, rerun: 64) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20) (async, rerun: 64) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000000c0)={0x8a001, 0x0, 0x20}, 0x18) (rerun: 64) kernel console output (not intermixed with test programs): ted]: syz.2.1972 (pid 12480) Use of int in max_burst socket option deprecated. [ 159.078857][T12480] Use struct sctp_assoc_value instead [ 159.116443][T12484] tmpfs: Cannot change global quota limit on remount [ 159.126727][T12487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10705 sclass=netlink_route_socket pid=12487 comm=syz.2.1974 [ 159.191261][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1975'. [ 159.196414][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1975'. [ 159.200570][T12490] SELinux: Context system_u:object_r:root_t:s0 is not valid (left unmapped). [ 159.467926][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1978'. [ 159.484817][T12506] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 159.618403][T12522] syzkaller1: entered promiscuous mode [ 159.620255][T12522] syzkaller1: entered allmulticast mode [ 159.776745][T12534] binder: 12533:12534 ioctl c018620b 0 returned -14 [ 159.789506][T12534] binder: 12533:12534 ioctl c018620b 0 returned -14 [ 159.907113][T12539] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 159.910565][T12539] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 160.252348][ T5331] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 160.260358][ T5331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 160.264142][ T5331] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 160.268987][ T5331] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 160.272578][ T5331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 160.284719][ T5982] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 160.289754][ T5982] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 160.294061][ T5982] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 160.298478][ T5982] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 160.307647][ T5982] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 160.336170][T12558] lo speed is unknown, defaulting to 1000 [ 160.435849][T12558] chnl_net:caif_netlink_parms(): no params data found [ 160.464503][ T34] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 160.527826][T12558] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.530553][T12558] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.533034][T12558] bridge_slave_0: entered allmulticast mode [ 160.537668][T12558] bridge_slave_0: entered promiscuous mode [ 160.542798][T12558] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.545536][T12558] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.547768][T12558] bridge_slave_1: entered allmulticast mode [ 160.550332][T12558] bridge_slave_1: entered promiscuous mode [ 160.598831][T12558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.603375][T12558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.616760][ T34] usb 5-1: not running at top speed; connect to a high speed hub [ 160.619941][ T34] usb 5-1: config 1 has an invalid interface number: 3 but max is 2 [ 160.622510][ T34] usb 5-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 160.625625][ T34] usb 5-1: too many endpoints for config 1 interface 3 altsetting 7: 147, using maximum allowed: 30 [ 160.628938][ T34] usb 5-1: config 1 interface 3 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 147 [ 160.632975][ T34] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 189, changing to 4 [ 160.636587][ T34] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 160.639968][ T34] usb 5-1: config 1 interface 3 has no altsetting 0 [ 160.645813][ T34] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.647998][T12558] team0: Port device team_slave_0 added [ 160.648630][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.651860][T12558] team0: Port device team_slave_1 added [ 160.652858][ T34] usb 5-1: Product: syz [ 160.656135][ T34] usb 5-1: Manufacturer: syz [ 160.657602][ T34] usb 5-1: SerialNumber: syz [ 160.693342][T12575] netlink: 'syz.1.1996': attribute type 1 has an invalid length. [ 160.712926][T12575] bond4: entered promiscuous mode [ 160.716213][T12575] 8021q: adding VLAN 0 to HW filter on device bond4 [ 160.719286][T12558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.721553][T12558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.730027][T12558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.735203][T12558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.737370][T12558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.745690][T12558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.777822][ T29] Process accounting resumed [ 160.798641][T12578] Process accounting resumed [ 160.800768][T12558] hsr_slave_0: entered promiscuous mode [ 160.803352][T12558] hsr_slave_1: entered promiscuous mode [ 160.807260][T12558] debugfs: 'hsr0' already exists in 'hsr' [ 160.809118][T12558] Cannot create hsr debugfs directory [ 160.866204][T12557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.870003][T12557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.876269][T12557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.879510][T12557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.883201][T12557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.886673][T12557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.895498][ T34] usb 5-1: 2:1 : sample bitwidth 128 in over sample bytes 1 [ 160.897728][ T34] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 160.918540][ T34] usb 5-1: USB disconnect, device number 19 [ 160.944815][T12560] udevd[12560]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.956868][T12558] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.002794][T12593] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 161.010720][T12594] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 161.017606][T12558] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.072012][T12558] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.137845][T12558] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.247890][T12558] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 161.254037][T12558] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 161.259303][T12558] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 161.263795][T12558] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 161.293487][T12558] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.296487][T12558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.299618][T12558] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.302559][T12558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.331850][T12558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.342354][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.348394][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.371541][T12558] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.377290][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.380233][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.389194][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.392244][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.542571][T12558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.571382][T12558] veth0_vlan: entered promiscuous mode [ 161.576129][T12558] veth1_vlan: entered promiscuous mode [ 161.589817][T12558] veth0_macvtap: entered promiscuous mode [ 161.593621][T12558] veth1_macvtap: entered promiscuous mode [ 161.606654][T12558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.613548][T12558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.621467][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.624358][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.628126][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.631294][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.677212][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.680431][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.697314][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.700033][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.712554][ T40] kauditd_printk_skb: 192 callbacks suppressed [ 161.712570][ T40] audit: type=1400 audit(1757323289.847:73363): avc: denied { mounton } for pid=12558 comm="syz-executor" path="/syzkaller.roB0ip/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=50010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 161.748500][ T40] audit: type=1400 audit(1757323289.887:73364): avc: denied { write } for pid=12615 comm="syz.2.1992" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 161.786929][ T40] audit: type=1400 audit(1757323289.927:73365): avc: denied { write } for pid=12620 comm="syz.2.2006" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 161.821258][T12624] __nla_validate_parse: 4 callbacks suppressed [ 161.821270][T12624] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2007'. [ 161.835046][T12625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2005'. [ 161.885763][T12614] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=39975 sclass=netlink_xfrm_socket pid=12614 comm=syz.0.2005 [ 162.013052][ T40] audit: type=1400 audit(1757323290.147:73366): avc: denied { write } for pid=12631 comm="syz.3.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 162.064288][ T34] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 162.119264][T12642] netlink: zone id is out of range [ 162.121841][T12642] netlink: del zone limit has 4 unknown bytes [ 162.157502][T12646] binder: 12644:12646 ioctl 4018620d 0 returned -22 [ 162.160443][T12646] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 162.163706][T12646] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 162.221371][T12649] netlink: 'syz.3.2014': attribute type 10 has an invalid length. [ 162.224198][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 162.225424][ T34] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 162.228784][ T34] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 162.231395][ T34] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 162.232074][T12649] netlink: 'syz.3.2014': attribute type 10 has an invalid length. [ 162.234262][ T34] usb 7-1: config 250 has no interface number 0 [ 162.234283][ T34] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 162.234297][ T34] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 162.234309][ T34] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 162.234321][ T34] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 162.234335][ T34] usb 7-1: config 250 interface 228 has no altsetting 0 [ 162.235666][ T34] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 162.237814][T12649] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2014'. [ 162.237843][T12649] batadv0: entered allmulticast mode [ 162.239843][ T34] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 162.244873][T12649] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 162.247873][ T34] usb 7-1: Product: syz [ 162.276576][ T34] usb 7-1: SerialNumber: syz [ 162.278858][T12654] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 162.282516][ T34] hub 7-1:250.228: bad descriptor, ignoring hub [ 162.284851][ T34] hub 7-1:250.228: probe with driver hub failed with error -5 [ 162.335274][ T5331] Bluetooth: hci4: command tx timeout [ 162.461369][T12660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2020'. [ 162.464901][T12660] nbd: must specify at least one socket [ 162.483212][ T34] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 18 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 162.597804][T12669] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2023'. [ 162.650896][T12674] netlink: 'syz.1.2025': attribute type 2 has an invalid length. [ 162.707223][T12675] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5135 sclass=netlink_tcpdiag_socket pid=12675 comm=syz.1.2025 [ 163.059476][T12681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12681 comm=syz.3.2027 [ 163.059518][T12682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12682 comm=syz.3.2027 [ 163.068969][T12681] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2027'. [ 163.068984][T12682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2027'. [ 163.100056][T12624] usb 7-1: reset high-speed USB device number 18 using dummy_hcd [ 163.440008][T12696] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2031'. [ 163.443938][T12696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2031'. [ 163.487206][ C2] usblp0: nonzero read bulk status received: -71 [ 163.535537][ T40] audit: type=1400 audit(1757323291.667:73367): avc: denied { name_connect } for pid=12698 comm="syz.1.2032" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 163.598627][T12701] netlink: 'syz.3.2033': attribute type 10 has an invalid length. [ 163.601853][T12701] batman_adv: batadv0: Adding interface: team0 [ 163.604428][T12701] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.612657][T12701] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 163.617128][T12701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2033'. [ 163.706015][ T6004] usb 7-1: USB disconnect, device number 18 [ 163.714185][ T6004] usblp0: removed [ 164.248201][ T6004] hid-generic 0004:0004:0007.0008: item fetching failed at offset 5/9 [ 164.251133][ T6004] hid-generic 0004:0004:0007.0008: probe with driver hid-generic failed with error -22 [ 164.260949][T12743] NILFS (nullb0): couldn't find nilfs on the device [ 164.407804][ T5331] Bluetooth: hci4: command tx timeout [ 164.558265][T12699] syz.1.2032: vmalloc error: size 35651584, failed to allocated page array size 69632, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 164.566061][T12699] CPU: 3 UID: 0 PID: 12699 Comm: syz.1.2032 Not tainted syzkaller #0 PREEMPT(full) [ 164.566083][T12699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 164.566093][T12699] Call Trace: [ 164.566098][T12699] [ 164.566105][T12699] dump_stack_lvl+0x16c/0x1f0 [ 164.566144][T12699] warn_alloc+0x248/0x3a0 [ 164.566169][T12699] ? __pfx_warn_alloc+0x10/0x10 [ 164.566195][T12699] ? hash_netport4_resize+0x1d8/0x1c50 [ 164.566212][T12699] ? __vmalloc_node_noprof+0xad/0xf0 [ 164.566239][T12699] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 164.566265][T12699] ? hash_netport4_resize+0x1d8/0x1c50 [ 164.566288][T12699] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 164.566315][T12699] ? ___kmalloc_large_node+0xed/0x160 [ 164.566342][T12699] __kvmalloc_node_noprof+0x30a/0x620 [ 164.566358][T12699] ? hash_netport4_resize+0x1d8/0x1c50 [ 164.566372][T12699] ? __kmalloc_noprof+0x242/0x510 [ 164.566382][T12699] ? hash_netport4_resize+0x1d8/0x1c50 [ 164.566410][T12699] ? hash_netport4_resize+0x1d8/0x1c50 [ 164.566425][T12699] hash_netport4_resize+0x1d8/0x1c50 [ 164.566442][T12699] ? __pfx_hash_netport4_add+0x10/0x10 [ 164.566458][T12699] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 164.566482][T12699] ? __pfx___mutex_lock+0x10/0x10 [ 164.566513][T12699] ? __pfx_hash_netport4_resize+0x10/0x10 [ 164.566535][T12699] call_ad.constprop.0+0x36d/0x940 [ 