last executing test programs: 2m30.534147944s ago: executing program 1 (id=266): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) socket$inet6(0xa, 0x5, 0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(&(0x7f0000000080)='sockfs\x00', 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0xfffffe59, {0xd000, 0xeeee8000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa710c3e20fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362eb5bf86fce896dbc2a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca433d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eeae43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b5511ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x5) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x19d001, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000240)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e20, @rand_addr=0x64010101}, {0x2, 0x4e21, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x10001, 0x61e}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 2m30.394419635s ago: executing program 1 (id=267): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x1c, 0x0, 0xe2b, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0xfffffd41}, 0x1, 0x0, 0x0, 0x4040084}, 0x20000000) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0xb, 0x7, 0x34325241, 0x3, 0x10001, 0xbb, 0x4, 0x2, 0x0, 0x6, 0x2, 0x4}}) sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 2m30.294363737s ago: executing program 1 (id=268): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000100)={0x0, &(0x7f0000000040)=""/153}) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000140)) r1 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000400)="1b", 0x1, 0xfffffffffffffffe) mknod(&(0x7f0000000000)='./file0\x00', 0x80, 0x4) keyctl$read(0xb, r1, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) 2m30.293802158s ago: executing program 1 (id=269): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) 2m30.244243054s ago: executing program 1 (id=270): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0xfe}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x0, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m30.243864352s ago: executing program 1 (id=271): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) write$rfkill(r0, &(0x7f0000000100)={0x11, 0x2, 0x3, 0x1}, 0x8) read$msr(0xffffffffffffffff, &(0x7f0000000380)=""/224, 0xe0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r2, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)=""/79, 0x4f}], 0x1, &(0x7f0000000740)=""/210, 0xd2}, 0x3}], 0x1, 0x10, 0x0) sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)='[', 0x101d0}], 0x1}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000040)=@arm64={0x7b, 0x0, 0x9, '\x00', 0x6}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0x14, &(0x7f0000000080)=0xd, 0x4) recvmmsg(r6, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x20, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) r8 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000182000/0x3000)=nil, &(0x7f0000f70000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8}) r9 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r10, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000580), &(0x7f0000000500)=0x4) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESOCT=r11, @ANYBLOB="010000000000ada1c800000000001100000008000300dafb438d89b2dec665743c2ebe2dd20c00e1961651cca698556793253cb514663f71239a449ca94c2ce2da9ba1102695d02e67e1", @ANYRES64=r3, @ANYRES16=r7], 0x24}}, 0x0) 2m14.504117726s ago: executing program 32 (id=271): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) write$rfkill(r0, &(0x7f0000000100)={0x11, 0x2, 0x3, 0x1}, 0x8) read$msr(0xffffffffffffffff, &(0x7f0000000380)=""/224, 0xe0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r2, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)=""/79, 0x4f}], 0x1, &(0x7f0000000740)=""/210, 0xd2}, 0x3}], 0x1, 0x10, 0x0) sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)='[', 0x101d0}], 0x1}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000040)=@arm64={0x7b, 0x0, 0x9, '\x00', 0x6}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0x14, &(0x7f0000000080)=0xd, 0x4) recvmmsg(r6, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x20, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) r8 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000182000/0x3000)=nil, &(0x7f0000f70000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8}) r9 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r10, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000580), &(0x7f0000000500)=0x4) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESOCT=r11, @ANYBLOB="010000000000ada1c800000000001100000008000300dafb438d89b2dec665743c2ebe2dd20c00e1961651cca698556793253cb514663f71239a449ca94c2ce2da9ba1102695d02e67e1", @ANYRES64=r3, @ANYRES16=r7], 0x24}}, 0x0) 1m17.823373809s ago: executing program 4 (id=1095): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x22a0b}}, 0x20}, 0x1, 0x300}, 0x0) 1m17.822547257s ago: executing program 4 (id=1097): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(&(0x7f0000000080)='sockfs\x00', 0x1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0xfffffe59, {0xd000, 0xeeee8000}}, "cb31455c9e9d288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97af85a08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d03ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e50100cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x5) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x19d001, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000240)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e20, @rand_addr=0x64010101}, {0x2, 0x4e21, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x10001, 0x61e}) ioctl$KVM_RUN(r4, 0xae80, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 1m17.683345808s ago: executing program 4 (id=1100): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x10}}], 0x10}, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000001c0)={&(0x7f0000000780)={{@host, 0x4}, {@local, 0x5}, 0x400, "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"}, 0x418, 0x1}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x40, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\x02\x00\x00\x00\x00\x00\x00\x00\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00?\xef\xf3n\xa4n', 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) unshare(0x2a000600) r4 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) fchmod(r2, 0x33) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x6, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {}, 0x1}) r7 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r7, 0x8}], 0x1, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x1, 0x0, 0x1, 0x0, 0x1000000) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r8, 0x0, 0x0) 1m17.042769421s ago: executing program 4 (id=1105): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3}]}, {0x0, [0x30, 0x0, 0x5f]}}, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x6, '\x00', r5, r0, 0x2, 0x0, 0x5140, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r7, 0x80045530, &(0x7f0000000440)=""/110) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0xb, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback=r6, r8, 0x24, 0x64, 0x0, @void, @void, @void, @value=r9}, 0x20) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="184000000000f3ff0000000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x9, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r8, 0x40106614, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3}]}, {0x0, [0x30, 0x0, 0x5f]}}, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) (async) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x6, '\x00', r5, r0, 0x2, 0x0, 0x5140, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000540), 0x1, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r7, 0x80045530, &(0x7f0000000440)=""/110) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0xb}, 0x8) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback=r6, r8, 0x24, 0x64, 0x0, @void, @void, @void, @value=r9}, 0x20) (async) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) (async) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) (async) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1c) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="184000000000f3ff0000000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x9, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r8, 0x40106614, &(0x7f0000000080)) (async) 1m16.943019042s ago: executing program 4 (id=1106): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x22a0b}}, 0x20}, 0x1, 0x3000000}, 0x0) 1m16.223455254s ago: executing program 4 (id=1113): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9c06) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) read$char_usb(r0, &(0x7f0000000100)=""/204, 0xcc) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCL_SETSEL(r2, 0x5452, &(0x7f0000000100)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000080010000060a01040000000000000000010000000900020073797a310000000038000480340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000000900010073797a30"], 0x1f4}}, 0x4002) timer_create(0x2, &(0x7f0000000000)={0x0, 0x3e, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000080)) write$char_usb(r0, 0x0, 0x0) 1m16.198990811s ago: executing program 33 (id=1113): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9c06) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) read$char_usb(r0, &(0x7f0000000100)=""/204, 0xcc) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCL_SETSEL(r2, 0x5452, &(0x7f0000000100)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000080010000060a01040000000000000000010000000900020073797a310000000038000480340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000000900010073797a30"], 0x1f4}}, 0x4002) timer_create(0x2, &(0x7f0000000000)={0x0, 0x3e, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000080)) write$char_usb(r0, 0x0, 0x0) 54.68712649s ago: executing program 0 (id=1413): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) 54.612979486s ago: executing program 0 (id=1415): r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) socket(0x10, 0x3, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 54.61221953s ago: executing program 0 (id=1417): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0x1, 0x7, 0x0, '\x00', {0x7ff, 0x1, 0x4, 0x6, r2, r3, 0x8000, '\x00', 0x1, 0x4, 0xb4e7, 0x2, {0x8003, 0x8}, {0x6, 0x3}, {0x0, 0x7}, {0x8, 0xa00}, 0x8000, 0xa, 0x0, 0x6}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x30, r5, 0x73976972ba3f4b55, 0x0, 0x0, {0x8}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}]}]}, 0x30}}, 0x0) r6 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000100), 0x3ff, 0x2000) r7 = syz_io_uring_setup(0xeec, &(0x7f0000000000), &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r10, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0x0, 0x2, 0x0, 0x0}) r11 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r11, 0xb704, 0x0) ioctl$KDFONTOP_SET(r11, 0x4b72, &(0x7f0000000140)={0x0, 0x1, 0x1b, 0xb, 0x45, &(0x7f00000003c0)="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"}) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x567, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r6) 53.142982754s ago: executing program 0 (id=1428): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, 0x0, 0x0, 0xc805d, 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000006380)={0x2020}, 0x2020) move_mount(r4, &(0x7f0000000280)='./file0/file0\x00', r5, &(0x7f0000000440)='./file0\x00', 0x130) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000003040)={&(0x7f0000002d40), 0x6e, 0x0}, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x43, 0x0, &(0x7f0000000fc0)=[@request_death={0x400c630e, 0x2}], 0xffffffffffffffee, 0x0, 0x0}) 53.029765813s ago: executing program 0 (id=1430): r0 = socket(0x1d, 0x3, 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x10001}, 0x1c) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet(0x2, 0x4, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r7}, 0x10) close_range(r4, 0xffffffffffffffff, 0x3e00000000000000) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="00000040ffffffffffffaaaaaaaaaabb08004500452c00000000002f90"], 0xfdef) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000540)={r8, 0x1, 0xfff, 0x401, 0x5, 0x1, 0x2, 0x3da, {r8, @in6={{0xa, 0x4e24, 0x0, @mcast1, 0x3}}, 0x8, 0xc7e, 0x8, 0x0, 0xc0a}}, &(0x7f0000000600)=0xb0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r8, @in6={{0xa, 0x4e23, 0xfff, @local, 0x6d4f}}}, &(0x7f0000000080)=0x84) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r9, 0xc0485619, &(0x7f00000001c0)={0x80000001, 0x0, "dcc6f634e1403f2b003cd3306565209259a6937336eab171"}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x64, r11, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x65, 0x7, 0x0, 0xfffffffffffffe9b) 52.963486048s ago: executing program 0 (id=1431): r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmdt(r1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001800)) shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) (async) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) (async) shmdt(r1) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000180), 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) (async) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001800)) (async) 52.95103343s ago: executing program 34 (id=1431): r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmdt(r1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001800)) shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) (async) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) (async) shmdt(r1) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000180), 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) (async) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001800)) (async) 38.210952197s ago: executing program 3 (id=226): r0 = socket(0x1000000000000010, 0x80802, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x30, r1, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}]}, 0x30}}, 0x400c881) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {0x400}, @from_mac, @broadcast, @broadcast}, @a_msdu}}]}, 0x4c}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RVERSION(r8, &(0x7f0000000540)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.u'}, 0x15) write$qrtrtun(r8, &(0x7f0000000300)="ca", 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r8, &(0x7f0000000200)="e83a494cadeaf6a6e48d7ec09cc0d3e656ceb3796d3f75cb625841d3fde12febdd66570e2b06623cd7afa62bf4291005612c76a2f65cbac50c28ecff810f14b5ead851890861bce113a36b63595935d466237546438e05e5dda7bff595c60757d38e44905b91af82eebe65ef30c7dd7e", &(0x7f0000000400)=""/200}, 0x20) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@delchain={0x4a4, 0x5f, 0xf31, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {}, {0x5, 0x2}, {0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x3, 0xf9}}, @TCA_RATE={0x6, 0x5, {0x7}}, @filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x6, 0x3}}, @TCA_U32_CLASSID={0x8, 0x1, {0x5, 0x2}}, @TCA_U32_LINK={0x8, 0x3, 0x3}]}}, @filter_kind_options=@f_flow={{0x9}, {0x438, 0x2, [@TCA_FLOW_POLICE={0x414, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8001, 0xfffff000, 0x3, 0x0, 0x5, 0xf8, 0x0, 0x7ff, 0x6, 0x4, 0x50, 0x5, 0x0, 0x2, 0xbae, 0x8, 0xffffffff, 0x2, 0x0, 0x1, 0x1, 0x5, 0x0, 0x4, 0x2, 0x0, 0xffffffff, 0x7, 0x4, 0x9fd, 0x8, 0x6, 0x26, 0x4, 0x8, 0x6, 0x2, 0x1, 0x4, 0x4a000000, 0x8, 0x6f02, 0x8000000, 0x10000, 0x638, 0x81, 0x3, 0x1000, 0x0, 0x3, 0xd, 0x7c, 0xb6, 0x5, 0x0, 0xbfdf, 0x8, 0x2, 0x7, 0x14ec, 0x3, 0x5, 0x7, 0x6, 0x38000, 0x6797f0d1, 0x6, 0xe, 0x0, 0x7, 0x32, 0xfffffffa, 0x3, 0x8, 0x7, 0xfffffffb, 0xb64a, 0x5, 0x800, 0x6, 0x1000000, 0x4, 0x56740a3, 0x100, 0x9, 0x8, 0xf, 0x4, 0x9, 0xfffffffb, 0xf, 0x7, 0x9e01, 0x8ab, 0x9877, 0xf, 0x1, 0xfffffffb, 0xfffffffe, 0x8, 0x1b479356, 0x80000000, 0xb028, 0x8001, 0x5, 0x3, 0x8, 0x5, 0x12, 0x0, 0xffffffff, 0x7, 0x9, 0x100, 0x3, 0x9, 0x1, 0x8, 0xffffffff, 0x80000000, 0x3, 0x1, 0x1, 0xfffffff7, 0x7fffffff, 0x572, 0x80000001, 0x1, 0xa, 0x5, 0xa, 0x1, 0xb, 0x4, 0xc, 0x40, 0xa, 0xfffffffb, 0x9, 0x101, 0x9, 0x7, 0x7f, 0xc, 0xf22, 0x1, 0x200, 0xa, 0x7, 0x8, 0x1ff, 0x8000, 0x7, 0xc, 0x81, 0x3a8, 0x3, 0x8, 0x4, 0x0, 0xb, 0x8, 0x6, 0x1ff, 0x74a, 0x0, 0x9, 0x0, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xfffff000, 0x202, 0x7, 0x3, 0x9, 0x30, 0x0, 0x4, 0xef, 0x3, 0x7, 0x4, 0x5, 0x6, 0x6d5, 0x0, 0x3, 0x6, 0x0, 0x0, 0x9, 0x8, 0x2, 0x2, 0x1, 0xe, 0x0, 0x1, 0x5, 0x4, 0x3, 0xaf2e, 0xa0, 0x7ff, 0x5, 0xfffffff9, 0x2, 0xffff, 0x9d, 0x1, 0x4f, 0x5, 0x4, 0x4, 0x7, 0xc0000000, 0xddf, 0x9, 0x4, 0xf61, 0x7, 0x4, 0x7, 0x6, 0x81, 0x15db, 0x5, 0x1, 0x0, 0x2, 0x9, 0x47, 0x3, 0x101, 0x9, 0x2, 0x5, 0x2, 0x10001, 0x9, 0x9, 0xa66, 0x2, 0xffffffff, 0x2, 0x101, 0x7, 0x5, 0x5, 0x1, 0x1ff, 0x0, 0x7fffffff]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x60e3}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffffa}, @TCA_FLOW_MASK={0x8, 0x6, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x104b5}]}}]}, 0x4a4}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000101000000000080000000000000", @ANYRES32=r2], 0x20}}, 0x10) 31.292415176s ago: executing program 3 (id=226): r0 = socket(0x1000000000000010, 0x80802, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x30, r1, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}]}, 0x30}}, 0x400c881) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {0x400}, @from_mac, @broadcast, @broadcast}, @a_msdu}}]}, 0x4c}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RVERSION(r8, &(0x7f0000000540)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.u'}, 0x15) write$qrtrtun(r8, &(0x7f0000000300)="ca", 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r8, &(0x7f0000000200)="e83a494cadeaf6a6e48d7ec09cc0d3e656ceb3796d3f75cb625841d3fde12febdd66570e2b06623cd7afa62bf4291005612c76a2f65cbac50c28ecff810f14b5ead851890861bce113a36b63595935d466237546438e05e5dda7bff595c60757d38e44905b91af82eebe65ef30c7dd7e", &(0x7f0000000400)=""/200}, 0x20) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@delchain={0x4a4, 0x5f, 0xf31, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {}, {0x5, 0x2}, {0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x3, 0xf9}}, @TCA_RATE={0x6, 0x5, {0x7}}, @filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x6, 0x3}}, @TCA_U32_CLASSID={0x8, 0x1, {0x5, 0x2}}, @TCA_U32_LINK={0x8, 0x3, 0x3}]}}, @filter_kind_options=@f_flow={{0x9}, {0x438, 0x2, [@TCA_FLOW_POLICE={0x414, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8001, 0xfffff000, 0x3, 0x0, 0x5, 0xf8, 0x0, 0x7ff, 0x6, 0x4, 0x50, 0x5, 0x0, 0x2, 0xbae, 0x8, 0xffffffff, 0x2, 0x0, 0x1, 0x1, 0x5, 0x0, 0x4, 0x2, 0x0, 0xffffffff, 0x7, 0x4, 0x9fd, 0x8, 0x6, 0x26, 0x4, 0x8, 0x6, 0x2, 0x1, 0x4, 0x4a000000, 0x8, 0x6f02, 0x8000000, 0x10000, 0x638, 0x81, 0x3, 0x1000, 0x0, 0x3, 0xd, 0x7c, 0xb6, 0x5, 0x0, 0xbfdf, 0x8, 0x2, 0x7, 0x14ec, 0x3, 0x5, 0x7, 0x6, 0x38000, 0x6797f0d1, 0x6, 0xe, 0x0, 0x7, 0x32, 0xfffffffa, 0x3, 0x8, 0x7, 0xfffffffb, 0xb64a, 0x5, 0x800, 0x6, 0x1000000, 0x4, 0x56740a3, 0x100, 0x9, 0x8, 0xf, 0x4, 0x9, 0xfffffffb, 0xf, 0x7, 0x9e01, 0x8ab, 0x9877, 0xf, 0x1, 0xfffffffb, 0xfffffffe, 0x8, 0x1b479356, 0x80000000, 0xb028, 0x8001, 0x5, 0x3, 0x8, 0x5, 0x12, 0x0, 0xffffffff, 0x7, 0x9, 0x100, 0x3, 0x9, 0x1, 0x8, 0xffffffff, 0x80000000, 0x3, 0x1, 0x1, 0xfffffff7, 0x7fffffff, 0x572, 0x80000001, 0x1, 0xa, 0x5, 0xa, 0x1, 0xb, 0x4, 0xc, 0x40, 0xa, 0xfffffffb, 0x9, 0x101, 0x9, 0x7, 0x7f, 0xc, 0xf22, 0x1, 0x200, 0xa, 0x7, 0x8, 0x1ff, 0x8000, 0x7, 0xc, 0x81, 0x3a8, 0x3, 0x8, 0x4, 0x0, 0xb, 0x8, 0x6, 0x1ff, 0x74a, 0x0, 0x9, 0x0, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xfffff000, 0x202, 0x7, 0x3, 0x9, 0x30, 0x0, 0x4, 0xef, 0x3, 0x7, 0x4, 0x5, 0x6, 0x6d5, 0x0, 0x3, 0x6, 0x0, 0x0, 0x9, 0x8, 0x2, 0x2, 0x1, 0xe, 0x0, 0x1, 0x5, 0x4, 0x3, 0xaf2e, 0xa0, 0x7ff, 0x5, 0xfffffff9, 0x2, 0xffff, 0x9d, 0x1, 0x4f, 0x5, 0x4, 0x4, 0x7, 0xc0000000, 0xddf, 0x9, 0x4, 0xf61, 0x7, 0x4, 0x7, 0x6, 0x81, 0x15db, 0x5, 0x1, 0x0, 0x2, 0x9, 0x47, 0x3, 0x101, 0x9, 0x2, 0x5, 0x2, 0x10001, 0x9, 0x9, 0xa66, 0x2, 0xffffffff, 0x2, 0x101, 0x7, 0x5, 0x5, 0x1, 0x1ff, 0x0, 0x7fffffff]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x60e3}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffffa}, @TCA_FLOW_MASK={0x8, 0x6, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x104b5}]}}]}, 0x4a4}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000101000000000080000000000000", @ANYRES32=r2], 0x20}}, 0x10) 24.390803865s ago: executing program 3 (id=226): r0 = socket(0x1000000000000010, 0x80802, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x30, r1, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}]}, 0x30}}, 0x400c881) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {0x400}, @from_mac, @broadcast, @broadcast}, @a_msdu}}]}, 0x4c}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RVERSION(r8, &(0x7f0000000540)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.u'}, 0x15) write$qrtrtun(r8, &(0x7f0000000300)="ca", 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r8, &(0x7f0000000200)="e83a494cadeaf6a6e48d7ec09cc0d3e656ceb3796d3f75cb625841d3fde12febdd66570e2b06623cd7afa62bf4291005612c76a2f65cbac50c28ecff810f14b5ead851890861bce113a36b63595935d466237546438e05e5dda7bff595c60757d38e44905b91af82eebe65ef30c7dd7e", &(0x7f0000000400)=""/200}, 0x20) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@delchain={0x4a4, 0x5f, 0xf31, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {}, {0x5, 0x2}, {0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x3, 0xf9}}, @TCA_RATE={0x6, 0x5, {0x7}}, @filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x6, 0x3}}, @TCA_U32_CLASSID={0x8, 0x1, {0x5, 0x2}}, @TCA_U32_LINK={0x8, 0x3, 0x3}]}}, @filter_kind_options=@f_flow={{0x9}, {0x438, 0x2, [@TCA_FLOW_POLICE={0x414, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8001, 0xfffff000, 0x3, 0x0, 0x5, 0xf8, 0x0, 0x7ff, 0x6, 0x4, 0x50, 0x5, 0x0, 0x2, 0xbae, 0x8, 