last executing test programs: 1m12.273118398s ago: executing program 3 (id=53): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x2000) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x60000001, 0x7fff, 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 1m12.271107156s ago: executing program 3 (id=54): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x18}]}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') (async) open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0) 1m12.20295797s ago: executing program 3 (id=55): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) (async) ioprio_set$pid(0x3, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x40, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9ee}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}, 0x1, 0x0, 0x0, 0xc804}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14ff01956d3a3fe643ccc59e6d22f256093f54da0a1789ffd840300983a1da92e9badf6a775500000000dd05e2f6e58e5baf3d9c66faaa28f9d6038b0e996e1444bd8597c9d40a70e317fa5228206f87d9b44a5c5c60", @ANYRES16=r1, @ANYBLOB="030f000000000000000034000000"], 0x14}}, 0x80) 1m12.13265817s ago: executing program 3 (id=57): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000002500)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000040)={'full', 0x20, 0x2, 0x20, 0x7}, 0x2f) (async) writev(r2, &(0x7f0000002480)=[{&(0x7f00000021c0)="aab090", 0x3}], 0x1) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000080)="10123f4c9c5cdf7cc9e5ee8f5d0062279f767b286585ccc930e3ab1d078dfb2b71ed972c43c36b58fe2ab6e0b89af00cd07229100a7d0e699182edf99133b211fe7c93ee03263c410531123ef246394ed16dcd752a45f827aa60b43e75f669521585c1e5", 0x64}, {&(0x7f0000000100)="1fb8673bd1579040af9e7d5bfb8fc33b9d91654a574b6791115a9ffe8699bfe3d15c0de6739a5fa593b93e3520e57e9500719a7014e9cd731a23ccdeb1e0d3a655d63dd7aeee0d5bc26db3e040ecf83677cf60ea042b1938be7ab7a25680eabe07863bc54e36090b3fdcb50cd9f77bec5fa507c5ac4949d0dc83e1d7a9e0c11535747f4bb05214d9cac14acfae6b6038cc5b334ad66d5d4c8cba7ad03c326c6c77d1e80b0723663ba50211bfbbff8cb6af1681537436f7f7943a4962a16108ed05d7fd46449154f5ae058a749c33bbc0cd2c0e7b055087b31424ef53cbc70381194be88c685e8e73418be57dd4fc7aa196640d1ae55481", 0xf7}, {&(0x7f0000000200)="f80320d01f938b2d0bcc54f387b8dffd0ce816e9320a8be20b0b978aee6d98", 0x1f}, {&(0x7f0000000240)}, {&(0x7f0000000280)="9d3fb11a38a1e96107c4331515f4fc7faf09207316a7cefc988688d25929adc0de4f6ffbb2cedac704efdb9b957c5d3e202959acff2895163daf0e81aa32600e8183615f6ee2025c90f2aafe1b872b510cb50069f3b46c745256c396122627ebb1fb69a3a5ab4e08599bea22ec8f074d2e3a3b21802372f35c5a1ab389b04f4638055ad172accc6e5d8fde4973965b019cb39531b0791ba31e16408ef742fd7425082a59ed26453c5c3ed2f73c97036c1009792560bd2ff7a3f8a45d601da7aa7c0d5657cd7dc1", 0xc7}, {&(0x7f0000000380)="42a09dab366d4f231caaf26b67e6f28354ca311a31dcf66b7b529c77e5b7a9ac929b21", 0x23}, {&(0x7f00000003c0)="e8c36ed828d4e2eeb22acc95382bd9548a09b599ecc4317bfb3d0ad69acb6974312ec29e13cad49c720640c703181a39c0b43a33b108ee074b6af35647836fa5e889af233a27c443191a749c80eeb5555ed890957e57b8d5c6dc2d697c39f69cac12e8acb7ba49936dea92a984b5470e2269c2e7dd8d1412070b95f9b6f8a4bdec2295dab78f79c1227d68c8d4cd63aea2057712cf6f30ceb5c90dfb", 0x9c}], 0x7) 1m12.131523596s ago: executing program 3 (id=59): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50007d1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r3, &(0x7f0000000300)) recvfrom$unix(r3, &(0x7f0000000100)=""/173, 0xad, 0x12121, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000100000500000a40000000060a010400000000000000000a0000010900010073797a310000000014000480100001800b00010074617267657400000900020073797a3200000000140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1m12.070923902s ago: executing program 3 (id=61): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800"], 0x0, 0x37, 0x0, 0x1}, 0x28) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={[0xe]}, 0x8}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25d0, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x24d, 0x2, 0x4a732f64, 0x100008, 0x9, 0xc, 0x2, 0x12a0, 0x6, 0xf477, 0x800, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x4, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x2, 0x7fff, 0x5, 0x8, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x3, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x40083, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0x80a8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0xfffffffc, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x1, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x40400, 0xffff58b9, 0x4c2336d3, 0x4, 0x20000001, 0x3, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7faf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff800, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x490, 0x8d3, 0x6, 0x8, 0x3ff, 0x80000002, 0x400, 0x100, 0xa, 0x10007, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x100, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x200006, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0xffffffff, 0x5, 0x1afa, 0x1, 0x8, 0xfffffe01, 0x7b, 0xfffffff8, 0x100040, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x8000, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0xf6, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0x1, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x5, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r2, 0x4068aea3, &(0x7f00000002c0)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000940)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="850000006c0080006a0a00ff000000000c00000000000008950900000000000000106aba95e2aab1490bc14021a976c4630000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e", @ANYBLOB='\v'], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000080) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x40, r10, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x174, r10, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xbff2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xda10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x30ce}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x31}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x800}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x800}}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000014}, 0x20040004) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x88, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="192ed9f9db52"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "9f55875745d4b02e0b4e67eb338f00f2"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x62}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_PMK={0x14, 0xfe, "1bd6ba3119ac4c493c36cb163abe0dc6"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9e1ca59c0212"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x20008001) 1m8.20202545s ago: executing program 0 (id=125): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r4) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000000000080000040"]) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x10, &(0x7f0000000040)=0xfffffffc, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r6, 0xc0285628, &(0x7f0000000200)={0x0, 0x1, 0x7f, '\x00', &(0x7f00000001c0)=0xb}) open$dir(&(0x7f0000000100)='./bus\x00', 0x2601, 0x7a) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) 1m7.930928766s ago: executing program 0 (id=128): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) unshare(0x10400) 1m7.930623156s ago: executing program 0 (id=129): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x41040, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c00000011000500000000000003000007000000", @ANYRES32=r3, @ANYBLOB="01000000000000000c001a800800058004000280"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x15, '\x00', r3, 0x25, r1, 0x8, &(0x7f0000000140)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x5, 0xc, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r1, r1, r1, r1, r1], 0x0, 0x10, 0x6}, 0x94) (async) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1m7.878667607s ago: executing program 0 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1472}], 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) (async, rerun: 32) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0) (async, rerun: 32) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) (async, rerun: 32) umount2(&(0x7f00000001c0)='./file0\x00', 0x8) (rerun: 32) 1m7.799837253s ago: executing program 0 (id=132): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x1, 0x80003, 0x41565559, 0x1, 0x8000, 0x3, 0x6, 0x10, 0x1, 0x7, 0x0, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) 1m7.541696256s ago: executing program 0 (id=135): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x48300, 0x10) renameat2(r0, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000200)='./file0\x00', 0x7) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x86dd, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r4, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r4, 0x0, &(0x7f0000000000)='\x00', 0x1, 0x7fff800000000002}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r4, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000380)={0x28, 0x2, r4, r4, 0x1000, 0x5, 0x9}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r4}) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffe4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) 1m7.431857561s ago: executing program 32 (id=135): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x48300, 0x10) renameat2(r0, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000200)='./file0\x00', 0x7) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x86dd, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r4, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r4, 0x0, &(0x7f0000000000)='\x00', 0x1, 0x7fff800000000002}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r4, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000380)={0x28, 0x2, r4, r4, 0x1000, 0x5, 0x9}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r4}) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffe4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) 57.612785411s ago: executing program 1 (id=222): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0100001800dd8d000000000000e9c4e45bcebfbdeb2aa901a8a9a773000006001500020000001800168014000100"/60], 0x3c}}, 0x0) r3 = inotify_init1(0x0) read(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r5, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x34}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRESHEX=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 56.767580548s ago: executing program 33 (id=61): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800"], 0x0, 0x37, 0x0, 0x1}, 0x28) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={[0xe]}, 0x8}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25d0, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x24d, 0x2, 0x4a732f64, 0x100008, 0x9, 0xc, 0x2, 0x12a0, 0x6, 0xf477, 0x800, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x4, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x2, 0x7fff, 0x5, 0x8, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x3, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x40083, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0x80a8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0xfffffffc, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x1, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x40400, 0xffff58b9, 0x4c2336d3, 0x4, 0x20000001, 0x3, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7faf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff800, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x490, 0x8d3, 0x6, 0x8, 0x3ff, 0x80000002, 0x400, 0x100, 0xa, 0x10007, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x100, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x200006, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0xffffffff, 0x5, 0x1afa, 0x1, 0x8, 0xfffffe01, 0x7b, 0xfffffff8, 0x100040, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x8000, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0xf6, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0x1, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x5, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r2, 0x4068aea3, &(0x7f00000002c0)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000940)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="850000006c0080006a0a00ff000000000c00000000000008950900000000000000106aba95e2aab1490bc14021a976c4630000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e", @ANYBLOB='\v'], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000080) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x40, r10, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x174, r10, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xbff2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xda10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x30ce}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x31}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x800}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x800}}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000014}, 0x20040004) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x88, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="192ed9f9db52"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "9f55875745d4b02e0b4e67eb338f00f2"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x62}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_PMK={0x14, 0xfe, "1bd6ba3119ac4c493c36cb163abe0dc6"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9e1ca59c0212"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x20008001) 56.767491619s ago: executing program 1 (id=231): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000000)) ioctl$CDROM_SET_OPTIONS(r0, 0x5320, 0x5) 56.592197888s ago: executing program 1 (id=233): r0 = socket(0x11, 0xa, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0, 0x38}, 0x8}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000001c00)={0x0, 0x0, 0x65a000, 0x5, 0x74, 0x5c81, 0x5, 0x10, {0x0, @in6={{0xa, 0x4e21, 0x6b, @private0}}, 0x7e7, 0xca, 0x4, 0x6b46, 0x2}}, &(0x7f0000001cc0)=0xb0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001d00)={0x0, 0x6}, &(0x7f0000001d40)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001ec0)=[{&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x7fffffff, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000001380)=[{&(0x7f00000001c0)="4cc936709c7be6a4320f2f792c073cced3728d54e0076e5aa7eca6a5074550922cb7181b90ba5432c8099a4124b0d3f85d4bffc93951ec13995180f90ded5ef0ed1bf4d3c1aad814e10f08d7627bf891ebbb9d5cf0e5abb7cdf8f1f6922184461c6d63635b6432ec8c611cc14b2996498180b9aab90a72d3c4986b175478c2af0f540ea152a540670c57e2340f1de3a2bebf2acf660b7839eed3ca9470d077effc", 0xa1}, {&(0x7f0000000280)="4bcd4afe2add26c9137092fec7aa427194ff96a7e91e5ec990aa5220309e425d835f69aee0fd30b4f8eb34e66a42dd9dd0379ace292933805db464b6383edfc836a86da6b3e8bb9309814966e9b33006051e3a005e24479d9cddf903aa3c3e294f258946cd93e07060a505998528338e", 0x70}, {&(0x7f0000000300)="06bb4ec4163c083591048a6c088f5207096d49116a9e34bac33696e575f23276ef4f4f6f83bd2eec891f68153d2c33349766105a1e7865f327d7f53f62a744b3ca18adcde6bbe8f92b1811ae3c3b8fa298490ab0c6d85310", 0x58}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000000080)}], 0x5, 0x0, 0x0, 0x4000800}, {&(0x7f0000000140)=@in6={0xa, 0x4e20, 0xffff, @mcast2, 0x3320}, 0x1c, &(0x7f0000001740)=[{&(0x7f0000001400)="e4138c4145099d4a810f1994e04f013b04f810eea3795560d962213103c627528e39500afdbed7bbffe7f5c4381b6803f458019882604b987997dfc3477730379bdb79b7b50a6e910eecf13eb55cec9c9a32b31f7d642f111ab8592dca3d10feb3c3650cacb50175f68113c4f1f0bca7ab3a79ee343bf3145228528887c13c7c5482021166412cb458493c559133f8399b4860684e1004291d0bd753fd2d390e3156583aeef4845e3fee843a8013c8dca3a90c315f5c48cc8869", 0xba}, {&(0x7f00000014c0)="2966ef1c3c464abb3341ecd7f36bd4ad993a5ba73ac1ca257773d818464e2e92549482", 0x23}, {&(0x7f0000001500)="46370531ae82bf4ceaebf38522cca3f0b70b2dd32156b57157a60375256016d5b235f2c76553d273851d4a4a34d4c9e64fd6bf5831a90a600548821f5d91e826ecf4c027ecfc4da33ace1d66e2d866df52d0b57cbb32b38a9ed7fdedc80c4cb7f2a95255f984c54a015530e5e0595a54b96a95468a43cbc290386ae0c8e02bee04c8950cfd4be47b6ce62eba158f72a76e382872", 0x94}, {&(0x7f00000015c0)="e31e4ae38b037515821359b7c5ca920fff1341156c3165e2365c41d96cccf33a2b1cd81ad04daec58cbe236ec8641ca7b9fae1c5dadaaaeb4a0908109b0fc53e0058b71c61bc020416439ed30964bad5f0770c3bfd7b5498fd6afda5764d06349316d7d7c5ba4d756f345b969ac0094dd3e88d274e60ee6dc8649d663a3a350b7d08b6d1c22b868c06363980a21e43bd1d6085ec85d2ef7da9fb2d6879d21ae910", 0xa1}, {&(0x7f0000001680)="7b6a1e0c6b8d2163d8376c68d5e7bbae99029399a31750f47b568f6bb2164da6c8e5e57033c30c01ecd0acc8e5e5849408e356439ac88f450fa48a3011d9c722eac9f3e69c99c207e0c8995d5fa2e03aa5e5c1f01a917d1ef6e65f6c167f320e80484fe07da42d10e3724080651b3ab2e7805b77ad0573a5503f6271d2478b714c070cde9aec67af6a7ab9e478e178c4b66a7f62e40a225280e21c76d48438f2c48e9d0ff8f6bf09859291d803f2", 0xae}], 0x5, 0x0, 0x0, 0x800}, {&(0x7f00000017c0)=@in6={0xa, 0x4e22, 0x1838fff5, @remote, 0x4}, 0x1c, &(0x7f0000001a00)=[{&(0x7f0000001800)="116103aedebd4560c0b8cbe1a0d015c73580b747a7b75822c47928ba46fd1b7fad65d492be6593824d2b87b65c4089ebdba10e36c7652e6f5551c585bebed1060a23a5dfd69004953bf07eba96683b4f304b6927dfda1c82a2fd16dc569d0ad2c89588d5273ff0df2342861e208ce8f9b968f92cf6cfbb56ab6377feb62f241256bf92da3573591b398ad2f962a824009836cde8dd0f52a50bf33303a7e49c98f059af2e334e59a9cb1625cb1f3d19287bf4cc12695757c99ed404ac7328777051a66260970481ad39ae467b75b14b", 0xcf}, {&(0x7f0000001900)="966e66ac9f2f50cbc698e2bbb2f2075300457e311f3262113474f74ed6d47739227a8f4c01455d7a6a8c209e8ca47a1c3334b3eb3c18f54d09c25f633f1a1dbf268f6c022c0dc4dc5f85db8296f0a2df6b0251b0c8f43189b82912fd1a7d3baf69ead65c399ce60700772d697b8666303a0ca0c40aa5bc5b86599c959597c05899141432279f55453d51a3248f89b01fb9328c7d4057", 0x96}, {&(0x7f00000019c0)="94e40c6eccfd4e218f", 0x9}], 0x3, &(0x7f0000001a40)=[@init={0x18, 0x84, 0x0, {0x3, 0x0, 0x7fff, 0xef18}}, @authinfo={0x18, 0x84, 0x6, {0x3}}, @init={0x18, 0x84, 0x0, {0x401, 0xdb50, 0x200, 0x7}}, @init={0x18, 0x84, 0x0, {0x795c, 0x1, 0x0, 0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x15}}], 0x80, 0x11}, {&(0x7f0000001ac0)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000001b00)="347deaab4102a4a39299903201be54d2b0cf7f03f15184bfec3dd3ab10d9ac87fbcd201b9ba793af3282a3d828f5859c210a9a8e55acf0e152340a13745a7e3fef64f910ba4d86c262bc1c5a72de8a332c5c3455ef20", 0x56}, {&(0x7f0000001b80)="5def66b233d76486e56f4ced6474549e117ee665", 0x14}], 0x2, &(0x7f0000001d80)=[@sndinfo={0x20, 0x84, 0x2, {0x8000, 0x200, 0xb, 0x1ffe0000, r1}}, @authinfo={0x18, 0x84, 0x6, {0x393}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x7ad5}}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @sndinfo={0x20, 0x84, 0x2, {0x49cf, 0x8, 0x5, 0xfffffffe, r2}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x6}}, @init={0x18, 0x84, 0x0, {0xec28, 0x4d44, 0x8, 0x5}}, @init={0x18, 0x84, 0x0, {0x40, 0x2ad, 0x3, 0x3}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @authinfo={0x18, 0x84, 0x6, {0x5}}], 0x110, 0x8824}], 0x4, 0x50024) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000001fc0)={0x1, @sliced={0xfff4, [0x8000, 0x6, 0xcec8, 0xe0a, 0x1, 0x7fff, 0x855, 0x2, 0x5, 0xfff0, 0x1000, 0x2, 0x900, 0x2, 0x2, 0x347, 0x9, 0x3717, 0x3, 0x2, 0x9, 0x7, 0x118, 0xfff, 0x3, 0x7, 0xf, 0x3, 0xfff9, 0x50ad, 0x6, 0x8, 0x800, 0x2, 0x1, 0x80, 0x0, 0x7, 0x800, 0x57a9, 0x3, 0x3, 0x4a9a, 0x1ff, 0x81, 0xff, 0xc, 0xfffc], 0x3bbd}}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000000)={0x0, 0x6, 0xfffffffc, 0x4800}) 56.531972297s ago: executing program 1 (id=234): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x10) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}) r0 = socket$isdn(0x22, 0x3, 0x22) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mbind(&(0x7f0000bdb000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000), 0x81, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x2000000000000007, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000, {0x2, 0x401, 0x3, 0x4, 0x0, 0xfffffffffffffffe, 0x47, 0x0, 0x126, 0x6000, 0x10000, r4, 0x0, 0x902, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x400040, 0x80, 0x2, 0xfffffffb, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r5, 0x40140921, 0x7) sendfile(r0, r1, 0x0, 0x200) syz_clone(0xa0082400, 0x0, 0x0, 0x0, 0x0, 0x0) 55.652516958s ago: executing program 1 (id=246): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0x1}) r1 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "2410b5a7bbbd9a387feaf5ed5268da25f905c31228ea08b97bc6f316e414ae38fed19a502fee41a44036ca1c6a0de835492f3c6c3062e298fde1fc9f19588c23", 0x2c}, 0x48, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$instantiate(0xc, r2, &(0x7f00000001c0)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', '*.