164.566562][T12699] ? __pfx_hash_netport4_resize+0x10/0x10 [ 164.566581][T12699] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 164.566607][T12699] ? __pfx___nla_validate_parse+0x10/0x10 [ 164.566638][T12699] ? __nla_parse+0x40/0x60 [ 164.566665][T12699] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 164.566687][T12699] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 164.566706][T12699] ? rcu_sync_func+0x11/0x1a0 [ 164.566744][T12699] ? find_held_lock+0x2b/0x80 [ 164.566769][T12699] nfnetlink_rcv_msg+0x9fc/0x1200 [ 164.566794][T12699] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 164.566813][T12699] ? __lock_acquire+0x62e/0x1ce0 [ 164.566858][T12699] ? avc_has_perm_noaudit+0x149/0x3b0 [ 164.566880][T12699] netlink_rcv_skb+0x155/0x420 [ 164.566903][T12699] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 164.566920][T12699] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 164.566975][T12699] ? ns_capable+0xd7/0x110 [ 164.566999][T12699] nfnetlink_rcv+0x1b3/0x430 [ 164.567015][T12699] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 164.567030][T12699] ? netlink_deliver_tap+0x1ae/0xd30 [ 164.567054][T12699] netlink_unicast+0x5aa/0x870 [ 164.567075][T12699] ? __pfx_netlink_unicast+0x10/0x10 [ 164.567097][T12699] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 164.567126][T12699] netlink_sendmsg+0x8d1/0xdd0 [ 164.567146][T12699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.567165][T12699] ____sys_sendmsg+0xa98/0xc70 [ 164.567181][T12699] ? copy_msghdr_from_user+0x10a/0x160 [ 164.567194][T12699] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.567216][T12699] ___sys_sendmsg+0x134/0x1d0 [ 164.567230][T12699] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.567263][T12699] __sys_sendmsg+0x16d/0x220 [ 164.567276][T12699] ? __pfx___sys_sendmsg+0x10/0x10 [ 164.567288][T12699] ? __x64_sys_futex+0x1e0/0x4c0 [ 164.567313][T12699] do_syscall_64+0xcd/0x4c0 [ 164.567327][T12699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.567338][T12699] RIP: 0033:0x7f94b4b8ebe9 [ 164.567349][T12699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.567359][T12699] RSP: 002b:00007f94b5a2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.567369][T12699] RAX: ffffffffffffffda RBX: 00007f94b4dc5fa0 RCX: 00007f94b4b8ebe9 [ 164.567375][T12699] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 000000000000000a [ 164.567381][T12699] RBP: 00007f94b4c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 164.567387][T12699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.567396][T12699] R13: 00007f94b4dc6038 R14: 00007f94b4dc5fa0 R15: 00007ffe51f94138 [ 164.567410][T12699] [ 164.567414][T12699] Mem-Info: [ 164.697660][T12699] active_anon:8987 inactive_anon:147 isolated_anon:0 [ 164.697660][T12699] active_file:1821 inactive_file:19399 isolated_file:0 [ 164.697660][T12699] unevictable:1768 dirty:156 writeback:0 [ 164.697660][T12699] slab_reclaimable:7866 slab_unreclaimable:78496 [ 164.697660][T12699] mapped:25086 shmem:2395 pagetables:1273 [ 164.697660][T12699] sec_pagetables:311 bounce:0 [ 164.697660][T12699] kernel_misc_reclaimable:0 [ 164.697660][T12699] free:466147 free_pcp:24332 free_cma:0 [ 164.715067][T12699] Node 0 active_anon:35948kB inactive_anon:588kB active_file:7256kB inactive_file:77420kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:100316kB dirty:588kB writeback:0kB shmem:6044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13456kB pagetables:4904kB sec_pagetables:1244kB all_unreclaimable? no Balloon:0kB [ 164.726826][T12699] Node 1 active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:176kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:36kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:144kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 164.737082][T12699] Node 0 DMA free:15080kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:280kB local_pcp:104kB free_cma:0kB [ 164.747347][T12699] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 164.749194][T12699] Node 0 DMA32 free:265116kB boost:4096kB min:31612kB low:38488kB high:45364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35940kB inactive_anon:588kB active_file:7256kB inactive_file:77420kB unevictable:3536kB writepending:604kB present:2080628kB managed:1263448kB mlocked:0kB bounce:0kB free_pcp:64760kB local_pcp:14900kB free_cma:0kB [ 164.759699][T12699] lowmem_reserve[]: 0 0 0 0 0 [ 164.761057][T12699] Node 1 Normal free:1586776kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:176kB unevictable:3536kB writepending:36kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:29756kB local_pcp:4416kB free_cma:0kB [ 164.770635][T12699] lowmem_reserve[]: 0 0 0 0 0 [ 164.772162][T12699] Node 0 DMA: 0*4kB 3*8kB (U) 3*16kB (U) 3*32kB (U) 3*64kB (U) 1*128kB (U) 1*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 15080kB [ 164.776924][T12699] Node 0 DMA32: 1779*4kB (UME) 1402*8kB (UME) 565*16kB (UME) 372*32kB (UME) 389*64kB (UME) 203*128kB (UME) 142*256kB (UME) 81*512kB (UME) 57*1024kB (UME) 7*2048kB (M) 6*4096kB (UM) = 265260kB [ 164.782756][T12699] Node 1 Normal: 3*4kB (U) 24*8kB (UME) 38*16kB (UME) 158*32kB (UME) 40*64kB (UME) 9*128kB (UE) 3*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 1*2048kB (E) 383*4096kB (UM) = 1586796kB [ 164.788415][T12699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.792159][T12699] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 164.795897][T12699] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.799272][T12699] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 164.802918][T12699] 23612 total pagecache pages [ 164.804779][T12699] 0 pages in swap cache [ 164.806100][T12699] Free swap = 124996kB [ 164.807443][T12699] Total swap = 124996kB [ 164.808761][T12699] 1048443 pages RAM [ 164.809975][T12699] 0 pages HighMem/MovableOnly [ 164.811470][T12699] 283268 pages reserved [ 164.812953][T12699] 0 pages cma reserved [ 164.897330][T12743] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 164.909210][T12755] netlink: 'syz.1.2043': attribute type 11 has an invalid length. [ 164.914008][T12755] input: syz1 as /devices/virtual/input/input26 [ 164.958892][T12757] netlink: 'syz.2.2044': attribute type 1 has an invalid length. [ 165.010924][T12764] dlm: Unknown command passed to DLM device : 255 [ 165.010924][T12764] [ 165.469378][ T40] audit: type=1400 audit(1757323293.607:73368): avc: denied { ioctl } for pid=12797 comm="syz.2.2056" path="socket:[53531]" dev="sockfs" ino=53531 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 165.502268][T12799] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12799 comm=syz.1.2054 [ 166.445748][T12802] tmpfs: Bad value for 'mpol' [ 166.494610][ T5331] Bluetooth: hci4: command tx timeout [ 166.546147][T12836] macvlan0: entered promiscuous mode [ 166.548576][T12836] macvlan0: entered allmulticast mode [ 166.550794][T12836] veth1_vlan: entered allmulticast mode [ 166.728570][ T40] audit: type=1400 audit(1757323294.867:73369): avc: denied { append } for pid=12847 comm="syz.1.2069" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 166.808888][ T40] audit: type=1400 audit(1757323294.947:73370): avc: denied { set_context_mgr } for pid=12853 comm="syz.0.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 166.815561][T12854] binder: 12853:12854 ioctl c0306201 200000000080 returned -14 [ 167.084782][ T1470] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 167.101590][T12862] __nla_validate_parse: 5 callbacks suppressed [ 167.101601][T12862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2075'. [ 167.115932][T12862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2075'. [ 167.176621][T12864] input: syz1 as /devices/virtual/input/input28 [ 167.245550][ T1470] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.248957][ T1470] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.252055][ T1470] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 167.255149][ T1470] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.259059][ T1470] usb 5-1: config 0 descriptor?? [ 167.555396][T12882] netlink: 57 bytes leftover after parsing attributes in process `syz.1.2081'. [ 167.563888][T12884] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 167.568615][T12884] overlayfs: failed to set xattr on upper [ 167.570426][T12884] overlayfs: ...falling back to redirect_dir=nofollow. [ 167.572570][T12884] overlayfs: ...falling back to index=off. [ 167.575484][T12884] overlayfs: ...falling back to uuid=null. [ 167.579521][T12884] qrtr: Invalid version 46 [ 167.582374][T12884] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 167.615772][T12888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1296 sclass=netlink_route_socket pid=12888 comm=syz.3.2083 [ 167.616926][T12889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1296 sclass=netlink_route_socket pid=12889 comm=syz.3.2083 [ 167.653005][ T40] audit: type=1400 audit(1757323295.787:73371): avc: denied { mount } for pid=12896 comm="syz.3.2086" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 167.663044][ T40] audit: type=1400 audit(1757323295.797:73372): avc: denied { unmount } for pid=5966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 167.678173][ T1470] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 167.678253][T12900] netlink: 149 bytes leftover after parsing attributes in process `syz.3.2087'. [ 167.680663][ T1470] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 167.689442][ T1470] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0D8C:0022.0009/input/input29 [ 167.705451][ T1470] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 167.732286][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2088'. [ 167.736276][T12903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2088'. [ 167.740960][T12905] xt_policy: neither incoming nor outgoing policy selected [ 167.833512][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2091'. [ 167.836749][T12912] bond0: option use_carrier: invalid value (3) [ 167.863730][T12854] binder: 12853:12854 ioctl c018937e 2000000001c0 returned -22 [ 167.867453][ T1470] usb 5-1: USB disconnect, device number 20 [ 167.868573][T12920] misc userio: The device must be registered before sending interrupts [ 167.905503][T12925] block nbd3: Attempted send on invalid socket [ 167.907619][T12925] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 167.909920][T12933] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 167.910545][T12925] XFS (nbd3): SB validate failed with error -5. [ 167.913474][T12933] SELinux: failed to load policy [ 167.923672][T12933] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2094'. [ 167.955928][T12935] binfmt_misc: register: failed to install interpreter file ./file0 [ 168.028280][T12940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2097'. [ 168.032966][T12941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2097'. [ 168.038300][T12937] kvm: kvm [12936]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0x0 [ 168.070189][ T40] audit: type=1400 audit(1757323296.207:73373): avc: denied { read } for pid=12942 comm="syz.2.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 168.114020][T12947] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.143767][T12950] hpfs: Bad magic ... probably not HPFS [ 168.171776][T12954] netlink: 'syz.2.2102': attribute type 4 has an invalid length. [ 168.264305][T12952] nbd0: detected capacity change from 0 to 127 [ 168.267680][ T5331] block nbd0: Receive control failed (result -32) [ 168.269592][T12560] block nbd0: Send control failed (result -32) [ 168.272324][T12560] block nbd0: Request send failed, requeueing [ 168.278378][ T67] block nbd0: Dead connection, failed to find a fallback [ 168.280931][ T67] block nbd0: shutting down sockets [ 168.282753][ T67] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.286134][T12560] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.286136][ T67] Buffer I/O error on dev nbd0, logical block 0, async page read [ 168.292363][T12560] Buffer I/O error on dev nbd0, logical block 1, async page read [ 168.295167][T12560] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.298133][T12560] Buffer I/O error on dev nbd0, logical block 2, async page read [ 168.298209][T12560] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.303563][T12560] Buffer I/O error on dev nbd0, logical block 3, async page read [ 168.303650][T12560] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.309516][T12560] Buffer I/O error on dev nbd0, logical block 0, async page read [ 168.312060][T12560] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.315857][T12560] Buffer I/O error on dev nbd0, logical block 1, async page read [ 168.316471][T12962] tipc: Enabling of bearer rejected, already enabled [ 168.318437][T12560] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.323659][T12560] Buffer I/O error on dev nbd0, logical block 2, async page read [ 168.323729][T12560] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.330789][T12560] Buffer I/O error on dev nbd0, logical block 3, async page read [ 168.334232][T12560] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.337995][T12560] Buffer I/O error on dev nbd0, logical block 0, async page read [ 168.341487][T12560] Buffer I/O error on dev nbd0, logical block 1, async page read [ 168.347916][T12560] ldm_validate_partition_table(): Disk read failed. [ 168.354744][T12560] Dev nbd0: unable to read RDB block 0 [ 168.358738][T12560] nbd0: unable to read partition table [ 168.366206][T12560] ldm_validate_partition_table(): Disk read failed. [ 168.369159][T12560] Dev nbd0: unable to read RDB block 0 [ 168.371750][T12560] nbd0: unable to read partition table [ 168.386830][T12966] binder: BINDER_SET_CONTEXT_MGR already set [ 168.389076][T12966] binder: 12965:12966 ioctl 4018620d 200000000480 returned -16 [ 168.392697][T12966] binder: 12965:12966 ioctl c0306201 200000000640 returned -22 [ 168.474439][ T1470] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 168.474801][ T40] audit: type=1400 audit(1757323296.617:73374): avc: denied { create } for pid=12967 comm="syz.0.2108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 168.478212][T12972] netlink: 'syz.3.2109': attribute type 1 has an invalid length. [ 168.482936][ T40] audit: type=1400 audit(1757323296.617:73375): avc: denied { setopt } for pid=12967 comm="syz.0.2108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 168.496429][T12972] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.507649][T12970] bond3: (slave geneve2): making interface the new active one [ 168.510628][T12970] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 168.565776][ T5331] Bluetooth: hci4: command tx timeout [ 168.576486][T12984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.631961][T12997] netlink: 'syz.0.2116': attribute type 1 has an invalid length. [ 168.636421][T12999] binder: BINDER_SET_CONTEXT_MGR already set [ 168.639045][T12999] binder: 12995:12999 ioctl 4018620d 200000000300 returned -16 [ 168.646328][ T1470] usb 7-1: Using ep0 maxpacket: 8 [ 168.651449][ T1470] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 168.655266][ T1470] usb 7-1: config 1 has no interfaces? [ 168.657050][ T1470] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 168.659942][ T1470] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.660818][T12997] bond6: (slave gretap2): making interface the new active one [ 168.669401][T12997] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 168.673920][T13001] 8021q: adding VLAN 0 to HW filter on device bond6 [ 169.050135][T13038] syz.0.2128 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 169.230962][ T839] usb 7-1: USB disconnect, device number 19 [ 169.722835][ T1242] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.789066][ T1242] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.797745][ T40] audit: type=1400 audit(1757323297.937:73376): avc: denied { getopt } for pid=13049 comm="syz.1.2134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 169.856941][ T1242] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.912402][T13055] program syz.1.2134 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.923100][ T5982] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 169.929741][ T5982] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 169.933022][ T5982] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 169.937334][ T5982] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 169.940374][ T5982] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.950958][ T1242] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.986685][T13059] lo speed is unknown, defaulting to 1000 [ 170.048400][T13069] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 170.134785][ T1242] bridge_slave_1: left allmulticast mode [ 170.138046][ T1242] bridge_slave_1: left promiscuous mode [ 170.142069][ T1242] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.151673][ T1242] bridge_slave_0: left allmulticast mode [ 170.153527][ T1242] bridge_slave_0: left promiscuous mode [ 170.156807][ T1242] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.186868][T12560] block nbd64: NBD_DISCONNECT [ 170.285942][T12560] udevd[12560]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 170.513578][ T1242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.519084][ T1242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.523211][ T1242] bond0 (unregistering): Released all slaves [ 170.596856][ T1242] bond1 (unregistering): Released all slaves [ 170.642063][T13059] chnl_net:caif_netlink_parms(): no params data found [ 170.730435][T13113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27180 sclass=netlink_route_socket pid=13113 comm=syz.0.2149 [ 170.742268][T13059] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.744709][T13059] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.747088][T13059] bridge_slave_0: entered allmulticast mode [ 170.749707][T13059] bridge_slave_0: entered promiscuous mode [ 170.798907][T13059] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.801117][T13059] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.803997][T13059] bridge_slave_1: entered allmulticast mode [ 170.807724][T13059] bridge_slave_1: entered promiscuous mode [ 170.879847][T13059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.914694][T13059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.973916][T13059] team0: Port device team_slave_0 added [ 170.987810][T13059] team0: Port device team_slave_1 added [ 171.025845][ T1242] hsr_slave_0: left promiscuous mode [ 171.027944][ T1242] hsr_slave_1: left promiscuous mode [ 171.029986][ T1242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.032383][ T1242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.035743][ T1242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.038053][ T1242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.089391][ T1242] veth1_macvtap: left promiscuous mode [ 171.092376][ T1242] veth0_macvtap: left promiscuous mode [ 171.095215][ T1242] veth1_vlan: left promiscuous mode [ 171.097770][ T1242] veth0_vlan: left promiscuous mode [ 171.500432][T13149] 9pnet_virtio: no channels available for device syz [ 171.503237][T13149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.682972][T13171] 9pnet: Could not find request transport: unix [ 171.690519][ T40] audit: type=1400 audit(1757323299.827:73377): avc: denied { name_bind } for pid=13165 comm="syz.0.2159" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 171.751470][T13163] netlink: 'syz.3.2158': attribute type 10 has an invalid length. [ 171.881229][ T1242] team0 (unregistering): Port device team_slave_1 removed [ 171.957485][ T1242] team0 (unregistering): Port device team_slave_0 removed [ 172.005098][ T5982] Bluetooth: hci2: command tx timeout [ 172.510404][T13059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.512719][T13059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.520911][T13059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.541998][T13059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.544612][T13059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.553377][T13059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.576666][T13192] kvm: pic: non byte read [ 172.580018][T13192] kvm: pic: level sensitive irq not supported [ 172.580359][T13192] kvm: pic: non byte read [ 172.588345][T13192] kvm: pic: level sensitive irq not supported [ 172.588582][T13192] kvm: pic: non byte read [ 172.599648][T13192] kvm: pic: non byte read [ 172.602412][T13192] kvm: pic: non byte read [ 172.607680][T13192] kvm: pic: non byte read [ 172.610330][T13192] kvm: pic: single mode not supported [ 172.610338][T13192] kvm: pic: level sensitive irq not supported [ 172.612903][T13192] kvm: pic: non byte read [ 172.618928][T13192] kvm: pic: non byte read [ 172.621929][T13192] kvm: pic: non byte read [ 172.640915][T13059] hsr_slave_0: entered promiscuous mode [ 172.643151][T13059] hsr_slave_1: entered promiscuous mode [ 172.647253][T13059] debugfs: 'hsr0' already exists in 'hsr' [ 172.649077][T13059] Cannot create hsr debugfs directory [ 172.662899][T13203] binder: BINDER_SET_CONTEXT_MGR already set [ 172.665689][T13203] binder: 13202:13203 ioctl 4018620d 200000000300 returned -16 [ 172.794820][T13059] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.799797][T13059] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.804495][T13059] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.808530][T13059] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.855380][T13059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.870629][T13059] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.878463][T13140] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.880530][T13140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.886569][ T1207] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.889422][ T1207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.938075][T13229] __nla_validate_parse: 76 callbacks suppressed [ 172.938086][T13229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2170'. [ 172.999197][T13059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.132347][T13253] netlink: 'syz.0.2175': attribute type 1 has an invalid length. [ 173.148422][T13253] 8021q: adding VLAN 0 to HW filter on device bond8 [ 173.155954][T13059] veth0_vlan: entered promiscuous mode [ 173.173094][T13253] veth3: entered promiscuous mode [ 173.176931][T13253] bond8: (slave veth3): Enslaving as an active interface with a down link [ 173.184461][T13253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=13253 comm=syz.0.2175 [ 173.185011][T13059] veth1_vlan: entered promiscuous mode [ 173.207530][T13253] veth5: entered promiscuous mode [ 173.211045][T13253] bond8: (slave veth5): Enslaving as an active interface with a down link [ 173.237743][T13059] veth0_macvtap: entered promiscuous mode [ 173.245575][T13059] veth1_macvtap: entered promiscuous mode [ 173.263727][T13059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.271538][T13059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.280130][ T1242] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.282964][ T1242] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.288602][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.292773][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.341813][ T1242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.344495][ T1242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.345184][T13260] netlink: 'syz.0.2177': attribute type 1 has an invalid length. [ 173.349493][T13260] netlink: 'syz.0.2177': attribute type 1 has an invalid length. [ 173.351907][T13260] netlink: 'syz.0.2177': attribute type 1 has an invalid length. [ 173.356238][ T1242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.356372][T13260] netlink: 'syz.0.2177': attribute type 2 has an invalid length. [ 173.358832][ T1242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.669150][ T40] audit: type=1400 audit(1757323301.807:73378): avc: denied { bind } for pid=13287 comm="syz.3.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 173.676166][ T40] audit: type=1400 audit(1757323301.807:73379): avc: denied { connect } for pid=13287 comm="syz.3.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 173.766109][ T54] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 173.919693][ T54] usb 9-1: Using ep0 maxpacket: 32 [ 173.924190][ T54] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.927757][ T54] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.930885][ T54] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 173.933589][ T54] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.938439][ T54] usb 9-1: config 0 descriptor?? [ 173.961838][T13299] new mount options do not match the existing superblock, will be ignored [ 174.084239][ T5982] Bluetooth: hci2: command tx timeout [ 174.351648][ T54] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 174.413427][T13311] fuse: Bad value for 'fd' [ 174.416044][T13311] overlay: Unknown parameter 'appraise_type' [ 174.615196][ T54] usb 9-1: USB disconnect, device number 2 [ 175.094171][ T54] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 175.246118][ T54] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.249795][ T54] usb 9-1: config 0 has no interfaces? [ 175.253117][ T54] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 175.256275][ T54] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.258875][ T54] usb 9-1: Product: syz [ 175.260552][ T54] usb 9-1: Manufacturer: syz [ 175.262187][ T54] usb 9-1: SerialNumber: syz [ 175.265138][ T54] usb 9-1: config 0 descriptor?? [ 175.297756][T13339] xt_l2tp: missing protocol rule (udp|l2tpip) [ 175.392332][T13346] Process accounting resumed [ 175.481438][ T40] audit: type=1800 audit(1757323303.617:73380): pid=13350 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.2203" name="/newroot/478/bus/#2577//deleted" dev="tmpfs" ino=2577 res=0 errno=0 [ 175.504585][T13354] netlink: 'syz.0.2204': attribute type 21 has an invalid length. [ 175.507096][T13354] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2204'. [ 175.519760][ T1470] usb 9-1: USB disconnect, device number 3 [ 175.583528][T13357] lo speed is unknown, defaulting to 1000 [ 175.648981][T13333] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 176.175217][ T5982] Bluetooth: hci2: command tx timeout [ 176.515159][T13415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.520409][T13415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.547988][T13424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9744 sclass=netlink_route_socket pid=13424 comm=syz.0.2215 [ 176.581474][T13368] cgroup: fork rejected by pids controller in /syz3 [ 176.714866][T13452] overlayfs: failed to clone upperpath [ 176.816538][ T40] audit: type=1400 audit(1757323304.957:73381): avc: denied { read write } for pid=13464 comm="syz.4.2223" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 176.823964][ T40] audit: type=1400 audit(1757323304.957:73382): avc: denied { open } for pid=13464 comm="syz.4.2223" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 176.831880][ T40] audit: type=1400 audit(1757323304.957:73383): avc: denied { ioctl } for pid=13464 comm="syz.4.2223" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 176.840791][ T40] audit: type=1400 audit(1757323304.967:73384): avc: denied { read } for pid=13463 comm="syz.3.2224" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 176.848412][ T40] audit: type=1400 audit(1757323304.967:73385): avc: denied { open } for pid=13463 comm="syz.3.2224" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 176.856710][ T40] audit: type=1400 audit(1757323304.967:73386): avc: denied { ioctl } for pid=13463 comm="syz.3.2224" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x6803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 176.876592][T13468] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2225'. [ 176.929521][T13469] tracefs: Bad value for 'mode' [ 177.116430][T13489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2231'. [ 177.120093][T13489] netlink: 'syz.4.2231': attribute type 7 has an invalid length. [ 177.122522][T13489] netlink: 'syz.4.2231': attribute type 8 has an invalid length. [ 177.125767][T13489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2231'. [ 177.250397][T13505] atomic_op ffff888056270998 conn xmit_atomic 0000000000000000 [ 177.253190][T13505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2234'. [ 177.357114][T13515] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 177.467193][T13542] dlm: no locking on control device [ 177.573255][T13552] binder: 13551:13552 ioctl c0306201 200000000080 returned -14 [ 177.577858][ T40] audit: type=1400 audit(1757323305.717:73387): avc: denied { call } for pid=13551 comm="syz.1.2243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 177.849480][T13575] block nbd1: Send control failed (result -32) [ 177.852445][T13575] block nbd1: Request send failed, requeueing [ 177.859878][ T67] block nbd1: Dead connection, failed to find a fallback [ 177.862929][ T67] block nbd1: shutting down sockets [ 177.865236][ T67] blk_print_req_error: 139 callbacks suppressed [ 177.865248][ T67] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.871848][T13575] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.876171][T13575] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 177.879566][T13575] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.884036][T13575] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 177.890797][T13575] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.894005][T13575] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.898297][T13575] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 177.902925][T13575] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.907788][T13575] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 177.912701][T13575] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.917860][T13575] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.921114][T13575] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 177.927183][T13575] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.931556][T13575] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 