0xffffffff, 0x2, 0x0, 0x1, 0x1, 0x5, 0x0, 0x4, 0x2, 0x0, 0xffffffff, 0x7, 0x4, 0x9fd, 0x8, 0x6, 0x26, 0x4, 0x8, 0x6, 0x2, 0x1, 0x4, 0x4a000000, 0x8, 0x6f02, 0x8000000, 0x10000, 0x638, 0x81, 0x3, 0x1000, 0x0, 0x3, 0xd, 0x7c, 0xb6, 0x5, 0x0, 0xbfdf, 0x8, 0x2, 0x7, 0x14ec, 0x3, 0x5, 0x7, 0x6, 0x38000, 0x6797f0d1, 0x6, 0xe, 0x0, 0x7, 0x32, 0xfffffffa, 0x3, 0x8, 0x7, 0xfffffffb, 0xb64a, 0x5, 0x800, 0x6, 0x1000000, 0x4, 0x56740a3, 0x100, 0x9, 0x8, 0xf, 0x4, 0x9, 0xfffffffb, 0xf, 0x7, 0x9e01, 0x8ab, 0x9877, 0xf, 0x1, 0xfffffffb, 0xfffffffe, 0x8, 0x1b479356, 0x80000000, 0xb028, 0x8001, 0x5, 0x3, 0x8, 0x5, 0x12, 0x0, 0xffffffff, 0x7, 0x9, 0x100, 0x3, 0x9, 0x1, 0x8, 0xffffffff, 0x80000000, 0x3, 0x1, 0x1, 0xfffffff7, 0x7fffffff, 0x572, 0x80000001, 0x1, 0xa, 0x5, 0xa, 0x1, 0xb, 0x4, 0xc, 0x40, 0xa, 0xfffffffb, 0x9, 0x101, 0x9, 0x7, 0x7f, 0xc, 0xf22, 0x1, 0x200, 0xa, 0x7, 0x8, 0x1ff, 0x8000, 0x7, 0xc, 0x81, 0x3a8, 0x3, 0x8, 0x4, 0x0, 0xb, 0x8, 0x6, 0x1ff, 0x74a, 0x0, 0x9, 0x0, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xfffff000, 0x202, 0x7, 0x3, 0x9, 0x30, 0x0, 0x4, 0xef, 0x3, 0x7, 0x4, 0x5, 0x6, 0x6d5, 0x0, 0x3, 0x6, 0x0, 0x0, 0x9, 0x8, 0x2, 0x2, 0x1, 0xe, 0x0, 0x1, 0x5, 0x4, 0x3, 0xaf2e, 0xa0, 0x7ff, 0x5, 0xfffffff9, 0x2, 0xffff, 0x9d, 0x1, 0x4f, 0x5, 0x4, 0x4, 0x7, 0xc0000000, 0xddf, 0x9, 0x4, 0xf61, 0x7, 0x4, 0x7, 0x6, 0x81, 0x15db, 0x5, 0x1, 0x0, 0x2, 0x9, 0x47, 0x3, 0x101, 0x9, 0x2, 0x5, 0x2, 0x10001, 0x9, 0x9, 0xa66, 0x2, 0xffffffff, 0x2, 0x101, 0x7, 0x5, 0x5, 0x1, 0x1ff, 0x0, 0x7fffffff]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x60e3}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffffa}, @TCA_FLOW_MASK={0x8, 0x6, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x104b5}]}}]}, 0x4a4}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000101000000000080000000000000", @ANYRES32=r2], 0x20}}, 0x10) 17.701083509s ago: executing program 3 (id=226): r0 = socket(0x1000000000000010, 0x80802, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x30, r1, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}]}, 0x30}}, 0x400c881) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {0x400}, @from_mac, @broadcast, @broadcast}, @a_msdu}}]}, 0x4c}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RVERSION(r8, &(0x7f0000000540)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.u'}, 0x15) write$qrtrtun(r8, &(0x7f0000000300)="ca", 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r8, &(0x7f0000000200)="e83a494cadeaf6a6e48d7ec09cc0d3e656ceb3796d3f75cb625841d3fde12febdd66570e2b06623cd7afa62bf4291005612c76a2f65cbac50c28ecff810f14b5ead851890861bce113a36b63595935d466237546438e05e5dda7bff595c60757d38e44905b91af82eebe65ef30c7dd7e", &(0x7f0000000400)=""/200}, 0x20) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@delchain={0x4a4, 0x5f, 0xf31, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {}, {0x5, 0x2}, {0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x3, 0xf9}}, @TCA_RATE={0x6, 0x5, {0x7}}, @filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x6, 0x3}}, @TCA_U32_CLASSID={0x8, 0x1, {0x5, 0x2}}, @TCA_U32_LINK={0x8, 0x3, 0x3}]}}, @filter_kind_options=@f_flow={{0x9}, {0x438, 0x2, [@TCA_FLOW_POLICE={0x414, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8001, 0xfffff000, 0x3, 0x0, 0x5, 0xf8, 0x0, 0x7ff, 0x6, 0x4, 0x50, 0x5, 0x0, 0x2, 0xbae, 0x8, 0xffffffff, 0x2, 0x0, 0x1, 0x1, 0x5, 0x0, 0x4, 0x2, 0x0, 0xffffffff, 0x7, 0x4, 0x9fd, 0x8, 0x6, 0x26, 0x4, 0x8, 0x6, 0x2, 0x1, 0x4, 0x4a000000, 0x8, 0x6f02, 0x8000000, 0x10000, 0x638, 0x81, 0x3, 0x1000, 0x0, 0x3, 0xd, 0x7c, 0xb6, 0x5, 0x0, 0xbfdf, 0x8, 0x2, 0x7, 0x14ec, 0x3, 0x5, 0x7, 0x6, 0x38000, 0x6797f0d1, 0x6, 0xe, 0x0, 0x7, 0x32, 0xfffffffa, 0x3, 0x8, 0x7, 0xfffffffb, 0xb64a, 0x5, 0x800, 0x6, 0x1000000, 0x4, 0x56740a3, 0x100, 0x9, 0x8, 0xf, 0x4, 0x9, 0xfffffffb, 0xf, 0x7, 0x9e01, 0x8ab, 0x9877, 0xf, 0x1, 0xfffffffb, 0xfffffffe, 0x8, 0x1b479356, 0x80000000, 0xb028, 0x8001, 0x5, 0x3, 0x8, 0x5, 0x12, 0x0, 0xffffffff, 0x7, 0x9, 0x100, 0x3, 0x9, 0x1, 0x8, 0xffffffff, 0x80000000, 0x3, 0x1, 0x1, 0xfffffff7, 0x7fffffff, 0x572, 0x80000001, 0x1, 0xa, 0x5, 0xa, 0x1, 0xb, 0x4, 0xc, 0x40, 0xa, 0xfffffffb, 0x9, 0x101, 0x9, 0x7, 0x7f, 0xc, 0xf22, 0x1, 0x200, 0xa, 0x7, 0x8, 0x1ff, 0x8000, 0x7, 0xc, 0x81, 0x3a8, 0x3, 0x8, 0x4, 0x0, 0xb, 0x8, 0x6, 0x1ff, 0x74a, 0x0, 0x9, 0x0, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xfffff000, 0x202, 0x7, 0x3, 0x9, 0x30, 0x0, 0x4, 0xef, 0x3, 0x7, 0x4, 0x5, 0x6, 0x6d5, 0x0, 0x3, 0x6, 0x0, 0x0, 0x9, 0x8, 0x2, 0x2, 0x1, 0xe, 0x0, 0x1, 0x5, 0x4, 0x3, 0xaf2e, 0xa0, 0x7ff, 0x5, 0xfffffff9, 0x2, 0xffff, 0x9d, 0x1, 0x4f, 0x5, 0x4, 0x4, 0x7, 0xc0000000, 0xddf, 0x9, 0x4, 0xf61, 0x7, 0x4, 0x7, 0x6, 0x81, 0x15db, 0x5, 0x1, 0x0, 0x2, 0x9, 0x47, 0x3, 0x101, 0x9, 0x2, 0x5, 0x2, 0x10001, 0x9, 0x9, 0xa66, 0x2, 0xffffffff, 0x2, 0x101, 0x7, 0x5, 0x5, 0x1, 0x1ff, 0x0, 0x7fffffff]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x60e3}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffffa}, @TCA_FLOW_MASK={0x8, 0x6, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x104b5}]}}]}, 0x4a4}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000101000000000080000000000000", @ANYRES32=r2], 0x20}}, 0x10) 10.521766654s ago: executing program 3 (id=226): r0 = socket(0x1000000000000010, 0x80802, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x30, r1, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}]}, 0x30}}, 0x400c881) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {0x400}, @from_mac, @broadcast, @broadcast}, @a_msdu}}]}, 0x4c}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RVERSION(r8, &(0x7f0000000540)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.u'}, 0x15) write$qrtrtun(r8, &(0x7f0000000300)="ca", 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r8, &(0x7f0000000200)="e83a494cadeaf6a6e48d7ec09cc0d3e656ceb3796d3f75cb625841d3fde12febdd66570e2b06623cd7afa62bf4291005612c76a2f65cbac50c28ecff810f14b5ead851890861bce113a36b63595935d466237546438e05e5dda7bff595c60757d38e44905b91af82eebe65ef30c7dd7e", &(0x7f0000000400)=""/200}, 0x20) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@delchain={0x4a4, 0x5f, 0xf31, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {}, {0x5, 0x2}, {0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x3, 0xf9}}, @TCA_RATE={0x6, 0x5, {0x7}}, @filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x6, 0x3}}, @TCA_U32_CLASSID={0x8, 0x1, {0x5, 0x2}}, @TCA_U32_LINK={0x8, 0x3, 0x3}]}}, @filter_kind_options=@f_flow={{0x9}, {0x438, 0x2, [@TCA_FLOW_POLICE={0x414, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8001, 0xfffff000, 0x3, 0x0, 0x5, 0xf8, 0x0, 0x7ff, 0x6, 0x4, 0x50, 0x5, 0x0, 0x2, 0xbae, 0x8, 0xffffffff, 0x2, 0x0, 0x1, 0x1, 0x5, 0x0, 0x4, 0x2, 0x0, 0xffffffff, 0x7, 0x4, 0x9fd, 0x8, 0x6, 0x26, 0x4, 0x8, 0x6, 0x2, 0x1, 0x4, 0x4a000000, 0x8, 0x6f02, 0x8000000, 0x10000, 0x638, 0x81, 0x3, 0x1000, 0x0, 0x3, 0xd, 0x7c, 0xb6, 0x5, 0x0, 0xbfdf, 0x8, 0x2, 0x7, 0x14ec, 0x3, 0x5, 0x7, 0x6, 0x38000, 0x6797f0d1, 0x6, 0xe, 0x0, 0x7, 0x32, 0xfffffffa, 0x3, 0x8, 0x7, 0xfffffffb, 0xb64a, 0x5, 0x800, 0x6, 0x1000000, 0x4, 0x56740a3, 0x100, 0x9, 0x8, 0xf, 0x4, 0x9, 0xfffffffb, 0xf, 0x7, 0x9e01, 0x8ab, 0x9877, 0xf, 0x1, 0xfffffffb, 0xfffffffe, 0x8, 0x1b479356, 0x80000000, 0xb028, 0x8001, 0x5, 0x3, 0x8, 0x5, 0x12, 0x0, 0xffffffff, 0x7, 0x9, 0x100, 0x3, 0x9, 0x1, 0x8, 0xffffffff, 0x80000000, 0x3, 0x1, 0x1, 0xfffffff7, 0x7fffffff, 0x572, 0x80000001, 0x1, 0xa, 0x5, 0xa, 0x1, 0xb, 0x4, 0xc, 0x40, 0xa, 0xfffffffb, 0x9, 0x101, 0x9, 0x7, 0x7f, 0xc, 0xf22, 0x1, 0x200, 0xa, 0x7, 0x8, 0x1ff, 0x8000, 0x7, 0xc, 0x81, 0x3a8, 0x3, 0x8, 0x4, 0x0, 0xb, 0x8, 0x6, 0x1ff, 0x74a, 0x0, 0x9, 0x0, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xfffff000, 0x202, 0x7, 0x3, 0x9, 0x30, 0x0, 0x4, 0xef, 0x3, 0x7, 0x4, 0x5, 0x6, 0x6d5, 0x0, 0x3, 0x6, 0x0, 0x0, 0x9, 0x8, 0x2, 0x2, 0x1, 0xe, 0x0, 0x1, 0x5, 0x4, 0x3, 0xaf2e, 0xa0, 0x7ff, 0x5, 0xfffffff9, 0x2, 0xffff, 0x9d, 0x1, 0x4f, 0x5, 0x4, 0x4, 0x7, 0xc0000000, 0xddf, 0x9, 0x4, 0xf61, 0x7, 0x4, 0x7, 0x6, 0x81, 0x15db, 0x5, 0x1, 0x0, 0x2, 0x9, 0x47, 0x3, 0x101, 0x9, 0x2, 0x5, 0x2, 0x10001, 0x9, 0x9, 0xa66, 0x2, 0xffffffff, 0x2, 0x101, 0x7, 0x5, 0x5, 0x1, 0x1ff, 0x0, 0x7fffffff]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x60e3}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffffa}, @TCA_FLOW_MASK={0x8, 0x6, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x104b5}]}}]}, 0x4a4}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000101000000000080000000000000", @ANYRES32=r2], 0x20}}, 0x10) 4.112329179s ago: executing program 5 (id=1897): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='00'], 0x30}, 0x1, 0x0, 0x0, 0x18004}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x20, 0x0) 3.349407347s ago: executing program 3 (id=226): r0 = socket(0x1000000000000010, 0x80802, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x30, r1, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}]}, 0x30}}, 0x400c881) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {0x400}, @from_mac, @broadcast, @broadcast}, @a_msdu}}]}, 0x4c}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RVERSION(r8, &(0x7f0000000540)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.u'}, 0x15) write$qrtrtun(r8, &(0x7f0000000300)="ca", 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r8, &(0x7f0000000200)="e83a494cadeaf6a6e48d7ec09cc0d3e656ceb3796d3f75cb625841d3fde12febdd66570e2b06623cd7afa62bf4291005612c76a2f65cbac50c28ecff810f14b5ead851890861bce113a36b63595935d466237546438e05e5dda7bff595c60757d38e44905b91af82eebe65ef30c7dd7e", &(0x7f0000000400)=""/200}, 0x20) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@delchain={0x4a4, 0x5f, 0xf31, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {}, {0x5, 0x2}, {0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x3, 0xf9}}, @TCA_RATE={0x6, 0x5, {0x7}}, @filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x6, 0x3}}, @TCA_U32_CLASSID={0x8, 0x1, {0x5, 0x2}}, @TCA_U32_LINK={0x8, 0x3, 0x3}]}}, @filter_kind_options=@f_flow={{0x9}, {0x438, 0x2, [@TCA_FLOW_POLICE={0x414, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8001, 0xfffff000, 0x3, 0x0, 0x5, 0xf8, 0x0, 0x7ff, 0x6, 0x4, 0x50, 0x5, 0x0, 0x2, 0xbae, 0x8, 0xffffffff, 0x2, 0x0, 0x1, 0x1, 0x5, 0x0, 0x4, 0x2, 0x0, 0xffffffff, 0x7, 0x4, 0x9fd, 0x8, 0x6, 0x26, 0x4, 0x8, 0x6, 0x2, 0x1, 0x4, 0x4a000000, 0x8, 0x6f02, 0x8000000, 0x10000, 0x638, 0x81, 0x3, 0x1000, 0x0, 0x3, 0xd, 0x7c, 0xb6, 0x5, 0x0, 0xbfdf, 0x8, 0x2, 0x7, 0x14ec, 0x3, 0x5, 0x7, 0x6, 0x38000, 0x6797f0d1, 0x6, 0xe, 0x0, 0x7, 0x32, 0xfffffffa, 0x3, 0x8, 0x7, 0xfffffffb, 0xb64a, 0x5, 0x800, 0x6, 0x1000000, 0x4, 0x56740a3, 0x100, 0x9, 0x8, 0xf, 0x4, 0x9, 0xfffffffb, 0xf, 0x7, 0x9e01, 0x8ab, 0x9877, 0xf, 0x1, 0xfffffffb, 0xfffffffe, 0x8, 0x1b479356, 0x80000000, 0xb028, 0x8001, 0x5, 0x3, 0x8, 0x5, 0x12, 0x0, 0xffffffff, 0x7, 0x9, 0x100, 0x3, 0x9, 0x1, 0x8, 0xffffffff, 0x80000000, 0x3, 0x1, 0x1, 0xfffffff7, 0x7fffffff, 0x572, 0x80000001, 0x1, 0xa, 0x5, 0xa, 0x1, 0xb, 0x4, 0xc, 0x40, 0xa, 0xfffffffb, 0x9, 0x101, 0x9, 0x7, 0x7f, 0xc, 0xf22, 0x1, 0x200, 0xa, 0x7, 0x8, 0x1ff, 0x8000, 0x7, 0xc, 0x81, 0x3a8, 0x3, 0x8, 0x4, 0x0, 0xb, 0x8, 0x6, 0x1ff, 0x74a, 0x0, 0x9, 0x0, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xfffff000, 0x202, 0x7, 0x3, 0x9, 0x30, 0x0, 0x4, 0xef, 0x3, 0x7, 0x4, 0x5, 0x6, 0x6d5, 0x0, 0x3, 0x6, 0x0, 0x0, 0x9, 0x8, 0x2, 0x2, 0x1, 0xe, 0x0, 0x1, 0x5, 0x4, 0x3, 0xaf2e, 0xa0, 0x7ff, 0x5, 0xfffffff9, 0x2, 0xffff, 0x9d, 0x1, 0x4f, 0x5, 0x4, 0x4, 0x7, 0xc0000000, 0xddf, 0x9, 0x4, 0xf61, 0x7, 0x4, 0x7, 0x6, 0x81, 0x15db, 0x5, 0x1, 0x0, 0x2, 0x9, 0x47, 0x3, 0x101, 0x9, 0x2, 0x5, 0x2, 0x10001, 0x9, 0x9, 0xa66, 0x2, 0xffffffff, 0x2, 0x101, 0x7, 0x5, 0x5, 0x1, 0x1ff, 0x0, 0x7fffffff]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x60e3}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffffa}, @TCA_FLOW_MASK={0x8, 0x6, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x104b5}]}}]}, 0x4a4}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000101000000000080000000000000", @ANYRES32=r2], 0x20}}, 0x10) 1.251854469s ago: executing program 5 (id=1899): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="d31a00ff", @ANYRES16=r1, @ANYBLOB="ad4300000000000000000d000000"], 0x14}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x10, 0x2f, 0x10}, 0x10}], 0x1}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@remote, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in, 0x0, 0x32}, @in=@local, {0x3, 0x6}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_setup(0xad5, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x38) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r9, 0x5607, 0x2) ioctl$KDSETMODE(r8, 0x4b3a, 0x1) ioctl$TCXONC(r8, 0x4b3a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r7, &(0x7f0000001080)=[{0x4e, 0xfe, 0x0, 0xfd, @tick=0x800, {0x80}, {0xe}, @raw8}], 0x1c) 1.162778233s ago: executing program 6 (id=1901): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x7, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000300)={0x1f, 0x9, 0x9, "26b6d3858230eb50ce674e738c2fd82f60db18603874b481283186b7238a94"}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="120183008000", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x34, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0xc, 0x2}]}, 0x34}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x2c, r10, 0xb97534d5fe9704cf, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, r8, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x5b, 0xac, "44cda2c36f99655ba7516874d502be573ff01ee119582ca7f92318931444d8174b4857ac545cf94dae25a9e903c1f46a0e4716306e7f3207668fd659099beb63a27d3df0529e3d3d789c71f268b5725c25122e486b4169"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x539}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x61}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x5}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmmsg(r6, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000440)="2f76314b122baa103e411e9fcdb24e8b351887f70bad1642c7d6eae069d1ff8753b2721c786bac2fa2548e1422808863bfc09bed4eaf426fcfe744ab0d2a30e85c9a93805ffd8ba9009ee2334f05ca669ee2206798de0f10cdf325aa891d8291158254a934227c5c183acb71817a18a88840baf2307a03d4552341f6de9e92ffe29905481764", 0x86}, {&(0x7f0000000540)="864793ebacf17d745151b060c8dce124647d585430e10d807a0e04d7e74dd0f80f7b580d4dcd5848e69fe804691e66818a5a52c1d53434705f9267fa9a606d99396ceb437c0df7e351e5cba88773d9c2cc9853340a1eec78a068008050322fc75a4736e2aec197d5935ea0ea4183b2886a23cfa31bd96d9711e6", 0x7a}, {&(0x7f0000000680)="6fe7a707b6c19ba7f23c1111c07f8d11c7a09b4f77a2d0e4b9f125952ffcd1de2f4a12b01a6dac25c88e478eca18d5ae07dbed1718bf406ce8189eece4f89fa62a397728c3e7b263f6f4ce4401451ba0732291d4cd8987faaed280645177ab6580d38066588152db86f6671841abe925405e767067736ba593abbdcd19d23e78d1af28b11c8ea503477c02a48e70565e7b55d7f9b8", 0x95}, {&(0x7f00000005c0)="834b870f3db452dd06cc34c2a2bad1f1a1d47636ec6b2aea16953c3a79208189f885a13c285fd07209ed37c5c0dc40f88441197e403f4ef789d7f81549f92180c032011afa523c4783ff1e7ae353365a4d26251fd11c33e97ea77b3d3fc94f5c8b18ff9544c0c73846fc441ec803bee2b71ac280c705aeb2e0207f", 0x7b}, {&(0x7f00000007c0)="6224c4c0c6b59a079f2d33a4c9ed6f9d59a46a3b2210e5fd641f52bb79eae07b48c4860003fb0ff34a5c662a6681705976e3cc36ca5d49bc0955065363afae1482b2ea266aff901370", 0x49}, {&(0x7f0000000840)="63b0749b3bd685e3eb085b5d24c2a848a96a47c2525262d9a9da34b9179555e2b2048489f4f408526c58ba678280e8a1976d5c2ab9d6eca3179624ed6ee2087bf3b92d0755c3e1212ea776d69362eed4c05a6d2cd75482b756cae0218da6472fd008acfb9a993281c55c2e59dad4465e1078bc9e7ad2f766db1fc757a37360035d3fa834a612fe348453ca5a1a1929a7639bd338841868cea03424a90480ba77b7f7954c171db4d3ff9e7d4929e59ec7869e", 0xb2}, {&(0x7f0000000900)="f316287954e7c2a00e1f795aec07d1c56f1ba712ac81438f1307f5706241a4a87790e2dc8b11664e964f1a16c121c2290a5c5b93629cfa34cd0eee95895113754f506448b1c0f952783dae5b197049bb74eefb382a7f1e2537674c01da524480f5c8ab791a042d3c530cbaf8c3d8f3e81be1a96873f20a671f7042facbc4c5f5dd0ca73f51515a0eacba5fc95b550e8eafcabae818db408ee1049a50c042b402039662857f1e213b13356e3b18dbbf075e4beacf9776c946cd04bea0377c17a02d45ef4edf2e6dd2ab836f0f2c0762a1c14efa0a698f1db61f", 0xd9}], 0x7, &(0x7f0000000a80)=[{0x48, 0x11, 0x401, "21e65d690656a52925ecde048da04e941b16f6b1301716d610a2561028fe4ebb33d3d68c467ab1825d3530a6ba9436b929e5178fa3e62852"}, {0x28, 0x112, 0x8, "257054b678fef59eb602aea84450cc3dca57"}, {0x38, 0x10e, 0x1, "63327bc9520c5e8c10f52c6913e410b66fab3299bcc9e962d26e7f35b5b1d2321f4b58"}, {0x100, 0x0, 0x7, "31eabb5f18694c8e0f86a5d93e21b76e1ce4a578673c66cd49d7c46a243ba8c213d704880d5aaf14001d0f776fd7c078d634ba782c4c063f94684ac45c7e8b87e7816ae1dd43e4e45bded982da2e116938f4c404518d5e9cb0b7c224c1700ca980b1480946b1edba4c1add6c56c0388d6565902e57feffbf9abcf12a1de465914a8c2cbb989b7f26f6a6b7d6322ef9acdd43a8e4ae2df4db4ae7fe5d2bb1af089168b33f81d9220291e34f49e4f4847ac3104f6e1138a91a2c435638d88c3b50bb26718c6719d7b4b976c1438d3a9067c43feb2657acc50b43f4c1eca2a28ed48923fb6d214d49d1424f"}, {0xd0, 0x110, 0x0, "28428a2747613316c132524e4d937b15212279cc0d75cdc667ff9ba82648c79c682b14c9af4741729b0975bcdf60157d998af9265c88c5815fd3ecc25b377fc12a4bae730f5f399651846e8b95439c09dc735332619b6f0e1997f19f54a2b175c24af213a068b60fb8accfdeaa8287eab74d1950bf039963555ea81a1676327ae47002484d7e6c6fe5e00459eb7c34df20e8fbf3d00c4bddd4aeb49531be93963a8c4596addb1eaef5fbf999ea1e7a75ccdff5f7df47e1ac5384a5"}, {0xf0, 0x1, 0x80, "8bc75772512959e6da88b599d5ffe879a99f3bbd11237c17e9b7607d45c8cc8b74ecc8dc01f425d90378b2312b994bf9bbdd801ca8cf956b2e6bc3383cfb9dfc018c8063e13b968ffa0dafe4a8e95460f1a0d44478bea249f41417c130cfbc1d1217333d66007cd338bc1d4e70ba886aa4a516d2c7c83ded2573c6f40d0a6c3f342c916ca98c459a5230aa806425e29258e2a9609fc607bc48f2c6a53deec0b3d85ba7a678442ee1d32d3166d7b819cff37685f6a6a315a7c2927961f0554710f4136a5ec5298ee5093b5c463702c5aab87624746ca4afd9b36aa7d07d5eb1"}], 0x368}}, {{&(0x7f0000000e00)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x7f, @empty}, 0x1, 0x3, 0x1, 0x2}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000e80)="1428c63164c8faaf46e2633dc1edad7bb868c713c30052518bb280439aded8ccd2dde012fff7187a60b2e586498b69af35aaa6ada738746e1b365e6a0a1975bb79c9558eba3a022f83857bdb001bf514cad722773228ec1f76c690a6716b28aab7ee775922b8462553297f1bd875d53e96b2f63d60525e00c294bad1c8c558f8", 0x80}], 0x1, &(0x7f00000010c0)=[{0xc8, 0x110, 0x6, "b3bb871ad8f750cdc00bca49ff42fa161ef98c6bfdeb42d507b992404d8ca0be781bc970c8002dbafca9500f55ead055973c5cfc3ce4b00aaf41b9b527bdda3118cdc00225b2575f3621295c0c9ab665a211c1e558dd705632e4f997399ac61eaad94de4f14229e83682894b86e65c69b7726cb7bd90e0ddab773397b43c0dd0324d9854c3dd5c62225c90e9d227faeb9d0c5c71b36261fee27bc71d6aa77823e1c0851f578353b40f4dc40017855b55c46b"}, {0x108, 0x113, 0x7, "d1cf346af2921e5bb48766b13752ebe6e402c0a3cda6690092b4246c5801ef9828f8bb3fbd65e388380b1f28b72375911761bb167672d7cb1716d779f7e2580e727863ba1c254a9928cfadb64f7b3631f42c9c636ed1cd9e4e165d5049944386674eb3b49e899e3282cfb20a12f5df05064299aa2bb750f60235aaba0096fc80bad64ef53729953ea69c8376116c89ac7cccfbc9f2cca61baacc2a9b8d18f4578d72716f7f7204376b4f84136bd9a78c119b8a1b66bace614f4f0852771c8bc4a8cd1d5f2f622ae2dc31fc858d842a9d3f84b96c821bdc590cce71cb16bc1e388c9761549cc9b869025f12bd0dc3674892ca4eb80c7053"}, {0x28, 0x88, 0x9, "33be6151964881fd7f4b3b2b77e98f11d1f63625"}], 0x1f8}}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000012c0)="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", 0x1000}, {&(0x7f0000000fc0)="2a6e03534465706273fd4252e2a1cd5348d896c0653e622a9d6d5ddf18686978df3512092dc573ffcbfbf052e5c34e3bf4eed7105cf69d824ae09736961d1b8b2b9190707f8253e43e1b39c54bffa6bd69cb2f0fc14094ace0cc33beddd36b3daec45e15ca17e5066f3863e510fb12f8e5a79e50b08fe00d4ad5c7d7628acef4514e45e0718b41f66b9009492966ab79e01a41f7ce1ee91bcb4e1d3613637897c7f05020d075a5cbdd", 0xa9}, {&(0x7f00000022c0)="be048c06c671057b8ca056e2192715d693dfe8fe163efe00d95a9877d113a3e07457733c1d125e234c914e1bd5061a96cd94b81036e428e225084b9e7a94f51bf7adc08a05f40b34f593d214b8c4d43fb808269372de64690de0585735c974e87fc70dd287447d8b73d0e24ef7fabbc15351786d9232392bb7845a8387ed9a76a98186b407fc8a5175607f9777d78ebb9cfbfaf79657694f354e4590ce8f23868fadbd0294811b738295f134f1398acf", 0xb0}, {&(0x7f0000002380)="1038554594975925defa3850af0e42866e2545d8fb7dadd63612c00bb7a575f9ee0b1de87e9b22aa3b135ebb54a4c208d63875e97cdc63666b3b7c6e5352283722fdb01bf9946636671ac7b7e9be41307cb5fe8fbbe0c807941438a42ebd85f70fb4925ab15d8794cf29af37b45247a7e1559408051ebc1e0eb4c049938c931532c113edcc2260ac44ea1b69f60ec01d16b46adff41bd98b73a3982f945fd4eec7bbb619e23664443e0317c6096c04a976f476ecee43bbbb8a60c1c844c9ae228b421dba5add6175b018be5c8c3409d49c62af005b34ad102de9f9ce72", 0xdd}, {&(0x7f0000002480)="b0a1f671fe03e53e7727fa57b9f216e2e59bd3e7b683bbd251683c6c9ec0d656e77198d45fd8f2f86432348c6d70c46025e8cf16abd2fa84c34b5717681877ba66a3374f06c1f0aca1320213f17bf4b1eedde22d457438a4f41baa955172c04e3468c9e568ff3048a4877542b953f9e5a1ed2cc0dd39281316344d8595bc297ede41131359d3c5cf77cc781db52acf7eddb753e30a403d94dfa5f1869a3f213cf82f9b7479905fb2899ebd0972f938", 0xaf}, {&(0x7f0000000f00)="020abbeb0b7b779308517d5a8658e407048bb069c1a568d26f49ee99ebdbb439c032a6828c475e6518ee59e95502bfb4f377c649db328c9e03a23c9b3cea3f9da14006ec2b7c4bb733552a20", 0x4c}, {&(0x7f0000000740)="818a9126637f4c8ac2de15", 0xb}, {&(0x7f0000002540)="39b5a5ad2b6791d6f9f73cfb3a0fc118aa55c3003df597db13071bdd24eb65cea8de2cee234830bb40ef5fedf5e0bfe932f25822face302d7d0bb0e5cec1e99e2cc2622e88c46640882479c0bdb0ed75eb484646326394b9c973843e3024ff30c3e3b6833c67fef06439de114438c630091df633c158365f060d4f84fd94d84398a423190e9006aafce137d82fc32b24be8afb9f", 0x94}, {&(0x7f0000002600)="eb79a83d60462b5d48f8746e181851ddf6cbee060d115c9a315a09a668fb9e222173963f4bf110be8a020de2", 0x2c}, {&(0x7f0000002640)="787156b9a0779d077390fb8f4693718f2d175b700d9dcd40a090365853bcf8968367eae64de7962ecfb16eab538a6d636798706666212963ea3e03cd75607eadffeff3f023f27274990e5cf56cbf8f61cbd614fc0e0204a6146b8e9fccb0ee81b0526673c9e321ed9a8759", 0x6b}], 0xa}}], 0x3, 0x4000000) 1.145189605s ago: executing program 2 (id=1903): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) r2 = io_uring_setup(0x70f8, &(0x7f00000005c0)={0x0, 0x1, 0x1, 0x3ffffffd}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) close_range(r2, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x80, 