\xaf)'}, 0x1d, r2) r3 = add_key(&(0x7f0000000200)='id_resolver\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0x4, 0x4}, 0x6) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x84042, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2008c0, 0x0) ioctl$KVM_GET_XSAVE(r6, 0x9000aea4, &(0x7f0000000380)) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000001380)='syzkaller\x00', &(0x7f00000013c0)='\'P\'\x00') select(0x40, &(0x7f0000001400)={0x2, 0x8, 0x4, 0xf828, 0x9, 0x9, 0x1, 0x17}, &(0x7f0000001440)={0x5, 0x1, 0x0, 0xed6, 0x100000000, 0x100000000, 0xf7b2, 0xa}, &(0x7f0000001480)={0xffffffffffffffff, 0x7, 0x8, 0x8001, 0x6, 0x110, 0x3, 0x7}, &(0x7f00000014c0)) ioctl$DRM_IOCTL_AGP_INFO(r5, 0x80386433, &(0x7f0000001500)=""/129) mmap(&(0x7f0000fee000/0x10000)=nil, 0x10000, 0x0, 0x1010, r0, 0x13b0e000) socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r2, 0x0) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000015c0)) clock_gettime(0x0, &(0x7f0000007300)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{&(0x7f0000001640)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000002a40)=[{&(0x7f00000016c0)=""/146, 0x92}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/187, 0xbb}, {&(0x7f0000002840)=""/199, 0xc7}, {&(0x7f0000002940)=""/210, 0xd2}, {0xfffffffffffffffd}], 0x6, &(0x7f0000002ac0)=""/73, 0x49}, 0x7e14a26}, {{&(0x7f0000002b40)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002bc0)=""/145, 0x91}, {&(0x7f0000002c80)=""/83, 0x53}, {&(0x7f0000002d00)=""/105, 0x69}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/144, 0x90}], 0x5, &(0x7f0000003ec0)=""/131, 0x83}, 0x9}, {{&(0x7f0000003f80)=@hci, 0x80, &(0x7f0000006340)=[{&(0x7f0000004000)=""/95, 0x5f}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/16, 0x10}, {&(0x7f00000050c0)=""/218, 0xda}, {&(0x7f00000051c0)=""/244, 0xf4}, {&(0x7f00000052c0)=""/72, 0x48}, {&(0x7f0000005340)=""/4096, 0x1000}], 0x7, &(0x7f00000063c0)=""/204, 0xcc}, 0x1000}, {{&(0x7f00000064c0)=@ax25={{}, [@netrom, @netrom, @rose, @rose, @rose, @rose, @netrom]}, 0x80, &(0x7f0000006780)=[{&(0x7f0000006540)=""/108, 0x6c}, {&(0x7f00000065c0)=""/213, 0xd5}, {&(0x7f00000066c0)=""/153, 0x99}], 0x3, &(0x7f00000067c0)=""/95, 0x5f}, 0x7}, {{&(0x7f0000006840)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000006a40)=[{&(0x7f00000068c0)=""/238, 0xee}, {&(0x7f00000069c0)=""/108, 0x6c}], 0x2, &(0x7f0000006a80)=""/236, 0xec}, 0xb007}, {{&(0x7f0000006b80)=@x25={0x9, @remote}, 0x80, &(0x7f0000006f40)=[{&(0x7f0000006c00)=""/21, 0x15}, {&(0x7f0000006c40)=""/188, 0xbc}, {&(0x7f0000006d00)=""/45, 0x2d}, {&(0x7f0000006d40)=""/221, 0xdd}, {&(0x7f0000006e40)=""/252, 0xfc}], 0x5, &(0x7f0000006fc0)=""/150, 0x96}, 0x5}, {{&(0x7f0000007080)=@isdn, 0x80, &(0x7f0000007100)}, 0x1c2}], 0x7, 0x12002, &(0x7f0000007340)={r7, r8+60000000}) keyctl$invalidate(0x15, r2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r6, &(0x7f0000007440)={&(0x7f0000007380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000007400)={&(0x7f00000073c0)={0x38, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x40040) r9 = add_key$user(&(0x7f0000007480), &(0x7f00000074c0)={'syz', 0x1}, &(0x7f0000007500)="d98322144c81336e6b12afc6565be213f5f3d86a8bf603a625db0c878cc1ced5620926960c34dfcc221e0efaac8b58", 0x2f, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000007540)={r9, r1, r3}, &(0x7f0000007580)=""/34, 0x22, &(0x7f0000007680)={&(0x7f00000075c0)={'sha3-256-ce\x00'}, &(0x7f0000007600)="78a902c4718cd4d0ff311c061310bef255d65f0341133d8427893bd3f525842d16c6c74111f73bc3056345886a98231fc001e2086bc6d2becaddb94fa960803ec2", 0x41}) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f00000076c0)={0x1b, 0x3, 0x80}) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000007740)=[@text32={0x20, &(0x7f0000007700)="660f3880bca4ff0000000f01c4d17b0e650f22a50f96e70f00196510d567afb805000000b9050000000f01c1b9950a0000b8a5bf0000ba000000000f30", 0x3d}], 0x1, 0x41, &(0x7f0000007780)=[@efer={0x2, 0xc00}, @cstype3], 0x2) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000007800)={'sit0\x00', &(0x7f00000077c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xac, 0x14, 0x14, 0x37}, 0xe, 0x10}}) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000007900)={&(0x7f0000007840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000078c0)={&(0x7f0000007880)={0x2c, 0x0, 0x1, 0x3, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x40040) 55.170544324s ago: executing program 1 (id=251): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000050061141c000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 55.102288336s ago: executing program 34 (id=251): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000050061141c000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 8.590447872s ago: executing program 6 (id=418): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x3, 0x8, 0xa, 0x8}, {0x4, 0x7, 0x80, 0x4}, {0xa6d8, 0x4, 0xb4, 0x5}, {0x9, 0x81, 0x1, 0x6a}, {0x7, 0x7f, 0x2, 0x6}, {0x72, 0xb0, 0xa, 0x7ff}, {0xffff, 0x97, 0x9, 0xf95}, {0xe, 0x0, 0xb, 0xb623}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) r1 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xa) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "000000000500", "000000072d85a4609e9104a000", 'x\x00\a\x00', "bc7e7f5df6aec397"}, 0x28) setsockopt$inet6_tcp_int(r2, 0x11a, 0x4, &(0x7f0000000040), 0x44) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000000)={0xfffffffa, 0x200401, 0xe, 0xc6cf, 0x92, "000300000000de00", 0x73, 0x1fd}) keyctl$session_to_parent(0x12) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x48, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x3, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) readv(r4, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x10) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0), 0x4000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) 8.43069666s ago: executing program 6 (id=420): r0 = fsopen(&(0x7f0000000080)='cpuset\x00', 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="386b00407dca746e1e2f1d7ef403d095f6000100000000000752e4a933b95fca9e78106931611789e6a74c1f870c2014185c1343a8f7110138e1ac21682e001f6de39ea8e923b1df56c3e12e", 0x8, 0xc000860, 0x0, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) r3 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f0000001ac0)=""/209, 0xd1}], 0x1, 0xc1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/cgroup.procs\x00', 0x18480, 0x82) close(0x3) ioctl$SNDCTL_FM_LOAD_INSTR(r4, 0x40285107) open_by_handle_at(r6, &(0x7f00000003c0)=ANY=[@ANYRES8=r3], 0xa0082) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004dfa00480066000004069078ac1414bbac1414aa441c0db3e000000200000004ac14144100000002ffffffff000000050703c0004e214e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50100005a17805dc"], 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000001680)={&(0x7f00000001c0)=[r8], 0x1}) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x18880, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, 0x0, 0xc000) syz_emit_vhci(&(0x7f0000004200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xfa}, @l2cap_cid_signaling={{0xf6}, [@l2cap_create_chan_rsp={{0xd, 0xff, 0x8}, {0xfdfd, 0xb, 0x371, 0x57c}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x2, 0x2}, {0x9}}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x6}}, @l2cap_info_rsp={{0xb, 0x2, 0xda}, {0x2, 0x7, "e9b09f1cfee269d1dfe58d9756a0615335480f3670d2bfebd998f979a5a2e0cc7eb923106e6a5b206216c4b35b72300f72ddbd4573e054fa04ea7ef985d731e7c33962b2013ae853dc6e996e29801412f40fadd12e5e778037fe9bce688488e3740da46dc6d1a2f32b62b5fc09419e0dca891d05429e227530691068b74c8b513f6779ad9580f731c07c1edc590afc31f09b750b8f7e2be933b4d90d01b2942c2474384a88da7a6c90db8730db81562127ae4b8d8a921f9cd2b60f818435c35f040dd2da7485e89c5d6fd6dc51e0ae786c190c2b1799"}}]}}, 0xff) 8.259382374s ago: executing program 6 (id=423): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) splice(r1, 0x0, r3, 0x0, 0x1, 0x0) 7.362174395s ago: executing program 6 (id=437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x9c, r2, 0x208, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x889}, 0x15) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) r3 = socket$igmp6(0xa, 0x3, 0x2) signalfd(r3, &(0x7f0000000000)={[0x3]}, 0x8) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) 7.151914011s ago: executing program 6 (id=439): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r2, r3], 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000240)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000600)={&(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[{}, {}], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x2, 0x5, 0x1}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r6, r5], 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r7, 0xc04064aa, &(0x7f00000003c0)={0x0, 0x0, r8}) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r10, &(0x7f0000000300)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r12 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r13, &(0x7f0000000240)={0x0, 0xa7, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r14, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r12, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3, r11}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r9, 0xc01864ba, &(0x7f0000000300)={0x14, r15, r11}) 7.1012354s ago: executing program 6 (id=441): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x46001, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f00000000c0)={0x530, 0x35, 0x400, 0x70bd2b, 0x25dfdbfb, {0xd}, [@nested={0x2be, 0x6e, 0x0, 0x1, [@generic="9331", @generic="16c5b9b58e01ea9c20aa0b135da320a70143a281e3698e2c2c59023c9b600f1d874ef57c7d8a52c6a6e57d5e04b5689716789eb608b105a3601f11787fe02f4c8b23ca47a47dbe48185f68cf7dc72a599c3762f70c8cd39716e5984eabc9440d55731143e2f4ba9329d08cbfb899b6501ec34f6c82008e412d497072480fc351171d2063494723520c91b6a0691bc9943d14082968a30e87ea4ef8a3c05f80f6386e31325d6fa0c197a861fead95d654ca7c6340a639622fee4ae0655a1f0af09a16778c14794c265cda1825cc68f8e364b5a9a2475e6db58e127b7be2", @generic="ee7b7b78f13dbc16641377800ba6926243a4e00b5cf4d00b9d9916a23f21ad86b702414fac525495ef055d401b9abc4c1a95287b83648ab27bf968cba7567c944b7a05eae32f9a26459811175ffd7b361f1c0337baad81a6341242e4052b75da43536bb45bc21bf90c642c11fa3c2a3d4c1caa415fd76270d19055aa1737bd6cb1e176550a6272c3d6664fb23b9f00e7f77ac74bee49a76b16389c811988d16b3edfef56", @typed={0x5, 0x61, 0x0, 0x0, @str='\x00'}, @generic="6caa85052f08d09bfba3941ad3c25a854a5b71a5ec8bcc211c85563bca139a75fcff978838d015b9fc06e702134ddad4f5d5d7da4ef7c86c8debfc607229388aa9048416e378aab1fce5eb534b27231056175860be78ccae79ff58805eb97e6599b6cdc77d07277ac6a77ecf3bab53af390b52480ccc2ab0b557d2b117584195a51161eaaaca1ea41fbb1823afd78a0559", @generic="92536f73a470fa0b9897c272fdefbb5d7b9d684ffcb4517862a3d6df57e7877c59d93416e8d787d6e82c6de65e3d1ae70ef75ef20919400206d239424973821adda3b34e38dfbeaf546259be998f9e1dd8a3ea134bbc8735ecf745d541104d509397a036811fe7e4dc96f808831bbd320246c9eb43dc4fb37769141d50b4c3e46eff8598c55440cb7ccacfe758e271563e3b36956629dbc94d0df58e3090"]}, @generic="704c25aa5280cfda623703214bc13fd730df021a81d5737faefc1016cd83e1c57a9123005c7590c61fdd02a65862382b2e7037c7b19017ee065a4e76297bb4bc501a71fb327b528c1269fa9c29712649bba6f2e829a46dbbe2cb6e3c02d096879d021fcdcd511ee8730e4a671a0e3580c7495e75871088002e1353ced4fba80ee15ff7f5596effcbb062842193fc1956c36e8f891837d9bf3bf42c20444f12f8af5634d62b81559eccfcee7c83a94b", @typed={0x14, 0x14e, 0x0, 0x0, @ipv6=@mcast2}, @generic="82dca33824b2f257e7446092789dccac5b633b5091f1ba247c27215f1441051580296c5db8c8eb80c086533a1817bd5531062141d1d531591bb9d8a5f076d6954d21569198fc3f369ba6610596111181dc8a049aa8fe48377527d06b55d5cf9cc08c248a2167df293401401e9d1edc680eabf6c2b7fbdb229083ee32258355b184ac02da4c0614ee9de387463f35b1", @nested={0xfd, 0x93, 0x0, 0x1, [@nested={0x4, 0x13a}, @generic="612f16bf66e152b4ad81926c89566bf5f161", @generic="6e09e0e6bcaf7f20c9bd2f067622b6fcdbd0d5fb756eb6602e32a1ac1e39d702ab90edbdadcfae9520a7e259cc7ed19cded7ea62f432b3c779e3aeb587af5a219b81cff21df07ac4d8c3d077b14478131c50d49740fe9ce0fb3f470e0409d9df649d39c78e85a433324b68bd7750f73e643619bd064a1f55832f3e96fa125e02db64f7ed664f9c14e15b849b906ec1f839917b9003c2921d820e4dd66e3d4f84ec3af8a6cd923169c0679b93b18163f5a72a17344018aceb74048e9e3fb794ec18703fa435e431a9da28c1", @typed={0x8, 0xbe, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x4, 0x34}, @typed={0xc, 0x124, 0x0, 0x0, @u64=0x2}]}, @typed={0x8, 0xf5, 0x0, 0x0, @u32=0xf78}]}, 0x530}, 0x1, 0x0, 0x0, 0x4008000}, 0x20048004) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0xb, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000780)={@loopback, @dev={0xac, 0x14, 0x14, 0x17}, 0x1, "3200c8c52593e47fb3957279ee95a410f98c4dd6fe8a17073e583a5599d558d1", 0x2, 0xc, 0x3, 0x9}, 0x3c) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x983e5000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x6, 0xfffffff7, 0x70, @mcast2, @private0, 0x7800, 0x40, 0x4, 0x785}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'syztnl1\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x5, 0x6, 0xe8, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x10, 0x8000, 0x9}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)=@setlink={0x38, 0x13, 0x800, 0x70bd26, 0x5, {0x0, 0x0, 0x0, r2, 0x0, 0x36054}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_MASTER={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4804}, 0x54000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c80)={&(0x7f0000000a40)="58f9f72b854f4082d8a484e5f748de08301e6ef8971a0da8d8ed50bec7c992a28cfffc21580b8933283964e213b2bf56b0ba00277626088ef05b75f3053f178b5a7aa493da6823012537e7a43e2010f11895a139f41a83ae36d5abed7ee5b05cc7f9344f38e842a5887485dfee736b3afc248355ebf102bdaf986d675e27f0b9ff0a8f2804a3caf50c933d11626ca801320135715f5e53c6116c4b2e555f78852d6768de3b3281a7e4daa84a945c50a4eb75ffa581cb7165940f4b696b634e4c23226a740a475c7afa44aed8cbb52b9e7e773542b38d79371fc3c6ed8d2e1adb72331b1f118a659648", &(0x7f0000000b40)=""/47, &(0x7f0000000b80)="7ec66ef27a3e380824d510a87e53e9145f9f844f2cd70fa6e77b9226a916e04284a9d014377d0da7a30eeedc4f01f1df", &(0x7f0000000bc0)="94da8549ba4cf80f8d339e59d5a2b4604a752de79a6ba4aac150602bb72176d861379e5b07acf4c17bd350afe17c966c8fb42f275d96dd2f066ef0a8fd70cc296a91dee209f171a6a265af463b0c40e259c0097d6b7e21861932855d71a6d5170c9e89b1d2cbfbd01572f809a3578e153522b693ccdd4c271f7d9c9b04eaa0f82ee4dbfaaa08ba166fe298bca9f4b30a9a049728f46d0467676ec19428d156a2", 0xffff, r0, 0x4}, 0x38) r4 = memfd_secret(0x80000) ioctl$RTC_EPOCH_READ(r4, 0x8008700d, &(0x7f0000000cc0)) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d40), r4) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000001000)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x234, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x234}, 0x1, 0x0, 0x0, 0x4000}, 0x20040015) recvmmsg$unix(r4, &(0x7f00000017c0)=[{{&(0x7f0000001040), 0x6e, &(0x7f0000001100)=[{&(0x7f00000010c0)=""/33, 0x21}], 0x1}}, {{&(0x7f0000001140), 0x6e, &(0x7f0000001480)=[{&(0x7f00000011c0)=""/185, 0xb9}, {&(0x7f0000001280)=""/24, 0x18}, {&(0x7f00000012c0)=""/90, 0x5a}, {&(0x7f0000001340)=""/58, 0x3a}, {&(0x7f0000001380)=""/96, 0x60}, {&(0x7f0000001400)=""/29, 0x1d}, {&(0x7f0000001440)=""/33, 0x21}], 0x7, &(0x7f0000001500)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f0000001600)=@abs, 0x6e, &(0x7f0000001680), 0x0, &(0x7f00000016c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}], 0x3, 0x2000, &(0x7f0000001880)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001900)={0x1, &(0x7f00000018c0)=[{0x9, 0x8, 0x3, 0x800}]}) ioctl$KVM_CAP_DISABLE_QUIRKS(r7, 0x4068aea3, &(0x7f0000001940)={0x74, 0x0, 0x7}) ioctl$KVM_RUN(r14, 0xae80, 0x0) ioctl$EVIOCGMTSLOTS(r12, 0x8040450a, &(0x7f00000019c0)=""/4096) ioctl$BTRFS_IOC_GET_DEV_STATS(r10, 0xc4089434, &(0x7f00000029c0)={0x0, 0x8000000000000000, 0x0, [0x8000, 0xfffffffffffffffa, 0x7fff, 0x7], [0x1, 0xfffffffffffffffd, 0x7, 0xff, 0x8, 0x1ff, 0xc158, 0xe, 0x3, 0x6, 0x7fff, 0x8, 0x8, 0x100000000, 0x80, 0x1, 0x40, 0x2, 0x5, 0x2, 0x3ff000000, 0x80, 0x6a, 0x2, 0x8, 0x8, 0x1, 0x1000, 0x10001, 0xfffffffffffffffc, 0x2, 0x0, 0x8, 0x8001, 0xae, 0xf, 0x2, 0x8000000000000001, 0x2, 0x4, 0x4, 0x3, 0x8, 0x1, 0xffffffffffff8001, 0x400, 0x9, 0x1ff, 0x100000001, 0xff, 0x10001, 0x2, 0xab, 0x9, 0x8, 0x800, 0xff, 0x3, 0xfffffffffffffffe, 0x0, 0x5e3f800000000000, 0x4000800000000, 0x8, 0x9, 0x1, 0x4, 0x7ff, 0x4, 0x5, 0x100000000, 0xffffffff, 0x0, 0x6, 0x9, 0xfffffffffffffffe, 0x9, 0x0, 0x632, 0xfffffffffffffff9, 0x0, 0x8, 0x0, 0x180000, 0x2, 0x6, 0x80000000000, 0x100, 0x10000000, 0x5, 0x3, 0x3, 0xc, 0x8, 0x800, 0x10, 0xff, 0x5, 0x0, 0x7, 0x8, 0x8, 0x2, 0x0, 0x9, 0x3ff, 0x5, 0x4, 0x7, 0x1, 0xffffffffffffffff, 0x929, 0xfffffffffffffff9, 0x7, 0xd, 0x4, 0x6, 0x1, 0x8, 0x75ed273b, 0x2, 0x1]}) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_buf(r15, 0x1, 0x3b, &(0x7f0000002e00)=""/77, &(0x7f0000002e80)=0x4d) bind$inet(r6, &(0x7f0000002ec0)={0x2, 0x4e20, @local}, 0x10) ioctl$CDROMPLAYBLK(r11, 0x5317, &(0x7f0000002f00)={0x2}) r16 = syz_genetlink_get_family_id$team(&(0x7f0000002f80), r9) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000002fc0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000003080)={'ip6gre0\x00', &(0x7f0000003000)={'ip6tnl0\x00', r2, 0x29, 0xb, 0x80, 0x8001, 0x64, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x40, 0x4, 0x8}}) sendmsg$TEAM_CMD_NOOP(r13, &(0x7f0000003180)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003140)={&(0x7f00000030c0)={0x60, r16, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r17}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r18}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40090}, 0x20004051) 2.60153852s ago: executing program 4 (id=491): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'team_slave_0\x00', {0x2, 0x4e21, @empty}}) (async, rerun: 32) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14) (rerun: 32) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f000000a9c0)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0xeb9, @private0, 0x4, 0x1}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000240)="2a84c4ddd3", 0x5}], 0x1}}], 0x1, 0x4000000) (async) r2 = socket$inet(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r3) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70bd21, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40004) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0xfffc, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}]}]}]}}]}, 0x9c}}, 0x0) 2.491096493s ago: executing program 4 (id=492): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0d000000310e00047e6d00d60300000041040000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r0}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1c, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r3, &(0x7f0000000340), 0x0}, 0x20) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x10, &(0x7f00000000c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.489338829s ago: executing program 4 (id=493): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x1, 0xe2, 0x0, 0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) (async) listen(r2, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x50, 0xb0e, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0x78, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x1, 0x8, 0x1, {0x22, 0x1d7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0x80, 0xfd}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x7, 0x8, 0x5}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0xff, 0x0, 0x45, 0x10, 0x9}, 0x11b, &(0x7f0000000480)={0x5, 0xf, 0x11b, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x3, 0x80, 0x8}, @ssp_cap={0x10, 0x10, 0xa, 0xff, 0x1, 0x400, 0xf000, 0xe45, [0x3f00]}, @generic={0xdf, 0x10, 0x1, "ec195feabf6224986baab22d35b8a3a37236180750e7cfbc5c8c9dd6e91e974808d371f18c8e77e325bb13e20623462bc274c5d1422ce05540371a2d66167ab1bbc4c2a0a9e7c6757e1f7d85aea1b19e43f293503532c55255477d5d48a82b7da356aae8a64f80d1c077f37c56c453586cba00e910e43f5ac537ec7b6c0845247101c76049aa986fa1aab0d2b119edadb518aecdb1b6ec2bd03310921bf29bf950c05dd4c520cfcb925e74dc8278708b23c07c98a71f88bb6bab4cb98efc35b1412fcfdc2a58a1639a3974be8acdb69d181718efbeafd6acf915be0c"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x0, 0x59, 0x7f}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0xb, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x10, 0xa, 0xb}]}, 0x1, [{0xdf, &(0x7f0000000680)=@string={0xdf, 0x3, "7e02bf93bb4f033318e376f609c1e3a602847b526762a66a43dc1cc6d247fa708143c57be1cb6cb7eef7245e7e4121526568225399689b96d34b97d8cc2e36de4a1461f6da3afe9fd87f23a240b3272d83ac3064c823223de34572eed0ec5770fcfadb347b89584dd1e6161b9f9f0095e01eb8b25c4d5e530b37767cec3f3f1199ce9a5ebe3c6f3a1313f9f5b9e7ec18c9641230b30b172d323cbb08b549d47b125a502dd4e4e29f9703f4e1403dca5a2232ebeebc01e5d730630145a84f1e8724af613a2af0d124581d6f8411f07c45fe5babd440272316516e736789"}}]}) (async) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) (async) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/98, 0x62}], 0x3}}], 0x1, 0x2, 0x0) (async) recvfrom$unix(r4, &(0x7f00000002c0)=""/236, 0xec, 0x10120, 0x0, 0x0) 1.547334483s ago: executing program 2 (id=504): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 32) r2 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000240)=0x6344, 0x4) (async) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000161411"], 0x20}}, 0x0) (async) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x741000, 0x0) syz_usb_connect$uac1(0x2, 0xc5, &(0x7f0000000940)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0x6, 0x60, 0xfb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa, 0xb}, [@selector_unit={0xa, 0x24, 0x5, 0x4, 0x26, "3e1b18a796"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x6, 0x8, 0x5, "caf925a9"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x3, 0x2, 0x9, "8a15", "132f2a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x8, 0x0, {0x7, 0x25, 0x1, 0x81, 0x81, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x3, 0x2, 0x2, 0x4}, @as_header={0x7, 0x24, 0x1, 0x9, 0x1}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x35, 0x4, 0x5, 0xa8, "0a0e08"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xa3, 0x4, 0x7, 0x5}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x9, 0x4, 0x3, 0x9, "081998", "05d2b1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x440, 0x9, 0x1, 0x0, {0x7, 0x25, 0x1, 0x3, 0xff}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000040)={0xa, 0x6, 0xdd7a2868daee0726, 0x8, 0x7f, 0x3, 0x40, 0xff}, 0xd8, &(0x7f0000000500)={0x5, 0xf, 0xd8, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xd1, 0xff, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x1, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x62, 0x1, 0x3, 0x5}, @generic={0xb7, 0x10, 0x3, "61ffc37be7780f8c060fe99dea29163c1fc955069c55bd8e50571178f457b9501fb7fffac09a3c9232d79f7e45298a94751a821245d67cfca5ebce2605cd643a7ad05b5dd7a717dbe0da9904641bc176af85d22b073d1cb174da00e269d94bebdb7d18401009c0011c627ef49de36332e7970d163cb5dff22b006e8db89834a1d7ec714008c486f7fed50954efa992e83f337dc88a28f14216ea714459e5df69fbeeac1d98e3bea079f34c1fa8d4980c82b95933"}]}, 0x4, [{0x9b, &(0x7f0000000300)=@string={0x9b, 0x3, "755460d3caf313927656eef49f77226f3bb0238e795b4296f1c8f8cc06973e85bd5fee7e2ccff608122523cb1124d40b46ae64ac13db5fa63373e10e7e0ba0c2fe1f5618f208175dac73322f9456d2633f2476f5b5e81a3e57ecca0faae9a6582e8d17dcc2827e44111edad836975e288ccc76bc1008da006248e18c617afec7ebe8a30c9742d4efa70bade0704a68c008c45fc58cbd111ffc"}}, {0xb3, &(0x7f0000000640)=@string={0xb3, 0x3, "a946ab67673ca1415dbfa8cb9be148e1994d5b77aebbbb95eb6a4033d91679cb0f24583a76c913468d2cf874631522c10ff0e53bab87a918dccb9fa58d77ec9c182cd0007912ab706e5b1da237cc1ce0a8c93fcc32251f74d500d8eb226b959abbee1aa6cd33401110b85b89bc255cd4b68b7ddc89c37377c6ca8adac838afc6bf7301f8493a9a9c1d55852558272d6fb89f0145af06916826df7fdf7938963c06d1bad8a2c4b7eb9c9cfd90c6417ccc43"}}, {0xe8, &(0x7f0000000700)=@string={0xe8, 0x3, "8942c7d3a958c3ccde20a8c152925b51369615ac16f3316f05b1083a4c881090c43fc1fed21f7cd142ac1e677f922558f726d06206a401595fe4ee09e8f2a798f4ca6239e2ae95e4046ee9b6593d615d17eebdd49be4d74025161093e395917d79c10bb3c5442059709938aac650ce670bdb4dea6501ce15a8aba2afa39e63005e8960103f3d4ae012c7acdd16ea080fc223e93828774da452cd77b231341c3b895bf6408624df537e90baa9aca8a67e10faf2ee40e9f4e36cb1fd3ae3b78a306528a81dce973e9c1788d424183675bd644b64380b939e4f2fad9bc8c7f0a2dc23dad09b1d0f"}}, {0x9d, &(0x7f0000000880)=@string={0x9d, 0x3, "fc17c338d9102f52f163ad3bd13aa4f5d04ee99fefa0dbb92e6bfd1e479cd53e2a974d62430190e3727621d4ac782d06750fbf38074436c5993b073c5fbb47d423f6ea8ef517b76515e33e393457cc04d5e7b27f6500a7ed293e0a99a00c280fac14dd2a3bd6d128dbcf331646322c14c165f3822acb6e3f21fa7253fff8051cd1a01c57f0cec2c5773d0cde6fe5dcaf32468e2f8fa7738e9746aa"}}]}) (async, rerun: 64) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000200)={0x100, r5}, 0x0) (async, rerun: 64) close(r5) (async, rerun: 32) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) (async, rerun: 32) close(r4) (async) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x300) 1.542905735s ago: executing program 4 (id=505): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 64) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) mlock2(&(0x7f0000153000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0xe, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x1) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x7c}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000810) 1.481405804s ago: executing program 2 (id=506): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x5, 0x16}}) (async, rerun: 32) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x4}, 0x8) (async, rerun: 32) r1 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x100) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000009c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000200)={0x764, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1c56cfd4, 0x69}}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x48, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x22}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe94}]}]}, @NL80211_ATTR_TID_CONFIG={0x484, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1f8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1b}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x40, 0x9, 0x401, 0x6, 0x0, 0x0, 0x6]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x5, 0x7, 0x7, 0xffc0, 0x3ff, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x1ff, 0xc, 0x1, 0xfffd, 0x4, 0xfffa]}}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3, 0x4, 0x5, 0x5, 0xfff7, 0x4, 0xe3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8aa5, 0x4, 0x5, 0x4, 0x40, 0xab, 0x3, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6, 0x6, 0x60, 0x30, 0x6c, 0x16, 0x1, 0x60, 0x4, 0x2, 0x24, 0x6, 0x60, 0x16, 0x12]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1a, 0x60, 0x18, 0x48, 0xc, 0x9, 0x30, 0x48, 0x48, 0x36, 0x5, 0x30, 0x9, 0x2, 0xb, 0x6, 0x12, 0x20, 0xc, 0x23, 0x60, 0x3, 0x1b, 0x5, 0x2]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7, 0x4, 0xffff, 0x33c, 0x2, 0x101, 0xa842]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x18, 0x30, 0x1, 0x18, 0x6c, 0x18, 0x1, 0x60, 0x5, 0x9, 0x56, 0x18, 0x1, 0x12, 0x24, 0x5, 0x4f, 0x1b, 0x30, 0x1, 0x24, 0x18, 0x1, 0x48, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x5, 0x10, 0x8001, 0xc000, 0x400, 0x2f2]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0x12, 0x48, 0x1b, 0xc, 0x6, 0x9, 0x30, 0x12, 0xc, 0x1, 0x12, 0x5]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x0, 0x8}, {0x0, 0xa}, {0x3, 0x9}, {0x2}, {0x0, 0x2}, {}, {0x5}, {}, {0x3, 0x1}, {0x7, 0x5}, {0x7, 0x4}, {0x1, 0x3}, {0x0, 0x1}, {0x0, 0x7}, {0x4, 0x1}, {0x2, 0x3}, {0x0, 0x8}, {0x6, 0x2}, {0x6, 0x7}, {0x6, 0x5}, {0x0, 0x5}, {0x5, 0x3}, {0x3}, {0x7, 0x2}, {0x0, 0x4}, {0x2, 0x9}, {0x3, 0x3}, {0x4, 0xa}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4e, 0xde5, 0x4, 0x0, 0x2, 0xf, 0x1, 0xd7c]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x7, 0xa, 0x401, 0x9, 0x5, 0xbfb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x400, 0x4, 0x8, 0x4, 0x9, 0x7fff, 0x8]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1f0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0x7}, {0x4, 0xa}, {0x7, 0x9}, {0x5, 0x9}, {0x3, 0x8}, {0x5, 0x5}, {0x5, 0xa}, {0x3, 0x6}, {0x5, 0x9}, {0x3, 0x6}, {0x5, 0xa}, {0x0, 0x9}, {0x1, 0x5}, {0x0, 0x5}, {0x1, 0x6}, {0x0, 0x9}, {0x6, 0xa}, {0x2, 0x8}, {0x0, 0x8}, {0x7, 0x6}, {0x6, 0x9}, {0x6}, {0x0, 0x5}, {0x6, 0x8}, {}, {0x5, 0x5}, {0x0, 0x2}, {0x1, 0x7}, {0x6, 0x9}, {0x6, 0x8}, {0x6, 0x8}, {0x3, 0x2}, {0x1, 0x9}, {0x6, 0x7}, {0x5, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x56a, 0x4, 0x8000, 0x0, 0x5, 0xd7f3, 0xfffc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x4, 0x1ff5, 0x200, 0x4, 0x2, 0xe, 0xe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x891d, 0x8, 0x0, 0x2, 0x0, 0xb21, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xe, 0x6, 0x2, 0x16, 0x6, 0x0, 0x469515bda12609a2, 0x1, 0x4, 0x12, 0x4, 0x16, 0x18, 0xb, 0x16, 0x16, 0x24, 0x12, 0x36, 0x6, 0xa, 0x16, 0x48, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x8, 0x0, 0x2, 0x9, 0x3, 0xb]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd3e7, 0xfffa, 0x7, 0x1, 0x6, 0x238, 0x9, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xe, 0xd2, 0x3, 0x4, 0x8, 0x7, 0x1]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x4}, {0x1, 0x5}, {0x4, 0xa}, {0x4}, {0x1, 0x5}, {0x6, 0x9}, {}, {0x1, 0x4}, {0x1, 0x4}, {0x5, 0x4}, {0x1, 0x9}, {0x3, 0x5}, {0x4, 0xa}, {0x2, 0x1}, {0x0, 0x8}, {0x1, 0x9}, {0x6, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x3, 0x5}, {0x3, 0x1}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0xa}, {0x5, 0x4}, {0x4, 0x3}, {0x7, 0x1}, {0x6}, {0x6}, {0x2, 0x5}, {0x3, 0x7}, {0x4, 0x4}, {0x7, 0x16}, {0x1, 0x7}, {0x7, 0x9}, {0x2, 0xa}, {0x2, 0xa}, {0x2, 0xa}, {0x7, 0x5}, {0x3, 0x9}, {0x1}, {0x1, 0x6}, {0x4, 0x4}, {0x1, 0x6}, {0x3, 0x3}, {0x1, 0x7}, {0x2, 0x6}, {0x3, 0x8}, {0x0, 0x3}, {0x0, 0x4}, {0x3, 0x1}, {0x3, 0x7}, {0x6, 0x5}, {0x5}, {0x1, 0x7}, {0x2, 0x4}, {0x0, 0x5}, {0x6, 0x6}, {0x6, 0x3}, {0x0, 0x1}, {0x7, 0x7}, {0x2}, {0x3, 0x8}, {0x5, 0x7}, {0x4, 0x6}, {0x4, 0xa}, {0x0, 0xa}, {0x3}, {0x0, 0x1}, {0x2, 0x4}, {0x5, 0xa}, {0x7, 0x8}, {0x4, 0xa}, {0x6, 0x3}, {0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x1, 0x24, 0x3, 0xb, 0x30]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x4, 0x7}, {0x4, 0x7}, {0x1, 0x3}, {0x1, 0x7}, {0x1, 0x5}, {0x4, 0x4}, {0x6, 0x1}, {0x2, 0x2}, {0x0, 0x3}, {0x4, 0x4}, {0x5, 0x5}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x8}, {0x6, 0x8}, {0x1, 0x4}, {0x4, 0x9}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x4}, {0x0, 0x3}, {0x6, 0xa}, {0x0, 0x7}, {0x1, 0x8}, {0x7, 0xa}, {0x1, 0x3}, {0x3, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x9, 0x4f8070523e6f64a1, 0x3c, 0x60, 0xb, 0x1b, 0x2, 0x2e, 0x6, 0x16, 0x24, 0x3, 0x6, 0x6, 0x9, 0x60, 0x1b, 0x18, 0x2, 0x6, 0x6c, 0x9, 0x6, 0x1b, 0x6c, 0x16, 0x60]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x39}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x228, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xd9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x19c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x170, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x7, 0xa}, {0x5, 0x2}, {0x6, 0x7}, {0x4, 0x5}, {0x3, 0x7}, {0x1, 0x6}, {0x2, 0x4}, {0x1, 0x9}, {0x0, 0x4}, {0x1, 0x2}, {0x4, 0x4}, {0x0, 0x9}, {0x4, 0x7}, {0x5, 0x5}, {0x3, 0x5}, {0x7, 0x7}, {0x1, 0x3}, {0x6, 0x5}, {0x0, 0x3}, {0x0, 0x3}, {0x6, 0x8}, {0x6, 0x1}, {0x7, 0xa}, {0x7, 0x3}, {0x5, 0x5}, {0x0, 0x8}, {0x1, 0x2}, {0x4, 0x9}, {0x2, 0x7}, {0x5, 0x7}]}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xf0, 0x7, 0x6, 0x3029, 0x6, 0x1, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x400, 0x3, 0x2, 0x7, 0x40, 0x0, 0x7ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe6e0, 0xfffc, 0x0, 0xe761, 0xffe0, 0x0, 0x7f]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x50, 0x8, 0x1, 0x0, 0xfff8, 0xffff, 0x3438]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xc, 0xfffe, 0xfffd, 0x0, 0x4, 0x33, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x18, 0x1b, 0x24, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1, 0x1, 0x9, 0x3, 0x9, 0x16, 0xb, 0x3, 0x5, 0x2, 0x6c, 0x1, 0x6c, 0x48, 0x18, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x4, 0x32, 0x3ff, 0x6, 0x1, 0x70a, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x3, 0x293f, 0xf04, 0x4, 0xff, 0xff80]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0x61a, 0xefe0, 0x8022, 0x8, 0x1, 0x3]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1b, 0x12, 0x30, 0x12, 0x12, 0x16, 0xb, 0x6, 0xc, 0x16, 0x36]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x3, 0x18, 0x1, 0x60, 0x48, 0x18, 0x1, 0x2, 0xb, 0x24, 0x18, 0x1, 0x30, 0x6c, 0x5]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbc}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x764}, 0x1, 0x0, 0x0, 0x40000}, 0x14) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000a00)={0x1, 0x2, 0x3, 0x9, 0x10001, 0xfffffff8, 0x6, 0x2, 0x7, 0x835c, 0x1, 0x10b4, 0xffffffff, 0x74}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000ac0)={'ip6gre0\x00', &(0x7f0000000a40)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x5, 0x10001, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x700, 0x40, 0xfffffffe, 0xb}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x20, 0x3, 0x2, 0x0, 0x21020, 0x1, 0x0, '\x00', r4, r1, 0x5, 0x4, 0x4}, 0x50) close(r5) (async) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000b80)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x4000, 0x4}) (async, rerun: 64) r6 = userfaultfd(0x100000) (rerun: 64) ioctl$BSG_IO(r1, 0x2285, &(0x7f0000001d80)={0x51, 0x0, 0x3, 0x2, &(0x7f0000000bc0)="041e", 0x5, 0x0, 0x80000000, 0x2, 0x60, &(0x7f0000000c00), 0x0, 0x6e, 0x0, 0x67, &(0x7f0000000c80)="24accf2f662dea47cbbad03c8aad56a1ccb15ae00091a016aa7170296d620fd6bd93659c419337ef2edccd2e40f5540ceb367bef29c4bca7208d00f15118f97445d4fbc27365e0cc85d610ddb2e3d86af47732d307f3a5b99d11507758c14d0ac692d7b75f2109379a055a857e08", &(0x7f0000000d00)=""/103, 0x9, 0x0, &(0x7f0000000d80)="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", 0x5}) syz_io_uring_setup(0x7db2, &(0x7f0000001e40)={0x0, 0xc672, 0x0, 0x2, 0x38c, 0x0, r1}, &(0x7f0000001ec0), &(0x7f0000001f00)) (async) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xa) r7 = signalfd(r5, &(0x7f0000001f40)={[0xf62]}, 0x8) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000001f80)=""/77) (async) ioctl$BTRFS_IOC_SET_FEATURES(r6, 0x40309439, &(0x7f0000002000)={0x7, 0x1, 0x1f}) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000002080), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x3c, r8, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000014}, 0x48000) (async) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) (async) clock_gettime(0x0, &(0x7f0000002240)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000002180)={[0x6]}, &(0x7f00000021c0), &(0x7f0000002280)={r9, r10+10000000}, 0x8) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002300), r7) sendmsg$NL80211_CMD_SET_NOACK_MAP(r7, &(0x7f0000002400)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x54, r11, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xd2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1a3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff7}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10112, r7, 0xbf3a7000) (async) setsockopt$inet_tcp_buf(r7, 0x6, 0x21, &(0x7f0000002440)="8d48d4bd91844360f39a16678be026f9509fe8afa515291a40d9df08a85f2c6eecc6cc6e1ca2b2e0c9cd503a4d9fb0735bc86092ef600fc9eb89139522c1115be6fe5f8a8e55c40e3b7b0ebc82d2a24700e48090b737c590ee13864121f5a7ffb32ca2d23bcee3fea2867b68d337b2", 0x6f) (async, rerun: 64) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000024c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4000, 0xf025432b785dc20c}) (rerun: 64) 691.420913ms ago: executing program 2 (id=507): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x325943, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000049"]) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x2, 0x5, 0xf0f3, 0x2, 0x2, 0x6}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) 683.12053ms ago: executing program 5 (id=508): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x24, 0x0, 0x95, 0x8002, 0x3, 0x3e, 0x101, 0x294, 0xfffffffffffffc18, 0x24d, 0xfffffffa, 0x0, 0x38, 0x1, 0xfffd, 0x7f, 0x808}, [{0x3, 0x4, 0x7, 0xa, 0x101, 0x6, 0x7, 0xffffffffffffff7f}], "db55a3354ca6d746db00abec7dc7bab5a753e28de04049bfa713bf4cef51bb53d0ad"}, 0x9a) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) close(r0) (async, rerun: 64) syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x101000) (async, rerun: 64) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 592.241916ms ago: executing program 5 (id=509): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400, 0x20) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000080)) socket(0xb, 0x2, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f00000000c0), 0x1230) ioprio_set$pid(0x1, 0x0, 0x0) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x0, 0x1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x14) sendmmsg$sock(r1, &(0x7f0000006740)=[{{&(0x7f0000000180)=@phonet={0x23, 0x9, 0x9, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x3d, 0xac2}}], 0x18}}], 0x1, 0x20020040) 532.405018ms ago: executing program 2 (id=510): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40008c0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)={0x114, 0x34, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) 421.85451ms ago: executing program 5 (id=511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@loopback}, {@in=@local, 0x0, 0x2b}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x42}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "688d33f2"}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f00000001c0)=0x400, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000140)={0x9, 0x2, {0x55, 0x3, 0x9, {0x4, 0x100}, {0x4, 0x8}, @period={0x58, 0x9, 0x2, 0x1, 0x5, {0x5f, 0x59, 0x6, 0x8}, 0x9, &(0x7f0000000000)=[0xfffe, 0x9, 0x6, 0x3, 0xb91e, 0x0, 0x2, 0x7, 0x3]}}, {0x54, 0x100, 0xf2, {0xb, 0xaf7}, {0x7, 0xf9c7}, @const={0x81, {0x0, 0x0, 0xf, 0xff}}}}) 421.410262ms ago: executing program 2 (id=512): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xffff, 0x20000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000ac0)=@ccm_128={{0x304}, "6bad71b350e22a00", "ccaa54dbfef3216ec09b63757e98ed63", "cde21de0", "bcad0b2f6d5df9b2"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@ccm_128={{0x303}, "228481a9465c8fec", "38967a2445914c2e5ab898a7f56a364a", "e6a245cf", "bff5b80e1f6fd131"}, 0x6) 420.899423ms ago: executing program 4 (id=513): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802060052ac0000fffffff6ffff0000850000007a0000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4086, 0xff6}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000840)=""/77, 0x4d}, {&(0x7f0000000a80)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r5) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000078d3da59a57efb32c692c5a32cf332b08e6954560b1fa4c2efac450cff85e3b4df29a0779536d6909ac3b9625d6c675a67750662c0cbedc43f89deac838bc46e4ad54c75276d808e859bd1178d9af41353cfdbf31fd784e6fcce985cf0fc8bc4522276fb9ab3fdb865f3f6f120821b707dd5e14bbc10992ad7d920cceae97eef6daa74aa9770b1197837", @ANYRES16=r6, @ANYRES64=r6], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_RUN(r0, 0xae80, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r7) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000b40)={0x318, r8, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x2ec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x97, 0x5, "d07532ad862a2049cd569269475bc41e3a3660cbfe13517854749a8c3c91a396c5c99086fab98a6ca23caff8d29f93e3c3de13b51702b3afbd1966c913a37a3be682eca739e5a18999c33434f005bb5b2cf9832385e9d0d3ff1a71877552abd25f5df9b60c71546a98d3d7e6b84ff0d5f26a68166d7657f1328573886ad5ba8416ff949001e19d94a0ba74d7d9b211c729160f"}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xa3, 0x5, "d1ceea292721763a5d4edb782471086cc81d616bb5ffc6c760dc89e1066cc4eaf4b4a3a07500eebe376dbcbf06a2118aa147ed23e69691de6fdb2715ebe1cc19e664a3ab244054ea31d44b5ddc432e1cf478842c881a976655e0f6d13ee52a07180404e297a58b2b44f5034ab6660c8cbf97a5dbe5358f594c98fce7ea299afb321d13ecffff1de567109eb60cc330448f024c80490945f85f1dc74d471537"}, @ETHTOOL_A_BITSET_MASK={0xc8, 0x5, "c380bd70a750be21ad861f4cb62b36d7331cc01e96b4a2659227e1483b791ec7729d73d95a8296ca6a3960c3ee578b2f4aca9c47219cb7d44118412c459103f55cca0ab16c512169641c5f29b925240f85ff67c3a491482c48c1964fdbe8663d1ecd757e131cff8d13a1c9d0299293583cd44b5431d9aed56631095c8df52333ac12b613eb99b6740aeb5c29bf39dc8bf68409d10a2a841957dae3a6d6f4e5867fff688cd0b2713468debf4e6785882dde1c4c2049e50e07afe163462608e1c0c0e90812"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x4}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'syz'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'setgroups\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'setgroups\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x93}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_VALUE={0x1e, 0x4, "21f34892f4d89289664956f9d54f7ee89433383fff0aaf2e06d1"}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x20008020}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder0\x00', 0x800, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r2) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x1c, r10, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="eb7a2dbd7000fadbdf35210000000a0001007770616e31000032a00d1ace045b0bbd0009001f007068793100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40892) 322.573041ms ago: executing program 2 (id=514): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) 322.172082ms ago: executing program 5 (id=515): r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = socket$kcm(0x2, 0x5, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01012abd"], 0x24}, 0x1, 0x0, 0x0, 0x240000c4}, 0x24000000) (async, rerun: 32) recvmsg(r1, 0x0, 0x102) (async, rerun: 32) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000005800000058000000050000001000000000000007000000000200000000000002030000000800000000000011010000000300000007000000000000070000000000000000000000030000000000090000000d0000000000000b00000000002e5f2e0000000000000000"], &(0x7f0000000380)=""/129, 0x75, 0x81, 0x1, 0x84, 0x10000, @value=r5}, 0x28) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) add_key$user(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) (async, rerun: 64) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000340)={0x3, 0xc800, 0x8, 0x0, 0x18, "1775126dace8789b"}) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="700000000206010800000000000306010c1ea2e42b530300686173683a697000050004002e7700000900020c73797a310000000018000780050003001f0000000c00018008000140ffff0000000500019ba0000000140007800500070062000000060004404e2200000000845cd99afe21240429eb40d58ec973170e0e50c2961e12ff97a344625d17db1bbfec9a0df913ba5af2683d3b674e1a91c6a10168f917a9f70cd6f1d4e73105830442d5046797b778165942c7560524b591b5f282603db03817498fb17148c46271b27497267704cd3df980ef4a93b5564368e445083d0db227f8c2b0a9aa6a78ce28917d6f720180d8"], 0x70}}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_buf(r5, 0x0, 0x2c, &(0x7f0000000280)="90aa2f844691c6d2585bc004a206ce02e815ab3d119d7bd7ae61d6b3db03bc709171b8f404f5020f44a6d3dd3d68cb4fb4c8d5393f29b4800fc84efe65cd8caa78ddba3599f7a5b28f749a20cc1e20c19f68b5cc1abd721f81b6d607d5e90800b741943f806d445a88f7c422bbc02cb7dc755577e5b50ef4e5dcc080969b624627eb8e9663668a09961298cf369ce45cae6d733ef97cffcfc831d861f043", 0x9e) (async) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$key(r0, 0x0, 0x40080) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) (rerun: 64) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async) io_setup(0x5, &(0x7f0000000440)=0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000840)={{0x1, 0x1, 0x18, r7}, './bus\x00'}) r11 = eventfd(0xac) io_submit(r9, 0x9, &(0x7f0000000c40)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x700, r2, &(0x7f0000000580)="ecfc949e0d5c7f0b7585caccb8d652af7d499714a10c000e97082c07529620c014cdc60dd8019b16123662095198cf4afad53437705ce35538a8cb1a1b0c0bd255bb0615b5eec7112542895fb5bae66c4a7c7ded44eaa194265c2cc6190eeee1f78864868554e01f1cd502e35a8caec180bed928f39c81a95e131c32c8c3586ff79bccb7acf5bde2b81fc612032e0e07a0e5212eb2c9a318d1b882f26ee93c14244dee446d34d25cbcd89f1e7d188629a4bb084c6cd35575e9dc270f6bc3fedf023d2b6c7cfe7f4652f51e05d343d08bca385775893de7b0", 0xd8, 0x6, 0x0, 0x2, r5}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x7, 0x8, r5, &(0x7f0000000680)="5fdc75599865c340f638415c338e5a7065b83f10178c98cfa1ebfeec8ee612eb506e", 0x22, 0xffffffff, 0x0, 0x2, r5}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000700)="efb3acc744636231", 0x8, 0x1ff, 0x0, 0x1, r5}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x5, 0x3, r4, &(0x7f0000000780)="e81dd8794229f4af7f79f0aee6055b0157c1430756b1eebbab6eb29b82459a6120fd7afb7c79c2fbb08b00881e7955ab561b39a91b681e97667d65fe8990a26324e185a181a8d86b54bacbc0cdac85c19288a5a92c4f4e9ff332025b459e38e43fed24089f756ea4ef4819c6ac7fd24f877b73ce", 0x74, 0x100000001, 0x0, 0x0, r5}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x8, 0x0, r10, &(0x7f0000000880)="e5221ddb8187877d4cae1f7cdee1f2206a1634dd6fd3be397e5e505f0784e8e3ede83fdbe5d66cd7c29c8dc0084750d9e7fcbe19807405a0e5d079dbfc0dd43780c80498cbe791644fe886", 0x4b, 0x662, 0x0, 0x2, r5}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x3, r6, &(0x7f0000000940)="02f2f22b267f486acb57c1632eff95c50b3418133ab868783d6e884587624b1560a3224109fc2abf669709913cda57f86012d9842deaf96d17bcbc4ecf8ae4d7927f107670bda1f2554b1ec0a93fd35aca1b6e0e1d5ff5e95bbe129a99e8612eed50c06bbe206f508e98", 0x6a, 0xfffffffffffffffc, 0x0, 0x0, r11}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x8000, r4, &(0x7f0000000a00)="46b4cdcd73bee4fa417b52ac80d2", 0xe, 0xffffffffffffffc0, 0x0, 0x1}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x2, 0x1, r2, &(0x7f0000000a80)="b1a3ed53eb16b07bd13aed270f0637d7545665", 0x13, 0x9, 0x0, 0x3, r5}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x400, r7, &(0x7f0000000b00)="45448424c6f940136acffeb1909c385106c1cf55bdc34f968ce06412050eb69c52a8eb1362a3a73fa5c432f5656937a87c3e10e40f000060051737d0bf4251183eaf85e72fdbcae4b67ce363bbc6e937002220531bb05c5854907cbc396362915564b639642023aee5451a298cc4207957e05e76736390aef7b644be57e41d4c3ed4b938a62fcc36f6e0e7c6544f0a29f9ce46b3285411e21a44d339535359cfd9e27ba6b71e99a5b2268c2038b6cab9c867320304510cf49d8f8f85e073562de459410dab618d6487365cda4d4d206b8e3b32aacc4e0c668016c17f4b82d283de1366e4cb29d528c514b0a240e4977223b8a636", 0xf4, 0x688a, 0x0, 0x1, r5}]) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) (async) listxattr(&(0x7f0000001cc0)='./bus\x00', &(0x7f0000001d00)=""/4096, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 82.198311ms ago: executing program 5 (id=516): ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000180)={0x0, 0x40, 0x7, &(0x7f00000000c0)={0x14, "c39c75c9b12c2238191850bde79523173296c82e3e7dfdcf10beb58a051d8559b2"}}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r0, 0x40140921, 0x7) (async) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=@gettaction={0xc8, 0x32, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6a}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc67}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffb}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) r1 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async, rerun: 64) r2 = socket(0x40000000015, 0x5, 0x0) (rerun: 64) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) r3 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x200, 0x34e}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x7, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 288.351µs ago: executing program 4 (id=517): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000040000000000000000000000000e1ffffff0000000000"], 