177.934222][ T840] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 177.939801][T13575] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.943094][T13575] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 177.948310][T13575] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 177.951556][T13575] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 178.004547][T13593] block nbd3: Attempted send on invalid socket [ 178.008711][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.011345][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.014810][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.019582][T13593] block nbd3: Attempted send on invalid socket [ 178.022368][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.025114][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.027692][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.035441][T13593] block nbd3: Attempted send on invalid socket [ 178.038120][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.040686][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.043247][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.048264][T13593] block nbd3: Attempted send on invalid socket [ 178.050396][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.052391][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.056527][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.061226][T13593] block nbd3: Attempted send on invalid socket [ 178.063900][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.067184][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.069887][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.075288][T13593] block nbd3: Attempted send on invalid socket [ 178.078011][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.080581][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.081602][T13597] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2255'. [ 178.083253][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.093921][T13593] block nbd3: Attempted send on invalid socket [ 178.099897][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.102195][ T840] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 178.102256][T13599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2253'. [ 178.102590][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.109065][T13599] bridge_slave_0: left allmulticast mode [ 178.109808][ T840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.109827][ T840] usb 9-1: Product: syz [ 178.109838][ T840] usb 9-1: Manufacturer: syz [ 178.109850][ T840] usb 9-1: SerialNumber: syz [ 178.110215][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.115065][T13593] block nbd3: Attempted send on invalid socket [ 178.119007][T13599] bridge_slave_0: left promiscuous mode [ 178.119346][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.119894][ T840] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 178.121462][T13599] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.122809][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.135049][ T840] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 178.137371][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.145271][T13599] bridge_slave_1: left allmulticast mode [ 178.147863][T13599] bridge_slave_1: left promiscuous mode [ 178.149871][T13593] block nbd3: Attempted send on invalid socket [ 178.150416][T13599] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.152402][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.158423][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.161046][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.164442][T13599] bond0: (slave bond_slave_0): Releasing backup interface [ 178.166918][T13593] block nbd3: Attempted send on invalid socket [ 178.166965][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.170985][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.172974][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.176058][T13599] bond0: (slave bond_slave_1): Releasing backup interface [ 178.181225][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.183779][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.186602][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.188363][T13599] team0: Port device team_slave_0 removed [ 178.192860][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.195970][T13599] team0: Port device team_slave_1 removed [ 178.196330][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.200614][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.205893][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.207935][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.209947][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.210304][T13599] bond2: (slave bridge3): Releasing active interface [ 178.215375][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.217344][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.219304][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.222041][T13599] bond6: (slave gretap2): Releasing backup interface [ 178.223154][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.226335][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.228618][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.231964][T13599] bond8: (slave veth3): Releasing active interface [ 178.234218][T13599] bond8: (slave veth3): the permanent HWaddr of slave - 0a:d5:54:0b:60:e3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 178.235712][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.242142][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.245940][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.248853][T13599] bond8: (slave veth5): Releasing active interface [ 178.249086][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.253083][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.255590][ T5982] Bluetooth: hci2: command tx timeout [ 178.255600][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.256647][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.261995][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.264951][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.271058][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.272710][T13601] fuse: Bad value for 'fd' [ 178.273142][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.273150][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.279981][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.282008][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.287274][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.291711][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.293725][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.296038][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.307022][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.308982][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.310906][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.314591][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.317042][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.319011][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.326142][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.328079][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.329953][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.333747][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.335984][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.338262][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.344778][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.347154][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.349387][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.360318][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.362349][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.364657][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.375251][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.377399][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.379591][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.390346][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.392353][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.394705][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.406447][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.408503][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.410445][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.435111][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.437168][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.439182][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.445463][ T29] usb 9-1: USB disconnect, device number 4 [ 178.447810][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.447817][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.447822][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.448611][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.448618][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.448623][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.449266][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.449273][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.449277][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.449943][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.465721][T13609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.465910][T13609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.467847][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.477193][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.488116][T13604] netlink: 'syz.0.2257': attribute type 10 has an invalid length. [ 178.492035][T13604] team0: Device hsr_slave_0 failed to register rx_handler [ 178.498160][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.500561][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.502884][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.507214][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.509617][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.512013][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.516224][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.518611][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.520859][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.529485][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.531420][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.533344][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.543344][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.545593][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.547548][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.550219][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.552400][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.555617][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.561953][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.564524][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.566522][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.575143][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.577726][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.580124][T13614] gretap3: entered promiscuous mode [ 178.580268][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.588419][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.591295][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.593824][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.599384][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.602072][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.604840][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.608314][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.610753][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.613150][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.616897][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.619326][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.621724][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.628691][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.630644][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.632744][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.637621][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.639779][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.641739][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.645237][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.647240][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.649175][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.652419][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.655754][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.657675][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.662348][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.664929][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.667021][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.670433][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.672512][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.674869][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.678249][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.680348][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.682393][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.688890][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.691485][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.694420][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.701237][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.703341][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.705602][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.716778][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.718834][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.720807][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.726518][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.729213][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.732016][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.740009][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.742068][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.744212][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.748187][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.750117][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.752099][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.756136][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.758165][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.760244][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.765518][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.768213][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.770916][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.776099][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.778056][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.780037][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.784637][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.786522][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.788413][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.792329][T13593] exFAT-fs (nbd3): unable to read boot sector [ 178.795769][T13593] exFAT-fs (nbd3): failed to read boot sector [ 178.798427][T13593] exFAT-fs (nbd3): failed to recognize exfat type [ 178.852205][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 178.852215][ T40] audit: type=1400 audit(1757323306.987:73391): avc: denied { create } for pid=13630 comm="syz.0.2265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 178.855501][T13590] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 178.930226][T13634] smc: net device bond0 applied user defined pnetid SYZ2 [ 178.933256][T13634] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2266'. [ 178.957818][T13634] smc: removing net device bond0 with user defined pnetid SYZ2 [ 178.961615][T13634] bond0 (unregistering): Released all slaves [ 178.997901][T13639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2268'. [ 179.001868][T13639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2268'. [ 179.048407][T13643] atomic_op ffff888056392998 conn xmit_atomic 0000000000000000 [ 179.084780][T13633] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 179.143365][ T40] audit: type=1400 audit(1757323307.277:73392): avc: denied { setattr } for pid=13649 comm="syz.4.2272" path="socket:[58532]" dev="sockfs" ino=58532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.205236][ T840] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 179.208299][ T840] ath9k_htc: Failed to initialize the device [ 179.211504][ T29] usb 9-1: ath9k_htc: USB layer deinitialized [ 179.290591][T13654] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 179.339298][T13661] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2275'. [ 179.615783][ T840] e1000 0000:00:06.0 eth0: Reset adapter [ 179.709593][T13679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13679 comm=syz.3.2280 [ 179.724523][ T840] e1000 0000:00:06.0 eth0: Reset adapter [ 179.819860][T13687] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2282'. [ 181.845233][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 181.862467][T13709] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2287'. [ 182.920338][ T40] audit: type=1400 audit(1757323311.057:73393): avc: denied { accept } for pid=13717 comm="syz.3.2291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 183.118793][T13734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.122021][T13734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.134721][T13734] ISOFS: Unable to identify CD-ROM format. [ 183.149243][T13734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2295'. [ 183.751635][ T40] audit: type=1400 audit(1757323311.887:73394): avc: denied { read } for pid=13745 comm="syz.1.2299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 183.846012][T13756] syzkaller1: entered promiscuous mode [ 183.847819][T13756] syzkaller1: entered allmulticast mode [ 183.851347][T13756] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 183.866031][T13753] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 183.923736][T13766] 9pnet_fd: Insufficient options for proto=fd [ 184.716134][T13802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2316'. [ 184.716504][T13809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2316'. [ 184.727763][ T40] audit: type=1400 audit(1757323312.867:73395): avc: denied { setattr } for pid=13800 comm="syz.1.2316" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 184.739432][T13812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2318'. [ 184.795097][T13821] dummy0: left allmulticast mode [ 184.798049][T13821] batadv0: left allmulticast mode [ 184.896606][T13821] bridge4: left promiscuous mode [ 184.898329][T13821] bridge4: left allmulticast mode [ 184.910862][T13123] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.914631][T13821] batman_adv: batadv0: Removing interface: team0 [ 184.919825][T13821] bond3: (slave geneve2): Releasing active interface [ 184.924553][T13123] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.928092][T13123] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.931463][T13123] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.950191][ T40] audit: type=1400 audit(1757323313.087:73396): avc: denied { unlink } for pid=13828 comm="syz.1.2323" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 184.986710][T13839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2325'. [ 185.029692][T13841] Bluetooth: MGMT ver 1.23 [ 185.278947][ T6053] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 185.281254][ T6053] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 185.283610][ T6053] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 185.286424][ T6053] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 185.288818][ T6053] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 185.291772][ T6053] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 185.294261][ T6053] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 185.296672][ T6053] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 185.299010][ T6053] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 185.301790][ T6053] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 185.317763][ T6053] hid-generic 0003:0004:0000.000B: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 185.347291][T13878] overlayfs: failed to resolve './file1': -2 [ 185.354605][T13878] overlayfs: failed to clone upperpath [ 185.476724][T13882] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 185.500267][ T5331] Bluetooth: hci2: unexpected event 0x3c length: 6 < 7 [ 185.774967][T13890] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 185.837353][T13893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2341'. [ 185.844563][ T5331] Bluetooth: hci2: command 0x0405 tx timeout [ 185.845377][ T6053] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 185.915339][T13898] overlayfs: failed to clone upperpath [ 185.977045][ T1470] usb 6-1: USB disconnect, device number 10 [ 186.005679][ T6053] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.009134][ T6053] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.012212][ T6053] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 186.016638][ T6053] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.027556][ T6053] usb 9-1: config 0 descriptor?? [ 186.054356][T13901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2344'. [ 186.057170][ T9913] syz_tun (unregistering): left promiscuous mode [ 186.082411][ T5331] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.086159][ T5331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.089076][ T5331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.096818][ T5331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.100095][ T5331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.119670][T13907] lo speed is unknown, defaulting to 1000 [ 186.205473][ T1148] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.209170][ T1148] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.234955][T13923] overlayfs: failed to clone upperpath [ 186.239483][T13923] netlink: zone id is out of range [ 186.241851][T13923] netlink: zone id is out of range [ 186.245719][T13923] netlink: zone id is out of range [ 186.247777][T13923] netlink: zone id is out of range [ 186.250818][T13907] chnl_net:caif_netlink_parms(): no params data found [ 186.252505][T13923] netlink: zone id is out of range [ 186.256355][T13923] netlink: zone id is out of range [ 186.258005][T13923] netlink: zone id is out of range [ 186.259701][T13923] netlink: zone id is out of range [ 186.264174][T13923] netlink: zone id is out of range [ 186.302874][ T1148] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.306239][T13930] overlayfs: failed to clone upperpath [ 186.306856][ T1148] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.352057][T13907] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.354464][T13907] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.356756][T13907] bridge_slave_0: entered allmulticast mode [ 186.359407][T13907] bridge_slave_0: entered promiscuous mode [ 186.362684][T13907] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.365345][T13907] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.367630][T13907] bridge_slave_1: entered allmulticast mode [ 186.370240][T13907] bridge_slave_1: entered promiscuous mode [ 186.375929][ T1148] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.378961][ T1148] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.401766][T13934] siw: device registration error -23 [ 186.405150][T13934] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2351'. [ 186.443383][T13907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.450453][T13907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.450917][ T6053] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0D8C:0022.000C/input/input30 [ 186.474553][ T6053] cm6533_jd 0003:0D8C:0022.000C: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 186.503271][ T1148] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.507889][ T1148] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.528614][T13907] team0: Port device team_slave_0 added [ 186.531887][T13907] team0: Port device team_slave_1 added [ 186.567114][T13907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.569421][T13907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.579328][T13907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.590685][T13907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.592960][T13907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.601734][T13907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.634572][ T6053] usb 9-1: USB disconnect, device number 5 [ 186.666427][T13907] hsr_slave_0: entered promiscuous mode [ 186.669083][T13907] hsr_slave_1: entered promiscuous mode [ 186.671266][T13907] debugfs: 'hsr0' already exists in 'hsr' [ 186.673086][T13907] Cannot create hsr debugfs directory [ 186.740673][ T1148] bridge_slave_1: left allmulticast mode [ 186.743094][ T1148] bridge_slave_1: left promiscuous mode [ 186.746266][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.753092][ T1148] bridge_slave_0: left allmulticast mode [ 186.756664][ T1148] bridge_slave_0: left promiscuous mode [ 186.759102][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.978246][T13949] 9pnet_rdma: rdma_create_trans (13949): problem binding to privport: 13 [ 186.984406][ T40] audit: type=1400 audit(1757323315.117:73397): avc: denied { override_creds } for pid=13948 comm="syz.0.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 187.334608][T13961] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2358'. [ 187.339177][T13961] usb usb8: check_ctrlrecip: process 13961 (syz.4.2358) requesting ep 01 but needs 81 [ 187.343276][T13961] usb usb8: usbfs: process 13961 (syz.4.2358) did not claim interface 0 before use [ 187.396645][ T1148] bond1 (unregistering): Released all slaves [ 187.403566][ T1148] bond2 (unregistering): Released all slaves [ 187.495878][ T1148] bond3 (unregistering): Released all slaves [ 187.505634][ T1148] smc: removing net device bond0 with user defined pnetid SYZ2 [ 187.509603][ T1148] bond0 (unregistering): Released all slaves [ 187.656959][ T1148] bond4 (unregistering): Released all slaves [ 187.696536][T13962] lo speed is unknown, defaulting to 1000 [ 187.724059][ T40] audit: type=1326 audit(1757323315.857:73398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13971 comm="syz.0.2360" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53eff8ebe9 code=0x7fc00000 [ 187.742412][ T1148] tipc: Left network mode [ 187.829392][T13982] overlayfs: failed to resolve './file0': -2 [ 188.002107][ T1148] batadv_slave_0: left promiscuous mode [ 188.015470][ T1148] hsr_slave_0: left promiscuous mode [ 188.020318][ T1148] hsr_slave_1: left promiscuous mode [ 188.023040][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.026422][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.031011][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.033259][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.074540][ T1148] veth1_to_batadv: left promiscuous mode [ 188.076783][ T1148] veth0_macvtap: left promiscuous mode [ 188.079121][ T1148] veth1_vlan: left promiscuous mode [ 188.165237][ T5331] Bluetooth: hci1: command tx timeout [ 188.219516][T13980] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 189.576597][T14022] team0: Mode changed to "loadbalance" [ 189.576856][ T40] audit: type=1400 audit(1757323317.707:73399): avc: denied { connect } for pid=14023 comm="syz.4.2374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 189.581020][T14022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2373'. [ 189.586062][ T40] audit: type=1400 audit(1757323317.717:73400): avc: denied { write } for pid=14023 comm="syz.4.2374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 189.806379][T13907] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 189.810932][T13907] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 189.815545][T13907] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 189.819513][T13907] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 189.821342][T14032] overlayfs: failed to clone upperpath [ 189.835659][ T29] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 189.839544][T14032] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2375'. [ 189.843601][T14032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2375'. [ 189.847594][T14032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2375'. [ 189.883430][T13907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.892541][T13907] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.898823][T13381] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.900997][T13381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.906911][T13123] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.909258][T13123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.944065][T14017] comedi comedi0: reset error (fatal) [ 189.949291][T14042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2376'. [ 189.952889][T14042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2376'. [ 190.005894][ T29] usb 9-1: config index 0 descriptor too short (expected 1307, got 27) [ 190.008547][ T29] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 190.011291][ T29] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 190.016190][ T29] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 190.019845][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 190.023219][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 190.025711][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2380'. [ 190.026840][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 190.040909][ T29] usb 9-1: string descriptor 0 read error: -22 [ 190.043155][ T29] usb 9-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 190.045827][ T1148] IPVS: stop unused estimator thread 0... [ 190.047230][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.051645][ T29] usb 9-1: config 0 descriptor?? [ 190.052679][T13907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.054864][ T40] audit: type=1400 audit(1757323318.197:73401): avc: denied { setopt } for pid=14052 comm="syz.3.2379" lport=60173 faddr=::ffff:10.