0x30, 0x1, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ctinfo={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x80000001, 0x3, 0x7, 0x80000000}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x44004) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000500)="d6"}) 979.469619ms ago: executing program 2 (id=1904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ad8000000060a0b04000000000000000001000001ac00048020000180070001006374000014000280080002400000000d08000140000000024c0001800b0001007470726f787900003c0002800800034000000014080001400000000208000140000000020800014000000001080001400000000a0800034000000004080003400000000e3c000180090001007866726d000000002c000280080001400000000c05000300010000000800044000000005080001400000bc3b08000440000000060900010073797a30000000000900020073"], 0x100}}, 0x0) 979.094112ms ago: executing program 6 (id=1905): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(&(0x7f0000000080)='sockfs\x00', 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x5) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x19d001, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000240)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e20, @rand_addr=0x64010101}, {0x2, 0x4e21, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x10001, 0x61e}) ioctl$KVM_RUN(r4, 0xae80, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 967.522739ms ago: executing program 2 (id=1906): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x7, r0, 0x1}) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x5d7}]}}]}, 0x38}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x18, &(0x7f0000000280)=@raw=[@generic={0x1, 0x3, 0x8, 0x8, 0x81}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ldst={0x2, 0x2, 0x6, 0x2, 0x9, 0x2, 0x4}, @jmp={0x5, 0x0, 0xa, 0x9, 0x2, 0x18c, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x98d}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ldst={0x3, 0x3, 0x1, 0x4, 0x9, 0x1, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xb1, &(0x7f0000000340)=""/177, 0x41100, 0x8, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000440)=[{0x5, 0x3, 0xa, 0x7}, {0x5, 0x4, 0xf, 0x5}, {0x5, 0x4, 0x10, 0x1}, {0x3, 0x1, 0x7, 0x1}, {0x2, 0x2, 0x8, 0x2}, {0x5, 0x1, 0xe}], 0x10, 0x9, @void, @value}, 0x94) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x9c, r10, 0x401, 0x70bd2a, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x80c0) (async, rerun: 64) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000580)={@initdev, 0x0}, &(0x7f00000005c0)=0x14) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000001240)={0x63c, r7, 0x1, 0x70bd6a, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x382}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r8}, {0x4}}, {{0x8, 0x1, r11}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r11}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r5}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x63c}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) (async, rerun: 64) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) (rerun: 64) r12 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) fcntl$setstatus(r12, 0x4, 0x44000) (async) syz_emit_ethernet(0xc0, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000b20000000000019078ac1e0001ac1414aa0300907803240000450000000000000800010000ac1414aaac141400867100000000000ce256b28c59881681fb520009789607671442eb000e7434954373561de584b703c80009e706d30bd224f80007cfa11cab1a00108475be675de6a70a05a0dc91e5c6000a6580a5e97612fe86001273bc2300ad9d19a30000000000000000000cc8f4697636c5250000001e62000000000000000000000000000000e2af51f828965e91c0a2ad7c29cc79b902af6bf67b0f52f3585783a32ed894c7ea1e33ff27542b5bcc"], 0x0) 862.988339ms ago: executing program 2 (id=1907): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r2, r2, 0x0, 0x7f03) (async) sendfile(r2, r2, 0x0, 0x7f03) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000018000101000000000000000002000000fc00000900000000060015000200000014001680100008800c0001801c00010000010000"], 0x38}}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000380)={"00000004", 0x3, 0x5, 0x2, 0x0, 0x0, 'c\x00', '\x00\x00\x00@', "0300", '\x00', ["8b09a907edff220aac00", "c2fed600ddff9aabeab0cbc7", "00000000005407c215ffffdd", "0000044000000000000100"]}) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000380)={"00000004", 0x3, 0x5, 0x2, 0x0, 0x0, 'c\x00', '\x00\x00\x00@', "0300", '\x00', ["8b09a907edff220aac00", "c2fed600ddff9aabeab0cbc7", "00000000005407c215ffffdd", "0000044000000000000100"]}) 862.832385ms ago: executing program 2 (id=1908): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='00'], 0x30}, 0x1, 0x0, 0x0, 0x18004}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x20, 0x0) 810.36955ms ago: executing program 6 (id=1909): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000080)=0x90e, 0x4) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x21c6, 0x4) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000040)={0x98f907, 0x4, @value=0x9}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000040)=0x1) sendto$inet(r0, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) 809.228811ms ago: executing program 6 (id=1910): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@delneigh={0x28, 0x1d, 0x2cb9fc920827cc0b, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x7000000, 0x40}, 0x0) 751.65274ms ago: executing program 6 (id=1911): socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0xfffffffc, {0x60, 0x0, 0x0, r0, {0x0, 0xb}, {0x7, 0xa}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 750.93769ms ago: executing program 6 (id=1912): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)={0x20, r6, 0x1, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x48, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f0000000440), 0x8, 0x25, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xc0, r6, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x44}, 0x8014) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000500)="d6"}) 342.629191ms ago: executing program 5 (id=1913): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x32, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) (async) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x6a841, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000140)={"dbdb3fda", 0xfff8, 0x6, 0x5, 0x0, 0x1, "ad7d30deed954ff474cb6fe6ac0a8c", "a058e865", "3f8a1592", "d6178a34", ["186d0d3815569a0016a5e81d", "3b1cbf63f92e7e4596fd09d6", "0940ee3c223637dc4c1a06a9", "ff89e045c61b8b62b3a4a751"]}) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x42, r5, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r5, 0x301, 0x70bd25, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008894}, 0x4040001) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r6}, 0x10) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcffff124e000000000000003700feff0400000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r7}, 0x10) (async) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) (async, rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (rerun: 64) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4, 0x2000, 0x7, r8, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x5}, @in6=@mcast2, 0x4e22, 0x7ff, 0x4e24, 0x8, 0x2, 0x80, 0x80, 0x8, 0x0, r8}, {0x7fffffff, 0x0, 0x2, 0x5, 0x0, 0x7ff, 0x7, 0x2d}, {0xfffffffffffffff7, 0xe40, 0xea61, 0x8}, 0x6, 0x6e6bb7, 0x2, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0xa, @in6=@local, 0x3507, 0x0, 0x3, 0x5, 0x10001, 0xfffffff7, 0x1}}, 0xe8) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b37090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f383b6c090890e0879b0a0ac6e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) (async, rerun: 32) r11 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$EBT_SO_SET_COUNTERS(r11, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000950000000000000018400000ffffffff000000000000000018100000", @ANYRES32, @ANYBLOB="20000000000000001850000000000000000000000000000018400000f8ffffff000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2, &(0x7f0000000940)={0x4, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 182.814339ms ago: executing program 5 (id=1914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ad8000000060a0b04000000000000000001000001ac00048020000180070001006374000014000280080002400000000d08000140000000024c0001800b0001007470726f787900003c0002800800034000000014080001400000000208000140000000020800014000000001080001400000000a0800034000000004080003400000000e3c000180090001007866726d000000002c000280080001400000000c05000300010000000800044000000005080001400000bc3b08000440000000060900010073797a30000000000900020073"], 0x100}}, 0x0) 182.377136ms ago: executing program 5 (id=1915): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xb) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) r4 = openat(r3, &(0x7f0000000080)='./file0/file0\x00', 0x1a840, 0x80) dup3(r4, r3, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, 0x0, 0x0}, 0x20) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000600)=""/81}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x4001) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x1, r2}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001ac0)={0x6, 0x0, [{0x5000, 0xb5, &(0x7f0000000480)=""/181}, {0x4, 0x44, &(0x7f0000000380)=""/68}, {0xffff1000, 0x43, &(0x7f0000000540)=""/67}, {0x0, 0xd2, &(0x7f00000006c0)=""/210}, {0x8080000, 0xd3, &(0x7f00000007c0)=""/211}, {0xeeee0000, 0x94, &(0x7f0000000940)=""/148}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) msgrcv(0x0, &(0x7f0000000a80)={0x0, ""/4096}, 0x1008, 0x0, 0x4800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x14031, r7, 0x76270000) socket(0x28, 0x5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, 0x0, 0x8800) 609.041µs ago: executing program 5 (id=1916): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2a3b8a099ee483db}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x7, 0x801, 0x0, 0x0, {0xa}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x6) 0s ago: executing program 2 (id=1917): timer_create(0x8, 0x0, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x101) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1000000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000280)={0x1, 0x0, 0x200}) r3 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(r4) ppoll(0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0)={[0x10000]}, 0x8) r5 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x101) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) bind$inet(r8, &(0x7f0000000000)={0x2, 0x6e24, @dev}, 0x10) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000140)=0xb0000) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000180), 0x5, 0xd02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f00000001c0)={0xfffeffff, 0x6, 0xef}) dup3(r5, r1, 0x0) syz_usb_connect(0x2, 0x507, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0x8, 0x7a, 0x32, 0x8, 0x22d9, 0x276c, 0x1aef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f5, 0x2, 0x9, 0x1, 0x60, 0x3, [{{0x9, 0x4, 0xc7, 0xe0, 0x8, 0xff, 0xff, 0x30, 0xa0, [@uac_control={{0xa, 0x24, 0x1, 0x9}, [@selector_unit={0x7, 0x24, 0x5, 0x4, 0xd, 'Z('}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x3, 0x6, [0x1, 0x2, 0x6, 0x5, 0x6, 0x9], 0xa0}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x101, 0x6, 0x6, 0x9}, @mixer_unit={0x5, 0x24, 0x4, 0x3, 0x7}]}], [{{0x9, 0x5, 0x1, 0x8, 0x8, 0xc, 0x8, 0x34, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x4}]}}, {{0x9, 0x5, 0x5, 0x10, 0x68, 0x5, 0x5, 0x8}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x4, 0x9, 0xa5, [@generic={0xa3, 0x5, "ff24692d3aa15ec9f7c6bcc38a7bd03b157579c3d0bdad23204d8884d653d2e5b1b3d7ae4528820d398812b8c03d660fefead85e370eeda1f11a1f9c4ee80441412b800cb9e9a9bf4a9b316e4ccb7063a19b3abe41b1c3071da02abf89018f538808421581f08c78764e79b83c00f76af062d375b34e06a422521b26d2d09d4bcfb636f337aa6bb55337078194a8c0d78057f6bec3d7965b97e1aca7906fade32c"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x2}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x2, 0x1, 0xec, [@generic={0x32, 0xe, "3c1918f77a60f30e640c6b8c26ea2b960158007236f2c3c073a7737f2af1bfad8e2b987c0ab53ce3866193f70014c09e"}, @generic={0xc, 0x10, "7162190cea97cce8c9f6"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x4, 0x5, 0xff, [@generic={0x2a, 0x8, "9cc03bdacc9025c55c422c28b75aabd082e225380fa4002712a8924a06454220f67c5d9bd3759e14"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x8}]}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0x8, 0x4, 0x0, [@generic={0x9c, 0x10, "69357fce3cc2f870243f0c32206d5424da43e11a600f1e46c08f5f4232275987f9cd6c35f9d0153d438feab5d0c4bb9810f458ca411c41c8deb1d69d94f322616e11f9da0239646c2ff809e384f27fe25b24e027d00b67f15ef8974561bbab2d453520cd6c71d68e7ed82e86c8710ec7fb164173214f8c57a97e5de7f2070a9b39db264b822233f8fbbe3cca80214c7948e6dbeb6ee54dde1e19"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x9}]}}, {{0x9, 0x5, 0xe, 0x14, 0x3ff, 0x2, 0xd2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x5a0a}]}}, {{0x9, 0x5, 0x6, 0x1, 0x1b39c11b70288f75, 0x4, 0x24, 0xda, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xe}, @generic={0xb8, 0x8, "3d0d7ee46345716ee818605c417febbaa976d23f35cd639fea33e9b2f7def05af217d6bfe2c5f61611d378bb155b4153e72a29e203bab9b182915a2bf3d09f3e1cd32b89eb948d0afcd778619eeb1d508f7d47a75e708d58f6daa886e9338ecab7a90cf0f9a3cf770069817b7337c03ea94d2e6319d09f9f12407a5b3d5c9fb1433a8be79805170487dcc83f12274b16d374911829768d09a00f164865aae869381b2c23a6c948eac639f1d7eeda857d4b5d502b8c09"}]}}]}}, {{0x9, 0x4, 0xf, 0x1, 0x4, 0xc5, 0x73, 0x8d, 0x38, [], [{{0x9, 0x5, 0x8, 0x2, 0x8, 0x12, 0x1, 0x8, [@generic={0x96, 0x21, "6c744697d17111b0bbd023bdca46b7b055a80ef5c8a8827be4a2744f5b6d2cd410821df9da796e98018a297f023db5e045b07df47d7ec1aaf545d29e408cba5b273d1ca02887400df161f3a4ce57ab3047945e62d1f67baaf3b59a3825f00c9241ad6f6a06f59d29439707c0e11e45a91676151394695e6e331e37709f0352854fb90149c3e5ebb8c947335111ccb3600bbc405c"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xd93}]}}, {{0x9, 0x5, 0x8b2eccd7ab095a73, 0x10, 0x3ff, 0xff, 0x15, 0x2}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x6, 0x2, 0x7, [@generic={0x5e, 0xb, "541be7bef048daea4e6ed6493577d697ab7b406b6c79f6fcf04ac6f55a3a03b72b99f49d1d65db38dedc6982b363429f6570ec1621a3a527d78aed16658a3faeb9741e750ad7f868cf0fe0375e1f9ac8411b24d135081899ab660fd4"}, @generic={0xb9, 0xf, "2c9e7cf9b24b85b08ab584dfa95736469daf3e144a5f5102d4d8dd221b8c075e2d1a112611b4dc75deb58a9fd987ac9cc8bb7c55abe27733539157e5161561f9f6695c0f9bc63fdaf6be31855d8f9365b4de8aeebffa15a555695eaa6343045efe645dae824455cbd3fae5dbdaacf5a8178509a81937c650d8d987b5772205b62a0384f00fe63390eb01f89956a7f51476dab649b0fcf0779e8e21349050961c6b1a69c6c7c27f8f0e0704ae097c67fd9264daf214c5fb"}]}}, {{0x9, 0x5, 0xf, 0x7, 0x10, 0x10, 0x3, 0x8d}}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x1, 0x7, 0x8, 0x0, 0x50}, 0x21, &(0x7f00000002c0)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x5, 0x0, 0xd, [0xc0e1, 0x30, 0x0, 0x0]}]}, 0x9, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x40f}}, {0x53, &(0x7f0000000400)=@string={0x53, 0x3, "49d72a8356a21b551ea679afc44d7fe7e82024292be63f95fb72e95091f09150481ff9e2883411f14012cc19883af2f41692ed9cbbca3b522efb1ebbada124be0cf7bf251625573c7abd8639d3cc1e49b4"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x810}}, {0x5d, &(0x7f0000000ac0)=@string={0x5d, 0x3, "9599b131284d91b0198d8899a2fc8742c58562046ebf931fa02b0ba8fabf18d27c95eacabe22a49fe87dbba52c27da769a107bd3abf9ce11e1589c7355843b5e8cf4aa340e5a5c37369a5275fa1913361a8e74ce6c43fbe1944a64"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0xc04}}, {0x65, &(0x7f0000000bc0)=@string={0x65, 0x3, "5d9dbadc67c02e12a1f3cad2f19ffa0670fba2e5eb18898abf909d1a30d6f7296d5ebd6735c690ec040b2ba76c3eff238d6aa8a882cf42adf96a95a617615afd7f406baa66f5fc81cfb9d11859c43574d8356cc7c97c5f7184eed310bd48a194c46a2d"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x40f}}]}) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r11, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r11, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r11, 0x54a3) timer_settime(r0, 0x0, &(0x7f0000000240), &(0x7f0000000380)) kernel console output (not intermixed with test programs): (slave team0): Releasing backup interface [ 166.060319][ T1137] team0: left allmulticast mode [ 166.064755][ T1137] bond0 (unregistering): Released all slaves [ 166.071363][T10671] team0: Port device team_slave_1 added [ 166.090060][T10671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.092233][T10671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.099911][T10671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.105130][T10671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.107190][T10671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.114606][T10671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.138795][T10671] hsr_slave_0: entered promiscuous mode [ 166.145398][T10671] hsr_slave_1: entered promiscuous mode [ 166.147401][T10671] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.149671][T10671] Cannot create hsr debugfs directory [ 166.255707][T10671] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 166.259016][T10671] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 166.263179][T10671] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 166.266367][T10671] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 166.274820][T10671] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.276879][T10671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.279009][T10671] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.281109][T10671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.315704][ T4751] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.319741][ T4751] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.338365][T10671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.347343][T10671] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.351476][ T4751] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.353560][ T4751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.357571][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.359658][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.412394][ T1137] hsr_slave_0: left promiscuous mode [ 166.415631][ T1137] hsr_slave_1: left promiscuous mode [ 166.417806][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.420336][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.020979][ T5939] Bluetooth: hci3: unexpected cc 0x042d length: 1 < 7 [ 167.103385][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 167.128904][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.152639][ T5948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.162793][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.175661][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.178739][ T5948] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 167.182007][ T5948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.212698][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 167.590413][ T5948] Bluetooth: hci1: command tx timeout [ 167.783518][T10695] wlan0 speed is unknown, defaulting to 1000 [ 167.785691][T10695] vxcan1 speed is unknown, defaulting to 1000 [ 167.813040][T10671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.843884][T10706] binder: 10703:10706 ioctl c06864a1 20000a80 returned -22 [ 167.846511][T10706] binder: 10703:10706 ioctl c02064b9 20000bc0 returned -22 [ 167.848656][T10706] binder: 10703:10706 ioctl c02064b9 20000d00 returned -22 [ 167.859249][T10706] binder: 10703:10706 ioctl c05064a7 20001080 returned -22 [ 167.865842][T10706] binder: 10703:10706 ioctl c02064b9 20001180 returned -22 [ 167.868052][T10706] binder: 10703:10706 ioctl c02064b9 20001240 returned -22 [ 167.871699][T10706] binder: 10703:10706 ioctl c03864bc 20001300 returned -22 [ 167.880568][T10706] binder: 10703:10706 ioctl c0286404 20000280 returned -22 [ 167.900042][T10695] chnl_net:caif_netlink_parms(): no params data found [ 167.992173][T10671] veth0_vlan: entered promiscuous mode [ 167.996003][T10671] veth1_vlan: entered promiscuous mode [ 168.005602][T10695] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.007646][T10695] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.010416][T10695] bridge_slave_0: entered allmulticast mode [ 168.012717][T10695] bridge_slave_0: entered promiscuous mode [ 168.015532][T10695] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.017632][T10695] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.019712][T10695] bridge_slave_1: entered allmulticast mode [ 168.022151][T10695] bridge_slave_1: entered promiscuous mode [ 168.047491][T10695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.052274][T10695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.064186][T10671] veth0_macvtap: entered promiscuous mode [ 168.085665][T10695] team0: Port device team_slave_0 added [ 168.088684][T10695] team0: Port device team_slave_1 added [ 168.091903][T10671] veth1_macvtap: entered promiscuous mode [ 168.117067][T10695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.119149][T10695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.126838][T10695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.135042][T10671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.138849][T10671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.142789][T10671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.147060][T10671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.152563][T10671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.155500][T10695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.157608][T10695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.166144][T10695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.188107][T10671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.192642][T10671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.196547][T10671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.200822][T10671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.205149][T10671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.222796][T10695] hsr_slave_0: entered promiscuous mode [ 168.224838][T10695] hsr_slave_1: entered promiscuous mode [ 168.226800][T10695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.229078][T10695] Cannot create hsr debugfs directory [ 168.245158][T10671] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.248795][T10671] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.251632][T10671] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.254283][T10671] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.301113][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.304250][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.327880][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.330621][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.372624][ T1137] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.419059][T10718] netlink: 'syz.6.1432': attribute type 10 has an invalid length. [ 168.421991][T10718] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1432'. [ 168.429250][T10718] team0: Port device geneve0 added [ 168.449796][ T1137] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.531435][ T1137] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.610903][ T1137] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.670144][T10706] binder: 10703:10706 ioctl c0306201 200003c0 returned -14 [ 168.709473][ T1137] bridge_slave_1: left allmulticast mode [ 168.711788][ T1137] bridge_slave_1: left promiscuous mode [ 168.713460][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.719421][ T1137] bridge_slave_0: left allmulticast mode [ 168.721317][ T1137] bridge_slave_0: left promiscuous mode [ 168.722932][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.785319][T10729] overlayfs: failed to resolve './file0': -2 [ 168.967444][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.972494][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.975824][ T1137] bond0 (unregistering): Released all slaves [ 169.038695][T10734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1445'. [ 169.104350][ T40] audit: type=1400 audit(1736853303.633:592): avc: denied { accept } for pid=10740 comm="syz.2.1447" lport=52546 faddr=::ffff:100.