0x48) r0 = getpgrp(0x0) ptrace(0x8, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 0s ago: executing program 5 (id=518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6000000002060502000000000000000000000000140007800800114000000000050015000600000005000100060000e0050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x60}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6000000002060502000000000000000000000000140007800800114000000000050015000600000005000100060000e0050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x60}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) kernel console output (not intermixed with test programs): avc: denied { execmem } for pid=5967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 61.710515][ T40] audit: type=1400 audit(1759055757.743:81): avc: denied { create } for pid=5971 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.724403][ T40] audit: type=1400 audit(1759055757.753:82): avc: denied { read write } for pid=5971 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.733596][ T40] audit: type=1400 audit(1759055757.753:83): avc: denied { open } for pid=5971 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.763560][ T5974] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.766626][ T40] audit: type=1400 audit(1759055757.753:84): avc: denied { ioctl } for pid=5971 comm="syz-executor" path="socket:[7405]" dev="sockfs" ino=7405 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.768638][ T5978] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.774533][ T5974] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.779558][ T5978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.781435][ T5974] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.783492][ T5978] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.785908][ T5974] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.788426][ T5978] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.790681][ T5974] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.792760][ T5978] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.794652][ T5974] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.803428][ T5978] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.805113][ T40] audit: type=1400 audit(1759055757.833:85): avc: denied { read } for pid=5971 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.814774][ T40] audit: type=1400 audit(1759055757.833:86): avc: denied { open } for pid=5971 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.814887][ T5978] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.822222][ T40] audit: type=1400 audit(1759055757.833:87): avc: denied { mounton } for pid=5971 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 61.830317][ T5978] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.836346][ T5978] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.841250][ T5979] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.844556][ T5979] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.848964][ T5979] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.852233][ T5979] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.855212][ T5979] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.098230][ T40] audit: type=1400 audit(1759055758.133:88): avc: denied { module_request } for pid=5972 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 62.144347][ T5972] chnl_net:caif_netlink_parms(): no params data found [ 62.189504][ T5971] chnl_net:caif_netlink_parms(): no params data found [ 62.259958][ T5980] chnl_net:caif_netlink_parms(): no params data found [ 62.333109][ T5984] chnl_net:caif_netlink_parms(): no params data found [ 62.437799][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.440999][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.444355][ T5972] bridge_slave_0: entered allmulticast mode [ 62.449057][ T5972] bridge_slave_0: entered promiscuous mode [ 62.511059][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.514026][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.516820][ T5980] bridge_slave_0: entered allmulticast mode [ 62.520460][ T5980] bridge_slave_0: entered promiscuous mode [ 62.523940][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.526957][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.529615][ T5971] bridge_slave_0: entered allmulticast mode [ 62.532534][ T5971] bridge_slave_0: entered promiscuous mode [ 62.537546][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.540348][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.543104][ T5972] bridge_slave_1: entered allmulticast mode [ 62.546954][ T5972] bridge_slave_1: entered promiscuous mode [ 62.554202][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.558318][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.560661][ T5980] bridge_slave_1: entered allmulticast mode [ 62.563361][ T5980] bridge_slave_1: entered promiscuous mode [ 62.579959][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.582237][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.584618][ T5971] bridge_slave_1: entered allmulticast mode [ 62.587892][ T5971] bridge_slave_1: entered promiscuous mode [ 62.715919][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.739418][ T5980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.746459][ T5971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.752121][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.755576][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.758800][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.761377][ T5984] bridge_slave_0: entered allmulticast mode [ 62.764112][ T5984] bridge_slave_0: entered promiscuous mode [ 62.770429][ T5980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.777082][ T5971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.804173][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.806732][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.809032][ T5984] bridge_slave_1: entered allmulticast mode [ 62.812697][ T5984] bridge_slave_1: entered promiscuous mode [ 62.946700][ T5984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.969148][ T5971] team0: Port device team_slave_0 added [ 62.974251][ T5972] team0: Port device team_slave_0 added [ 62.978867][ T5984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.984730][ T5980] team0: Port device team_slave_0 added [ 62.989288][ T5971] team0: Port device team_slave_1 added [ 62.992774][ T5972] team0: Port device team_slave_1 added [ 63.014456][ T5980] team0: Port device team_slave_1 added [ 63.111030][ T5984] team0: Port device team_slave_0 added [ 63.128834][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.131665][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.140872][ T5971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.146005][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.151204][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.160485][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.174695][ T5984] team0: Port device team_slave_1 added [ 63.179156][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.181490][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.190222][ T5980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.194330][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.197044][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.208851][ T5971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.213678][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.216493][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.224576][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.249475][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.251675][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.260747][ T5980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.305444][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.310319][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.321627][ T5984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.328521][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.331356][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.340464][ T5984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.510119][ T5972] hsr_slave_0: entered promiscuous mode [ 63.512857][ T5972] hsr_slave_1: entered promiscuous mode [ 63.520918][ T5971] hsr_slave_0: entered promiscuous mode [ 63.523231][ T5971] hsr_slave_1: entered promiscuous mode [ 63.525400][ T5971] debugfs: 'hsr0' already exists in 'hsr' [ 63.527686][ T5971] Cannot create hsr debugfs directory [ 63.534858][ T5980] hsr_slave_0: entered promiscuous mode [ 63.537907][ T5980] hsr_slave_1: entered promiscuous mode [ 63.540538][ T5980] debugfs: 'hsr0' already exists in 'hsr' [ 63.543226][ T5980] Cannot create hsr debugfs directory [ 63.573526][ T5984] hsr_slave_0: entered promiscuous mode [ 63.576439][ T5984] hsr_slave_1: entered promiscuous mode [ 63.579135][ T5984] debugfs: 'hsr0' already exists in 'hsr' [ 63.581061][ T5984] Cannot create hsr debugfs directory [ 63.837589][ T5979] Bluetooth: hci0: command tx timeout [ 63.840702][ T5978] Bluetooth: hci1: command tx timeout [ 63.907100][ T5978] Bluetooth: hci3: command tx timeout [ 63.907117][ T5979] Bluetooth: hci2: command tx timeout [ 64.021316][ T5972] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.032171][ T5972] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.038160][ T5972] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.050215][ T5972] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.081138][ T5980] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.086026][ T5980] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.091620][ T5980] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.099238][ T5980] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.155088][ T5984] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.161585][ T5984] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.178841][ T5984] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.183248][ T5984] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.250258][ T5971] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.255539][ T5971] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.267825][ T5971] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.272364][ T5971] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.303981][ T5980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.321198][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.350556][ T5980] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.360763][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.375011][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.377465][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.381910][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.384437][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.401622][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.404242][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.421958][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.425101][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.459928][ T5984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.494788][ T5980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.513200][ T5984] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.539128][ T40] audit: type=1400 audit(1759055760.573:89): avc: denied { sys_module } for pid=5980 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.543543][ T1185] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.548267][ T1185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.553043][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.555686][ T1185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.566679][ T5971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.604408][ T5971] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.623484][ T1258] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.626419][ T1258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.645597][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.648099][ T1185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.680644][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.760259][ T5980] veth0_vlan: entered promiscuous mode [ 64.772008][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.779474][ T5980] veth1_vlan: entered promiscuous mode [ 64.820448][ T5984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.833771][ T5980] veth0_macvtap: entered promiscuous mode [ 64.840887][ T5972] veth0_vlan: entered promiscuous mode [ 64.849998][ T5980] veth1_macvtap: entered promiscuous mode [ 64.859487][ T5972] veth1_vlan: entered promiscuous mode [ 64.880859][ T5971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.890994][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.901859][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.919628][ T1258] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.924004][ T1258] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.929681][ T5984] veth0_vlan: entered promiscuous mode [ 64.934899][ T1258] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.937929][ T1258] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.953731][ T5972] veth0_macvtap: entered promiscuous mode [ 64.973061][ T5984] veth1_vlan: entered promiscuous mode [ 64.989168][ T5972] veth1_macvtap: entered promiscuous mode [ 65.009724][ T5971] veth0_vlan: entered promiscuous mode [ 65.049787][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.052840][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.062703][ T5971] veth1_vlan: entered promiscuous mode [ 65.081535][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.093211][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.107572][ T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.110326][ T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.114606][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.118811][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.130805][ T5984] veth0_macvtap: entered promiscuous mode [ 65.135357][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.139314][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.151690][ T5984] veth1_macvtap: entered promiscuous mode [ 65.161340][ T5971] veth0_macvtap: entered promiscuous mode [ 65.173461][ T5980] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.180216][ T5971] veth1_macvtap: entered promiscuous mode [ 65.195662][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.196271][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.202373][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.211663][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.216927][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.219648][ T6057] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.239063][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.242111][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 65.245259][ T1149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.248932][ T1149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.258607][ T1149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.262558][ T1149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.267716][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.271652][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.278737][ T1149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.290259][ T1149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.293009][ T1149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.298326][ T1149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.311520][ T6059] binder: BINDER_SET_CONTEXT_MGR already set [ 65.315841][ T6059] binder: 6058:6059 ioctl 40046207 0 returned -16 [ 65.345698][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.355778][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.403846][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.409181][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.433497][ T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.440423][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.470553][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.473922][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.530326][ T6082] netlink: 'syz.0.1': attribute type 2 has an invalid length. [ 65.534316][ T6082] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1'. [ 65.540328][ T6082] nbd: must specify a device to reconfigure [ 65.812731][ T6094] Zero length message leads to an empty skb [ 65.817282][ T6096] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 65.841429][ T6096] xfrm1: entered allmulticast mode [ 65.906926][ T5979] Bluetooth: hci1: command tx timeout [ 65.906959][ T5978] Bluetooth: hci0: command tx timeout [ 65.986906][ T5978] Bluetooth: hci3: command tx timeout [ 65.987898][ T5979] Bluetooth: hci2: command tx timeout [ 66.003286][ T6105] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.052525][ T6111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17'. [ 66.159919][ T6122] process 'syz.0.20' launched '/dev/fd/5' with NULL argv: empty string added [ 66.160938][ T6124] binder: Bad value for 'max' [ 66.206045][ T6126] netlink: 32 bytes leftover after parsing attributes in process `syz.2.21'. [ 66.365098][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 66.370758][ T6146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.28'. [ 66.466498][ T6154] netlink: 28 bytes leftover after parsing attributes in process `syz.2.31'. [ 66.491626][ T6154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.545014][ T40] kauditd_printk_skb: 99 callbacks suppressed [ 66.545030][ T40] audit: type=1400 audit(1759055762.573:189): avc: denied { read append } for pid=6158 comm="syz.2.32" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.545820][ T6133] netlink: 'syz.0.22': attribute type 12 has an invalid length. [ 66.548324][ T40] audit: type=1400 audit(1759055762.573:190): avc: denied { open } for pid=6158 comm="syz.2.32" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.548367][ T40] audit: type=1400 audit(1759055762.573:191): avc: denied { ioctl } for pid=6158 comm="syz.2.32" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.578917][ T6133] netlink: 'syz.0.22': attribute type 29 has an invalid length. [ 66.582998][ T6133] netlink: 148 bytes leftover after parsing attributes in process `syz.0.22'. [ 66.588221][ T6133] netlink: 59 bytes leftover after parsing attributes in process `syz.0.22'. [ 66.599345][ T6133] netlink: 'syz.0.22': attribute type 21 has an invalid length. [ 66.603822][ T6133] netlink: 128 bytes leftover after parsing attributes in process `syz.0.22'. [ 66.615663][ T6133] netlink: 'syz.0.22': attribute type 6 has an invalid length. [ 66.779836][ T40] audit: type=1400 audit(1759055762.813:192): avc: denied { getopt } for pid=6165 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.821513][ T6169] nbd: must specify a size in bytes for the device [ 66.858161][ T6174] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 66.893903][ T40] audit: type=1400 audit(1759055762.923:193): avc: denied { setopt } for pid=6175 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.900910][ T40] audit: type=1400 audit(1759055762.943:194): avc: denied { read write } for pid=6175 comm="syz.3.37" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 66.910197][ T40] audit: type=1400 audit(1759055762.943:195): avc: denied { open } for pid=6175 comm="syz.3.37" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 66.918576][ T40] audit: type=1400 audit(1759055762.953:196): avc: denied { ioctl } for pid=6175 comm="syz.3.37" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 66.962111][ T40] audit: type=1400 audit(1759055762.993:197): avc: denied { write } for pid=6180 comm="syz.1.39" name="001" dev="devtmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 66.970647][ T40] audit: type=1400 audit(1759055762.993:198): avc: denied { create } for pid=6183 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 66.996944][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 67.141001][ T6192] overlay: ./file0 is not a directory [ 67.145504][ T6194] random: crng reseeded on system resumption [ 67.154046][ T6192] capability: warning: `syz.1.41' uses deprecated v2 capabilities in a way that may be insecure [ 67.170567][ T6194] tun0: tun_chr_ioctl cmd 1074025676 [ 67.172725][ T6194] tun0: owner set to 0 [ 67.178547][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 67.182398][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 67.185830][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.192030][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 67.195367][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 67.199454][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.203710][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 67.204043][ T6198] netlink: 'syz.1.44': attribute type 10 has an invalid length. [ 67.210536][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.215884][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.218821][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.243935][ T6198] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.246647][ T6198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.250022][ T6198] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.252676][ T6198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.258643][ T6198] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 67.297720][ T6198] bridge_slave_1: left allmulticast mode [ 67.299835][ T6198] bridge_slave_1: left promiscuous mode [ 67.302330][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.320623][ T6198] bridge_slave_0: left allmulticast mode [ 67.322578][ T6198] bridge_slave_0: left promiscuous mode [ 67.324628][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.331429][ T6204] loop3: detected capacity change from 0 to 1 [ 67.342113][ T6204] Dev loop3: unable to read RDB block 1 [ 67.345264][ T6204] loop3: unable to read partition table [ 67.351355][ T6204] loop3: partition table beyond EOD, truncated [ 67.353447][ T6204] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 67.365061][ T6198] bond0: (slave bridge0): Releasing backup interface [ 67.424498][ T9] usb 7-1: usb_control_msg returned -32 [ 67.425973][ T6164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.433753][ T6164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.439375][ T6208] block nbd0: not configured, cannot reconfigure [ 67.440520][ T9] usbtmc 7-1:16.0: can't read capabilities [ 67.445151][ T6208] SQUASHFS error: Failed to read block 0x0: -5 [ 67.447855][ T6208] unable to read squashfs_super_block [ 67.797311][ T6243] usbtmc 7-1:16.0: stb usb_control_msg returned -32 [ 67.805971][ T839] usb 7-1: USB disconnect, device number 2 [ 67.986831][ T5979] Bluetooth: hci1: command tx timeout [ 67.996785][ T5979] Bluetooth: hci0: command tx timeout [ 68.067556][ T5979] Bluetooth: hci2: command tx timeout [ 68.067919][ T5978] Bluetooth: hci3: command tx