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 190.067310][ T29] hub 9-1:0.0: bad descriptor, ignoring hub [ 190.069230][ T29] hub 9-1:0.0: probe with driver hub failed with error -5 [ 190.072931][ T29] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input31 [ 190.077951][ T40] audit: type=1800 audit(1757323318.207:73402): pid=14055 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2381" name="nullb0" dev="tmpfs" ino=2868 res=0 errno=0 [ 190.098428][T13907] veth0_vlan: entered promiscuous mode [ 190.111956][T13907] veth1_vlan: entered promiscuous mode [ 190.144354][T13907] veth0_macvtap: entered promiscuous mode [ 190.150113][T13907] veth1_macvtap: entered promiscuous mode [ 190.162964][T14059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2383'. [ 190.165309][T13907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.193602][T13907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.202903][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.207230][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.211494][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.214565][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.255124][ T5331] Bluetooth: hci1: command tx timeout [ 190.260346][ T40] audit: type=1400 audit(1757323318.397:73403): avc: denied { read } for pid=14023 comm="syz.4.2374" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 190.268982][ T40] audit: type=1400 audit(1757323318.397:73404): avc: denied { open } for pid=14023 comm="syz.4.2374" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 190.298827][ T1207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.301748][ T1207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.354407][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.357526][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.378029][ T53] usb 9-1: USB disconnect, device number 6 [ 190.452843][ T40] audit: type=1400 audit(1757323318.587:73405): avc: denied { write } for pid=14087 comm="syz.0.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 190.462397][T14078] block nbd3: shutting down sockets [ 190.505125][ T40] audit: type=1400 audit(1757323318.647:73406): avc: denied { getopt } for pid=14094 comm="syz.0.2392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 190.540236][T14098] tmpfs: Unknown parameter 'mpolva7zسOGN\7dJ0i2X];:@1A`$Bp-^$J(IK/!a>Jɺ.&>ez(›jPy;f7G:l;$H8 ' [ 190.563484][T14103] fuse: Bad value for 'rootmode' [ 190.567279][T14103] netlink: 'syz.1.2395': attribute type 10 has an invalid length. [ 190.581606][T14103] team0: Device hsr_slave_0 failed to register rx_handler [ 190.592501][T14103] vxcan1 speed is unknown, defaulting to 1000 [ 190.603985][T14103] vxcan1 speed is unknown, defaulting to 1000 [ 190.607095][T14103] vxcan1 speed is unknown, defaulting to 1000 [ 190.608850][T14109] overlayfs: failed to clone upperpath [ 190.740179][T14103] infiniband syz2: set active [ 190.742392][T14103] infiniband syz2: added vxcan1 [ 190.747141][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 190.772866][T14103] RDS/IB: syz2: added [ 190.775305][T14103] smc: adding ib device syz2 with port count 1 [ 190.777914][T14103] smc: ib device syz2 port 1 has pnetid [ 190.779634][T14124] bridge7: entered allmulticast mode [ 190.782741][ T6021] vxcan1 speed is unknown, defaulting to 1000 [ 190.786180][T14103] vxcan1 speed is unknown, defaulting to 1000 [ 190.810972][ T5979] Process accounting resumed [ 190.822351][T14131] Process accounting resumed [ 190.885186][T14103] vxcan1 speed is unknown, defaulting to 1000 [ 190.996597][T14103] vxcan1 speed is unknown, defaulting to 1000 [ 191.083456][T14103] vxcan1 speed is unknown, defaulting to 1000 [ 191.169145][T14103] vxcan1 speed is unknown, defaulting to 1000 [ 191.298434][T14160] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 191.301537][T14160] overlayfs: missing 'lowerdir' [ 191.392429][ T40] audit: type=1400 audit(1757323319.527:73407): avc: denied { read } for pid=14164 comm="syz.1.2415" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 191.401633][ T40] audit: type=1400 audit(1757323319.527:73408): avc: denied { open } for pid=14164 comm="syz.1.2415" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 191.409877][ T40] audit: type=1400 audit(1757323319.527:73409): avc: denied { ioctl } for pid=14164 comm="syz.1.2415" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 191.862621][ T40] audit: type=1400 audit(1757323319.997:73410): avc: denied { bind } for pid=14185 comm="syz.4.2421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 191.867377][T14186] devpts: Unknown parameter 'u|]*uc' [ 191.910658][T14191] erspan0: entered promiscuous mode [ 191.949330][T14197] netlink: 'syz.4.2424': attribute type 1 has an invalid length. [ 192.098876][T14217] vcan1: entered allmulticast mode [ 192.107418][T14217] vcan2: entered allmulticast mode [ 192.246209][T14241] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2436'. [ 192.324384][ T5331] Bluetooth: hci1: command tx timeout [ 192.576823][T14268] program syz.1.2445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.277036][T14286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2450'. [ 193.828571][T14315] net_ratelimit: 4 callbacks suppressed [ 193.828581][T14315] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 193.886786][T14323] binder: BINDER_SET_CONTEXT_MGR already set [ 193.888734][T14323] binder: 14322:14323 ioctl 4018620d 2000000000c0 returned -16 [ 193.892904][T14323] binder: BINDER_SET_CONTEXT_MGR already set [ 193.896046][T14323] binder: 14322:14323 ioctl 4018620d 200000000040 returned -16 [ 193.934867][T14325] netlink: 'syz.3.2464': attribute type 12 has an invalid length. [ 193.936125][T14326] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 193.967326][T14331] netlink: 'syz.3.2464': attribute type 12 has an invalid length. [ 194.025409][T14333] netlink: 'syz.4.2466': attribute type 2 has an invalid length. [ 194.076144][T14332] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 194.099774][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.236843][T14352] veth0_to_bond: entered allmulticast mode [ 194.265983][T14356] netfs: Couldn't get user pages (rc=-14) [ 194.287481][T14361] tmpfs: Unknown parameter 'opol' [ 194.331674][T14365] 9pnet_virtio: no channels available for device syz [ 194.332142][T14358] futex_wake_op: syz.0.2479 tries to shift op by -1; fix this program [ 194.332154][T14364] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 194.414568][ T5331] Bluetooth: hci1: command tx timeout [ 194.487978][T14378] could not allocate digest TFM handle cryptd(blake2b-160) [ 195.166342][T14393] fuse: Unknown parameter '' [ 195.196251][T14400] netlink: 'syz.4.2488': attribute type 9 has an invalid length. [ 195.268478][T14399] vlan0: entered promiscuous mode [ 195.276215][T14399] tipc: Enabling of bearer rejected, failed to enable media [ 195.823175][ T1207] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.905239][ T1207] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.956366][ T5982] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 195.961894][ T5982] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 195.966315][ T5982] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 195.971219][ T5982] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 195.981143][ T5982] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 195.988936][ T1207] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.016169][T14425] lo speed is unknown, defaulting to 1000 [ 196.019632][T14425] vxcan1 speed is unknown, defaulting to 1000 [ 196.057177][ T1207] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.089365][T14434] __nla_validate_parse: 4 callbacks suppressed [ 196.089375][T14434] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2503'. [ 196.228149][ T1207] bridge_slave_1: left allmulticast mode [ 196.229936][ T1207] bridge_slave_1: left promiscuous mode [ 196.232246][ T1207] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.236684][ T1207] bridge_slave_0: left allmulticast mode [ 196.238461][ T1207] bridge_slave_0: left promiscuous mode [ 196.240966][ T1207] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.331611][T14445] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 196.544533][ T1207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.549061][ T1207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.553631][ T1207] bond0 (unregistering): Released all slaves [ 196.568367][T14448] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2506'. [ 196.580523][T14425] chnl_net:caif_netlink_parms(): no params data found [ 196.668021][T14455] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2508'. [ 196.685187][T14425] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.687539][T14425] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.689800][T14425] bridge_slave_0: entered allmulticast mode [ 196.693569][T14425] bridge_slave_0: entered promiscuous mode [ 196.702749][T14459] 9pnet_virtio: no channels available for device syz [ 196.705999][T14459] 9pnet_virtio: no channels available for device syz [ 196.708971][T14459] 9pnet_virtio: no channels available for device syz [ 196.711889][T14459] 9pnet_virtio: no channels available for device syz [ 196.715423][T14459] 9pnet_virtio: no channels available for device syz [ 196.717849][T14425] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.717968][T14459] 9pnet_virtio: no channels available for device syz [ 196.720865][T14425] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.723707][T14459] 9pnet_virtio: no channels available for device syz [ 196.725579][T14425] bridge_slave_1: entered allmulticast mode [ 196.727884][T14459] 9pnet_virtio: no channels available for device syz [ 196.730397][T14425] bridge_slave_1: entered promiscuous mode [ 196.732482][T14459] 9pnet_virtio: no channels available for device syz [ 196.736632][T14459] 9pnet_virtio: no channels available for device syz [ 196.739090][T14459] 9pnet_virtio: no channels available for device syz [ 196.741523][T14459] 9pnet_virtio: no channels available for device syz [ 196.743903][T14459] 9pnet_virtio: no channels available for device syz [ 196.746566][T14459] 9pnet_virtio: no channels available for device syz [ 196.749037][T14459] 9pnet_virtio: no channels available for device syz [ 196.761675][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 196.761684][ T40] audit: type=1400 audit(1757323324.897:73425): avc: denied { mounton } for pid=14457 comm="syz.4.2509" path="/82/file0/file0" dev="9p" ino=35913983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 196.764642][T14459] 9pnet_virtio: no channels available for device syz [ 196.771928][ T40] audit: type=1800 audit(1757323324.897:73426): pid=14458 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2509" name="bus" dev="9p" ino=35913992 res=0 errno=0 [ 196.782374][ T40] audit: type=1800 audit(1757323324.897:73427): pid=14458 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2509" name="bus" dev="9p" ino=35913992 res=0 errno=0 [ 196.803816][T14425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.809913][T14425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.873163][T14425] team0: Port device team_slave_0 added [ 196.877358][T14425] team0: Port device team_slave_1 added [ 196.942458][T14425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.945289][T14425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.953129][T14425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.957342][T14470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.963994][T14425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.967455][T14425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.976806][T14425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.041795][ T1207] hsr_slave_0: left promiscuous mode [ 197.044680][ T1207] hsr_slave_1: left promiscuous mode [ 197.046867][ T1207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.049257][ T1207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.052025][ T1207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.054983][ T1207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.092329][ T1207] veth1_macvtap: left promiscuous mode [ 197.094611][ T1207] veth0_macvtap: left promiscuous mode [ 197.096384][ T1207] veth1_vlan: left promiscuous mode [ 197.098134][ T1207] veth0_vlan: left promiscuous mode [ 197.804678][T14489] netlink: 'syz.0.2517': attribute type 10 has an invalid length. [ 197.834114][ T1207] team0 (unregistering): Port device team_slave_1 removed [ 197.917585][ T1207] team0 (unregistering): Port device team_slave_0 removed [ 198.004277][ T5331] Bluetooth: hci1: command tx timeout [ 198.370271][T13123] smc: removing ib device syz2 [ 198.615098][T14425] hsr_slave_0: entered promiscuous mode [ 198.618620][T14425] hsr_slave_1: entered promiscuous mode [ 198.621709][T14425] debugfs: 'hsr0' already exists in 'hsr' [ 198.627446][T14425] Cannot create hsr debugfs directory [ 198.633448][ T5979] vxcan1 speed is unknown, defaulting to 1000 [ 198.639102][ T5979] syz2: Port: 1 Link DOWN [ 198.897421][T14506] libceph: resolve ' [ 198.897421][T14506] -&fYǝa2i [ 198.897421][T14506] .?