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 169.113676][T10743] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1448'. [ 169.119891][ T40] audit: type=1400 audit(1736853303.643:593): avc: denied { getopt } for pid=10740 comm="syz.2.1447" lport=52546 faddr=::ffff:100.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 169.126801][ T40] audit: type=1400 audit(1736853303.643:594): avc: denied { setopt } for pid=10740 comm="syz.2.1447" lport=52546 faddr=::ffff:100.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 169.262889][T10753] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 169.270812][ T5948] Bluetooth: hci2: command tx timeout [ 169.338099][ T1137] hsr_slave_0: left promiscuous mode [ 169.340087][ T1137] hsr_slave_1: left promiscuous mode [ 169.344188][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.346432][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.348837][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.351628][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.376846][ T1137] veth1_macvtap: left promiscuous mode [ 169.379469][ T1137] veth0_macvtap: left promiscuous mode [ 169.381358][ T1137] veth1_vlan: left promiscuous mode [ 169.382975][ T1137] veth0_vlan: left promiscuous mode [ 169.670329][ T5948] Bluetooth: hci1: command tx timeout [ 170.035459][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 170.103740][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 170.652668][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'. [ 170.696697][T10695] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 170.704597][T10695] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 170.709347][T10695] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 170.727751][T10695] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 170.785440][T10695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.787786][ T40] audit: type=1400 audit(1736853305.313:595): avc: denied { shutdown } for pid=10780 comm="syz.6.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 170.798253][T10695] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.805137][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.808092][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.822528][ T1208] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.825037][ T1208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.870356][T10785] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 170.921454][ T40] audit: type=1326 audit(1736853305.453:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10790 comm="syz.6.1467" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc084585d29 code=0x0 [ 170.941659][T10794] netlink: 'syz.5.1468': attribute type 30 has an invalid length. [ 170.944951][T10794] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 170.948262][T10794] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 170.967876][T10695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.983692][T10695] veth0_vlan: entered promiscuous mode [ 170.987479][T10695] veth1_vlan: entered promiscuous mode [ 171.001057][T10695] veth0_macvtap: entered promiscuous mode [ 171.003870][T10695] veth1_macvtap: entered promiscuous mode [ 171.009410][T10695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.012463][T10695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.015074][T10695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.017671][T10695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.020918][T10695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.025228][T10695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.027834][T10695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.032398][T10695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.035028][T10695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.037930][T10695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.044868][T10695] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.047116][T10695] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.049346][T10695] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.053620][T10695] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.086060][ T1208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.088103][ T1208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.102937][ T1208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.105024][ T1208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.121647][T10800] netlink: 'syz.5.1470': attribute type 10 has an invalid length. [ 171.124245][T10800] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.126400][T10800] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.134637][T10800] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.136764][T10800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.138911][T10800] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.140993][T10800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.145839][T10800] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 171.285125][T10806] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1471'. [ 173.120377][ T5939] Bluetooth: hci1: command tx timeout [ 174.222852][ T1137] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.927694][ T40] audit: type=1326 audit(1736853309.453:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10879 comm="syz.6.1499" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc084585d29 code=0x0 [ 174.939114][ T1137] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.009838][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.014567][ T5948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.017255][ T40] audit: type=1400 audit(1736853309.543:598): avc: denied { shutdown } for pid=10900 comm="syz.5.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 175.018875][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.024468][ T40] audit: type=1400 audit(1736853309.543:599): avc: denied { read } for pid=10900 comm="syz.5.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 175.032515][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.034846][ T5948] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 175.035455][T10905] binder_alloc: 10879: binder_alloc_buf, no vma [ 175.037037][ T5948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.055639][ T1137] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.062449][T10905] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1499'. [ 175.066574][T10905] binder: 10879:10905 ioctl c0306201 200003c0 returned -14 [ 175.068007][T10895] wlan0 speed is unknown, defaulting to 1000 [ 175.072091][T10895] vxcan1 speed is unknown, defaulting to 1000 [ 175.151842][ T1137] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.175933][T10895] chnl_net:caif_netlink_parms(): no params data found [ 175.228465][T10895] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.231335][T10895] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.234083][T10895] bridge_slave_0: entered allmulticast mode [ 175.237005][T10895] bridge_slave_0: entered promiscuous mode [ 175.240547][T10895] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.243412][T10895] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.246185][T10895] bridge_slave_1: entered allmulticast mode [ 175.249170][T10895] bridge_slave_1: entered promiscuous mode [ 175.267655][T10921] syz_tun: entered allmulticast mode [ 175.274295][T10895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.279040][T10895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.314230][T10895] team0: Port device team_slave_0 added [ 175.319659][ T1137] bridge_slave_1: left allmulticast mode [ 175.321403][ T1137] bridge_slave_1: left promiscuous mode [ 175.323034][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.326091][ T1137] bridge_slave_0: left allmulticast mode [ 175.327774][ T1137] bridge_slave_0: left promiscuous mode [ 175.329437][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.408876][T10931] tmpfs: Bad value for 'mpol' [ 175.418395][ T40] audit: type=1400 audit(1736853309.943:600): avc: denied { bind } for pid=10924 comm="syz.5.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 175.585671][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.589447][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.593034][ T1137] bond0 (unregistering): Released all slaves [ 175.599362][T10895] team0: Port device team_slave_1 added [ 175.635798][T10895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.638070][T10895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.646002][T10895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.650225][T10895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.653130][T10895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.659410][T10940] netlink: 'syz.5.1514': attribute type 11 has an invalid length. [ 175.661567][T10895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.699342][T10895] hsr_slave_0: entered promiscuous mode [ 175.702050][T10895] hsr_slave_1: entered promiscuous mode [ 175.781987][T10947] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1517'. [ 175.785548][T10947] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1517'. [ 175.863439][ T40] audit: type=1400 audit(1736853310.393:601): avc: denied { getopt } for pid=10954 comm="syz.6.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 175.864918][T10955] tmpfs: Invalid gid '0x00000000ffffffff' [ 175.899130][ T40] audit: type=1400 audit(1736853310.423:602): avc: denied { ioctl } for pid=10956 comm="syz.6.1522" path="socket:[47282]" dev="sockfs" ino=47282 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 175.906429][ T40] audit: type=1400 audit(1736853310.433:603): avc: denied { bind } for pid=10956 comm="syz.6.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 175.936328][T10959] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1523'. [ 175.938998][T10959] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1523'. [ 175.979271][ T40] audit: type=1400 audit(1736853310.503:604): avc: denied { write } for pid=10964 comm="syz.5.1524" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 175.986268][ T40] audit: type=1400 audit(1736853310.503:605): avc: denied { open } for pid=10964 comm="syz.5.1524" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 175.993088][ T40] audit: type=1400 audit(1736853310.513:606): avc: denied { create } for pid=10964 comm="syz.5.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 176.010853][ T1137] hsr_slave_0: left promiscuous mode [ 176.012957][ T1137] hsr_slave_1: left promiscuous mode [ 176.014999][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.017212][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.019618][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.021797][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.044144][ T1137] veth1_macvtap: left promiscuous mode [ 176.046898][ T1137] veth0_macvtap: left promiscuous mode [ 176.048582][ T1137] veth1_vlan: left promiscuous mode [ 176.050084][ T1137] veth0_vlan: left promiscuous mode [ 176.141514][T10972] binder: 10970:10972 ioctl c0306201 200003c0 returned -14 [ 176.746468][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 176.822115][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 177.115278][ T5939] Bluetooth: hci2: command tx timeout [ 177.524865][T11013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=11013 comm=syz.2.1542 [ 177.536169][T11016] netlink: 'syz.5.1541': attribute type 10 has an invalid length. [ 177.546981][T11016] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 177.556915][T11016] x_tables: ip6_tables: ipcomp match: only valid for protocol 108 [ 177.620377][T10895] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 177.626069][T10895] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 177.629223][T10895] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 177.638079][T10895] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 177.675589][T10895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.681125][T10895] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.685380][T11028] netlink: 'syz.2.1547': attribute type 13 has an invalid length. [ 177.686007][ T4751] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.689414][ T4751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.692641][T11028] gretap0: refused to change device tx_queue_len [ 177.694365][T11028] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 177.702315][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.704151][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.724452][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1548'. [ 177.797686][T10895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.815093][T10895] veth0_vlan: entered promiscuous mode [ 177.820109][T10895] veth1_vlan: entered promiscuous mode [ 177.834692][T10895] veth0_macvtap: entered promiscuous mode [ 177.837645][T10895] veth1_macvtap: entered promiscuous mode [ 177.844673][T10895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.850289][T10895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.853357][T10895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.856303][T10895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.859564][T10895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.862712][T11034] No control pipe specified [ 177.864371][T10895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.867302][T10895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.870074][T10895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.874612][T10895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.877780][T10895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.886955][T10895] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.889463][T10895] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.891967][T10895] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.894422][T10895] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.928730][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.932281][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.941513][T11039] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1550'. [ 177.942461][ T4751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.947208][ T4751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.776876][T11084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26494 sclass=netlink_route_socket pid=11084 comm=syz.6.1565 [ 178.896507][T11090] binder: 11088:11090 ioctl c0306201 200003c0 returned -14 [ 179.458475][T11092] debugfs: Bad value for 'uid' [ 179.459843][T11092] debugfs: Bad value for 'uid' [ 179.510158][T11094] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1569'. [ 179.704837][T11103] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1571'. [ 180.144645][ T1171] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.180776][ T1339] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 180.340366][ T1339] usb 10-1: Using ep0 maxpacket: 8 [ 180.344294][ T1339] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 180.347349][ T1339] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.350915][ T1339] usb 10-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 180.353862][ T1339] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.357300][ T1339] usb 10-1: config 0 descriptor?? [ 180.563888][T11106] SELinux: Context system_u: is not valid (left unmapped). [ 180.567153][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 180.567161][ T40] audit: type=1400 audit(1736853315.093:612): avc: denied { relabelto } for pid=11104 comm="syz.5.1573" name="" dev="pipefs" ino=48183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:" [ 180.577626][ T1339] usbhid 10-1:0.0: can't add hid device: -71 [ 180.579946][ T1339] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 180.583249][ T1339] usb 10-1: USB disconnect, device number 3 [ 181.689911][T11119] input: syz0 as /devices/virtual/input/input12 [ 181.700581][T11122] : entered promiscuous mode [ 181.734632][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1581'. [ 181.737881][ T40] audit: type=1400 audit(1736853316.263:613): avc: denied { bind } for pid=11128 comm="syz.5.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 181.743369][ T40] audit: type=1400 audit(1736853316.263:614): avc: denied { listen } for pid=11128 comm="syz.5.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 181.748679][ T40] audit: type=1400 audit(1736853316.263:615): avc: denied { accept } for pid=11128 comm="syz.5.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 181.767127][T11130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1579'. [ 181.803839][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 181.806662][ T5948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 181.809416][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 181.811966][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 181.814297][ T5948] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 181.816946][ T5948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 181.835636][T11131] wlan0 speed is unknown, defaulting to 1000 [ 181.837720][T11131] vxcan1 speed is unknown, defaulting to 1000 [ 181.844824][T11135] dlm: non-version read from control device 0 [ 181.856180][ T1171] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.884053][T11138] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1583'. [ 181.937708][ T1171] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.959725][T11131] chnl_net:caif_netlink_parms(): no params data found [ 181.995708][ T1171] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.015214][T11131] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.017203][T11131] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.019333][T11131] bridge_slave_0: entered allmulticast mode [ 182.021831][T11131] bridge_slave_0: entered promiscuous mode [ 182.024422][T11131] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.026398][T11131] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.028369][T11131] bridge_slave_1: entered allmulticast mode [ 182.030582][T11131] bridge_slave_1: entered promiscuous mode [ 182.061437][T11131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.065757][T11131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.090158][T11131] team0: Port device team_slave_0 added [ 182.094065][T11131] team0: Port device team_slave_1 added [ 182.120109][T11131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.122225][T11131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.129206][T11131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.134449][T11131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.136477][T11131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.143614][T11131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.146863][ T1171] bridge_slave_1: left allmulticast mode [ 182.148483][ T1171] bridge_slave_1: left promiscuous mode [ 182.150140][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.155166][ T1171] bridge_slave_0: left allmulticast mode [ 182.156788][ T1171] bridge_slave_0: left promiscuous mode [ 182.158416][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.415821][ T1171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.419451][ T1171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.422910][ T1171] bond0 (unregistering): Released all slaves [ 182.452815][T11131] hsr_slave_0: entered promiscuous mode [ 182.454901][T11131] hsr_slave_1: entered promiscuous mode [ 182.456984][T11131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.459172][T11131] Cannot create hsr debugfs directory [ 182.563573][T11154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1587'. [ 182.567060][T11153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1587'. [ 182.575761][T11153] tipc: New replicast peer: 255.255.255.255 [ 182.578464][T11153] tipc: Enabled bearer , priority 10 [ 182.581189][T11154] tipc: Enabling of bearer rejected, already enabled [ 182.710295][ T40] audit: type=1400 audit(1736853317.233:616): avc: denied { read } for pid=11165 comm="syz.6.