timeout [ 68.086770][ T981] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.246664][ T981] usb 5-1: Using ep0 maxpacket: 32 [ 68.250235][ T981] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 68.253916][ T981] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 68.258031][ T981] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 68.261444][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 68.266009][ T981] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 68.270423][ T981] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 68.276413][ T981] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 68.280190][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.286470][ T981] usb 5-1: config 0 descriptor?? [ 68.383491][ T6254] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.494310][ T981] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 68.551988][ T6254] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.621984][ T6254] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.700860][ T839] usb 5-1: USB disconnect, device number 2 [ 68.717106][ T6254] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.718945][ T839] usblp0: removed [ 68.824591][ T61] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.837290][ T61] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.849209][ T92] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.863459][ T1258] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.930238][ T6268] openvswitch: netlink: Missing valid actions attribute. [ 68.933547][ T6268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.939603][ T6268] netlink: 'syz.2.66': attribute type 16 has an invalid length. [ 68.943273][ T6268] netlink: 'syz.2.66': attribute type 17 has an invalid length. [ 68.957846][ T6268] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.013407][ T6271] netlink: 'syz.2.67': attribute type 10 has an invalid length. [ 69.025595][ T6271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.032614][ T6271] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 69.556057][ T6296] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 69.826205][ T6311] ======================================================= [ 69.826205][ T6311] WARNING: The mand mount option has been deprecated and [ 69.826205][ T6311] and is ignored by this kernel. Remove the mand [ 69.826205][ T6311] option from the mount to silence this warning. [ 69.826205][ T6311] ======================================================= [ 69.848535][ T1341] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.849548][ T6311] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 69.856244][ T6311] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 70.009921][ T1341] usb 5-1: config index 0 descriptor too short (expected 65274, got 45) [ 70.019804][ T1341] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 70.023977][ T1341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.036718][ T1341] usb 5-1: Product: syz [ 70.038999][ T1341] usb 5-1: Manufacturer: syz [ 70.041426][ T1341] usb 5-1: SerialNumber: syz [ 70.048929][ T6323] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 70.051296][ T6323] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 70.077525][ T5978] Bluetooth: hci0: command tx timeout [ 70.077574][ T5979] Bluetooth: hci1: command tx timeout [ 70.119135][ T6331] overlayfs: failed to resolve './bus': -2 [ 70.149064][ T5979] Bluetooth: hci3: command tx timeout [ 70.149081][ T5978] Bluetooth: hci2: command tx timeout [ 70.179775][ T6334] netlink: 'syz.1.87': attribute type 3 has an invalid length. [ 70.268216][ T1341] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 70.273714][ T1341] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 70.281181][ T1341] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 70.290615][ T1341] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 70.314186][ T1341] usb 5-1: USB disconnect, device number 3 [ 70.334435][ T6345] __nla_validate_parse: 8 callbacks suppressed [ 70.334447][ T6345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.90'. [ 70.514055][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 70.524733][ T6362] : entered promiscuous mode [ 70.527706][ T6362] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 70.908434][ T6381] syz.1.100 uses obsolete (PF_INET,SOCK_PACKET) [ 70.950317][ T6384] tmpfs: Bad value for 'mpol' [ 70.950478][ T6385] tmpfs: Bad value for 'mpol' [ 71.005256][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.101'. [ 71.014049][ T6385] netlink: 212388 bytes leftover after parsing attributes in process `syz.0.101'. [ 71.015185][ T6389] netlink: 212388 bytes leftover after parsing attributes in process `syz.0.101'. [ 71.023172][ T6389] openvswitch: netlink: Message has 5 unknown bytes. [ 71.023825][ T6385] openvswitch: netlink: Message has 5 unknown bytes. [ 71.120641][ T6396] validate_nla: 65 callbacks suppressed [ 71.120664][ T6396] netlink: 'syz.0.104': attribute type 7 has an invalid length. [ 71.194459][ T6404] kexec: Could not allocate control_code_buffer [ 71.301984][ T6416] NILFS (loop1): device size too small [ 71.341544][ T6422] blkio.reset_stats is deprecated [ 71.348696][ T6423] FAT-fs (nullb0): bogus number of reserved sectors [ 71.351523][ T6423] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 71.582900][ T40] kauditd_printk_skb: 112 callbacks suppressed [ 71.582912][ T40] audit: type=1400 audit(1759055767.613:311): avc: denied { bind } for pid=6441 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.594081][ T40] audit: type=1400 audit(1759055767.623:312): avc: denied { map } for pid=6441 comm="syz.1.121" path="socket:[11851]" dev="sockfs" ino=11851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.603041][ T40] audit: type=1400 audit(1759055767.623:313): avc: denied { read write accept } for pid=6441 comm="syz.1.121" path="socket:[11851]" dev="sockfs" ino=11851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.643964][ T40] audit: type=1400 audit(1759055767.673:314): avc: denied { read } for pid=6439 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 71.688694][ T6451] tipc: Started in network mode [ 71.690533][ T6451] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 71.695727][ T6451] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 71.705664][ T6451] tipc: Enabled bearer , priority 10 [ 71.770436][ T40] audit: type=1400 audit(1759055767.803:315): avc: denied { create } for pid=6453 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 71.778453][ T40] audit: type=1400 audit(1759055767.803:316): avc: denied { connect } for pid=6453 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 71.786868][ T40] audit: type=1400 audit(1759055767.803:317): avc: denied { mounton } for pid=6453 comm="syz.1.124" path="/35/file0" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.794851][ T40] audit: type=1400 audit(1759055767.813:318): avc: denied { create } for pid=6439 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.803817][ T40] audit: type=1400 audit(1759055767.813:319): avc: denied { getopt } for pid=6453 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 71.817193][ T40] audit: type=1400 audit(1759055767.853:320): avc: denied { setopt } for pid=6456 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.984837][ T6470] usb usb9: usbfs: process 6470 (syz.0.128) did not claim interface 0 before use [ 72.028216][ T6473] netlink: 'syz.0.129': attribute type 10 has an invalid length. [ 72.040482][ T6473] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 72.073582][ T6479] binder: 6477:6479 ioctl c0306201 200000000080 returned -14 [ 72.171697][ T6476] fuse: Bad value for 'group_id' [ 72.173704][ T6476] fuse: Bad value for 'group_id' [ 72.251592][ T5979] Bluetooth: hci0: Malformed LE Event: 0x0d [ 72.431253][ T92] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.511170][ T92] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.601347][ T92] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.660685][ T6492] netlink: 360 bytes leftover after parsing attributes in process `syz.1.138'. [ 72.673473][ T5978] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.679777][ T5978] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.684136][ T5978] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.694580][ T5978] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.699074][ T92] bond0: (slave netdevsim0): Releasing backup interface [ 72.699331][ T5978] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.708533][ T2303] tipc: Node number set to 1 [ 72.714951][ T92] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.943025][ T92] bridge_slave_1: left allmulticast mode [ 72.944104][ T92] bridge_slave_1: left promiscuous mode [ 72.945941][ T92] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.964339][ T92] bridge_slave_0: left allmulticast mode [ 72.964361][ T92] bridge_slave_0: left promiscuous mode [ 72.964490][ T92] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.097467][ T6507] netlink: 'syz.1.142': attribute type 1 has an invalid length. [ 73.102956][ T6507] netlink: 'syz.1.142': attribute type 3 has an invalid length. [ 73.105583][ T6507] netlink: 'syz.1.142': attribute type 3 has an invalid length. [ 73.302410][ T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.313234][ T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.319059][ T92] bond0 (unregistering): Released all slaves [ 73.340769][ T6493] chnl_net:caif_netlink_parms(): no params data found [ 73.428618][ T92] tipc: Disabling bearer [ 73.432872][ T92] tipc: Left network mode [ 73.535978][ T6493] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.544537][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.549125][ T6493] bridge_slave_0: entered allmulticast mode [ 73.553787][ T6493] bridge_slave_0: entered promiscuous mode [ 73.636578][ T6493] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.640570][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.644263][ T6493] bridge_slave_1: entered allmulticast mode [ 73.651154][ T6493] bridge_slave_1: entered promiscuous mode [ 73.736651][ T6010] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 73.768459][ T6493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.788104][ T6493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.866031][ T6493] team0: Port device team_slave_0 added [ 73.871601][ T6493] team0: Port device team_slave_1 added [ 73.897065][ T6010] usb 7-1: Using ep0 maxpacket: 16 [ 73.907008][ T6010] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 73.921735][ T6010] usb 7-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.40 [ 73.925486][ T6010] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.938426][ T6010] usb 7-1: Product: щ [ 73.940643][ T6010] usb 7-1: Manufacturer: 褼喠ꩀꏼ睮改몼蕾․클媣弑肦훍젻팞ﹸ毥誾௶鬣聎ﲰ䮂ꀊ븡鴄﹍帞슐㰧䁐㵔䈫ⱍ笴욧 [ 73.953514][ T6010] usb 7-1: SerialNumber: syz [ 73.972624][ T92] hsr_slave_0: left promiscuous mode [ 73.975072][ T92] hsr_slave_1: left promiscuous mode [ 73.977849][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.980305][ T92] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.984835][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.989637][ T92] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.020647][ T92] veth1_macvtap: left promiscuous mode [ 74.032433][ T92] veth0_macvtap: left promiscuous mode [ 74.034882][ T92] veth1_vlan: left promiscuous mode [ 74.039011][ T92] veth0_vlan: left promiscuous mode [ 74.373840][ T6010] usbhid 7-1:1.0: can't add hid device: -71 [ 74.375969][ T6010] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 74.391867][ T6010] usb 7-1: USB disconnect, device number 3 [ 74.796717][ T5978] Bluetooth: hci3: command tx timeout [ 74.931261][ T6536] netlink: 'syz.2.146': attribute type 11 has an invalid length. [ 74.934747][ T6537] netlink: 'syz.2.146': attribute type 11 has an invalid length. [ 76.477661][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.481189][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.866769][ T5978] Bluetooth: hci3: command tx timeout [ 77.145988][ T6561] netlink: 'syz.2.155': attribute type 10 has an invalid length. [ 77.198195][ T6562] netlink: 'syz.2.155': attribute type 10 has an invalid length. [ 77.201136][ T6562] netlink: 40 bytes leftover after parsing attributes in process `syz.2.155'. [ 77.233398][ T92] team0 (unregistering): Port device team_slave_1 removed [ 77.314914][ T92] team0 (unregistering): Port device team_slave_0 removed [ 77.936376][ T6493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.940315][ T6493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.950227][ T6493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.967088][ T6562] batadv0: entered promiscuous mode [ 77.969539][ T6562] batadv0: entered allmulticast mode [ 77.975574][ T6562] bond0: (slave batadv0): Releasing backup interface [ 77.981292][ T6562] bridge0: port 3(batadv0) entered blocking state [ 77.983651][ T6562] bridge0: port 3(batadv0) entered disabled state [ 77.990223][ T6493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.992647][ T6493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.005764][ T6493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.154414][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 78.154425][ T40] audit: type=1400 audit(1759055774.183:351): avc: denied { create } for pid=6569 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.168782][ T40] audit: type=1400 audit(1759055774.193:352): avc: denied { setattr } for pid=5972 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.170228][ T61] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 78.173645][ T6493] hsr_slave_0: entered promiscuous mode [ 78.176772][ T6493] hsr_slave_1: entered promiscuous mode [ 78.178067][ T40] audit: type=1400 audit(1759055774.203:353): avc: denied { create } for pid=6569 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.179110][ T40] audit: type=1400 audit(1759055774.203:354): avc: denied { write } for pid=6569 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.179350][ T61] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 78.179472][ T40] audit: type=1400 audit(1759055774.213:355): avc: denied { read } for pid=6569 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.180043][ T40] audit: type=1400 audit(1759055774.213:356): avc: denied { ioctl } for pid=6569 comm="syz.2.157" path="socket:[12085]" dev="sockfs" ino=12085 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.181739][ T6493] debugfs: 'hsr0' already exists in 'hsr' [ 78.200357][ T40] audit: type=1400 audit(1759055774.233:357): avc: denied { search } for pid=6571 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.201856][ T6493] Cannot create hsr debugfs directory [ 78.206499][ T40] audit: type=1400 audit(1759055774.233:358): avc: denied { search } for pid=6571 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1897 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.242452][ T40] audit: type=1400 audit(1759055774.233:359): avc: denied { search } for pid=6571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.250114][ T40] audit: type=1400 audit(1759055774.233:360): avc: denied { search } for pid=6571 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.305679][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.158'. [ 78.367412][ T6580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.158'. [ 78.492172][ T6584] netlink: 'syz.2.159': attribute type 1 has an invalid length. [ 78.512256][ T6584] netlink: 28 bytes leftover after parsing attributes in process `syz.2.159'. [ 78.558401][ T6493] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.568607][ T6493] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.581966][ T6493] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.602602][ T6493] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.669272][ T6010] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 78.681641][ T6493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.708388][ T6493] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.715415][ T1185] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.717724][ T1185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.731524][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.733852][ T1185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.839555][ T6010] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 78.847203][ T6010] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 78.851213][ T6010] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 78.854875][ T6010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.892198][ T6582] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 78.899614][ T6010] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 78.946650][ T5978] Bluetooth: hci3: command tx timeout [ 78.954152][ T6493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.053141][ T6622] kAFS: unparsable volume name [ 79.054673][ T6620] kAFS: unparsable volume name [ 79.111312][ T6010] usb 6-1: USB disconnect, device number 2 [ 79.133353][ T6493] veth0_vlan: entered promiscuous mode [ 79.141911][ T6493] veth1_vlan: entered promiscuous mode [ 79.165971][ T6493] veth0_macvtap: entered promiscuous mode [ 79.171303][ T6493] veth1_macvtap: entered promiscuous mode [ 79.182988][ T6493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.191313][ T6493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.200085][ T1258] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.203906][ T1258] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.207997][ T1258] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.210804][ T1258] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.250997][ T1258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.258114][ T1258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.276456][ T1258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.280297][ T1258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.382627][ T6634] netlink: 'syz.4.165': attribute type 32 has an invalid length. [ 79.609928][ T6652] netlink: 'syz.4.167': attribute type 29 has an invalid length. [ 79.613682][ T6652] netlink: 'syz.4.167': attribute type 29 has an invalid length. [ 79.619168][ T6652] netlink: 500 bytes leftover after parsing attributes in process `syz.4.167'. [ 79.659412][ T6655] veth0: entered promiscuous mode [ 79.661454][ T6654] veth0: left promiscuous mode [ 79.684208][ T6656] geneve2: entered promiscuous mode [ 79.690591][ T6656] geneve2: entered allmulticast mode [ 79.763683][ T34] libceph: connect (1)[c::]:6789 error -101 [ 79.766239][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 79.811415][ T6054] libceph: connect (1)[c::]:6789 error -101 [ 79.813753][ T6054] libceph: mon0 (1)[c::]:6789 connect error [ 79.897516][ T6668] veth1_to_hsr: mtu less than device minimum [ 79.931423][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.172'. [ 79.995963][ T6670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6670 comm=syz.2.173 [ 80.028660][ T34] libceph: connect (1)[c::]:6789 error -101 [ 80.030840][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 80.061881][ T6673] program syz.2.175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.071085][ T6054] libceph: connect (1)[c::]:6789 error -101 [ 80.073277][ T6054] libceph: mon0 (1)[c::]:6789 connect error [ 80.220039][ T6684] EXT4-fs (nbd2): unable to read superblock [ 80.375207][ T6690] pimreg3: entered allmulticast mode [ 80.537113][ T34] libceph: connect (1)[c::]:6789 error -101 [ 80.540032][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 80.576849][ T6054] libceph: connect (1)[c::]:6789 error -101 [ 80.579994][ T6054] libceph: mon0 (1)[c::]:6789 connect error [ 80.584582][ T6661] ceph: No mds server is up or the cluster is laggy [ 80.587643][ T6664] ceph: No mds server is up or the cluster is laggy [ 80.633784][ T6708] netlink: 276 bytes leftover after parsing attributes in process `syz.4.180'. [ 80.734721][ T6710] netlink: ct family unspecified [ 80.737478][ T6710] openvswitch: netlink: Actions may not be safe on all matching packets [ 81.036918][ T5978] Bluetooth: hci3: command tx timeout [ 81.115953][ T6750] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:21 [ 81.128390][ T6750] 9pnet_fd: Insufficient options for proto=fd [ 81.278410][ T6766] netlink: 'syz.4.196': attribute type 16 has an invalid length. [ 81.282080][ T6766] netlink: 48 bytes leftover after parsing attributes in process `syz.4.196'. [ 81.291568][ T6766] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.299472][ T6769] netlink: 'syz.4.196': attribute type 16 has an invalid length. [ 81.302128][ T6769] netlink: 48 bytes leftover after parsing attributes in process `syz.4.196'. [ 81.321020][ T6771] netlink: 'syz.1.197': attribute type 3 has an invalid length. [ 81.324675][ T6771] netlink: 'syz.1.197': attribute type 1 has an invalid length. [ 81.330056][ T6771] netlink: 220 bytes leftover after parsing attributes in process `syz.1.197'. [ 81.359090][ T6773] overlayfs: failed to resolve './file1': -2 [ 81.774924][ T6798] i2c i2c-1: Invalid block write size 34 [ 81.845103][ T5978] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 81.924801][ T6818] trusted_key: encrypted_key: master key parameter is missing [ 82.174203][ T6844] bridge0: port 3(batadv0) entered disabled state [ 82.188474][ T6844] bridge_slave_0: left allmulticast mode [ 82.191061][ T6844] bridge_slave_0: left promiscuous mode [ 82.193745][ T6844] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.201954][ T6844] bridge_slave_1: left allmulticast mode [ 82.204459][ T6844] bridge_slave_1: left promiscuous mode [ 82.208762][ T6844] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.218045][ T6844] bond0: (slave bond_slave_0): Releasing backup interface [ 82.224116][ T6844] bond0: (slave bond_slave_1): Releasing backup interface [ 82.236321][ T6844] team0: Port device team_slave_0 removed [ 82.242650][ T6844] team0: Port device team_slave_1 removed [ 82.246340][ T6844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.250672][ T6844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.254974][ T6844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.260289][ T6844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.268221][ T6847] team0: Mode changed to "random" [ 82.281807][ T6844] vlan0: entered promiscuous mode [ 82.289819][ T6844] team0: Port device vlan0 added [ 82.352371][ T6854] __nla_validate_parse: 2 callbacks suppressed [ 82.352382][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.222'. [ 82.355795][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'. [ 82.366657][ T6854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.457085][ T6859] Bluetooth: MGMT ver 1.23 [ 82.554448][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.228'. [ 83.156779][ T40] kauditd_printk_skb: 367 callbacks suppressed [ 83.156795][ T40] audit: type=1400 audit(1759055779.193:728): avc: denied { create } for pid=6866 comm="syz.2.