&*&' (ret=-3): failed [ 198.986647][T14521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2525'. [ 199.227008][T14425] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 199.241905][T14425] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 199.259792][T14425] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 199.276356][T14425] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 199.351360][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2533'. [ 199.391892][T14425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.406292][T14425] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.415231][T13123] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.417532][T13123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.430840][ T1207] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.433162][ T1207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.472530][ T40] audit: type=1400 audit(1757323327.607:73428): avc: denied { mounton } for pid=14547 comm="syz.3.2533" path="/561/file0" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 199.472539][T14548] tmpfs: Bad value for 'mpol' [ 199.591774][T14425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.742490][T14425] veth0_vlan: entered promiscuous mode [ 199.750459][T14425] veth1_vlan: entered promiscuous mode [ 199.774682][T14425] veth0_macvtap: entered promiscuous mode [ 199.780471][T14425] veth1_macvtap: entered promiscuous mode [ 199.795077][T14425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.804738][T14425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.812398][ T1207] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.816585][ T1207] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.820413][ T1207] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.823236][ T1207] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.094164][ T5331] Bluetooth: hci1: command tx timeout [ 200.315625][T13125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.318117][T13125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.348284][T14577] bridge: RTM_NEWNEIGH with invalid ether address [ 200.348385][T14579] netlink: 'syz.3.2539': attribute type 1 has an invalid length. [ 200.368897][T14579] smc: adding net device bond0 with user defined pnetid SYZ2 [ 200.373654][ T1207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.379266][ T1207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.385824][T14579] bond0: (slave geneve3): making interface the new active one [ 200.388739][T14579] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 200.391540][T14577] lo speed is unknown, defaulting to 1000 [ 200.392692][T14579] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2539'. [ 200.397635][T13381] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 200.400342][T13381] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 200.403091][T14583] netlink: 'syz.4.2536': attribute type 2 has an invalid length. [ 200.403487][T14579] bond0: entered promiscuous mode [ 200.407406][T14579] geneve3: entered promiscuous mode [ 200.409145][T14579] bond0: entered allmulticast mode [ 200.410801][T14579] geneve3: entered allmulticast mode [ 200.413807][T14579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.421076][T13381] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 200.426270][T13381] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 200.630026][T14601] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=14601 comm=syz.4.2546 [ 200.644414][ T5982] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 200.648506][ T5982] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 200.651628][T14606] netlink: 'syz.5.2548': attribute type 4 has an invalid length. [ 200.652261][ T5982] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 200.659107][ T5982] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 200.662049][T14606] netlink: 'syz.5.2548': attribute type 4 has an invalid length. [ 200.663088][ T5982] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 200.692631][T14607] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2547'. [ 200.703897][ T9] hid_parser_main: 10 callbacks suppressed [ 200.703910][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 200.710448][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 200.713252][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 200.715916][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 200.720830][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 200.723368][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 200.732659][T14603] lo speed is unknown, defaulting to 1000 [ 200.733327][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 200.743915][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 200.747191][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 200.749540][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 200.756649][ T9] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.00 Device [syz0] on syz0 [ 200.813810][T14623] fido_id[14623]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 200.881325][T14603] chnl_net:caif_netlink_parms(): no params data found [ 200.981068][T14642] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 201.001123][T14603] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.004423][T14603] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.006789][T14603] bridge_slave_0: entered allmulticast mode [ 201.009449][T14603] bridge_slave_0: entered promiscuous mode [ 201.017707][T14603] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.019982][T14603] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.022341][T14603] bridge_slave_1: entered allmulticast mode [ 201.026317][T14603] bridge_slave_1: entered promiscuous mode [ 201.082345][T14603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.087506][T14603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.138201][T14603] team0: Port device team_slave_0 added [ 201.141170][T14660] block device autoloading is deprecated and will be removed. [ 201.143283][T14603] team0: Port device team_slave_1 added [ 201.151062][T14667] netlink: 'syz.5.2560': attribute type 1 has an invalid length. [ 201.157774][T14667] binder: BINDER_SET_CONTEXT_MGR already set [ 201.159699][T14667] binder: 14666:14667 ioctl 4018620d 200000000280 returned -16 [ 201.202087][T14603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.206842][T14603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.216555][T14603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.250785][T14603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.253317][T14603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.262201][T14603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.329458][T14603] hsr_slave_0: entered promiscuous mode [ 201.332529][T14603] hsr_slave_1: entered promiscuous mode [ 201.338168][T14603] debugfs: 'hsr0' already exists in 'hsr' [ 201.340171][T14603] Cannot create hsr debugfs directory [ 201.535136][T14603] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.538680][T14603] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.632260][T14719] misc userio: Begin command sent, but we're already running [ 201.638304][ T40] audit: type=1400 audit(1757323329.777:73429): avc: denied { map } for pid=14718 comm="syz.3.2575" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 201.658249][T14603] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.662007][T14603] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.673074][ T40] audit: type=1400 audit(1757323329.807:73430): avc: denied { associate } for pid=14718 comm="syz.3.2575" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 201.736453][T14603] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.739745][T14603] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.828019][T14603] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.832763][T14603] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.174155][ T5331] Bluetooth: hci1: command tx timeout [ 202.199992][T14603] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 202.224411][T14603] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 202.246741][T14603] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 202.253387][T14603] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 202.281342][T14730] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2576'. [ 202.302775][T14603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.316574][T14603] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.321382][T13381] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.323724][T13381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.332777][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.335851][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.343101][T14733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2578'. [ 202.497001][T14603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.511632][T14744] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2581'. [ 202.523330][T14603] veth0_vlan: entered promiscuous mode [ 202.530977][T14603] veth1_vlan: entered promiscuous mode [ 202.555243][T14603] veth0_macvtap: entered promiscuous mode [ 202.559510][T14603] veth1_macvtap: entered promiscuous mode [ 202.569801][T14603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.578216][T14603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.588434][T13123] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.590841][T14767] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2589'. [ 202.595527][T14767] trusted_key: encrypted_key: insufficient parameters specified [ 202.595566][T13123] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.600759][T13123] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.603448][T13123] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.662804][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.667010][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.696664][ T1207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.699982][ T1207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.724133][ T5331] Bluetooth: hci4: command tx timeout [ 202.748394][T14787] mkiss: ax0: crc mode is auto. [ 202.772832][ T40] audit: type=1400 audit(1757323330.907:73431): avc: denied { execute } for pid=14791 comm="syz.5.2597" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=66703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 202.781455][ T40] audit: type=1326 audit(1757323330.927:73432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14789 comm="syz.4.2596" exe="/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f8973f85ba7 code=0x0 [ 202.830715][ T40] audit: type=1400 audit(1757323330.967:73433): avc: denied { remount } for pid=14796 comm="syz.0.2599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 202.834563][T14797] geneve2: entered promiscuous mode [ 202.838755][T14797] geneve2: entered allmulticast mode [ 202.855726][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 202.861942][T14798] bridge0: entered promiscuous mode [ 202.863678][T14798] macsec1: entered promiscuous mode [ 202.868316][T14798] bridge0: port 3(macsec1) entered blocking state [ 202.871188][T14798] bridge0: port 3(macsec1) entered disabled state [ 202.875330][T14798] macsec1: entered allmulticast mode [ 202.878067][T14798] bridge0: entered allmulticast mode [ 202.885359][T14798] macsec1: left allmulticast mode [ 202.886949][T14798] bridge0: left allmulticast mode [ 202.889461][T14798] bridge0: left promiscuous mode [ 202.903623][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 202.908212][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 202.913932][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 202.949072][T14813] tipc: Started in network mode [ 202.950758][T14813] tipc: Node identity ac14140f, cluster identity 4711 [ 202.953142][T14813] tipc: New replicast peer: 255.255.255.255 [ 202.956704][T14813] tipc: Enabled bearer , priority 10 [ 203.624543][ T40] audit: type=1400 audit(1757323331.767:73434): avc: denied { create } for pid=14820 comm="syz.4.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 203.632874][ T40] audit: type=1400 audit(1757323331.767:73435): avc: denied { write } for pid=14820 comm="syz.4.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 203.786735][T14833] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.789755][T14833] IPv6: NLM_F_CREATE should be set when creating new route [ 203.792810][T14833] IPv6: NLM_F_CREATE should be set when creating new route [ 203.795950][T14833] IPv6: NLM_F_CREATE should be set when creating new route [ 203.804351][T14833] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.840721][T14840] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14840 comm=syz.4.2610 [ 203.858085][ T40] audit: type=1400 audit(1757323331.997:73436): avc: denied { write } for pid=14841 comm="syz.5.2611" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 203.860043][T14840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2610'. [ 203.866932][ T40] audit: type=1400 audit(1757323331.997:73437): avc: denied { ioctl } for pid=14841 comm="syz.5.2611" path="/dev/input/mouse0" dev="devtmpfs" ino=946 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 203.947783][T14849] fuse: Unknown parameter '}roZ_id' [ 204.013855][T14854] netlink: 'syz.0.2615': attribute type 10 has an invalid length. [ 204.031388][T14854] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 204.034334][T14854] netlink: 'syz.0.2615': attribute type 10 has an invalid length. [ 204.044577][T14854] netlink: 'syz.0.2615': attribute type 10 has an invalid length. [ 204.047139][T14854] netlink: 'syz.0.2615': attribute type 10 has an invalid length. [ 204.049712][T14854] netlink: 'syz.0.2615': attribute type 10 has an invalid length. [ 204.052254][T14854] netlink: 'syz.0.2615': attribute type 10 has an invalid length. [ 204.055270][T14854] netlink: 'syz.0.2615': attribute type 10 has an invalid length. [ 204.057789][T14854] netlink: 'syz.0.2615': attribute type 10 has an invalid length. [ 204.060268][T14854] netlink: 'syz.0.2615': attribute type 10 has an invalid length. [ 204.066485][T14854] netlink: 'syz.0.2615': attribute type 10 has an invalid length. [ 204.074237][ T839] tipc: Node number set to 2886997007 [ 204.175154][T14864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2619'. [ 204.194162][ T10] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 204.244146][ T5331] Bluetooth: hci1: command tx timeout [ 204.261656][T14864] team0 (unregistering): Port device team_slave_0 removed [ 204.266290][T14864] team0 (unregistering): Port device team_slave_1 removed [ 204.346840][ T10] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 204.349563][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.354639][ T10] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 204.357690][ T10] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 204.360819][ T10] usb 9-1: Manufacturer: syz [ 204.363713][ T10] usb 9-1: config 0 descriptor?? [ 204.383316][T14868] mkiss: ax0: crc mode is auto. [ 204.414109][ T10] rc_core: IR keymap rc-hauppauge not found [ 204.416009][ T10] Registered IR keymap rc-empty [ 204.418304][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 204.422504][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input34 [ 204.569870][ T40] audit: type=1400 audit(1757323332.707:73438): avc: denied { module_load } for pid=14848 comm="syz.4.2613" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=66737 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 204.586784][T14849] Invalid ELF header magic: != ELF [ 204.804454][ T5331] Bluetooth: hci4: command tx timeout [ 205.053855][T14885] binder: 14884:14885 ioctl 4018620d 0 returned -22 [ 205.074733][ T6021] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 205.089973][T14885] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.095135][T14885] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 205.109606][ T6036] usb 9-1: USB disconnect, device number 7 [ 205.135157][T14887] sysfs: Unknown parameter 'usrquota' [ 205.227627][ T6021] usb 10-1: config 2 has an invalid interface number: 229 but max is 3 [ 205.231276][ T6021] usb 10-1: config 2 has an invalid interface number: 75 but max is 3 [ 205.235122][ T6021] usb 10-1: config 2 has an invalid interface number: 148 but max is 3 [ 205.238670][ T6021] usb 10-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 205.242484][ T6021] usb 10-1: config 2 has an invalid interface number: 76 but max is 3 [ 205.247880][ T6021] usb 10-1: config 2 has no interface number 0 [ 205.250627][ T6021] usb 10-1: config 2 has no interface number 1 [ 205.253399][ T6021] usb 10-1: config 2 has no interface number 2 [ 205.256292][ T6021] usb 10-1: config 2 has no interface number 3 [ 205.258962][ T6021] usb 10-1: config 2 interface 229 altsetting 5 endpoint 0xC has an invalid bInterval 80, changing to 10 [ 205.263638][ T6021] usb 10-1: config 2 interface 75 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 