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 182.714674][T11174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1593'. [ 182.803940][ T1171] hsr_slave_0: left promiscuous mode [ 182.806242][ T1171] hsr_slave_1: left promiscuous mode [ 182.808262][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.816602][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.819630][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.823076][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.842709][T11182] FAULT_INJECTION: forcing a failure. [ 182.842709][T11182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.846414][T11182] CPU: 2 UID: 0 PID: 11182 Comm: syz.5.1596 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 182.849443][T11182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 182.852485][T11182] Call Trace: [ 182.853443][T11182] [ 182.854297][T11182] dump_stack_lvl+0x16c/0x1f0 [ 182.855655][T11182] should_fail_ex+0x497/0x5b0 [ 182.857018][ T1171] veth1_macvtap: left promiscuous mode [ 182.857029][T11182] _copy_from_user+0x2e/0xd0 [ 182.858658][ T1171] veth0_macvtap: left promiscuous mode [ 182.859957][T11182] copy_msghdr_from_user+0x99/0x160 [ 182.861721][ T1171] veth1_vlan: left promiscuous mode [ 182.863291][T11182] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 182.864869][ T1171] veth0_vlan: left promiscuous mode [ 182.866920][T11182] ___sys_sendmsg+0xff/0x1e0 [ 182.869810][T11182] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.871364][T11182] ? __pfx_lock_release+0x10/0x10 [ 182.872945][T11182] ? trace_lock_acquire+0x14e/0x1f0 [ 182.874377][T11182] ? __fget_files+0x206/0x3a0 [ 182.875729][T11182] __sys_sendmsg+0x16e/0x220 [ 182.877066][T11182] ? __pfx___sys_sendmsg+0x10/0x10 [ 182.878489][T11182] do_syscall_64+0xcd/0x250 [ 182.879770][T11182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.881402][T11182] RIP: 0033:0x7f745c985d29 [ 182.882646][T11182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.888426][T11182] RSP: 002b:00007f745d6f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.891609][T11182] RAX: ffffffffffffffda RBX: 00007f745cb75fa0 RCX: 00007f745c985d29 [ 182.894608][T11182] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000003 [ 182.897645][T11182] RBP: 00007f745d6f8090 R08: 0000000000000000 R09: 0000000000000000 [ 182.900711][T11182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.903766][T11182] R13: 0000000000000000 R14: 00007f745cb75fa0 R15: 00007ffd51626618 [ 182.906850][T11182] [ 183.427236][T11196] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(15) [ 183.429391][T11196] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 183.432170][T11196] vhci_hcd vhci_hcd.0: Device attached [ 183.535074][T11197] vhci_hcd: connection closed [ 183.535246][ T1137] vhci_hcd: stop threads [ 183.538604][ T1137] vhci_hcd: release socket [ 183.542335][ T1137] vhci_hcd: disconnect device [ 183.551330][ T1171] team0 (unregistering): Port device team_slave_1 removed [ 183.623255][ T1171] team0 (unregistering): Port device team_slave_0 removed [ 183.831223][ T5939] Bluetooth: hci2: command tx timeout [ 184.191453][T11207] fuse: Bad value for 'fd' [ 184.199646][T11206] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1600'. [ 184.275902][T11131] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 184.279125][T11131] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 184.283565][T11131] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 184.286713][T11131] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 184.289911][T11210] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1603'. [ 184.331504][T11131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.342781][T11131] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.348469][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.350790][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.354256][T11217] FAULT_INJECTION: forcing a failure. [ 184.354256][T11217] name failslab, interval 1, probability 0, space 0, times 0 [ 184.358516][T11217] CPU: 0 UID: 0 PID: 11217 Comm: syz.5.1606 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 184.359346][ T1208] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.361606][T11217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 184.361615][T11217] Call Trace: [ 184.361619][T11217] [ 184.361623][T11217] dump_stack_lvl+0x16c/0x1f0 [ 184.361641][T11217] should_fail_ex+0x497/0x5b0 [ 184.361655][T11217] ? fs_reclaim_acquire+0xae/0x150 [ 184.364218][ T1208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.367228][T11217] should_failslab+0xc2/0x120 [ 184.367245][T11217] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 184.367257][T11217] ? __alloc_skb+0x2b1/0x380 [ 184.367274][T11217] __alloc_skb+0x2b1/0x380 [ 184.381986][T11217] ? __pfx___alloc_skb+0x10/0x10 [ 184.383834][T11217] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 184.386068][T11217] netlink_alloc_large_skb+0x69/0x130 [ 184.388169][T11217] netlink_sendmsg+0x689/0xd70 [ 184.389611][T11217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.391446][T11217] ____sys_sendmsg+0xaaf/0xc90 [ 184.393243][T11217] ? copy_msghdr_from_user+0x10b/0x160 [ 184.394800][T11217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.396210][T11217] ___sys_sendmsg+0x135/0x1e0 [ 184.397565][T11217] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.399253][T11217] ? __pfx_lock_release+0x10/0x10 [ 184.400891][T11217] ? trace_lock_acquire+0x14e/0x1f0 [ 184.402434][T11217] ? __fget_files+0x206/0x3a0 [ 184.403922][T11217] __sys_sendmsg+0x16e/0x220 [ 184.405271][T11217] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.406737][T11217] do_syscall_64+0xcd/0x250 [ 184.408048][T11217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.409743][T11217] RIP: 0033:0x7f745c985d29 [ 184.411034][T11217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.416484][T11217] RSP: 002b:00007f745d6f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.418850][T11217] RAX: ffffffffffffffda RBX: 00007f745cb75fa0 RCX: 00007f745c985d29 [ 184.421118][T11217] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000003 [ 184.423380][T11217] RBP: 00007f745d6f8090 R08: 0000000000000000 R09: 0000000000000000 [ 184.425623][T11217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.427858][T11217] R13: 0000000000000000 R14: 00007f745cb75fa0 R15: 00007ffd51626618 [ 184.430116][T11217] [ 184.465923][T11223] 9pnet_virtio: no channels available for device [ 184.466066][T11131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.480862][T11131] veth0_vlan: entered promiscuous mode [ 184.484247][T11131] veth1_vlan: entered promiscuous mode [ 184.502159][T11131] veth0_macvtap: entered promiscuous mode [ 184.506145][T11131] veth1_macvtap: entered promiscuous mode [ 184.513570][T11131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.516566][T11131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.519308][T11131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.522351][T11131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.525540][T11131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.529921][T11131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.534017][T11131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.537204][T11131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.540386][T11131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.543895][T11131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.547632][T11131] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.547932][T11229] FAULT_INJECTION: forcing a failure. [ 184.547932][T11229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.550142][T11131] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.554298][T11229] CPU: 3 UID: 0 PID: 11229 Comm: syz.5.1610 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 184.556887][T11131] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.559546][T11229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 184.563412][T11131] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.566594][T11229] Call Trace: [ 184.566603][T11229] [ 184.571888][T11229] dump_stack_lvl+0x16c/0x1f0 [ 184.573270][T11229] should_fail_ex+0x497/0x5b0 [ 184.574638][T11229] _copy_from_user+0x2e/0xd0 [ 184.575980][T11229] copy_msghdr_from_user+0x99/0x160 [ 184.577527][T11229] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 184.579211][T11229] ___sys_sendmsg+0xff/0x1e0 [ 184.580560][T11229] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.582212][T11229] ? __pfx_lock_release+0x10/0x10 [ 184.583702][T11229] ? trace_lock_acquire+0x14e/0x1f0 [ 184.585229][T11229] ? __fget_files+0x206/0x3a0 [ 184.586619][T11229] __sys_sendmsg+0x16e/0x220 [ 184.588489][T11229] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.590396][T11229] do_syscall_64+0xcd/0x250 [ 184.591706][T11229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.593423][T11229] RIP: 0033:0x7f745c985d29 [ 184.594713][T11229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.600244][T11229] RSP: 002b:00007f745d6f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.602633][T11229] RAX: ffffffffffffffda RBX: 00007f745cb75fa0 RCX: 00007f745c985d29 [ 184.604910][T11229] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 184.607480][T11229] RBP: 00007f745d6f8090 R08: 0000000000000000 R09: 0000000000000000 [ 184.610248][T11229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.612531][T11229] R13: 0000000000000000 R14: 00007f745cb75fa0 R15: 00007ffd51626618 [ 184.614806][T11229] [ 184.639452][ T1208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.643316][ T1208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.651824][ T1208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.654041][ T1208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.669839][T11234] af_packet: tpacket_rcv: packet too big, clamped from 74 to 4294967286. macoff=82 [ 184.700625][T11236] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1613'. [ 184.802473][ T40] audit: type=1326 audit(1736853319.333:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.5.1616" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f745c985d29 code=0x0 [ 185.050401][ T40] audit: type=1400 audit(1736853319.583:618): avc: denied { mounton } for pid=11245 comm="syz.6.1617" path="/syzcgroup/cpu/syz6/cgroup.procs" dev="cgroup" ino=584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 185.106608][T11246] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 185.115336][ T40] audit: type=1400 audit(1736853319.643:619): avc: denied { relabelto } for pid=11245 comm="syz.6.1617" name="cgroup.procs" dev="cgroup" ino=584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 185.123310][ T40] audit: type=1400 audit(1736853319.643:620): avc: denied { associate } for pid=11245 comm="syz.6.1617" name="cgroup.procs" dev="cgroup" ino=584 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 185.167992][T11251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11251 comm=syz.2.1619 [ 185.223447][T11256] FAULT_INJECTION: forcing a failure. [ 185.223447][T11256] name failslab, interval 1, probability 0, space 0, times 0 [ 185.227032][T11256] CPU: 1 UID: 0 PID: 11256 Comm: syz.6.1621 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 185.230109][T11256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.233154][T11256] Call Trace: [ 185.234118][T11256] [ 185.234971][T11256] dump_stack_lvl+0x16c/0x1f0 [ 185.236333][T11256] should_fail_ex+0x497/0x5b0 [ 185.237701][T11256] ? fs_reclaim_acquire+0xae/0x150 [ 185.239177][T11256] should_failslab+0xc2/0x120 [ 185.240528][T11256] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 185.242183][T11256] ? __alloc_skb+0x2b1/0x380 [ 185.243519][T11256] __alloc_skb+0x2b1/0x380 [ 185.244817][T11256] ? __pfx___alloc_skb+0x10/0x10 [ 185.246250][T11256] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 185.247963][T11256] netlink_alloc_large_skb+0x69/0x130 [ 185.249505][T11256] netlink_sendmsg+0x689/0xd70 [ 185.250909][T11256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.252429][T11256] ____sys_sendmsg+0xaaf/0xc90 [ 185.253804][T11256] ? copy_msghdr_from_user+0x10b/0x160 [ 185.255357][T11256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.256881][T11256] ___sys_sendmsg+0x135/0x1e0 [ 185.258229][T11256] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.259718][T11256] ? __pfx_lock_release+0x10/0x10 [ 185.261328][T11256] ? trace_lock_acquire+0x14e/0x1f0 [ 185.263445][T11256] ? __fget_files+0x206/0x3a0 [ 185.265349][T11256] __sys_sendmsg+0x16e/0x220 [ 185.267229][T11256] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.269306][T11256] do_syscall_64+0xcd/0x250 [ 185.271154][T11256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.273551][T11256] RIP: 0033:0x7fc084585d29 [ 185.275367][T11256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.282454][T11256] RSP: 002b:00007fc085415038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.284841][T11256] RAX: ffffffffffffffda RBX: 00007fc084775fa0 RCX: 00007fc084585d29 [ 185.287112][T11256] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 185.289371][T11256] RBP: 00007fc085415090 R08: 0000000000000000 R09: 0000000000000000 [ 185.291662][T11256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.293928][T11256] R13: 0000000000000000 R14: 00007fc084775fa0 R15: 00007ffdb61e20f8 [ 185.296183][T11256] [ 185.327997][T11258] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1622'. [ 185.383619][T11251] netlink: 'syz.2.1619': attribute type 1 has an invalid length. [ 185.391609][T11251] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.425442][T11267] netlink: 'syz.6.1625': attribute type 5 has an invalid length. [ 185.661219][T11269] block nbd6: Unsupported socket: shutdown callout must be supported. [ 185.685257][ T40] audit: type=1400 audit(1736853320.213:621): avc: denied { unmount } for pid=9749 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 185.728504][T11277] FAULT_INJECTION: forcing a failure. [ 185.728504][T11277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.732157][T11277] CPU: 3 UID: 0 PID: 11277 Comm: syz.6.1629 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 185.734912][T11277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.738005][T11277] Call Trace: [ 185.739028][T11277] [ 185.739801][T11277] dump_stack_lvl+0x16c/0x1f0 [ 185.741037][T11277] should_fail_ex+0x497/0x5b0 [ 185.742256][T11277] _copy_from_iter+0x2a1/0x1560 [ 185.743536][T11277] ? trace_lock_acquire+0x14e/0x1f0 [ 185.744922][T11277] ? __alloc_skb+0x1fe/0x380 [ 185.746132][T11277] ? __pfx__copy_from_iter+0x10/0x10 [ 185.747503][T11277] ? __virt_addr_valid+0x1a4/0x590 [ 185.748829][T11277] ? __virt_addr_valid+0x5e/0x590 [ 185.750142][T11277] ? __phys_addr_symbol+0x30/0x80 [ 185.751503][T11277] ? __check_object_size+0x488/0x710 [ 185.752883][T11277] netlink_sendmsg+0x813/0xd70 [ 185.754150][T11277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.755528][T11277] ____sys_sendmsg+0xaaf/0xc90 [ 185.756783][T11277] ? copy_msghdr_from_user+0x10b/0x160 [ 185.758188][T11277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.759558][T11277] ___sys_sendmsg+0x135/0x1e0 [ 185.760785][T11277] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.762134][T11277] ? __pfx_lock_release+0x10/0x10 [ 185.763445][T11277] ? trace_lock_acquire+0x14e/0x1f0 [ 185.764805][T11277] ? __fget_files+0x206/0x3a0 [ 185.766029][T11277] __sys_sendmsg+0x16e/0x220 [ 185.767227][T11277] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.768562][T11277] do_syscall_64+0xcd/0x250 [ 185.769737][T11277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.771315][T11277] RIP: 0033:0x7fc084585d29 [ 185.772484][T11277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.777401][T11277] RSP: 002b:00007fc085415038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.779528][T11277] RAX: ffffffffffffffda RBX: 00007fc084775fa0 RCX: 00007fc084585d29 [ 185.781552][T11277] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000003 [ 185.783578][T11277] RBP: 00007fc085415090 R08: 0000000000000000 R09: 0000000000000000 [ 185.785600][T11277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.787619][T11277] R13: 0000000000000000 R14: 00007fc084775fa0 R15: 00007ffdb61e20f8 [ 185.789654][T11277] [ 185.850011][T11281] binder: BINDER_SET_CONTEXT_MGR already set [ 185.852387][T11281] binder: 11280:11281 ioctl 4018620d 20004a80 returned -16 [ 185.856645][T11281] binder: 11280:11281 ioctl c0306201 200004c0 returned -22 [ 185.974629][ T40] audit: type=1400 audit(1736853320.503:622): avc: denied { getopt } for pid=11289 comm="syz.6.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 186.077747][T11303] netlink: 'syz.2.1639': attribute type 2 has an invalid length. [ 186.299945][T11326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11326 comm=syz.6.1648 [ 186.405681][T11338] netlink: 'syz.6.1653': attribute type 10 has an invalid length. [ 186.411924][T11338] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.415978][T11338] bond0: (slave team0): Enslaving as an active interface with an up link [ 186.579216][ T40] audit: type=1800 audit(1736853321.103:623): pid=11355 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1659" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 186.591023][T11360] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.591079][T11359] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.671738][ T40] audit: type=1400 audit(1736853321.203:624): avc: denied { watch watch_reads } for pid=11370 comm="syz.6.1665" path="pipe:[43486]" dev="pipefs" ino=43486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 187.013714][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.635194][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.685138][T11384] ALSA: mixer_oss: invalid OSS volume '¢' [ 188.718430][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.769578][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 188.773871][ T5948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 188.777386][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 188.786433][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 188.790088][ T5948] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 188.796536][ T5948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 188.815750][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.825307][ T5948] Bluetooth: hci1: Malformed LE Event: 0x0b [ 188.828669][T11392] wlan0 speed is unknown, defaulting to 1000 [ 188.831037][T11392] vxcan1 speed is unknown, defaulting to 1000 [ 188.843192][ T40] audit: type=1400 audit(1736853323.373:625): avc: denied { compute_member } for pid=11402 comm="syz.5.1677" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 188.925433][ T67] bridge_slave_1: left allmulticast mode [ 188.927786][ T67] bridge_slave_1: left promiscuous mode [ 188.930223][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.938309][ T67] bridge_slave_0: left allmulticast mode [ 188.939961][ T67] bridge_slave_0: left promiscuous mode [ 188.941831][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.140279][ T5982] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 189.222774][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.227260][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.231272][ T67] bond0 (unregistering): Released all slaves [ 189.239065][T11392] chnl_net:caif_netlink_parms(): no params data found [ 189.281898][T11392] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.284027][T11392] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.286142][T11392] bridge_slave_0: entered allmulticast mode [ 189.289188][T11392] bridge_slave_0: entered promiscuous mode [ 189.290318][ T5982] usb 11-1: Using ep0 maxpacket: 16 [ 189.296978][T11392] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.299186][T11392] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.301813][ T5982] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.302208][T11392] bridge_slave_1: entered allmulticast mode [ 189.305012][ T5982] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.307417][T11392] bridge_slave_1: entered promiscuous mode [ 189.310567][ T5982] usb 11-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 189.315019][ T5982] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.318242][ T5982] usb 11-1: config 0 descriptor?? [ 189.325386][ T5982] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input13 [ 189.357695][T11392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.361632][T11392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.386182][T11392] team0: Port device team_slave_0 added [ 189.389150][T11392] team0: Port device team_slave_1 added [ 189.408361][T11392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.410467][T11392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.418767][T11392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.435977][T11392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.438036][T11392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.445895][T11392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.468373][T11392] hsr_slave_0: entered promiscuous mode [ 189.471475][T11392] hsr_slave_1: entered promiscuous mode [ 189.525489][ T67] hsr_slave_0: left promiscuous mode [ 189.527778][ T67] hsr_slave_1: left promiscuous mode [ 189.529981][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.532193][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.534615][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.536785][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.573639][ T67] veth1_macvtap: left promiscuous mode [ 189.575841][ T67] veth0_macvtap: left promiscuous mode [ 189.578048][ T67] veth1_vlan: left promiscuous mode [ 189.580100][ T67] veth0_vlan: left promiscuous mode [ 189.638394][ T5979] usb 11-1: USB disconnect, device number 2 [ 190.086899][T11449] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20002 [ 190.172096][T11459] fuse: Unknown parameter 'smackfshat' [ 190.270010][ T67] team0 (unregistering): Port device team_slave_1 removed [ 190.342515][ T67] team0 (unregistering): Port device team_slave_0 removed [ 190.460296][ T5979] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 190.620355][ T5979] usb 10-1: Using ep0 maxpacket: 8 [ 190.624873][ T5979] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 190.633635][ T5979] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.637496][ T5979] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 190.641243][ T5979] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 190.645547][ T5979] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 190.649814][ T5979] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 190.653395][ T5979] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.658059][ T5979] usb 10-1: config 0 descriptor?? [ 190.662475][T11463] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 190.664823][T11463] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 190.874120][ T5939] Bluetooth: hci2: command tx timeout [ 191.066617][T11475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45475 sclass=netlink_route_socket pid=11475 comm=syz.2.1699 [ 191.095593][T11477] overlayfs: failed to clone upperpath [ 191.488862][T11392] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 191.492587][T11392] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 191.495893][T11392] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 191.499687][T11392] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 191.538231][T11392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.544832][T11392] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.548556][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.550867][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.557467][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.559595][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.641640][T11392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.659035][T11392] veth0_vlan: entered promiscuous mode [ 191.665383][T11392] veth1_vlan: entered promiscuous mode [ 191.676334][T11392] veth0_macvtap: entered promiscuous mode [ 191.679785][T11392] veth1_macvtap: entered promiscuous mode [ 191.686377][T11392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.689369][T11392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.692372][T11392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.695321][T11392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.698527][T11392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.701807][T11392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.704799][T11392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.707554][T11392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.710556][T11392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.714298][T11392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.721328][T11392] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.724019][T11392] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.727413][T11392] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.729884][T11392] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.758263][ T1208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.761195][ T1208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.770508][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.772945][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.939153][T11515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.962878][T11523] __nla_validate_parse: 8 callbacks suppressed [ 191.962888][T11523] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1711'. [ 191.996925][T11529] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 192.720412][ T5948] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 192.926246][T11550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1719'. [ 192.942852][ T40] audit: type=1326 audit(1736853327.473:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11549 comm="syz.2.1719" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8363d85d29 code=0x0 [ 192.945775][T11547] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1718'. [ 193.125182][ T5978] usb 10-1: USB disconnect, device number 4 [ 193.150589][T11555] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1721'. [ 193.195752][T11570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1726'. [ 193.211479][T11570] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1726'. [ 193.215442][T11570] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.253933][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1727'. [ 193.256529][T11573] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1727'. [ 193.292487][ T40] audit: type=1400 audit(1736853327.823:627): avc: denied { sqpoll } for pid=11576 comm="syz.5.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 193.299624][T11579] overlayfs: failed to clone upperpath [ 193.329249][T11584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=11584 comm=syz.5.1731 [ 193.429775][ T40] audit: type=1400 audit(1736853327.953:628): avc: denied { write } for pid=11595 comm="syz.5.1735" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 193.429794][T11596] random: crng reseeded on system resumption [ 193.672937][T11627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.752134][T11636] netlink: 'syz.2.1747': attribute type 1 has an invalid length. [ 193.754451][T11636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1747'. [ 193.959881][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.000567][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.002556][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.467103][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.523175][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.597207][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.693187][ T67] bridge_slave_1: left allmulticast mode [ 195.694828][ T67] bridge_slave_1: left promiscuous mode [ 195.696473][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.699473][ T67] bridge_slave_0: left allmulticast mode [ 195.701775][ T67] bridge_slave_0: left promiscuous mode [ 195.703457][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.847908][ T5939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 195.851577][ T5939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 195.854120][ T5939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 195.858307][ T5939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 195.861135][ T5939] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 195.863277][ T5939] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 195.978185][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.983129][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.986620][ T67] bond0 (unregistering): Released all slaves [ 196.001816][T11660] wlan0 speed is unknown, defaulting to 1000 [ 196.003993][T11660] vxcan1 speed is unknown, defaulting to 1000 [ 196.105835][T11660] chnl_net:caif_netlink_parms(): no params data found [ 196.175717][T11660] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.178562][T11660] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.181541][T11660] bridge_slave_0: entered allmulticast mode [ 196.184270][T11660] bridge_slave_0: entered promiscuous mode [ 196.187375][T11660] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.190076][T11660] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.193292][T11660] bridge_slave_1: entered allmulticast mode [ 196.195944][T11660] bridge_slave_1: entered promiscuous mode [ 196.216723][T11660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.223262][T11660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.280496][T11660] team0: Port device team_slave_0 added [ 196.284270][ T67] hsr_slave_0: left promiscuous mode [ 196.286684][ T67] hsr_slave_1: left promiscuous mode [ 196.288763][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.290951][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.293372][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.295483][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.322164][ T67] veth1_macvtap: left promiscuous mode [ 196.323800][ T67] veth0_macvtap: left promiscuous mode [ 196.325417][ T67] veth1_vlan: left promiscuous mode [ 196.326944][ T67] veth0_vlan: left promiscuous mode [ 196.410289][ T5978] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 196.565513][ T5978] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 196.568810][ T5978] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.572576][ T5978] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.575508][ T5978] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 196.580166][ T5978] usb 11-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 196.582951][ T5978] usb 11-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 196.585640][ T5978] usb 11-1: Manufacturer: syz [ 196.589073][ T5978] usb 11-1: config 0 descriptor?? [ 196.994674][ T67] team0 (unregistering): Port device team_slave_1 removed [ 196.997998][ T5978] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 197.001320][ T5978] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 197.014074][ T5978] appleir 0003:05AC:8243.0006: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 197.083040][ T67] team0 (unregistering): Port device team_slave_0 removed [ 197.197867][ T7200] usb 11-1: USB disconnect, device number 3 [ 197.615924][T11660] team0: Port device team_slave_1 added [ 197.653259][T11660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.653641][T11691] 9pnet_virtio: no channels available for device 127.0.0.1 [ 197.655370][T11660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.665472][T11660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.669797][T11660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.671882][T11660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.680340][T11660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.729427][T11660] hsr_slave_0: entered promiscuous mode [ 197.731960][T11660] hsr_slave_1: entered promiscuous mode [ 197.802647][T11710] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1768'. [ 197.805992][T11710] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1768'. [ 197.808592][T11710] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1768'. [ 197.811380][T11710] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1768'. [ 197.860313][ T40] audit: type=1400 audit(1736853332.383:629): avc: denied { setattr } for pid=11717 comm="syz.5.1772" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 197.921394][ T5948] Bluetooth: hci2: command tx timeout [ 197.983134][T11730] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 198.136317][T11660] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 198.139506][T11660] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 198.140238][ T832] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 198.144872][T11660] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 198.147934][T11660] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 198.181780][T11660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.191259][T11660] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.195187][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.197252][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.202343][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.204461][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.276454][T11660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.291413][T11660] veth0_vlan: entered promiscuous mode [ 198.295528][T11660] veth1_vlan: entered promiscuous mode [ 198.303053][ T832] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 198.305028][T11660] veth0_macvtap: entered promiscuous mode [ 198.306246][ T832] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.309268][T11660] veth1_macvtap: entered promiscuous mode [ 198.311172][ T832] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.315435][ T832] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 198.318647][T11660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.319826][ T832] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 198.322220][T11660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.322229][T11660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.324867][ T832] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 198.327595][T11660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.330610][ T832] usb 10-1: Manufacturer: syz [ 198.331708][ T832] usb 10-1: config 0 descriptor?? [ 198.335638][T11660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.345067][T11660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.348141][T11660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.351007][T11660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.353992][T11660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.357641][T11660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.361564][T11660] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.364186][T11660] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.366678][T11660] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.369139][T11660] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.392413][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.394707][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.402958][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.405255][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.740084][ T832] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 198.743004][ T832] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 198.746548][ T832] appleir 0003:05AC:8243.0007: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 198.926299][T11751] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1781'. [ 198.929876][T11751] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1781'. [ 198.933549][T11751] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1781'. [ 198.937239][T11751] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1781'. [ 198.944582][ T832] usb 10-1: USB disconnect, device number 5 [ 199.572309][ T40] audit: type=1400 audit(1736853334.103:630): avc: denied { read } for pid=11768 comm="syz.5.1790" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 199.575017][T11769] overlay: ./bus is not a directory [ 199.578905][ T40] audit: type=1400 audit(1736853334.103:631): avc: denied { open } for pid=11768 comm="syz.5.1790" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 199.592194][ T40] audit: type=1400 audit(1736853334.123:632): avc: denied { ioctl } for pid=11768 comm="syz.5.1790" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 199.787447][T11785] program syz.5.1796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.045357][ T40] audit: type=1400 audit(1736853334.573:633): avc: denied { read write } for pid=11798 comm="syz.6.1801" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 200.052619][ T40] audit: type=1400 audit(1736853334.573:634): avc: denied { open } for pid=11798 comm="syz.6.1801" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 200.059148][ T40] audit: type=1400 audit(1736853334.573:635): avc: denied { ioctl } for pid=11798 comm="syz.6.1801" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 200.250428][T11811] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1806'. [ 200.253839][T11811] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1806'. [ 200.403762][T11823] "syz.2.1810" (11823) uses obsolete ecb(arc4) skcipher [ 200.446198][T11823] tipc: New replicast peer: 100.1.1.1 [ 200.664434][ T4751] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.723563][ T5939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 200.727437][ T5939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 200.730083][ T5939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 200.736911][ T5939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 200.739688][ T5939] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 200.741958][ T5939] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 200.759678][T11841] wlan0 speed is unknown, defaulting to 1000 [ 200.761960][T11841] vxcan1 speed is unknown, defaulting to 1000 [ 200.838521][T11841] chnl_net:caif_netlink_parms(): no params data found [ 200.879055][T11841] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.883812][T11841] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.885910][T11841] bridge_slave_0: entered allmulticast mode [ 200.888446][T11841] bridge_slave_0: entered promiscuous mode [ 200.891216][T11841] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.893308][T11841] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.895533][T11841] bridge_slave_1: entered allmulticast mode [ 200.898008][T11841] bridge_slave_1: entered promiscuous mode [ 200.907093][ T9607] syz_tun (unregistering): left allmulticast mode [ 200.908988][ T9607] syz_tun (unregistering): left promiscuous mode [ 200.910950][ T9607] bridge0: port 3(syz_tun) entered disabled state [ 200.931170][T11841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.934907][T11841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.958110][T11841] team0: Port device team_slave_0 added [ 200.961115][T11841] team0: Port device team_slave_1 added [ 200.981467][T11841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.983480][T11841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.991066][T11841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.994779][T11841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.996805][T11841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.004251][T11841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.029434][T11841] hsr_slave_0: entered promiscuous mode [ 201.031687][T11841] hsr_slave_1: entered promiscuous mode [ 201.033582][T11841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.035741][T11841] Cannot create hsr debugfs directory [ 201.089073][T11841] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.092406][T11841] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 201.155641][T11841] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.158408][T11841] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 201.253411][T11841] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.256277][T11841] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 201.352100][T11841] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.355149][T11841] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 201.484789][T11841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 201.488837][T11841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 201.499010][T11841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 201.503702][T11841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 201.512752][T11841] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.514810][T11841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.517045][T11841] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.519050][T11841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.539545][T11841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.546448][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.549640][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.560143][T11841] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.567319][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.569390][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.574408][ T1208] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.576502][ T1208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.659370][T11841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.674808][T11841] veth0_vlan: entered promiscuous mode [ 201.678701][T11841] veth1_vlan: entered promiscuous mode [ 201.689465][T11841] veth0_macvtap: entered promiscuous mode [ 201.694011][T11841] veth1_macvtap: entered promiscuous mode [ 201.704994][T11841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.708063][T11841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.711675][T11841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.714619][T11841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.717459][T11841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.720474][T11841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.723806][T11841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.727804][T11841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.731591][T11841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.734543][T11841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.737574][T11841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.740483][T11841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.743423][T11841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.746781][T11841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.751162][T11841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.753714][T11841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.756379][T11841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.758858][T11841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.793223][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.795670][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.804296][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.806573][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.485892][ T4751] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.577332][ T4751] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.602320][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.605908][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.609491][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.613055][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.615712][ T5939] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 202.618126][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 202.634185][T11865] wlan0 speed is unknown, defaulting to 1000 [ 202.636813][T11865] vxcan1 speed is unknown, defaulting to 1000 [ 202.687235][T11868] dccp_invalid_packet: P.Data Offset(59) too large [ 202.710870][ T4751] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.756158][T11865] chnl_net:caif_netlink_parms(): no params data found [ 