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.170657][ T40] audit: type=1400 audit(1759055779.193:729): avc: denied { execmem } for pid=6869 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 83.227403][ T40] audit: type=1400 audit(1759055779.253:730): avc: denied { prog_load } for pid=6874 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 83.229543][ T6876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.232'. [ 83.233394][ T40] audit: type=1400 audit(1759055779.263:731): avc: denied { create } for pid=6874 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.246230][ T40] audit: type=1400 audit(1759055779.263:732): avc: denied { setopt } for pid=6874 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.247780][ T6875] vivid-004: ================= START STATUS ================= [ 83.256041][ T6875] vivid-004: Radio HW Seek Mode: Bounded [ 83.259587][ T6875] vivid-004: Radio Programmable HW Seek: false [ 83.262194][ T6875] vivid-004: RDS Rx I/O Mode: Block I/O [ 83.265058][ T6875] vivid-004: Generate RBDS Instead of RDS: false [ 83.270950][ T6875] vivid-004: RDS Reception: true [ 83.273877][ T6875] vivid-004: RDS Program Type: 0 inactive [ 83.276188][ T6875] vivid-004: RDS PS Name: inactive [ 83.280581][ T6875] vivid-004: RDS Radio Text: inactive [ 83.283279][ T6875] vivid-004: RDS Traffic Announcement: false inactive [ 83.287704][ T6875] vivid-004: RDS Traffic Program: false inactive [ 83.290051][ T6875] vivid-004: RDS Music: false inactive [ 83.290169][ T10] IPVS: starting estimator thread 0... [ 83.292224][ T6875] vivid-004: ================== END STATUS ================== [ 83.322636][ T40] audit: type=1400 audit(1759055779.353:733): avc: denied { ioctl } for pid=6880 comm="syz-executor" path="socket:[14234]" dev="sockfs" ino=14234 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.323778][ T5979] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.334759][ T40] audit: type=1400 audit(1759055779.373:734): avc: denied { write } for pid=6882 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.343256][ T40] audit: type=1400 audit(1759055779.373:735): avc: denied { prog_run } for pid=6882 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 83.344326][ T5979] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.354984][ T5979] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.360058][ T5979] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.364595][ T5979] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.374017][ T40] audit: type=1400 audit(1759055779.403:736): avc: denied { mounton } for pid=6880 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 83.387326][ T6879] IPVS: using max 46 ests per chain, 110400 per kthread [ 83.433770][ T40] audit: type=1400 audit(1759055779.463:737): avc: denied { shutdown } for pid=6887 comm="syz.2.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.524294][ T6880] chnl_net:caif_netlink_parms(): no params data found [ 83.534031][ T6895] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 83.542182][ T6895] block device autoloading is deprecated and will be removed. [ 83.700655][ T1185] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.712528][ T6880] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.715165][ T6880] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.719061][ T6880] bridge_slave_0: entered allmulticast mode [ 83.722469][ T6880] bridge_slave_0: entered promiscuous mode [ 83.727774][ T6880] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.730129][ T6880] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.732412][ T6880] bridge_slave_1: entered allmulticast mode [ 83.734656][ T6904] validate_nla: 1 callbacks suppressed [ 83.734666][ T6904] netlink: 'syz.2.238': attribute type 2 has an invalid length. [ 83.735318][ T6880] bridge_slave_1: entered promiscuous mode [ 83.736405][ T6904] netlink: 132 bytes leftover after parsing attributes in process `syz.2.238'. [ 83.786176][ T6907] futex_wake_op: syz.2.239 tries to shift op by -1; fix this program [ 83.789049][ T6907] futex_wake_op: syz.2.239 tries to shift op by -1; fix this program [ 83.791584][ T6907] futex_wake_op: syz.2.239 tries to shift op by -1; fix this program [ 83.794092][ T6907] futex_wake_op: syz.2.239 tries to shift op by -1; fix this program [ 83.797231][ T6907] futex_wake_op: syz.2.239 tries to shift op by -1; fix this program [ 83.800136][ T6907] futex_wake_op: syz.2.239 tries to shift op by -1; fix this program [ 83.802875][ T6907] futex_wake_op: syz.2.239 tries to shift op by -1; fix this program [ 83.805426][ T6907] futex_wake_op: syz.2.239 tries to shift op by -1; fix this program [ 83.807958][ T6907] futex_wake_op: syz.2.239 tries to shift op by -1; fix this program [ 83.810479][ T6907] futex_wake_op: syz.2.239 tries to shift op by -1; fix this program [ 83.825247][ T1185] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.853917][ T6911] 9pnet: Unknown protocol version 9p2000.u184467440737095516150xffffffffffffffff`}fj^R"NםՅ~YGŬ+9UCn'4-ְEY;=vDW~ĠYY`=6qkN+}R'j{z%`(lq 0 fAN"ׅVNVEr QR01777777777777777777777 [ 83.876900][ T6880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.882686][ T6880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.908651][ T6913] netlink: 20 bytes leftover after parsing attributes in process `syz.2.241'. [ 83.957516][ T6917] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 83.991622][ T1185] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.003265][ T6880] team0: Port device team_slave_0 added [ 84.008714][ T6880] team0: Port device team_slave_1 added [ 84.068689][ T6880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.070761][ T6880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.086810][ T6880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.103813][ T6919] netlink: 28 bytes leftover after parsing attributes in process `syz.4.243'. [ 84.112598][ T6919] IPVS: set_ctl: invalid protocol: 0 172.30.0.5:20000 [ 84.123123][ T6919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.123665][ T1185] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.143831][ T6880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.146735][ T6880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.155269][ T6880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.218287][ T6880] hsr_slave_0: entered promiscuous mode [ 84.221352][ T6880] hsr_slave_1: entered promiscuous mode [ 84.223481][ T6880] debugfs: 'hsr0' already exists in 'hsr' [ 84.225411][ T6880] Cannot create hsr debugfs directory [ 84.367064][ T34] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 84.417303][ T1185] bridge_slave_1: left allmulticast mode [ 84.419108][ T1185] bridge_slave_1: left promiscuous mode [ 84.420871][ T1185] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.424526][ T1185] bridge_slave_0: left allmulticast mode [ 84.427421][ T1185] bridge_slave_0: left promiscuous mode [ 84.430743][ T1185] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.517228][ T34] usb 7-1: Using ep0 maxpacket: 16 [ 84.520920][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 84.529529][ T34] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 84.532841][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.535552][ T34] usb 7-1: Product: syz [ 84.537693][ T34] usb 7-1: Manufacturer: syz [ 84.539206][ T34] usb 7-1: SerialNumber: syz [ 84.543965][ T34] usb 7-1: config 0 descriptor?? [ 84.554745][ T34] hub 7-1:0.0: bad descriptor, ignoring hub [ 84.557345][ T34] hub 7-1:0.0: probe with driver hub failed with error -5 [ 84.563461][ T34] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input7 [ 84.791995][ T1185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.801481][ T1185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.806322][ T1185] bond0 (unregistering): Released all slaves [ 84.917475][ T6880] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.931820][ T6942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.253'. [ 84.932855][ T6880] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.935560][ T6942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.253'. [ 84.949961][ T6942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.253'. [ 84.958017][ T6880] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.990911][ T6880] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.008175][ T5978] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.014102][ T5978] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.023054][ T5978] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.028961][ T5978] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.031720][ T5978] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.163441][ T1185] hsr_slave_0: left promiscuous mode [ 85.170405][ T1185] hsr_slave_1: left promiscuous mode [ 85.173154][ T1185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.176338][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.181293][ T1185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.184260][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.218441][ T1185] veth1_macvtap: left promiscuous mode [ 85.221032][ T1185] veth0_macvtap: left promiscuous mode [ 85.223703][ T1185] veth1_vlan: left promiscuous mode [ 85.226243][ T1185] veth0_vlan: left promiscuous mode [ 85.286864][ T838] usb 7-1: USB disconnect, device number 4 [ 85.429980][ T5979] Bluetooth: hci4: command tx timeout [ 86.060073][ T1185] team0 (unregistering): Port device team_slave_1 removed [ 86.131425][ T1185] team0 (unregistering): Port device team_slave_0 removed [ 86.167958][ T838] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 86.306714][ T838] usb 7-1: device descriptor read/64, error -71 [ 86.580804][ T838] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 86.718707][ T838] usb 7-1: device descriptor read/64, error -71 [ 86.722448][ T54] cfg80211: failed to load regulatory.db [ 86.808073][ T6990] netlink: 'syz.4.262': attribute type 10 has an invalid length. [ 86.824288][ T6990] team0: Port device dummy0 added [ 86.826886][ T838] usb usb7-port1: attempt power cycle [ 86.831761][ T6990] netlink: 'syz.4.262': attribute type 10 has an invalid length. [ 86.840998][ T6990] team0: Port device dummy0 removed [ 86.849344][ T6990] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 86.893998][ T6880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.908060][ T6880] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.919949][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.922692][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.931445][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.934123][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.946058][ T6947] chnl_net:caif_netlink_parms(): no params data found [ 86.947798][ T6994] dlm: non-version read from control device 8224 [ 87.107045][ T5979] Bluetooth: hci0: command tx timeout [ 87.133246][ T6947] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.137500][ T6947] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.141128][ T6947] bridge_slave_0: entered allmulticast mode [ 87.145118][ T6947] bridge_slave_0: entered promiscuous mode [ 87.152062][ T6947] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.154303][ T6947] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.157290][ T6947] bridge_slave_1: entered allmulticast mode [ 87.160060][ T6947] bridge_slave_1: entered promiscuous mode [ 87.205773][ T838] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 87.223803][ T6880] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.229764][ T838] usb 7-1: device descriptor read/8, error -71 [ 87.240500][ T6947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.250574][ T6947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.326455][ T6947] team0: Port device team_slave_0 added [ 87.329904][ T6947] team0: Port device team_slave_1 added [ 87.367553][ T6947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.369835][ T6947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.379084][ T6947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.398395][ T1185] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.408141][ T6947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.410577][ T6947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.420788][ T6947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.464783][ T7029] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 87.473532][ T838] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 87.475708][ T7029] netlink: 'syz.4.266': attribute type 38 has an invalid length. [ 87.498234][ T838] usb 7-1: device descriptor read/8, error -71 [ 87.506636][ T5979] Bluetooth: hci4: command tx timeout [ 87.508332][ T6947] hsr_slave_0: entered promiscuous mode [ 87.511519][ T6947] hsr_slave_1: entered promiscuous mode [ 87.527907][ T7033] overlayfs: missing 'workdir' [ 87.528646][ T1185] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.598055][ T6880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.622544][ T838] usb usb7-port1: unable to enumerate USB device [ 87.625561][ T1185] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.732347][ T1185] netdevsim netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.198724][ T1185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.206149][ T1185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.212983][ T1185] bond0 (unregistering): Released all slaves [ 88.227460][ T6947] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 88.232579][ T6947] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 88.239899][ T6947] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 88.254689][ T6947] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 88.274397][ T6880] veth0_vlan: entered promiscuous mode [ 88.288383][ T7057] /dev/sr0: Can't open blockdev [ 88.290697][ T6880] veth1_vlan: entered promiscuous mode [ 88.312294][ T1185] : left promiscuous mode [ 88.337687][ T40] kauditd_printk_skb: 231 callbacks suppressed [ 88.337710][ T40] audit: type=1400 audit(1759055784.378:969): avc: denied { block_suspend } for pid=7064 comm="syz.4.270" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.350775][ T40] audit: type=1400 audit(1759055784.378:970): avc: denied { search } for pid=5681 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.362720][ T6880] veth0_macvtap: entered promiscuous mode [ 88.362781][ T40] audit: type=1400 audit(1759055784.378:971): avc: denied { search } for pid=5681 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.374078][ T6880] veth1_macvtap: entered promiscuous mode [ 88.377163][ T40] audit: type=1400 audit(1759055784.378:972): avc: denied { search } for pid=5681 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.386338][ T40] audit: type=1400 audit(1759055784.378:973): avc: denied { read } for pid=5681 comm="dhcpcd" name="n114" dev="tmpfs" ino=3235 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.387970][ T6880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.397058][ T40] audit: type=1400 audit(1759055784.378:974): avc: denied { open } for pid=5681 comm="dhcpcd" path="/run/udev/data/n114" dev="tmpfs" ino=3235 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.415238][ T6947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.415334][ T40] audit: type=1400 audit(1759055784.378:975): avc: denied { getattr } for pid=5681 comm="dhcpcd" path="/run/udev/data/n114" dev="tmpfs" ino=3235 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.428340][ T40] audit: type=1400 audit(1759055784.438:976): avc: denied { read } for pid=7064 comm="syz.4.270" dev="nsfs" ino=4026533487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 88.433782][ T6880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.437346][ T40] audit: type=1400 audit(1759055784.438:977): avc: denied { open } for pid=7064 comm="syz.4.270" path="net:[4026533487]" dev="nsfs" ino=4026533487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 88.437385][ T40] audit: type=1400 audit(1759055784.438:978): avc: denied { create } for pid=7064 comm="syz.4.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 88.522052][ T92] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.525533][ T92] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.532454][ T6947] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.538225][ T92] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.541110][ T92] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.550404][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.553622][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.565054][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.568086][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.568935][ T7073] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 88.590829][ T7073] kvm: pic: non byte read [ 88.596774][ T7073] kvm: pic: level sensitive irq not supported [ 88.598927][ T7073] kvm: pic: non byte read [ 88.604727][ T7073] kvm: pic: level sensitive irq not supported [ 88.605932][ T7073] kvm: pic: non byte read [ 88.613543][ T7073] kvm: pic: level sensitive irq not supported [ 88.614295][ T7073] kvm: pic: non byte read [ 88.620703][ T7073] kvm: pic: level sensitive irq not supported [ 88.621027][ T7073] kvm: pic: non byte read [ 88.628699][ T7073] kvm: pic: level sensitive irq not supported [ 88.629038][ T7073] kvm: pic: non byte read [ 88.639033][ T7073] kvm: pic: level sensitive irq not supported [ 88.639362][ T7073] kvm: pic: non byte read [ 88.716388][ T1185] hsr_slave_0: left promiscuous mode [ 88.721025][ T1185] hsr_slave_1: left promiscuous mode [ 88.724101][ T1185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.727812][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.731135][ T1185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.733481][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.760297][ T1185] veth1_macvtap: left promiscuous mode [ 88.762560][ T1185] veth0_macvtap: left promiscuous mode [ 88.764870][ T1185] veth1_vlan: left promiscuous mode [ 88.767271][ T1185] veth0_vlan: left promiscuous mode [ 89.186777][ T5979] Bluetooth: hci0: command tx timeout [ 89.447269][ T1185] team0 (unregistering): Port device team_slave_1 removed [ 89.513850][ T1185] team0 (unregistering): Port device team_slave_0 removed [ 89.596801][ T5979] Bluetooth: hci4: command tx timeout [ 90.074616][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.077734][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.107704][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.110989][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.224251][ T6947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.385669][ T6947] veth0_vlan: entered promiscuous mode [ 90.392326][ T6947] veth1_vlan: entered promiscuous mode [ 90.411414][ T6947] veth0_macvtap: entered promiscuous mode [ 90.416103][ T6947] veth1_macvtap: entered promiscuous mode [ 90.429011][ T6947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.436336][ T6947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.444475][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.448208][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.454786][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.458529][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.506703][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.509230][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.525730][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.529513][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.266803][ T5979] Bluetooth: hci0: command tx timeout [ 91.666781][ T5979] Bluetooth: hci4: command tx timeout [ 93.346707][ T5979] Bluetooth: hci0: command tx timeout [ 100.817609][ T40] kauditd_printk_skb: 90 callbacks suppressed [ 100.817620][ T40] audit: type=1400 audit(1759055796.858:1069): avc: denied { search } for pid=7183 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.827250][ T40] audit: type=1400 audit(1759055796.858:1070): avc: denied { search } for pid=7183 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1897 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.835047][ T40] audit: type=1400 audit(1759055796.858:1071): avc: denied { search } for pid=7183 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.843235][ T40] audit: type=1400 audit(1759055796.858:1072): avc: denied { search } for pid=7183 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.852253][ T40] audit: type=1400 audit(1759055796.858:1073): avc: denied { read open } for pid=7184 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.860802][ T40] audit: type=1400 audit(1759055796.858:1074): avc: denied { getattr } for pid=7184 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.870496][ T40] audit: type=1400 audit(1759055796.868:1075): avc: denied { add_name } for pid=7183 comm="dhcpcd-run-hook" name="resolv.conf.eth12.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.878065][ T40] audit: type=1400 audit(1759055796.868:1076): avc: denied { create } for pid=7183 comm="dhcpcd-run-hook" name="resolv.conf.eth12.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.887071][ T40] audit: type=1400 audit(1759055796.868:1077): avc: denied { write open } for pid=7183 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth12.ipv4ll" dev="tmpfs" ino=3326 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.896244][ T40] audit: type=1400 audit(1759055796.878:1078): avc: denied { append } for pid=7183 comm="dhcpcd-run-hook" name="resolv.conf.eth12.ipv4ll" dev="tmpfs" ino=3326 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 108.460174][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 108.460185][ T40] audit: type=1400 audit(1759055804.498:1083): avc: denied { ioctl } for pid=7236 comm="syz.4.274" path="/dev/video6" dev="devtmpfs" ino=963 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 108.471241][ T40] audit: type=1400 audit(1759055804.498:1084): avc: denied { map_create } for pid=7235 comm="syz.6.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 108.478492][ T40] audit: type=1400 audit(1759055804.498:1085): avc: denied { perfmon } for pid=7235 comm="syz.6.275" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 108.486711][ T40] audit: type=1400 audit(1759055804.498:1086): avc: denied { map_read map_write } for pid=7235 comm="syz.6.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 108.493505][ T40] audit: type=1400 audit(1759055804.498:1087): avc: denied { read } for pid=7235 comm="syz.6.275" dev="nsfs" ino=4026533401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 108.501678][ T40] audit: type=1400 audit(1759055804.498:1088): avc: denied { open } for pid=7235 comm="syz.6.275" path="net:[4026533401]" dev="nsfs" ino=4026533401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 108.509729][ T40] audit: type=1400 audit(1759055804.498:1089): avc: denied { create } for pid=7235 comm="syz.6.