205.268488][ T6021] usb 10-1: config 2 interface 75 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 205.273045][ T6021] usb 10-1: config 2 interface 75 altsetting 2 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 205.279089][ T6021] usb 10-1: config 2 interface 148 altsetting 11 has a duplicate endpoint with address 0xA, skipping [ 205.283620][ T6021] usb 10-1: config 2 interface 148 altsetting 11 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 205.288388][ T6021] usb 10-1: config 2 interface 148 altsetting 11 has a duplicate endpoint with address 0xC, skipping [ 205.292909][ T6021] usb 10-1: config 2 interface 148 altsetting 11 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 205.297973][ T6021] usb 10-1: config 2 interface 148 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 205.302513][ T6021] usb 10-1: config 2 interface 148 altsetting 11 bulk endpoint 0x3 has invalid maxpacket 8 [ 205.306819][ T6021] usb 10-1: config 2 interface 148 altsetting 11 has an endpoint descriptor with address 0x4C, changing to 0xC [ 205.311736][ T6021] usb 10-1: config 2 interface 148 altsetting 11 has a duplicate endpoint with address 0xC, skipping [ 205.316384][ T6021] usb 10-1: config 2 interface 148 altsetting 11 has a duplicate endpoint with address 0x9, skipping [ 205.320878][ T6021] usb 10-1: config 2 interface 148 altsetting 11 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 205.326440][ T6021] usb 10-1: config 2 interface 76 altsetting 205 has an invalid descriptor for endpoint zero, skipping [ 205.331079][ T6021] usb 10-1: config 2 interface 76 altsetting 205 has an invalid descriptor for endpoint zero, skipping [ 205.335787][ T6021] usb 10-1: config 2 interface 76 altsetting 205 has a duplicate endpoint with address 0x3, skipping [ 205.340906][ T6021] usb 10-1: config 2 interface 76 altsetting 205 has an invalid descriptor for endpoint zero, skipping [ 205.344571][ T6021] usb 10-1: config 2 interface 76 altsetting 205 has a duplicate endpoint with address 0x3, skipping [ 205.347975][ T6021] usb 10-1: config 2 interface 76 altsetting 205 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 205.352141][ T6021] usb 10-1: config 2 interface 76 altsetting 205 has a duplicate endpoint with address 0xE, skipping [ 205.356911][ T6021] usb 10-1: config 2 interface 76 altsetting 205 endpoint 0x2 has invalid wMaxPacketSize 0 [ 205.361101][ T6021] usb 10-1: config 2 interface 76 altsetting 205 has an invalid descriptor for endpoint zero, skipping [ 205.367342][ T6021] usb 10-1: config 2 interface 76 altsetting 205 has an invalid descriptor for endpoint zero, skipping [ 205.372042][ T6021] usb 10-1: config 2 interface 229 has no altsetting 0 [ 205.374992][ T6021] usb 10-1: config 2 interface 75 has no altsetting 0 [ 205.377983][ T6021] usb 10-1: config 2 interface 148 has no altsetting 0 [ 205.380944][ T6021] usb 10-1: config 2 interface 76 has no altsetting 0 [ 205.387143][ T6021] usb 10-1: Dual-Role OTG device on HNP port [ 205.390513][ T6021] usb 10-1: New USB device found, idVendor=413c, idProduct=81a9, bcdDevice=c5.85 [ 205.394462][ T6021] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.397933][ T6021] usb 10-1: Product: ဌ [ 205.399849][ T6021] usb 10-1: Manufacturer: ᎏ넀帎㺖队㥺铽寘굲陱홞x궼䕪輨꬗耤มὋ퇚৉ࡰժ㨉ꍕᢝ暉Ⲃ론㹝떵揉궀甆㬛㤟覶 [ 205.406155][ T6021] usb 10-1: SerialNumber: syz [ 205.428511][T14902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.432689][T14902] batadv_slave_0: entered promiscuous mode [ 205.434774][T14902] batadv_slave_0: entered allmulticast mode [ 205.760327][T14916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2636'. [ 205.763193][T14916] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 205.774174][ T1207] ------------[ cut here ]------------ [ 205.776451][ T1207] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 205.780415][ T1207] WARNING: CPU: 1 PID: 1207 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x1ed/0x230 [ 205.783785][ T1207] Modules linked in: [ 205.785833][ T1207] CPU: 1 UID: 0 PID: 1207 Comm: kworker/u32:10 Not tainted syzkaller #0 PREEMPT(full) [ 205.791862][ T1207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 205.795916][ T1207] Workqueue: bond0 bond_mii_monitor [ 205.797843][ T1207] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 205.800422][ T1207] Code: 05 ff ff ff e8 14 a5 43 f8 c6 05 ce e4 1b 07 01 90 ba 48 00 00 00 48 c7 c6 a0 00 e6 8c 48 c7 c7 40 00 e6 8c e8 14 48 02 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 54 9d ab 90 e8 1e 05 aa f8 e9 [ 205.808825][ T1207] RSP: 0018:ffffc900065bf9f0 EFLAGS: 00010286 [ 205.812152][ T1207] RAX: 0000000000000000 RBX: ffff888021d7c000 RCX: ffffffff817a3388 [ 205.817443][ T1207] RDX: ffff888029b38000 RSI: ffffffff817a3395 RDI: 0000000000000001 [ 205.821482][ T1207] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 205.825572][ T1207] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff92000cb7f48 [ 205.829469][ T1207] R13: ffff888021d7ccc1 R14: ffffffff8c5aa760 R15: ffffffff89b10e30 [ 205.833912][ T1207] FS: 0000000000000000(0000) GS:ffff8880d67b5000(0000) knlGS:0000000000000000 [ 205.837404][ T1207] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.840842][ T1207] CR2: 00007f6244baff98 CR3: 000000002cb9f000 CR4: 0000000000352ef0 [ 205.846202][ T1207] DR0: 000000000000000a DR1: 0000000000000002 DR2: 0000000000000003 [ 205.849981][ T1207] DR3: 0000000080000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 205.853871][ T1207] Call Trace: [ 205.855657][ T1207] [ 205.857175][ T1207] ethtool_op_get_link+0x1d/0x70 [ 205.859721][ T1207] bond_check_dev_link+0x3f9/0x710 [ 205.862289][ T1207] ? __pfx_bond_check_dev_link+0x10/0x10 [ 205.865558][ T1207] bond_mii_monitor+0x3c0/0x2dc0 [ 205.868193][ T1207] ? __pfx_bond_mii_monitor+0x10/0x10 [ 205.870866][ T1207] ? rcu_is_watching+0x12/0xc0 [ 205.873320][ T1207] process_one_work+0x9cc/0x1b70 [ 205.875899][ T1207] ? __pfx_process_one_work+0x10/0x10 [ 205.878614][ T1207] ? assign_work+0x1a0/0x250 [ 205.880990][ T1207] worker_thread+0x6c8/0xf10 [ 205.884418][ T1207] ? __kthread_parkme+0x19e/0x250 [ 205.886782][ T1207] ? __pfx_worker_thread+0x10/0x10 [ 205.889180][ T1207] kthread+0x3c2/0x780 [ 205.891219][ T1207] ? __pfx_kthread+0x10/0x10 [ 205.894881][ T1207] ? rcu_is_watching+0x12/0xc0 [ 205.898245][ T1207] ? __pfx_kthread+0x10/0x10 [ 205.900663][ T1207] ret_from_fork+0x5d4/0x6f0 [ 205.906343][ T1207] ? __pfx_kthread+0x10/0x10 [ 205.909388][ T1207] ret_from_fork_asm+0x1a/0x30 [ 205.912091][ T1207] [ 205.914773][ T1207] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 205.919099][ T1207] CPU: 1 UID: 0 PID: 1207 Comm: kworker/u32:10 Not tainted syzkaller #0 PREEMPT(full) [ 205.923578][ T1207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 205.929594][ T1207] Workqueue: bond0 bond_mii_monitor [ 205.932292][ T1207] Call Trace: [ 205.933983][ T1207] [ 205.935414][ T1207] dump_stack_lvl+0x3d/0x1f0 [ 205.937630][ T1207] vpanic+0x6e8/0x7a0 [ 205.939523][ T1207] ? __pfx_vpanic+0x10/0x10 [ 205.941731][ T1207] ? __linkwatch_sync_dev+0x1ed/0x230 [ 205.944395][ T1207] panic+0xca/0xd0 [ 205.946255][ T1207] ? __pfx_panic+0x10/0x10 [ 205.949722][ T1207] ? check_panic_on_warn+0x1f/0xb0 [ 205.952818][ T1207] check_panic_on_warn+0xab/0xb0 [ 205.956335][ T1207] __warn+0xf6/0x3c0 [ 205.958255][ T1207] ? __linkwatch_sync_dev+0x1ed/0x230 [ 205.960947][ T1207] report_bug+0x3c3/0x580 [ 205.963396][ T1207] ? __linkwatch_sync_dev+0x1ed/0x230 [ 205.966152][ T1207] handle_bug+0x184/0x210 [ 205.968581][ T1207] exc_invalid_op+0x17/0x50 [ 205.971010][ T1207] asm_exc_invalid_op+0x1a/0x20 [ 205.973441][ T1207] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 205.976433][ T1207] Code: 05 ff ff ff e8 14 a5 43 f8 c6 05 ce e4 1b 07 01 90 ba 48 00 00 00 48 c7 c6 a0 00 e6 8c 48 c7 c7 40 00 e6 8c e8 14 48 02 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 54 9d ab 90 e8 1e 05 aa f8 e9 [ 205.985871][ T1207] RSP: 0018:ffffc900065bf9f0 EFLAGS: 00010286 [ 205.988855][ T1207] RAX: 0000000000000000 RBX: ffff888021d7c000 RCX: ffffffff817a3388 [ 205.992837][ T1207] RDX: ffff888029b38000 RSI: ffffffff817a3395 RDI: 0000000000000001 [ 205.996916][ T1207] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 206.000987][ T1207] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff92000cb7f48 [ 206.005022][ T1207] R13: ffff888021d7ccc1 R14: ffffffff8c5aa760 R15: ffffffff89b10e30 [ 206.009046][ T1207] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 206.011910][ T1207] ? __warn_printk+0x198/0x350 [ 206.014460][ T1207] ? __warn_printk+0x1a5/0x350 [ 206.016966][ T1207] ethtool_op_get_link+0x1d/0x70 [ 206.019516][ T1207] bond_check_dev_link+0x3f9/0x710 [ 206.022171][ T1207] ? __pfx_bond_check_dev_link+0x10/0x10 [ 206.025050][ T1207] bond_mii_monitor+0x3c0/0x2dc0 [ 206.027670][ T1207] ? __pfx_bond_mii_monitor+0x10/0x10 [ 206.030398][ T1207] ? rcu_is_watching+0x12/0xc0 [ 206.032859][ T1207] process_one_work+0x9cc/0x1b70 [ 206.040850][ T1207] ? __pfx_process_one_work+0x10/0x10 [ 206.050624][ T1207] ? assign_work+0x1a0/0x250 [ 206.058033][ T1207] worker_thread+0x6c8/0xf10 [ 206.060073][ T1207] ? __kthread_parkme+0x19e/0x250 [ 206.062139][ T1207] ? __pfx_worker_thread+0x10/0x10 [ 206.064296][ T1207] kthread+0x3c2/0x780 [ 206.066066][ T1207] ? __pfx_kthread+0x10/0x10 [ 206.068143][ T1207] ? rcu_is_watching+0x12/0xc0 [ 206.070169][ T1207] ? __pfx_kthread+0x10/0x10 [ 206.072158][ T1207] ret_from_fork+0x5d4/0x6f0 [ 206.074119][ T1207] ? __pfx_kthread+0x10/0x10 [ 206.076146][ T1207] ret_from_fork_asm+0x1a/0x30 [ 206.078247][ T1207] [ 206.080458][ T1207] Kernel Offset: disabled [ 206.082335][ T1207] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:17:58 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffff8e5c1260 RCX=ffffc90003b47b0c RDX=0000000000000001 RSI=ffffffff8de2cda8 RDI=ffffffff8c162d80 RBP=ffff88801ca8e800 RSP=ffffc90003b47af0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffffff8260dc3e R13=0000000000000202 R14=ffff888026708000 R15=0000000000000002 RIP=ffffffff8b9453d5 RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4b81887880 ffffffff 00c00000 GS =0000 ffff8880d66b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff525d9f98 CR3=00000000256d2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000029 Opmask02=00000000ffffffff Opmask03=0000000001041000 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6ffc7cd8 00007ffe6ffc7cd8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6ffc7eb0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558e71f5cb00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558e71dcfa10 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b811f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73001605121f0073 431e161e035c1810 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33706f6f6c2f6b63 6f6c622f6c617574 7269762f73656369 7665642f7379732f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 347570632f302f71 6d2f33706f6f6c2f 6b636f6c622f6c61 75747269762f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000000000 0000000000003475 70632f302f716d2f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558e72006450 0000558e71f62588 0000000000000041 000000000000302e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66736c2c346d612c 312c30722c38396b 2c34312c342c322c 312c30652d304341 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0b5c074f5b010303 3103430b5f173918 091b420934687e63 6e6973246b620615 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f7f7f7f7f7b777f 797f7f3f7f7f7f7f 7f7f5f7f3d7f7f7f 6f7b737e7f7f3657 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030323030307042 3430307333303030 623a003330323632 3d00343032363200 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030322c30305300 312c306c2c2c3030 2c00002c302c322c 310030302d300000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85646a35 RDI=ffffffff9b1150a0 RBP=ffffffff9b115060 RSP=ffffc900065bf360 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000037 R14=ffffffff9b115060 R15=ffffffff856469d0 RIP=ffffffff85646a5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6244baff98 CR3=000000002cb9f000 CR4=00352ef0 DR0=000000000000000a DR1=0000000000000002 DR2=0000000000000003 DR3=0000000080000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00307265646e6962 2f73667265646e69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff301d7716 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff301d7716 00007fff301d771c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0c9412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0c9412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0c9412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0c9412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0c9412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0c9412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0c95974a8 00007ff0c95974a0 00007ff0c9597498 00007ff0c9597470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0ca0fd100 00007ff0c9597460 00007ff0c9590004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0c95974b8 00007ff0c95974b0 00007ff0c95974a8 00007ff0c95974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffea000117ad80 RCX=ffffffff822db0ed RDX=ffff88802b004880 RSI=ffffffff822db108 RDI=0000000000000007 RBP=ffffffff8df58470 RSP=ffffc90003687588 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffea000117ad80 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81bb8f36 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055555aacb500 ffffffff 00c00000 GS =0000 ffff8880d68b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6244bb0d58 CR3=000000004cf3f000 CR4=00352ef0 DR0=0000000000000002 DR1=0000000000000009 DR2=0000000000000105 DR3=1000000100000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffed1003b31893 RBX=ffffed1003b31894 RCX=ffffffff822da771 RDX=ffffed1003b31894 RSI=0000000000000004 RDI=ffff88801d98c49c RBP=ffffed1003b31893 RSP=ffffc90003757748 R8 =0000000000000000 R9 =ffffed1003b31893 R10=ffff88801d98c49f R11=0000000000000000 R12=ffff88801d98c450 R13=0000000000000001 R14=0000000000000001 R15=ffff88801d98c49c RIP=ffffffff8221e8ac RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbd7c0f7d60 CR3=0000000024dcf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd7b5976c3 00007fbd7b5976c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe40bec3e0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556e43f652 000055556e43eb00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556e4486c4 000055556e447ed0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6601ffffffffffff fffff9081fd00302 04001fcc030e0400 1fc8031c04001fc4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0140a48080100003 8004010000020806 060168e200080003 e00300100003d003 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00100003c0030210 0003b0037010000c 900305b3da08001f e8031404001fe403 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1004001fe0030404 001fdc031804001f d80300716601ffff fffffffffffff908 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1fd0030204001fcc 030e04001fc8031c 04001fc403200400 1fc00307fffe0400 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000