202.760278][ T832] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 202.760427][ T7200] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 202.790613][ T5948] Bluetooth: hci2: command tx timeout [ 202.822642][T11865] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.824792][T11865] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.826854][T11865] bridge_slave_0: entered allmulticast mode [ 202.829011][T11865] bridge_slave_0: entered promiscuous mode [ 202.834467][T11865] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.836571][T11865] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.838617][T11865] bridge_slave_1: entered allmulticast mode [ 202.842229][T11865] bridge_slave_1: entered promiscuous mode [ 202.872408][T11865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.878092][T11865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.889222][ T4751] bridge_slave_1: left allmulticast mode [ 202.891043][ T4751] bridge_slave_1: left promiscuous mode [ 202.892714][ T4751] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.895517][ T4751] bridge_slave_0: left allmulticast mode [ 202.897162][ T4751] bridge_slave_0: left promiscuous mode [ 202.898797][ T4751] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.911650][ T7200] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 202.914906][ T7200] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.918200][ T7200] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.921103][ T7200] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 202.925608][ T7200] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 202.928197][ T7200] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 202.930553][ T7200] usb 7-1: Manufacturer: syz [ 202.930994][ T832] usb 10-1: Using ep0 maxpacket: 8 [ 202.934105][ T7200] usb 7-1: config 0 descriptor?? [ 202.934826][ T832] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.938354][ T832] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 202.941243][ T832] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 202.944116][ T832] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.947791][ T832] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 202.956098][ T832] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.161853][ T832] usb 10-1: GET_CAPABILITIES returned 0 [ 203.163633][ T832] usbtmc 10-1:16.0: can't read capabilities [ 203.165591][ T4751] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.169752][ T4751] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.173276][ T4751] bond0 (unregistering): Released all slaves [ 203.188895][T11865] team0: Port device team_slave_0 added [ 203.203303][T11865] team0: Port device team_slave_1 added [ 203.223351][T11865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.225464][T11865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.232640][T11865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.240422][T11865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.242422][T11865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.249723][T11865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.295154][T11865] hsr_slave_0: entered promiscuous mode [ 203.297219][T11865] hsr_slave_1: entered promiscuous mode [ 203.299205][T11865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.301462][T11865] Cannot create hsr debugfs directory [ 203.346644][ T7200] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 203.349905][ T7200] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 203.365824][ T7200] appleir 0003:05AC:8243.0008: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 203.367737][ T7323] usb 10-1: USB disconnect, device number 6 [ 203.425169][ T4751] hsr_slave_0: left promiscuous mode [ 203.427186][ T4751] hsr_slave_1: left promiscuous mode [ 203.429236][ T4751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.431847][ T4751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.434503][ T4751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.436742][ T4751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.469707][ T4751] veth1_macvtap: left promiscuous mode [ 203.472220][ T4751] veth0_macvtap: left promiscuous mode [ 203.474262][ T4751] veth1_vlan: left promiscuous mode [ 203.475794][ T4751] veth0_vlan: left promiscuous mode [ 203.546526][ T7200] usb 7-1: USB disconnect, device number 5 [ 203.784639][T11887] efs: device does not support 512 byte blocks [ 203.791781][T11887] device does not support 512 byte blocks [ 203.791781][T11887] [ 203.935689][T11898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11898 comm=syz.6.1825 [ 204.161690][T11909] tmpfs: Bad value for 'mpol' [ 204.174471][T11909] tmpfs: Bad value for 'mpol' [ 204.194855][T11909] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 204.255371][ T4751] team0 (unregistering): Port device team_slave_1 removed [ 204.338763][ T4751] team0 (unregistering): Port device team_slave_0 removed [ 204.382174][ T40] audit: type=1400 audit(1736853338.913:636): avc: denied { map } for pid=11913 comm="syz.5.1829" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 204.394384][ T40] audit: type=1400 audit(1736853338.913:637): avc: denied { execute } for pid=11913 comm="syz.5.1829" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 204.500378][ T40] audit: type=1400 audit(1736853339.023:638): avc: denied { write } for pid=11913 comm="syz.5.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 204.642144][ T5948] Bluetooth: hci0: command tx timeout [ 204.870488][ T5948] Bluetooth: hci2: command tx timeout [ 205.015054][T11926] binder: 11925:11926 ioctl 400c620e 20000140 returned -22 [ 205.234727][T11865] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 205.234860][T11940] __nla_validate_parse: 7 callbacks suppressed [ 205.234873][T11940] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1838'. [ 205.242617][T11865] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 205.247150][T11865] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 205.250559][T11865] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 205.280565][ T5972] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 205.287312][T11865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.294355][T11865] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.298354][ T1208] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.300487][ T1208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.306782][ T1208] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.308829][ T1208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.339479][T11865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.405800][T11865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.426783][T11865] veth0_vlan: entered promiscuous mode [ 205.432577][T11865] veth1_vlan: entered promiscuous mode [ 205.448275][T11865] veth0_macvtap: entered promiscuous mode [ 205.453702][ T5972] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 205.455799][T11865] veth1_macvtap: entered promiscuous mode [ 205.456777][ T5972] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.462173][ T5972] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.465076][ T5972] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 205.465388][T11865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.469502][ T5972] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 205.473149][T11865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.476851][ T5972] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 205.478907][T11865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.481252][ T5972] usb 7-1: Manufacturer: syz [ 205.482237][ T5972] usb 7-1: config 0 descriptor?? [ 205.485229][T11865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.492464][T11865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.496405][T11865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.501230][T11865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.507056][T11865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.510827][ T68] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 205.513081][T11865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.515927][T11865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.519065][T11865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.521939][T11865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.524944][T11865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.528215][T11865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.532410][T11865] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.534931][T11865] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.537432][T11865] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.539918][T11865] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.566093][ T4751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.568645][ T4751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.577028][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.580352][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.691472][ T68] usb 11-1: config index 0 descriptor too short (expected 31, got 27) [ 205.693902][ T68] usb 11-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0 [ 205.696712][ T68] usb 11-1: config 1 interface 0 has no altsetting 0 [ 205.700819][ T68] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 205.703460][ T68] usb 11-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 205.705816][ T68] usb 11-1: Product: syz [ 205.707047][ T68] usb 11-1: Manufacturer: syz [ 205.708468][ T68] usb 11-1: SerialNumber: syz [ 205.901103][ T5972] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 205.903395][ T5972] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 205.907228][ T5972] appleir 0003:05AC:8243.0009: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 205.992348][T11956] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 206.045680][T11959] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1844'. [ 206.161358][ T7200] usb 7-1: USB disconnect, device number 6 [ 206.325637][ T68] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 206.698950][T11972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1849'. [ 206.704424][T11972] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1849'. [ 206.952489][ T5948] Bluetooth: hci2: command tx timeout [ 207.035778][T11987] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 207.340462][ T832] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 207.370399][ T7200] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 207.502081][ T832] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 207.505232][ T832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.508313][ T832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.511382][ T832] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 207.516097][ T832] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 207.518678][ T832] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 207.521157][ T832] usb 7-1: Manufacturer: syz [ 207.521480][ T7200] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 207.527041][ T7200] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.527759][ T832] usb 7-1: config 0 descriptor?? [ 207.531298][ T7200] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.537114][ T7200] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 207.542952][ T7200] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 207.545585][ T7200] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 207.547909][ T7200] usb 10-1: Manufacturer: syz [ 207.550358][ T7200] usb 10-1: config 0 descriptor?? [ 207.823180][ T76] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.941394][ T832] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 207.943641][ T832] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 207.946653][ T832] appleir 0003:05AC:8243.000A: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 207.954235][ T7200] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 207.956552][ T7200] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 207.959706][ T7200] appleir 0003:05AC:8243.000B: hiddev2,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 208.142173][ T30] usb 7-1: USB disconnect, device number 7 [ 208.154116][T11996] FAULT_INJECTION: forcing a failure. [ 208.154116][T11996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.158199][T11996] CPU: 3 UID: 0 PID: 11996 Comm: syz.5.1859 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 208.161256][T11996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 208.164342][T11996] Call Trace: [ 208.165317][T11996] [ 208.166176][T11996] dump_stack_lvl+0x16c/0x1f0 [ 208.167530][T11996] should_fail_ex+0x497/0x5b0 [ 208.168899][T11996] _copy_to_user+0x32/0xd0 [ 208.170180][T11996] simple_read_from_buffer+0xd0/0x160 [ 208.171722][T11996] proc_fail_nth_read+0x198/0x270 [ 208.173177][T11996] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.174764][T11996] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.176362][T11996] vfs_read+0x1df/0xbe0 [ 208.177562][T11996] ? __fget_files+0x1fc/0x3a0 [ 208.178920][T11996] ? __pfx___mutex_lock+0x10/0x10 [ 208.180378][T11996] ? __pfx_vfs_read+0x10/0x10 [ 208.181746][T11996] ? __fget_files+0x206/0x3a0 [ 208.183112][T11996] ksys_read+0x12b/0x250 [ 208.184345][T11996] ? __pfx_ksys_read+0x10/0x10 [ 208.185750][T11996] do_syscall_64+0xcd/0x250 [ 208.187069][T11996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.188793][T11996] RIP: 0033:0x7f745c98473c [ 208.190083][T11996] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 208.195578][T11996] RSP: 002b:00007f745d6f8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 208.197964][T11996] RAX: ffffffffffffffda RBX: 00007f745cb75fa0 RCX: 00007f745c98473c [ 208.200231][T11996] RDX: 000000000000000f RSI: 00007f745d6f80a0 RDI: 0000000000000004 [ 208.202482][T11996] RBP: 00007f745d6f8090 R08: 0000000000000000 R09: 0000000000000000 [ 208.204778][T11996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.207039][T11996] R13: 0000000000000000 R14: 00007f745cb75fa0 R15: 00007ffd51626618 [ 208.209307][T11996] [ 208.210272][ C3] vkms_vblank_simulate: vblank timer overrun [ 208.219437][ T7200] usb 10-1: USB disconnect, device number 7 [ 208.283973][ T5979] usb 11-1: USB disconnect, device number 4 [ 208.288800][ T5979] usblp0: removed [ 209.030452][ T5948] Bluetooth: hci2: command tx timeout [ 209.464743][ T76] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.524443][ T76] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.589958][ T76] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.685644][ T76] bridge_slave_1: left allmulticast mode [ 209.687859][ T76] bridge_slave_1: left promiscuous mode [ 209.690133][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.694468][ T76] bridge_slave_0: left allmulticast mode [ 209.696326][ T76] bridge_slave_0: left promiscuous mode [ 209.697984][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.819927][T11999] kvm: apic: phys broadcast and lowest prio [ 209.933549][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.933799][T12013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.938646][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.939045][T12013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.942668][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.946000][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.948378][ T5939] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.954970][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.995371][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.000117][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.005075][ T76] bond0 (unregistering): Released all slaves [ 210.026873][T12019] wlan0 speed is unknown, defaulting to 1000 [ 210.029754][T12019] vxcan1 speed is unknown, defaulting to 1000 [ 210.150019][T12019] chnl_net:caif_netlink_parms(): no params data found [ 210.190312][ T7323] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 210.226790][T12019] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.228895][T12019] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.232713][T12019] bridge_slave_0: entered allmulticast mode [ 210.234949][T12019] bridge_slave_0: entered promiscuous mode [ 210.237522][T12019] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.239573][T12019] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.241857][T12019] bridge_slave_1: entered allmulticast mode [ 210.244398][T12019] bridge_slave_1: entered promiscuous mode [ 210.271768][T12019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.279160][T12019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.308457][ T76] hsr_slave_0: left promiscuous mode [ 210.311318][ T76] hsr_slave_1: left promiscuous mode [ 210.313458][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.315643][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.318107][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.320357][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.343609][ T76] veth1_macvtap: left promiscuous mode [ 210.345231][ T76] veth0_macvtap: left promiscuous mode [ 210.346830][ T76] veth1_vlan: left promiscuous mode [ 210.348361][ T76] veth0_vlan: left promiscuous mode [ 210.362178][ T7323] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.366210][ T7323] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50958, setting to 1024 [ 210.370552][ T7323] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 210.375372][ T7323] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.378023][ T7323] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.383409][ T7323] usb 10-1: config 0 descriptor?? [ 210.385333][T12014] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 210.796364][ T7323] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 210.798543][ T7323] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 210.800947][ T7323] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 210.803106][ T7323] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 210.805314][ T7323] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 210.807436][ T7323] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 210.809557][ T7323] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 210.811816][ T7323] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 210.813951][ T7323] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 210.816099][ T7323] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 210.818230][ T7323] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 210.820582][ T7323] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 210.822797][ T7323] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 210.824985][ T7323] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 210.827121][ T7323] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 210.829524][ T7323] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 210.834611][ T7323] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 210.998866][ T76] team0 (unregistering): Port device team_slave_1 removed [ 211.001060][ T7323] usb 10-1: USB disconnect, device number 8 [ 211.071585][ T76] team0 (unregistering): Port device team_slave_0 removed [ 211.230587][ T5287] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 211.401461][ T5287] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 211.404964][ T5287] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.408071][ T5287] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.411013][ T5287] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 211.416328][ T5287] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 211.418952][ T5287] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 211.421299][ T5287] usb 7-1: Manufacturer: syz [ 211.424471][ T5287] usb 7-1: config 0 descriptor?? [ 211.657571][T12019] team0: Port device team_slave_0 added [ 211.663052][T12019] team0: Port device team_slave_1 added [ 211.686281][T12019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.688453][T12019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.696012][T12019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.700128][T12019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.702203][T12019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.709601][T12019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.736184][T12019] hsr_slave_0: entered promiscuous mode [ 211.738909][T12019] hsr_slave_1: entered promiscuous mode [ 211.776774][T12047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=12047 comm=syz.6.1872 [ 211.835005][ T5287] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 211.837401][ T5287] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 211.840804][ T5287] appleir 0003:05AC:8243.000D: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 212.080433][ T5948] Bluetooth: hci0: command tx timeout [ 212.103260][ T5287] usb 7-1: USB disconnect, device number 8 [ 212.130026][T12019] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 212.133352][T12019] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 212.136822][T12019] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 212.139954][T12019] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 212.176419][T12019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.189146][T12019] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.193348][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.195395][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.200031][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.202078][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.274835][T12019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.289961][T12019] veth0_vlan: entered promiscuous mode [ 212.294502][T12019] veth1_vlan: entered promiscuous mode [ 212.306064][T12019] veth0_macvtap: entered promiscuous mode [ 212.309181][T12019] veth1_macvtap: entered promiscuous mode [ 212.316440][T12019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.319392][T12019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.322246][T12019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.325317][T12019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.328097][T12019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.331623][T12019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.335255][T12019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.342521][T12019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.346834][T12019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.350832][T12019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.355053][T12019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.359005][T12019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.363373][T12019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.368536][T12019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.373553][T12019] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.376369][T12019] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.378873][T12019] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.381555][T12019] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.414750][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.417117][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.427504][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.430975][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.676452][ T40] audit: type=1400 audit(1736853347.203:639): avc: denied { ioctl } for pid=12061 comm="syz.5.1875" path="socket:[54695]" dev="sockfs" ino=54695 ioctlcmd=0x89b0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 212.679319][T12062] tmpfs: Unknown parameter ')î' [ 212.751092][T12067] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1877'. [ 212.754112][T12067] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1877'. [ 212.757165][T12067] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1877'. [ 212.759707][T12067] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1877'. [ 213.130253][ T5972] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 213.260275][ T5972] usb 7-1: device descriptor read/64, error -71 [ 213.510305][ T5972] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 213.640305][ T5972] usb 7-1: device descriptor read/64, error -71 [ 213.694933][T12080] binder: 12079:12080 ioctl c0306201 200003c0 returned -14 [ 213.720083][T12088] overlayfs: missing 'lowerdir' [ 213.754649][ T5972] usb usb7-port1: attempt power cycle [ 213.762774][ T40] audit: type=1400 audit(1736853348.293:640): avc: denied { name_bind } for pid=12093 comm="syz.5.1890" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 213.807775][ T40] audit: type=1400 audit(1736853348.333:641): avc: denied { read } for pid=12091 comm="syz.6.