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.518813][ T40] audit: type=1400 audit(1759055804.498:1090): avc: denied { ioctl } for pid=7235 comm="syz.6.275" path="socket:[17941]" dev="sockfs" ino=17941 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.531740][ T40] audit: type=1400 audit(1759055804.498:1091): avc: denied { watch watch_reads } for pid=7239 comm="syz.2.276" path="/88" dev="tmpfs" ino=487 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 108.542637][ T40] audit: type=1400 audit(1759055804.508:1092): avc: denied { mounton } for pid=7237 comm="syz.5.277" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.567399][ T839] e1000 0000:00:06.0 eth0: Reset adapter [ 108.709579][ T7261] hpfs: hpfs_map_sector(): read error [ 108.865331][ T7271] netlink: 'syz.2.283': attribute type 1 has an invalid length. [ 108.869697][ T7271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.872781][ T7271] IPv6: NLM_F_CREATE should be set when creating new route [ 108.875719][ T7271] IPv6: NLM_F_CREATE should be set when creating new route [ 108.882146][ T7271] netlink: 'syz.2.283': attribute type 1 has an invalid length. [ 108.885198][ T7271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.921258][ T7277] __nla_validate_parse: 30 callbacks suppressed [ 108.921269][ T7277] netlink: 80 bytes leftover after parsing attributes in process `syz.5.285'. [ 108.926282][ T7277] netlink: 80 bytes leftover after parsing attributes in process `syz.5.285'. [ 109.001676][ T61] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.080588][ T61] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.219705][ T61] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.284985][ T61] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.448568][ T61] bridge_slave_1: left allmulticast mode [ 109.451130][ T61] bridge_slave_1: left promiscuous mode [ 109.453811][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.460244][ T61] bridge_slave_0: left allmulticast mode [ 109.463119][ T61] bridge_slave_0: left promiscuous mode [ 109.465984][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.809329][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.814172][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.820422][ T61] bond0 (unregistering): Released all slaves [ 110.154894][ T61] hsr_slave_0: left promiscuous mode [ 110.157808][ T61] hsr_slave_1: left promiscuous mode [ 110.160583][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.163656][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.167875][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.170977][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.204174][ T61] veth1_macvtap: left promiscuous mode [ 110.207761][ T61] veth0_macvtap: left promiscuous mode [ 110.210232][ T61] veth1_vlan: left promiscuous mode [ 110.212513][ T61] veth0_vlan: left promiscuous mode [ 110.717627][ T6054] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 110.927513][ T61] team0 (unregistering): Port device team_slave_1 removed [ 111.010547][ T61] team0 (unregistering): Port device team_slave_0 removed [ 122.573889][ T40] kauditd_printk_skb: 56 callbacks suppressed [ 122.573905][ T40] audit: type=1400 audit(1759055818.608:1149): avc: denied { map_create } for pid=7349 comm="syz.4.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.576330][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.289'. [ 122.585334][ T40] audit: type=1400 audit(1759055818.608:1150): avc: denied { perfmon } for pid=7349 comm="syz.4.286" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.588960][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.289'. [ 122.602451][ T40] audit: type=1400 audit(1759055818.608:1151): avc: denied { map_read map_write } for pid=7349 comm="syz.4.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.610913][ T40] audit: type=1400 audit(1759055818.608:1152): avc: denied { read write } for pid=7350 comm="syz.2.288" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 122.626645][ T40] audit: type=1400 audit(1759055818.608:1153): avc: denied { ioctl open } for pid=7350 comm="syz.2.288" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 122.640885][ T40] audit: type=1400 audit(1759055818.618:1154): avc: denied { prog_load } for pid=7349 comm="syz.4.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.651043][ T40] audit: type=1400 audit(1759055818.618:1155): avc: denied { bpf } for pid=7349 comm="syz.4.286" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.660548][ T40] audit: type=1400 audit(1759055818.628:1156): avc: denied { prog_run } for pid=7349 comm="syz.4.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.668475][ T40] audit: type=1400 audit(1759055818.648:1157): avc: denied { create } for pid=7351 comm="syz.5.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.675063][ T40] audit: type=1400 audit(1759055818.648:1158): avc: denied { read write } for pid=7351 comm="syz.5.289" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.810594][ T5978] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.814352][ T5978] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.821722][ T5978] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.826142][ T5978] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.832181][ T5978] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.833976][ T7376] /dev/sg0: Can't lookup blockdev [ 122.841585][ T7376] netlink: 'syz.4.291': attribute type 1 has an invalid length. [ 122.859434][ T7376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.876438][ T7376] vlan2: entered promiscuous mode [ 122.880030][ T7376] bond1: entered promiscuous mode [ 122.881746][ T7376] vlan2: entered allmulticast mode [ 122.883725][ T7376] bond1: entered allmulticast mode [ 122.893650][ T7376] gretap1: entered promiscuous mode [ 122.904291][ T7376] bond1: (slave gretap1): making interface the new active one [ 122.908152][ T7376] gretap1: entered allmulticast mode [ 122.909559][ T7380] netlink: 20 bytes leftover after parsing attributes in process `syz.2.292'. [ 122.911335][ T7376] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 122.919889][ T7381] /dev/sg0: Can't lookup blockdev [ 122.955242][ T7385] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 122.978082][ T7387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7387 comm=syz.2.292 [ 123.055741][ T7372] chnl_net:caif_netlink_parms(): no params data found [ 123.112878][ T7395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=7395 comm=syz.4.294 [ 123.120761][ T7395] netlink: 156 bytes leftover after parsing attributes in process `syz.4.294'. [ 123.165719][ T7372] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.169060][ T7372] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.172301][ T7372] bridge_slave_0: entered allmulticast mode [ 123.177264][ T7372] bridge_slave_0: entered promiscuous mode [ 123.184776][ T7372] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.188838][ T7372] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.192033][ T7372] bridge_slave_1: entered allmulticast mode [ 123.196074][ T7372] bridge_slave_1: entered promiscuous mode [ 123.267201][ T7372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.273029][ T7372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.311614][ T7372] team0: Port device team_slave_0 added [ 123.317502][ T7372] team0: Port device team_slave_1 added [ 123.366299][ T7372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.370219][ T7372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.380981][ T7372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.392115][ T7372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.395808][ T7372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.407307][ T7372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.461918][ T7372] hsr_slave_0: entered promiscuous mode [ 123.464269][ T7372] hsr_slave_1: entered promiscuous mode [ 124.130137][ T7468] netlink: 'syz.5.306': attribute type 1 has an invalid length. [ 124.133423][ T7468] netlink: 228 bytes leftover after parsing attributes in process `syz.5.306'. [ 124.216755][ T6024] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 124.243676][ T7372] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 124.250615][ T7372] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 124.255886][ T7372] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 124.261149][ T7372] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 124.317059][ T7372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.333735][ T7372] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.343467][ T1185] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.345978][ T1185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.356205][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.358905][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.388782][ T7372] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.396619][ T6024] usb 9-1: Using ep0 maxpacket: 16 [ 124.401884][ T6024] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.407411][ T6024] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 124.410547][ T6024] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 124.413661][ T6024] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.420132][ T6024] usb 9-1: config 0 descriptor?? [ 124.513409][ T7372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.624364][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.301'. [ 124.714192][ T7372] veth0_vlan: entered promiscuous mode [ 124.722222][ T7372] veth1_vlan: entered promiscuous mode [ 124.741102][ T7372] veth0_macvtap: entered promiscuous mode [ 124.748108][ T7372] veth1_macvtap: entered promiscuous mode [ 124.760506][ T7372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.767873][ T7372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.775072][ T92] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.778986][ T92] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.783554][ T92] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.789859][ T92] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.859064][ T7456] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.864285][ T7456] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 124.877345][ T5978] Bluetooth: hci0: command tx timeout [ 124.877684][ T7456] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 124.884452][ T7456] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.886439][ T7456] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.891352][ T7456] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.897142][ T7456] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 124.899293][ T7456] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 124.904038][ T7456] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 124.910116][ T7456] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.912984][ T7456] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 124.918919][ T7456] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 124.942059][ T838] usb 9-1: USB disconnect, device number 2 [ 124.945618][ T1258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.953737][ T1258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.960244][ T7522] dns_resolver: Unsupported server list version (0) [ 125.015498][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.023687][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.084333][ T7539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.242409][ T7561] netlink: 64 bytes leftover after parsing attributes in process `syz.4.315'. [ 125.727322][ T7618] netlink: 64 bytes leftover after parsing attributes in process `syz.6.326'. [ 125.867895][ T7629] hfs: unable to load iocharset "io#harset" [ 125.883649][ T7637] veth1_to_batadv: entered promiscuous mode [ 126.012849][ T7648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=7648 comm=syz.2.335 [ 126.157284][ T5978] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.357296][ T7685] vxcan1: tx address claim with different name [ 126.362157][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.5.342'. [ 126.385274][ T7691] netlink: 12 bytes leftover after parsing attributes in process `syz.6.346'. [ 126.465874][ T6054] Process accounting resumed [ 126.583258][ T7718] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:19969 [ 126.585735][ T7717] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:19969 [ 126.646978][ T7724] netlink: 'syz.2.355': attribute type 10 has an invalid length. [ 126.658949][ T7724] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 126.921550][ T5978] Bluetooth: hci2: unexpected subevent 0x0a length: 99 > 30 [ 126.923681][ T7739] netlink: 'syz.2.359': attribute type 16 has an invalid length. [ 126.927318][ T7739] netlink: 'syz.2.359': attribute type 17 has an invalid length. [ 126.934838][ T7739] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.947153][ T5978] Bluetooth: hci4: command 0x0c1a tx timeout [ 126.949086][ T5979] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.949233][ T5982] Bluetooth: hci0: command 0x040f tx timeout [ 126.957316][ T53] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 127.119443][ T53] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 127.123022][ T53] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 127.128630][ T53] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 127.132731][ T53] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 127.138748][ T53] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 127.145868][ T53] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 127.151191][ T53] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 127.154529][ T53] usb 9-1: Product: syz [ 127.156043][ T53] usb 9-1: Manufacturer: syz [ 127.162422][ T53] cdc_wdm 9-1:1.0: skipping garbage [ 127.164289][ T53] cdc_wdm 9-1:1.0: skipping garbage [ 127.168426][ T53] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 127.170597][ T53] cdc_wdm 9-1:1.0: Unknown control protocol [ 127.300042][ T7751] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7751 comm=syz.5.362 [ 127.309235][ T7751] overlayfs: workdir and upperdir must be separate subtrees [ 127.602488][ T40] kauditd_printk_skb: 526 callbacks suppressed [ 127.602505][ T40] audit: type=1400 audit(1759055823.638:1685): avc: denied { read } for pid=7752 comm="syz.6.363" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 127.616011][ T40] audit: type=1400 audit(1759055823.638:1686): avc: denied { open } for pid=7752 comm="syz.6.363" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 127.628280][ T40] audit: type=1400 audit(1759055823.638:1687): avc: denied { ioctl } for pid=7752 comm="syz.6.363" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 127.633998][ T7753] __nla_validate_parse: 3 callbacks suppressed [ 127.634011][ T7753] netlink: 12 bytes leftover after parsing attributes in process `syz.6.363'. [ 127.641377][ T40] audit: type=1400 audit(1759055823.638:1688): avc: denied { set_context_mgr } for pid=7752 comm="syz.6.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 127.646640][ T7753] binder: 7752:7753 ioctl c0306201 200000000640 returned -22 [ 127.647935][ T40] audit: type=1400 audit(1759055823.638:1689): avc: denied { read } for pid=7752 comm="syz.6.363" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 127.670866][ T40] audit: type=1400 audit(1759055823.638:1690): avc: denied { open } for pid=7752 comm="syz.6.363" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 127.680019][ T40] audit: type=1400 audit(1759055823.638:1691): avc: denied { ioctl } for pid=7752 comm="syz.6.363" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 127.691422][ T40] audit: type=1400 audit(1759055823.668:1692): avc: denied { create } for pid=7752 comm="syz.6.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.700021][ T40] audit: type=1400 audit(1759055823.668:1693): avc: denied { write } for pid=7752 comm="syz.6.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.795475][ T40] audit: type=1400 audit(1759055823.828:1694): avc: denied { write } for pid=7754 comm="syz.6.364" name="wireless" dev="proc" ino=4026532898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 127.797526][ T7755] warning: `syz.6.364' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.038520][ T7760] netlink: 'syz.6.366': attribute type 9 has an invalid length. [ 128.125476][ T7767] netlink: 'syz.6.369': attribute type 1 has an invalid length. [ 128.128645][ T7767] netlink: 28 bytes leftover after parsing attributes in process `syz.6.369'. [ 128.184690][ T7770] netlink: 28 bytes leftover after parsing attributes in process `syz.6.369'. [ 128.226930][ T5982] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.445267][ T7792] loop6: detected capacity change from 0 to 7 [ 128.463994][ T7792] Dev loop6: unable to read RDB block 7 [ 128.466317][ T7792] loop6: unable to read partition table [ 128.469176][ T7792] loop6: partition table beyond EOD, truncated [ 128.471645][ T7792] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 128.485011][ T7792] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 128.685543][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'. [ 128.742328][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'. [ 128.782491][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 128.785525][ T7814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.382'. [ 128.794300][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 128.794773][ T61] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.798511][ T7814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.382'. [ 128.802894][ T61] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.812153][ T61] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.818102][ T61] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.026967][ T5982] Bluetooth: hci4: command 0x0c1a tx timeout [ 129.027053][ T5979] Bluetooth: hci0: command 0x040f tx timeout [ 129.027908][ T5978] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.319373][ T7827] trusted_key: syz.5.384 sent an empty control message without MSG_MORE. [ 129.352705][ T5979] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 129.572967][ T6024] usb 9-1: USB disconnect, device number 3 [ 129.686766][ T2303] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 129.728048][ T6054] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 129.736139][ T7842] Bluetooth: MGMT ver 1.23 [ 129.849113][ T2303] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.853257][ T2303] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.857725][ T2303] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.863028][ T2303] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.867388][ T2303] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.876628][ T2303] usb 11-1: config 0 descriptor?? [ 129.878630][ T6054] usb 7-1: Using ep0 maxpacket: 16 [ 129.883291][ T6054] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 129.888156][ T6054] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.892119][ T6054] usb 7-1: Product: syz [ 129.893989][ T6054] usb 7-1: Manufacturer: syz [ 129.895954][ T6054] usb 7-1: SerialNumber: syz [ 129.902816][ T6054] usb 7-1: config 0 descriptor?? [ 129.909858][ T6054] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 130.063769][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.392'. [ 130.073527][ T7849] batman_adv: batadv0: Adding interface: ipvlan2 [ 130.076317][ T7849] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.088023][ T7849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.092075][ T7849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.096488][ T7849] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 130.111220][ T7849] netlink: 'syz.5.392': attribute type 4 has an invalid length. [ 130.154393][ T7854] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 130.160812][ T7854] overlayfs: missing 'lowerdir' [ 130.298230][ T2303] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 130.317323][ T5979] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.332832][ T7877] netlink: 'syz.5.400': attribute type 10 has an invalid length. [ 130.337620][ T7838] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 130.340926][ T7838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.358469][ T6054] ssu100 7-1:0.0: probe with driver ssu100 failed with error -71 [ 130.368471][ T6054] usb 7-1: USB disconnect, device number 9 [ 130.392663][ T7868] netlink: 'syz.4.398': attribute type 9 has an invalid length. [ 130.424753][ T7877] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 130.436959][ T7882] SELinux: truncated policydb string identifier [ 130.439285][ T7882] SELinux: failed to load policy [ 130.708698][ T7891] bridge0: entered promiscuous mode [ 130.711251][ T7891] macsec1: entered promiscuous mode [ 130.717958][ T7891] bridge0: port 3(macsec1) entered blocking state [ 130.721348][ T7891] bridge0: port 3(macsec1) entered disabled state [ 130.724631][ T7891] macsec1: entered allmulticast mode [ 130.729202][ T7891] bridge0: entered allmulticast mode [ 130.734870][ T7891] macsec1: left allmulticast mode [ 130.736948][ T7891] bridge0: left allmulticast mode [ 130.740109][ T7891] bridge0: left promiscuous mode [ 130.781700][ T7909] qnx6: unable to set blocksize [ 130.879763][ T7916] ref_ctr_offset mismatch. inode: 0xc1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 130.880063][ T7917] ref_ctr_offset mismatch. inode: 0xc1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 130.885787][ T53] usb 11-1: USB disconnect, device number 2 [ 131.118789][ T5979] Bluetooth: hci3: command 0x0c1a tx timeout [ 131.118795][ T5982] Bluetooth: hci4: command 0x0c1a tx timeout [ 131.362137][ T7946] input: syz0 as /devices/virtual/input/input10 [ 131.465053][ T7948] ip6tnl2: entered promiscuous mode [ 131.468300][ T7948] ip6tnl2: entered allmulticast mode [ 131.515710][ T7952] syzkaller1: entered promiscuous mode [ 131.519108][ T7952] syzkaller1: entered allmulticast mode [ 131.593548][ T5982] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 131.806793][ T7970] ufs: You didn't specify the type of your ufs filesystem [ 131.806793][ T7970] [ 131.806793][ T7970] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 131.806793][ T7970] [ 131.806793][ T7970] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 131.818051][ T7970] ufs: ufstype=old is supported read-only [ 131.822610][ T7970] ufs: ufs_fill_super(): bad magic number [ 131.863838][ T7973] fuse: Bad value for 'rootmode' [ 131.887573][ T7977] bond0: (slave dummy0): Releasing backup interface [ 131.905416][ T7977] bridge_slave_0: left promiscuous mode [ 131.911620][ T7977] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.922916][ T7977] bridge_slave_1: left allmulticast mode [ 131.926130][ T7977] bridge_slave_1: left promiscuous mode [ 131.930200][ T7977] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.944225][ T7977] bond0: (slave bond_slave_0): Releasing backup interface [ 131.969735][ T7977] bond0: (slave bond_slave_1): Releasing backup interface [ 131.998024][ T7977] team0: Port device team_slave_0 removed [ 132.009078][ T7977] team0: Port device team_slave_1 removed [ 132.011669][ T7977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.014106][ T7977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.018947][ T7977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.021589][ T7977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.042088][ T7977] bond1: (slave gretap1): Releasing active interface [ 132.045344][ T7977] gretap1: left allmulticast mode [ 132.050503][ T7989] IPv6: addrconf: prefix option has invalid lifetime [ 132.143863][ T7996] netlink: zone id is out of range [ 132.144145][ T7997] netlink: zone id is out of range [ 132.145931][ T7996] netlink: zone id is out of range [ 132.149541][ T7997] netlink: zone id is out of range [ 132.153710][ T7997] netlink: get zone limit has 8 unknown bytes [ 132.160120][ T7996] netlink: get zone limit has 8 unknown bytes [ 132.236434][ T7997] kvm: kvm [7995]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 132.240364][ T7997] kvm: kvm [7995]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 132.386719][ T5982] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.686154][ T40] kauditd_printk_skb: 293 callbacks suppressed [ 132.686174][ T40] audit: type=1400 audit(1759055828.718:1988): avc: denied { create } for pid=8010 comm="syz.6.