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 214.073116][T12110] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1895'. [ 214.076598][T12110] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1895'. [ 214.080088][T12110] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1895'. [ 214.080292][ T1339] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 214.083663][T12110] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1895'. [ 214.110322][ T5972] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 214.140799][ T5972] usb 7-1: device descriptor read/8, error -71 [ 214.165986][T12113] fuse: Unknown parameter '0x0000000000000003' [ 214.243866][ T1339] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 214.247099][ T1339] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.250445][ T1339] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.253430][ T1339] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 214.257934][ T1339] usb 11-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 214.260620][ T1339] usb 11-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 214.262926][ T1339] usb 11-1: Manufacturer: syz [ 214.265323][ T1339] usb 11-1: config 0 descriptor?? [ 214.380313][ T5972] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 214.400745][ T5972] usb 7-1: device descriptor read/8, error -71 [ 214.510435][ T5972] usb usb7-port1: unable to enumerate USB device [ 214.673613][ T1339] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 214.675801][ T1339] appleir 0003:05AC:8243.000E: No inputs registered, leaving [ 214.681159][ T1339] appleir 0003:05AC:8243.000E: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 214.941733][ T5972] usb 11-1: USB disconnect, device number 5 [ 214.993826][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.745823][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.811418][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.870348][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.941213][ T67] bridge_slave_1: left allmulticast mode [ 216.942863][ T67] bridge_slave_1: left promiscuous mode [ 216.944552][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.947383][ T67] bridge_slave_0: left allmulticast mode [ 216.949066][ T67] bridge_slave_0: left promiscuous mode [ 216.951330][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.099630][T12124] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 217.115584][T12124] CIFS: Unable to determine destination address [ 217.149229][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.154344][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.157537][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.163131][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.166062][ T5939] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.168554][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.247702][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.251967][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.255423][ T67] bond0 (unregistering): Released all slaves [ 217.270672][T12128] wlan0 speed is unknown, defaulting to 1000 [ 217.272791][T12128] vxcan1 speed is unknown, defaulting to 1000 [ 217.362260][T12140] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1905'. [ 217.366074][T12140] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1905'. [ 217.461572][T12128] chnl_net:caif_netlink_parms(): no params data found [ 217.516488][T12128] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.518647][T12128] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.520938][T12128] bridge_slave_0: entered allmulticast mode [ 217.526414][T12128] bridge_slave_0: entered promiscuous mode [ 217.543137][T12128] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.545286][T12128] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.547503][T12128] bridge_slave_1: entered allmulticast mode [ 217.549775][T12128] bridge_slave_1: entered promiscuous mode [ 217.569370][T12128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.573611][T12128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.597193][T12128] team0: Port device team_slave_0 added [ 217.600151][T12128] team0: Port device team_slave_1 added [ 217.642887][T12128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.645624][T12128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.656071][T12128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.664534][ T67] hsr_slave_0: left promiscuous mode [ 217.667261][ T67] hsr_slave_1: left promiscuous mode [ 217.669603][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.681032][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.685536][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.687826][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.718899][ T67] veth1_macvtap: left promiscuous mode [ 217.721360][ T67] veth0_macvtap: left promiscuous mode [ 217.723067][ T67] veth1_vlan: left promiscuous mode [ 217.724644][ T67] veth0_vlan: left promiscuous mode [ 217.978844][T12167] netlink: 'syz.5.1913': attribute type 1 has an invalid length. [ 217.981361][T12167] netlink: 'syz.5.1913': attribute type 3 has an invalid length. [ 217.981609][T12168] __nla_validate_parse: 3 callbacks suppressed [ 217.981618][T12168] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1913'. [ 217.984367][T12167] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1913'. [ 218.335960][ C2] ------------[ cut here ]------------ [ 218.338336][ C2] WARNING: CPU: 2 PID: 12177 at kernel/signal.c:2050 posixtimer_send_sigqueue+0xba8/0x1020 [ 218.341823][ C2] Modules linked in: [ 218.343073][ C2] CPU: 2 UID: 0 PID: 12177 Comm: syz.2.1917 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 218.347778][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 218.351605][ C2] RIP: 0010:posixtimer_send_sigqueue+0xba8/0x1020 [ 218.353620][ C2] Code: ff ff 4c 89 e7 e8 98 fd 9d 00 e9 7e f8 ff ff 41 bf 02 00 00 00 e9 87 f8 ff ff 48 89 54 24 10 48 89 44 24 08 e8 c9 50 3b 00 90 <0f> 0b 90 48 8d 7b 10 48 8b 44 24 08 48 b9 00 00 00 00 00 fc ff df [ 218.359226][ C2] RSP: 0018:ffffc90000658d08 EFLAGS: 00010046 [ 218.361018][ C2] RAX: 0000000080010003 RBX: ffff8880291be960 RCX: 1ffff11005237d2f [ 218.363294][ C2] RDX: ffff88804b0b4880 RSI: ffffffff815ed3d7 RDI: 0000000000000001 [ 218.365591][ C2] RBP: ffff88804b0b4880 R08: 0000000000000001 R09: 0000000000000000 [ 218.367888][ C2] R10: 0000000000000001 R11: 0000000000000002 R12: ffff8880291bea04 [ 218.370169][ C2] R13: 1ffff920000cb1a6 R14: ffff8880291bea38 R15: ffff8880291bea20 [ 218.372611][ C2] FS: 00007f0d48f876c0(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 [ 218.375200][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 218.377118][ C2] CR2: 0000000020044000 CR3: 000000003093a000 CR4: 0000000000352ef0 [ 218.379426][ C2] DR0: 0000000000002800 DR1: 0000000000000000 DR2: 0000000000000000 [ 218.381747][ C2] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 218.384045][ C2] Call Trace: [ 218.385022][ C2] [ 218.385875][ C2] ? __warn+0xea/0x3c0 [ 218.387065][ C2] ? posixtimer_send_sigqueue+0xba8/0x1020 [ 218.388785][ C2] ? report_bug+0x3c0/0x580 [ 218.390121][ C2] ? handle_bug+0x54/0xa0 [ 218.391446][ C2] ? exc_invalid_op+0x17/0x50 [ 218.392820][ C2] ? asm_exc_invalid_op+0x1a/0x20 [ 218.394302][ C2] ? posixtimer_send_sigqueue+0xba7/0x1020 [ 218.396022][ C2] ? posixtimer_send_sigqueue+0xba8/0x1020 [ 218.397692][ C2] ? posixtimer_send_sigqueue+0xba7/0x1020 [ 218.399372][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 218.400948][ C2] ? __pfx_posixtimer_send_sigqueue+0x10/0x10 [ 218.402708][ C2] alarm_handle_timer+0x31/0x50 [ 218.404138][ C2] ? __pfx_alarm_handle_timer+0x10/0x10 [ 218.405747][ C2] alarmtimer_fired+0x133/0x400 [ 218.407161][ C2] ? __pfx_alarmtimer_fired+0x10/0x10 [ 218.408719][ C2] __hrtimer_run_queues+0x20a/0xae0 [ 218.410233][ C2] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 218.411956][ C2] ? read_tsc+0x9/0x20 [ 218.413176][ C2] hrtimer_interrupt+0x392/0x8e0 [ 218.414623][ C2] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 218.416390][ C2] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 218.418023][ C2] [ 218.418895][ C2] [ 218.419766][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 218.421524][ C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 218.423372][ C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 32 4a f6 48 89 df e8 ce b1 4a f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 c5 96 3b f6 65 8b 05 86 40 d7 74 85 c0 74 16 5b [ 218.428915][ C2] RSP: 0018:ffffc9000668fd58 EFLAGS: 00000246 [ 218.430674][ C2] RAX: 0000000000000002 RBX: ffff8880291be990 RCX: 1ffffffff20be0c9 [ 218.432955][ C2] RDX: 0000000000000000 RSI: ffffffff8b6cd9e0 RDI: ffffffff8bd1ef20 [ 218.435216][ C2] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000001 [ 218.437387][ C2] R10: ffffffff905f4997 R11: 0000000000000001 R12: ffffc9000668fe50 [ 218.439655][ C2] R13: 0000000000000000 R14: 1ffff92000cd1fb1 R15: dffffc0000000000 [ 218.442019][ C2] do_timer_settime+0x315/0x400 [ 218.443457][ C2] ? __pfx_common_timer_set+0x10/0x10 [ 218.445031][ C2] ? __pfx_do_timer_settime+0x10/0x10 [ 218.446610][ C2] ? __pfx_do_futex+0x10/0x10 [ 218.447979][ C2] __x64_sys_timer_settime+0x26a/0x2c0 [ 218.449555][ C2] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 218.451339][ C2] ? __pfx___x64_sys_futex+0x10/0x10 [ 218.452881][ C2] do_syscall_64+0xcd/0x250 [ 218.454198][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.455919][ C2] RIP: 0033:0x7f0d48185d29 [ 218.457218][ C2] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.462730][ C2] RSP: 002b:00007f0d48f87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 218.465134][ C2] RAX: ffffffffffffffda RBX: 00007f0d48375fa0 RCX: 00007f0d48185d29 [ 218.467432][ C2] RDX: 0000000020000340 RSI: 0000000000000001 RDI: 0000000000000000 [ 218.469703][ C2] RBP: 00007f0d48201b08 R08: 0000000000000000 R09: 0000000000000000 [ 218.472116][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.474426][ C2] R13: 0000000000000000 R14: 00007f0d48375fa0 R15: 00007fff5a3a5b28 [ 218.476749][ C2] [ 218.477663][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 218.479881][ C2] CPU: 2 UID: 0 PID: 12177 Comm: syz.2.1917 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 218.483832][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 218.487047][ C2] Call Trace: [ 218.488048][ C2] [ 218.488896][ C2] dump_stack_lvl+0x3d/0x1f0 [ 218.490247][ C2] panic+0x71d/0x800 [ 218.491417][ C2] ? __pfx_panic+0x10/0x10 [ 218.492705][ C2] ? show_trace_log_lvl+0x29d/0x3d0 [ 218.494222][ C2] ? check_panic_on_warn+0x1f/0xb0 [ 218.495724][ C2] ? posixtimer_send_sigqueue+0xba8/0x1020 [ 218.497409][ C2] check_panic_on_warn+0xab/0xb0 [ 218.498839][ C2] __warn+0xf6/0x3c0 [ 218.499963][ C2] ? posixtimer_send_sigqueue+0xba8/0x1020 [ 218.501635][ C2] report_bug+0x3c0/0x580 [ 218.502885][ C2] handle_bug+0x54/0xa0 [ 218.504066][ C2] exc_invalid_op+0x17/0x50 [ 218.505422][ C2] asm_exc_invalid_op+0x1a/0x20 [ 218.506831][ C2] RIP: 0010:posixtimer_send_sigqueue+0xba8/0x1020 [ 218.508653][ C2] Code: ff ff 4c 89 e7 e8 98 fd 9d 00 e9 7e f8 ff ff 41 bf 02 00 00 00 e9 87 f8 ff ff 48 89 54 24 10 48 89 44 24 08 e8 c9 50 3b 00 90 <0f> 0b 90 48 8d 7b 10 48 8b 44 24 08 48 b9 00 00 00 00 00 fc ff df [ 218.514064][ C2] RSP: 0018:ffffc90000658d08 EFLAGS: 00010046 [ 218.515819][ C2] RAX: 0000000080010003 RBX: ffff8880291be960 RCX: 1ffff11005237d2f [ 218.518107][ C2] RDX: ffff88804b0b4880 RSI: ffffffff815ed3d7 RDI: 0000000000000001 [ 218.520397][ C2] RBP: ffff88804b0b4880 R08: 0000000000000001 R09: 0000000000000000 [ 218.522686][ C2] R10: 0000000000000001 R11: 0000000000000002 R12: ffff8880291bea04 [ 218.524981][ C2] R13: 1ffff920000cb1a6 R14: ffff8880291bea38 R15: ffff8880291bea20 [ 218.527281][ C2] ? posixtimer_send_sigqueue+0xba7/0x1020 [ 218.528976][ C2] ? posixtimer_send_sigqueue+0xba7/0x1020 [ 218.530675][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 218.532264][ C2] ? __pfx_posixtimer_send_sigqueue+0x10/0x10 [ 218.534103][ C2] alarm_handle_timer+0x31/0x50 [ 218.535540][ C2] ? __pfx_alarm_handle_timer+0x10/0x10 [ 218.537146][ C2] alarmtimer_fired+0x133/0x400 [ 218.538622][ C2] ? __pfx_alarmtimer_fired+0x10/0x10 [ 218.540177][ C2] __hrtimer_run_queues+0x20a/0xae0 [ 218.541750][ C2] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 218.543409][ C2] ? read_tsc+0x9/0x20 [ 218.544624][ C2] hrtimer_interrupt+0x392/0x8e0 [ 218.546083][ C2] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 218.547821][ C2] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 218.549461][ C2] [ 218.550326][ C2] [ 218.551219][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 218.552971][ C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 218.554816][ C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 32 4a f6 48 89 df e8 ce b1 4a f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 c5 96 3b f6 65 8b 05 86 40 d7 74 85 c0 74 16 5b [ 218.560329][ C2] RSP: 0018:ffffc9000668fd58 EFLAGS: 00000246 [ 218.562098][ C2] RAX: 0000000000000002 RBX: ffff8880291be990 RCX: 1ffffffff20be0c9 [ 218.564394][ C2] RDX: 0000000000000000 RSI: ffffffff8b6cd9e0 RDI: ffffffff8bd1ef20 [ 218.566690][ C2] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000001 [ 218.568984][ C2] R10: ffffffff905f4997 R11: 0000000000000001 R12: ffffc9000668fe50 [ 218.571285][ C2] R13: 0000000000000000 R14: 1ffff92000cd1fb1 R15: dffffc0000000000 [ 218.573588][ C2] do_timer_settime+0x315/0x400 [ 218.575008][ C2] ? __pfx_common_timer_set+0x10/0x10 [ 218.576580][ C2] ? __pfx_do_timer_settime+0x10/0x10 [ 218.578138][ C2] ? __pfx_do_futex+0x10/0x10 [ 218.579519][ C2] __x64_sys_timer_settime+0x26a/0x2c0 [ 218.581118][ C2] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 218.582816][ C2] ? __pfx___x64_sys_futex+0x10/0x10 [ 218.584377][ C2] do_syscall_64+0xcd/0x250 [ 218.585722][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.587405][ C2] RIP: 0033:0x7f0d48185d29 [ 218.588743][ C2] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.594290][ C2] RSP: 002b:00007f0d48f87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 218.596714][ C2] RAX: ffffffffffffffda RBX: 00007f0d48375fa0 RCX: 00007f0d48185d29 [ 218.598992][ C2] RDX: 0000000020000340 RSI: 0000000000000001 RDI: 0000000000000000 [ 218.601298][ C2] RBP: 00007f0d48201b08 R08: 0000000000000000 R09: 0000000000000000 [ 218.603576][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.605824][ C2] R13: 0000000000000000 R14: 00007f0d48375fa0 R15: 00007fff5a3a5b28 [ 218.608107][ C2] [ 219.670184][ C2] Shutting down cpus with NMI [ 219.672101][ C2] Kernel Offset: disabled [ 219.673498][ C2] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:15:52 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a844a40 RCX=ffffc9002d7d3000 RDX=0000000000080000 RSI=ffffffff818e18f6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90004b9f5a8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000005 R12=ffffed100d508949 R13=0000000000000001 R14=ffff88806a844a48 R15=ffff88806a63fe40 RIP=ffffffff818e18fd RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f745d6f86c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f745d6f7f98 CR3=0000000060562000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f745ca02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f745ca02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f745ca02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f745ca02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f745ca02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f745ca02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f745cb4b488 00007f745cb4b480 00007f745cb4b478 00007f745cb4b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f745d6ad100 00007f745cb4b440 00007f745cb4b458 00007f745cb4b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f745cb4b498 00007f745cb4b490 00007f745cb4b488 00007f745cb4b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=00007f13db200000 RCX=ffffffff81e39e78 RDX=ffff888024308000 RSI=00007f13db200000 RDI=0000000000000006 RBP=0000000000000000 RSP=ffffc90003b87880 R8 =0000000000000006 R9 =00007f13db200000 R10=00007f13db170000 R11=0000000000000002 R12=dffffc0000000000 R13=0000000000000000 R14=00007f13db170000 R15=ffffc90003b87cc8 RIP=ffffffff819a1e22 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f13e10a7d60 CR3=000000000df7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13e054b6a3 00007f13e054b6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc9d7c8d00 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558b08077b 000055558b080610 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558b00b294 000055558b00b290 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558b0064a0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558b08cd41 000055558b08a870 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558b07a7b4 000055558b07a7b0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004010000000806 0601018a00040008 0300040004034e04 0000032010002f80 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010c100000040100 000008060601018a 0004000803000400 04034e0400000320 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10002f8004221000 060101f40010002f a0030008002f9803 0100000408062f90 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300656572666b01 ffffffffffffffff f3082a80032a8004 2f800302a8100003 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80040a1000060402 a800080005a00300 0800059803000800 05900303ffffffff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851c0d65 RDI=ffffffff9ab11b20 RBP=ffffffff9ab11ae0 RSP=ffffc90000658668 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000007 R12=0000000000000000 R13=0000000000000033 R14=ffffffff851c0d00 R15=0000000000000000 RIP=ffffffff851c0d8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f0d48f876c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020044000 CR3=000000003093a000 CR4=00352ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=00000000ffffe000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d48202a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d48202aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d48202aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d48202ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d48202b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0d48202c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000306f65 6469762f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000134c46 474a550c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001e509f RBX=0000000000000003 RCX=ffffffff8b2a17c9 RDX=0000000000000000 RSI=ffffffff8b6cd9e0 RDI=ffffffff8bd1ef20 RBP=ffffed1003ad4488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d6a2440 R14=ffffffff905f4990 R15=0000000000000000 RIP=ffffffff8b2a2baf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c262157 CR3=0000000060562000 CR4=00352ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f745ca02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f745ca02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f745ca02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f745ca02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f745ca02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f745ca02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f745cb4b488 00007f745cb4b480 00007f745cb4b478 00007f745cb4b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f745d6ad100 00007f745cb4b440 00007f745cb40004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f745cb4b498 00007f745cb4b490 00007f745cb4b488 00007f745cb4b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000