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 132.699185][ T40] audit: type=1400 audit(1759055828.718:1989): avc: denied { write } for pid=8010 comm="syz.6.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 132.714526][ T40] audit: type=1400 audit(1759055828.748:1990): avc: denied { create } for pid=8010 comm="syz.6.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.724034][ T40] audit: type=1400 audit(1759055828.748:1991): avc: denied { ioctl } for pid=8010 comm="syz.6.437" path="socket:[23855]" dev="sockfs" ino=23855 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.776688][ T40] audit: type=1400 audit(1759055828.808:1992): avc: denied { read } for pid=8012 comm="syz.6.439" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 132.786939][ T40] audit: type=1400 audit(1759055828.808:1993): avc: denied { open } for pid=8012 comm="syz.6.439" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 132.798789][ T40] audit: type=1400 audit(1759055828.818:1994): avc: denied { ioctl } for pid=8012 comm="syz.6.439" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64a6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 132.820234][ T40] audit: type=1400 audit(1759055828.858:1995): avc: denied { setattr } for pid=7372 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.887966][ T40] audit: type=1400 audit(1759055828.928:1996): avc: denied { read } for pid=8014 comm="syz.5.440" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 132.900474][ T40] audit: type=1400 audit(1759055828.928:1997): avc: denied { read } for pid=8014 comm="syz.5.440" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 132.969953][ T8021] syz_tun: entered allmulticast mode [ 132.980407][ T8020] __nla_validate_parse: 8 callbacks suppressed [ 132.980421][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.5.443'. [ 132.981100][ T8021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.442'. [ 133.316107][ T8035] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 133.409196][ T8037] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 133.451049][ T8043] 9p: Unknown access argument 3@: -22 [ 133.639418][ T8049] o2cb: This node has not been configured. [ 133.642142][ T8049] o2cb: Cluster check failed. Fix errors before retrying. [ 133.645310][ T8049] (syz.2.452,8049,3):user_dlm_register:674 ERROR: status = -22 [ 133.652701][ T8049] (syz.2.452,8049,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 133.706237][ T8053] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 133.710366][ T8053] kvm: requested 166781 ns i8254 timer period limited to 200000 ns [ 133.719659][ T8053] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 133.732115][ T8053] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 133.737694][ T8053] kvm: requested 59504 ns i8254 timer period limited to 200000 ns [ 133.741937][ T8053] kvm: requested 113142 ns i8254 timer period limited to 200000 ns [ 133.745900][ T8053] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 133.750711][ T8053] kvm: requested 59504 ns i8254 timer period limited to 200000 ns [ 133.812323][ T8061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.820097][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.454'. [ 133.856927][ T838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.881121][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.455'. [ 133.884195][ T8063] nbd: must specify at least one socket [ 134.475577][ T8095] 9pnet_virtio: no channels available for device 127.0.0.1 [ 134.908626][ T8178] netlink: 16 bytes leftover after parsing attributes in process `syz.4.467'. [ 134.957032][ T1341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.015027][ T8207] can: request_module (can-proto-0) failed. [ 135.117722][ T8251] overlayfs: conflicting lowerdir path [ 135.582955][ T8356] syzkaller1: entered promiscuous mode [ 135.585312][ T8356] syzkaller1: entered allmulticast mode [ 135.764053][ T8365] netlink: 60 bytes leftover after parsing attributes in process `syz.5.479'. [ 135.769460][ T8365] unsupported nlmsg_type 40 [ 136.429677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 136.736585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 136.839203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 136.869848][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.484'. [ 136.953607][ T8384] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.980397][ T8371] syz.5.481 (8371): drop_caches: 1 [ 137.045965][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 137.050845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 137.054317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 137.080114][ T8392] 9pnet: p9_errstr2errno: server reported unknown error ?n [ 137.080114][ T8392] kl [ 137.285904][ T8404] ptrace attach of "/syz-executor exec"[5980] was attempted by "/syz-executor exec"[8404] [ 137.331428][ T8407] ubi31: attaching mtd0 [ 137.335715][ T8407] ubi31: scanning is finished [ 137.344889][ T8407] ubi31: empty MTD device detected [ 137.449110][ T8407] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 137.451807][ T8407] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 137.454725][ T8407] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 137.459554][ T8407] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 137.463707][ T8407] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 137.466722][ T8407] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 137.469977][ T8407] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3184294289 [ 137.473522][ T8407] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 137.478619][ T8414] ubi31: background thread "ubi_bgt31d" started, PID 8414 [ 137.482916][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.486095][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.488422][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.490359][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.492275][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.494506][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.497404][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.499746][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.502899][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.505542][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.508681][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.511324][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.513460][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.516074][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.519690][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.525162][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.528560][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.530868][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.533443][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.536002][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.538781][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.541463][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.544573][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.547490][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.549984][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.552501][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.554555][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.557926][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.561238][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.564538][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.567236][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.569627][ T8407] ubi: mtd0 is already attached to ubi31 [ 137.676913][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.726946][ T6054] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 137.735681][ T40] kauditd_printk_skb: 234 callbacks suppressed [ 137.735699][ T40] audit: type=1400 audit(1759055833.768:2232): avc: denied { create } for pid=8419 comm="syz.2.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 137.749442][ T40] audit: type=1400 audit(1759055833.768:2233): avc: denied { create } for pid=8419 comm="syz.2.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.757906][ T40] audit: type=1400 audit(1759055833.768:2234): avc: denied { setopt } for pid=8419 comm="syz.2.495" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.765759][ T40] audit: type=1400 audit(1759055833.778:2235): avc: denied { read } for pid=8419 comm="syz.2.495" dev="nsfs" ino=4026533138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 137.773382][ T40] audit: type=1400 audit(1759055833.778:2236): avc: denied { open } for pid=8419 comm="syz.2.495" path="net:[4026533138]" dev="nsfs" ino=4026533138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 137.785029][ T40] audit: type=1400 audit(1759055833.778:2237): avc: denied { create } for pid=8419 comm="syz.2.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 137.795415][ T40] audit: type=1400 audit(1759055833.788:2238): avc: denied { write } for pid=8419 comm="syz.2.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 137.806199][ T40] audit: type=1400 audit(1759055833.788:2239): avc: denied { read } for pid=8419 comm="syz.2.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 137.816189][ T40] audit: type=1400 audit(1759055833.788:2240): avc: denied { ioctl } for pid=8419 comm="syz.2.495" path="socket:[23323]" dev="sockfs" ino=23323 ioctlcmd=0x6616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.829319][ T40] audit: type=1400 audit(1759055833.788:2241): avc: denied { read write } for pid=8419 comm="syz.2.495" name="video36" dev="devtmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 137.890283][ T6054] usb 9-1: Using ep0 maxpacket: 8 [ 137.904479][ T6054] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.912479][ T6054] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.919742][ T6054] usb 9-1: config 0 interface 0 has no altsetting 0 [ 137.921643][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.923899][ T6054] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 137.925749][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.931733][ T6054] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.940365][ T6054] usb 9-1: config 0 descriptor?? [ 137.999107][ T8434] team0: Device gtp0 is of different type [ 138.014037][ T8433] team0: Device gtp0 is of different type [ 138.353526][ T8416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.357940][ T8416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.388755][ T6054] usbhid 9-1:0.0: can't add hid device: -71 [ 138.391368][ T6054] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 138.416290][ T6054] usb 9-1: USB disconnect, device number 4 [ 138.442262][ T8123] nci: nci_ntf_packet: unknown ntf opcode 0x13d [ 139.323248][ T8494] netlink: 'syz.5.509': attribute type 4 has an invalid length. [ 139.419196][ T8497] netlink: 'syz.2.510': attribute type 3 has an invalid length. [ 139.422739][ T8497] netlink: 224 bytes leftover after parsing attributes in process `syz.2.510'. [ 139.678414][ T8504] batadv1: entered promiscuous mode [ 140.043240][ T5982] ------------[ cut here ]------------ [ 140.046145][ T5982] WARNING: CPU: 1 PID: 5982 at net/bluetooth/hci_conn.c:567 hci_conn_timeout+0x11a/0x210 [ 140.048692][ T8527] netlink: 596 bytes leftover after parsing attributes in process `syz.5.519'. [ 140.050884][ T5982] Modules linked in: [ 140.059426][ T5982] CPU: 1 UID: 0 PID: 5982 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full) [ 140.064540][ T5982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.069911][ T5982] Workqueue: hci2 hci_conn_timeout [ 140.072271][ T5982] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 140.074912][ T5982] Code: 00 e8 da c0 2d f7 4c 89 f1 4c 89 e2 48 c7 c6 c0 5b fd 8c 48 c7 c7 90 0b a7 90 e8 21 55 88 fa e9 4d ff ff ff e8 b7 c0 2d f7 90 <0f> 0b 90 e8 ae c0 2d f7 48 8d bb f5 f6 ff ff 48 b8 00 00 00 00 00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 140.084690][ T5982] RSP: 0018:ffffc90003327c30 EFLAGS: 00010293 [ 140.087387][ T5982] RAX: 0000000000000000 RBX: ffff888057150948 RCX: ffffffff8a8dd96f [ 140.091518][ T5982] RDX: ffff888027f60000 RSI: ffffffff8a8dda19 RDI: 0000000000000005 [ 140.095350][ T5982] RBP: 00000000ffffffc0 R08: 0000000000000005 R09: 0000000000000000 [ 140.099076][ T5982] R10: 00000000ffffffc0 R11: 0000000000002c10 R12: ffff888057150000 [ 140.102518][ T5982] R13: 0000000000000000 R14: ffffffff90aba854 R15: ffffc90003327d10 [ 140.106098][ T5982] FS: 0000000000000000(0000) GS:ffff8880d67b1000(0000) knlGS:0000000000000000 [ 140.110130][ T5982] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.113023][ T5982] CR2: 00007f26ba9a2f98 CR3: 00000000506a9000 CR4: 0000000000352ef0 [ 140.117153][ T5982] Call Trace: [ 140.118506][ T5982] [ 140.119841][ T5982] process_one_work+0x9cc/0x1b70 [ 140.122175][ T5982] ? __pfx_hci_rx_work+0x10/0x10 [ 140.126041][ T5982] ? __pfx_process_one_work+0x10/0x10 [ 140.128968][ T5982] ? assign_work+0x1a0/0x250 [ 140.131244][ T5982] worker_thread+0x6c8/0xf10 [ 140.133113][ T5982] ? __kthread_parkme+0x19e/0x250 [ 140.135416][ T5982] ? __pfx_worker_thread+0x10/0x10 [ 140.137627][ T5982] kthread+0x3c2/0x780 [ 140.139240][ T5982] ? __pfx_kthread+0x10/0x10 [ 140.141188][ T5982] ? rcu_is_watching+0x12/0xc0 [ 140.143305][ T5982] ? __pfx_kthread+0x10/0x10 [ 140.145139][ T5982] ret_from_fork+0x56a/0x730 [ 140.147248][ T5982] ? __pfx_kthread+0x10/0x10 [ 140.149155][ T5982] ret_from_fork_asm+0x1a/0x30 [ 140.151303][ T5982] [ 140.152726][ T5982] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 140.156418][ T5982] CPU: 1 UID: 0 PID: 5982 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full) [ 140.161392][ T5982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.165914][ T5982] Workqueue: hci2 hci_conn_timeout [ 140.168202][ T5982] Call Trace: [ 140.169667][ T5982] [ 140.170932][ T5982] dump_stack_lvl+0x3d/0x1f0 [ 140.172892][ T5982] vpanic+0x6e8/0x7a0 [ 140.174672][ T5982] ? __pfx_vpanic+0x10/0x10 [ 140.176574][ T5982] ? hci_conn_timeout+0x11a/0x210 [ 140.178692][ T5982] panic+0xca/0xd0 [ 140.180128][ T5982] ? __pfx_panic+0x10/0x10 [ 140.181748][ T5982] ? check_panic_on_warn+0x1f/0xb0 [ 140.184031][ T5982] check_panic_on_warn+0xab/0xb0 [ 140.186432][ T5982] __warn+0xf6/0x3c0 [ 140.188295][ T5982] ? hci_conn_timeout+0x11a/0x210 [ 140.190581][ T5982] report_bug+0x3c3/0x580 [ 140.192285][ T5982] ? hci_conn_timeout+0x11a/0x210 [ 140.194172][ T5982] handle_bug+0x184/0x210 [ 140.196038][ T5982] exc_invalid_op+0x17/0x50 [ 140.198132][ T5982] asm_exc_invalid_op+0x1a/0x20 [ 140.200411][ T5982] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 140.202689][ T5982] Code: 00 e8 da c0 2d f7 4c 89 f1 4c 89 e2 48 c7 c6 c0 5b fd 8c 48 c7 c7 90 0b a7 90 e8 21 55 88 fa e9 4d ff ff ff e8 b7 c0 2d f7 90 <0f> 0b 90 e8 ae c0 2d f7 48 8d bb f5 f6 ff ff 48 b8 00 00 00 00 00 [ 140.210878][ T5982] RSP: 0018:ffffc90003327c30 EFLAGS: 00010293 [ 140.213062][ T5982] RAX: 0000000000000000 RBX: ffff888057150948 RCX: ffffffff8a8dd96f [ 140.216341][ T5982] RDX: ffff888027f60000 RSI: ffffffff8a8dda19 RDI: 0000000000000005 [ 140.221475][ T5982] RBP: 00000000ffffffc0 R08: 0000000000000005 R09: 0000000000000000 [ 140.225660][ T5982] R10: 00000000ffffffc0 R11: 0000000000002c10 R12: ffff888057150000 [ 140.228901][ T5982] R13: 0000000000000000 R14: ffffffff90aba854 R15: ffffc90003327d10 [ 140.232368][ T5982] ? hci_conn_timeout+0x6f/0x210 [ 140.234585][ T5982] ? hci_conn_timeout+0x119/0x210 [ 140.236728][ T5982] process_one_work+0x9cc/0x1b70 [ 140.238818][ T5982] ? __pfx_hci_rx_work+0x10/0x10 [ 140.240815][ T5982] ? __pfx_process_one_work+0x10/0x10 [ 140.243140][ T5982] ? assign_work+0x1a0/0x250 [ 140.245704][ T5982] worker_thread+0x6c8/0xf10 [ 140.248558][ T5982] ? __kthread_parkme+0x19e/0x250 [ 140.250471][ T5982] ? __pfx_worker_thread+0x10/0x10 [ 140.252592][ T5982] kthread+0x3c2/0x780 [ 140.254370][ T5982] ? __pfx_kthread+0x10/0x10 [ 140.256372][ T5982] ? rcu_is_watching+0x12/0xc0 [ 140.258457][ T5982] ? __pfx_kthread+0x10/0x10 [ 140.260442][ T5982] ret_from_fork+0x56a/0x730 [ 140.262414][ T5982] ? __pfx_kthread+0x10/0x10 [ 140.264464][ T5982] ret_from_fork_asm+0x1a/0x30 [ 140.266736][ T5982] [ 140.269234][ T5982] Kernel Offset: disabled [ 140.271491][ T5982] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:37:16 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=ffffffff9ae24cec RCX=0000000000000000 RDX=ffff888031930000 RSI=ffffffff8566410a RDI=ffffffff9b119120 RBP=0000000000000020 RSP=ffffc9000f30ef28 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=000000000000000b R13=0000000000000010 R14=ffffffff9b1190e0 R15=ffffffff8564c840 RIP=ffffffff81bb9ae0 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f26ba9a36c0 ffffffff 00c00000 GS =0000 ffff8880d66b1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f26b9b72b60 CR3=00000000506a9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000014 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb109fbc6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb109fbc6 00007ffdb109fbcc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f26b9c12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f26b9c12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f26b9c12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f26b9c12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f26b9c1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f26b9c1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f26b9db74a8 00007f26b9db74a0 00007f26b9db7498 00007f26b9db7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f26ba91d100 00007f26b9db7460 00007f26b9db7478 00007f26b9db74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f26b9db74b8 00007f26b9db74b0 00007f26b9db74a8 00007f26b9db74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000012 RCX=ffffffff819add32 RDX=ffff888027f60000 RSI=ffffffff819add20 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc900033278a8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff92000664f17 R13=0000000000000200 R14=ffff888031930000 R15=ffffc90003327970 RIP=ffffffff819add22 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f26ba9a2f98 CR3=00000000506a9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000014 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb109fbc6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb109fbc6 00007ffdb109fbcc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f26b9c12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f26b9c12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f26b9c12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f26b9c12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f26b9c1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f26b9c1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f26b9db74a8 00007f26b9db74a0 00007f26b9db7498 00007f26b9db7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f26ba91d100 00007f26b9db7460 00007f26b9db7478 00007f26b9db74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f26b9db74b8 00007f26b9db74b0 00007f26b9db74a8 00007f26b9db74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a441e40 RCX=ffffffff81af9ae1 RDX=ffff88801c304880 RSI=ffffffff81af9abb RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900007ef888 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed100d4883c9 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81af9abd RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbcf3750f98 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a80c4d30ec27f77a d8dd09423c85c866 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d19dc8df9837120c ce1f444f585312d8 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3792fa27cb584193 53aaeb44fca7f260 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6214a5fb92433f05 a215c1ef9a72dff9 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000008c40 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560d0000560e ceb86a0000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560e0000560e 000000000000560e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560ea20e9e00 80553400669e4200 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ec85f2002168e100 0000000062ac0400 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8d42db006dd75226 06f0f26ae291ca78 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8197bad4b69e832b eebd2560b0ddcf19 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbcf2bb74a8 00007fbcf2bb74a0 00007fbcf2bb7498 00007fbcf2bb7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbcf371d100 00007fbcf2bb7460 00007fbcf2bb7478 00007fbcf2bb74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbcf2bb74b8 00007fbcf2bb74b0 00007fbcf2bb74a8 00007fbcf2bb74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffff8880581c40c0 RBX=ffff8880581c40b8 RCX=ffffffff93e58920 RDX=0000000000000000 RSI=ffffffff8de2da30 RDI=ffff8880581c40bc RBP=1ffff92000beffa3 RSP=ffffc90005f7fd10 R8 =12877607e758c0c2 R9 =0000000000000001 R10=0000000000000002 R11=0000000000000000 R12=ffff8880581c40c0 R13=ffff8880581c40c8 R14=ffff88805639b818 R15=0000000000000002 RIP=ffffffff81982054 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555564817500 ffffffff 00c00000 GS =0000 ffff8880d69b1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff64eeff58 CR3=0000000050ecb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff64ef0710 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff64ef1986 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff64ef1986 00007fff64ef198c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64fd012fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64fd012fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64fd012fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64fd012fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64fd01305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64fd01313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000